[SAtalk] Re: gibberish hook?

2003-11-27 Thread Scott A Crosby
On Wed, 26 Nov 2003 14:17:30 +0600, Alexander Litvinov [EMAIL PROTECTED] writes: Solution is to learn a monogram, bigram and trigram character model for the ham you recieve. Mix the statistics together (to account for partial information) and that'll be very good at detecting gibberish

[SAtalk] How to whitelist this mailinglist

2003-11-27 Thread Martin Lyberg
Hi, I want to whitelist the SA mailinglist. Is this the right way to do it: whitelist_from_rcvd [EMAIL PROTECTED] sourceforge.net Thanks in advance / Martin --- This SF.net email is sponsored by: SF.net Giveback Program. Does

Re: [SAtalk] Blocking of bouncing addresses

2003-11-27 Thread John Oliver
On Thu, Nov 27, 2003 at 01:13:52PM +1030, [EMAIL PROTECTED] wrote: We have a number of hosts spamming us using the mailing to a wrong address which doesn't exist but crafting the reply to address as someone else so they receive a bounce message and open it and it's spam. I've tried

[SAtalk] Re: gibberish hook?

2003-11-27 Thread era
On 27 Nov 2003 01:13:04 -0600, Scott A Crosby [EMAIL PROTECTED] posted to spamassassin-devel and spamassassin-talk: On Wed, 26 Nov 2003 14:17:30 +0600, Alexander Litvinov [EMAIL PROTECTED] writes: Solution is to learn a monogram, bigram and trigram character model for the ham you

FW: [SAtalk] Mailinglist-letter marked as spam every time

2003-11-27 Thread Martin Lyberg
: From: Matt Kettler [mailto:[EMAIL PROTECTED] : Subject: Re: [SAtalk] Mailinglist-letter marked as spam every time : : : At 01:52 PM 11/18/03 +0100, Martin Lyberg wrote: : Can i whitelist the subject in some way, because it seems : like this is the : only thing that is common in every letter.

FW: [SAtalk] Mailinglist-letter marked as spam every time

2003-11-27 Thread Martin Lyberg
: From: Vivek Khera [mailto:[EMAIL PROTECTED] : Subject: Re: [SAtalk] Mailinglist-letter marked as spam every time : : : KP == Kenneth Porter [EMAIL PROTECTED] writes: : : * 3.3 MSGID_FROM_MTA_SHORT Message-Id was added by a relay : : KP Perhaps you could have the originator fix the subject

FW: [SAtalk] Mailinglist-letter marked as spam every time

2003-11-27 Thread Martin Lyberg
: From: Pat Masterson [mailto:[EMAIL PROTECTED] : Subject: Re: [SAtalk] Mailinglist-letter marked as spam every time : : : Martin - I use whitelist_from_rcvd on the few servers that my mailing : lists come from, including the spamassassin list. Works : perectly.. -pat Hi Pat, How can i do

[SAtalk] Re: [RD] Ideas

2003-11-27 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tuesday, November 25, 2003, 10:12:27 PM, I wrote: LG Attached is a custom rule file. It has been working rather well and LG I will be increasing the score from 0.5 to 1.0. The cf file also has LG some rules looking for words obfuscated by pipes.

[SAtalk] Re: gibberish hook?

2003-11-27 Thread Scott A Crosby
On 27 Nov 2003 10:06:46 +0200, [EMAIL PROTECTED] writes: On 27 Nov 2003 01:13:04 -0600, Scott A Crosby [EMAIL PROTECTED] posted to spamassassin-devel and spamassassin-talk: On Wed, 26 Nov 2003 14:17:30 +0600, Alexander Litvinov [EMAIL PROTECTED] writes: Solution is to learn a

Re: [SAtalk] mysql spamc ignores the email in mailling list

2003-11-27 Thread Patrick T. Tsang
Hello Rob, I would like to have the worked example since Jason McCormick has suggested a different approach (check the post). His suggestion is well enough for my basic requirement. However, I am looking for a better way. Best Regards Patrick Tsang - Original Message - From: Rob

