VERY off topic, but this could be helpful to fellow Debian'ers. I know
that when I learned of pinning, I was very grateful.
On Wed, 2004-01-07 at 12:12, Marcio Merlone wrote:
Hello all,
Sorry for this ot, but does anybody know where can I get an up to date
debian package of SA? I have only
On Thu, 08 Jan 2004 04:12:36 -0600
Chris Thielen [EMAIL PROTECTED] (CT) wrote:
CT VERY off topic, but this could be helpful to fellow Debian'ers. I
CT know that when I learned of pinning, I was very grateful.
I am very grateful also. I am a debian beginer and that taught me a lot.
:)
But this
Title: Nachricht
Does anyone know if
it is possible to configure whitelists in such a way that spamassassin does not
further try to check the mail, i.e. if it finds a whitelist entry skips the
remaining tests altogether. In my opinion this would be a quite a timesaver. In
the current setup
Hi,
I received a piece of spam this morning that was easily caught by
SpamAssassin. However, one of the rules that triggered for it was
RCVD_IN_BSP_TRUSTED. Looking at the BSP website, they would have you
automatically whitelist anything listed in their DNS. I assume someone
using their service
Upgraded a production host (solaris 8) from SA v2.54 to 2.61. In both cases,
spamd is started as
perl -d --syslog-socket=inet -r /var/tmp/spamd.pid
Previously, spamd logging went to debug and maillog. Now it only goes to
maillog. Don't see anything in the notes about syslog facility level
Thomas Nilsen wrote:
As you can see from the header info, the message got 8, and we have the
spam level set to 8.. Why would it not tag this email as spam?
Its because the X-Spam-Status: No. is rounded off, it may have only
scored 7.75, count the stars in X-Spam-Level, there's 7
tm
Hello all -
I have a question i regards to razor2 and spamassassin - this is what I see
from my maillog, I have spamd in debug mode, I am wondering if you can tell me
if razor is being used. If so how can I tell that razor2 is being utilized.
Jan 8 08:11:08 elmo spamd[4644]: debug: Using
On Thu, 2004-01-08 at 01:21, Wolfram Schroeder wrote:
Hi,
I'm mailing you because you're the administrator/owner of the domain
www.exit0.us.
We, the german rule developers, noticed that the wiki at www.exit0.us
has been down for quite some time. We would like to know if the wiki
will
Another update. Bunch of stragler FPs removed. Thank you Robert M!
Faster and smaller again. I hope to try to convert all the regex code this
weekend. But I'm not holding my breath :)
Tested overnight with no problems.
http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf
Chris Santerre
On Thu, 8 Jan 2004, Pat Masterson wrote:
On Thu, 8 Jan 2004, Dave Stern - Former Rocket Scientist wrote:
Upgraded a production host (solaris 8) from SA v2.54 to 2.61. In both cases,
spamd is started as
perl -d --syslog-socket=inet -r /var/tmp/spamd.pid
Dave - I use a LOCAl:
On Thu, Jan 08, 2004 at 09:42:11AM -0500, Chris Santerre wrote:
Another update. Bunch of stragler FPs removed. Thank you Robert M!
Faster and smaller again. I hope to try to convert all the regex code this
weekend. But I'm not holding my breath :)
Can you also include topanel5.com?
(below is
From: Matt Kettler [mailto:[EMAIL PROTECTED]
My opinions:
Possibly legit, but slightly suspicious score at 0.1-0.4
lose the weight, struggling to lose, shed the pounds
suspect, score at 0.5-1.0
guaranteed to work, your money back, believe how simple
highly
Ladies and Gentlemen,
I am running 2.61 but still I seem to be losing this war, especially
against the chinese spammers.
I have a user whose mail I am passing via SA (I do selective filtering
via procmail) on my MTA.
While I use so much of those rulesets contributed out there, so much
spam still
On Wed, 7 Jan 2004, Kurt Buff wrote:
Several instances of the attached message got through, and I'm wondering
what might catch this - we're running v2.60, with popcorn, backhair, weeds,
smallpox, nov2rules and bigevil, plus a couple of minor custom rules.
I hate it when my mail client doesn't
I want to pass the debug command to spamassassin using the init scripts
redhat supplies. For the life of me i cannot figure out where to insert
the flag.
For the last couple of days spamd has been bringing my box down to its
knees and I hope that will give me a clue.
