Re: [SAtalk] autolearning spam as ham?

2004-01-30 Thread Bob Apthorpe
[THIS LIST HAS MOVED! see http://useast.spamassassin.org/lists.html .] On Thu, 29 Jan 2004 13:08:58 +0100 PieterB <[EMAIL PROTECTED]> wrote: > Can somebody explain me why a spammessage gets learned as ham? Dunno. Why are you running the message through SpamAssassin twice? -- Bob > X-Spam-Stat

[SAtalk] several SA files? and testing my local.cf

2004-01-30 Thread Jens Benecke
[THIS LIST HAS MOVED! see http://useast.spamassassin.org/lists.html .] Hi, is it possible to have several _local_ configuration files (not only /etc spamassassin/local.cf, but also e.g. whitelist.cf, words.cf, etc in /etc spamassassin)? I didn't find any "include" statement etc. in Mail::SpamAss

[SAtalk] Re: bmastgr

2004-01-30 Thread Robert Menschel
[THIS LIST HAS MOVED! see http://useast.spamassassin.org/lists.html .]Thursday, January 29, 2004, 8:24:15 PM, I wrote: RM> Even better, since it will catch use of this address in a TO, CC, and/or RM> From header, might be: RM> ... RM> I don't yet have stats for this meta rule (I haven't even l

[SAtalk] Spamd don't start

2004-01-30 Thread Johann Spies
I have installed Spamassassin 2.61-2 on Debian Sarge, but I can't get the daemon to run. Running "/etc/init.d/spamassassin start" does not complain about any error, but nothing happens. There is no spamd process running. I can not find any reference to spamassassin or spamd in /var/log either.

Re: [SAtalk] Re: Meta-tripwire idea

2004-01-30 Thread Matthew Trent
[THIS LIST HAS MOVED! see http://useast.spamassassin.org/lists.html .]On Tuesday 27 January 2004 09:11 am, Dennis Davis wrote: > >From: Matthew Trent <[EMAIL PROTECTED]> > >Subject: [SAtalk] Re: Meta-tripwire idea > >To: [EMAIL PROTECTED] > >Date: Tue, 27 Jan 2004 08:06:41 -0800 > > ... > > >That

Re: [SAtalk] cannot expire bayes

2004-01-30 Thread Theo Van Dinter
On Wed, Jan 28, 2004 at 09:55:06AM -0500, Adam Denenberg wrote: > any advice on how to force an expire successfully here? You can't force an expiry, you can only force an expiry attempt. > I am running 2.60 on solaris 9. I would first recommend upgrading to 2.63, then try again. You'll still

[SAtalk] normal for autolearn to activate by itself?

2004-01-30 Thread Vermyndax
[THIS LIST HAS MOVED! see http://useast.spamassassin.org/lists.html .]I am using SA 2.63. It's been running fine. During the checkers, I keep seeing in the headers for SA "autolearn=no." Now, all of a sudden after some usage, SA now says "autolearn=spam" or "autolearn=ham." How did this feat

Re: [SAtalk] [Fwd: ddo hher till you fall a sleep]

2004-01-30 Thread Anthony Martinez
[THIS LIST HAS MOVED! see http://useast.spamassassin.org/lists.html .]On Sat, Jan 24, 2004 at 10:49:37AM +0400, Dr Aldo Medina carved this out of pure phosphors: > Is there any way to protecto form this?. I just received this email: > > TThe coomputeer mmust haave the 'suspend too RRAAM' feeatt

[SAtalk] bmastgr

2004-01-30 Thread Robert Menschel
In every domain I manage, we receive spam directed to [EMAIL PROTECTED] I can't imagine I'm the only one. Apparently some address harvester somewhere along the way harvested and then mangled [EMAIL PROTECTED], dropping the leading "we" and replacing the "ter" with "tgr". I created this rule toda

[SAtalk] looking for positive effects, pgp signatures?

