Re: [SAtalk] reverse scoring question

2003-12-07 Thread Pedro Sam
On December 02, 2003 06:49 pm, Gary Smith wrote: nor the general readme. I have installed SA on a server for a NPO that generates a very large amount of email traffic. It has done a good job of filtering a lot of the spam for us thus far. The big problem is this NPO sends emails back and

Re: [SAtalk] bayes permission errors

2003-12-07 Thread David B Funk
On Sat, 6 Dec 2003, Lukreme wrote: spamd[33762]: Cannot open bayes databases /home/user/.spamassassin/bayes_* R/O: tie failed: Permission denied spamd[33762]: processing message [EMAIL PROTECTED] for kremels:5003. spamd[33762]: clean message (0.8/5.0) for user:5003 in 0.2 seconds, 5526

Re: [SAtalk] bigevil.cf + rsync? - Windows version - sort of

2003-12-07 Thread Barry Porter
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/12/2003 02:01, Gary Smith wrote: There are some freeware dll's that you can use to do the FTP/wget so you don't have to do the shell. I don't see where you restart/reload the service??? I have done a google for both recode and wget as dll's

Re: [SAtalk] bigevil.cf + rsync? - Windows version - sort of

2003-12-07 Thread Chris Thielen
Barry Porter said: I have done a google for both recode and wget as dll's but have come up with nothing other than a virus warning about wget.dll being used in an irc flood virus. Barry, http://www.gnu.org/software/wget/wget.html should link you to ftp://sunsite.dk/projects/wget/windows/ where

Re: [SAtalk] bigevil.cf + rsync? - Windows version - sort of

2003-12-07 Thread Chris Thielen
Chris Thielen said: Barry, http://www.gnu.org/software/wget/wget.html should link you to ftp://sunsite.dk/projects/wget/windows/ where you can snag win32 binaries for wget Just ignore me... I shouldn't have jumped in and posted without reading the whole thread. Sorry! -- Chris Thielen

Re: [SAtalk] Delete mail with a score above n

2003-12-07 Thread Bob Apthorpe
On Thu, 04 Dec 2003 10:59:13 -0800 Mike D [EMAIL PROTECTED] wrote: Does anyone know how to config spamassassin to delete messages with a score above a certain threshold? This question gets asked every 3-5 days and really ought to be in the FAQ. Answers generally focus on: a) procmail b) how

RE: [SAtalk] bigevil.cf + rsync?

2003-12-07 Thread Peter Kiem
Hi, Peter, if your still listening what character set are you running? Sorry, been away for the weekend. I was using my SquirrelMail at the time for posting so not sure. It should have just been plain text! -- Regards, +-+-+ |

[SAtalk] Why didnt't he obfuscation rules hit on this message?

2003-12-07 Thread Rubin Bennett
Return-Path: [EMAIL PROTECTED] Message-ID: [EMAIL PROTECTED] From: Timprice [EMAIL PROTECTED] Date: Sat, 06 Dec 2003 21:50:06 -0100 To: [EMAIL PROTECTED] Subject: [EMAIL PROTECTED] -- 78% D.1.SC0.UNT!! xvjtk crbqap MIME-Version: 1.0 Content-Transfer-Encoding: 8bit Content-Type: text/html;

RE: [SAtalk] SA, Razor and unkempt perl

2003-12-07 Thread Erick Calder
Mark,sounds like you need Razor2::Client::Agent installed. you can either install it as a perl module via the CPAN module or if you prefer to keep things in RPM format you can use the cpan2rpm tool to make the module before installing. -Original Message-From: [EMAIL PROTECTED]

[SAtalk] report_safe ?

2003-12-07 Thread Erick Calder
I've recently upgraded to Shriek which comes with 2.44. my user_prefs used to include a line like: report_safe 0 but now I get an error like this: Dec 3 23:40:45 beowulf spamd[13358]: debug: Failed to parse line in SpamAssassin configuration, skipping: report_safe 0 in the current

RE: [SAtalk] spamds that don't finish

2003-12-07 Thread Erick Calder
Cheryl, I'm having the same problem (see posting spamd piling up - just killing me) on a Shriek (RH9) box running 2.44. 2.44 is the latest available from RH but it's been suggested to me that I should upgrade to 2.60 (unfortunately I can't do that at present since Theo Van Dinter's site is not

[SAtalk] Bayes scoring

2003-12-07 Thread Michael Satterwhite
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm looking at the standard scoring of the BAYES rules and I see 50_scores.cf:score BAYES_80 0 0 5.300 2.862 50_scores.cf:score BAYES_90 0 0 4.027 3.002 50_scores.cf:score BAYES_99 0 0 5.200 3.008 if I'm reading this correctly more points are given

Re: [SAtalk] report_safe ?