It was working well with
I have some mail that was received by this particular user. I have put
the tarbal here: http://ns2.wananchi.com/~wash/SPAM/ and it is in
Maildir/ format.
Looking forward to your observations/suggestions/recommendations.
I ran your files through my spamassasin setup an got 6 E-mails that scored
Our new law as of 1/1/04, now if it was just enforceable !!
http://www.spamlaws.com/state/il.html
SCott
At 10:13 AM 1/8/2004, Genchev, Sergei wrote:
I have some mail that was received by this particular user. I have put
the tarbal here: http://ns2.wananchi.com/~wash/SPAM/ and it is in
Maildir/
Hello,
I have setup a local RBL list on the server running spamassassin. How do I
go about setting spamassassin to check the local copy of this rbl?
Thank in advance,
Dan
--
Dan Spray, Director of Internet Operations [EMAIL PROTECTED]
Connecting Point Norfolk, NE
* Genchev, Sergei [EMAIL PROTECTED] [20040108 19:13]: wrote:
I have some mail that was received by this particular user. I have put
the tarbal here: http://ns2.wananchi.com/~wash/SPAM/ and it is in
Maildir/ format.
Looking forward to your observations/suggestions/recommendations.
I ran
On Thu, Jan 08, 2004 at 08:17:57AM -0600, SAtalk Mail User wrote:
I have a question i regards to razor2 and spamassassin - this is what I see
from my maillog, I have spamd in debug mode, I am wondering if you can tell me
if razor is being used. If so how can I tell that razor2 is being
hi everybody,
does sendmail and spamassassin must be on the same
machine, or they can be on diferent machines?
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Chris
Santerre
Sent: Thursday, January 08, 2004 6:42 AM
To: Spamassassin-Talk (E-mail)
Subject: [SAtalk] Bigevil 2.06f posted.
Another update. Bunch of stragler FPs removed. Thank you Robert M!
Faster and
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Ceva
Sent: Thursday, January 08, 2004 9:32 AM
To: [EMAIL PROTECTED]
Subject: [SAtalk] send mail and spamassasin must be on the same
machime
hi
Michael H. Collins wrote:
I want to pass the debug command to spamassassin using
the init scripts redhat supplies. For the life of me i
cannot figure out where to insert the flag.
Somewhere around line number 24 you will see:
SPAMDOPTIONS=-d -c -a -m5 -H
append -D to the list of
Dennis Duval wrote:
Michael H. Collins wrote:
I want to pass the debug command to spamassassin using
the init scripts redhat supplies. For the life of me i
cannot figure out where to insert the flag.
Somewhere around line number 24 you will see:
SPAMDOPTIONS=-d -c -a -m5 -H
Yes, but the bayes portion isn't working. Why? Because when SA runs, it
runs with the privileges of the user whose mail is being scanned. I
believe bayes would require that SA (spamc) is run under a specific
user, no?
One option that I see would be to copy your bayes database (7K spam and 1.5K
Received: from [EMAIL PROTECTED] by dude.myhost.com by uid 504 with
qmail-scanner-1.20rc3
(clamscan: 0.60. spamassassin: 2.55. Clear:RC:0:SA:0(?/?):.
Processed in 16.851793 secs); 08 Jan 2004 10:20:46 -
Hello,
The spam that get through my current filter setup always have this (?/?)
Hmm ok. It is the one I have though.
Thanks.
Dennis Duval wrote:
Dennis Duval wrote:
Michael H. Collins wrote:
I want to pass the debug command to spamassassin using
the init scripts redhat supplies. For the life of me i
cannot figure out where to insert the flag.
Somewhere around line
John Hall [EMAIL PROTECTED] wrote:
The whole point is that a sender posts a bond, which presumably is
forfeited if they send spam. How do I go about reporting it?
http://www.bondedsender.org/complaint/
Or send it to the bondedsender.org abuse email address.
Kelson Vibber
SpeedGate Communications
Hello,
Thanks to those who pointed me to the Razor2 patch for being able to upgrade
to 2.61. It worked, then the FVGT rules worked too!
When I'm debugging this system, I find that its obnoxiuos to pick through
the maillog to find the spamd messages. Does anyone have their logging
configured to
Are you running some of the additional checks such as the BigEvil. I found that
this made a world of difference. That catches 50% of my incoming spam alone.
