RE: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Jody Cleveland
> I'd suggest turning on debug output with the -D parameter, > and see where it > gets stuck. Here's what I get: debug: Syncing Bayes journal and expiring old tokens... debug: lock: 21404 created /etc/MailScanner/bayes/bayes.lock.mystique.winnefox.org.21404 debug: lock: 21404 trying to get loc

[SAtalk] RulesDuJour; minor change

2004-01-21 Thread Erik Slooff
Hi Chris, Small change for RulesDuJour: when sa is not in path lint will not succeed (line 313). Maybe you could add a variable that contains the path to sa in the settings? Erik --- The SF.Net email is sponsored by EclipseCon 2004 Premiere

[SAtalk] Re: This spam scores too low

2004-01-21 Thread Scott A Crosby
On 21 Jan 2004 12:13:40 -0600, Scott A Crosby <[EMAIL PROTECTED]> writes: > On Wed, 21 Jan 2004 12:57:55 +0100, Ralf Vitasek <[EMAIL PROTECTED]> writes: > > > Hi Jürgen! > > > > you need some rules for SA which can detect obfuscated spellings of > > those keywords like vagira, cilais a.s.o. > >

[SAtalk] New tax Phish?

2004-01-21 Thread Chris Santerre
I'm just got 2 of these. I'm not sure if the product is legit, but it does look like it is. It was sent from yourdeals47.com. Which screams spam, and is listed in a few RBLs. I'm thinking we will start seeing a lot more spam with "Taxes" in it now. If this product is legit and not a scam, then wh

RE: [SAtalk] Export spam from Outlook in order to run sa-learn

2004-01-21 Thread Bret Miller
Title: Message I use an IMAP account. Move the message to an IMAP folder, then you have access to the source of the real message.   Alternatively, I have used a product called "SpamSource" in the past that will copy the source of the message to the clipboard. Then you can paste it into notepad a

[SAtalk] Re: This spam scores too low

2004-01-21 Thread Scott A Crosby
On Wed, 21 Jan 2004 12:57:55 +0100, Ralf Vitasek <[EMAIL PROTECTED]> writes: > Hi Jürgen! > > you need some rules for SA which can detect obfuscated spellings of > those keywords like vagira, cilais a.s.o. > > heres a sample rule i normally use for such words > > body MY_OBF1 > /((?!*censored*)

Re: [SAtalk] No To line in header

2004-01-21 Thread Matt Kettler
At 01:02 PM 1/21/2004, st semps wrote: You see I thought that ToCc was valid. I thought I had read that somewhere. Obviously Im wrong. Actually, it apparently is valid.. my bad.. However, the string returned won't contain the To: or Cc: parts, just the email addresses. --

Re: [SAtalk] No To line in header

2004-01-21 Thread st semps
Thanks for the help. You see I thought that ToCc was valid. I thought I had read that somewhere. Obviously Im wrong. Thank you. -- - Original Message - DATE: Wed, 21 Jan 2004 12:58:36 From: Matt Kettler <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], [EMAIL PROTECTED] Cc: >Well, y

Re: [SAtalk] No To line in header

2004-01-21 Thread Matt Kettler
Well, your rule is pretty wildly off.. ToCc is going to look for a header named ToCc, not To headers and/or CC headers. header __TO_EXISTS exists:to header __CC_EXISTS exists:cc meta NO_TO_OR_NO_CC (!__TO_EXISTS || !__CC_EXISTS) Or perhaps you want meta NO_TO_AND_N

RE: [SAtalk] Spamassassin on Suse 9.0?

