Re: [SAtalk] html mails getting through

2003-11-11 Thread Matt Kettler
At 04:56 AM 11/11/2003, Thomas Kinghorn wrote: I have attached a spam i keep getting, no, you've quoted it in text-only form without all the headers... All I can tell from what you posted is it's using bayes poison.. There's no way from that little snippet to see what rules the email matched.

RE: [SAtalk] What Dynamic IPs rbl list?

2003-11-11 Thread Matt Kettler
At 11:00 AM 11/11/2003, Bill wrote: Bad, bad, bad idea!!! There are many many people running home networks in dynamic space who send their mail thru their isp server. These will all get caught and trashed by your plan. You better have a VERY good explanation why you just alienated hundreds of

Re: [SAtalk] new to spamassassin

2003-11-11 Thread Matt Kettler
At 12:58 PM 11/11/2003, Dan wrote: 1. I know spamassassin works on a point system, but does it learn as time goes by? IF you use the bayes subsystem, which is on by default but untrained as well, SA will engage in some automatic learning for the bayes rules. The remaining rules are static ones,

Re: [SAtalk] [MailServer Notification]To recipient: Message matched eManager setting and action was taken.

2003-11-11 Thread Matt Kettler
At 03:45 AM 11/11/2003, David B Funk wrote: On Mon, 10 Nov 2003 [EMAIL PROTECTED] wrote: eManager Notification * The following mail was blocked since it contains sensitive content. Love the stupid -PC- double-talk here. Gee, what was the content sensitive to?

Re: [SAtalk] Filtering.

2003-11-11 Thread Matt Kettler
At 12:31 PM 11/11/2003, Rajdeep Larha wrote: I have successfully installed the SA. but I am not able to filer the content. Any stuff which I want to filter in there in the rules directory but not getting filter. Um what do you mean by Any stuff which I want to filter in there in the rules

Re: [SAtalk] SpamAssassin dont block the default sample spam examples and others

2003-11-11 Thread Matt Kettler
At 01:19 PM 11/11/2003, Joao Pedro wrote: I'm installing a Spam Gateway Email Server in a FreeBSD server with Postfix+Amavisd+SpamAssassin and a followed this howto http://lawmonkey.org/anti-spam.html. All it's appear ok, but when I send a email with the sample_spam.txt or other spam example file

Re: [SAtalk] A black listing question

2003-11-11 Thread Matt Kettler
At 01:17 PM 11/11/2003, Peter P. Benac wrote: Is there a legitimate reason not to blacklist email.com? I just seem to get way too much SPAM from email.com. It's a real webmail type service.. So the same arguments that apply for why you should/should not block hotmail, yahoo, eudoramail, and

Re: [SAtalk] unable to disable AWL

2003-11-10 Thread Matt Kettler
At 11:02 AM 11/10/03 +0100, matthias zeichmann wrote: Meanwhile i suspect an error in my configuration. Is there a way to check your local.cf for validity? spamassassin --lint --- This SF.Net email sponsored by: ApacheCon 2003, 16-19

Re: [SAtalk] Looking for Rules

2003-11-10 Thread Matt Kettler
At 04:36 PM 11/10/2003, Bob Rosenberg wrote: I have a number of gripes about this. 1) I only get 5 points not 5.1 when I add them together. One word.. rounding.. The report only displays the rule score down to the nearest tenth of a point, however the rules are scored down further in

Re: [SAtalk] spam threshold value?

2003-11-10 Thread Matt Kettler
At 04:14 PM 11/10/2003, you wrote: What's the lowest spam threshold value you are managing to get away with (without false positives) ? There's always FP's at pretty much any threshold that's no absurdly high (ie, 1.0). However, I have yet to notice any significant amount of FP's at 5.0..

Re: [SAtalk] unable to disable AWL

2003-11-10 Thread Matt Kettler
At 09:47 AM 11/10/2003, matthias zeichmann wrote: is it possible that this messes up other behaviour of SA? That type of error is unlikely to cause problems with other lines, but it is possible. Usually the ones that kill half your local.cf are missing terminators for regexes.

RE: [SAtalk] New Obfuscation Technique?

2003-11-10 Thread Matt Kettler
At 03:00 PM 11/10/2003, Chris Santerre wrote: This is the spammer trick of saying the email is from you, to you. So it got Whitelisted. No it did not Chris.. Read The Fine List of rules it matched.. no WHITELIST_* or AWL rules match this. X-Spam-Tests:

Re: [SAtalk] Razor slows down SA

2003-11-07 Thread Matt Kettler
At 08:38 AM 11/7/03 -0500, you wrote: I have noticed that RAzor2 is timing out and slowing down SA 2.6. Has something changed in the past few months that may have caused this? Maybe the razorzone has changed? I use razor2.cloudmark.com now. I don't think the zone itself is likely to change

Re: [SAtalk] MAPS RBL+ in Spam Assassin

2003-11-07 Thread Matt Kettler
At 08:51 AM 11/7/03 -0500, you wrote: I am new to Spam Assassin. I see that it checks e-mail against the MAPS databases, but that it does not appear to check the RBL+ database. Is there some way for me to add this check to the list? Well, SA does NOT check maps by default.. it's just got support

Re: [SAtalk] scoring system and values...