Gary
-Original Message-
From: [EMAIL PROTECTED] on behalf of Odhiambo Washington
Sent: Thu 1/8/2004
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thursday 08 January 2004 09:32, Ceva wrote:
hi everybody,
does sendmail and spamassassin must be on the same machine, or they can be
on diferent machines?
They can be on different machines. You will have to call spamassassin with
spamc to get
Hello all,
I am sure this error has probably been covered at
one time or another, but multiple searches of the archives have produced no
results for me. I am trying to upgrade the site-wide SA on a server using CPAN
and things seem to go fine. Until it gets to the rules_tests and then I get
I've been half heartedly watching the list and have noticed some BigEvil
updates. So, I looked at the bigevil site
(http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm). Is there any
reason I would not want to use bigevil?
-
This
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On
Behalf Of Upwood, Jim
Sent: Thursday, January 08, 2004 8:45 AM
To: Spamassassin-Talk (E-mail)
Subject: RE: [SAtalk] Bigevil 2.06f posted.
I think he means smaller memory usage of the spamd process,
not
When I'm debugging this system, I find that its obnoxiuos to
pick through
the maillog to find the spamd messages. Does anyone have their logging
configured to dump spamd messages in something like
/var/log/spamd ? Any
suggestions on how to make this happen?
-Russell
man spamd:
Hello,
I've got SA 1.61 running with mailscanner in redhat 9.
I'm trying to run:
sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --spam --dir
/var/spool/mail/cleveland
And, it's been going for over 2 hours now.
Does it normally take this long? Is there a -v or -h to see a hash, or
This is my embarrassingly simple first post to this list, but I can't find
the answer. Be gentle with me - answer this and then I'll quietly leave the
list.
I want to specify a text string in the Subject header such that if it
exists, the msg will NOT be considered spam, no matter what else
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Genchev, Sergei writes:
Yes, but the bayes portion isn't working. Why? Because when SA runs, it
runs with the privileges of the user whose mail is being scanned. I
believe bayes would require that SA (spamc) is run under a specific
user, no?
How about giving the test a negative score? i.e. -20.0
Brad
On Thu, 8 Jan 2004, John Fleming wrote:
I want to specify a text string in the Subject header such that if it
exists, the msg will NOT be considered spam, no matter what else might be
wrong with it.
On Thu, Jan 08, 2004 at 02:07:59PM -0500, John Fleming is rumored to have said:
I want to specify a text string in the Subject header such that if it
exists, the msg will NOT be considered spam, no matter what else might be
wrong with it.
In your /etc/mail/spamassassin/local.cf, add this at
I remember seeing a patch at one point that would put report scores in the
header summary report (so you know what resulted in the high score without
having to run the message through again manually).
Is this now a configurable feature?
If not, does anyone know where the patch lives?
Is there a
Be sure to restart spamd (if you use it) after adding/changing things in
your local.cf.
THANKS to those suggesting a negative score - DUH! I understand why 0
doesn't accomplish anything - don't know why I couldn't see the value in a
negative score! (Uh, and thanks for the reminder to restart
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thursday 08 January 2004 11:25, Steve Thomas wrote:
On Thu, Jan 08, 2004 at 02:07:59PM -0500, John Fleming is rumored to have
said:
I want to specify a text string in the Subject header such that if it
exists, the msg will NOT be
Hi John:
This is my embarrassingly simple first post to this list, but I can't find
the answer. Be gentle with me - answer this and then I'll quietly leave the
list.
Some of us other newbies like the embarrassingly simple questions, otherwise
we'd have nothing to respond to! Also, rather
Hi
From being on here a while, this isn't the worst list in the world
thinks about typing this, but hey sod it not like some of the
egotistical tossers on the qmail list who spend time flaming *every* newbie
(not to name any names). ;)
Pete
Also well impressed by SA and the
i've added:
score MICROSOFT_EXECUTABLE 0.100
score MICROSOFT 1
to my ~/.spamassassin/user_prefs
but I still get windows binary as ham, below the required hits and not
autolearned as spam. I want to auto classify ANYTHING with a windows binary
as spam. Is there another score, or option that I
At Thu Jan 8 19:06:10 2004, Jody Cleveland wrote:
Hello,
I've got SA 1.61 running with mailscanner in redhat 9.
I'm trying to run:
sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --spam --dir
/var/spool/mail/cleveland
And, it's been going for over 2 hours now.
Does it
Hi Martin,
There's --showdots, as mentioned in the man page.
