> >Yes, SA logs by default.
>
> Where might it be logging to? I can't find anything in
> /var/log/ and it's
> not putting anything in to my CommuniGate logfile. I just
> see CGPSA being
> called, and then the message being re-inserted into the queue
> after it's
> been scanned.
> If it's logging
Ok, we're probably not using a "cluster" in the truest since of the
word.
We have 1 main Linux box as a server (houses the /home directories, runs
sendmail/SA, apache, etc). Runs LDAP which acts as the authorative user
directory. Users do not have shell access to this machine.
We have 4-5 other
Below are example of 2 headers from the SATalk list. One was apparently
filtered by Spamassassin, and one not. What's the difference? Some of my
mail is being filtered, and some not, and I have no idea why! I thought a
reboot fixed it, but NOT! PLEASE HELP! Thanks - John
X-Mailer: Ximian Evo
On Fri, 2004-01-23 at 00:14, Bob Apthorpe wrote:
> Hi,
>
> On Thu, 22 Jan 2004 15:12:06 -0600 Wagner One <[EMAIL PROTECTED]>
wrote:
>
> > On 1/22/2004 1:15 PM, Bob Apthorpe wrote:
> >
> > > Note: I think this my hacked-up version of sa-stats.pl at
> > > http://www.cynistar.net/~apthorpe/code/sa-co
Hi,
> On 24 January 2004 14:29 +0100 Arpi <[EMAIL PROTECTED]> wrote:
>
> > Hi,
> >
> > After upgrading chichekpox to Version 1.11, spamassassin --lint fails
> > on every server i tried (spamassassin 2.62, perl 5.8.2).
>
> Fixed in version 1.14 (which RulesduJour downloaded yesterday).
yes i kno
D> That's the way the scores were optimized. There's no real reason other
D> than they were determined to be optimal at 0.
D> Duncan Findlay
Restoring them for non-bayes me!:
awk '$4=="0"&&!/BAYES/{print $1,$2,$3}' \
/usr/share/spamassassin/50_scores.cf >> $HOME/.spamassassin/user_prefs
[I'm no
(okay, second try, now that the list seems to be working again)
> s> rawbody L_Text_Padding_In_Html /<(title>)?[ '-.,?!\w]{50,}>/
> s> describe L_Text_Padding_In_Html Text padding within brackets or HTML
> s> title to fool bayesian filter
rawbody L_Text_Padding_In_Html /<(title>)?[- '\.
Hi
all,
Can I
only filter selected domains even individual mailboxes ?
Is this
possible ? I was told that qmail was most likely not a good choice for
this as the mail handler in qmail is not very customisable. Is this true
?
If so,
can anyone recommend an alternative for our clients w
Great, just wanted to be sure.
Thanks!
Mark
> -Original Message-
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: Friday, January 23, 2004 9:38 AM
> To: Mark Squire; [EMAIL PROTECTED]
> Subject: Re: [SAtalk] Auto-learn SA after having trained it
>
>
> At 10:19 AM 1/23/2004, Mark
>
> Hey guys.
>
> How can I change the points of the rules included in spamassassin?
> I'm trying to increase the points from the HTML_IMAGE_ONLY_02 BODY
rule.
>
> Thanks in advance,
>
> Thorsten Schacht
You can override default scores in your local.cf
score HTML_IMAGE_ONLY_02 4.0
(restart
On Wed, Jan 28, 2004 at 03:01:46PM +0200, Thomas Kinghorn wrote:
> Hi List.
>
> Just downloaded SA2.63 but cannot get it to build.
>
> RH9 with exim-4.30
>
> make gives: Makefile:74: *** missing separator. Stop.
The make error is a leading tab on line 74 that got changed
to one or more spaces
Anybody taken a look at the DNS RBL at
http://cbl.abuseat.org/
??
This is a highly automated RBL based on some big spamtraps,
featuring no-questions-asked automatic delisting on a IP-by-IP
basis, though an IP gets re-listed if it then sends more
spam to the spamtraps. Entries time out after a w
On Wed, Jan 28, 2004 at 11:31:44PM +0100, Kai Schaetzl wrote:
> I'm getting
>
> Failed to parse line in SpamAssassin configuration, skipping:
> use_auto_whitelist 1
>
> on a spamassassin --lint with sa 2.63. I think that has started with 2.60,
> but I didn't really notice or care until now. Che
I've got my bayes database files in a tmpfs filesystem and I wanted to
back them up every hour via cron so that I would have something to start
from in the event of a system crash, so I wrote a script to lock and copy
them and I decided to throw in a db_verify just to be sure I had a good
copy. Wha
Greetings, all.
