RE: [SAtalk] Does 2.63 put lines into msg body?

2004-01-29 Thread Bret Miller
Just wanted to find out if verson 2.63 inserts lines into message body of messages it sees as spam. Currently using 2.60 which does do that. Or maybe its configurable and I can set it so it doesn't do that. Confining insertion to headers only? It shouldn't be modifying the body of a

[SAtalk] tweaking .procmailrc to make things smoother

2004-01-29 Thread Chris Barnes
I am attaching my current .procmailrc (it's not long). I would like to tweak this to help make things run both faster and smoother for me. 1) instead of just checking the subject line for messages with the SA markup from my ISP (which is redunant), I would simply like to use promail to remove

Re: [SAtalk] Multi-line matching workarounds?

2004-01-29 Thread sckot
A couple days ago, I wrote: Some archive searching has revealed that multi-line matching isn't available yet. Is there another way to rework this rule that I'm missing, using meta rules perhaps? It would single-handedly get a lot of spam that I get, which is consistantly of the form of

Re: [SAtalk] Bigevil and thoughts....

2004-01-29 Thread Ray Dzek
Chris .. when are you gonna have the I *heart* BigEvil apparel and gifts on cybercafe? :) (see my notes below) - Original Message - From: Chris Santerre [EMAIL PROTECTED] To: Spamassassin-Talk (E-mail) [EMAIL PROTECTED] Sent: Friday, January 23, 2004 9:30 AM Subject: [SAtalk] Bigevil

Re: [SAtalk] Recieved From database

2004-01-29 Thread Sylvain Robitaille
On Mon, 26 Jan 2004, Regis Wilson wrote: As was noted before, a negative test will false-positive when there is no X-O-IP header. Right, but I did resubmit the rule with an [if-unset] clause added. If you missed that message, I can resend you a copy off-list, but the gist is to simply append

Re: [SAtalk] mail aliases and SA-learn

2004-01-29 Thread Kenneth Porter
--On Thursday, January 22, 2004 6:17 PM -0600 Kenneth Andresen [EMAIL PROTECTED] wrote: That the mail box users are going to /dev/null have been a practice from the server administrators before me. I don't know the original reason for why /dev/null was selected, however I can surely change it if

Re: [SAtalk] Clearing and retraining all bayes HAM

2004-01-29 Thread Theo Van Dinter
On Wed, Jan 28, 2004 at 11:17:15AM -0500, Robb Bryn wrote: Is there anyway to clear all the HAM for Bayes and retrain it without loosing all the SPAM? If you have all the messages you've learned from, you could loop over each one and do a sa-learn --forget. Otherwise, no. -- Randomly

Re: [SAtalk] Recieved From database

2004-01-29 Thread Sylvain Robitaille
On Tue, 27 Jan 2004, Robert Menschel wrote: I submit all my rules through the online Bugzilla system, following the documentation at http://wiki.spamassassin.org/w/ContributingNewRules Well, thank you yet again, for your help. I have (finally?) submitted this proposed rule as bug #2982. I

Re: [SAtalk] bigevil; chicknpox; weeds...

2004-01-29 Thread Chris Thielen
On Mon, 2004-01-26 at 13:06, Douglas Kirkland wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Monday 26 January 2004 07:28, Thorsten Schacht wrote: Hey, What is your opinion to that cf's? Does it make sence to take them all, or maybe only parts of them? Is it a good

[SAtalk] Bigevil and thoughts....

2004-01-29 Thread Chris Santerre
I received a report of an FP in bigevil. The domain was playaudiomessage.com. A quick google shows tons of hits in news.admin.net-abuse.sightings. It had been my hope the bigevil would be ZERO fp. However I'm not going to let the fact that a domain may be used 90% by spammers and 10% by legit sway

RE: [SAtalk] bayes question: HAM

2004-01-29 Thread Thomas Kinghorn
Sorry about that. My spamd is running as xadmin xadmin 17057 1 0 Jan27 ?00:00:22 /usr/bin/perl -T -w /usr/bin/spamd -d -a -u xadmin Do I need to run sa-learn as xadmin If so, I could kick myself, I have been training it while logged in as root... Thanks Tom -Original

RE: [SAtalk] CBL?