2003-11-07 Thread Matt Kettler
At 10:29 AM 11/7/2003, Maarten J H van den Berg wrote: Sorry if this has been discussed in the past... It's been discussed many times.. It's very common for people to have a very deep misunderstanding of how SA scoring works. Most people fall into the trap of over-simplifying the problem, and

Re: [SAtalk] Delete spam mails

2003-11-07 Thread Matt Kettler
At 12:09 PM 11/7/2003, Roberto Salazar wrote: I have Spamassasin with Postfix working . This server is a Gateway for others internal mail servers (in these are the users accounts). I need that spamassasin erase spam mails directly (DELETE FILTER ) in my server gateway and don't send mail to users

Re: [SAtalk] Newbie Questions

2003-11-07 Thread Matt Kettler
At 01:13 PM 11/7/2003, Chip Paswater wrote: Hey Guys, I apologize if these questions are asked somewhere, but I did browse the FAQ and documentation and didn't see an answer. I have a good understanding of Razor v2, but I just started using SA. 1. When reporting spam via spamassassin -r, can I

Re: [SAtalk] SpamAssassin not labeling as spam but debug labels as spam

2003-11-07 Thread Matt Kettler
At 02:16 PM 11/7/2003, Jennifer Fountain wrote: am using an internal RBL list. When I test a header that is in the list using the following command: /usr/bin/spamassassin -t --prefs-file=/var/qmail/.spamassassin/user_prefs -D /home/tmp/spam_test.txt, it labels it as spam. However, when an

Re: [SAtalk] scoring system and values...

2003-11-07 Thread Matt Kettler
At 04:25 PM 11/7/2003, maarten van den Berg wrote: Upon looking at those rules I see al LOT of inconsistencies. For instance, I found these rules that have score of zero(!) (and these are merely the top of a large iceberg) score CASHCASHCASH 0 score ADDRESSES_ON_CD 0 score BLANK_LINES_90_100 0

RE: [SAtalk] Best Blacklists

2003-11-06 Thread Matt Kettler
At 11:23 AM 11/5/2003, Tom Meunier wrote: Matt, thanks for this. It's a great resource. However, I'm wondering why the following were scored as zero and thus don't have numbers to support their efficacy or lack thereof: 0.000 0. 0.0.500 0.110.00 RCVD_IN_SORBS_BLOCK

Re: [SAtalk] Strange behavior of SpamAssassin + CommuniGate

2003-11-06 Thread Matt Kettler
At 11:42 AM 11/6/03 +0100, Euro Cocolo wrote: recently I've noticed this fault: when my MTA receives mail identified as spam (score 7.0) from a specific external distribution list, SA tags the message, and instead of discarding the message (as set by the CommuniGate rule), it delivers it to

Re: [SAtalk] ok to filter on this?

2003-11-06 Thread Matt Kettler
At 11:44 AM 11/6/2003, Jeff Lasman wrote: My question is simply is this okay to filter on? Or does anyone have any experience of any legitimate email coming with this? Lots of legitimate HTML newsletters come with this. It's pretty much a standard thing to do.

Re: [SAtalk] Perhaps this is obvious... but...

2003-11-05 Thread Matt Kettler
At 06:52 PM 11/5/2003, Robert Leonard III wrote: Do I need to restart SpamD every time I make a modification or add a new .cf file to my configuration? Yes, SA only parses the .cf files when it first starts up. Only user_prefs is parsed each time a message comes in. If so, when I do a restart,

Re: [SAtalk] (not) up to date SpamAssassin

2003-11-05 Thread Matt Kettler
At 07:16 PM 11/5/2003, Lukreme wrote: My spam assassin is still 2.60-rc6: X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,CLICK_BELOW autolearn=ham version=2.60-rc6 So snip Going to write /home/kreme/.cpan/Metadata Mail::SpamAssassin is up to date. cpan color me confused CPAN

Re: [SAtalk] Are these blacklists widely used, anywhere?

2003-11-05 Thread Matt Kettler
At 08:57 PM 11/5/2003, Nigel Featherston wrote: I would like to know if SpamAssassin uses the following blacklists: rhsbl.ahbl.org dnsbl.ahbl.org And I would also like to know under what conditions they are enabled (i.e. by default, etc.) No they are not used by default, and there's no built-in

Re: [SAtalk] which folder?

2003-11-04 Thread Matt Kettler
At 07:57 PM 11/4/03 +0100, Jim Knuth wrote: which folder to the read the config is used? local.cf in /etc/mail/spamassassin or local.cf in /etc/spamassassin or user_prefs in /.spamassassin/ It's actually parsed from two places: *.cf in /etc/mail spamassassin user_prefs in ~/.spamassassin And

Re: [SAtalk] Curious about a header.