I'm using Spamassassin 2.63, called from procmail. I recently tried
to add my own rules to catch the mangled spellings of [a particular word
I can't put here else this won't make it to the list -- ironic]
On Wednesday 28 January 2004 12:56 pm, Chris Santerre wrote:
> I had recently received an FP from a *new* invoice confirmation notice from
> a MAJOR computer equipment supplier. I was bummed at the fact that I would
> have to try to work around the FP. Then I looked at what it hit, and some
> were
Matthew Trent Sent: Tuesday, January 27, 2004 11:07 AM
> That would also help with the problem of the report exceeding Exim's
header
> size limit when a ton of TW or BH rules hit.
Speaking of header limit... one of my users just upgraded to Office 2003 and
therefore Outlook 2003. He has a rule to
Hi All,
I've been playing with bayes on my home machine and have been very impressed
with it. I was however wondering to what degree everyone else trusts
BAYES_99? Is it generally accepted as a sure spamsign or do you expect ti
to be backed up by other scores I order to rank it as definite spam?
On Wed, 28 Jan 2004, Peggy wrote:
> Hi,
>
>
>
> I have posted this message earlier, however, for some strange reasons, it was
> never posted. Here it is again:
>
[...]
>
> snprintf.c:552: error: incompatible types in assignment
>
> make: *** [snprintf.o] Error 1
>
>
>
> I realized that there are
Chris Santerre wrote:
I received a report of an FP in bigevil. The domain was
playaudiomessage.com.
So I'm going to go the way easynet did. (No not shutdown!) I'm going to
leave them in until they clean up there act. When I see no reports of spam
containing there URL for a certain period of time,
At 04:33 29/01/2004, Matt Kettler wrote:
At 02:00 AM 1/28/2004, Simon Byrnand wrote:
Has anyone else noticed frequent timeouts with Razor2 ?
I disabled it Friday due to timeouts.
Ah... Yes I just disabled it myself last night after about half an hour of
debugging to make sure it wasn't a software
On Wed, 2004-01-28 at 02:00, Simon Byrnand wrote:
> Has anyone else noticed frequent timeouts with Razor2 ?
>
> I'm seeing timeouts nearly all the time from most of the Razor servers
> causing spamd to take 10 seconds instead of the usual 1 second or so...
> (I've also noticed more spam than usual
I think this is a bug in the latest release of SA, I just reported it an
hour ago. Theo is checking it out for me, we might see a new version
released soon!
Frederic Tarasevicius
Internet Information Services, Inc.
Charles Gagnon wrote:
> I have messages I am desperatly trying to whitelist fro
I'm using SA in conjunction with MailScanner.
When I execute MailScanner my terminal starts reporting the following
message:
Cannot open bayes databases /root/.spamassassin/bayes_* R/W: lock failed:
File exists
/root/.spamassassin/ contains what looks like thousands of bayes_* files.
Does anyon
On Wed, Jan 28, 2004 at 01:24:09PM -0500, Colin A. Bartlett wrote:
[...]
> Just to point out the obvious, did you restart spamd or mimedefang
> after adding the lines to your CF file?
Yeah. I have restarted sendmail and MIMEDefang after every config
attempt but it didn't work.
> BTW, in my experi
This is a top post. Sue me.
Just to point out the obvious, did you restart spamd or mimedefang after adding the
lines to your CF file?
BTW, in my experience, 2 points is way to low to be considered spam. But YMMV of
course.
cheers,
Colin
Colin A. Bartlett
Kinetic Web Solutions
www.kineticweb.b
> For the most part, SA had stopped filtering my email accts. I say "for
the
> most part" because some headers indicate some activity by SA, but they are
> not what I usually see, and I'm not experienced enough to know if someone
> else's SA was what filtered the ones that show this activity. Ple
Is there any way to protecto form this?. I just received this email:
Return-path: <[EMAIL PROTECTED]>
Delivery-date: Thu, 22 Jan 2004 22:01:14 +0400
Received: from qpublic-96.massivefunplace.com (unknown [64.191.79.246]) by
mx1.hotpop.com (Postfix) with ESMTP id 8E7FBE818C for <[EMAIL PROTECTED]>
On Wed, Jan 28 2004 (10:39:06 +0100), jean-christophe valiere wrote:
> Cilais or (Spuer Vagira)
> takes affect right away & lasts 24-36 huors!