2004-01-30 Thread Eric W. Bates
[THIS LIST HAS MOVED! see http://useast.spamassassin.org/lists.html .]I have a customer using a Verizon DSL which automatically scores a number of hits from the dynamic IP RBL's. We all understand the impossibility of changing Verizon's lax enforcement policies; but I'm hoping there might be a

Re: [SAtalk] [RD] spammer reactions to antidrug (humorous)

2004-01-30 Thread Matthew Cline
On Friday 30 January 2004 05:52 pm, Kelson Vibber wrote: > At 09:04 AM 1/30/2004, Brian Godette wrote: > >Maybe they'll start writting in Middle English to target that untapped > > market of english lit majors/grads. > > I can just see it: > > "Whan thou wouldst gaine the favour of a lass > Thy Pr

[SAtalk] Bigevil 2.10 posted

2004-01-30 Thread Chris Santerre
It's been about 9 days since the last update. Longest ever. This update was an attempt at having more then one person work on the file. Lets say it was a learning experience :) Some great tweaking was done and awesome bug testing by SARE members. Can't thank them enough. Let me know IMMEDIATELY o

Re: [SAtalk] e.g. whitelisting

2004-01-30 Thread Tim Litwiller
Spyros Tsiolis wrote: For example whitelisting. Any examples on whitelisting messages that are marked as spam when they are not ? From what I understand from http://au.spamassassin.org/doc/Mail_SpamAssassin_Conf.html if you get legit messages as spam, you can configure in /etc/mail/spamassas

Re: [SAtalk] CBL?

2004-01-30 Thread Dan Wilder
On Thu, Jan 29, 2004 at 11:31:42PM +0100, Kai Schaetzl wrote: > Dan Wilder wrote on Mon, 26 Jan 2004 14:49:36 -0800: > > > This is a highly automated RBL based on some big spamtraps, > > > > I'm finding spamtrap RBLs quite problematic because they list the wrong > culprits. What does the mail se

RE: [SAtalk] Re: Installation failure

2004-01-30 Thread Alan Munday
Peggy Search for it at http://search.cpan.org Alan > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Peggy > Sent: 29 January 2004 15:29 > To: [EMAIL PROTECTED] > Subject: [SAtalk] Re: Installation failure > > > Hi, > > > > Does anyone kno

Re: [SAtalk] spamassassin again.

2004-01-30 Thread Matt Kettler
At 01:22 PM 1/30/2004, Spyros Tsiolis wrote: 1. spamassassin ! Plain sa installation . What next ? Training ? 1000 Spam and 1000 Ham ?? Bayes training is a good thing. Ideal is to have a spam/ham training ratio close to what comes into your server in reality. However, considerable variance

[SAtalk] e.g. whitelisting

2004-01-30 Thread Spyros Tsiolis
For example whitelisting. Any examples on whitelisting messages that are marked as spam when they are not ? From what I understand from http://au.spamassassin.org/doc/Mail_SpamAssassin_Conf.html if you get legit messages as spam, you can configure in /etc/mail/spamassassin/local.cf to treat it a

RE: [SAtalk] Re: Bigevil and thoughts....

2004-01-30 Thread Jennifer Wheeler
Hi Scott > > On Fri, 23 Jan 2004 12:30:13 -0500, Chris Santerre > <[EMAIL PROTECTED]> writes: > > > I received a report of an FP in bigevil. The domain was > > playaudiomessage.com. A quick google shows tons of hits in > > news.admin.net-abuse.sightings. It had been my hope the bigevil > > would

[SAtalk] Re: Bigevil and thoughts....

2004-01-30 Thread Scott A Crosby
On Fri, 23 Jan 2004 12:30:13 -0500, Chris Santerre <[EMAIL PROTECTED]> writes: > I received a report of an FP in bigevil. The domain was > playaudiomessage.com. A quick google shows tons of hits in > news.admin.net-abuse.sightings. It had been my hope the bigevil > would be ZERO fp. However I'm no

Re: [SAtalk] Failed to parse line in SpamAssassin configuration, skipping: use_auto_whitelist 1

2004-01-30 Thread Michael Parker
On Fri, Jan 30, 2004 at 08:31:39PM +0100, Kai Schaetzl wrote: > Michael Parker wrote on Fri, 30 Jan 2004 10:43:34 -0600: > > > perldoc Mail::SpamAssasisn::Conf and search for use_auto_whitelist. > > If you find it, then I stand corrected. I'm guessing it's not there. > > Ah, well, yes, you are r

Re: [SAtalk] autolearning spam as ham?

