[SAtalk] amavislogsumm

2004-01-21 Thread Sascha Hüdepohl
Hi, i wrote a litle Perlscript. It counts detected Spam and Viruses from amavis.log and creates a litle report about Spam by Sender Spam by Recipient If you are interested you can download it from: http://homepages.hs-bremen.de/~renegat/amavislogsumm regards sascha

[SAtalk] Local rules apparently not working

2004-01-21 Thread ROGERS Richard
Title: Message Hi - Apologies for what is probably an awful newbie blunder, but... I have installedMailScanner with SpamAssassin (no spamd) on RedHat Linux, and now I'm trying to get some local rules going, so I edited /etc/mail/spamassassin/local.cf to contain lines like the following:

[SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Spyros Tsiolis
Hello list ! I am kinda new here chaps, so please bare with me. A simple question (which I didn't pose on the xmail forum in case I get flamed/cursed) :-) From what it seems, one must let spamassassin know of what to filter as spam mail; So far so good. It also looks like one has to invoke a

[SAtalk] This spam scores too low

2004-01-21 Thread Jürgen R. Plasser
Hi all, in the last view days I experienced some (for me) strange kind of spam. The first part of the email is a random text (that's what I see in my email client when opening the email): snip embedding rose abalone freedman havana bayport regretful menlo gate blomquist force parasitic

[SAtalk] Recieved From database

2004-01-21 Thread Christian Nygaard
It would be nice if one could take into account a Spam probability also based from the originating Received From: header lines. I.e. I would want to have a whitelist of known good mail servers and assign them a negative score test value and a have a blacklist which is assigned a positive score.

Re: [SAtalk] Local rules apparently not working

2004-01-21 Thread Giovanni Carbone
At 10.48 21/01/2004 +, ROGERS Richard wrote: each time re-starting MailScanner (and I believe by implication SpamAssassin, since it runs as part of MailScanner rather than as a separate process) and sendmail. I'm sure I'm missing something obvious - but what? MailScanner uses it's own

Re: [SAtalk] amavislogsumm

2004-01-21 Thread Sascha Hüdepohl
* Jim Knuth ([EMAIL PROTECTED]) wrote: Hallo und guten Tag Sascha, danke für die Email, die Du am 21.01.2004 um 11:07 schriebst - you wrote: Hi, i wrote a litle Perlscript. It counts detected Spam and Viruses from amavis.log and creates a litle report about Spam by Sender Spam by

RE: [SAtalk] Local rules apparently not working

2004-01-21 Thread ROGERS Richard
Title: Message That's got it working - about as basic as I thought ;-) Thanks (or should I say grazie?) Richard -Original Message-From: Giovanni Carbone [mailto:[EMAIL PROTECTED] Sent: 21 January 2004 11:24To: [EMAIL PROTECTED]Subject: Re: [SAtalk] Local rules

Re: [SAtalk] This spam scores too low

2004-01-21 Thread Ralf Vitasek
Hi Jürgen! you need some rules for SA which can detect obfuscated spellings of those keywords like vagira, cilais a.s.o. heres a sample rule i normally use for such words body MY_OBF1 /((?!*censored*)(?:(?:[EMAIL PROTECTED]|@])|(?:v\W*[i|1]\W*[a|@]\W*g\W*r\W*[a|@])))/i describe MY_OBF1 body:

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread AltGrendel
On Tue, 2004-01-20 at 18:28, Fred wrote: I can not imagine what it would be like to work for an abuse dept. at an internet company and receive hundreds or thousands of complaints about customers computers being hijacked or turned into spam zombies. Non-original joke: I think that job is

Re: [SAtalk] SpamAssassin checks on Received headers (and RBL's such as RCVD_IN_SORBS)

2004-01-21 Thread Matt Kettler
At 04:33 PM 1/20/04 +0100, Ralf Vitasek wrote: i tested many things with the trusted users settings and googled around but i had no luck so far. except that i stumbled on a posting from this lists archive that makes me think that something is broken and that it would be fixed in the upcoming

Re: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Bob Apthorpe
Hi, On Wed, 21 Jan 2004 10:51:12 + Spyros Tsiolis [EMAIL PROTECTED] wrote: Hello list ! I am kinda new here chaps, so please bare with me. A simple question (which I didn't pose on the xmail forum in case I get flamed/cursed) :-) This list is usually civil, probably the most polite

Re: [SAtalk] This spam scores too low

2004-01-21 Thread Matt Kettler
At 11:56 AM 1/21/04 +0100, Jürgen R. Plasser wrote: Is there any way to get rid (say: score 5) of those mails with SA? Some rules? I have SA 2.61 and the latest Bigevel rules installed. Well, antidrug is a good start. http://mywebpages.comcast.net/mkettler/sa/antidrug.cf

Re: [SAtalk] bayes should ignore habeas headers?

