RE: [SAtalk] Matching a list of strings quickly.

2004-01-20 Thread Mitch \(WebCob\)
Question - your from doens't match your to in the final example - right? Good idea - as a general purpose tool such a concept could help condense patterns very efficiently. If you shared your source some other people might have improvements to make though (not me - I'm a reg ex whimp ;-) Can

[SAtalk] Re: Matching a list of strings quickly.

2004-01-20 Thread Scott A Crosby
On Mon, 19 Jan 2004 22:47:07 -0800, Mitch (WebCob) [EMAIL PROTECTED] writes: Question - your from doens't match your to in the final example - right? Yes. I thought that pasting in a 300 line exerpt would be counterproductive. Scott --- The

[SAtalk] V-drug spam gets *0* hits on SA 2.55

2004-01-20 Thread Scott A Crosby
Read it and weep. :( Next question, how was it sent? The Received headers look relatively legit, so was this sent from a trojaned AOL user? I have *got* to implement that fuzzy matching algorithm. Scott ---BeginMessage--- pronounce, How Vigras works. And you can better understand, what

Re: [SAtalk] SpamAssassin and learn messages

2004-01-20 Thread Martin Hepworth
Tanen wrote: Hello, Im searching a solution, to send back, mails, who havent been detect as spam, on the mail server, for put it on a mail box, or folder, for use the sa-learn command, and give to SpamAssassin more values to catch spams. How to put mails who have been downloaded on the

Re: [SAtalk] Turning off Habeas?

2004-01-20 Thread Michael Satterwhite
On Monday 19 January 2004 23:06, David A. Carter wrote: Before turning off Habeas (or even worse, giving it a positive score), please take time to read this thread, particularly Bob Proulx's response. http://thread.gmane.org/gmane.mail.spam.spamassassin.general/38623 I'd read that thread

RE: [SAtalk] 7245 Habeas and counting

2004-01-20 Thread Paul Barbeau
I as well have gotten alot and want to set it to 0 and exlude it from bayes. So just to confirm i enter the below in my local.cf file. Non have made it thought because of things like big evil however might as well make it 0 till they work out how to stop it. thanks score HABEAS-SWE 0

[SAtalk] Custom Subject rules not being picked up

2004-01-20 Thread David Logan
I am having some trouble with Subject header rules to my local.cf file - they don't seem to be getting read by spamassassin. Example: header SUBJECT_VICODIN Subject =~ /\bvicodin\b/ describe SUBJECT_VICODIN Mentions vicodin score SUBJECT_VICODIN 4.0 (I took this example from Chris' site

RE: [SAtalk] Matching a list of strings quickly.

2004-01-20 Thread Randal, Phil
Nice stuff - have you got any benchmarks to prove it's all worthwhile? Cheers, Phil - Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott

[SAtalk] how many spam/ham do I have in my bayes db?

2004-01-20 Thread Adrian Simmons
Is there an easy way to get a total of the spam/ham in the bayes db? I've noticed the total come up in the log when running SA in debug mode, and one could probably dump the db and go hunting for the magic numbers, but is there really nothing easier, no sa-learn commands? TIA Adrian

Re: [SAtalk] how many spam/ham do I have in my bayes db?

2004-01-20 Thread Ralf Vitasek
in case you have SA 2.6x then just type sa-learn --dump magic Adrian Simmons wrote: Is there an easy way to get a total of the spam/ham in the bayes db? I've noticed the total come up in the log when running SA in debug mode, and one could probably dump the db and go hunting for the magic

Re: [SAtalk] V-drug spam gets *0* hits on SA 2.55

2004-01-20 Thread Ivar Snaaijer
Scott A Crosby wrote: Read it and weep. :( Next question, how was it sent? The Received headers look relatively legit, so was this sent from a trojaned AOL user? I have *got* to implement that fuzzy matching algorithm. Scott [.. spam ..] I also get them even with 2.61. I have added a

[SAtalk] Bayes BD problems (out of memory)

2004-01-20 Thread Daniele Nicolodi
Hello, i was an happy user of Spamassassin untill some days ago spamassassin started to eat all my memory opening the bayes database. I was using spamassassin 2.55 with procmail calling it directly with the -P switch, not using spamd and spamc. My database is about 40 Mb and i have 256 Mb of ram

Re: [SAtalk] V-drug spam gets *0* hits on SA 2.55

2004-01-20 Thread Christopher X. Candreva
On Tue, 20 Jan 2004, Scott A Crosby wrote: Read it and weep. :( This looks very similar to the one I posted about yesterday. See this mbox: http://www.westnet.com/~chris/Spam0118 == Chris Candreva -- [EMAIL PROTECTED] -- (914) 967-7816

RE: [SAtalk] Turning off Habeas?