Thanks. I did -h for help and didn't notice that in there.
And yes, sa-learn can take some time to run, particularly on slower
machines. It also depends on how many messages are in the mailbox.
Is /var/spool/mail/cleveland
Yes, no, maybe, don't care?
Original Message
Subject: [SAtalk] Does SA do this check:
Date: Sun, 4 Jan 2004 18:04:27 -0800
From: John Rudd [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Some friends and I have noticed that some spam messages arrive with
multipart/alternative
I've noticed that a lot of spams recently have been following the
random-words technique, with very little spam content - often just an
image or some obfuscated text. Has anyone given any thought to writing
up a rule that detects a LACK of punctuation, or a lack of short words
like a/and/the?
IMHO, no. I think BigEvil is good enough for general use (I am running
it on about a dozen sites, one of whom is an ISP with about 500
customers).
My $0.02
Rubin
On Thu, 2004-01-08 at 13:34, Bert Rapp wrote:
I've been half heartedly watching the list and have noticed some BigEvil
updates.
-Original Message-
From: Jody Cleveland [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 08, 2004 2:21 PM
To: 'David A. Carter'; '[EMAIL PROTECTED]'
Subject: RE: [SAtalk] Is sa-learn supposed to take over 2 hours?
Ohh... So, I would want to run:
# sa-learn -p
-Original Message-
From: Jody Cleveland [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 08, 2004 2:29 PM
To: 'Kang , Joseph S.'
Subject: RE: [SAtalk] Is sa-learn supposed to take over 2 hours?
Cool. I tried that, and now, after sitting for about 5
minutes gives me
this:
Here's a rule I wrote for just this sort of spam:
rawbody WORDWORD/[a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12}
[a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} /
describe WORDWORD long string of random words
score WORDWORD
Cannot open bayes databases /etc/MailScanner/bayes/bayes_* R/W: lock
failed: File exists
I believe this usually means that a lock file from a previous
failed attempt
to update the bayes DB files already exists. Is there any
sort of lock file
in that directory
You can change the score, yes, I infact, did the same thing. In the
local.cf you put this line:
score MICROSOFT_EXECUTABLE 100
HTH
Thanks,
James
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Geoffrey Lane
Sent: Thursday, January 08, 2004 3:05 PM
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thursday 08 January 2004 12:05, Geoffrey Lane wrote:
score MICROSOFT_EXECUTABLE 0.100
Try setting this to 10 or more.
score MICROSOFT_EXECUTABLE 10.00
Douglas
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.2.1 (GNU/Linux)
Would this regex make more sense?
/([a-z]{4,12}\s){12,}/
Andrew Hoying
[EMAIL PROTECTED] wrote on 01/08/2004 01:37:49
PM:
Here's a rule I wrote for just this sort of spam:
rawbody WORDWORD/[a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]
{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12}
Would this regex make more sense?
/([a-z]{4,12}\s){12,}/
Yes. though I used:
/(\b[a-z]{4,12}\s+){12}/
notice the initial /b, and there's no need to make SA continue to search
beyond the minimum match, so leave off the , in the last {} cluster.
--
Chris Petersen
Programmer / Web Designer
Here is another one for BigEvil that I am getting a lot of:
www.allsafetyproducts.biz
Andrew Hoying
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced
BTW, I'm already seeing some random-word spam with random punctuation thrown in as
well...
Pierre Thomson
-Original Message-
From: Chris Petersen [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 08, 2004 4:18 PM
To: [EMAIL PROTECTED]
Subject: RE: [SAtalk] detecting large collections
A friend of mine not on the list asked me to forward along a couple of
questions - and I'm also curious to know the answers.
Basically, he asks if the bayes filter assigns more weight to URI's and
phone numbers, since spammers are much less able to change these than
they are the actual message
-Original Message-
From: [EMAIL PROTECTED]
Sent: Thursday, January 08, 2004 12:57 PM
Would this regex make more sense?
/([a-z]{4,12}\s){12,}/
Slightly better might be:
/(?:(\b[a-z]{4,12}\s+){12,})/
---
This SF.net email
--On Thursday, January 08, 2004 1:29 PM -0800 Chris Petersen
[EMAIL PROTECTED] wrote:
And if they are NOT assigned more weight, they should be. if a message
is fed to the bayes db as spam, the URL's should have additional weight,
such that if they're found in future messages, the URL
The tutorial only mentions adding rules to the
local.cf file. If I place additional .cf files in the /etc/mail/spamassassin
dir, will they be included? Or should I append my
local.cf?