> FOR SUEPR VAIRGA TOCUH HERE
>
> I wanted to know if somebody has already received such mail and if it was
> tagged as spam.
I get qui
On Mon, 2004-01-26 at 15:05, Ross Tsolakidis wrote:
> Hi all,
>
> Can I only filter selected domains even individual mailboxes ?
> Is this possible ? I was told that qmail was most likely not a good
> choice for this as the mail handler in qmail is not very
> customisable. Is this true ?
> If s
At 07:01 PM (-0800) 1/23/2004 (Friday), Kenneth Porter wrote:
But now I'm faced with the daunting task of upgrading (via CPAN on RH
7.2, and I don't know squat about CPAN) from 2.55.
7.2 has been end-of-lifed, so you might think about starting from scratch.
I'd suggest getting a spare box and loa
For the most part, SA had stopped filtering my email accts. I say "for the
most part" because some headers indicate some activity by SA, but they are
not what I usually see, and I'm not experienced enough to know if someone
else's SA was what filtered the ones that show this activity. Please
cons
At 11:50 AM (-0800) 1/23/2004 (Friday), Douglas Kirkland wrote:
A few questions you need to know. Does the users control the user_prefs
file?
If so can they write there own rules. Does each user has their own Bayes
database? If so, how do they get trained? How are you getting the email to
spa
I actually just noticed this now. The razor2 servers aren't responding
properly it would seem. Haven't since yesterday.
Of the servers I see in my razor2 catalog, "anxiety.cloudmark.com" and
"wonder.cloudmark.com" do not respond to the signatures sent to them
(although the initial connection and
Jonathan Nichols wrote:
> A friend of mine got this spam and wanted to share:
>
> http://www.spiffariffic.com/homelandsec.txt
>
I got this from my brother in the FDIC yesterday:
-Original Message-
From: Chairman Powell's Office
Sent: Friday, January 23, 2004 3:06 PM
To: FDIC EMPLOYEES
And data.zip, which ClamAV detected and McAfee didn't. I've forwarded it to
NAI.
Phil
-
Phil Randal
Network Engineer
Herefordshire Council
Hereford, UK
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of
> [EM
I have two mail servers running spamassassin. One has spamd running and uses:
# send mail through spamassassin
:0fw
| /usr/bin/spamc
This works and I get a nice log in /var/log/maillog that I can produce
reports on.
The other server has never been setup for spamc, so I changed it to the
above
I'm getting
Failed to parse line in SpamAssassin configuration, skipping:
use_auto_whitelist 1
on a spamassassin --lint with sa 2.63. I think that has started with 2.60,
but I didn't really notice or care until now. Checking the documentation
at spamassassin.org this parameter is still there a
HOLY DISCLAIMER BATMAN!
We use postfix and love it. It is highly configurable and I know there is
much doc online re individual spam settings w/ Mysql.
Re qmail, I found this doc for configuring individual user settings
http://sylvestre.ledru.info/howto/howto_qmail_spamassassin_with_pref.php
Mi
All,
I have been seeing spam with a large number of random words, formated as
sentences complete with punctuation. These are commonly getting by the SA
Bayes filters, and are occasionally getting past the other checks to land in
my mailbox.
I am curious on two fronts:
First, the ones that
Dan Wilder wrote:
> Anybody taken a look at the DNS RBL at
>
> http://cbl.abuseat.org/
>
I've been using this for a few months,
Read this article:
http://groups.google.com/groups?q=cbl.abuseat.org+spamcop&hl=en&lr=&ie=UTF-8&oe=UTF-8&safe=off&selm=3f2429ab.3097540281%40loressamy&rnum=3
If you chec
Hi List.
Just downloaded SA2.63 but cannot get it to build.
RH9 with exim-4.30
make gives: Makefile:74: *** missing separator. Stop.
When trying to install ExtUtils::MakeMaker, I get
"6 tests and 9 subtests skipped.
Failed 2/35 test scripts, 94.29% okay. 63/668 subtests failed, 90.57% okay.
>he only problem so
>far is bounces containing the full, original virus message source aren't
>caught.
Yeah, what's up with that, anyway? What kind of moronic AV scanner bounces an
infected attachment instead of removing it?