2004-01-21 Thread Matt Kettler
At 12:37 AM 1/21/04 -0500, Pedro Sam wrote: My question, should bayes ignore the habeas headers by default? Perhaps not by default, but right now it's probably a good idea. In general, any sudden shift of behavior from something commonly seen only in nonspam to commonly seen in both causes

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Fred
AltGrendel wrote: On Tue, 2004-01-20 at 18:28, Fred wrote: I can not imagine what it would be like to work for an abuse dept. at an internet company and receive hundreds or thousands of complaints about customers computers being hijacked or turned into spam zombies. Non-original joke: I

Re: [SAtalk] 'spamassassin -d' not stripping SA reports from email

2004-01-21 Thread Matt Kettler
At 10:41 PM 1/20/04 -0600, C. Bensend wrote: Is the problem that I'm _forwarding_ the tagged emails from one host to the other? I don't have the capability to bounce, I can only forward. A forwarded message is a brand new message. That brand new message is NOT sa tagged, even though it may

[SAtalk] Another one for BigEvil

2004-01-21 Thread Rubin Bennett
Sneaky bastard... got through with a 4.7 -- Rubin Bennett [EMAIL PROTECTED] RB Technologies ---BeginMessage--- Page loading Image not loading? View message here.Discontinue iJadp0tVrCS/91fN6/XSvXW0yL/QI1S0R9f/xKf7i/oMe1w/ dlfx ytou, xjjk, biieve . cpsd aflrkw kmwdc, tcb, owf . ejujzy rbhti

Re: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Brad Hazledine
On Wed, 21 Jan 2004, Spyros Tsiolis wrote: Hello list ! Hello. I am kinda new here chaps, so please bare with me. A simple question (which I didn't pose on the xmail forum in case I get flamed/cursed) :-) From what it seems, one must let spamassassin know of what to filter as spam

Re: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread John Fleming
This list is usually civil, probably the most polite of any of the anti-spam lists I'm on. Don't suggest that SpamAssassin should delete mail automatically and you'll be fine. :) And don't top-post. :) It also looks like one has to invoke a special format of expressions (regex's?) to

Re: [SAtalk] 'spamassassin -d' not stripping SA reports from email

2004-01-21 Thread C. Bensend
A forwarded message is a brand new message. That brand new message is NOT sa tagged, even though it may contain some SA markups because the other message was tagged. Ah, that would certainly explain it. Thanks for the info, Matt. :) I'll just have to figure out some other way of doing it,

[SAtalk] Upgrading from 2.60 to 2.63

2004-01-21 Thread SAtalk Mail User
Hello All, Here is a question that might seem easy to most. I am running spamassassin 2.60 and would like to upgrade to 2.63. What are some of the issues that I have to be aware of? I am fairly new to spamassassin and I would like a seemless upgrade to ensure that I do not ruin the current

[SAtalk] Spelling mistakes in spam

2004-01-21 Thread Nicholson, Rob
Title: Spelling mistakes in spam Hi, We've been looking and trialling No Spam Today which is based upon spamassasin. When we first tried it, it was catching probably 99% of all spam. However, over the past three months this figure has decreased noticeably. It appears to be because spammers

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Chris Santerre
-Original Message- From: Fred [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 21, 2004 9:39 AM To: AltGrendel; Spamassassin-Talk (E-mail) Subject: Re: [SAtalk] [OT] - The current state spam. AltGrendel wrote: On Tue, 2004-01-20 at 18:28, Fred wrote: I can not imagine

[SAtalk] Spamassassin on Suse 9.0?