2003-11-04 Thread Matt Kettler
At 11:44 AM 11/4/2003, Matthew Thomas wrote: It didn't get marked as spam since it appears to come from us, though the IP address is located in Puerto Rico. I was just wondering how they get biocontrolsys.com associated with their IP address. Is it a completely manufactured (not real) header?

Re: [SAtalk] Could not create INET socket... ...Permission denied

2003-11-04 Thread Matt Kettler
At 02:00 PM 11/4/2003, JC wrote: Spamassassin seems to be running fine, except when I go into debug mode, I get an error. Here is some relevant output: [EMAIL PROTECTED] /]$ spamd -c -a -m5 -H -D spamd needs to be started as root, unless you pass it -p to specify a port number 1024.. by

Re: [SAtalk] Can you customize the body of a spam message

2003-11-04 Thread Matt Kettler
At 03:10 PM 11/4/2003, Paul Hirschorn wrote: I want to customize the following: Spam detection software, running on the system SPAMGW.FILTER.COM, has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or block

Re: [SAtalk] THIRD request: Someone please help with AWL oddness

2003-11-04 Thread Matt Kettler
At 04:26 PM 11/4/2003, Jay Levitt wrote: - Original Message - From: Jay Levitt [EMAIL PROTECTED] To: Jay Levitt [EMAIL PROTECTED] Sent: Sunday, November 02, 2003 9:29 AM Subject: Second request: AWL false hits Hi.. does anyone have any ideas on this? I have read the FAQ, and this does

Re: [SAtalk] Can't get add_header to work in 2.60

2003-11-04 Thread Matt Kettler
At 06:36 PM 11/4/2003, Dennis Duval wrote: I have tried to use the add_header feature in /etc/mail/spamassassin/local.cf with no luck. It does not write the added header at all. However the local.cf file is being processed, because I can change required_hits and it has an effect. snip This is

Re: [SAtalk] RCVD_IN_DYNABLOCK FP?

2003-11-03 Thread Matt Kettler
At 02:57 AM 11/3/2003, Justin Mason wrote: Pedro Sam writes: I'm just wondering why RCVD_IN_DYNABLOCK was a hit, when I sent a email from my localhost 192.168.2.125 with kmail using the SMTP server at mail.student.cs.uwaterloo.ca to address [EMAIL PROTECTED] This is the proper way of sending

Re: [SAtalk] trying to tweak SA

2003-11-03 Thread Matt Kettler
At 11:28 AM 11/3/2003, Anne Ramey wrote: I'm trying to add local rules, but only one of the .cf files in /etc/mail/spamassassin seems to be used. Can you only have one extra .cf file? (I'm using amavis with SA, so I was told the extra rules can't go in local.cf). SA should use _every_ file

RE: [SAtalk] RCVD_IN_DYNABLOCK FP?

2003-11-03 Thread Matt Kettler
At 11:35 AM 11/3/2003, Brian Sneddon wrote: I'm running SpamAssassin 2.60 on a public IP (not NATed) and none of the -notfirsthop rules (including RCVD_IN_DYNABLOCK) have worked correctly for me, either. For reference I'm also running Sendmail and Spamass-milter 0.2.0. Here are the headers from

Re: [SAtalk] [RD] Meta rules vs. SA version

2003-11-03 Thread Matt Kettler
At 01:50 PM 11/3/2003, Chris Santerre wrote: I'm not sure if it is just me, but there are some new rules I have in the update that look like this: (__meta1 + __meta2) 1 They don't work on older version of SA. they get an error when doing a spamassassin -D --lint. The '+' is throwing it off. I

Re: [SAtalk] tests not updated on the SA website?

2003-11-03 Thread Matt Kettler
At 06:10 PM 11/3/03 -0800, Mairhtin O'Feannag wrote: The tests page of the spamassassin.org website seems not to be too up-to-date. A search of the page reveals only three or four tests based upon the word outlook and they all refer to Outlook Express. YET ... when I get a message in as spam,

Re: [SAtalk] Am I nuts

2003-11-03 Thread Matt Kettler
At 04:14 PM 11/3/03 -0600, Chris Barnes wrote: Background: I had SpamAssassin 2.60 running just fine (using sendmail). I was calling spamd via the /etc/procmail. After installing Mailscanner and ClamAV, I noticed that the original SA conf file was being ignored in favor of the smaller version in

Re: [SAtalk] AWL

2003-10-31 Thread Matt Kettler
At 08:13 PM 10/30/03 -0800, Jeremy Hein wrote: I added use_auto_whitelist 0 to /etc/mail/spamassassin/local.cf but it still subtracts AWL in my report. Maybe I'm writing to the wrong config file? How do I find out where the right one is and how do I find out if spamassassin is using that option.

Re: [SAtalk] Log Question...