2004-01-30 Thread Matt Kettler
At 11:51 AM 1/30/2004, Fred wrote: A bug in 2.6 caused messages which hit BAYES_99 to be learned as ham, this has been fixed, you should upgrade. For reference, there was no bug per se. The fact that the message hit BAYES_99 did not cause it to be learned as ham. However, newer versions of SA,

Re: [SAtalk] interesting subject masking

2004-01-30 Thread Brent J. Nordquist
On Fri, 30 Jan 2004, Luka Z. Gerzic <[EMAIL PROTECTED]> wrote: > Original subject: > =?iso-8859-1?B?T3Zlcm5pZ2h0IERlbGl2ZXJ5IC0gWW91IGdldCBtb3JlIGZvciBsZXNzIQ==? > = > > Un-masked subject: Overnight delivery - you get more for less! http://marc.theaimsgroup.com/?l=spamassassin-talk&m=10740913112

Re: [SAtalk] cannot expire bayes

2004-01-30 Thread Adam Denenberg
these are all mails that get learned about 30 days after being stored on the system. Basically people have 30 days to clean up their mail.. if not a FP, then we learn it as spam. So all learned mail is about 30 days old to the tee.. do i need to change my method of learning? thanks adam On Fri

Re: [SAtalk] CBL?

2004-01-30 Thread Kai Schaetzl
Dan Wilder wrote on Mon, 26 Jan 2004 14:49:36 -0800: > This is a highly automated RBL based on some big spamtraps, > I'm finding spamtrap RBLs quite problematic because they list the wrong culprits. What does the mail server sending the junk has to do with the original sender? Nothing other tha

Re: [SAtalk] how to change the bayes auto_learn threshold to zero or above?

2004-01-30 Thread Kris Deugau
Brett Dikeman wrote: > I tried setting bayes_auto_learn_threshold_nonspam to a positive > value- almost all legitimate email we get on the particular system is > marked somewhere between 0 and 2- rarely any lower. Ever(save for > whitelisting). You've found the right setting, and I'm not aware of

RE: [SAtalk] Can someone explain this?

2004-01-30 Thread Scott Williams , Area4
My suggestion is to move your filter threshold to 4.5 and stop worrying about it. SCott At 02:31 PM 1/30/2004, [EMAIL PROTECTED] wrote: I believe the idea is right but your example is wrong. 4.92 rounds to 4.9, not to 5.0 It may have been any number between 4.95 and 4...., say 4.983 > I

Re: [SAtalk] Failed to parse line in SpamAssassin configuration, skipping: use_auto_whitelist 1

2004-01-30 Thread Kai Schaetzl
Michael Parker wrote on Fri, 30 Jan 2004 10:43:34 -0600: > perldoc Mail::SpamAssasisn::Conf and search for use_auto_whitelist. > If you find it, then I stand corrected. I'm guessing it's not there. Ah, well, yes, you are right. It's not there. I was using http://www.spamassassin.org/doc/Mail_Sp

Re: [SAtalk] Backhair FP

2004-01-30 Thread Matthew Trent
On Friday 30 January 2004 11:19 am, Brent J. Nordquist wrote: > Yup; my X-Face triggers one chickenpox. If you only get one I don't think > that's a biggie. No, but IMHO it should be as accurate as possible... -- Matt Systems Administrator Local Access Communications 360.330.5535 -

[SAtalk] Re: Bigevil and thoughts....

2004-01-30 Thread Scott A Crosby
On Thu, 29 Jan 2004 14:44:36 -0500, Chris Santerre <[EMAIL PROTECTED]> writes: > > I'm not saying that the domain should be forgotten, but that iit > > should at least be in a different list. > > > > 'Bigevil.cf' -- never once seen in ham. > > 'Maybeevil.cf' -- a small number of hits in ham > >

RE: [SAtalk] Backhair FP

2004-01-30 Thread Jennifer Wheeler
My bad. I just posted a change to body rule with the set, but it has to be rawbody. I realized this as soon as I hit send. (oops) Now... I don’t know if rawbody looks at the headers... ?? If that doesn't fix it, I wouldn't know how to miss that. Maybe someone else will know. Jennifer > > Lo