2004-01-21 Thread Paul Hutchings
Looking at changing from Redhat 9.0 to new hardware and thought given the redhat/fedora support/lifespam issues I'd look at Suse.. seems well regarded, well supported and has newbie-friendly admin tools even in console mode.. Any thoughts on the simplest way of installing spamassassin _and_

Re: [SAtalk] Spelling mistakes in spam

2004-01-21 Thread Matt Kettler
At 09:51 AM 1/21/2004, Nicholson, Rob wrote: We've been looking and trialling No Spam Today which is based upon spamassasin. When we first tried it, it was catching probably 99% of all spam. However, over the past three months this figure has decreased noticeably. It appears to be because

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Pierre Thomson
It's not strictly a spam measurement, but www.senderbase.org has excellent real-time lists of outbound mail volume by ISP and IP address. Pierre -Original Message- From: Chris Santerre [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 21, 2004 10:08 AM To: 'Fred'; AltGrendel;

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Pierre Thomson
-Original Message- From: Chris Santerre [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 21, 2004 10:08 AM To: 'Fred'; AltGrendel; Spamassassin-Talk (E-mail) Subject: RE: [SAtalk] [OT] - The current state spam. -Original Message- From: Fred [mailto:[EMAIL PROTECTED]

[SAtalk] BigEvil Scoring

2004-01-21 Thread Rose, Bobby
Is there an easy way of changing the BigEvil Scores without modifying bigevil.cf which gets updated a lot? And without duplicating them into local.cf. -=B --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools

Re: [SAtalk] Turning off Habeas?

2004-01-21 Thread Jérémy JUST
On Tue, 20 Jan 2004 14:23:44 -0600 Kang , Joseph S. [EMAIL PROTECTED] wrote: The HABEAS_VIOLATOR test is nice for those sites that also have SA do network tests. MINE DOESN'T. For next runs of GA, maybe HABEAS rules should have four scores. So we could have something like: score HABEAS_SWE

Re: [SAtalk] Another one for BigEvil

2004-01-21 Thread AltGrendel
On Wed, 2004-01-21 at 09:33, Rubin Bennett wrote: Sneaky bastard... got through with a 4.7 Chris: Would you prefer that we email you this stuff offlist? I have a few too, but I don't want to contribute to the line noise on this list. -- AltGrendel [EMAIL PROTECTED]

Re: [SAtalk] Enable localized rule descriptions

2004-01-21 Thread Stefan Hornburg
On Tue, 20 Jan 2004 12:46:38 -0500 Matt Kettler [EMAIL PROTECTED] wrote: If you want your server to be in german, tell it. export LANG=de note: this may affect other programs on the system that are language-smart as well. Yes, but you change this in the init script, e.g. case $1 in

[SAtalk] Not able to run sa-learn

2004-01-21 Thread Jody Cleveland
Hello, I'm running spamassassin 2.62 with MailScanner on redhat 9. What I'm trying to run is this: sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --spam --mbox /var/spool/mail/bayes But, it just sits there. Sa-learn --rebuild and --force-expire work fine. When I first upgraded from 2.61

Re: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread AltGrendel
On Wed, 2004-01-21 at 09:38, Brad Hazledine wrote: On Wed, 21 Jan 2004, Spyros Tsiolis wrote: Hello list ! Hello. I am kinda new here chaps, so please bare with me. A simple question (which I didn't pose on the xmail forum in case I get flamed/cursed) :-) From what it seems,

[SAtalk] Spam Assassin as a Filter then Forward Mail to MS Exchange

2004-01-21 Thread Dustin O Williams
I have a RedHat 9.0 box that I want to turn into a Spam Filtering Device. Basically all that I want the RedHat box to do is: 1). take in the emails, 2). then filter them with Spam Assassin, 3). mark the subject lines as *** SPAM ***, 4). and finally pass all of the emails to my MS Exchange

[SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
Hello spam peeps Well I was going to hold off posting this until I had the time to edit the page explaining the Rule Sets, but I got a spam this morning, tagged only by this updated Backhair Set. I was irked enough (thinking these spams might be getting through on other machines) that I will go

Re: [SAtalk] BigEvil Scoring

2004-01-21 Thread Chris Thielen
Yes: http://www.exit0.us/index.php/RulesDuJourMungeScripts On Wed, 2004-01-21 at 09:16, Rose, Bobby wrote: Is there an easy way of changing the BigEvil Scores without modifying bigevil.cf which gets updated a lot? And without duplicating them into local.cf. -=B

RE: [SAtalk] Spam Assassin as a Filter then Forward Mail to MS Ex change

2004-01-21 Thread Paul Hutchings
http://postfix.cnc.bc.ca/twiki/bin/view/Main/SpamAssassinTaggingOnly is what I use with Postfix to do pretty much the same thing. Very simple and it works. regards, Paul -- Paul Hutchings Network Administrator, MIRA Ltd. Tel: 44 (0)24 7635 5378, Fax: 44 (0)24 7635 8378 mailto:[EMAIL PROTECTED]

[SAtalk] RE: auto_learn question

2004-01-21 Thread Alex S Moore
I get over 50 spam messages every day and a lot of valid mail, which is usually whitelisted. I see, at most, one spam message that gets through every 2 or 3 weeks. Excellent job, SA team! I train Bayes on all spam regularly and I want to use auto_learn to train Bayes when the score is over 9.