2003-10-31 Thread Matt Kettler
At 11:18 AM 10/31/2003, Dan Tappin wrote: Below is a snippet from a recent post to the list: Oct 30 14:12:40 ns1 MailScanner[3201]: snip Is there a config option to have these triggered rules logged like that? My maillog simply has mail identified or not identified as spam. It would be great

Re: [SAtalk] using spamd/spamc to reject SMTP connection

2003-10-31 Thread Matt Kettler
look at spamass-milter or a similar milter-level plugin to sendmail. They can generally be configured to issue a 5xx level error at the end of the SMTP DATA phase if the SA score is over some threshold level. At 02:30 PM 10/31/2003, Josiah DeWitt wrote: I just installed SpamAssassin and got it

Re: [SAtalk] File of mail for sa-learn

2003-10-30 Thread Matt Kettler
At 01:58 PM 10/30/03 +, you wrote: What is the format of the files of ham/spam fed to sa-learn? Can I use Outlook .pst files? You can't directly use the outlook .pst format with sa-learn.. sa-learn supports 2 file formats: The default is single-message per file in RFC 822 format, or a

Re: [SAtalk] outlook corpus?

2003-10-30 Thread Matt Kettler
At 07:17 AM 10/30/03 -0500, Colin A. Bartlett wrote: I've mined Google and the archives. I've found some references to converting Outlook files to mbox format. That would work I believe except that the messages I want are really attached to those in my Outlook. Anyone know of a tool or method of

Re: [SAtalk] Autowhitelist

2003-10-30 Thread Matt Kettler
At 10:33 AM 10/30/2003, Segree, Gareth wrote: Addresses from my mail domain is being saved in the auto-whitelist file. 1) How do I prevent addresses from being auto-whitelisted? you don't, unless you disable the AWL entirely. 2) How do I delete addresses that are already auto-whitelisted?

Re: [SAtalk] How filter ...

2003-10-30 Thread Matt Kettler
At 10:23 AM 10/30/2003, Andrea Riela wrote: Hi folks, How could I filter this type of spam: Penis P.enis Pe.nis Pen.is Peni.s This regex should work for a custom rule to match those patterns. /P(\.?)e(\.?)n(\.?)i(\.?)s/ You'll probably want to make it a bit more useful like this:

Re: [SAtalk] Checking HTML garbage

2003-10-30 Thread Matt Kettler
At 07:56 PM 10/30/2003, Jeremy Hein wrote: Is there anyway to have spamassasin check for this kind of HTML garbage. If so, I could get rid of nearly all my spam. it already does catch some of these things. check out the OBFUSCATING_COMMENT rule. However, those rules look for a HTML comment

Re: [SAtalk] AWL

2003-10-30 Thread Matt Kettler
At 08:00 PM 10/30/2003, Jeremy Hein wrote: Hi, Does anyone know what this is and how to configure it? It seems to be subtracting from the score different amounts each time. I can't figure out why or what to do about it. Read the FAQ.. the AWL is a score averager, and it's supposed to vary in

Re: [SAtalk] Spamassassin not rewriting the e-mail subject.

2003-10-29 Thread Matt Kettler
At 09:15 AM 10/29/03 -0500, you wrote: Hi everyone, snip required_hits 8.0 rewrite_subject 1 fold_headers 1 report_header 1 use_terse_report 1 defang_mime 1 dns_available no dcc_add_header 1 use_dcc 1 One thing I can spot right away is that you need to remove the defang_mime statement from your

Re: [SAtalk] ISPS READ THIS: scanning outbound mail gotcha (fwd)

2003-10-29 Thread Matt Kettler
Dynablock should only be used to check the IP address delivering the email. Also of note to ISPs, SA users everywhere: If the machine you run SA on has a NATed or otherwise non-routable IP address (ie: 10.*.*.*, 192.168.*.*, etc) then you must manually set the trusted_relays in your local.cf.

Re: [SAtalk] wierd erroors

2003-10-29 Thread Matt Kettler
At 03:56 PM 10/29/03 +, you wrote: Since I upgraded I get mail from cron with numerous errors of this form in it. Insecure dependency in link while running with -T switch at /usr/share/perl5/Mail/SpamAssassin/NoMailAudit.pm line 452, STDIN line 136. Razor requires a source-code patch to work

Re: [SAtalk] Broken Rule

2003-10-29 Thread Matt Kettler
At 11:36 AM 10/29/2003, Tobin wrote: I was wondering if anyone could help me fix a broken rule. Im getting a error Failed to compile body spamassassin tests, skipping: (syntax error at /ect/mail/spamassassin/local.cf, rule Porn, line 1, near /) Well, what's the broken rule look like? Can't

Re: [SAtalk] Broken Rule

2003-10-29 Thread Matt Kettler
At 01:02 PM 10/29/2003, you wrote: Sorry Im a newbie. I have attached my local.cf and my 20_compensate rule. Thanks again. (I have no custom rules) Well, you do have some attempts in there at making a custom rule.. and a very, very, very broken one. I'd delete the entire Penis rule you've got in

Re: [SAtalk] [RD] Open source is Naughty!!!