Re: [SAtalk] How to whitelist this mailinglist

2003-11-27 Thread David B Funk
On Thu, 27 Nov 2003, Martin Lyberg wrote: Hi, I want to whitelist the SA mailinglist. Is this the right way to do it: whitelist_from_rcvd [EMAIL PROTECTED] sourceforge.net Thanks in advance / Martin Almost, whitelist_from_rcvd [EMAIL PROTECTED] sourceforge.net will work PROVIDED

[SAtalk] SA 2.60 not logging - solaris 9

2003-11-27 Thread John Horne
Hello, I have just upgraded one of our mailhubs from SA 2.44 (I think) up to version 2.60. I tested this on my own (linux) PC beforehand to see what was required, and had no problems. The mailhub is a Sun Solaris 9 ultra 10 with perl 5.8.0. Generally no problems with the new version except that

RE: [SAtalk] How to whitelist this mailinglist

2003-11-27 Thread Richard Bewley
I've found it helpful to use the following rule, which tends not to have too many false negatives actually: # Take off points for possible mailing lists header FNET_MAILING_LISTSubject =~ /\[*\]/i score FNET_MAILING_LIST -5.0 describe FNET_MAILING_LIST Possibly part of a

[SAtalk] Enabling DCC and RBL checking

2003-11-27 Thread Clive Dove
I am running Spamassassin 2.60-1 (the RPM package from the Spamassassin home site) with the local.cf and default user.prefs files on a Mandrake 9.2 system. Pyzor and Razor checking was enabled by simply downloading and installing the Pyzor and Razor RPM packages from the Mandrake and Mandrake

[SAtalk] Re: Idea for spamassassin

2003-11-27 Thread Chris Barnes
Nichols, William [EMAIL PROTECTED] wrote: I attended a seminar yesterday about spam. One of the idea that was pitched as being in a product was training the inbound spam detecting on the patterns of outbound mail. They talked about their filters looking at outbound mail, building patterns

Re: [SAtalk] manipulate Bayes Database

2003-11-27 Thread Theo Van Dinter
On Thu, Nov 20, 2003 at 02:13:30PM +0100, Sascha Huedepohl wrote: So i wonder if it is possible to delete some token from the bayes Database. Not from SA itself. You'd have to manipulate the DB externally. Note: this is not recommended unless you understand the DB internal format. --

[SAtalk] Razor and SA. Is it working?

2003-11-27 Thread Frank DeChellis
Hi! We are using SA 2.6nb1 and Razor 2.22. I registered my username as stated and I entered the line use_razor2 in my local.cf . Do the 2 points below mean it's working? Thanks Frank In my /root/.razor directory lrwxr-xr-x 1 root wheel25 Nov 27 06:55 identity@ - [EMAIL PROTECTED]

[SAtalk] SA not rewriting Subject

2003-11-27 Thread Vee Persaud
Hi, I have a problem where SA is not rewriting the subject line. Any ideas on what I'm missing ? LOCAL.CF required_hits 5.0 rewrite_subject 1 subject_tag This could be SPAM* dns_available no LOG Thu, 27 Nov 2003 09:26:29 %z:1742: scanloop:

RE: [SAtalk] How to whitelist this mailinglist

2003-11-27 Thread guenther
# Take off points for possible mailing lists header FNET_MAILING_LISTSubject =~ /\[*\]/i Well, this effectively hits anytime there is a closing bracket, nothing else is taken into consideration. Any occurence, even 0, of [, followed by ]. There is just a . missing (or similar

[SAtalk] Run Away SA...

2003-11-27 Thread Dan Tappin
I have a 2.6 SA installation that has recently started to take off process wise. SA starts and then runs normally for 5 to 10 minutes then the processes start to pile up. I get 10 to 15 spamd processes spawning and they soon consume all the system resources and eventually hangs the machine.

Re: [SAtalk] SA 2.60 not logging - solaris 9

2003-11-27 Thread Carl R. Friend
On 27 Nov 2003, John Horne wrote: The mailhub is a Sun Solaris 9 ultra 10 with perl 5.8.0. Generally no problems with the new version except that I just cannot seem to get the usual SA logging to occur which states how long it took to spam check the message, etc. I have set the syslog.conf

[SAtalk] Re: Razor and SA. Is it working?