[SAtalk] missed spam?

2004-01-21 Thread Paul Diaguila
Greetings We're seeing lots of the =?iso in the header messages getting through. We have this rule in place: header SUBJECT_ENCODED_MY_TEST Subject:raw =~ /=\?.*\?=/i describe SUBJECT_ENCODED_MY_TEST Subject begins with =? scoreSUBJECT_ENCODED_MY_TEST 5.0 When I try to send a test

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread James
Not to flame anyone, but I sure do hope my isp never blocks ports. I don't pay for obstructed internet access. I do run a small mail server from my home dsl connection. I allow family members to use that to send to/from. The local cable provider here (Brighthouse) just about blocks all inbound

Re: [SAtalk] Recieved From database

2004-01-21 Thread Sylvain Robitaille
On Wed, 21 Jan 2004, Christian Nygaard wrote: It would be nice if one could take into account a Spam probability also based from the originating Received From: header lines. I.e. I would want to have a whitelist of known good mail servers and assign them a negative score test value and a have

Re: [SAtalk] More obfuscation

2004-01-21 Thread Charles Gregory
On Tue, 20 Jan 2004, Robert Menschel wrote: CS I'm not sure where the post is, but about 3 weeks ago I think Dallas CS put a semi-end to the spell-checker debate :) Perhaps I need to re-clarify. The idea is NOT to treat mis-spelled words as spam. The idea is to find specific 'close matches' to

RE: [SAtalk] Spam Assassin as a Filter then Forward Mail to MS Exchange

2004-01-21 Thread Dan Kennedy
Try MailScanner. That's what we use. It works well for just relaying mail onto an exchange server. Spamassassin ties into it, and it's pretty easy to configure. http://www.sng.ecs.soton.ac.uk/mailscanner/ -Original Message- From: Dustin O Williams [mailto:[EMAIL PROTECTED] Sent:

Re: [SAtalk] fresh installation not working (yp_match: clnt_call: RPC: timed out)

2004-01-21 Thread Eric W. Bates
I believe you have neglected to hook SA into your mail delivery path. There are a number of ways to do this; but the most straight forward is to use procmail and add a .forward and a .procmailrc file into your home directory. Fernan Aguero wrote: Hi, I just installed SpamAssassin-2.6.1 under

RE: [SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
OY! That set had the original testing scores. Fixed now. Sorry Haste = Bad said, if you use Backhair version 1.1 (just posted it) you no longer http://www.emtinc.net/spamhammers.htm Jenn/ifer -- 44 on new Backhair set ;) ...oooh the urge to say it! B..(cough cough) (cough cough

[SAtalk] SA missed an 'invisible font'?

2004-01-21 Thread Charles Gregory
X-Spam-Level: ** X-Spam-Status: No, hits=2.7 required=3.5 autolearn=no tests=HTML_20_30=0.474, HTML_FONT_BIG=0.1,HTML_MESSAGE=0.001,LOC_LOWPRICE=0.9, LOC_WEIGHTPATCH=1,RCVD_IN_NJABL=0.1,RCVD_IN_SORBS=0.1 Example HTML below. SA seems to have not recognized the EE font as

Re: [SAtalk] missed spam?

2004-01-21 Thread Matt Kettler
At 10:55 AM 1/21/2004, Paul Diaguila wrote: X-Spam-Score: 1.8 BAYES_30,HTML_60_70,HTML_IMAGE_ONLY_02,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,MSGID_GOOD_EXCHANGE,OACYS_CONS_6,RM_rb_ANCHOR,RM_rb_BODY,RM_rb_HTML,RM_sl_Parens,SUBJECT_ENCODED_MY_TEST What am I missing? What version of SA are you

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Chris Santerre
Yeah, we have had this same conversation on another list a week ago. We are saying by DEFAULT and ISP should block the ports, BUT it should be removed if asked, and FREE of charge. I'm sure the percentage of users who would request it would be like 5%. THen it would be easy to monitor traffic (not

Re: [SAtalk] fresh installation not working (yp_match: clnt_call: RPC: timed out)

2004-01-21 Thread Fernan Aguero
+[ Eric W. Bates [EMAIL PROTECTED] (21.Jan.2004 13:04): | | I believe you have neglected to hook SA into your mail delivery path. | There are a number of ways to do this; but the most straight forward is | to use procmail and add a .forward and a .procmailrc file into your home | directory.