2003-10-29 Thread Matt Kettler
At 01:53 PM 10/29/2003, Chris Santerre wrote: SUBJECT_XXX and in it, it has naughty words. One of which it looks for is : /pen.s/i Rather than do the ^oO thing, why not modify your . to exclude spaces: /pen\Ss/ This will look for a non whitespace in that spot. I'd also suggest putting a \b at

Re: [SAtalk] grouping rules

2003-10-29 Thread Matt Kettler
At 03:02 PM 10/29/2003, Joe wrote: Hi, Is there a way to group rules together for only certain instances? For example, I want score the porn rules higher on a certain domain.. so I guess I would need something like header DOMAIN From =~ /filtereddomain.com/i But is there a way I could then do

Re: [SAtalk] Rule for looking at envelope sender?

2003-10-29 Thread Matt Kettler
At 03:40 PM 10/29/2003, David Hubbard wrote: How can one look at the envelope sender of a message in a rule? Is there a variable available to SA for that? That's fundamentally impossible in SpamAssassin.. SA isn't provided the envelope. The only way SA can know about the envelope is if you have

Re: [SAtalk] Failed to run BAYES_NN SpamAssassin test, skipping problems

2003-10-29 Thread Matt Kettler
At 05:23 PM 10/29/2003, Greg Earle wrote: I've run truss on the running spamd and I'm not seeing anything in the truss output that points to where it's looking for the ndbm file that it doesn't like. The only lines that are relevant to Bayes-named files are: 18263:

RE: [SAtalk] Spamassassin not rewriting the e-mail subject.

2003-10-29 Thread Matt Kettler
At 07:28 PM 10/29/2003, Riley J. McIntire wrote: [EMAIL PROTECTED] /usr/local/etc/mail/spamassassin 578$ ps ax |grep [s]pamc 38938 ?? S 0:00.00 /usr/local/bin/spamc So if I'm not badly mistaken I am using spamc. But not the right way? Is there a problem with the procmailrc? That procmailrc

RE: [SAtalk] Spamassassin not rewriting the e-mail subject.

2003-10-29 Thread Matt Kettler
At 08:48 PM 10/29/2003, Riley J. McIntire wrote: [EMAIL PROTECTED] /usr/ports 526$ ps auwx |grep [s]pamd nospam 184 0.0 1.3 21236 20920 ?? Is 20Oct03 3:51.50 /usr/local/bin/spamd -a -c -d -u nospam -H (perl5.00503) Is the -H parameter passed to spamd with no parameter? or is it just

Re: [SAtalk] Need help with configuration....

2003-10-28 Thread Matt Kettler
At 12:06 PM 10/28/2003, Darryl Snover wrote: I've attempted to issue the command: spamassassin -t sample-spam.txt spam.out without apparent success, as the cursor just sits there afterwards, and nothing is returned. First run this to make sure SA is OK with your configfiles: spamassassin

Re: [SAtalk] Need help with configuration....

2003-10-28 Thread Matt Kettler
At 01:13 PM 10/28/2003, Darryl Snover wrote: spamassassin --lint This command results in the following: Cannot open /usr/share/spamassassin/user_prefs.template: No such file or directory Failed to create default user preference file /private/var/root/.spamassassin/user_prefs That's pretty

Re: [SAtalk] White black lists on server

2003-10-28 Thread Matt Kettler
At 01:07 PM 10/28/2003, Howard Brazee wrote: I pulled out ultra-edit and FTP'd in auto-whitelist.pag auto-whitelist.dir These aren't text files. Where how can I find and edit my white lists and black lists on my e-mail server? First, those are the auto whitelist, aka AWL.. those files are

RE: [SAtalk] White black lists on server

2003-10-28 Thread Matt Kettler
At 02:23 PM 10/28/2003, Howard Brazee wrote: A lot of these documents and replies seem to be designed around me having SpamAssassin on my computer. Instead it is on my e-mail server. Is there a place to look at to find out how someone who has a server based SpamAssassin can modify the

RE: [SAtalk] White black lists on server

2003-10-28 Thread Matt Kettler
At 02:57 PM 10/28/2003, Howard Brazee wrote: one word: SSH. Ssh? I'm too loud? I bet this means something.I haven't worked with non-mainframe servers ever. It took me a while to figure out how to use Ultra-Edit to edit my user_prefs file. SSH is Secure SHell, a remote login protocol..

