I don't see much of a problem.
logmsg: clean message (-4.9/4.0) for xadmin:500 in 3.6 seconds, 521
bytes.
Is the key line. This isn't too unreasonable. What does sar say.
One of my incoming mail spoolers (which receives a fairly light load)
says:
12:40:00 PM all 2.21 0.01 0
Again, it's been slow all weekend (only a couple posts). Since my last
post never made it I assume that it's SF. This was send at 23:22 PST on
Sunday. I guess I'll wait to see how long this thing takes before it
hit's the list.
Gary
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[
ut I don't know what they are.
Gary Smith
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Van Gordon
Sent: Tuesday, January 27, 2004 12:31 PM
To: [EMAIL PROTECTED] Sourceforge. Net (E-mail)
Subject: [SAtalk] Blank mails with attachm
Not sure if this is why SF is slow but today I have been averaging 20
viruses a minute... Seems to be slowing now as it's getting later in
the evening (10:12pm PST). God it's been a painful afternoon. I can
delete the administrator notifications fast enough.
ED] On Behalf Of Gary
Smith
Sent: Sunday, January 25, 2004 11:21 PM
To: Tim B; Spamassassin List
Subject: RE: [SAtalk] the list itself???
Slow all weekend. Only like 3 posts...
Gary
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tim
B
Sent: Sunday, Janu
Slow all weekend. Only like 3 posts...
Gary
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Tim
B
Sent: Sunday, January 25, 2004 8:44 PM
To: Spamassassin List
Subject: [SAtalk] the list itself???
did I get booted off the list, no list traffic or is sour
Yes, check the archives for an email from me (bigevil update) or Chris Peterson (all
updates -ge, cp, weeds, etc).
These were topics last week and last month
-Original Message-
From: [EMAIL PROTECTED] on behalf of JRiley
Sent: Tue 1/20/2004 10:52 AM
To
-Original Message-
From: [EMAIL PROTECTED] on behalf of Chris Petersen
Sent: Sat 1/17/2004 9:54 PM
To: [EMAIL PROTECTED]
Cc:
Subject: Re: [SAtalk] Ann: "Rules De Jour": An automated way to keep upwith
the latest rulesets
ou mileage might vary.
Gary Smith
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Carl
Chipman
Sent: Monday, January 19, 2004 11:45 AM
To: [EMAIL PROTECTED]
Subject: [SAtalk] BigEvil Archive
Does anyone have an older copy of BigEvil.cf? I downloaded toda
it's is easy but it is doable.
But then again, like every organization, politics usually play too much
of a role to accomplish what was proposed anyways.
Gary Smith
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Matt
Kettler
Sent: Wednesday,
this problem he
should use relay all of his email to the ISP. They will pass it along even if the
domain matches.
Gary Smith
-Original Message-
From: [EMAIL PROTECTED] on behalf of Robin Lynn Frank
Sent: Tue 1/13/2004 10:09 AM
To: [EMAIL PROTECT
he one who gets yelled at all day because
officedepot.com is spamming the boss again). In any event don't flame the people who
are blocking you. Instead, ask why?
Gary Smith
-Original Message-
From: [EMAIL PROTECTED] on behalf of Steve Thomas
Sent: Tue 1/
I'll have to have my guy check again. It's also possible that it's beeing sent to his
spam bucket now...
Gary
-Original Message-
From: [EMAIL PROTECTED] on behalf of Bob Proulx
Sent: Mon 1/12/2004 9:43 AM
To: SpamAssassin listserve
Cc:
LOL... More lawyers... That's the problem :). The good spammers have them.
Gary
-Original Message-
From: [EMAIL PROTECTED] on behalf of Bob Apthorpe
Sent: Mon 1/12/2004 12:59 AM
To: [EMAIL PROTECTED]
Cc:
Subject: Re: [SAtalk] forged
As with all all other attempts we really need to see the proof in the pudding... If
the zombies start using it then who do you sue? Then we receive 8400+ per 8400+
emails. Not to sound bad but I think that Habeas has an uphill battle trying to hit
the spammers. They need to get some better l
Updated :) (+0.1)
Sorry www.habeas.com but if you were doing what you advertised and suing these suckers
or lobbying congress for tougher (or actual) laws then I'd give you a -30... Try
again next year.
We did also report 4 emails to them recently (1 was questionable). We're still
waiting
It might have to mortgage it's house first so it can but the new cell phone booster so
it can order those herbs and so it can afford that hot date tonight assuming it failed
to make those ebay sales.
-Original Message-
From: [EMAIL PROTECTED] on behalf of Todd Schuldt
...
I know tweaking it to be smaller and possibly faster is the key but I must say that it
doesn't even boggle down my system the way it is or the way it was...
