RE: [SAtalk] Comments on CBL DNSBL (cbl.abuseat.org)

I added this to my Sendmail configuration a couple of weeks back, and I have been amazed at how much SPAM has been rejected as a result. I prefer to have Sendmail reject it at the get-go, rather than have it come all the way through to SA. William L. Polhemus, Jr. P.E. Polhemus Engineering

RE: [SAtalk] Okay, this one makes me mad.. anybody see or stop this one yet? How did this get through!!!!! ?????

I'll say. I have mine set at 4, which I have found (for my setup) is pretty near perfect, even though it is lower than the default setting of 5. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [SAtalk] sa-learn --rebuild --force-expire stuck using huge memory?

This sounds like my earlier problem trying to sa-learn large mailboxes. Others here commented that it must be a hardware problem, but my box is fairly new with very decent components (built from scratch by me but with good MB and memory, etc.) and nothing else I do, including using X, gives it

RE: [SAtalk] sendmail and spamassassin

I use Sendmail with SA, but I do use procmail. Do you not have access to the ability to install packages on your server? Otherwise, youre going to have to use the Spamass milter, which means youve STILL got installation to do. Without the ability to install stuff on your server, I

RE: [SAtalk] How can I mark all mails with specific words in the subject as spam?

It isn't SA you want, it's procmail. The formail tool in the procmail package will do anything like this that you want. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerhard

[SAtalk] SA-LEARN Actually Crashes System!

I am running SA 2.60 installed from the RPMs on Red Hat 9, on an AMD 2100+ based system with a half-gig of RAM. This has now happened for the second time. Before when it happened, about two weeks ago, I figured it was just a coincidence. Now, Im positive that its SA-LEARN that is the

RE: [SAtalk] What on earth is this? FW: Undeliverable Mail: RE: [SAtalk] [RD] Open source is Naughty!!!

Definitely SPAM, and of a particularly nasty sort. Somehow someone is snagging emails off the archive or some other way, and fabricating these replies. Bad business. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED]

[SAtalk] Auto-Learn

How can I know for sure if Auto-Learn is functioning correctly? It does seem to be working for SOME messages but the headers in many of them say: X-Spam-Status: autolearn=no William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA

RE: [SAtalk] Auto-Learn

Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Radford Sent: Tuesday, October 28, 2003 2:23 PM To: Bill Polhemus Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Auto-Learn autolearn=no indicates that this particular message was not learned from, not that autolearning

RE: [SAtalk] Moving SPAM to a separate Mailbox

Yes. In fact, I have a .procmailrc file that uses the ${HOME} variable among other generics, and can be put in the HOME directory of any user. That way the user can also add their own recipes if they like. Oh, and I also have a /etc/procmail file that has some site-wide recipes (it adds stuff

RE: [SAtalk] help with sa-learn

IIRC, it should be Sa-learn --spam --mbox kill William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joseph P. Wetstein Sent: Thursday, October 23, 2003 7:56 AM To: [EMAIL

RE: [SAtalk] Looking for some interview subjects

Let me guess: You're hiring hit men to track down and eliminate, not just the Spam, but the Spammers themselves! Then, you're going to invest in genetic research that will find the Spammer gene and provide an inoculation for all the children in the world, to eradicate any possibility that they

RE: [SAtalk] custom rules local.cf

Yes. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thomas Kinghorn Sent: Tuesday, October 21, 2003 6:50 AM To: Spamassassin-Talk (E-mail) Subject: [SAtalk] custom rules

RE: [SAtalk] Scoring of 5.0 means spam. ist possible to drop mails with a scoring of i.e. 15?

I do it using a procmail recipe, such as: =BEGIN PROCMAIL RECIPE== :0 * ^X-Spam-Status: Yes { # Mails with a score of 15 or higher are almost certainly spam (with 0.05% # false positives according to rules/STATISTICS.txt). Let's delete them # completely. :0: *

RE: [SAtalk] Easy way to join two Bayes databases?