2004-01-20 Thread Darren Coleman
The fact that Habeas are very litigious when it comes to protecting their haiku doesn't alter the fact that is it intrinsically a very abusable system. We're not talking about some trusted cryptographic algorithm spoofed in an email header, the mark is a series of easy-to-forge text which any

Re: [SAtalk] Bayes BD problems (out of memory)

2004-01-20 Thread Chr. von Stuckrad
This answer does NOT really relate to bayes! But nevertheless to a typical 'out of memory'. On Tue, Jan 20, 2004 at 01:43:30PM +0100, Daniele Nicolodi wrote: I have also tryed to upgrade to sa 2.62 and convert the old db format to the new one but sa fill all my memory, and conseguently is

Re: [SAtalk] Configuration question

2004-01-20 Thread Casper Gasper
and noticed that the tagging configuration is specified twice, once in amavisd.conf, and again in /etc/mail/spamassassin/local.cf. There doesn't seem to be any reason as to why one setting is specified in one place, and and not the other. What is the point of specifying settings in the local.cf,

Re: [SAtalk] Forgery rules for outblaze/mail.com rambler.ru

2004-01-20 Thread Robert Menschel
Hello Bob, Sunday, January 18, 2004, 5:59:29 PM, you wrote: BA Based on SPAM-L posts from admins at Outblaze (Suresh) and rambler.ru, I BA conjured up a few simple rules to detect forgeries from these domains: BA header RAA_FORGED_FROM_OUTBLAZE Received =~ /\.mr\.outblaze\.com/ BA

[SAtalk] Spam Assassin Problems

2004-01-20 Thread Marc Morgan
Hi There, I have been trying to install spam assassin on my OpenBSD3.1 machine. Qmail is installed and has been patch with QMAILQUEUE. I installed the latest version, but had errors when starting spamd or spamassassin so i downloaded the latest version 2.70 and installed that, but still get

Re: [SAtalk] Spam Assassin Problems

2004-01-20 Thread Bob Apthorpe
On Tue, 20 Jan 2004 15:28:00 +0200 Marc Morgan [EMAIL PROTECTED] wrote: Hi There, I have been trying to install spam assassin on my OpenBSD3.1 machine. Qmail is installed and has been patch with QMAILQUEUE. I installed the latest version, but had errors when starting spamd or spamassassin

[SAtalk] Header Test (RBL) Question

2004-01-20 Thread David Roback
Hi, My header checks (RBL) only seem to be firing off when there is a forged HELO with the message, otherwise the checks come back as success for 1 of 1queries. This is a new installation of ver 2.61. We are running a site wide config with no individual user prefs. Debug looks like:

[SAtalk] running with vpopmail

2004-01-20 Thread Morten Rønseth
Hi all, The spamd options specify the following (amongst other things): -v, --vpopmail Enable vpopmail config. If specified with with -u set to the vpopmail user, this allows spamd to lookup/create user_prefs in the vpopmail user's own maildir. This option is useful for vpopmail

Re: [SAtalk] SpamAssassin checks on Received headers (and RBL's such as RCVD_IN_SORBS)

2004-01-20 Thread Matt Kettler
At 09:02 PM 1/19/04 +0100, Anders Sveen wrote: I'm actually listed because it originates from a dynamic ip-range. Nothing more. It surprises me that they lists ip's for only beeing dynamic, but then I discovered the way RBLs are being used by mailservers and then it actually made sense. It

Re: [SAtalk] how many spam/ham do I have in my bayes db?

2004-01-20 Thread Matt Kettler
At 12:27 PM 1/20/04 +, Adrian Simmons wrote: Is there an easy way to get a total of the spam/ham in the bayes db? I've noticed the total come up in the log when running SA in debug mode, and one could probably dump the db and go hunting for the magic numbers, but is there really nothing

Re: [SAtalk] Header Test (RBL) Question

2004-01-20 Thread Matt Kettler
At 09:13 AM 1/20/04 -0500, David Roback wrote: debug: DNS MX records found: 0 snip Shouldn't I be seeing more than 1 query for all messages? Hmm.. looks like your DNS is flaking out.. I'm pretty sure you should always have at least one MX success from the DNS_AVAILABLE test... What happens

Re: [SAtalk] Custom Subject rules not being picked up

2004-01-20 Thread Matt Kettler
Are you sure you want that rule to be case sensitive, lower-case only? try header SUBJECT_VICODIN Subject =~ /\bvicodin\b/i (note the added i at the end) At 11:48 AM 1/20/04 +, David Logan wrote: header SUBJECT_VICODIN Subject =~ /\bvicodin\b/ describe SUBJECT_VICODIN Mentions vicodin