[SAtalk] No To line in header

2004-01-21 Thread st semps
Can someone tell me how to look for no To or CC field in the header. I get several emails sent to me like this and would like to score them. Best I could come up with is ToCc !~ /To|cc/i Can someone tell me how Im suppose to do this. Regards Steve

[SAtalk] better whitelisting - using feedback?

2004-01-21 Thread Gary Funck
One of the speakers at Spamcon 2004, talked about the effectiveness of automatically generated white lists. As I recall, his scheme depended upon two sources of info: the mail addresses that typically appeared in your To: From: and Cc: lines in your corpus of ham, during training and

Re: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Matt Kettler
At 10:36 AM 1/21/2004, Jody Cleveland wrote: I'm running spamassassin 2.62 with MailScanner on redhat 9. What I'm trying to run is this: sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --spam --mbox /var/spool/mail/bayes But, it just sits there. Sa-learn --rebuild and --force-expire work

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Keith Dowell
I made this point on a mimedefang list. Some people didn't really like it. Computers are too complicated for people to be responsible some said. So I tried equating it to maintaining your car in that, if your car smokes and causes pollution - it is NOT the manufacturers responsibility to come

Re: [SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Chris Thielen
On Wed, 2004-01-21 at 15:40, Jennifer Wheeler wrote: I will update the page when I get some free time in the hopes of making this change more clear. I left Popcorn on there for now, but like I said, if you use Backhair version 1.1 (just posted it) you no longer (sniff sniff...) need

Re: [SAtalk] Per-user exceptions

2004-01-21 Thread Kris Deugau
Fred Bennett wrote: I have SA 2.61 running spamd on a Mandrake server with Postfix. It sends mail to our Exchange 2000 server on the LAN. All is ok, except for one user that wants to opt-out. This user wants to get all messages unmodified by SA (I think header mods would be acceptable as

Re: [SAtalk] This spam scores too low

2004-01-21 Thread Scott
Your email made it into my spam folder. Mostly due to my very strict rules (courtesy of my friend Chris): [mail:root]# cat /etc/mail/spamassassin/local.cf body RANDOM_WORD_10 /(?:\b(?!(?:from|even|more|that|this|were|with)\b)[a-z]{4,12}\s+){10}/ describe RANDOM_WORD_10 string of 10+ random

RE: [SAtalk] better whitelisting - using feedback?

2004-01-21 Thread Luzynski, Steve
Gary Funck wrote: [snip] Separate question (may be a faq): is there a database (SQL, etc) implementation of from/received white lists? This would make updating a whitelist easier, and more efficient than hacking the user_prefs file, for example. Yes, all the of the whitelist/blacklist

RE: [SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Jason Crowe
For some reason this doesn't work for me. I get all kinds of problems when I run spamassassin -D --lint. I don't think it's a problem with the rule set, because it happens on the tripwire rule set also. Any ideas or pointers? I know this is very vague, so if anyone needs more information from me

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread James
I agree, However, I don't see isp's not charging for access to blocked ports. As is now, my current isp has hardware firewalls built into their modems (along with dhcp etc.) and you can change the config (via webbrowser) if you know what you are doing. I'm saying these kinds of devices

Re: [WL] [SAtalk] Yikes.. rules_du_jour

2004-01-21 Thread Chris Thielen
On Mon, 2004-01-19 at 22:11, Jay Levitt wrote: One problem: If a spamassassin --lint fails (because if you, oh, had outdated directives in your sa-mimedefang.cf file), then once you correct that, on the next run, rules_du_jour won't update anything, because it thinks everything is up to date.