2004-01-21 Thread Paul Hutchings
OK, downloaded the source rpm and (i think) sucessfully built it into the pm files, however I'm getting the following when installing: perl(Pod::Usage) is needed by perl-Mail-SpamAssassin-2.62-1 perl(HTML::Parser) is needed by perl-Mail-SpamAssassin-2.62-1 I've done a little diggi

RE: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Jason Crowe
Okay, I think I found out what went wrong. I think emacs is doing something to the file when I paste the rule set into it. Sorry and thanks, Jason -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jason Crowe Sent: Wednesday, January 21, 2004 11:47 AM To: [

RE: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Jason Crowe
Thanks, that is better, but I am still showing a parse error on j_backhair_37. Thanks for your patience. :) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jennifer Wheeler Sent: Wednesday, January 21, 2004 11:37 AM To: 'Jason Crowe'; [EMAIL PROTECTED] Su

RE: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
> > this change more clear. I left Popcorn on there for now, but like I > > said, if you use Backhair version 1.1 (just posted it) you no longer > > (sniff sniff...) need Popcorn... > > So if I grab Jennifer's backhair I don't need any popcorn? There must > be some hidden meaning there. As hair

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Rubin Bennett
On Wed, 2004-01-21 at 11:43, Keith Dowell wrote: > I made this point on a mimedefang list. Some people didn't really like it. > And I made almost the exact same point here recently... > Computers are too complicated for people to be responsible some said. > IMHO, if it's too complicated, you sho

RE: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
> -Original Message- > From: [EMAIL PROTECTED] [mailto:spamassassin- > [EMAIL PROTECTED] On Behalf Of Jason Crowe > Sent: Wednesday, January 21, 2004 12:21 PM > To: [EMAIL PROTECTED] > Subject: RE: [SAtalk] Popcorn & Backhair have been combined into 1 Set > > > Here is the error. When I

Re: [SAtalk] This spam scores too low

2004-01-21 Thread Jürgen R. Plasser
Thanks for your very helpful answers. Jürgen --On 21.01.2004 11:56 +0100 Jürgen R. Plasser wrote: Hi all, in the last view days I experienced some (for me) "strange" kind of spam. The first part of the email is a random text (that's what I see in my email client when opening the email): ...

[SAtalk] Re: Spam Assassin as a Filter then Forward Mail to MS Exchange

2004-01-21 Thread Fred Bennett
This is the same setup that I use with a Mandrake mail server and it works pretty well. We use Exchange on a SBS setup with the POP3 connector, but I'm in the process of changing that to use SMTP delivery. Documentation for SA could really be improved; I see the same questions being asked and

[SAtalk] Export spam from Outlook in order to run sa-learn

2004-01-21 Thread Nicholson, Rob
Title: Export spam from Outlook in order to run sa-learn Anyone got any idea how to export spam messages from Outlook 2000 that spamassassin is missing in order to run sa-learn? Thanks, Rob.

Re: [SAtalk] better whitelisting - using feedback?

2004-01-21 Thread Jack Gostl
On Wed, 21 Jan 2004, Gary Funck wrote: > > One of the speakers at Spamcon 2004, talked about the effectiveness of > automatically generated white lists. As I recall, his scheme depended upon > two sources of info: the mail addresses that typically appeared in your > To: From: and Cc: lines in you

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Keith Dowell
Sorta what I was getting to. Auto mechanics fix cars. PC-Techs (pretty good lot of them - some even unemployed) out there fix computers. I just think people should accept that they need to pay a pc-tech to come in once every few months to look their system over. Just like they need to take thei

[SAtalk] Spamassassin doesn't appear to be running...?

2004-01-21 Thread Webmaster
Please excuse me if this is obvious, but I have tried to RTFM and I can't figure out why I'm still seeing no SA info in my headers (no indication that SA is doing anything). My ISP installed SA 2.60 on a RedHat 7.0 box. Using Webmin, I can see the module installed and I see Spamassassin in the boot

Re: [WL] [SAtalk] Yikes.. rules_du_jour

2004-01-21 Thread Robert Leonard III
- Original Message - From: "Chris Thielen" <[EMAIL PROTECTED]> To: "Jay Levitt" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, January 21, 2004 3:01 AM Subject: Re: [WL] [SAtalk] Yikes.. rules_du_jour On Mon, 2004-01-19 at 22:11, Jay Levitt wrote: One problem: If a spamassass