Re: [SAtalk] bigevil location

2004-01-20 Thread Matt Kettler
At 11:49 AM 1/20/04 +0800, Fritz Mesedilla wrote: Hello folks! I wanted to update my bigevil list but when I did a locate on them I got this: /var/amavis/.spamassassin/bigevil.cf /etc/mail/spamassassin/bigevil.cf Now I really forgot where the correct location is. Both files are identical. I know

[SAtalk] 2.62: Multiple bayes_toks.expire$$ files

2004-01-20 Thread David Lee
With SA 2.61 (Redhat 9; SA called from MailScanner) we often got a huge, and apparently orphaned, file called bayes_toks.new. Having upgraded to 2.62, this behaviour has been replaced by occurences of multiple files called bayes_toks.expire$$ (where $$ seems to be a process number). When I check

Re: [SAtalk] What's up with OPT_HEADER rule?

2004-01-20 Thread Matt Kettler
At 09:54 PM 1/19/04 -0500, Barry Jaspan wrote: The OPT_HEADER (in 2.5x and 2.6x) rule does not make much sense to me: header __OPT_HEADER_SUBJALL =~ /^(?:Resent-)?Subject:.*opt.?(in|out|oem|ed|ion-in|[EMAIL PROTECTED])(?:\b|\d|\@)/im header __OPT_HEADER_ALL ALL =~

RE: [SAtalk] Custom Subject rules not being picked up

2004-01-20 Thread David Logan
Thanks guys.. Made the change and also I run spamassassin with mimedefang and I reread the mimedefang file - now seems to work !! Cheers. -Original Message- From: Jennifer Wheeler [mailto:[EMAIL PROTECTED] Sent: 20 January 2004 14:32 To: [EMAIL PROTECTED] Subject: RE: [SAtalk] Custom

[SAtalk] Schools Slapped? FVGT

2004-01-20 Thread Scott Williams , Area4
I just started using the FVGT rules and got this FP. Do I understand this right, the rule below penalizes (scores high) anyone with a .us domain? Many schools across the country use the .k12.ss.us format where ss is their state two letter identifier. thanks SCott 2.4 FVGT_u_BZ_TLD

[SAtalk] reaor2 failure

2004-01-20 Thread Michael H. Collins
I am trying to install 2.62 and razor 2 is giving the error below. CPAN won't install without force it says. I dont want to force anything. I have the newest razor and it is patched. t/razor2..FAILED test 1 Failed 1/2 tests, 50.00% okay Thanks. -- Michael H. Collins

[SAtalk] [Fwd: failure notice]

2004-01-20 Thread Ron Palmer
Forwarded to [EMAIL PROTECTED] Please include me in your reply as I am not yet subscribed. Cheers, Ron [EMAIL PROTECTED] -Forwarded Message- From: Ron Palmer [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: spamassassin and evolution Date: Tue, 20 Jan 2004 11:05:55 +1100 here is a

[SAtalk] Spam Assassin Problems

2004-01-20 Thread Marc Morgan
Hi There, I have been trying to install spam assassin on my OpenBSD3.1 machine. Qmail is installed and has been patch with QMAILQUEUE. I installed the latest version, but had errors when starting spamd or spamassassin so i downloaded the latest version 2.70 and installed that, but still get

[SAtalk] Missing Spam Headers? Why?

2004-01-20 Thread Jae Chang
Title: Message Hi, I am noticing a disturbing trend within the past month. I'm noticing mails coming thru without any of the normal Spam headers, such as: X-Spam-Checker-Version:X-Spam-Level:X-Spam-Status: These mails inevitably are *never* caught as spam. I can't even check what score they

Re: [SAtalk] Schools Slapped? FVGT

2004-01-20 Thread Matt Kettler
At 08:49 AM 1/20/04 -0600, Scott Williams , Area4 wrote: I just started using the FVGT rules and got this FP. Do I understand this right, the rule below penalizes (scores high) anyone with a .us domain? Yes, but it only penalizes them when used in a web-page link. Your From: address, etc won't

RE: [SAtalk] Schools Slapped? FVGT

2004-01-20 Thread Chris Santerre
-Original Message- From: Scott Williams , Area4 [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 20, 2004 9:50 AM To: [EMAIL PROTECTED] Subject: [SAtalk] Schools Slapped? FVGT I just started using the FVGT rules and got this FP. Do I understand this right, the rule below