RE: [SAtalk] Backhair FP

2004-01-30 Thread Jennifer Wheeler
Hi Matthew, > > Looks like Backhair is triggering on my X-Face header. At least that's the > only thing I can see that might be it. See the following email (BH == > BackHair): I changed the rule from full to body. Could you dl and test the current set to see if it misses now? It should, being t

Re: [SAtalk] stats

2004-01-30 Thread Kenneth Porter
--On Thursday, January 29, 2004 12:44 PM -0600 Bob Apthorpe <[EMAIL PROTECTED]> wrote: > http://svn.apache.org/viewcvs.cgi/incubator/spamassassin/trunk/tools/?root=A > pache-SVN Just tried this out on Fedora Core 1 with SA 2.63 and I had to use "--start yesterday" to get output. Otherwise I see t

Re: [SAtalk] Re: spammer reactions to antidrug (humorous)

2004-01-30 Thread Chr. von Stuckrad
On Fri, Jan 30, 2004 at 01:10:52PM -0500, Bob George wrote: > While I like to think they're slaving away trying to come up with > stuff that's almost-but-not-completely-totally-unlike-spam > manually, I suspect it's automated by now. It must be; yesterday I got a spam, where every word *including*

Re: [SAtalk] cannot expire bayes

2004-01-30 Thread Theo Van Dinter
On Fri, Jan 30, 2004 at 01:32:11PM -0500, Adam Denenberg wrote: > hmm that is wierd b/c i learned about 500 a nite or so for the last 3 to > 4 weeks... were these mails recently sent or old mails that you're learning on now? > sigh.. does this mean corruption in the DB ? It could, but I doubt

Re: [SAtalk] cannot expire bayes

2004-01-30 Thread Adam Denenberg
hmm that is wierd b/c i learned about 500 a nite or so for the last 3 to 4 weeks... sigh.. does this mean corruption in the DB ? adam On Fri, 2004-01-30 at 13:21, Theo Van Dinter wrote: > On Fri, Jan 30, 2004 at 12:27:53PM -0500, Adam Denenberg wrote: > > debug: bayes: expiry check keep size,

[SAtalk] Open Mosix

2004-01-30 Thread Robert Leonard III
Has anybody tried using SA with OpenMosix? Seems like a good way to push out some of those processes.. got a bunch of old P90 boxes sitting around I could put to just such a task.. Just wondering if it has been used, and if there are any concerns or gotchas I'd need to lookout for! Thanks! --

[SAtalk] spamassassin again.

2004-01-30 Thread Spyros Tsiolis
Hello , this has been posted also to the xmail list. I thought I had problems posting here so... --- Hello lst !! (in a vibrant loud attittude [and voice :-)] ! ) OK ! Topic of the month and the next ... Spamassassin !! OK , a co

Re: [SAtalk] Problem with regex

2004-01-30 Thread Chris Thielen
On Wed, 2004-01-28 at 17:17, Jason White wrote: > Greetings, all. > I'm using Spamassassin 2.63, called from procmail. I recently tried > to add my own rules to catch the mangled spellings of [a particular word > I can't

Re: [SAtalk] cannot expire bayes

2004-01-30 Thread Theo Van Dinter
On Fri, Jan 30, 2004 at 12:27:53PM -0500, Adam Denenberg wrote: > debug: bayes: expiry check keep size, 75% of max: 75 > debug: bayes: token count: 2203679, final goal reduction size: 1453679 > debug: bayes: First pass? Current: 1075482160, Last: 1075479068, atime: > 1382400, count: 1019, newd

Re: [SAtalk] Cannot install SpamAssassin 2.63

2004-01-30 Thread Theo Van Dinter
On Fri, Jan 30, 2004 at 12:31:10PM -0500, Philip Mak wrote: > Warning: I could not locate your pod2man program. Please make sure, > your pod2man program is in your PATH before you execute 'make' I really wish people would read the FAQ before posting questions... http://wiki.spamassassin.

Re: [SAtalk] Can someone explain this?