I cannot speak as an expert on this score, but my understanding is that a combination of such Bayesian databases would likely do more harm than good because the residual spam corpus that would get through the general SA filtering would be very specific to the recipient. That is, combining

[SAtalk] Insecure dependency in sysopen

I realize this is a Perl problem, but can anyone help me diagnose this? I know next to NOTHING about Perl. The following is an error message I get when attempting to run SA from an email alias under Sendmail: - Transcript of session follows - Insecure dependency in

RE: [SAtalk] Insecure dependency in sysopen

Sent: Saturday, October 18, 2003 3:18 PM To: Bill Polhemus Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Insecure dependency in sysopen Bill Polhemus wrote: I realize this is a Perl problem, but can anyone help me diagnose this? I know next to NOTHING about Perl. Are you running Razor checks

RE: [SAtalk] FAKE_HELO_AOL

This one got through. Can we figure out how and why? Notice purposeful misspellings as obfuscations. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Begin Included Message- htmlcenter16121g11n4m06a8a53594548b10126vx 291uqs7rz3xo63jl8w5ie14f3q3c3770brfont

[SAtalk] HELP: Can't Invoke SA From Sendmail Alias

I have wanted to set up a spam trap for some time. First, I created an account, called spamtest, on my system. Then, I went to Usenet and posted a ton of test messages to every newsgroup I could think of (mostly the pr0n ones) where the address would be harvested, and tried using the

RE: [SAtalk] HELP: Can't Invoke SA From Sendmail Alias

. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Polhemus Sent: Friday, October 17, 2003 6:26 PM To: [EMAIL PROTECTED] Subject: [SAtalk] HELP: Can't Invoke SA From Sendmail Alias

RE: [SAtalk] Off Topic BUT packages vs source

I always use the SRPMs when they are available. However, I have never attempted to build SRPMS myself. Is this difficult to do? William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

RE: [SAtalk] CPAN or RPM's?

I think this thing about RH dropping their boxed sets is really, really overblown. They will continue to make updates available, and they will release new distributions. You just won't be buying them in stores. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA

[SAtalk] SA-LEARN (SA 2.60) Segmentation Fault

I noticed that if I try to feed SA-LEARN a mailbox full of SPAM, it now craps out claiming segmentation fault. Anyone have any ideas? William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA image001.jpg

[SAtalk] Razor2 Check Skipped - Anyone seen this?

Running SA 2.60, I am seeing the following in my procmail logs: razor2 check skipped: No such file or directory Insecure dependency in open while running with -T switch at /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi/Razor2/Client/Config.pm line 414, GEN20 line 1. Can

RE: [SAtalk] SA-LEARN (SA 2.60) Segmentation Fault

) Segmentation Fault -- Maybe you can make the spam corpus available on a web page so other people can test if it segfaults on their machine too? JS -Message d'origine- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Bill Polhemus Envoyé: 15 octobre 2003 13:16 À: [EMAIL

[SAtalk] OOPS! Razor2 Problem Still There!

Okay, so I applied the patch as shown at: http://spamassassin.taint.org/faq/index.cgi?req=showfile=faq02.006.htp But I get the following message, STILL: razor2 check skipped: No such file or directory Insecure dependency in open while running with -T switch at

RE: [SAtalk] OOPS! Razor2 Problem Still There!

Well, a follow-up: I figgered out that I probably had to remake and remake install, etc. Which I then proceeded to do, and then *BOOM!* I get a compile error on Razor2. Bear in mind that I had no problem installing it before. Further bear in mind that I even erased the whole

[SAtalk] What Does This Error Message Mean (Custom Rules)

I implemented some of the rules others have posted on this list regarding obfuscating text. Now that I am running SA 2.60, I note that Im getting the following error message. Failed to compile body SpamAssassin tests, skipping: (Bareword i not allowed while strict subs in use at

[SAtalk] More HTML Obfuscation: This One Made It Through

Here's another one from a batch of several that have gotten through SA 2.55 over the last several days. They use the spurious HTML tags to break up the text and get it through the Bayesian filter. I'm running these through every time I get one--and luckily, there've only been about one or two

[SAtalk] Any Idea When RH RPMs are coming out?