[SAtalk] broken MIME in messages to this list

2004-01-20 Thread Marcus Frischherz
Hi! I am using SA with exiscan-acl (probably should post to some exiscan mailing list) and I am subscribed here. I keep getting messages from thhis group, which trigger de MIME syntax error check of exiscan-acl: 2004-01-20 16:10:05 1AixW1-0002fD-8I demime acl condition: uuencoded line length is

Re: [SAtalk] SpamAssassin checks on Received headers (and RBL's such as RCVD_IN_SORBS)

2004-01-20 Thread Ralf Vitasek
Matt Kettler wrote: At 09:02 PM 1/19/04 +0100, Anders Sveen wrote: I'm actually listed because it originates from a dynamic ip-range. Nothing more. It surprises me that they lists ip's for only beeing dynamic, but then I discovered the way RBLs are being used by mailservers and then it

Re: [SAtalk] V-drug spam gets *0* hits on SA 2.55

2004-01-20 Thread AltGrendel
On Tue, 2004-01-20 at 07:53, Christopher X. Candreva wrote: On Tue, 20 Jan 2004, Scott A Crosby wrote: Read it and weep. :( This looks very similar to the one I posted about yesterday. See this mbox: http://www.westnet.com/~chris/Spam0118 I would try the antidrug.cf at

Re: [SAtalk] [Fwd: failure notice]

2004-01-20 Thread Douglas Kirkland
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 here is a mystery... Both my wife and I use spamassassin from within evolution by piping emails to spamc -c and checking for the return value to classify as spam or not, as written up by others. When running evolution and spamassassin on my

RE: [SAtalk] 7245 Habeas and counting

2004-01-20 Thread Kang , Joseph S.
-Original Message- From: Paul Barbeau [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 20, 2004 5:48 AM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] 7245 Habeas and counting I as well have gotten alot and want to set it to 0 and exlude it from bayes. So just to confirm i enter

RE: [SAtalk] Turning off Habeas?

2004-01-20 Thread Alan Munday
Does this not boil down to the globally effective legal footprint for Habeas? That is if you are a spammer and originate from outside this footprint you won't have any problems abusing the mark. My 0.02 English pence worth. Alan -Original Message- From: [EMAIL PROTECTED]

[SAtalk] changing the description text of tagged messages

2004-01-20 Thread Ricardo Kleemann
Hi, How can I change the text that is included in tagged messages, that includes the servername and also includes my email address? So for example, it currently states: Spam detection software, running on the system server2, has identified this incoming email as possible spam. The original

Re: [SAtalk] Spam Assassin Problems

2004-01-20 Thread Douglas Kirkland
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tuesday 20 January 2004 05:06, Marc Morgan wrote: Hi There, I have been trying to install spam assassin on my OpenBSD3.1 machine. Qmail is installed and has been patch with QMAILQUEUE. I installed the latest version, but had errors when

Re: [SAtalk] Turning off Habeas?

2004-01-20 Thread Douglas Kirkland
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tuesday 20 January 2004 07:45, Alan Munday wrote: Does this not boil down to the globally effective legal footprint for Habeas? That is if you are a spammer and originate from outside this footprint you won't have any problems abusing the

[SAtalk] One that got through

2004-01-20 Thread Jonathan Nichols
http://www.pbp.net/~jnichols/spam.txt It also slipped right by Mailscanner on another host, but I'm surprised that it scored 0.0 on my SA setup (backhair, weeds, everything in rules_du_jour) --- The SF.Net email is sponsored by EclipseCon

Re: [SAtalk] changing the description text of tagged messages

2004-01-20 Thread Matt Kettler
At 10:50 AM 1/20/2004, Ricardo Kleemann wrote: Hi, How can I change the text that is included in tagged messages, that includes the servername and also includes my email address? perldoc Mail::SpamAssassin::Conf see the report and clear_report_template options. (note: don't edit 10_misc.cf..

Re: [SAtalk] Header Test (RBL) Question

2004-01-20 Thread David Roback
Matt Kettler wrote: At 09:13 AM 1/20/04 -0500, David Roback wrote: debug: DNS MX records found: 0 snip Shouldn't I be seeing more than 1 query for all messages? Hmm.. looks like your DNS is flaking out.. I'm pretty sure you should always have at least one MX success from the DNS_AVAILABLE

Re: [SAtalk] SA Rule idea: whois

2004-01-20 Thread Sylvain Robitaille
On Mon, 19 Jan 2004, Brad Koehn wrote: I'm sure the something like URI::URL could be used to get the host of the URLs, and that could in turn be fed to a whois server (although how one chooses between ARIN, APNIC, and the like I'm not yet sure). I recently wrote a script to automate spam

RE: [SAtalk] Turning off Habeas?

