Hello folks!
I would like to ask if it is possible for spamassassin to include the spam email as an
attachment when sending postmaster notifications.
This way I can make a manual sa-learn.
My setup right now is done using postfix as a mail relay to an exchange server.
Hope someone can help
At 03:06 PM 12/2/03 +0800, Fritz Mesedilla wrote:
I would like to ask if it is possible for spamassassin to include the spam
email as an attachment when sending postmaster notifications.
This way I can make a manual sa-learn.
Sending postmaster notifies isn't a function of SA at all.. SA itself
Nice script... is it possible to learn SA automagicly use such logic ?
On , 2 2003 12:27, Chris Thielen wrote:
Greetings all!
(I'm reposting this announcement as the original seems to have gotten lost
in the SourceForge scheduled downtime)
CMOScript version 0.00.0.0001g is now available
Thanks Matt!
I am using amavisd-new with spamassassin and clamav.
As mail is relayed to an exchange server, headers are somewhat changed and the needed
spam headers are not as accurate anymore.
If the spam email can be attached to the notification then I can perform the manual
sa-learn.
Thanks
At Tue Dec 2 07:19:42 2003, Rich H. wrote:
Hello again,
I am playing with different recipies of procmailrc, and I am still =
having some time with features of .procmailrc files. I added a line like
:0:
* ^X-Spam-Flag: YES
/Spamfolder
In the headers of my message I get
X-Spam-Flag:
In addition, this looks wrong:
:0:
* ^X-Spam-Flag: YES
/Spamfolder
It looks as if you're trying to deposit the spam into a folder that lives
just
below the root directory. Perhaps you meant:
:0:
* ^X-Spam-Flag: YES
Spamfolder
-Original Message-
From: Martin Radford
Sent: Monday,
This box is running RH 7.0 with procmail 3.22-7. What is the proper format
of the .procmailrc file? I don't think I have ever seen something so picky.
I have my file set up exactly like this:
SHELL=/bin/sh
PATH=/bin:/usr/bin
I'm not offended.
I agree if I used procmail I should be shot if I could not figure this out.
RTFM and all that.
However I use qmail-scanner which primarily is a virus-scanner which
supports SA. I can't see how to get qmail-scanner to drop mail if it is
spam.
Perhaps its time for a patch. Or
For any other poor sods out there using qmail-scanner
see
http://xoomer.virgilio.it/j.toribio/qmail-scanner/
This looks like it will do the trick.
TTFN
r
---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net
Hi spamassassin mailing list.
I'm trying to avoid this email getting tagged as spam.
at first i just tried to edit the user_prefs file, but after that didnt
work i read
http://useast.spamassassin.org/doc/Mail_SpamAssassin_Conf.html
whitelist_from [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL
- Original Message -
From: Mark Muller [EMAIL PROTECTED]
To: 'Obantec Support' [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Monday, December 01, 2003 9:27 PM
Subject: RE: [SAtalk] Disable a User who does not want SA
all_spam_to [EMAIL PROTECTED] should do it.
-Original
Hello all,
I've been using SA for some months now with great success. Its rule
scheme is very efficient and straight-forward when you learn some
regexp.
But, as an end-user (I sys-admin some thousands of mail accounts), I
think that the rules could be forked from SA, so community could treat
SA
On Mon, 1 Dec 2003 22:25:40 -0800
Robert Menschel [EMAIL PROTECTED] wrote:
header RM_hr_VirtuaComBr Received =~ /virtua\.com\.br/
describe RM_hr_VirtuaComBr Spam passed through relay known to be used by
spammers
scoreRM_hr_VirtuaComBr 1.690 # 69s/0h of 63143 corpus
Hello Justin,
Monday, December 1, 2003, 10:19:32 AM, you wrote:
JM Robert, BTW --
JM were you saying previously that you couldn't get hit-frequencies
JM working? Could you remind me what was up there? I might be able to
JM help.
Minor handicap: I'm a domain user on a shared virtual domain
Sorry for the trouble, but i managed to find the error :)
JonB
---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help
Greetings all!