Check out this interesting rant on Attrition.org:
http://www.attrit
On Wed, Jan 28, 2004 at 03:01:46PM +0200, Thomas Kinghorn wrote:
> RH9 with exim-4.30
> make gives: Makefile:74: *** missing separator. Stop.
First guess: http://wiki.spamassassin.org/w/MakeMissingSeparator
--
Randomly Generated Tagline:
"Euler's Identity ... the Sine/Cosine thing..." - Ins
Inspired by "Filters that fight back", by Paul Graham
http://www.paulgraham.com/ffb.html
I found a reference to a short script that scans e-mail for URL's,
and then turns around and automatically references the offending page.
Well, I'm not interested in doing that at the moment, but I have
enhan
Hi,
I'm using SA 2.61 on a FreeBSD 4.8 stable with qmail-scanner 1.2 and everything works
fine except that SA doesnt rewrite my subjects.
Email header (just to show that SA is scanning the mail):
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 97991 invoked by
On Tue, Jan 27, 2004 at 12:56:39PM +, thomas fritz wrote:
> debug: bayes: expiry check keep size, 75% of max: 112500
> debug: bayes: token count: 1215351, final goal reduction size: 1102851
Ok, so you want to keep 112k, and have 1.2m, for a reduction size of 1.1m.
> debug: bayes: atime to
Hi,
I have posted this message earlier, however, for some strange reasons, it was
never posted. Here it is again:
I am trying to install SpamAssassin 2.63 under SunOS 5.9 by making libsnp.a;
however, I keep encountering the following error:
gcc -I. -c -o snprintf.o snprintf.c
snpr
--On Wednesday, January 28, 2004 3:44 PM -0500 Adam Denenberg
<[EMAIL PROTECTED]> wrote:
> is this list working today?
Usually the list takes Wednesdays off. However today it is working 9-5.
???
Evan
---
The SF.Net email is sponsored by Ecli
is this list working today?
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
Hi,
i will install 1.63 and i get the same error as 1.62
Failed 1/39 test scripts, 97.44% okay. 10/281 subtests failed, 96.44%
okay.
make: *** [test_dynamic] Error 9
/usr/bin/make test -- NOT OK
Running make install
make test had returned bad status, won't install without force
Can everyone
Environment is Fedora Core 1 (fully up-to-date w/ patches); SendMail
8.12.10-1.1.1 (Fedora Core RPM); SpamAssassin 2.63; spamass-milter
0.2.0+cvs. This server acts as a filtering relay in front of a Lotus
Domino mail server. There are no user preferences.
Yesterday, at approximately 5:20pm, m
I'm using postfix, amavisd-new, and spamassassin. I've tried figuring
out several different 'spam stats' packages now, including
spamstats.pl and mailgraph. I sort of got mailgraph to work, except
that the data is rubbish. Spamstats (which looks like exactly what
I'm looking for) returns all ze
I had recently received an FP from a *new* invoice confirmation notice from
a MAJOR computer equipment supplier. I was bummed at the fact that I would
have to try to work around the FP. Then I looked at what it hit, and some
were just things they shouldn't do. Like HTML only!
So I wrote a nice em
Hi
all,
I'm
currently looking at using spamassassin for clients who have their own mail
server.
We use
qmail at the moment, but because these clients are not located on the qmail
server, they only use the site wide preferences.
I want
them to be able to edit their own prefs file.
Can
Hi,
I've been fiddling about with razor2-2.36, patched it and installed it.
Registerd an user, tested to run razor-client on a mbox (worked fine,
it told me some mails was spam).
During cpan installation of spamassassin everything works fine, it finds
and tests razor2 successfully.
When I run
Got some new variants on the "justified text" ratware. By going to 66 chars,
they have slipped through the rule. So I've fixed it up a bit. Please test
and let me know, etc.
full JUSTIFIED_TEXT /(\n.{60,75}=){4}/
describe JUSTIFIED_TEXT Body uses 60-75 char wide, justified text
score JUSTIF
I'm using SA in conjunction with MailScanner.
When I execute MailScanner my terminal starts reporting the following
message:
Cannot open bayes databases /root/.spamassassin/bayes_* R/W: lock failed:
File exists
/root/.spamassassin/ contains what looks like thousands of bayes_* files.