RE: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Jason Crowe
Here is the error. When I copy and paste into emacs it's showing that the lines didn't wrap. pop3:/etc/spamassassin# spamassassin --lint Failed to parse line in SpamAssassin configuration, skipping: descrfull J_BACKHAIR_33 /[>\s]\w{3}<\/?(?!(?:a(?:bbr|cronym|ddress|pplet|rea)?|b(?:ase(?:font)?|do

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Larry Gilson
> -Original Message- > From: [EMAIL PROTECTED] [mailto:spamassassin-talk- > [EMAIL PROTECTED] On Behalf Of Chris Santerre > Sent: Wednesday, January 21, 2004 11:27 AM > To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] > Subject: RE: [SAtalk] [OT] - The current state spam. > > Yeah, we have had t

RE: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
> For some reason this doesn't work for me. I get all kinds of problems when > I > run spamassassin -D --lint. I don't think it's a problem with the rule > set, > because it happens on the tripwire rule set also. Any ideas or pointers? I > know this is very vague, so if anyone needs more informatio

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Chris Santerre
I agree and disagree :) How many times have you heard this: "I don't understand, I have antivirus software." "When was the last time you updated it?" "Update?" :-) I know tons of people with broadband connections that might be on only a few times a week. Some don't even notice their cpu

RE: [SAtalk] Another one for BigEvil

2004-01-21 Thread Chris Santerre
aaap :) Just send them to me offlist. However FP reports you might want to copy here. As I remove them from the NEXT update. But people might want to remove them right away. They still trickle in now and then. --Chris (bored today for some reason) > -Original Message- > Fro

Re: [WL] [SAtalk] Yikes.. rules_du_jour

2004-01-21 Thread Chris Thielen
On Mon, 2004-01-19 at 22:11, Jay Levitt wrote: > One problem: If a spamassassin --lint fails (because if you, oh, had > outdated directives in your sa-mimedefang.cf file), then once you correct > that, on the next run, rules_du_jour won't update anything, because it > thinks everything is up to dat

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread James
I agree, However, I don't see isp's not charging for access to blocked ports. As is now, my current isp has hardware firewalls built into their modems (along with dhcp etc.) and you can change the config (via webbrowser) if you know what you are doing. I'm saying these kinds of devices IM

RE: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Jason Crowe
For some reason this doesn't work for me. I get all kinds of problems when I run spamassassin -D --lint. I don't think it's a problem with the rule set, because it happens on the tripwire rule set also. Any ideas or pointers? I know this is very vague, so if anyone needs more information from me I'

RE: [SAtalk] better whitelisting - using feedback?

2004-01-21 Thread Luzynski, Steve
Gary Funck wrote: [snip] > Separate question (may be a faq): is there a database (SQL, etc) > implementation of from/received white lists? This would make updating > a whitelist easier, and more efficient than hacking the user_prefs > file, for example. Yes, all the of the whitelist/blacklist c

Re: [SAtalk] This spam scores too low

2004-01-21 Thread Scott
Your email made it into my spam folder. Mostly due to my very strict rules (courtesy of my friend Chris): [mail:root]# cat /etc/mail/spamassassin/local.cf body RANDOM_WORD_10 /(?:\b(?!(?:from|even|more|that|this|were|with)\b)[a-z]{4,12}\s+){10}/ describe RANDOM_WORD_10 string of 10+ random wor

Re: [SAtalk] Per-user exceptions

2004-01-21 Thread Kris Deugau
Fred Bennett wrote:> > I have SA 2.61 running spamd on a Mandrake server with Postfix. It > sends mail to our Exchange 2000 server on the LAN. All is ok, except > for one user that wants to opt-out. This user wants to get all > messages unmodified by SA (I think header mods would be acceptable as

Re: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Chris Thielen
On Wed, 2004-01-21 at 15:40, Jennifer Wheeler wrote: > I will update the page when I get some free time in the hopes of making > this change more clear. I left Popcorn on there for now, but like I > said, if you use Backhair version 1.1 (just posted it) you no longer > (sniff sniff...) need Popc

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Keith Dowell
I made this point on a mimedefang list. Some people didn't really like it. Computers are too complicated for people to be responsible some said. So I tried equating it to maintaining your car in that, if your car smokes and causes pollution - it is NOT the manufacturers responsibility to come fix

Re: [SAtalk] Not able to run sa-learn

2004-01-21 Thread Matt Kettler
At 10:36 AM 1/21/2004, Jody Cleveland wrote: I'm running spamassassin 2.62 with MailScanner on redhat 9. What I'm trying to run is this: sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --spam --mbox /var/spool/mail/bayes But, it just sits there. Sa-learn --rebuild and --force-expire work fine

[SAtalk] better whitelisting - using feedback?