2004-01-29 Thread Covington, Chris
It's great, I run it at the MTA level and it drops tons of junk without any false positives to date (after about 4 months usage). Chris -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dan Wilder Sent: Monday, January 26, 2004 5:50 PM To: Spamassassin

[SAtalk] Re: Auto-learn SA after having trained it

2004-01-29 Thread Bryan Hoover
Matt Kettler wrote: At 10:19 AM 1/23/2004, Mark Squire wrote: Hi all, I have been training SA manually for a couple of weeks now. I estimate a good 2000 emails for both Spam and Ham have been learned by it. Coupla questions though . . . I want to put it into auto-learn mode because I have

Re: [SAtalk] stats

2004-01-29 Thread Bob Apthorpe
On Fri, 23 Jan 2004, AltGrendel wrote: On Fri, 2004-01-23 at 00:14, Bob Apthorpe wrote: Hi, On Thu, 22 Jan 2004 15:12:06 -0600 Wagner One [EMAIL PROTECTED] wrote: On 1/22/2004 1:15 PM, Bob Apthorpe wrote: Note: I think this my hacked-up version of sa-stats.pl at

RE: [SAtalk] Re: W32.Novarg.A@mm virus

2004-01-29 Thread Richard Beyer
Thanks for all the help guys. I've installed clamav and set it to quietly refuse the Novarg virus (rather than trying to bounce all back to non-existent senders), and it seems to be successfully stomping on the beasty. Thanks again - Regards, Richard -Original Message- From: [EMAIL

[SAtalk] Cyrus IMAP Server and SA

2004-01-29 Thread Peter P. Benac
Greetings, Has anyone implemented SpamAssassin on a mail server running sendmail and Cyrus's IMAP Server? If so, did you run into any problems? Regards, Pete Peter P. Benac, CCNA Emacolet Networking Services, Inc Providing Systems and Network Consulting, Training, Web Hosting Services

RE: [SAtalk] [OT] Working with FPs from the other end.

2004-01-29 Thread Alan Munday
Chris Likewise... I have a client who designs websites with ColdFusion. He was having a nightmare time with spam so I routed his mail through my server... The consequence of this was that we could see that all of the mail he originated from his web sites were scoring high. Now he has

Re: [SAtalk] [RD] Meta-tripwire idea

2004-01-29 Thread Robert Menschel
Hello John, Monday, January 26, 2004, 5:10:32 AM, you wrote: JW It struck me that since individual tripwire rules are at risk of FPs, JW but that multiple tripwire hits on the same message are much less so, JW it might be worthwhile assigning a significantly higher score to JW messages that hit

RE: [SAtalk] Razor server timeout problems ?

2004-01-29 Thread Alan Munday
I think that given that there is a virus storm going on right now, that this sort of behaviour could be expected. Alan I actually just noticed this now. The razor2 servers aren't responding properly it would seem. Haven't since yesterday.

RE: [SAtalk] Re: W32.Novarg.A@mm virus

2004-01-29 Thread up
How is the resource useage with clamav? I'm tempted to install it, but the cpus on that server are already pretty stressed just dealing with spamc (I already offloaded spamd to another box) and everything else it has to do, and am hesitant to add much more... TIA, On Wed, 28 Jan 2004, Richard

Re: [SAtalk] list working

2004-01-29 Thread WA9ALS - John
is this list working today? Seems off and on... I posted a few hours ago and haven't seen it yet. I've also gotten several copies of mail sent over the weekend. --- The SF.Net email is sponsored by EclipseCon 2004 Premiere Conference on