2004-01-30 Thread Theo Van Dinter
On Fri, Jan 30, 2004 at 08:56:54AM -0800, Evan Platt wrote: > I think we need a FAQ entry for this - this is covered QUITE often. You mean such as: http://wiki.spamassassin.org/w/StatusRounding :) -- Randomly Generated Tagline: "Software is like sex; it's better when it's free." - Linus Torva

RE: [SAtalk] Cannot install SpamAssassin 2.63

2004-01-30 Thread Spyros Tsiolis
hello, 1. I think perl2pod is a package. What installation of linux do you have ? Is it slackware ? Gentoo ? Try finding "perl2pod" as a package on the installation cd's , e.g. : # mount -t iso9660 /dev/hdb /mnt/cdrom (hdb being primary-slave, maybe is hdc or hdd) # cd /mnt/cdrom # find . -dep

[SAtalk] [RD] antidrug 0.42 - minor update

2004-01-30 Thread Matt Kettler
http://mywebpages.comcast.net/mkettler/sa/antidrug.cf Corrected mis-use of __DRUGS_MALEDYSFUNCTION13 in LOCAL_DRUGS_MALDYSFUNCTION_OBFU. 13 does match the plain, unmodified v-word, so it can't be used as a sign of obfuscation. Corrected some un-escaped litteral ;'s in __DRUGS_MALEDYSFUNCTION13.

Re: [SAtalk] [RD] spammer reactions to antidrug (humorous)

2004-01-30 Thread Jonathan Nichols
Chris Santerre wrote: -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Friday, January 30, 2004 10:55 AM To: [EMAIL PROTECTED] Subject: [SAtalk] [RD] spammer reactions to antidrug (humorous) Today I got an interesting form of obfuscation, apparently to avoid antidrug.

[SAtalk] Re: spammer reactions to antidrug (humorous)

2004-01-30 Thread Bob George
Brian Godette wrote: > Maybe they'll start writting in Middle English to target that > untapped market of english lit majors/grads. Or Elvish for the larger market of Tokien die-hards! Are the spammers using some sort of filter to obscure the text into something consistently decipherable? The mes

Re: [SAtalk] Can someone explain this?

2004-01-30 Thread Andy Donovan
I thought it was a greater than number ... if it equals it doesn't count ... >>> "Chris Barnes" <[EMAIL PROTECTED]> 01/30/04 11:42AM >>> I'm confused. A spam message got through and had this in the header: X-Spam-Status: No, hits=5.0 required=5.0 tests=HTML_60_70,HTML_IMAGE_ONLY_04, HTML_MESSA

Re: [SAtalk] Cannot install SpamAssassin 2.63

2004-01-30 Thread Peter Campion-Bye
I've had this problem in the past, I think it was something to do with UTF char sets. Try 'echo $LANG' - if it says 'en_US.UTF-8' type 'export LANG=en_US' and start the build again from scratch, I think this will sort it out. Peter > [EMAIL PROTECTED] Mail-SpamAssassin-2.63]# perl Makefile.PL > Wh

[SAtalk] Backhair FP

2004-01-30 Thread Matthew Trent
Looks like Backhair is triggering on my X-Face header. At least that's the only thing I can see that might be it. See the following email (BH == BackHair): -- Begin Return-path: Envelope-to: xxx Delivery-date: Fri, 30 Jan 2004 09:42:49 -0800 Received: from alderaan.localaccess.com (

RE: [SAtalk] [RD] Justified text

2004-01-30 Thread Larry Gilson
Hi Regis, > -Original Message- > From: [EMAIL PROTECTED] [mailto:spamassassin-talk- > [EMAIL PROTECTED] On Behalf Of Regis Wilson > Sent: Monday, January 26, 2004 4:57 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] [RD] Justified text > > Got some new variants on the "justified text" ratw

Re: [SAtalk] How to _not_ punish authenticated SMTP users for using dialup IPs?

2004-01-30 Thread Mitch (WebCob)
Hi Jens. I already brought this up a while ago - Theo said something about version 2.70 I filed a bug report in bugzilla, feel free to add followup. Please keep me in the loop if you find a better way. Thanks m/ Jens Benecke ([EMAIL PROTECTED]) wrote*: > >Hi, > >we have quite a lot of people w

[SAtalk] FP for FAKE_HELO_YAHOO ?