2004-01-21 Thread Gary Funck
One of the speakers at Spamcon 2004, talked about the effectiveness of automatically generated white lists. As I recall, his scheme depended upon two sources of info: the mail addresses that typically appeared in your To: From: and Cc: lines in your corpus of ham, during training and automatically

[SAtalk] No To line in header

2004-01-21 Thread st semps
Can someone tell me how to look for no To or CC field in the header. I get several emails sent to me like this and would like to score them. Best I could come up with is ToCc !~ /To|cc/i Can someone tell me how Im suppose to do this. Regards Steve

Re: [SAtalk] fresh installation not working (yp_match: clnt_call: RPC: timed out)

2004-01-21 Thread Fernan Aguero
+[ Eric W. Bates <[EMAIL PROTECTED]> (21.Jan.2004 13:04): | | I believe you have neglected to hook SA into your mail delivery path. | There are a number of ways to do this; but the most straight forward is | to use procmail and add a .forward and a .procmailrc file into your home | directory

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Chris Santerre
Yeah, we have had this same conversation on another list a week ago. We are saying by DEFAULT and ISP should block the ports, BUT it should be removed if asked, and FREE of charge. I'm sure the percentage of users who would request it would be like 5%. THen it would be easy to monitor traffic (not

Re: [SAtalk] missed spam?

2004-01-21 Thread Matt Kettler
At 10:55 AM 1/21/2004, Paul Diaguila wrote: X-Spam-Score: 1.8 BAYES_30,HTML_60_70,HTML_IMAGE_ONLY_02,HTML_MESSAGE,HTML_TAG_BALANCE_BODY,MSGID_GOOD_EXCHANGE,OACYS_CONS_6,RM_rb_ANCHOR,RM_rb_BODY,RM_rb_HTML,RM_sl_Parens,SUBJECT_ENCODED_MY_TEST What am I missing? What version of SA are you running?

[SAtalk] SA missed an 'invisible font'?

2004-01-21 Thread Charles Gregory
> X-Spam-Level: ** > X-Spam-Status: No, hits=2.7 required=3.5 autolearn=no tests=HTML_20_30=0.474, > HTML_FONT_BIG=0.1,HTML_MESSAGE=0.001,LOC_LOWPRICE=0.9, > LOC_WEIGHTPATCH=1,RCVD_IN_NJABL=0.1,RCVD_IN_SORBS=0.1 Example HTML below. SA seems to have not recognized the EE font as 'in

RE: [SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
OY! That set had the original testing scores. Fixed now. Sorry Haste = Bad > said, if you use Backhair version 1.1 (just posted it) you no longer > > http://www.emtinc.net/spamhammers.htm > > Jennifer <-- 44 on new Backhair set ;) ...oooh the urge to say it! > B..(cough cough) (cough coug

RE: [SAtalk] Spam Assassin as a Filter then Forward Mail to MS Exchange

2004-01-21 Thread Dan Kennedy
Try MailScanner. That's what we use. It works well for just relaying mail onto an exchange server. Spamassassin ties into it, and it's pretty easy to configure. http://www.sng.ecs.soton.ac.uk/mailscanner/ -Original Message- From: Dustin O Williams [mailto:[EMAIL PROTECTED] Sent: Wednesd

Re: [SAtalk] fresh installation not working (yp_match: clnt_call: RPC: timed out)