CMOScript version 0.00.0.0001g is now available for download.
CMOScript (Chris's Mediocre Obfuscation Script) generates rules for
SpamAssassin that match on obfuscated words such as V|AGR@ or
V.I.A.G.R.@. Using the Obfu Only option (-o), you can generate rules
that match on
At 02:55 PM 12/1/2003, Chuck Campbell wrote:
Do I need or want special rules to help with these spams slipping
through?
(POPCORN, BACKHAIR, WEEDS, WEEDS2, etc.)
If so, how do I use them (meaning specifically where do they need to be
placed so SA can use them)?
Some of the rules at the
On Mon, 2003-12-01 at 17:38, Arlo Gilbert wrote:
Is there a faster way to get SA working? Because 90 days is a long time
to ask somebody to wait.
You could train it with a publicly-available corpus of spam, but that
sort of defeats the purpose of the bayesian filter. It's highly
Oz
It is not so clear from a header when the mail does not get marked as spam.
In you example there is tests=BAYES_00 this will be reducing the score as
the Bayes engine has attributed a very low probability of this message being
spam. It has therefore reduced by the score by the default amount
Sorry, I meant to send that to the spam-learning acount but it went to this
list instead.
-Original Message-
From: Charles Gregory [mailto:[EMAIL PROTECTED]
Sent: Monday, December 01, 2003 11:59 AM
To: Matt Van Gordon
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] A special new website
Hi,
How do I configure SA to move all mails marked as spam
for all accounts/inboxes residing on the same system where
SA has been installed to a different directory/account?
(System level filtering)
I would also appreciate any help to achieve the same
on a mail gateway, which relays mail to
Hello all,
Here is a short summary of what we're trying to accomplish.
GOAL: To recognize junk mails with a site wide SpamAssassin installation
PROGRAMS: Sendmail 8.12.10 + Miltrassassin + Spamd/SA 2.60
PROBLEM: SpamAssassin's bayesian subsystem does not seem to behave as expected (?)
Our
Sorry, I forgot to add that I'm using sendmail
8.12.6+SA 2.60 on FreeBSD 4.7
-- Forwarded message --
Date: Tue, 2 Dec 2003 19:21:54 +0530 (IST)
From: Mail Monitor [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: SA: Moving spam mails(sitewide) to a separate Dir/Account
Hi,
Are the old ones somehow merged in with the new ones? If big scary
spammers already purchased the domain for 2 years or whatever amount of
time the standard is, chances are it'll get used again. I have some
domains that I put in my own rules close to a year ago, and still see
them get hit
SA doesn't move mail. We'd need to know more about your setup to help
you out. Postfix/qmail/procmail, versions, how you get mail from your
MTA to SA, etc.
Mike
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Mail Monitor
Sent: Tuesday,
Hi folks,
How could I filter spam with no content?
I've at the moment emails apparently without sender, without recips, without
subject or body.
An header for example:
Received: (qmail 7648 invoked by uid 1008); 2 Dec 2003 07:07:01 -
Received: from [EMAIL PROTECTED] by observe.nesys.it by
At 02:26 PM 12/1/2003, Douglas Kirkland wrote:
I am confused about how the -d setting works in spamc. Can I set two
different domains for the domain setting in spamc without using DNS for the
two spamd servers?
I was think I could have the setting like:
spamc -d primary.spamd.com,
On 12/2/03 3:20 PM, "Kenneth Porter" [EMAIL PROTECTED] wrote:
--On Tuesday, December 02, 2003 10:57 AM +0900 alan premselaar
[EMAIL PROTECTED] wrote:
vi ~/.procmail (and add appropriate config lines to call spamassassin or
spamc)
chkconfig spamd on
service spamd
Hi folks,
How could I filter spam with no content?
I've at the moment emails apparently without sender, without recips, without
subject or body.
An header for example:
Received: (qmail 7648 invoked by uid 1008); 2 Dec 2003 07:07:01 -
Received: from [EMAIL PROTECTED] by observe.nesys.it by
-Original Message-
From: Mike Kuentz (2) [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 02, 2003 8:53 AM
To: Chris Santerre; Spamassassin-Talk (E-mail)
Subject: RE: [SAtalk] Evilrules update and some more notes.