2004-01-30 Thread Pedro Sam
Hi all, I received the following mail from a yahoo web mail user, but the FAKE_HELO_YAHOO keeps on hitting. Is this a false positive? Thanks, Pedro Received: from localhost (localhost [127.0.0.1]) by p2sam-pc.rogers.com (8.12.10/8.12.10) with ESMTP id i0UFkSLL016979 for <[EMA

Re: [SAtalk] [RD] spammer reactions to antidrug (humorous)

2004-01-30 Thread Kelson Vibber
At 09:04 AM 1/30/2004, Brian Godette wrote: Maybe they'll start writting in Middle English to target that untapped market of english lit majors/grads. I can just see it: "Whan thou wouldst gaine the favour of a lass Thy Prowess shold be paramount to last Wende thy way to phisik of our Druggers And

Re: [SAtalk] Can someone explain this?

2004-01-30 Thread Brett Simpson
I think the hits= is a rounded number. So it may have been 4.92 for example. >>> "Chris Barnes" <[EMAIL PROTECTED]> 01/30/04 11:42AM >>> I'm confused. A spam message got through and had this in the header: X-Spam-Status: No, hits=5.0 required=5.0 tests=HTML_60_70,HTML_IMAGE_ONLY_04, HTML_MESSA

[SAtalk] Re: [RD] spammer reactions to antidrug (humorous)

2004-01-30 Thread Scott A Crosby
On Fri, 30 Jan 2004 10:55:07 -0500, Matt Kettler <[EMAIL PROTECTED]> writes: > Today I got an interesting form of obfuscation, apparently to avoid > antidrug.cf. > > > I'm not sure wether to bother with adding rules for this, or be > satisfied that the obfuscations are so severe that the message

Re: [SAtalk] cannot expire bayes

2004-01-30 Thread Adam Denenberg
ok upgraded to 2.63 and here is the new output. debug: bayes: 4047 tie-ing to DB file R/O /share/spam/bayes_toks debug: bayes: 4047 tie-ing to DB file R/O /share/spam/bayes_seen debug: bayes: found bayes db version 2 debug: Score set 2 chosen. debug: Initialising learner debug: Initialising learne

Re: [SAtalk] Clearing and retraining all bayes HAM

2004-01-30 Thread Matt Kettler
At 11:17 AM 1/28/2004, Robb Bryn wrote: Is there anyway to clear all the HAM for Bayes and retrain it without loosing all the SPAM? I think that my HAM portion of the db has been corrupted by the autolearn feature (which I have now disabled) and I'de really like to retrain it manually. One mig

[SAtalk] Cannot install SpamAssassin 2.63

2004-01-30 Thread Philip Mak
[EMAIL PROTECTED] Mail-SpamAssassin-2.63]# perl Makefile.PL What email address or URL should be used in the suspected-spam report text for users who want more information on your filter installation? (In particular, ISPs should change this to a local Postmaster contact) default text: [the administr

[SAtalk] Re: Can someone explain this?

2004-01-30 Thread Scott A Crosby
On Fri, 30 Jan 2004 10:42:31 -0600, "Chris Barnes" <[EMAIL PROTECTED]> writes: > I'm confused. A spam message got through and had this in the header: > > > X-Spam-Status: No, hits=5.0 required=5.0 > tests=HTML_60_70,HTML_IMAGE_ONLY_04, > HTML_MESSAGE,HTML_WEB_BUGS,LOCAL_PERLMX_TAG_80,MSGID_FRO

RE: [SAtalk] BAYES_99

2004-01-30 Thread Tony Hoyle
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of David Hooton > Sent: 25 January 2004 04:01 > To: [EMAIL PROTECTED] > Subject: [SAtalk] BAYES_99 > > > Hi All, > > I've been playing with bayes on my home machine and have been > very impressed wi

[SAtalk] taint mode

2004-01-30 Thread Jim Knuth
Hallo und guten Abend SA-List, since I updated 2.61 => 2.63 show me spamassassin -D --lint: --snip debug: running in taint mode? no --snap I think, this run in taint mode now. Why not by me? Thank you for help. -- Viele Grüße, best regards Jim Knuth [EMAIL PROTECTED] - Zufalls-Tex

Re: [SAtalk] [RD] spammer reactions to antidrug (humorous)

2004-01-30 Thread Brian Godette
Maybe they'll start writting in Middle English to target that untapped market of english lit majors/grads. On Friday 30 January 2004 08:55 am, Matt Kettler wrote: > Today I got an interesting form of obfuscation, apparently to avoid > antidrug.cf. > > I'm not sure wether to bother with adding rul

Re: [SAtalk] autolearning spam as ham?