RE: [SAtalk] Another one for BigEvil

2004-01-21 Thread Chris Santerre
aaap :) Just send them to me offlist. However FP reports you might want to copy here. As I remove them from the NEXT update. But people might want to remove them right away. They still trickle in now and then. --Chris (bored today for some reason) -Original Message-

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Chris Santerre
I agree and disagree :) How many times have you heard this: I don't understand, I have antivirus software. When was the last time you updated it? Update? :-) I know tons of people with broadband connections that might be on only a few times a week. Some don't even notice their cpu is

RE: [SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
For some reason this doesn't work for me. I get all kinds of problems when I run spamassassin -D --lint. I don't think it's a problem with the rule set, because it happens on the tripwire rule set also. Any ideas or pointers? I know this is very vague, so if anyone needs more information

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Larry Gilson
-Original Message- From: [EMAIL PROTECTED] [mailto:spamassassin-talk- [EMAIL PROTECTED] On Behalf Of Chris Santerre Sent: Wednesday, January 21, 2004 11:27 AM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE: [SAtalk] [OT] - The current state spam. Yeah, we have had this

RE: [SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Jason Crowe
Here is the error. When I copy and paste into emacs it's showing that the lines didn't wrap. pop3:/etc/spamassassin# spamassassin --lint Failed to parse line in SpamAssassin configuration, skipping: descrfull J_BACKHAIR_33

Re: [WL] [SAtalk] Yikes.. rules_du_jour

2004-01-21 Thread Robert Leonard III
- Original Message - From: Chris Thielen [EMAIL PROTECTED] To: Jay Levitt [EMAIL PROTECTED]; [EMAIL PROTECTED] Sent: Wednesday, January 21, 2004 3:01 AM Subject: Re: [WL] [SAtalk] Yikes.. rules_du_jour On Mon, 2004-01-19 at 22:11, Jay Levitt wrote: One problem: If a spamassassin --lint

[SAtalk] Spamassassin doesn't appear to be running...?

2004-01-21 Thread Webmaster
Please excuse me if this is obvious, but I have tried to RTFM and I can't figure out why I'm still seeing no SA info in my headers (no indication that SA is doing anything). My ISP installed SA 2.60 on a RedHat 7.0 box. Using Webmin, I can see the module installed and I see Spamassassin in the

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Keith Dowell
Sorta what I was getting to. Auto mechanics fix cars. PC-Techs (pretty good lot of them - some even unemployed) out there fix computers. I just think people should accept that they need to pay a pc-tech to come in once every few months to look their system over. Just like they need to take

Re: [SAtalk] better whitelisting - using feedback?

2004-01-21 Thread Jack Gostl
On Wed, 21 Jan 2004, Gary Funck wrote: One of the speakers at Spamcon 2004, talked about the effectiveness of automatically generated white lists. As I recall, his scheme depended upon two sources of info: the mail addresses that typically appeared in your To: From: and Cc: lines in your

[SAtalk] Export spam from Outlook in order to run sa-learn

2004-01-21 Thread Nicholson, Rob
Title: Export spam from Outlook in order to run sa-learn Anyone got any idea how to export spam messages from Outlook 2000 that spamassassin is missing in order to run sa-learn? Thanks, Rob.

[SAtalk] Re: Spam Assassin as a Filter then Forward Mail to MS Exchange

2004-01-21 Thread Fred Bennett
This is the same setup that I use with a Mandrake mail server and it works pretty well. We use Exchange on a SBS setup with the POP3 connector, but I'm in the process of changing that to use SMTP delivery. Documentation for SA could really be improved; I see the same questions being asked

Re: [SAtalk] This spam scores too low

2004-01-21 Thread Jürgen R. Plasser
Thanks for your very helpful answers. Jürgen --On 21.01.2004 11:56 +0100 Jürgen R. Plasser wrote: Hi all, in the last view days I experienced some (for me) strange kind of spam. The first part of the email is a random text (that's what I see in my email client when opening the email): ...

RE: [SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
-Original Message- From: [EMAIL PROTECTED] [mailto:spamassassin- [EMAIL PROTECTED] On Behalf Of Jason Crowe Sent: Wednesday, January 21, 2004 12:21 PM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] Popcorn Backhair have been combined into 1 Set Here is the error. When I copy and

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Rubin Bennett
On Wed, 2004-01-21 at 11:43, Keith Dowell wrote: I made this point on a mimedefang list. Some people didn't really like it. And I made almost the exact same point here recently... Computers are too complicated for people to be responsible some said. IMHO, if it's too complicated, you

RE: [SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
this change more clear. I left Popcorn on there for now, but like I said, if you use Backhair version 1.1 (just posted it) you no longer (sniff sniff...) need Popcorn... So if I grab Jennifer's backhair I don't need any popcorn? There must be some hidden meaning there. As hairy as my

RE: [SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Jason Crowe
Thanks, that is better, but I am still showing a parse error on j_backhair_37. Thanks for your patience. :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jennifer Wheeler Sent: Wednesday, January 21, 2004 11:37 AM To: 'Jason Crowe'; [EMAIL PROTECTED]

RE: [SAtalk] Popcorn Backhair have been combined into 1 Set

2004-01-21 Thread Jason Crowe
Okay, I think I found out what went wrong. I think emacs is doing something to the file when I paste the rule set into it. Sorry and thanks, Jason -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Crowe Sent: Wednesday, January 21, 2004 11:47 AM To:

RE: [SAtalk] Spamassassin on Suse 9.0?