2004-01-21 Thread Eric W. Bates
I believe you have neglected to hook SA into your mail delivery path. There are a number of ways to do this; but the most straight forward is to use procmail and add a .forward and a .procmailrc file into your home directory. Fernan Aguero wrote: Hi, I just installed SpamAssassin-2.6.1 under

Re: [SAtalk] More obfuscation

2004-01-21 Thread Charles Gregory
On Tue, 20 Jan 2004, Robert Menschel wrote: > CS> I'm not sure where the post is, but about 3 weeks ago I think Dallas > CS> put a semi-end to the spell-checker debate :) Perhaps I need to re-clarify. The idea is NOT to treat mis-spelled words as spam. The idea is to find specific 'close matches'

Re: [SAtalk] Recieved From database

2004-01-21 Thread Sylvain Robitaille
On Wed, 21 Jan 2004, Christian Nygaard wrote: > It would be nice if one could take into account a Spam probability > also based from the originating Received From: header lines. I.e. I > would want to have a whitelist of known good mail servers and assign > them a negative score test value and a h

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread James
Not to flame anyone, but I sure do hope my isp never blocks ports. I don't pay for obstructed internet access. I do run a small mail server from my home dsl connection. I allow family members to use that to send to/from. The local cable provider here (Brighthouse) just about blocks all inbound p

[SAtalk] missed spam?

2004-01-21 Thread Paul Diaguila
Greetings We're seeing lots of the "=?iso" in the header messages getting through. We have this rule in place: header SUBJECT_ENCODED_MY_TEST Subject:raw =~ /=\?.*\?=/i describe SUBJECT_ENCODED_MY_TEST Subject begins with =? scoreSUBJECT_ENCODED_MY_TEST 5.0 When I try to send a test me

[SAtalk] RE: auto_learn question

2004-01-21 Thread Alex S Moore
I get over 50 spam messages every day and a lot of valid mail, which is usually whitelisted. I see, at most, one spam message that gets through every 2 or 3 weeks. Excellent job, SA team! I train Bayes on all spam regularly and I want to use auto_learn to train Bayes when the score is over 9. S

RE: [SAtalk] Spam Assassin as a Filter then Forward Mail to MS Ex change

2004-01-21 Thread Paul Hutchings
http://postfix.cnc.bc.ca/twiki/bin/view/Main/SpamAssassinTaggingOnly is what I use with Postfix to do pretty much the same thing. Very simple and it works. regards, Paul -- Paul Hutchings Network Administrator, MIRA Ltd. Tel: 44 (0)24 7635 5378, Fax: 44 (0)24 7635 8378 mailto:[EMAIL PROTECTED] -

Re: [SAtalk] BigEvil Scoring

2004-01-21 Thread Chris Thielen
Yes: http://www.exit0.us/index.php/RulesDuJourMungeScripts On Wed, 2004-01-21 at 09:16, Rose, Bobby wrote: > Is there an easy way of changing the BigEvil Scores without modifying > bigevil.cf which gets updated a lot? And without duplicating them into > local.cf. > > -=B > > > -

[SAtalk] Popcorn & Backhair have been combined into 1 Set

2004-01-21 Thread Jennifer Wheeler
Hello spam peeps Well I was going to hold off posting this until I had the time to edit the page explaining the Rule Sets, but I got a spam this morning, tagged only by this updated Backhair Set. I was irked enough (thinking these spams might be getting through on other machines) that I will go ah

[SAtalk] Spam Assassin as a Filter then Forward Mail to MS Exchange

2004-01-21 Thread Dustin O Williams
I have a RedHat 9.0 box that I want to turn into a Spam Filtering Device. Basically all that I want the RedHat box to do is: 1). take in the emails, 2). then filter them with Spam Assassin, 3). mark the subject lines as *** SPAM ***, 4). and finally pass all of the emails to my MS Exchange Serv

Re: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread AltGrendel
On Wed, 2004-01-21 at 09:38, Brad Hazledine wrote: > On Wed, 21 Jan 2004, Spyros Tsiolis wrote: > > > Hello list ! > > Hello. > > > > I am kinda new here chaps, so please bare with me. > > > > A simple question (which I didn't pose on the xmail forum in case I > > get flamed/cursed) :-) > > > > >