2004-01-20 Thread Terry Shows
FYI: I checked my SPAM Rejection log, and found two occurrences this morning where a spammer put the Hebeas headers in the email, but it was classified as SPAM anyway (scores of 30+ each). This appears to confirm that spammers are trying to use this as their path into our email box. I think I

[SAtalk] Seen this?! bad protocol: header error: (User header contains control chars)

2004-01-20 Thread Jae Chang
Title: Message Was... Missing Spam Headers? Why? Thanks for the advice. I've got the spamd log analyzers bookmarked. However, upon further inspection, this is the reason why these mails are coming thru without being processed. I'm getting a lot of these log entries. The below is for just

Re: [SAtalk] One that got through

2004-01-20 Thread Martin Hepworth
Jonathan Nichols wrote: http://www.pbp.net/~jnichols/spam.txt It also slipped right by Mailscanner on another host, but I'm surprised that it scored 0.0 on my SA setup (backhair, weeds, everything in rules_du_jour) --- The SF.Net email is

[SAtalk] Enable localized rule descriptions

2004-01-20 Thread Christopher Kunz
Hi, just a quick question: How do I enable localized rule descriptions? There's a lot of german rule descriptions in the stock SA distribution, but they're not used on my (german) mail server setup. Do I miss a point? --ck --- The SF.Net

Re: [SAtalk] Where to put new rules...

2004-01-20 Thread Adam D. Lopresto
On Mon, 19 Jan 2004, Ron Gilbert wrote: I have two questions: 1) Where do i put new rules, or changes to scores. I have heard several different things, and I'm sure there are reason for each, but i can't figure it out. As far as i ca tell, there is (RH9): They have different purposes.

[SAtalk] SA-learn with multiple users

2004-01-20 Thread Kenneth Andresen
Hello all, I want to use Bayesian Rules on all incoming mails for all users on our server, however am not entirely sure how to do it as the 100+ mail accounts we have are not in use by an homogenous group... As I understand it, using SA-learn needs both good and bad e-mails to work properly, and

[SAtalk] [RD] Antidrug 0.3 posted

2004-01-20 Thread Matt Kettler
Changes: -now catches some gapped-and-obfuscated v-words. on a test-list of 100 v-word spellings v 0.2 caught 37 of them. v 0.3 catches 65. more improvements in the works. (thanks for the list Gary) comments at top have a link to where the file comes from The ruleset is located at:

[SAtalk] SA-learn with multiple users

2004-01-20 Thread Kenneth Andresen
Hello all, I want to use Bayesian Rules on all incoming mails for all users on our server, however am not entirely sure how to do it as the 100+ mail accounts we have are not in use by an homogenous group... As I understand it, using SA-learn needs both good and bad e-mails to work properly, and

RE: [SAtalk] SpamAssassin checks on Received headers (and RBL's such as RCVD_IN_SORBS)

2004-01-20 Thread Mitch \(WebCob\)
Morning Ralf. Matt has a problem that I think is specifically caused because his server is Nated. He had to add the private network to his trusted networks list. I don't have that problem, and Theo acknowleges that there is a bug that should be fixed in 2.70. I haven't heard a definite schedule

Re: [SAtalk] One that got through

2004-01-20 Thread Christopher X. Candreva
On Tue, 20 Jan 2004, Jonathan Nichols wrote: http://www.pbp.net/~jnichols/spam.txt That's really odd, here it tripped a DATE_IN_PAST rule. Here's the report: Content analysis details: (12.4 points, 5.0 required) pts rule name description --

[SAtalk] Subjects not marked as spam anymore

2004-01-20 Thread Pat Traynor
When I initially installed Spamassassin, it would alter the spam's subject line if I choosed to receive the spam. My message subjects would look something like this: Subject: **SPAM** fwd: something something something Subject: **SPAM** Re: something else something else ...etc.

Re: [SAtalk] One that got through

2004-01-20 Thread Jonathan Nichols
Jonathan Worth changing the X-MailScanner header stuff to be X-%org-name%-Mailscanner in the MailScanner.conf. This was introduced at MS 4.24 (I think) as one of the virus's at the time was putting this in the header to stop MS hosts virus scanning the email! The other headers in there look

Re: [SAtalk] SA Rule idea: whois

2004-01-20 Thread JRiley
I'd be interested in seeing that scriptcan you be persuaded to share with the class? g -JR snip I recently wrote a script to automate spam complaints to the contact address(es) of the previous hop before my mail servers, using both a Whois lookup by IP address (see Net-Whois-IP-0.35 Perl

[SAtalk] URI Rules

2004-01-20 Thread Dan Kennedy
How efficient are URI rules? I am probably going to have several hundred of these rules, and I'm wondering if that will cause a problem. I'm guessing I will have between 300 and 600 rules. Is anyone else running this many URI rules? And does it cause any big performance issues? The rules won't

[SAtalk] mdpillsource.com using trojaned machines.....