Re: [SAtalk] SPAMASSASSIN on Solaris9

2003-10-28 Thread Matt Kettler
At 03:41 PM 10/28/2003, Dominique Bagnato wrote: Thank you to let me know how to install spamassassin on Solaris 9. and where could I get the download ? www.spamassassin.org provided you've got perl 5.6.x or higher, you should be able to install as per the documentation perl Makefile.pl

Re: [SAtalk] white lists

2003-10-28 Thread Matt Kettler
At 06:34 PM 10/28/2003, Jack Gostl wrote: Is it possible to use wild cards in a white list? For example: whitelist_from abcd*.bigcompany.com Yes, See the Mail::SpamAssassin::Conf manpage for details. Basically it should support any wildcards that a typical unix shell supports when doing

RE: [SAtalk] Newbie

2003-10-27 Thread Matt Kettler
At 10:08 AM 10/27/2003, Dan Kohn wrote: This should be a FAQ: Q. How do I get SpamAssassin to mark as spam all Window patch emails that include an executable? A. Add the following line to your user-prefs (normally ~/.spamassassin/user_prefs): score MICROSOFT_EXECUTABLE 10 - dan And it

Re: [SAtalk] Totally whitelisting someone?

2003-10-25 Thread Matt Kettler
At 04:56 PM 10/25/03 +0100, Paul Hutchings wrote: I've ran spamassassin --add-addr-to-whitelist and it is reducing the scores, but the GTUBE test has such a high score that the adjustment doesn't seem to be enough! I hope that makes sense, TIA for any advice! 1) this issue should be fixed in

Re: [SAtalk] MailScanner and SpamAssassin

2003-10-24 Thread Matt Kettler
At 12:12 AM 10/23/03 -0700, Rezk Mekhael wrote: I have a DS20 Machine with 5.1 unix tru64 operating system, I am running MailScanner, Sopho and SpamAssassin. /opt/MailScanner/etc/MailScanner.conf. MailScanner running perfict without SpamAssassin, one's I turn on the spamAssassin, MailScanner

Re: [SAtalk] Building SA 2.60, errors

2003-10-24 Thread Matt Kettler
At 10:07 PM 10/23/2003, Hugh Caley wrote: I'm trying to build spamassassin 2.60 as a non-root user on my ISP's mail server. RedHat 7.3, perl version 5.004_04. I'm not sure where to go from here. I'm getting the following errors: What version of ExtUtils::MakeMaker do they have? SA requires

Re: [SAtalk] About Spamassassin process flow

2003-10-24 Thread Matt Kettler
At 02:54 AM 10/23/2003, =?big5?B?WXVhbi1DaHVuZyBIc2lhb1wov72yV8TBXCk=?= wrote: Now I research Spamassassin's Genetic Algorithms, but I don't understand Spamassassin work with GA and bayes classfilter. Does anybody know? The Genetic Algorithm is not a part of SpamAssassin itself.

Re: [SAtalk] perhaps more of a mailscanner question?

2003-10-24 Thread Matt Kettler
At 12:43 PM 10/24/2003, ian douglas wrote: Right now I have MailScanner configured to delete high scoring spam so it doesn't end up in my user's mailbox, but what about the 'bounce' option? IMO, post-delivery bounces of spam, such as MailScanner does, are of very questionable value. 99.99% of

Re: [SAtalk] implementing site-wide bayesian filtering

2003-10-24 Thread Matt Kettler
At 04:06 PM 10/24/2003, Josh Endries wrote: I'm playing around with spamd for a few accounts on our mail server via procmail and I would like to set up bayesian filtering. Everywhere I read says that per-user is the way to go with bayesian filters versus one big site-wide database, because

Re: [SAtalk] IP Blocks to kill at the firewall? (dupe posts)

2003-10-24 Thread Matt Kettler
At 04:15 PM 10/24/2003, Dan Wilder wrote: Ian, have you looked at the headers to determine where the duplicates are coming from? This appears to be a sourceforge problem.. I'm getting duplicates from multiple posters, on multiple different lists. Even Ian's message got double-posted. Strangely,

Re: [SAtalk] Problems upgrading to 2.60

2003-10-24 Thread Matt Kettler
At 10:58 AM 10/23/2003, Stuart Gall wrote: I am not realy sure what else I can do to diagnose the problem. did you try a spamassassin --lint? Perhaps there's something in your local.cf that is causing 2.60 to choke on it. --- This SF.net

Re: [SAtalk] Whitelist / Rule Question...

2003-10-24 Thread Matt Kettler
At 01:34 PM 10/24/2003, Dan Tappin wrote: rawbody USERNAME /username/i describe USERNAME score USERNAME -100.0 ... where the person sending e-mail is [EMAIL PROTECTED] Um... does username appear in the body part of the message? Note that rawbody does not include the headers. You probably want

Re: [SAtalk] A way to disociate analyze and scoring phase.