[SAtalk] Not able to run sa-learn

2004-01-21 Thread Jody Cleveland
Hello, I'm running spamassassin 2.62 with MailScanner on redhat 9. What I'm trying to run is this: sa-learn -p /etc/MailScanner/spam.assassin.prefs.conf --spam --mbox /var/spool/mail/bayes But, it just sits there. Sa-learn --rebuild and --force-expire work fine. When I first upgraded from 2.61 to

Re: [SAtalk] Enable localized rule descriptions

2004-01-21 Thread Stefan Hornburg
On Tue, 20 Jan 2004 12:46:38 -0500 Matt Kettler <[EMAIL PROTECTED]> wrote: > If you want your server to be in german, tell it. > > export LANG=de > > note: this may affect other programs on the system that are language-smart > as well. Yes, but you change this in the init script, e.g. case "$

Re: [SAtalk] Another one for BigEvil

2004-01-21 Thread AltGrendel
On Wed, 2004-01-21 at 09:33, Rubin Bennett wrote: > Sneaky bastard... got through with a 4.7 Chris: Would you prefer that we email you this stuff offlist? I have a few too, but I don't want to contribute to the line noise on this list. -- AltGrendel <[EMAIL PROTECTED]> --

Re: [SAtalk] Turning off Habeas?

2004-01-21 Thread Jérémy JUST
On Tue, 20 Jan 2004 14:23:44 -0600 "Kang , Joseph S." <[EMAIL PROTECTED]> wrote: > The HABEAS_VIOLATOR test is nice for those sites that also have SA do > network tests. MINE DOESN'T. For next runs of GA, maybe HABEAS rules should have four scores. So we could have something like: score HABEA

[SAtalk] BigEvil Scoring

2004-01-21 Thread Rose, Bobby
Is there an easy way of changing the BigEvil Scores without modifying bigevil.cf which gets updated a lot? And without duplicating them into local.cf. -=B --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on Open Tools

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Pierre Thomson
-Original Message- From: Chris Santerre [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 21, 2004 10:08 AM To: 'Fred'; AltGrendel; Spamassassin-Talk (E-mail) Subject: RE: [SAtalk] [OT] - The current state spam. > -Original Message- > From: Fred [mailto:[EMAIL PROTECTED] > Se

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Pierre Thomson
It's not strictly a spam measurement, but www.senderbase.org has excellent real-time lists of outbound mail volume by ISP and IP address. Pierre -Original Message- From: Chris Santerre [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 21, 2004 10:08 AM To: 'Fred'; AltGrendel; Spamassas

Re: [SAtalk] Spelling mistakes in spam

2004-01-21 Thread Matt Kettler
At 09:51 AM 1/21/2004, Nicholson, Rob wrote: We've been looking and trialling No Spam Today which is based upon spamassasin. When we first tried it, it was catching probably 99% of all spam. However, over the past three months this figure has decreased noticeably. It appears to be because spamme

[SAtalk] Spamassassin on Suse 9.0?

2004-01-21 Thread Paul Hutchings
Looking at changing from Redhat 9.0 to new hardware and thought given the redhat/fedora support/lifespam issues I'd look at Suse.. seems well regarded, well supported and has newbie-friendly admin tools even in console mode.. Any thoughts on the simplest way of installing spamassassin _and_ keepin

RE: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Chris Santerre
> -Original Message- > From: Fred [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 21, 2004 9:39 AM > To: AltGrendel; Spamassassin-Talk (E-mail) > Subject: Re: [SAtalk] [OT] - The current state spam. > > > AltGrendel wrote: > > On Tue, 2004-01-20 at 18:28, Fred wrote: > >> > >> I ca

[SAtalk] Spelling mistakes in spam

2004-01-21 Thread Nicholson, Rob
Title: Spelling mistakes in spam Hi, We've been looking and trialling No Spam Today which is based upon spamassasin. When we first tried it, it was catching probably 99% of all spam. However, over the past three months this figure has decreased noticeably. It appears to be because spammers a