Does anyon
Thus spake John Oliver ([EMAIL PROTECTED]) [27/01/04 16:46]:
> I had SA 2.60 and just installed 2.63 via CPAN. spamassassin -V tells
> me I have 2.63 now, but the headers of my emails still say 2.60 How can
> I make certain that mail is being scanned by 2.63?
Are you using spamc/spamd? Did you
On Tuesday 27 January 2004 09:43 am, Chris Barnes wrote:
> Let me 2nd this - on the server I run for my dept, we have had ZERO
> messages get through with this virus. Otoh, I spent 2 hours on the
> phone with a dozen or so friends explaining to them how to get this off
> of their machines (sometim
Hi,
we have quite a lot of people who use mcbone.net, t-dialin.net, etc. IPs to
send their mail via our server (SMTP AUTH). Those IPs belong to the biggest
German dial-up providers and they are in a lot of (dial-up) RBLs.
I'd like to NOT score mail from those people who authenticated via SMTP, bu
Sorry if this has been asked answered before, but I have 5000 messages here
to wade thru..
Spamassassin 2.54 Cobalt Raq4 w/sendmail, mailscanner, Clam antivirus
If there is an existing rule with a set score.. and I want to make that
score higher.. if I add:
score RULE_SUCH_AND_SUCH 15
to my 1
John Wilcock wrote:
> [This message doesn't seem to have made it to the list yesterday...
> Apologies if it ends up being distributed twice]
>
> It struck me that since individual tripwire rules are at risk of FPs,
> but that multiple tripwire hits on the same message are much less so,
> it might
hi there!
when running sa-learn --force-expire -D I get the following output:
synced Bayes databases from journal in 45 seconds: 48942 unique entries (85654
total entries)
debug: bayes: expiry check keep size, 75% of max: 112500
debug: bayes: token count: 1215351, final goal reduction size
Folks,
We're having a lot of trouble with the bayes module. It's only learning
spam messages, and is now(despite having been trained on thousands of
"ham" messages) marking virtually anything, even messages with just
"test" for a subject/body, as spam- 99% certainty, no less.
I tried setting bay
I'm getting a few messages that include spelling alterations such as
Be gaware that now the peak of your segxual activigty is realgy accessibleg!
it does have a URl to rxeasymeds.com that may be worth including in one of the cf
files
A.
--
Matthew Trent Sent: Tuesday, January 27, 2004 11:07 AM
> That would also help with the problem of the report exceeding Exim's
header
> size limit when a ton of TW or BH rules hit.
Speaking of header limit... one of my users just upgraded to Office 2003 and
therefore Outlook 2003. He has a rule to
>>MESSAGEID_RATWARE -- 13479s/973h of 91714 corpus (74113s/17601h) 01/22/04
>>
>>Hits almost a thousand ham here. 93% of the hits are spam, which is very
>>promising. Tighten up the rule a little bit, and we'll probably have a
>>winner.
>>
>header MESSAGEID_RATWARE \
> Message-ID: =~ /<[A-Z0
>A friend of mine also has suggested the following (the coding is my own,
>so if it doesn't work, I've poorly implemented the suggestion):
>
> header SYL_BAD_XOIP X-Originating-IP !~ /\[?(\d{1,3}\.){3}\d{1,3}\]?/
>
As was noted before, a negative test will false-positive when there is no
X-O-IP
I have messages I am desperatly trying to whitelist from SA. I am
using SpamAssassin on a Solaris 8 server using sendmail 8.12.10 and
MIMEDefang.
I have tried various lines in
/etc/mail/spamassassin/sa-mimedefang.cf to no avail:
whitelist_from [EMAIL PROTECTED]
whitelist_from [EMAIL PROTECT
Is there anyway to clear all the HAM for Bayes and retrain
it without loosing all the SPAM?
I think that my HAM portion of the db has been corrupted by
the autolearn feature (which I have now disabled) and I’de really like to
retrain it manually.
Thanks
Robb
This one even has the V word spelled correctly as part of a bigger word.
How is it getting past the DRUGS and MRWIGGLY rules?
http://wa9als.com/spam2.html
I've gotten a couple of these now and have added a body check for the "grax"
word, but that seems like a bandaid.
Tnx - John
Yes, and now it appears to be mirrored by Spamhaus at xbl.spamhaus.org
I've used them on the firewall and have swapped there order. Whichever is
first takes all the hits, Whichever is second gets 0.
These sites account for 60% of the total rejects I see for mail.
regards
Alan
> -Original
At 02:10 PM 1/27/04 +0200, Thomas Kinghorn wrote:
While using spamd -D, I can see the messages being learned as ham.