2004-01-21 Thread Paul Hutchings
OK, downloaded the source rpm and (i think) sucessfully built it into the pm files, however I'm getting the following when installing: perl(Pod::Usage) is needed by perl-Mail-SpamAssassin-2.62-1 perl(HTML::Parser) is needed by perl-Mail-SpamAssassin-2.62-1 I've done a little

Re: [SAtalk] No To line in header

2004-01-21 Thread Matt Kettler
Well, your rule is pretty wildly off.. ToCc is going to look for a header named ToCc, not To headers and/or CC headers. header __TO_EXISTS exists:to header __CC_EXISTS exists:cc meta NO_TO_OR_NO_CC (!__TO_EXISTS || !__CC_EXISTS) Or perhaps you want meta

Re: [SAtalk] No To line in header

2004-01-21 Thread st semps
Thanks for the help. You see I thought that ToCc was valid. I thought I had read that somewhere. Obviously Im wrong. Thank you. -- - Original Message - DATE: Wed, 21 Jan 2004 12:58:36 From: Matt Kettler [EMAIL PROTECTED] To: [EMAIL PROTECTED], [EMAIL PROTECTED] Cc: Well,

Re: [SAtalk] No To line in header

2004-01-21 Thread Matt Kettler
At 01:02 PM 1/21/2004, st semps wrote: You see I thought that ToCc was valid. I thought I had read that somewhere. Obviously Im wrong. Actually, it apparently is valid.. my bad.. However, the string returned won't contain the To: or Cc: parts, just the email addresses.

[SAtalk] Re: This spam scores too low

2004-01-21 Thread Scott A Crosby
On Wed, 21 Jan 2004 12:57:55 +0100, Ralf Vitasek [EMAIL PROTECTED] writes: Hi Jürgen! you need some rules for SA which can detect obfuscated spellings of those keywords like vagira, cilais a.s.o. heres a sample rule i normally use for such words body MY_OBF1

RE: [SAtalk] Export spam from Outlook in order to run sa-learn

2004-01-21 Thread Bret Miller
Title: Message I use an IMAP account. Move the message to an IMAP folder, then you have access to the source of the real message. Alternatively, I have used a product called "SpamSource" in the past that will copy the source of the message to the clipboard. Then you can paste it into notepad

[SAtalk] New tax Phish?

2004-01-21 Thread Chris Santerre
I'm just got 2 of these. I'm not sure if the product is legit, but it does look like it is. It was sent from yourdeals47.com. Which screams spam, and is listed in a few RBLs. I'm thinking we will start seeing a lot more spam with Taxes in it now. If this product is legit and not a scam, then why

[SAtalk] Re: This spam scores too low

2004-01-21 Thread Scott A Crosby
On 21 Jan 2004 12:13:40 -0600, Scott A Crosby [EMAIL PROTECTED] writes: On Wed, 21 Jan 2004 12:57:55 +0100, Ralf Vitasek [EMAIL PROTECTED] writes: Hi Jürgen! you need some rules for SA which can detect obfuscated spellings of those keywords like vagira, cilais a.s.o. heres a

[SAtalk] RulesDuJour; minor change

2004-01-21 Thread Erik Slooff
Hi Chris, Small change for RulesDuJour: when sa is not in path lint will not succeed (line 313). Maybe you could add a variable that contains the path to sa in the settings? Erik --- The SF.Net email is sponsored by EclipseCon 2004

RE: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Jody Cleveland
I'd suggest turning on debug output with the -D parameter, and see where it gets stuck. Here's what I get: debug: Syncing Bayes journal and expiring old tokens... debug: lock: 21404 created /etc/MailScanner/bayes/bayes.lock.mystique.winnefox.org.21404 debug: lock: 21404 trying to get lock

RE: [SAtalk] better whitelisting - using feedback?

2004-01-21 Thread Gary Funck
I'm not sure I'd do this. One day (for a bunch of reasons) I whitelisted my own address, and promptly got a bunch of spam from myself. Good point, but all local addresses can (and must) be verified based upon the incoming gateway's Received: header.