Re: [SAtalk] Spamassassin on Qmail Relay

2004-01-29 Thread AltGrendel
On Thu, 2004-01-22 at 11:48, Atif Faruqui wrote: Hi, I am running Qmail-1.03 running qmail-scanner-1.16 which calls SpamAssassin-2.61. This is running on a Solaris 9 box. This is a relay configuration in which relay server accepts mail, do spam filtering (spamassassin) and virus check

RE: [SAtalk] test

2004-01-29 Thread Colin A. Bartlett
Matt Thoene Sent: Saturday, January 24, 2004 2:09 PM Sorry for this, I stopped receiving spamassassin-talk emails late Friday night... Doesn't look like anyone's been getting them. Either that or we all decided to take a break this weekend. Any theories? There's nothing in the archive at

[SAtalk] Fail to install spamassassin

2004-01-29 Thread Peggy
Hi, I failed to install spamassassin 2.63 on Unix 5.9. When I tried to make libsnp.a, I got the following error: [EMAIL PROTECTED] 569 gmake libsnp.a gcc -I. -c -o snprintf.o snprintf.c snprintf.c: In function `__uqtoa': snprintf.c:183: error: conversion to non-scalar type requested

[SAtalk] problem with userprefs and SQL (spamass-milter)

2004-01-29 Thread Daniel Paessler
i'm new to this list, so hi to all first... i have the following problem here: i want to use the userprefs, stored in a sql database. i start spamd with -a -x -q -D spamass-milter is started with -u and in my logs i get the messages, that a sql query is done: Jan 26 12:41:34 explorer

RE: [SAtalk] bayes question: HAM

2004-01-29 Thread Matt Kettler
At 08:10 AM 1/28/04 +0200, Thomas Kinghorn wrote: My spamd is running as xadmin xadmin 17057 1 0 Jan27 ?00:00:22 /usr/bin/perl -T -w /usr/bin/spamd -d -a -u xadmin Do I need to run sa-learn as xadmin If so, I could kick myself, I have been training it while logged in as

Re: [SAtalk] BAYES_99

2004-01-29 Thread Robert Menschel
Hello David, Saturday, January 24, 2004, 8:01:24 PM, you wrote: DH I've been playing with bayes on my home machine and have been very impressed DH with it. I was however wondering to what degree everyone else trusts DH BAYES_99? Is it generally accepted as a sure spamsign or do you expect ti

Re: [SAtalk] bayes learning and sa-talk list

2004-01-29 Thread Robert Menschel
Hello PieterB, Monday, January 26, 2004, 8:03:45 AM, you wrote: P Is there some way to prevent spamassassin from using SA-talk messages P for Bayes auto_learning. My bayes filter seems to be less effective P since a lot of spamphrases/tokens are discussed on this list. My method: 1) I subscribe

Re: [SAtalk] Re: AWL and whitelist question

2004-01-29 Thread Gavin
I was wondering that same thing, and have noticed that setting it to 0 will still update the database with information. Any way to completely turn this functionality off? Gavin At 04:40 PM 1/23/04 +0200, snowchyld wrote: how do you turn _off_ AWL ? Depends on version, but in 2.6x it is

Re: [SAtalk] sa-learn spamassassin question

2004-01-29 Thread Martin Radford
At Wed Jan 28 09:39:06 2004, jean-christophe valiere wrote: I agree with what you said, the probleme is that in the mail I attached the word have some swaped letters like: Hi, Genierc and Sepur Viarga (Caiils) available online! Most trusted online source! Cilais

[SAtalk] Make Test errors in log file question

2004-01-29 Thread Keith Olmstead
Hello, I don't know if this is anything, but I figured that I would ask anyway. When I run make test to test if my build is fine I get the following error message in my log. Jan 23 15:15:46 spamtest.server.net spamc[8880]: [ID 990649 mail.error] connect(AF_INET) to spamd at 127.0.0.1 failed,

Re: [SAtalk] how to change the bayes auto_learn threshold to zero or above?