However, while doing a spamassasin -D --lint, it shows only 1 ham.
sa-learn --dump magic shows
[EMAIL PROTECTED] exim]# sa-learn --dump magic
I have attached the --lint debug.
An
Hi,
On Fri, 23 Jan 2004 17:15:19 -0600 "Smart,Dan" <[EMAIL PROTECTED]>
wrote:
> I would suggest you use SpamStats from http://www.gryzor.com/tools/
> I ran both, and SpamStats reported more of both Spam and Ham. I
> suspect sa-stats is missing some records.
Actually, I'm starting to believe the
Look at: http://www.spamassassin.org/doc/Mail_SpamAssassin_Conf.html
Scroll down to the section: NETWORK TEST OPTIONS
regards
Alan
> Can someone point me to any docs on network tests and/or how
> to switch them
> on?
>
> Thanks
>
> Dougie
---
Hello Sylvain,
Friday, January 23, 2004, 8:04:51 AM, you wrote:
>> Yes, that one works for me:
>> SYL_BAD_XOIPa -- 3881s/0h of 91714 corpus (74113s/17601h) 01/22/04
SR> Beautiful! Thanks for checking that! Perhaps I can buy you a salted
SR> ham sandwich some time! :-)
I prefer unsalted, than
he?
what's going on here?!?
repeat after me: "spamassassin is no virusscanner!"
virusscanners need to be able to scan attachments, and this is a thing
that SA can't do.
have a look here
http://www.ijs.si/software/amavisd/
and please stop trying to abuse our spam murdering little ninja, ok? :D
Matt Kettler said:
> At 02:39 PM 1/26/04 -0500, Kurt Yoder wrote:
>
>
>>body PHISHERMEN /http:\/\/(\w*?\.)+[a-zA-Z]{2,10}?[^/\s]*?@/
>>score PHISHERMEN 5.0
>
>
> Don't use the body ruletype.. SA removes all HTML tags before
> running body.
>
> Use uri instead of body.
OK. Maybe I'll just put it
At Fri Jan 23 06:46:33 2004, Thomas Kinghorn wrote:
>
> Below are the headers & I have attached the mail.
>
> These are getting worse.
>
> To top it off, SA learned it as HAM.
>
> If anyone knows of any rules that could work on these mails, It would be
> greatly appreciated.
[I've posted mo
Did you know that you can:
mv ~/.spamassassin/user_prefs ~/.spamassassin/user_prefs.cs
mkdir ~/.spamassassin/user_prefs
mv ~/.spamassassin/user_prefs.cs ~/.spamassassin/user_prefs/
cp backhair.cf ~/.spamassassin/user_prefs/
cp antidrug.cf ~/.spamassassin/user_prefs/
Then always call spamassassin
Thomas Kinghorn wrote:
Hi Guys.
I have attached the contents on spamd -D.
I have no idea as to why the scan time is so high.
The other, identical server, runs at about 4 seconds...
Thanks to all.
Tom
debug: RBL: success for 18 of 19 queries
debug: RBL: timeout for relay after 2 second
A friend of mine got this spam and wanted to share:
http://www.spiffariffic.com/homelandsec.txt
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activ
Hi,
On Mon, 26 Jan 2004 22:09:28 -0600 "Vermyndax" <[EMAIL PROTECTED]> wrote:
> Bob...
>
> Once again, excellent work.
Thanks - I give back what I can.
> I think my only complaint now is that my master.cf is messing with your
> script's ability to report the top spam receivers.
[section on us
Spam detection software, running on the system "p15139277.pureserver.info", has
identified this incoming email as possible spam. The original message
has been attached to this so you can view it (if it isn't spam) or block
similar future email. If you have any questions, see
http://www.cw-mediade
On Tue, Jan 27, 2004 at 11:00:07AM -0500, Matt Kettler wrote:
> At 12:22 PM 1/27/04 +0100, jean-christophe valiere wrote:
>
> >Hi,
> >
> >I've got a little problem with the mail that is attached.
> >When I try spamassassin -t -D rulesrun=255 < mail.txt it is
> >nor c
I have an error when trying to run spamsources.sh:
denizi root # ./spamsources.sh
grep: Unmatched [ or [^
No idea where it happens, except that it seems to run through the log
for about 15-20 seconds...