On Thu, 8 Jan 2004, Douglas Kirkland wrote:
On Thursday 08 January 2004 09:32, Ceva wrote:
hi everybody,
does sendmail and spamassassin must be on the same machine, or they can be
on diferent machines?
They can be on different machines. You will have to call spamassassin with
spamc to
Edited Chickenpox Set is now available. Please read the notes on the
site before using the set! I love the set, but I have them scored
higher than you might like. I would set the scores lower to test and
then score them per your tastes/spam threshold. If you would like to
wait for testing
The first one, rnd_uc_char.cf, I've already sent to the list a few weeks
ago. It detects spam like:
Subject: Re: IFWYOJRK, he was writing
X-Originating-IP: [rx359.netIP]
(the RND_UC_CHAR pattern) and I've just updated it for a few new variants
that have shown up in the past couple of days. The
Jeez; I just read my own post, and thought a little clarification might
be in order: the IMHO, no is in response to Is there any reason NOT
to use BigEvil, and not in response to the subject line.
Is it Friday yet?! Apparently my brain already thinks it's Saturday and
is camped out somewhere
Anyone have a rule to stop this type of spam for cable filters and more. I
get tons of these. They all have a subject like this:
Re: BUESQY, with a completely
Re: BAZYUQ, telegrams of inquiry
Re: ABF, continued: love leaped
I wrote this rule:
body THE_2003_SPAM_PATTRN Subject =~ /Re:
On Thu, Jan 08, 2004 at 04:20:09PM -0600, Scott Gurley is rumored to have said:
Anyone have a rule to stop this type of spam for cable filters and more. I
get tons of these. They all have a subject like this:
Re: BUESQY, with a completely
Re: BAZYUQ, telegrams of inquiry
Re: ABF, continued:
Hi all,
Why is it that I can do an nslookup on a particular server's A record ,
and it's MX record successfully, but Postfix can't? Note the error
below when the server from that domain connects:
Postfix/smtpd[1368]: connect from unknown[IPAddress]
And . . .
Type=A: Host found but no data
If they exist, can someone point me to where the options are for add_header
for Razor2 please?
Thanks
Alan
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
On Thu, Jan 08, 2004 at 02:32:33PM -0800, Mark Squire wrote:
Why is it that I can do an nslookup on a particular server's A record ,
and it's MX record successfully, but Postfix can't? Note the error
below when the server from that domain connects:
Postfix/smtpd[1368]: connect from
On Thu, Jan 08, 2004 at 04:44:03PM -0500, Jonathan Calvert wrote:
The tutorial only mentions adding rules to the local.cf file. If I place additional
.cf files in the /etc/mail/spamassassin dir, will they be included? Or should I
append my local.cf?
All .cf files in /etc/mail/spamassassin
I'll try creating one. Thanks Theo.
C:\Mark
-Original Message-
From: Theo Van Dinter [mailto:[EMAIL PROTECTED]
Sent: Thursday, January 08, 2004 2:48 PM
To: Mark Squire
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] SA name resolution
On Thu, Jan 08, 2004 at 02:32:33PM -0800,
From: Chris Petersen
[...]
Yes. though I used:
/(\b[a-z]{4,12}\s+){12}/
notice the initial /b, and there's no need to make SA continue to search
beyond the minimum match, so leave off the , in the last {} cluster.
Looks good. just running this over a ham mail box with about 500
The [brackets] are the problem, since they create a character class (that is,
match anything with a b, or an r, or an a, or...
You need to make it /\[text to look for\]/i if your text has [] in it. There
are also a few other special characters you'd have to escape if they came up;
+*?()[]\/ are
I just upgraded from Spamassassin 2.5? From an SUSE RPM to version 2.61
source. Everything was working fine but now I get an error doing anything
with the bayes database. I reinstalled DB_File from CPAN but the error
persists. Can anyone tell me what's wrong?
Thanks,
Michael Cloutier
Use of
Hello,
I've got SA 1.61 running with mailscanner in redhat 9.
I'm trying to run:
sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --spam --dir
/var/spool/mail/cleveland
And, it's been going for over 2 hours now.
Does it normally take this long? Is there a -v or -h to see a hash, or
I would go straight to the source at ftp.debian.org or http.us.debian.org,
whichever you prefer.