2004-01-30 Thread PieterB
Shouldn't a message that is identified as spam by the bayesian filter of spamassassin (BAYES_90 or BAYES_99 in my case) never be used as a message that is learned as ham? (I would expect it not to be used for learning because it wouldn't improve the bayesfilter, and training it as ham makes the b

Re: [SAtalk] autolearning spam as ham?

2004-01-30 Thread Fred
A bug in 2.6 caused messages which hit BAYES_99 to be learned as ham, this has been fixed, you should upgrade. Frederic Tarasevicius Internet Information Services, Inc. http://www.i-is.com/ PieterB wrote: > Can somebody explain me why a spammessage gets learned as ham? > > X-Spam-Status: Yes, h

RE: [SAtalk] [RD] spammer reactions to antidrug (humorous)

2004-01-30 Thread Chris Santerre
> -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Friday, January 30, 2004 10:55 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] [RD] spammer reactions to antidrug (humorous) > > > Today I got an interesting form of obfuscation, apparently to avoid > antidrug.c

Re: [SAtalk] Can someone explain this?

2004-01-30 Thread Evan Platt
--On Friday, January 30, 2004 10:42 AM -0600 Chris Barnes <[EMAIL PROTECTED]> wrote: > I'm confused. A spam message got through and had this in the header: > > > X-Spam-Status: No, hits=5.0 required=5.0 > tests=HTML_60_70,HTML_IMAGE_ONLY_04, > HTML_MESSAGE,HTML_WEB_BUGS,LOCAL_PERLMX_TAG_80,MSG

[SAtalk] Can someone explain this?

2004-01-30 Thread Chris Barnes
I'm confused. A spam message got through and had this in the header: X-Spam-Status: No, hits=5.0 required=5.0 tests=HTML_60_70,HTML_IMAGE_ONLY_04, HTML_MESSAGE,HTML_WEB_BUGS,LOCAL_PERLMX_TAG_80,MSGID_FROM_MTA_HEADER autolearn=no version=2.61 It met the required hit total (exactly) to be clas

Re: [SAtalk] Failed to parse line in SpamAssassin configuration, skipping: use_auto_whitelist 1

2004-01-30 Thread Michael Parker
On Thu, Jan 29, 2004 at 05:31:36PM +0100, Kai Schaetzl wrote: > Michael Parker wrote on Wed, 28 Jan 2004 17:53:12 -0600: > > > 2.6x doesn't support that config option. You still need to use -a on > > the command line. use_auto_whitelist is only supported in the > > development version of SA. > >

Re: [SAtalk] Failed to parse line in SpamAssassin configuration, skipping: use_auto_whitelist 1

2004-01-30 Thread Kai Schaetzl
Michael Parker wrote on Wed, 28 Jan 2004 17:53:12 -0600: > 2.6x doesn't support that config option. You still need to use -a on > the command line. use_auto_whitelist is only supported in the > development version of SA. > I can't quite believe that, although I want. It's in the official docum

[SAtalk] expand_regex.pl - bug fixes, improvements

2004-01-30 Thread Gary Funck
Attached, is version 1.4 of expand_regex.pl. Notable changes are: - improved handling of bracketed regex's in situation like ( ( )? ) where the previous version did not deal with nested balanced expressions correctly - added a -lint option which will run the most helpful warning options. -

Re: [SAtalk] Re: Installation failure

2004-01-30 Thread Alex S Moore
On Fri, 30 Jan 2004 09:32:51 -0600 Bob Apthorpe <[EMAIL PROTECTED]> wrote: > Have you tried CPAN, either with: > > perl -MCPAN -e 'install HTML::Parser' > > or by manually installing it from > http://search.cpan.org/dist/HTML-Parser/ > > BTW, does Solaris 9 ship with a usable version of gcc a