I really would prefer to implement something as complex as SA through the RPMs on my Red Hat 9 system. So far, they are only up to SA 2.55. That has worked fine up until recently, when the HTML obfuscation has begun cropping up. Perhaps 2.60 can fix that. Any idea when those will be available?

RE: [SAtalk] More HTML Obfuscation: This One Made It Through

] [mailto:[EMAIL PROTECTED] On Behalf Of Keith C. Ivey Sent: Monday, October 13, 2003 9:27 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] More HTML Obfuscation: This One Made It Through Bill Polhemus [EMAIL PROTECTED] wrote: They use the spurious HTML tags to break up the text and get it through

[SAtalk] Another example of obfuscating text

-- Message Text - Here's one that I got today, that slipped through (the first in over a week). Not sure why SA 2.55 didn't get it: -- Forwarded message -- Date: Fri, 10 Oct 2003 11:23:22 -0400 From: Thomas [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: )US

RE: [SAtalk] spamd grabbing LOOOOOOTs of memory

Sheesh, how much for a Gig of RAM now, about 200 Euros or so? What's the problem? William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kai Schaetzl Sent: Monday, October 06, 2003 9:12

RE: [SAtalk] Spam: The Screwfly Solution

The Screwfly Solution A really good short story by SF writer Raccoona Sheldon/James Tiptree Jr./ (the late) Alice B. Sheldon as well. Bet you didn't think anyone else would notice. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From:

RE: [SAtalk] Today a bad day for spam?

I only have a couple of mailboxes here in my home office, but today was the first day in WEEKS--since I got SA optimized--that SPAM got through. We had three all from ostensibly the same source. Penis enlargement. Hey, if I buy some, will they leave me alone? William L. Polhemus, Jr. P.E.

RE: [SAtalk] possible to forward messages marked as spam to seperate account?

Again, this is a job... FOR PROCMAIL! (Admitting surprise that most don't use PROCMAIL along with SA...) William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Oliver Neubauer Sent:

RE: [SAtalk] Razor Patch

Best to do this as root. Or try /usr/bin/patch. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Krüger Sent: Thursday, October 02, 2003 4:58 PM To: [EMAIL PROTECTED]

RE: [SAtalk] Silly question about whitelist to a certain mailbox

Well, I use procmail to send mail to SA. So how about a recipe, checking to see if mail is to that certain mailbox, and putting that recipe before the recipe that sends everything else to SA? I find that procmail solves a whole host of my email problems, btw. William L. Polhemus, Jr. P.E.

RE: [SAtalk] Re: Virus checkers v.s. spam filters

If you are using Procmail (a good idea to use in tandem with SA anyway), then see: http://www.spamless.us/pub/procmail/virussnag For a venerable, tried and true recipe for snagging viral emails. Even though the recipe(s) has/have been around awhile, they still seem to work even on the latest

RE: [SAtalk] Getting Some Bayesian Statistics

Sorry, doesn't seem to work. I'm using SA 2.55, if that makes a difference. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Sent: Saturday, September 13, 2003 12:41 PM To:

RE: [SAtalk] Re: [SA-Announce] SpamAssassin 2.60 rc4 released

I'm curious. Can you not just use rpmbuild --rebuild on the .src.rpm alone, and not worry about the .spec file? That's what I do, and it seems to work okay. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED]

RE: [SAtalk] Getting Some Bayesian Statistics

L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Saturday, September 13, 2003 12:08 PM To: Bill Polhemus Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Getting Some Bayesian Statistics On Sat, Sep 13

RE: [SAtalk] FW: Feedback on how identified spam is being handled

-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Menschel Sent: Friday, September 05, 2003 8:25 PM To: Phil N Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] FW: Feedback on how identified spam is being handled All spam is then kept to be used as part

RE: [SAtalk] redhat 8 rpm packages missing some files?

IIRC, sa-learn doesn't appear til 2.5x. Do what I did: Compile from the tarball sources. It's not that tough (can't be if even I can do it). William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [SAtalk] I want SA to handle mailinglists. Need some creativity here.

What's the problem with just putting *: catch-all mailbox In your ALIASES file? William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven W. Orr Sent: Saturday, September 06,