Are the old ones somehow merged in with the new ones? If big
A one stop rule place is in the works. Mine is only version .0001 alpha
:)
Link in sig.
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
A little nonsense now and then, is relished by the wisest men. - Willy
[EMAIL PROTECTED] wrote:
On 1 Dec 2003 Vee Persaud ([EMAIL PROTECTED]) wrote:
so do any of you nice people out there know how to delete / reject
tagged spam with a score of greater than say 15.
This is described in the SA documentation and lots of other places,
for example here:
On Tue, Dec 02, 2003 at 03:46:17PM +0200, Vesa-Matti J Kari wrote:
Can somebody explain why does this happen? I read a reply from the
archives that said something to the effect that this does not have to do
with learning. What is the point of this behavior, then?
It has to do with expiry.
Based on the discussions here and elsewhere, I upgraded by db libs to the
current release, reinstalled DB_File, restarted spamd, and then just for
good measure wiped my Bayes files and my autowhitelist files and ran my
corpus through it.
Here is the output from the process, starting and ending
I'm getting a common response here which is to lean towards bayes
rather than score manipulation.
However, bayes takes so long to build up. Especially if grandma only
gets 2 or 3 spams a day. Given that SA refuses to use bayesian
filtering til after it has collected 200 spam samples, in my
At 09:06 AM 12/2/03 -0200, Marcio Merlone wrote:
But, as an end-user (I sys-admin some thousands of mail accounts), I
think that the rules could be forked from SA, so community could treat
SA as a spam-scanning engine and the rules would be the spam database,
like an anti-virus package. This would
On Tue, 2 Dec 2003, Rich H. wrote:
This is a copy of the logs:
Looks like you may have edited the .procmailrc on a Windows machine and
ended up with Windows-style line endings on the added lines (that is, both
a carriage-return and a linefeed). Procmail only understands Unix line
endings
Obantec Support wrote:
Hi All
RH8.0 with SA2.60 installed as sitewide.
Procmailrc is handling spam for all users and creates
~/.spamassassin/user_prefs ok.
Now 1 customer has decided he does not like spam filtered emails (cannot
please all).
tried |/usr/bin/spamassasin -x in procmailrc since i
At 03:25 PM 12/1/2003, Obantec Support wrote:
tried |/usr/bin/spamassasin -x in procmailrc since i read no user_prefs no
spam handling.
Um.. no.. SA can run without a user_prefs, and without creating one.
tried ~/.no-spamfilter
Er.. not sure what that would do, never heard of that file before.
Mark [EMAIL PROTECTED] wrote:
What you are looking for, it seems, is a way to reject messages at
the SMTP level, right? Indeed, recent comments to the contrary
despite, this can be done with SpamAssassin. But you need a different
implementation of SpamAssassin for that, integrated into a
Robert Harrison [EMAIL PROTECTED] wrote:
However I use qmail-scanner which primarily is a virus-scanner which
supports SA. I can't see how to get qmail-scanner to drop mail if it
is spam.
Perhaps its time for a patch. Or some clever sod out there who knows
more than me ;-)
There is nothing
Chuck Campbell [EMAIL PROTECTED] wrote:
I also send all email which is ham through my sa-learn, with the
exception of my high volume email lists, which procmail filters out
before SA.
I've seen other people say this. My question is why NOT send the
listserv traffic through sa-learn as
Ladies gents:
I am running SA 2.60 with Postfix, it has simply done an amazing job since
implemented. I did have several questions though.
1. Can anybody tell me how to read the values obtained from sa-learn --dump?
The results of my dump are below:
0.000 0 2 0
I have been reading about Spamassassin
and reading and found out, I think, how to white list a domain. I dont have it handy but its something
to the affect of white_list_rcv @earthlink.net
@earthlink.net. Would you correct me on
the actual white list line and how do I make it so that I can
The mailhub is a Sun Solaris 9 ultra 10 with perl 5.8.0
..