[SAtalk] Upgrading from 2.60 to 2.63

2004-01-21 Thread SAtalk Mail User
Hello All, Here is a question that might seem easy to most. I am running spamassassin 2.60 and would like to upgrade to 2.63. What are some of the issues that I have to be aware of? I am fairly new to spamassassin and I would like a seemless upgrade to ensure that I do not ruin the current

Re: [SAtalk] 'spamassassin -d' not stripping SA reports from email

2004-01-21 Thread C. Bensend
> A forwarded message is a brand new message. That brand new message is NOT > sa tagged, even though it may contain some SA markups because the other > message was tagged. Ah, that would certainly explain it. Thanks for the info, Matt. :) I'll just have to figure out some other way of doing it

Re: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread John Fleming
> This list is usually civil, probably the most polite of any of the > anti-spam lists I'm on. Don't suggest that SpamAssassin should delete > mail automatically and you'll be fine. :) And don't "top-post". :) > > It also looks like one has to invoke a special format of expressions > > (regex's?

Re: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Brad Hazledine
On Wed, 21 Jan 2004, Spyros Tsiolis wrote: > Hello list ! Hello. > > I am kinda new here chaps, so please bare with me. > > A simple question (which I didn't pose on the xmail forum in case I > get flamed/cursed) :-) > > >From what it seems, one must let spamassassin know of what to filter > as

[SAtalk] Another one for BigEvil

2004-01-21 Thread Rubin Bennett
Sneaky bastard... got through with a 4.7 -- Rubin Bennett <[EMAIL PROTECTED]> RB Technologies --- Begin Message --- Page loading Image not loading? View message here.Discontinue iJadp0tVrCS/91fN6/XSvXW0yL/QI1S0R9f/xKf7i/oMe1w/ dlfx ytou, xjjk, biieve . cpsd aflrkw kmwdc, tcb, owf . ejujzy rbh

Re: [SAtalk] 'spamassassin -d' not stripping SA reports from email

2004-01-21 Thread Matt Kettler
At 10:41 PM 1/20/04 -0600, C. Bensend wrote: Is the problem that I'm _forwarding_ the tagged emails from one host to the other? I don't have the capability to bounce, I can only forward. A forwarded message is a brand new message. That brand new message is NOT sa tagged, even though it may con

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread Fred
AltGrendel wrote: > On Tue, 2004-01-20 at 18:28, Fred wrote: >> >> I can not imagine what it would be like to work for an abuse dept. at >> an internet company and receive hundreds or thousands of complaints >> about customers computers being hijacked or turned into spam zombies. >> > Non-original

Re: [SAtalk] bayes should ignore habeas headers?

2004-01-21 Thread Matt Kettler
At 12:37 AM 1/21/04 -0500, Pedro Sam wrote: My question, should bayes ignore the habeas headers by default? Perhaps not by default, but right now it's probably a good idea. In general, any sudden shift of behavior from something commonly seen only in nonspam to commonly seen in both causes troubl

Re: [SAtalk] This spam scores too low

2004-01-21 Thread Matt Kettler
At 11:56 AM 1/21/04 +0100, Jürgen R. Plasser wrote: Is there any way to get rid (say: score > 5) of those mails with SA? Some rules? I have SA 2.61 and the latest Bigevel rules installed. Well, antidrug is a good start. http://mywebpages.comcast.net/mkettler/sa/antidrug.cf

Re: [SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Bob Apthorpe
Hi, On Wed, 21 Jan 2004 10:51:12 + "Spyros Tsiolis" <[EMAIL PROTECTED]> wrote: > Hello list ! > > I am kinda new here chaps, so please bare with me. > > A simple question (which I didn't pose on the xmail forum in case I > get flamed/cursed) :-) This list is usually civil, probably the mos

Re: [SAtalk] SpamAssassin checks on Received headers (and RBL's such as RCVD_IN_SORBS)

2004-01-21 Thread Matt Kettler
At 04:33 PM 1/20/04 +0100, Ralf Vitasek wrote: i tested many things with the trusted users settings and googled around but i had no luck so far. except that i stumbled on a posting from this lists archive that makes me think that something is broken and that it would be fixed in the upcoming 2.

