Chris .. when are you gonna have the I *heart* BigEvil apparel and gifts
on cybercafe? :) (see my notes below)
- Original Message -
From: Chris Santerre [EMAIL PROTECTED]
To: Spamassassin-Talk (E-mail) [EMAIL PROTECTED]
Sent: Friday, January 23, 2004 9:30 AM
Subject: [SAtalk] Bigevil
When I run sa-stats I get a bunch of lines of this:
Malformed UTF-8 character (unexpected non-continuation byte 0x78,
immediately after start byte 0xf3) at
/usr/lib/perl5/vendor_perl/5.8.0/Date/Manip.pm line 6488.
And then all zero's for the report.
- Original Message -
From: Scott
- Original Message -
From: Chris Santerre [EMAIL PROTECTED]
To: 'Mike Kuentz (2)' [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Tuesday, December 30, 2003 9:42 AM
Subject: [SAtalk] RE: Big Evil FP?
I'd like to know off hand what kind of hit rates people are getting.
Roughly
90% of the
I can tell ya were SA would be wonderful... is on cell phones. The amount
of spam pouring into our corporate cell phones makes the email/text
messaging virtually unusable. And I get complaints about it all the time
because the message indicators are always one and it takes forever to weed
In the last 6 months or so, our spam volume has tripled as I am sure it has
for many of you. For the month of November, we topped out at over 110,000
spam emails into the company (yea for us?). 80,000+ were outright
/dev/null'd for the obvious potty language, appendage enhancement, etc, etc.
and
SA: 10 Spammers: 7
That was the score this morning for my email. There seems to be a lot more
of this going on. Is there anything I can do to plug these holes? We are
running Postfix + SA 2.6 site-wide as a relay, so we are not running Bayes.
I have never had this much trouble with SA before,
You will need to adjust the search string to match your mail logs.
my $t = grep /connect from/, @wholefile;# total
my $s = grep /identified spam/, @wholefile; # spam
my $d = grep /reject:/, @wholefile; #
ruleset
Quite Frankly, with 2.6, the popcorn, backhair, and weeds rules, and a few
other custom rules, I have had no need to run Bayes on our site-wide SA
implementation. We are having huge success right now. In the past week SA
has missed maybe 10 or so spam which is over 96% accuracy and with no FP's
I have SA running as
aFilter/Relayon a RH 7.3 box. It is a Celeron 1.4Ghz. It
processes mail for about 250 users. Ithas a single7200RPM IDE
drive and 768MB of PC100 RAM. I process around 4000 messages a day (Most
of it spam)
- Original Message -
From:
Wiebren
Braakman
Okay .. silly question then...
Do you just copy the evilrules.cf to /etc/mail/spamassassin and restart SA
and then SA will just process whatever .cf files are in the folder? Or do I
cat that to the local.cf file?
---
This SF.net email is
I always use wget or curl for grabbing web stuff.
- Original Message -
From: Chris Santerre [EMAIL PROTECTED]
To: 'Ray Dzek' [EMAIL PROTECTED];
[EMAIL PROTECTED]
Sent: Wednesday, October 15, 2003 11:43 AM
Subject: RE: [SAtalk] Popcorn, Backhair, and Weeds
-Original Message
for [EMAIL PROTECTED]; Mon, 13 Oct 2003 10:58:06 -0700
Message-ID: [EMAIL PROTECTED]
From: Peyton Claire [EMAIL PROTECTED]
To: Ray Dzek [EMAIL PROTECTED]
Subject: Ray, Erase your debt - Act Now
Date: Tue, 14 Oct 2003 06:48:15 -0700
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary
Okay .. I found tools, no problem...
But .. since SA runs as a non-privledged user with no logon on a site-wide
install, how do you run the tools to see what that db has in it? SA wants
to see the db under /root/.spamassassin. SA runs as the user filter which
has no logon.
Ray
Well the first impact of leaving it the way you have it show is that you
just added over 20 charachters to the front of any subject line which will
make some mail clients truncate the displayed real subject. I show the
score in my subject lines, but I use the subject_tag modifier in the
local.cf
This discussion could go on infinitum, but the bottom line is that there are
plenty of real and significant companies that pre-maturely release
un-baked products, do not release patches in the timely manner, and
abandon products that large portions of their user base were perfectly happy
with in
...of the business section of the San Jose Mercury News this morning.
http://www.bayarea.com/mld/bayarea/business/4943148.htm
Ray Dzek
Network Operations / Helpdesk
Specialized Bicycle Components
---
This SF.NET email is sponsored by: Take
By default, I think it is /etc/mail/spamassassin/local.cf
- Original Message -
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, January 08, 2003 9:31 AM
Subject: Re: [SAtalk] Hispeedmedia: spam with images as content
James D. Stallings wrote on Wed, 8 Jan 2003 09:33:37
Put the tears on hold. Put the knee-jerk in neutral. Put the soap boxes
away. Lay your weapons on the ground and step away slowly.
Nobody knows how this is going to shake out yet. It could be days, weeks,
or longer until the ramifications, if any, are fully known. Matt could be
back
Umm...Since this thread started on another list, could somebody please
explain, in english, the significance of the munged header?
Thanks.
Ray
- Original Message -
From: Tony Hoyle [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Monday, January 06, 2003 10:08 AM
Here is the proverbial Me too email! SA has made a huge impact here. In
the first full month of operation, SA tagged over 31,000 emails into our
company. If you figure it takes an average user 10 seconds to open an
unidentified spam message, figure out it is spam, and throw it away, SA
saves us
Is there way to bias the native language scores in SA? I have notice that
a significant portion of the spam that is sneeking past SA is non-english.
The bulk of it looks like it is either spanish or portuguese.
Thanks
---
This SF.net email
Well.. the whole thing is really a moot point. Nobody is pointing a gun at
anybody and making them use SA. Nobody is forcing SA implementers to use
black-lists.
I don't want my employees being solicited via email on company time anymore
than I would let somebody in the front door to go cubicle
Pretty straight forward actually.
The blue line is your total inbound mail. The green is how much spam, and
the orange ( I think it is orange. I'm color blind.) is percent of your
mail that is spam. The reason it drops to 0 is that your maillogs rotate
every sunday at 4AM. If you look in
This is a totaly stupid question, but...
Did you restart spamd after you made the local.cf changes?
How do I know this is a stupid question? Guess. :-)
- Original Message -
From: Thomas Nyman [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, November 08, 2002 8:08 AM
Subject:
This is probably me having a brain-F@rt, but...
How do I get SA to alter the headers, but not the body of the email?
If I set report_header 1 it removes the score from both the headers and the
body. I would like the score to be left in the headers, but removed from
the body of the email.
???
BURP! That was delicious.
Frankly, anything (and I don't care how crude, inefficient, CPU hog,
bloated, etc.) that pre-tags the spam in my mail stream works for me.
Our inbound mail stream is currently tracking at about 30% spam. So out of
about 5,000 inbound emails so far this week, 1,420
Thomas,
This is where I got started.
http://www.advosys.ca/papers/postfix-filtering.html
Overall it went pretty smooth on a RedHat 7.3 server.
I ultimately did not like the Anomy MIME defanger (may have been a
configuration issue on my part.) so I hacked up the filter.sh to remove it
and I
I have set up SA on a RedHat 7.3 server running spamc/spamd via Postfix
using a hacked up version of the Anomy filter.sh script at:
http://www.advosys.ca/papers/postfix-filtering.html
Basically I didn't like the Anomy defanger, so I stripped that part out the
the filter.sh and changed it so it
28 matches
Mail list logo