Also noticed that we get the
unix passed to setlogsock, but path not available at
/usr/local/bin/spamd line 280
I recall reading something about the syslog perl module having problems logging
to Solaris' syslogd via a unix
At 01:42 PM 12/2/2003, Chris Barnes wrote:
I also send all email which is ham through my sa-learn, with the
exception of my high volume email lists, which procmail filters out
before SA.
I've seen other people say this. My question is why NOT send the
listserv traffic through sa-learn as
At 01:57 PM 12/2/2003, Billy A. Pumphrey wrote:
I have been reading about Spamassassin and reading and found out, I think,
how to white list a domain. I don't have it handy but its something to
the affect of white_list_rcv @earthlink.net @earthlink.net. Would you
correct me on the actual
On Tue, 02 Dec 2003 11:22:46 -0500
Matt Kettler [EMAIL PROTECTED] wrote:
At 09:06 AM 12/2/03 -0200, Marcio Merlone wrote:
But, as an end-user (I sys-admin some thousands of mail accounts), I
think that the rules could be forked from SA, so community could
treat SA as a spam-scanning engine
Awesome thanks for the answer, for the second part. Does that one entry
make it so that people can send to earthlink address also?
Thank You
Billy Pumphrey
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Tuesday, December 02, 2003 2:15 PM
To: Billy A. Pumphrey;
perldoc Mail::SpamAssassin::Conf is the way to go for the docs or
http://www.spamassassin.org/doc.html.
whitelist_from_rcvd [EMAIL PROTECTED] earthlink.net
You might not want to whitelist a large ISP, though. You could just do
whitelist_from_rcvd [EMAIL PROTECTED] earthlink.net
From the docs
At 03:06 PM 12/2/03 +0800, Fritz Mesedilla wrote:
I would like to ask if it is possible for spamassassin to include the
spam
email as an attachment when sending postmaster notifications.
This way I can make a manual sa-learn.
amavisd-new won't let you do this. It won't encapsulate mail as an
--On Tuesday, December 02, 2003 2:44 PM -0500 Billy A. Pumphrey
[EMAIL PROTECTED] wrote:
That is beyond my knowledge. If you give me the commands to put into
the console, I would be happy to do it. :)
Spamassassin is 'called' somehow, most often via a procmail script. If
SpamAssassin is
Hello all,
Figured out the error of my ways, (I'm such a bone
head). Now I'm having a blast with bothSA and procmail. Awesome
combo!
Rich
On Tue, Dec 02, 2003 at 01:06:55PM -0600, Bob Apthorpe wrote:
1. Can anybody tell me how to read the values obtained from sa-learn --dump?
The results of my dump are below:
0.000 0 2 0 non-token data: bayes db version
0.000 0 49175 0
On Mon, 1 Dec 2003, Obantec Support wrote:
RH8.0 with SA2.60 installed as sitewide.
Procmailrc is handling spam for all users and creates
~/.spamassassin/user_prefs ok.
Now 1 customer has decided he does not like spam filtered emails (cannot
please all).
tried |/usr/bin/spamassasin
--On Monday, December 01, 2003 17:21:03 -0500 Carl R. Friend
[EMAIL PROTECTED] wrote:
On Mon, 1 Dec 2003, Obantec Support wrote:
RH8.0 with SA2.60 installed as sitewide.
Procmailrc is handling spam for all users and creates
~/.spamassassin/user_prefs ok.
Now 1 customer has decided he does
--On Tuesday, December 02, 2003 11:36 AM -0800 Evan Platt
[EMAIL PROTECTED] wrote:
Depends on how your mail system is configured. Spamassassin by default
only checks incoming mail.
As Matt pointed out to me in e-mail.. by default, spamassassin does nothing
(or as I put it - by default it takes
[EMAIL PROTECTED] wrote:
BIG HUGE NEWS
A major breakthrough has taken place
ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into 178
rules!!! Ramdon/tracking hosts tags removed!
They only increase spamd memory by 1 meg!!! 1 meg!