2003-11-27 Thread Bryan Hoover
Frank DeChellis wrote: Hi! We are using SA 2.6nb1 and Razor 2.22. I registered my username as stated and I entered the line use_razor2 in my local.cf . Do the 2 points below mean it's working? Yup, looks like it's working. The output does report you don't have a

Re: [SAtalk] Run Away SA...

2003-11-27 Thread Robert A. Hayden
Make sure RBL is disabled. skip_rbl_checks 1 also, execute spamd (you are using spamd, right?) using the -m flag and make sure that number is high enough. I use -m25 and handle about 50k messages/week with no problem. Also, memory is critical on a system. If you are below 256mb, it

RE: [SAtalk] Run Away SA...

2003-11-27 Thread Dan Tappin
I tried skipping the rbl already with no luck. Here is my current ps output with half of my rules disabled: [firewall:/etc/mail/spamassassin] admin# ps -aux | grep spam mta 4640 41.7 20.9 174920 164612 ?? R11:14AM 15:50.12 /usr/bin/spamd -u mta -d -r /var/run/spamd.pid mta

[SAtalk] Run Away SA...

2003-11-27 Thread Shayne Lebrun
Step 1: Install onto server net-snmp. Step 2: Somewhere else (or on the same server if you want) install MRTG or similar product. Step 3: Configure SNMP daemon to report all sorts of nifty stuff; cpu, free memory, free swap, file-system utilization, network load, number of processes running

RE: [SAtalk] Blocking of bouncing addresses

2003-11-27 Thread mwestern
so I'm guessing that spamhaus is a thing which you can plug into spamassassin and mark as spam incoming? or how would I completely block those IP addresses with firewall or some kind of deny rules that's what we need around here. complete and utter shutdown... :)thanks for the

[SAtalk] Autolearn not on?

2003-11-27 Thread Greg Webster
I believe I've set things correctly, but SA doesn't seem to be autolearning: An example header: X-Spam-Status: Yes, hits=9.0 required=5.0 tests=BIZ_TLD,CLICK_BELOW, DATE_IN_PAST_96_XX,HTML_50_60,HTML_LINK_CLICK_HERE,HTML_MESSAGE,

RE: [SAtalk] Run Away SA...

2003-11-27 Thread Dan Tappin
Hi Shayne, Way ahead of you: http://mrtg.orourke.ca/firewall/cpu.html The yearly graph will show you when I first installed SA back in September. The realy ugly flatline's are since Tuesday. These were the periods today where I was hiding in the server room to avoind the endless the server

Re: [SAtalk] Autolearn not on?

2003-11-27 Thread Greg Webster
On Thu, 2003-11-27 at 14:30, [EMAIL PROTECTED] wrote: 'grep bayes /etc/mail/spamassassin/local/cf`: The filename is /etc/mail/spamassassin/local.cf. And don't forget to restart spamd/amavisd-ne after any change there. Just a typo, and I definitely restarted spamd. Thanks, Greg -- Greg

[SAtalk] earn money

2003-11-27 Thread maximo lopez
does some one what to earn some money helping me to start and configure and make work the spamassassin software ??? because i laready instaled , and can;t find the problem if some one are interested and want more details please let me know max - Original Message - From: Vee Persaud

Re: [SAtalk] Odd errors after upgrade to 2.60

2003-11-27 Thread Jeffrey R Rozycki
I am running 2.60 also. I think I have the same issue. I do not use the .qmail-user script as you but use the qmail-scanner-queue.pl method. For debuggin purposes, in a shell I run: /usr/bin/spamd --username=popuser -D --virtual-config-dir=/var/qmail/mailnames/%d/%l/configs -a in my syslog

Re: [SAtalk] Run Away SA...

2003-11-27 Thread Martin Radford
At Thu Nov 27 22:06:18 2003, Dan Tappin wrote: Hi Shayne, Way ahead of you: http://mrtg.orourke.ca/firewall/cpu.html The yearly graph will show you when I first installed SA back in September. The realy ugly flatline's are since Tuesday. These were the periods today where I was

RE: [SAtalk] Blocking of bouncing addresses

2003-11-27 Thread mwestern
crap. stupid outhouse sent before i was ready. sorry, ignore last message. --- Hi All, I've figured out how to use DNSBL with sendmail and am very pleased, apart from being burnt by this page (ie i use www.orbz.org as a blacklist and our mail server suddenly became very