I currently have v2.6.
[EMAIL PROTECTED]:~$ apt-cache show spamassassin
Package: spamassassin
Priority: optional
Section: mail
Installed-Size: 1988
Maintainer: Duncan Findlay [EMAIL PROTECTED]
quick q?
if SA is installed and working why would i install mailscanner?
what does MS do that SA can't
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced
Is there a way to tell the bayes learning system to forget everything and
start over from a clean corpus sa-learn session? The reason I ask is I may
have many emails that were auto posted and learned that were learned the
wrong way.
I have 2.55 ver
Thanks
On Thu, Jan 08, 2004 at 05:51:45PM -0600, Kevin Roberts wrote:
Is there a way to tell the bayes learning system to forget everything and
start over from a clean corpus sa-learn session? The reason I ask is I may
have many emails that were auto posted and learned that were learned the
wrong
On 8 Jan 2004 at 12:21, Bart E. Hawley Sr. wrote:
Redhat 7.1
Kernel 2.4.2-2
That's kind of an old kernel for a machine connected to the Internet.
Have you done security updates? The last kernel RH released for 7.1
was 2.4.20-28.7.
Mail::SpamAssassin 2.20
Perl 5.6.0
There's also a newer
Sorry it took me so long to reply. I'm working from home today. (don't ask!,
but no it isn't a hockey injury :p)
Yup, the regex is getting slowy rewritten rule by rule. Faster processing. I
still add more domains every update. I've actually pulled out a few that
expired or were bogus as well.
Slightly better might be:
/(?:(\b[a-z]{4,12}\s+){12,})/
The surrounding (?:) doesn't actually do anything - you're just grouping
the whole regex itself. Thus /(\b[a-z]{4,12}\s+){12}/
would work just as well. or /(?:\b[a-z]{4,12}\s+){12}/ if you wanted to
make a slight optimization and not
Looks good. just running this over a ham mail box with about 500 messages
and a spam mail box with the same, and not decoding base64 and such, I
see the following:
what about something like:
/(?:\b(?!=(?:from|even|more|were|with)\b)[a-z]{4,12}\s+){12}/
I'm trying to think of extremely common
Chris Petersen [EMAIL PROTECTED] wrote:
what about something like:
/(?:\b(?!=(?:from|even|more|were|with)\b)[a-z]{4,12}\s+){12}/
Negative look-ahead is (?!...), not (?!=...). In your version,
the equals sign is part of the pattern to match, and since
anything that matches [a-z] can't be
Negative look-ahead is (?!...), not (?!=...). In your version,
the equals sign is part of the pattern to match, and since
anything that matches [a-z] can't be '=', the negative look-
ahead ends up doing nothing.
Oops.. Shows how long it's been since I've done serious regex stuff
(and I
Hello Bert,
Thursday, January 8, 2004, 10:34:31 AM, you wrote:
BR I've been half heartedly watching the list and have noticed some BigEvil
BR updates. So, I looked at the bigevil site
BR (http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm). Is there any
BR reason I would not want to
Hello Steve,
Thursday, January 8, 2004, 11:25:20 AM, you wrote:
ST On Thu, Jan 08, 2004 at 02:07:59PM -0500, John Fleming is rumored to have said:
I want to specify a text string in the Subject header such that if it
exists, the msg will NOT be considered spam, no matter what else might be
Sorry if this has been covered but I just joined the list and it is too
complicated to search for.
I have had SpamAssassin running well for several months now. But recently I
have been getting 10-12 messages a day that have an image at the top, then
about 50 valid, but nonsensical English
Is there a way to get SPAM Assassin to post the values each test contributed
to the total score in the header of the e-mail?
Our installation is still kinda new, and we are working out all of the
configurations bugs to get the false positive rate down.
We're using spamassassin.dll in Kerio's
[EMAIL PROTECTED] wrote:
[EMAIL PROTECTED] wrote on 01/03/2004 11:52:41 AM:
Who wrote that? I think you need to double check your quoting
machinery!
Subject: Bug 08378 was submitted by Bob Proulx
Subject: Bob is out Friday/Monday
Subject: TWiki - Registration for BobProulx
Among the recommendations for detecting spam with bayes fodder within it,
were:
rawbody WORDWORD/[a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12}
[a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} [a-z]{4,12} /
describe WORDWORD long string of random
97 matches
Mail list logo