You read correctly! Every evil domain
--On Tuesday, December 02, 2003 16:26:11 -0500 Vee Persaud
[EMAIL PROTECTED] wrote:
[EMAIL PROTECTED] wrote:
BIG HUGE NEWS
This seems awesome. If I never used EvilRules before, is it easy to
start using it ? Do I have to modify any other config files ?
nope. just drop it in the
Hi All,
I am trying to get SpamAssassin-2.70 installed on a Solaris 8 (sparc)box.
Where is MIME.pm? Which perl module do I need to install??
Any help greatly appreciated.
System info and error mesg included below.
Thanks
Bruce
I have a fresh install of ActivePerl-5.8 with the following modules
Chris Santerre. I genuflect! Thanks for the effort. I must
decline the hockey game; I live in the middle of basketball country and
would have to make quite a pilgrimage to get to a game of any caliber.
Would you settle for my switching from cokes to hot chocolates with
coffee mate for a
Hello Fred, I'm trying to install SA on Win 2k Server, but when I'm
following the instructions to install Perl
(http://www.openhandhome.com/howtosa.html thanks to [EMAIL PROTECTED]); says
that I've to download a copy of Net::DNS.12 but I can't found where do I've
to download.
Someone knows where
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jack Gostl writes:
I need some help here guys.
I have updated my Db to BerkeleyDB.4.2, I have reinstalled DB_file from
CPAN, then I wiped out my Bayes databases and started to rebuild from my
spam corpus.
When I run db_verify I still get these
At 04:47 PM 12/2/2003, Bruce Bresnahan wrote:
Hi All,
I am trying to get SpamAssassin-2.70 installed on a Solaris 8 (sparc)box.
Where is MIME.pm? Which perl module do I need to install??
Any help greatly appreciated.
System info and error mesg included below
I'd strongly suggest NOT using SA 2.70
Chris,
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]
On Behalf Of Chris Santerre
Sent: Tuesday, December 02, 2003 12:56 PM
To: Spamassassin-Talk (E-mail)
Subject: [SAtalk] BIG HUGE EVIL RULE NEWS
BIG HUGE NEWS
A major breakthrough has taken place
ALL EVILRULES FILES
ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into
178 rules!!!
Ramdon/tracking hosts tags removed!
Thanks a lot for your work on this.
BigEvilList_74 hit on a message we received from the
Financial Executives
Institute because it contained ...fasb.org. Is the Financial
Yevgeniy Miretskiy [EMAIL PROTECTED] writes:
sa-learn stopped learning messages. Debugging shows that it can
successfully tie Bayes db, extracts tokens, etc, but never actually
writes data to the database.
No matter what bayes_expiry_max_db_size is set to (I tried anything from 100K to
Ladies gents:
I am running SA 2.60 with Postfix, it has simply done an amazing job since
implemented. I did have several questions though.
1. Can anybody tell me how to read the values obtained from sa-learn --dump?
The results of my dump are below:
0.000 0 2 0
I can only think to say muhahahaha... Thanks for the work on this
Chris!
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Chris Santerre
Sent: Tuesday, December 02, 2003 3:56 PM
To: Spamassassin-Talk (E-mail)
Subject: [SAtalk] BIG HUGE EVIL RULE
--On Tuesday, December 02, 2003 17:22:00 -0500 Chris Santerre
[EMAIL PROTECTED] wrote:
ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into
178 rules!!!
Ramdon/tracking hosts tags removed!
Thanks a lot for your work on this.
BigEvilList_74 hit on a message we received from the
At 05:36 PM 12/2/2003, Scott Renda wrote:
I interpret them as someone who isn't using bayes right... ya need to train
some ham messages my friend :)
0.000 0 2 0 non-token data: bayes db version
Bayes database version 2.
0.000 0 49175 0
In the last 6 months or so, our spam volume has tripled as I am sure it has
for many of you. For the month of November, we topped out at over 110,000
spam emails into the company (yea for us?). 80,000+ were outright
/dev/null'd for the obvious potty language, appendage enhancement, etc, etc.
and
I'm so sorry, i was looking at a print copy, and on that that link seems not
to be a link.