2003-10-23 Thread Matt Kettler
At 08:30 AM 10/23/03 +0200, Philippe Van Hecke wrote: I would like to know if there is a way with spamassassin to disociate the analyze phase. What's i want to ask here is if there exist a way to tell to spamassassin 1) analyse this mail . put rules match in the mail header. 2) later for the same

Re: [SAtalk] Message being marked as spam with less score

2003-10-23 Thread Matt Kettler
At 10:30 AM 10/23/2003, Listas - OPEN Internet wrote: Hei Evan, Here goes the example. snip Content analysis details: (7.3 points, 10.0 required) You aren't by any chance running all your mail through spamassassin with the -t parameter are you? If you use the -t parameter, you're

Re: [SAtalk] Problems installing SpamAssassin 2.6

2003-10-23 Thread Matt Kettler
At 07:51 PM 10/22/03 -0500, Greg Thorne wrote: I am trying to install SpamAssassin 2.6, and I keep getting the message: $ ./spamassassin HTML::Parser version 3.24 required--this is only version 3.05 at /home/gthorne/perlmods/lib/site_perl/5.6.0/Mail/SpamAssassin/HTML.pm line 8. snip $ perl -e

Re: [SAtalk] help with sa-learn

2003-10-23 Thread Matt Kettler
At 08:55 AM 10/23/2003, Joseph P. Wetstein wrote: When I do a: sa-learn --mbox --spam kill I get: Learned from 0 message(s) (127 message(s) examined). First, I'd check for file permission issues.. make sure you've got the ability to create files in ~/.spamassassin. It's really easy to do

Re: [SAtalk] Bayes always 99%

2003-10-22 Thread Matt Kettler
At 08:36 AM 10/22/2003, Scott Rothgaber wrote: My Bayes database finally got its 200 spams and hams and kicked in. I've noticed, however, that it *always* says that the probability is 99%. Is this normal? No.. It is however quite normal for nearly all spams to be at 99% and nearly all nonspam

Re: [SAtalk] How to update old version of SpamAssassin

2003-10-22 Thread Matt Kettler
At 05:15 PM 10/21/2003, =?koi8-r?Q?=22?=Oleg=?koi8-r?Q?=22=20?= wrote: Can somebody advise me, please, the way in which I can update it? Can I just do new install from CPAN? Or it will not be enough? The system is working now and I do not want to screw it, therefore I need help.

Re: [SAtalk] [RD] Trojaned machines

2003-10-22 Thread Matt Kettler
At 10:18 AM 10/22/2003, Chris Santerre wrote: It is tough to remember everything SA looks for. Does 2.60 have something like this? Comments? rawbody MY_TROJANED_HOST /http:\/\/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{2,4}\// describe MY_TROJANED_HOST Possible Trojaned box used for spam hosting score

Re: [SAtalk] sa-learn not working right

2003-10-22 Thread Matt Kettler
At 10:35 AM 10/22/2003, Anne Ramey wrote: when I sa-learn on a folder of spam it takes almost no time and says learned 1 no matter how many where in the file but when I do an sa-learn of ham, it works fine. Ideas? What command line did you use? and what format is the mail in? If you're giving

Re: [SAtalk] SA TIMED OUT

2003-10-22 Thread Matt Kettler
At 09:37 PM 10/22/03 +0200, Andreas Fuchs wrote: I see allot of such errors in my syslog. I think they apear only if i enable RAZOR, with Razor disabled i never saw such an error, any idea ? Can i change the timeout somewhere ? What kind of setup are you using? It's hard to give a whole lot of

Re: [SAtalk] have try these header check but don't know why it is not trigered.

2003-10-21 Thread Matt Kettler
At 11:29 AM 10/21/2003, Philippe Van Hecke wrote: #header RECEIVED_FROM_OTHER_THAN_MY_DOMAIN Received !~/(server1||server2|server3|server4|server5)(\.fw)?\.foo\.bar/i snip the commented header RECEIVED_FROM_OTHER_THAN_MY_DOMAIN never match and so the FORGED_MY_DOMAIN is never trigered but the

Re: [SAtalk] custom rules local.cf

2003-10-21 Thread Matt Kettler
At 07:50 AM 10/21/2003, Thomas Kinghorn wrote: Do all custom rules have to be added to the /etc/mail/spamassassin/local.cf file OR can a seperate .cf file be placed in the spamassassin directory? SA will by default parse *.cf in /etc/mail/spamassassin. Thus, you can put them in a separate CF file

Re: [SAtalk] list of test gone

2003-10-21 Thread Matt Kettler
At 10:39 AM 10/21/2003, Cliff Browning wrote: I went to the spamassassin.org site today and the list of tests is not there. Could you please put it back. Thanks Seems to be there and just fine for me... It's possible you caught the site in the middle of an update.. the tests list is built

Re: [SAtalk] Forged From addresses and whitelist rule

2003-10-20 Thread Matt Kettler
At 11:11 AM 10/20/2003, James Herschel wrote: I've got an odd situation where I've received spam from a (forged) valid address in my own domain. Problem is that the headers are clearly forged as the IP for my mailserver is incorrect, but the whitelist rule for my domain is being applied. Yeah,

Re: [SAtalk] upgrade to 2.60 broke SA

2003-10-20 Thread Matt Kettler
At 01:04 PM 10/19/2003, Masoud Pajoh wrote: I was running SA 2.5 with kmail and all was well, then I upgraded to version 2.60. Now, SA stopped pocessing incoming mail all togther. How can I correct this. Well, what exactly do you mean by stopped processing incoming mail? Do you mean that the

Re: [SAtalk] My first question here[SA DCC]

2003-10-20 Thread Matt Kettler
At 10:19 PM 10/20/03 +0200, Marco Calistri wrote: Hello, first of all I want to make my compliments to the developers that are spending their time to fight the SPAM and of course, among these thanks to SA Team. My first question (the first of a long series...) is: Well, my first comment, before I

Re: [SAtalk] Redirect ?