2003-12-07 Thread Theo Van Dinter
On Sun, Dec 07, 2003 at 12:24:16PM -0800, Erick Calder wrote: I've recently upgraded to Shriek which comes with 2.44. my user_prefs used to include a line like: report_safe 0 in the current docs I find neither any mention of this setting nor an alternative... wtf? report_safe was

Re: [SAtalk] Bayes scoring

2003-12-07 Thread Theo Van Dinter
On Sun, Dec 07, 2003 at 02:46:39PM -0600, Michael Satterwhite wrote: Can some of you experts explain this one to me? http://spamassassin.taint.org/faq/index.cgi?req=showfile=faq01.005.htp -- Randomly Generated Tagline: The highest patriotism is not a blind acceptance of official policy, but a

RE: [SAtalk] Re: spamd piling up - just killing me

2003-12-07 Thread Erick Calder
ok. I'm now running 2.60 but with same results. curiously, as with Cheryl's problem, I mostly seem to have one user with the problem... and from what I can tell there is nothing remarkable about that user's account... any help would be most appreciated. -Original Message- From: [EMAIL

[SAtalk] Re: One persistent spammer defeating SA.

2003-12-07 Thread Bryan Hoover
Robert Nicholson wrote: I've got a mailbox full of messages that got past SA They are all from the same spammer. What sort of stuff is in the messages? And if it's a bulk send -- that is, a real spammer, as opposed to someone targeting only you (which would be, most likely, for the most

[SAtalk] Bayes and qmailscanner

2003-12-07 Thread Jennifer Fountain
I am having a bit of a time trying to get bayes working with qmail/qmailscanner. My server is acting like a relay server for my domain and does not have mailboxes. Does anyone have any information that they can share with point me in the right direction?

[SAtalk] Re: spamd piling up - just killing me

2003-12-07 Thread Malte S. Stretz
On Sunday 07 December 2003 22:56 CET Erick Calder wrote: ok. I'm now running 2.60 but with same results. curiously, as with Cheryl's problem, I mostly seem to have one user with the problem... and from what I can tell there is nothing remarkable about that user's account... Are those

RE: [SAtalk] Re: spamd piling up - just killing me

2003-12-07 Thread Erick Calder
Are those processes really zombies or does the user probably just receive loads of mail? they're not really zombies since they're eating up all available cpu. and the user doesn't get that much mail but when he does the processes run forever. Have you tried limiting the number of children via

[SAtalk] Re: spamd piling up - just killing me

2003-12-07 Thread Charles Gregory
On Sunday 07 December 2003 22:56 CET Erick Calder wrote: ok. I'm now running 2.60 but with same results. curiously, as with Cheryl's problem, I mostly seem to have one user with the problem... and from what I can tell there is nothing remarkable about that user's account... My favorite

Re: [SAtalk] amavisd-new spamassassin = no headers. Ugh!

2003-12-07 Thread Bill Randle
On Sat, 2003-12-06 at 20:10, [EMAIL PROTECTED] wrote: Greetings all! Detailed thread is here: http://forums.gentoo.org/viewtopic.php?t=93771start=0sid=5b9753497d3d65e947679654382eea37 Basically, I have installed amavisd-new and SpamAssassin 2.60 on a box that serves as a gateway

RE: [SAtalk] Adding another RBL

2003-12-07 Thread Richard Bewley
Hmm, it looks as though this would be the problem: debug: is Net::DNS::Resolver available? no debug: is DNS available? 0 Now, the next question, how do I go about installing Net::DNS, do I have to use CPAN? Thanks, Richard -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: [SAtalk] Adding another RBL

2003-12-07 Thread Erick Calder
if you're running RH you can use the RPM. see http://perl.arix.com/cpan2rpm/#prebuilt -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Richard Bewley Sent: Sunday, December 07, 2003 5:50 PM To: 'David B Funk' Cc: 'Matt Kettler'; [EMAIL PROTECTED]; 'El

[SAtalk] Spam that got through question

2003-12-07 Thread Scott Harris
Title: Spam that got through question The spam attached has the following random words at the bottom: automata childhood reflectance trevelyan tile captious hollingsworth cornstarch chinaman chicanery Is this to try to poison bayes or to just try and fool things to get it through or

Re: [SAtalk] Mailer daemon mail in whitelist

2003-12-07 Thread Matt Kettler
At 11:07 AM 12/6/03 -0800, mairhtin wrote: Great to hear! Is xanadu.evi-inc.com *YOUR* dns machine? my machine is named mail.techsolutionsgroupllc.com, so I suppose that the correspondant line would be : whitelist_from_rcvd [EMAIL PROTECTED] mail.techsolutionsgroupllc.com since

RE: [SAtalk] Adding another RBL

2003-12-07 Thread Matt Kettler
At 08:49 PM 12/7/03 -0500, Richard Bewley wrote: mm, it looks as though this would be the problem: debug: is Net::DNS::Resolver available? no debug: is DNS available? 0 Now, the next question, how do I go about installing Net::DNS, do I have to use CPAN? you can do it via tarball, and most

Re: [SAtalk] Spam that got through question

2003-12-07 Thread Matt Kettler
At 07:15 PM 12/7/03 -0800, Scott Harris wrote: The spam attached has the following random words at the bottom: automata childhood reflectance trevelyan tile captious hollingsworth cornstarch chinaman chicanery Is this to try to poison bayes or to just try and fool things to get it through or

Re: [SAtalk] Bayes scoring

2003-12-07 Thread Matt Kettler
At 02:46 PM 12/7/03 -0600, Michael Satterwhite wrote: 50_scores.cf:score BAYES_80 0 0 5.300 2.862 50_scores.cf:score BAYES_90 0 0 4.027 3.002 50_scores.cf:score BAYES_99 0 0 5.200 3.008 if I'm reading this correctly more points are given for classifying a message as 80% probable than for 90%