[SAtalk] SpamAssassin 2.63 rpms srpm

2004-01-21 Thread Caleb Maclennan
SpamAssassin 2.63 SRPM: http://rpms.alerque.com/SRPMS/spamassassin-2.63-1.src.rpm SpamAssassin 2.63 RPMS compiled for PLD i686: http://rpms.alerque.com/RPMS/ --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open

RE: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Matt Kettler
Correction: the rm should rm bayes.lock, not bayes_*.lock. My typo. At 01:41 PM 1/21/2004, Jody Cleveland wrote: Here's what I get: debug: Syncing Bayes journal and expiring old tokens... debug: lock: 21404 created /etc/MailScanner/bayes/bayes.lock.mystique.winnefox.org.21404 debug: lock: 21404

RE: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Matt Kettler
At 01:41 PM 1/21/2004, Jody Cleveland wrote: Here's what I get: debug: Syncing Bayes journal and expiring old tokens... debug: lock: 21404 created /etc/MailScanner/bayes/bayes.lock.mystique.winnefox.org.21404 debug: lock: 21404 trying to get lock on /etc/MailScanner/bayes/bayes with 0 retries The

[SAtalk] autolearn=fail

2004-01-21 Thread Ben Hanson
I have had Spamassassin running for long enough to have BAYES kick in. I realized the other day when I checked out all my rulesets with spamassassin -D --lint, I was getting a BAYES_0 test result. I never saw such a thing from my email. I figured out that I needed to specifically run spamc

Re: [SAtalk] RulesDuJour; minor change

2004-01-21 Thread Chris Thielen
On Wed, 2004-01-21 at 18:23, Erik Slooff wrote: Hi Chris, Small change for RulesDuJour: when sa is not in path lint will not succeed (line 313). Maybe you could add a variable that contains the path to sa in the settings? Erik Will do. Should have it up tomorrow, along with some

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Matthew Hunter
On Wed, Jan 21, 2004 at 12:13:26PM -0500, Chris Santerre [EMAIL PROTECTED] wrote: I know tons of people with broadband connections that might be on only a few times a week. Some don't even notice their cpu is slower. I also know some pretty intelligent people that despite what they try, still

[SAtalk] Not able to run sa-learn

2004-01-21 Thread Jody Cleveland
Hello, I'm running spamassassin 2.62 with MailScanner on redhat 9. What I'm trying to run is this: sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --spam --mbox /var/spool/mail/bayes But, it just sits there. Sa-learn --rebuild and --force-expire work fine. When I first upgraded from 2.61

[SAtalk] Why won't SA see my user_prefs?

2004-01-21 Thread alayne
I'm running SpamAssassin using spamd, and invoking on my own system through an entry in procmailrc. SpamAssassin runs fine and does indeed properly filter out a lot of spam. Yesterday, I added a number of rules to $HOME/.spamassassin/user_prefs. I ran /home/alayne/sausr/bin/spamassassin -D

Re: [SAtalk] autolearn=fail

2004-01-21 Thread Alex S Moore
On Wed, 21 Jan 2004 13:48:30 -0500 Ben Hanson [EMAIL PROTECTED] wrote: I have had Spamassassin running for long enough to have BAYES kick in. I realized the other day when I checked out all my rulesets with spamassassin -D --lint, I was getting a BAYES_0 test result. I never saw such a

RE: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Jody Cleveland
Thanks! That took care of it. -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 21, 2004 12:50 PM To: Jody Cleveland; '[EMAIL PROTECTED]' Subject: RE: [SAtalk] Not able to run sa-learn Correction: the rm should rm bayes.lock, not

[SAtalk] [Ruleset Update] EvilNumbers ver. 1.12 new language packs

2004-01-21 Thread Matt Yackley
Thanks to Sylvain, Doug K. Chris P. for their ideas on improving the rules! Changes: Added some more entries (many more to come within the next few days, just need time to process them) Changed (\s|-|\.) in phone numbers to \W+, file should require less memory to run, is easier to read and

Re: [SAtalk] RulesDuJour; minor change

2004-01-21 Thread Tim Litwiller
Chris Thielen wrote: On Wed, 2004-01-21 at 18:23, Erik Slooff wrote: Hi Chris, Small change for RulesDuJour: when sa is not in path lint will not succeed (line 313). Maybe you could add a variable that contains the path to sa in the settings? Erik Will do. Should have it up tomorrow,

  1   2   >