Re: [SAtalk] cannot expire bayes

2004-01-30 Thread Theo Van Dinter
On Fri, Jan 30, 2004 at 09:18:45AM -0500, Adam Denenberg wrote: > Thanks Theo i will try that. Any idea why these tokens wont expire > though? I learn a lot of spam each day and still nothing and my DB just > keeps getting bigger and bigger. Not without that extra debug output. :P The problem i

[SAtalk] [RD] spammer reactions to antidrug (humorous)

2004-01-30 Thread Matt Kettler
Today I got an interesting form of obfuscation, apparently to avoid antidrug.cf. I'm not sure wether to bother with adding rules for this, or be satisfied that the obfuscations are so severe that the messages are now barely legible. Since spammers rely on responses from the mentally-deficient,

Re: [SAtalk] Some filtered, some not!

2004-01-30 Thread Matt Kettler
At 02:39 PM 1/28/2004, John Fleming wrote: Below are example of 2 headers from the SATalk list. One was apparently filtered by Spamassassin, and one not. What's the difference? Some of my mail is being filtered, and some not, and I have no idea why! I thought a reboot fixed it, but NOT! PLEASE

Re: [SAtalk] Re: Installation failure

2004-01-30 Thread Bob Apthorpe
On Thu, 29 Jan 2004 15:28:31 + (UTC) Peggy <[EMAIL PROTECTED]> wrote: > Does anyone know where to download HTML::Parser 3.24 for SunOS 5.9 from as I > always got the following warning when I run the command "perl Makefile.PL > PREFIX=${Prefix} SYSCONFDIR=/prod/config" for Mail-SpamAssassin-2

RE: [SAtalk] A simple tool to extract URL's from mail folders

2004-01-30 Thread Chris Santerre
Yeah, my bigevil thoughts post was sent ages ago! almost 2 weeks before it showed up on the list. I posted a bigevil update and haven't seen it yet! WTF? --Chris > -Original Message- > From: Gary Funck [mailto:[EMAIL PROTECTED] > Sent: Thursday, January 29, 2004 1:08 PM > To: Spamassassin

Re: [SAtalk] cannot expire bayes

2004-01-30 Thread Adam Denenberg
Thanks Theo i will try that. Any idea why these tokens wont expire though? I learn a lot of spam each day and still nothing and my DB just keeps getting bigger and bigger. adam On Thu, 2004-01-29 at 23:33, Theo Van Dinter wrote: > On Wed, Jan 28, 2004 at 09:55:06AM -0500, Adam Denenberg wrote:

Re: [SAtalk] surprising low score for this spam mail

2004-01-30 Thread Bill Landry
- Original Message - From: "Andreas J Koenig" <[EMAIL PROTECTED]> > I wonder why spamassassin didn't calculate a higher score for this mail. > > Are not "adu1t", "p0rn", and "m0vies" words that trigger some spam > points? Try Jennifer's chickenpox ruleset, it is geared to catch these. Y

[SAtalk] Re: Installation failure

2004-01-30 Thread Peggy
Hi, Does anyone know where to download HTML::Parser 3.24 for SunOS 5.9 from as I always got the following warning when I run the command "perl Makefile.PL PREFIX=${Prefix} SYSCONFDIR=/prod/config" for Mail-SpamAssassin-2.63: Warning: prerequisite HTML::Parser 3.24 not found. And when I

Re: [SAtalk] stats

2004-01-30 Thread Bob Apthorpe
Hi, On Mon, 26 Jan 2004, AltGrendel wrote: > On Fri, 2004-01-23 at 15:19, Justin Mason wrote: > > > > svn co http://svn.apache.org/repos/asf/incubator/spamassassin/trunk > > > > or http://svn.apache.org/viewcvs.cgi/incubator/spamassassin/trunk/?root=Apache-SVN > > I tried those and got a connecti

[SAtalk] autolearning spam as ham?

2004-01-30 Thread PieterB
Can somebody explain me why a spammessage gets learned as ham? X-Spam-Status: Yes, hits=5.3 required=5.0 tests=BAYES_99,HTML_MESSAGE autolearn=ham version=2.60 Pieter 8<-- >From [EMAIL PROTECTED] Sun Jan 25 00:18:38 2004 Received: from localhost [127.0.0.1] by