Re: [SAtalk] [OT] - The current state spam.

2004-01-21 Thread AltGrendel
On Tue, 2004-01-20 at 18:28, Fred wrote: > > I can not imagine what it would be like to work for an abuse dept. at > an internet company and receive hundreds or thousands of complaints > about customers computers being hijacked or turned into spam zombies. > Non-original joke: I think that jo

Re: [SAtalk] This spam scores too low

2004-01-21 Thread Ralf Vitasek
Hi Jürgen! you need some rules for SA which can detect obfuscated spellings of those keywords like vagira, cilais a.s.o. heres a sample rule i normally use for such words body MY_OBF1 /((?!*censored*)(?:(?:[EMAIL PROTECTED]|@])|(?:v\W*[i|1]\W*[a|@]\W*g\W*r\W*[a|@])))/i describe MY_OBF1 body: cont

RE: [SAtalk] Local rules apparently not working

2004-01-21 Thread ROGERS Richard
Title: Message That's got it working - about as basic as I thought ;-)   Thanks (or should I say grazie?)   Richard -Original Message-From: Giovanni Carbone [mailto:[EMAIL PROTECTED] Sent: 21 January 2004 11:24To: [EMAIL PROTECTED]Subject: Re: [SAtalk] Local rules apparen

Re: [SAtalk] Local rules apparently not working

2004-01-21 Thread Giovanni Carbone
At 10.48 21/01/2004 +, ROGERS Richard wrote: each time re-starting MailScanner (and I believe by implication SpamAssassin, since it runs as part of MailScanner rather than as a separate process) and sendmail.   I'm sure I'm missing something obvious - but what? MailScanner uses it's own confi

Re: [SAtalk] amavislogsumm

2004-01-21 Thread Sascha Hüdepohl
* Jim Knuth ([EMAIL PROTECTED]) wrote: > Hallo und guten Tag Sascha, > > danke für die Email, die Du am 21.01.2004 um 11:07 schriebst - you wrote: > > > Hi, > > > i wrote a litle Perlscript. It counts detected Spam and Viruses from > > amavis.log and creates a litle report about "Spam by Sender"

[SAtalk] Recieved From database

2004-01-21 Thread Christian Nygaard
It would be nice if one could take into account a Spam probability also based from the originating Received From: header lines. I.e. I would want to have a whitelist of known good mail servers and assign them a negative score test value and a have a blacklist which is assigned a positive score. I

[SAtalk] This spam scores too low

2004-01-21 Thread Jürgen R. Plasser
Hi all, in the last view days I experienced some (for me) "strange" kind of spam. The first part of the email is a random text (that's what I see in my email client when opening the email): embedding rose abalone freedman havana bayport regretful menlo gate blomquist force parasitic infelicit

[SAtalk] Hello, new to list ! :-)

2004-01-21 Thread Spyros Tsiolis
Hello list ! I am kinda new here chaps, so please bare with me. A simple question (which I didn't pose on the xmail forum in case I get flamed/cursed) :-) From what it seems, one must let spamassassin know of what to filter as spam mail; So far so good. It also looks like one has to invoke a spe

[SAtalk] Local rules apparently not working

2004-01-21 Thread ROGERS Richard
Title: Message Hi -   Apologies for what is probably an awful newbie blunder, but...   I have installed MailScanner with SpamAssassin (no spamd) on RedHat Linux, and now I'm trying to get some local rules going, so I edited /etc/mail/spamassassin/local.cf to contain lines like the following

[SAtalk] amavislogsumm

2004-01-21 Thread Sascha Hüdepohl
Hi, i wrote a litle Perlscript. It counts detected Spam and Viruses from amavis.log and creates a litle report about "Spam by Sender" "Spam by Recipient" If you are interested you can download it from: http://homepages.hs-bremen.de/~renegat/amavislogsumm regards sascha ---

<    1   2