I started by just downloading and installing it and found that it worked great and I
haven't looked back since. The bigevil catches
True regarding the file transfer but the problem is that I also provide email services
for serveral small companies. It's not up to the ISP to decide what you view but we
do provide virus filteration (to a limited extent) and spam markup.
Gary Smith
N¬HYÞéX¬²š'²ŠÞu¼
on behalf of Gary Smith
Sent: Fri 1/9/2004 10:09 AM
To: Rubin Bennett; [EMAIL PROTECTED]
Cc:
Subject: RE: [SAtalk] Another for BigEvil...
Rubin,
The header has this line...
Received: from morpheus.thatitguy.
Rubin,
The header has this line...
Received: from morpheus.thatitguy.com [216.204.165.33] by localhost with
POP3 (fetchmail-6.2.4) for [EMAIL PROTECTED] (single-drop); Fri, 09 Jan
2004 11:25:38 -0500 (EST)
Try making this change to your /etc/postfix/main.cf file:
smtpd_recipient_restrictio
have something
similar to please feel free to share them.
Gary Smith.
-Original Message-
From: [EMAIL PROTECTED] on behalf of Gary Funck
Sent: Fri 1/9/2004 8:27 AM
To: [EMAIL PROTECTED]
Cc:
Subject: RE: [SAtalk] how to filter the MS
Are you running some of the additional checks such as the "BigEvil". I found that
this made a world of difference. That catches 50% of my incoming spam alone.
Gary
-Original Message-
From: [EMAIL PROTECTED] on behalf of Odhiambo Washington
Sent: Thu 1/8/200
this list though. Other sf lists are
fine...
Gary Smtih
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Gary Smith
Sent: Tuesday, January 06, 2004 4:27 PM
To: [EMAIL PROTECTED]
Subject: [SAtalk] Where's all my spam at?
This might sound really odd
-out thing working :)?
I thought it was just odd.
Gary Smith
N¬HYÞéX¬²š'²ŠÞu¼ˆÂâžìSºÚ+‰©lç(™æ§{^®Ø,ƒT^ŠãºËl…ªéz|¨º»$ŠYlJ('º—èL°ZÞx¸§»îâj[ yªçz÷«ÊØbžë¢kay¶¬†È^–[h³+vh§
Xœ’z0†Ûiÿö Ê&ý§bw]»ñ©e¡Èß~õ¢—%‰É¥©š²Æ²)íjY&j)bž
b²Ôjf¬±«,Š{Z–Ib²Û,¢êÜyú+éÞm¦Ïÿ–+-²Ê.Ç¢¸ ë–+-³ùb²Ø~욲Ʋ)íjY
Brian,
I thought we already answered that question... Mail headers will look something like:
X-Spam-Flag: YES
X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on
vjo-lxutil-07.primeexalia.com
X-Spam-Level:
X-Spam-Status: Yes, hits=8.6 required=4.0 tests=BigEvilList_1
Hello,
What is the easiest way to reset the bayes database. I setup a test environment last
night and want to start "playing" with it. We have a couple emails marked as spam
(fp's) that we want to filter as ham and see how that would affect other emails.
Gary Smith
áŠ
hand off to internal system
BTW, we are not using amavisd or any other product on this box.
Gary Smith
-Original Message-
From: [EMAIL PROTECTED] on behalf of Matt Kettler
Sent: Tue 1/6/2004 7:12 AM
To: Chris Maher; [EMAIL PROTECTED]
Cc:
Wait for a while to get some spams. Then check the log file. Also, check the header
of the spams in your inbox and see if they have the rules in there. If they do then
it is working... You have to wait for it to catch something to know that its working.
Example from an email:
X-Spam-Flag:
It's interesting but they keep points of failure are clear...
One authority, anyone contributes, and completely resistant to pointing don't really
seem to go together with what we have seen in many other blacklists.
This was similar to another idea that a few of us had (not regarding blacklist b
Did you restart SA?
-Original Message-
From: [EMAIL PROTECTED] on behalf of Mathieu Nantel
Sent: Tue 12/30/2003 8:01 AM
To: [EMAIL PROTECTED]
Cc:
Subject: [SAtalk] Bigevil rules not being used..
Good day,
ar to this:
:>/var/mail/blackhole
on a 1 hour interval or something like that. Alternatively you can choose not to
erase it and use it as a spam catch for feeding bayes.
It should work...
Gary Smith
-Original Message-
From: [EMAIL PROTECTED] on behalf of
in subject and they had
the words credit approval on a bottom disclaimer that seemed to send it over the top.