2003-10-17 Thread Matt Kettler
At 08:53 AM 10/17/2003, guenther wrote: I just wondered about redirecting mail to learn as Spam, as mentioned in FAQ 5.1. This will add extra headers (especially Received headers). Won't these headers poison the Bayesian database? This varies a lot from mail client to mail client. With some mail

Re: [SAtalk] slow list

2003-10-17 Thread Matt Kettler
At 10:37 AM 10/17/2003, Colin A. Bartlett wrote: Does anyone else have trouble getting their messages on the list in a timely fashion? It seems when I reply to the list it takes 15 to 45 minutes for my message to appear. By the time my reply shows up, 3 other people have replied and I look like a

Re: [SAtalk] One Message 2 results...

2003-10-17 Thread Matt Kettler
At 04:36 AM 10/5/2003, Hendrik wrote: First Question: Why does SA prints out autolean=no when the /etc/mail/spamassassin/local.cf says: # Enable Bayes auto-learning auto_learn 1 the autolearn=no means it didn't auto-learn THIS message because it didn't score high or low enough to

Re: [SAtalk] Not reading local.cf?

2003-10-17 Thread Matt Kettler
At 11:22 AM 10/17/2003, Dave Bartmess wrote: I put this on the command line, and immediately after restarting spamd, it gave me the following messages in /var/log/mail/errors: Oct 13 21:45:46 Dingo spamc[5596]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#3 of 3): Connection refused

Re: [SAtalk] Re: RCVD_IN_DYNABLOCK

2003-10-17 Thread Matt Kettler
At 03:10 PM 10/16/2003, Daniel M. Drucker wrote: I wasn't even aware that this notfirsthop argument existed; as far as I can tell in a few minutes of testing, the argument has no effect. I've had to disable all dynamic-IP RBLs because of this problem... Dan.. Are you using an internal mailserver

Re: [SAtalk] SA and Mailscanner

2003-10-17 Thread Matt Kettler
At 01:29 PM 10/17/03 -0400, Jon Fraley wrote: From looking at some posts, it looks like Mailscanner just looks for a score from SA. Does this mean that the message does not get re-written as an attachment with the report if it is spam? Or does Mailscanner do this? I can not find exactly how it

Re: [SAtalk] LOTS of mail being tagged wrong

2003-10-17 Thread Matt Kettler
At 01:21 PM 10/17/03 +0200, HÃ¥kon Nilsen \(Exinet AS\) wrote: Bayes tages it worth 5.4 points. My limit is 5. How does Byes tag it this much? What should I do to solve the issue? Raise the limit to 7.5 or something would probably help on this one, but not all. A whitelist service is already

Re: [SAtalk] Traffic on my Unix server

2003-10-16 Thread Matt Kettler
At 01:25 PM 10/16/03 +0200, Francis wrote: Is it possible that Spamassassin generate somme out traffic on our Wan? SpamAssassin itself does not generate network traffic, although some of the optional modules that SA will use if available will generate network traffic. Spamassassin does quite a

Re: [SAtalk] New User question

2003-10-16 Thread Matt Kettler
At 11:15 AM 10/16/2003, Michael Balamuth wrote: Being very new to spamassassin, I hope these aren't too dumb questions. Having configured /etc/mail/spamassassin/local.cf as inserted below, I'd suggest running spamassassin --lint. There are errors in your local.cf.. in particular, defang_mime is

Re: [SAtalk] upgrade

2003-10-16 Thread Matt Kettler
At 05:20 AM 10/16/03 -0700, Doug Wolfgram wrote: I just deleted 2.55 from my system and installed 2.60 via RPMs. Although spamassassin is running (ps -ax | grep spamd) when i run the spam test message through it says spam score:0 and 'template not found' What template is it looking for?? It's

Re: [SAtalk] Troubleshoot rbl checking

2003-10-15 Thread Matt Kettler
At 10:04 AM 10/15/03 -0400, Jon Fraley wrote: I am running SA 2.60. I had skip_rbl_checks set to 1 and now changed it to 0. I have started spamd with -D to get debugging, but do not see any thing about checking rbl's. Is there away to debug the rbl checks? Is there something I should look at?

<    1   2   3   4   5   6   7   8   9   10   >