2004-01-20 Thread Chris Santerre
I've been tagging a lot of mdpillsource.com spam. They don't hit bigevil because there is no URI in the text format. However the spam hits a ton of other rules. One thing I noticed is this spammer must be using trojaned machines. THe last one came in from: dhcp-v53-89.cudenver.edu

Re: [SAtalk] changing the description text of tagged messages

2004-01-20 Thread JRiley
snip How can I change the text that is included in tagged messages, that includes the servername and also includes my email address? If you got a Windows box, Michael Bell (Guinevere), has created a usefull win32 app called SAConf , for configuring your SpamAssassin systems.

[SAtalk] Incoming messages only?

2004-01-20 Thread Ben Hanson
This seems like one of those questions that probably resurfaces regularly, and for which the answer is probably buried somewhere obvious, but nonetheless, I have been unable to find out how to easily limit Spamassassin's testing and filtering to mail delivered to local addresses. I don't

Re: [SAtalk] Enable localized rule descriptions

2004-01-20 Thread Matt Kettler
If you want your server to be in german, tell it. export LANG=de note: this may affect other programs on the system that are language-smart as well. At 12:01 PM 1/20/2004, Christopher Kunz wrote: just a quick question: How do I enable localized rule descriptions? There's a lot of german rule

Re: [SAtalk] One that got through

2004-01-20 Thread Jonathan Nichols
5.4 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 1.] 1.1 RAZOR2_CF_RANGE_51_100 BODY: Razor2 gives confidence between 51 and 100 [cf: 100] 1.0 RAZOR2_CHECK Listed in Razor2

Re: [SAtalk] SA-learn with multiple users

2004-01-20 Thread Matt Kettler
At 12:14 PM 1/20/2004, Kenneth Andresen wrote: Will SA-learn filter all mails for everybody using the same rules, or how can it work with different rule set for each user/mail account? by default bayes databases and rulesets are specific to the user that executes SA (note: that's execution, which

Re: [SAtalk] Subjects not marked as spam anymore

2004-01-20 Thread Matt Kettler
At 12:24 PM 1/20/2004, Pat Traynor wrote: Spamassassin a couple of times, and I have to suspect that a new version changed things. Is this something that I can configure somewhere? start off with spamassassin --lint I suspect you've got some old and invalid things like defang_mime that are

Re: [SAtalk] URI Rules

2004-01-20 Thread Matt Kettler
sounds like you're making your own version of bigevil.cf. Chris S found that memory usage was greatly reduced by using regex combos to reduce the number of rules. At 12:31 PM 1/20/2004, Dan Kennedy wrote: How efficient are URI rules? I am probably going to have several hundred of these rules,

Re: [SAtalk] Incoming messages only?

2004-01-20 Thread Evan Platt
--On Tuesday, January 20, 2004 12:39 PM -0500 Ben Hanson [EMAIL PROTECTED] wrote: This seems like one of those questions that probably resurfaces regularly, and for which the answer is probably buried somewhere obvious, but nonetheless, I have been unable to find out how to easily limit

Re: [SAtalk] changing the description text of tagged messages

2004-01-20 Thread Andy Donovan
There is still ( I believe ) a couple of problems were it capitalizes the word BAYES_ on a couple of lines and I believe he is away on vacation for another week .. although I still see activity in the support forums from him otherwise it is a good tool for those of us on a win32

Re: [SAtalk] SA Rule idea: whois

2004-01-20 Thread Sylvain Robitaille
On Tue, 19 Jan 2004, JRiley wrote: I'd be interested in seeing that scriptcan you be persuaded to share with the class? g Of course. In an effort to avoid bothering others on the list who may not be interested, I've placed it at http://alcor.concordia.ca/~syl/packages/spambounce.pl

Re: [SAtalk] Enable localized rule descriptions

2004-01-20 Thread Ralf Vitasek
if export LANG=de doesnt work try export [EMAIL PROTECTED] regards ralf Christopher Kunz wrote: Hi, just a quick question: How do I enable localized rule descriptions? There's a lot of german rule descriptions in the stock SA distribution, but they're not used on my (german) mail server

Re: [SAtalk] SA Rule idea: whois

2004-01-20 Thread Sylvain Robitaille
(followup to my own message ...) On Tue, 20 Jan 2004, Sylvain Robitaille wrote: http://alcor.concordia.ca/~syl/packages/spambounce.pl Sorry! I'd forgotten about the redirection from there to my home web server. I've now made sure the script is available via the above URL ... Anyone who

[SAtalk] Configure Alt-N Mdaemon's SpamAssassin?