[SAtalk] sa-learn question

2003-11-27 Thread S. M. C. Butler
Hi, I ran the following sa-learn --showdots --spam ./Mail/spam_new and got . Learned from 0 message(s) (37 message(s) examined). Did this work? Seems like it didnt.. FYI. This spam_new dir is an MH folder of spam that doesnt get

RE: [SAtalk] Blocking of bouncing addresses

2003-11-27 Thread mwestern
Hi All, I've figured out how to use DNSBL with sendmail and am very pleased, apart from being burnt by this page (ie i use www.orbz.org as a blacklist and our mail server suddenly became very obscene)... my question is, i read in the archives that if you have too many of these DNS lookups then

[SAtalk] Site-wide opt-op

2003-11-27 Thread Tim Johnson
I have a smtp gateway running sendmail 8.12.10. How do I setup a site-wide filter and still retain the ability to select which users are sent through spamassassin? Also, if I can pose two questions in the same message, how do I (and only I) add spam/ham to the site-wide bayes filter (99.9%

Re: [SAtalk] sa-learn question

2003-11-27 Thread Matt Kettler
At 03:49 PM 11/27/03 -0800, S. M. C. Butler wrote: Ø sa-learn --showdots --spam ./Mail/spam_new and got . Learned from 0 message(s) (37 message(s) examined). Did this work? Seems like it didnt.. Yep, that means that SA has already learned all 37 messages

Re: [SAtalk] Autolearn not on?

2003-11-27 Thread Matt Kettler
At 01:48 PM 11/27/03 -0800, Greg Webster wrote: An example header: X-Spam-Status: Yes, hits=9.0 required=5.0 tests=BIZ_TLD,CLICK_BELOW, DATE_IN_PAST_96_XX,HTML_50_60,HTML_LINK_CLICK_HERE,HTML_MESSAGE, HTTP_EXCESSIVE_ESCAPES,MIME_HTML_NO_CHARSET,MIME_HTML_ONLY,

Re: [SAtalk] Site-wide opt-op

2003-11-27 Thread Tim Johnson
Thanks, is amavisd-new linked from the Spamassassin homepage? Tim - Original Message - From: Alain Fauconnet [EMAIL PROTECTED] To: Tim Johnson [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Sent: Thursday, November 27, 2003 10:11 PM Subject: Re: [SAtalk] Site-wide opt-op On Thu, Nov 27,

Re: [SAtalk] Site-wide opt-op

2003-11-27 Thread Alain Fauconnet
On Thu, Nov 27, 2003 at 08:19:04PM -0400, Tim Johnson wrote: I have a smtp gateway running sendmail 8.12.10. How do I setup a site-wide filter and still retain the ability to select which users are sent through spamassassin? Also, if I can pose two questions in the same message, how

Re: [SAtalk] sa-learn question

2003-11-27 Thread Robert Menschel
Hello S., Thursday, November 27, 2003, 3:49:46 PM, you wrote: SMCB * sa-learn --showdots --spam ./Mail/spam_new SMCB and got SMCB . SMCB Learned from 0 message(s) (37 message(s) examined). SMCB Did this work? Seems like it didn't.. It looks to me like

Re: [SAtalk] Site-wide opt-op

2003-11-27 Thread Alain Fauconnet
On Thu, Nov 27, 2003 at 10:23:36PM -0400, Tim Johnson wrote: Thanks, is amavisd-new linked from the Spamassassin homepage? Probably, but just in case: http://www.ijs.si/software/amavisd/ Greets, _Alain_ --- This SF.net email is sponsored by:

[SAtalk] Similar anti SPAM like this but, for Windows ?

2003-11-27 Thread Efren Pedroza
Hi there, does any one knows any software like spamassassin ? but I need it to run on Windows enviroment Regards and thanks in advance === Efren Pedroza Huerta --- This SF.net email is sponsored

Re: [SAtalk] Site-wide opt-op

2003-11-27 Thread alan premselaar
On 11/28/03 9:19 AM, "Tim Johnson" [EMAIL PROTECTED] wrote: (B (B I have a smtp gateway running sendmail 8.12.10. How do I setup a site-wide (B filter and still retain the ability to select which users are sent through (B spamassassin? Also, if I can pose two questions in the same message, how