2004-01-29 Thread Brett Dikeman
Martin Radford wrote: It might be because you get the occasional false positive that you want to avoid (but all the rest come under your threshold). You probably would want these autolearned as ham. Actually, at the moment the bayes engine thinks 99% of the messages going through it are spam,

Re[3]: [SAtalk] Another v word got through

2004-01-29 Thread Robert Menschel
Hello Matt, Wednesday, January 28, 2004, 7:59:48 PM, you wrote: MK Sweet.. thanks man, I've been meaning to run mass-check on it myself.. MK I've been wondering about the FPs in the MALEDYSFUNCTION rules.. it's MK obvious all the FPs hit both it and obfu, which is weird. MK I've had several

Re: [SAtalk] stats

2004-01-29 Thread AltGrendel
On Fri, 2004-01-23 at 15:19, Justin Mason wrote: svn co http://svn.apache.org/repos/asf/incubator/spamassassin/trunk or http://svn.apache.org/viewcvs.cgi/incubator/spamassassin/trunk/?root=Apache-SVN - --j. I tried those and got a connection timeout. Anyone else have this problem? --

[SAtalk] Failed to make libsnp.a

2004-01-29 Thread Peggy Kam
Hi, I am trying to install SpamAssassin 2.63 under SunOS 5.9 by making libsnp.a; however, I keep encountering the following error: gcc -I. -c -o snprintf.o snprintf.c snprintf.c: In function `__uqtoa': snprintf.c:183: error: conversion to non-scalar type requested snprintf.c:185: error:

Re: [SAtalk] help please....cant stop them at all.

2004-01-29 Thread Martin Radford
At Fri Jan 23 21:30:58 2004, Martin Radford wrote: Five days to reach the list! I hoped SF would have cleared the backlog sooner than that! This seems to be a signature with these mails, but I haven't put together a rule for them yet. The following *might* work: header L_SPAMMY_RCVD

Re: [SAtalk] how to change the bayes auto_learn threshold to zero or above?

2004-01-29 Thread Martin Radford
At Fri Jan 23 19:44:34 2004, Brett Dikeman wrote: Also- maybe it's just me, but it seems rather silly to not allow the user to auto-learn messages that have been whitelisted, either sitewide or user-specific. Could someone a)explain the reasoning here and b)tell me how to change this? It

Re: [SAtalk] Multi-line matching workarounds?

2004-01-29 Thread sckot
A couple days ago, I wrote: Some archive searching has revealed that multi-line matching isn't available yet. Is there another way to rework this rule that I'm missing, using meta rules perhaps? It would single-handedly get a lot of spam that I get, which is consistantly of the form of

Re: [SAtalk] thank you guys

2004-01-29 Thread Matt Kettler
At 10:22 AM 1/23/2004, JRiley wrote: HolyMoly...69.27 seconds?! How'd you port SpamAssassin to run on a Commodore Vic-20? Something tells me that most of that time is likely due a couple of network tests that are timing out for _every_ email. ie: he might have DCC installed, but not allow the

Re: [SAtalk] 'spamassassin -d' not stripping SA reports from email

2004-01-29 Thread David B Funk
On Wed, 21 Jan 2004, Matt Kettler wrote: At 10:41 PM 1/20/04 -0600, C. Bensend wrote: Is the problem that I'm _forwarding_ the tagged emails from one host to the other? I don't have the capability to bounce, I can only forward. A forwarded message is a brand new message. That brand new

RE: [SAtalk] whitelist problems

2004-01-29 Thread Kang , Joseph S.
I have messages I am desperatly trying to whitelist from SA. I am using SpamAssassin on a Solaris 8 server using sendmail 8.12.10 and MIMEDefang. I have tried various lines in /etc/mail/spamassassin/sa-mimedefang.cf to no avail: whitelist_from [EMAIL PROTECTED] whitelist_from