--Vermyndax
---
The SF.Net email is s
Hi Guys.
I have attached the contents on spamd -D.
I have no idea as to why the scan time is so high.
The other, identical server, runs at about 4 seconds...
Thanks to all.
Tom
> -Original Message-
> From: Mailing Lists [mailto:[EMAIL PROTECTED]
> Sent: 23 January 2004 06:52
> C
On Mon, 26 Jan 2004, Paul Diaguila wrote:
> No Bayes db yet, but I would think the one rule would score it a 5
>
> Paul
>
> Covington, Chris wrote:
>
> >Your Bayes must be hosed if what you think is spam gets BAYES_00.
> >
> >Chris
[snip..]
> >Greetings
> >
> >Using SA Ver. 2.63 with Mimedefan
I don't see much of a problem.
logmsg: clean message (-4.9/4.0) for xadmin:500 in 3.6 seconds, 521
bytes.
Is the key line. This isn't too unreasonable. What does sar say.
One of my incoming mail spoolers (which receives a fairly light load)
says:
12:40:00 PM all 2.21 0.01 0
At 12:13 PM 1/26/04 -0500, WA9ALS - John wrote:
This one even has the V word spelled correctly as part of a bigger word.
How is it getting past the DRUGS and MRWIGGLY rules?
http://wa9als.com/spam2.html
I've gotten a couple of these now and have added a body check for the "grax"
word, but that see
I emailed this out Friday and haven't seen any replies. Not sure if it was
missed, but I'd appreciate any help anyone can give. This problem seems to
be afflicting one specific users for some issue. The user in question is
[EMAIL PROTECTED] - maybe the hyphen is screwing things up? I
have no ide
Dan,
On Fri, 2004-01-23 at 09:04, Smart,Dan wrote:
> This command works every time from command line, but not passed as a param
> from SA_RESTART.
> "postfix stop ; sleep 15 ; /etc/init.d/spamassassin restart ; postfix start"
>
> It runs the postfix stop and then quits. Any idea why? I can cre
Has anyone else noticed frequent timeouts with Razor2 ?
I'm seeing timeouts nearly all the time from most of the Razor servers
causing spamd to take 10 seconds instead of the usual 1 second or so...
(I've also noticed more spam than usual slipping through)
Anyone know whats up ? Couldn't see anyt
At 02:39 PM 1/26/04 -0500, Kurt Yoder wrote:
body PHISHERMEN /http:\/\/(\w*?\.)+[a-zA-Z]{2,10}?[^/\s]*?@/
score PHISHERMEN 5.0
Don't use the body ruletype.. SA removes all HTML tags before running body.
Use uri instead of body.
It also seems you're just going to catch any URL which has a usern
At Mon Jan 26 16:12:30 2004, AltGrendel wrote:
>
> > describe SUBJECT_ENCODED_MY_TEST Subject begins with =?
> > scoreSUBJECT_ENCODED_MY_TEST 5.0
> >
> > When a message comes in:
> >
> > Subject:
> > =?ISO-8859-1?b?V2UgaGF2ZSB3aGF0IHlvdSBuZWVkIC0gQ2hlYXBlc3QgcHJlc2NyaXB0aW8vbnMgb24gdGhlIGl
On Mon, Jan 26, 2004 at 11:12:30AM -0500, AltGrendel is rumored to have said:
> >
> > scoreSUBJECT_ENCODED_MY_TEST 5.0
> >
> > X-Spam-Score: 3.422
> > BAYES_00
I think that's what's getting your score down.
> > ???
>
> Not sure what you're getting at here, try:
I think he d
I have sendmail/MIMEDefang/spamassassin running on our corporate email
server. One of our editors (a bigwig) has Outlook running as a POP client
from her house. By request she is running her primary email account from a
third-party email service.
Our other employees enjoy the satisfaction of hav
Are you learning spam as ham? Your bayes_00 would
counter to give a negative score and that's why these messages are slipping
in. If you increase the score on your local test it will most likely catch
these but you most likely have a bad bayes db.
You might want to turn Auto-learning off
Todd Seeleman wrote:
I'm running spamd/spamc v 2.55 on a Compaq DS20 running Tru64 UNIX v
5.1b. It processes ~ 5,500 pieces of email per day. Every week or so the
system slows to a point where I must reboot. I believe I've eliminated all
causes other than the spamd process. I've throttled i
1 - 100 of 108 matches
Mail list logo