Gary Smith
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Evan Platt
Sent: Monday, December 29, 2003 4:32 PM
To: SpamAssassin
Su
I was wondering how much memory spamd should be using (running default rules and
bigevil.cf only). It's currently using about 30mb and a decently light load day. I'm
just trying to get a baseline so I can watch it grow/shrink as I add/remove rules.
Makes sense.
Gary Smith
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Saturday, December 20, 2003 12:45 PM
To: Gary Smith
Cc: [EMAIL PROTECTED]
Subject:Re: We have big evil now we need big good...
On Sat, 20 Dec 2003 09:52:00 -0800
So we implemented SA some time ago because our clients were getting too much spam.
Lately we have found that several html marked up emails have been getting marked as
spam. These ones are clearly fp's.
Some of the domains include Morningstar.com, charlesswab.com and several other
financial in
Hey,
Can you repost the perl script but in a text file or resend it to me? The email got
mangled and I'm not a good enough perl monkey to fix it.
Gary Smith
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jens Madsen
that we see out of it.
Gary Smith
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rubin Bennett
Sent: Sunday, December 14, 2003 9:48 AM
To: [EMAIL PROTECTED]
Subject:[SAtalk] Clever spam (first of many, I'm afraid...)
<
d a SMTP/postfix cluster. Best
investment we ever made.
Coincidentally, we have 4 new P4 servers to be put into place sitting idle for last 4
months but because the system as a whole works so well we just haven't gotten around
to changing it. So for now they are backups.
Gary Smith
OTECTED]
Sent: Tuesday, December 09, 2003 9:43 AM
To: Gary Smith; 'Matt Kettler'; [EMAIL PROTECTED]
Subject:RE: [SAtalk] Content Analysis
The answer to your question, Gary... We are an incentives marketing firm
with an affiliate element. Our members can send virtual promo
The better question is why? Why would you need to scan your email before sending it?
Are you trying to generate a threshold to see how much spam related content can go
into an email before SA marks it or are you trying to find a way to get around SA?
Gary Smith
-Original Message
Barry,
There are some freeware dll's that you can use to do the FTP/wget so you don't have to
do the shell. I don't see where you restart/reload the service???
Gary
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Barry Porter
Sent: Saturday, D
a new rule that filteres on a specific piece of
text (like the normal rules) but apply a negative score value. This would allow the
NPO to tell the sender to put a key into the email to allow it to pass through.
What's the best way to accomplish this?
Gary Smith
†+wzf¢–+,¦‰ìo"0¸§»îâ
Sorry but brain dead me forgot to mention that the /etc/init.d/spamd file is a home
cooked one (doing much more than just restart). I noticed that some people were
naming it spamassassind, etc... I just took for granted people would just replace it
with their own items and leave them with ju
en a character issue with the source forge footer as well. It started after the
email from Peter...
Peter, if your still listening what character set are you running?
Gary Smith
-Original Message-
From: [EMAIL PROTECTED] on behalf of Chris Santerre
Sent: Fri 1
5:35 PM
To: [EMAIL PROTECTED]
Subject: RE: [SAtalk] bigevil.cf + rsync?
So how are you getting this cf to be included with local.cf without combining?
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Smith
Sent: Thursday, December 04, 2003 7:50
Thanks,
I learn something new every day.
Gary
-Original Message-
From: Peter Kiem [mailto:[EMAIL PROTECTED]
Sent: Thu 12/4/2003 5:02 PM
To: Gary Smith
Cc: [EMAIL PROTECTED]
Subject: RE: [SAtalk] bigevil.cf + rsync
I'm actually a windows guy who has been converting to linux for some time so my
scripting is rusty and primitive (cause that's what I know) but it works.
This came from my /etc/cron.hourly/bigevil.sh file.
#!/bin/sh
# This file updates the big evil policy file for spam assassin
DATE=`date +"%Y
de to STDOUT so sendmail is
sending that instead.
#!/bin/sh
/usr/bin/spamc | /usr/sbin/sendmail -i "$@"
retval=$?
echo `date` "$@" "$retval" >> /tmp/currentspamlist.txt
retval=0
exit $retval
Gary Smith
†+wzf¢–+,¦‰ìo"0¸§»îâj[yÊ&y©ÞÆ«¶)Ë Õ¢¸î²Û!jº^
Thanks for the quick response guys... 14 minutes... Your betting Dell for their
award winning response :)
This will surely help.
Gary Smith
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Wednesday, December 03, 2003 8:44 AM
To: Gary Smith; [EMAIL
a new rule that filteres on a specific piece of
text (like the normal rules) but apply a negative score value. This would allow the
NPO to tell the sender to put a key into the email to allow it to pass through.
What's the best way to accomplis
51 matches
Mail list logo