2004-01-20 Thread Evan Platt
I've talked to a few people running Alt-N Mdaemon, and I'd like to run it at home... It appears it uses SpamAssassin (version 2.55 according to the headers). And while I like it that it's integrated, I'd rather have more control over it. Does anyone know if it's possible to configure the SA in

Re: [SAtalk] URI Rules

2004-01-20 Thread Kelson Vibber
At 09:31 AM 1/20/2004, Dan Kennedy wrote: The rules won't have any wildcards, just basically a big blacklist of URLs found in SPAM. You might want to look into Chris Santerre's BigEvil ruleset before you reinvent the wheel: http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm Kelson

[SAtalk] Bigevil update 2.06L

2004-01-20 Thread Chris Santerre
Just posted 2.60L. http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf Chris Santerre System Admin and SA Custom Rules Emporium keeper http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm 'It is not the strongest of the species that survives, not the most intelligent, but the

Re: [SAtalk] SA Rule idea: whois

2004-01-20 Thread Derek Harding
On Mon, 2004-01-19 at 18:01, Brad Koehn wrote: I've been thinking about a new rule, either for Bayes or for more normal processing, and I'd like the group's opinion. It has to do with URLs in the message. My original thought came to me when running SpamCop on a bunch of messages. Taking

Re: [SAtalk] Incoming messages only?

2004-01-20 Thread Morris Jones
On Tue, 20 Jan 2004, Ben Hanson wrote: I have been unable to find out how to easily limit Spamassassin's testing and filtering to mail delivered to local addresses. If you use the howto on spamassassin with virus filtering from advosys.ca, that is what you get. I did the same thing, and

[SAtalk] Automated ruleset download

2004-01-20 Thread JRiley
Just curious, if there is a script (be it perl or otherwise), that anyone has written, that will perform an automated 'download' of the different SARE (or other) SA rulesets? I wouldn't think this would too difficult to do, and have a scheduled restart of the MTA calling SA to implement it.

RE: [SAtalk] Custom Subject rules not being picked up

2004-01-20 Thread Chris Thielen
On Tue, 2004-01-20 at 14:41, David Logan wrote: Thanks guys.. Made the change and also I run spamassassin with mimedefang and I reread the mimedefang file - now seems to work !! Cheers. Example: header SUBJECT_VICODIN Subject =~ /\bvicodin\b/ describe SUBJECT_VICODIN Mentions vicodin

[SAtalk] fresh installation not working (yp_match: clnt_call: RPC: timed out)

2004-01-20 Thread Fernan Aguero
Hi, I just installed SpamAssassin-2.6.1 under FreeBSD-4.9. Installation was from the FreeBSD ports collection. I have not configured anything yet. I just opened INSTALL and USAGE and went through the steps listed there. It appears that, because I've installed SpamAssassin from ports, everything

[SAtalk] An automated way to keep upwith the latest rulesets

2004-01-20 Thread Gary Smith
-Original Message- From: [EMAIL PROTECTED] on behalf of Chris Petersen Sent: Sat 1/17/2004 9:54 PM To: [EMAIL PROTECTED] Cc: Subject: Re: [SAtalk] Ann: Rules De Jour: An automated way to keep upwith the latest rulesets

RE: [SAtalk] Automated ruleset download

2004-01-20 Thread Gary Smith
Yes, check the archives for an email from me (bigevil update) or Chris Peterson (all updates -ge, cp, weeds, etc). These were topics last week and last month -Original Message- From: [EMAIL PROTECTED] on behalf of JRiley Sent: Tue 1/20/2004 10:52 AM

RE: [SAtalk] Automated ruleset download

2004-01-20 Thread Chris Santerre
http://sandgnat.com/cmos/rules_du_jour I save WY to many emails :) --Chris -Original Message-From: JRiley [mailto:[EMAIL PROTECTED]Sent: Tuesday, January 20, 2004 1:52 PMTo: [EMAIL PROTECTED]Subject: [SAtalk] Automated ruleset download Just curious, if there is a

Re: [SAtalk] One that got through

2004-01-20 Thread Chris Thielen
On Tue, 2004-01-20 at 16:12, Jonathan Nichols wrote: http://www.pbp.net/~jnichols/spam.txt It also slipped right by Mailscanner on another host, but I'm surprised that it scored 0.0 on my SA setup (backhair, weeds, everything in rules_du_jour) FWIW, here's what it scored on my system:

Re: [SAtalk] Automated ruleset download

2004-01-20 Thread AltGrendel
On Tue, 2004-01-20 at 13:52, JRiley wrote: Just curious, if there is a script (be it perl or otherwise), that anyone has written, that will perform an automated 'download' of the different SARE (or other) SA rulesets? I wouldn't think this would too difficult to do, and have a scheduled

Re: [SAtalk] fresh installation not working (yp_match: clnt_call: RPC: timed out)

2004-01-20 Thread Fernan Aguero
+[ To [EMAIL PROTECTED] [EMAIL PROTECTED] (20.Jan.2004 16:09): | [snipped] | In case it's useful I have run the same example, now adding | -D to collect more debug info. I am attaching the output. Sorry, forgot to attach the file. It is attached to this message. | +] -- F e r n a n

Re: [SAtalk] Automated ruleset download

2004-01-20 Thread JRiley
Thanks for all the replies.. I checked the archive, (like i should have before posting, i know i know..).. -JR www.spamfighter.org snip RulesDeJour handles updating the add-on rulesets: http://www.exit0.us/index.php/RulesDeJour There's no good way to auto-update the main ruleset.. upgrading

Re: [SAtalk] Configure Alt-N Mdaemon's SpamAssassin?

2004-01-20 Thread Chris Thielen
On Tue, 2004-01-20 at 18:12, Evan Platt wrote: I've talked to a few people running Alt-N Mdaemon, and I'd like to run it at home... It appears it uses SpamAssassin (version 2.55 according to the headers). And while I like it that it's integrated, I'd rather have more control over it. Does

Re: [SAtalk] Bayes mis-learning problem

2004-01-20 Thread Ross Vandegrift
On Mon, Jan 19, 2004 at 08:35:28PM -0800, Justin Mason wrote: Actually, it works quite well. Some people get more spam than ham to specific To addrs, so those become spam signs -- but once a ham arrives at those addrs, the ham signs outweigh the To spam-sign and redeem the mail. In theory, I

Re: [SAtalk] Automated ruleset download

2004-01-20 Thread Matt Kettler
At 01:52 PM 1/20/2004, JRiley wrote: Just curious, if there is a script (be it perl or otherwise), that anyone has written, that will perform an automated 'download' of the different SARE (or other) SA rulesets? I wouldn't think this would too difficult to do, and have a scheduled restart of

Re: [SAtalk] Turning off Habeas?

2004-01-20 Thread Scott Lambert
On Tue, Jan 20, 2004 at 10:43:05AM -0600, Terry Shows wrote: FYI: I checked my SPAM Rejection log, and found two occurrences this morning where a spammer put the Hebeas headers in the email, but it was classified as SPAM anyway (scores of 30+ each). This appears to confirm that spammers

[SAtalk] List moderation and spam removal

2004-01-20 Thread Sean McCrohan
I moderate a mailing list that's hosted off of a third-party server to which I don't have direct access (beyond the simplistic web-interface of the list-management software). The list is (and must be) open to mail from non-members, and thus collects huge amounts of spam. My plan for fixing this

Re: [SAtalk] /etc/mail/spamassassin/local.cf is ignored

2004-01-20 Thread Scott Lambert
On Tue, Jan 20, 2004 at 07:35:04AM +0100, Claude Frantz wrote: John A. Hengstler wrote: I have noticed this as well. I am using spamd on a separate server, and local.cf on that server is ignored. I can put rules into /usr/local/share/spamassasin and the pull in just fine. But

RE: [SAtalk] Subjects not marked as spam anymore

2004-01-20 Thread Webmaster
I have had SpamAssassin running with my Qmail for about a week now, and have yet to see any mail come through marked with *SPAM* -- even after I set the level to 3! It appears to be running, but doesn't seem to be doing anything, and I'm still getting dozens of spams in my personal mailbox

RE: [SAtalk] Subjects not marked as spam anymore

2004-01-20 Thread Pete Henshall
I have had SpamAssassin running with my Qmail for about a week now, and have yet to see any mail come through marked with *SPAM* -- even after I set the level to 3! It appears to be running, but doesn't seem to be doing anything, and I'm still getting dozens of spams in my personal

RE: [SAtalk] Subjects not marked as spam anymore

2004-01-20 Thread Evan Platt
--On Tuesday, January 20, 2004 12:02 PM -0800 Webmaster [EMAIL PROTECTED] wrote: I have had SpamAssassin running with my Qmail for about a week now, and have yet to see any mail come through marked with *SPAM* -- even after I set the level to 3! It appears to be running, but doesn't

  1   2   >