[SAtalk] cannot expire bayes

2004-01-29 Thread Adam Denenberg
Hey, i have a _very_ large bayes DB with about 2million tokens. I dont want to lose all my token data but for some reason bayes wont expire. I keep getting the following error. synced Bayes databases from journal in 88 seconds: 52849 unique entries (83822 total entries) debug: bayes: expiry

RE: [SAtalk] A simple tool to extract URL's from mail folders

2004-01-29 Thread Gary Funck
Wow. I sent that e-mail out last *week*, and it is just dribbling in today. Received: from intrepid.intrepid.com ([192.195.190.1] ident=[1qHbG1J2WyZEN0gY3ydWgHO2WHps6+zg]) by sc8-sf-mx1.sourceforge.net with esmtp (TLSv1:AES256-SHA:256) (Exim 4.30) id 1Ak5VT-TZ-H9 for

Re: [SAtalk] Filtering html messages

2004-01-29 Thread Kenneth Andresen
Thank you for your answer! One thing - the blackhair.cf, should it be part of my current local.cf, or will it work by simply adding the file to /etc/mail/spamassassin/? Will I need to modify anything else to refer to this file? On Mon, 2004-01-26 at 13:46, Adam D. Lopresto wrote: Actually,

Re: [SAtalk] Re: Meta-tripwire idea

2004-01-29 Thread Dennis Davis
From: Matthew Trent [EMAIL PROTECTED] Subject: [SAtalk] Re: Meta-tripwire idea To: [EMAIL PROTECTED] Date: Tue, 27 Jan 2004 08:06:41 -0800 ... That would also help with the problem of the report exceeding Exim's header size limit when a ton of TW or BH rules hit. I suspect this is the problem,

Re: [SAtalk] Re: Meta-tripwire idea

2004-01-29 Thread Fred
Matthew Trent wrote: John Wilcock wrote: That would also help with the problem of the report exceeding Exim's header size limit when a ton of TW or BH rules hit. I need to do more testing, here is the early results from my personal corpus. It appears with the current score, the rules are less

RE: [SAtalk] the list itself???

2004-01-29 Thread Thomas Kinghorn
me either -Original Message- From: Tim B [mailto:[EMAIL PROTECTED] Sent: 26 January 2004 06:44 To: Spamassassin List Subject: [SAtalk] the list itself??? did I get booted off the list, no list traffic or is sourceforge down? I haven't gotten anything really since friday

Re: [SAtalk] Razor server timeout problems ?

2004-01-29 Thread Matt Kettler
At 02:00 AM 1/28/2004, Simon Byrnand wrote: Has anyone else noticed frequent timeouts with Razor2 ? I disabled it Friday due to timeouts. In my experience, razor often has short-term problems that last a couple days then clear up. Right now they're probably experiencing high load, just like

RE: [SAtalk] some spam not getting scored

2004-01-29 Thread James Herschel
I just made a related post minutes after this original post. I am experiencing the exact same issue and included my headers with the original post entitled Strange Headers - no score assigned Thanks in advance for any help you can provide. James -Original Message- From: [EMAIL

Re: [SAtalk] Help! (Dumb noob questions about upgrading and other stuff)

2004-01-29 Thread Kenneth Porter
--On Friday, January 23, 2004 10:18 AM -0800 JR [EMAIL PROTECTED] wrote: But now I'm faced with the daunting task of upgrading (via CPAN on RH 7.2, and I don't know squat about CPAN) from 2.55. 7.2 has been end-of-lifed, so you might think about starting from scratch. I'd suggest getting a

[SAtalk] surprising low score for this spam mail

2004-01-29 Thread Andreas J Koenig
I wonder why spamassassin didn't calculate a higher score for this mail. Are not adu1t, p0rn, and m0vies words that trigger some spam points? The mail with the relevant headers is appended. -- andreas Date: Sat, 24 Jan 2004 19:54:27 GMT From: Oadqn Xazazagis [EMAIL PROTECTED] To: [EMAIL