I really appreciate your help and your patient.
Best regards
===
Efren Pedroza Huerta
-Original Message-
From: M. [mailto:[EMAIL PROTECTED]
Sent:
I'm led to believe I can feed untagged spam (and tagged non-spam) to SA
for it to learn how to be better. How do I do this?
--
John Oliver, CCNAhttp://www.john-oliver.net/
Linux/UNIX/network consulting http://www.john-oliver.net/resume/
*****
At 08:37 PM 12/2/2003, John Oliver wrote:
I'm led to believe I can feed untagged spam (and tagged non-spam) to SA
for it to learn how to be better. How do I do this?
man sa-learn
In general you want to feed it a good variety of spam and nonspam (aka ham)
mail, not just FP/FN cases. However,
Hello Marcio,
Tuesday, December 2, 2003, 3:12:04 AM, you wrote:
header RM_hr_VirtuaComBr Received =~ /virtua\.com\.br/
describe RM_hr_VirtuaComBr Spam passed through relay known to be used by spammers
scoreRM_hr_VirtuaComBr 1.690 # 69s/0h of 63143 corpus
MM You may want to add
John Oliver wrote:
I'm led to believe I can feed untagged spam (and tagged non-spam) to SA
for it to learn how to be better. How do I do this?
You were led right. Assuming mbox format mail file -- for instance,
Netscape, Eurdora (and my FreeBSD account with qmail is mbox format) - you
can
Hello Chris,
Tuesday, December 2, 2003, 10:42:06 AM, you wrote:
CB Chuck Campbell [EMAIL PROTECTED] wrote:
I also send all email which is ham through my sa-learn, with the
exception of my high volume email lists, which procmail filters out
before SA.
CB I've seen other people say this.
Damn are we back in the good old BBS days? :)
I received this one today and damn near fell of my chair laughing.
SA 2.55 only scored it at 2.36 points.
From: Nicky [EMAIL PROTECTED]
Sent: Tuesday, December 02, 2003 12:17 PM
To: Antispam
Subject: Dear Antispam! New teenagers photo and
Thanks Chris - great work!
--Larry
-Original Message-
From: Chris Santerre
BIG HUGE NEWS
A major breakthrough has taken place
ALL EVILRULES FILES HAVE BEEN COMBINED!! 2622 domains into
178 rules!!! Ramdon/tracking hosts tags removed!
They only increase spamd
O-Zone said:
in that server i've that config file:
# http://spamassassin.org/tests.html .
#
# score SYMBOLIC_TEST_NAME n.nn
score MICROSOFT_EXECUTABLE 5.00
in that location:
/home/spamfilter/.spamassassin
that's the home dir of spamassassin user.
I want to know WHY messages with
Alexander Litvinov said:
Nice script... is it possible to learn SA automagicly use such logic ?
Alexander,
The integration is currently a manual process. I could envision an eval
rule in the future but definately not now!.
The easiest way to plug this into your mail system is to build a few
Hello Scott,
Tuesday, December 2, 2003, 2:36:00 PM, you wrote:
SR 2. My spam directory is up to 564 MB. Should I be worried about size
SR at all? Eventual corruption? Is there a way to perform periodic DB
SR maintenance? Is it ok to delete spam received say a month ago, if it
SR has been
On Tue, 02 Dec 2003 15:29:37 -0600 Larry Rosenman [EMAIL PROTECTED] wrote:
--On Tuesday, December 02, 2003 16:26:11 -0500 Vee Persaud
[EMAIL PROTECTED] wrote:
[EMAIL PROTECTED] wrote:
BIG HUGE NEWS
This seems awesome. If I never used EvilRules before, is it easy to
start
Hello Andrea,
Thanks for the inspiration.
Tuesday, December 2, 2003, 4:23:24 AM, you wrote:
AR Hi folks,
AR How could I filter spam with no content?
AR I've at the moment emails apparently without sender, without recips, without
AR subject or body.
No sender? Given that information, I
85 matches
Mail list logo
