Re: [SAtalk] Re: Blacklisting Your Own Domains

cklist score. This would allow me to easily (by adding "blacklist_from *@some_domain.com" to my local config file) list each domain, without the hassle of adding a separate rule (and description and score) for each one. Thanks for your help. - -- Richie Laager Wikstrom Telecom Intern

[SAtalk] Blacklisting Your Own Domains

mains? I'm thinking that nobody should be sending messages with a from address that is within our domains. I did some checking, and only spammy-looking domains would trigger this, with one exception: miles.ebay.com. Any thoughts? - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP

Re: [SAtalk] Re: Re: How to? One copy of SA for all virtual domains on server (Redhat)

ld just as well use CPAN and install all of SA.) - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE9Hy4YbfU6uV4fG84RAkMPAJ4gusNyDpmHIRO0WVjE9kLqo6ON8QCdFKqX Ldy04YiElrB3dyVNmlUhFJU= =KEd

Re: [SAtalk] Re: Thinking of performance

to be used verbatim): scan_message(char *s); // scan the message scan_message_locally(char *s); // scan the message w/o network report_message(char *s); // report the message as spam remove_markup(char *s); This is just food for thought. Enjoy! Richie Laager Wikstrom Telecom Internet - -- Richie Laag

Re: [SAtalk] Anyone know hot to remove "X-Spam-Checker-Version" from the header

reapply the patch. If you aren't sure how to apply the patch, feel free to reply to me, off-list. I'll need to know how you are installing SA (CPAN? RPM? apt-get? from source? from cvs?). Also, send the results of the following command: locate Conf.pm (If you get an error message abo

Re: [SAtalk] spamd dying

o file a bugzilla report with as much detail as possible. - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE83qVebfU6uV4fG84RAiaHAKC6mv+VwnSs2xJ60WbRp0iiFVbZ4gCeO23Z FfsHzCogyJiswM4vqzXl

Re: [SAtalk] SpamAssassin in C

couple of weeks so I can deploy it. - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE83pIMbfU6uV4fG84RAlo8AKCizQ5rmLu3beWQziGHTKBx9lcFOgCdHtYr g/jW3zPnSjli6JAnI3

[SAtalk] SpamAssassin in C (Was: Re: Thinking of performance)

Added code to generate the X-Spam-Status header. * Added code to generate the X-Spam-Level header. * Ran indent(3) over the .c source files. Enjoy! Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DB

Re: [SAtalk] spamassassin & razor in a double pass environment ...

) will be the contents of the message sent to spam@. The MUA will most likely add some text about the message being forwarded that would disrupt the razor reporting. Good luck, Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG

Re: [SAtalk] Can't get spamass-milter to load

t, I propose that the patch attached to the original mailing be committed, at least until something better can be worked out. Any thoughts? - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DB

[SAtalk] (no subject)

pam-Status is enough for me. - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE81WrkbfU6uV4fG84RAky9AKDOK38OdPsbSFr6W7ThYdfTEk9JFQCg23KD M56i46oAvarBMQBhNBYo6Lg= =V7XJ -END PGP

Re: [SAtalk] Re: Ick Viruses!

r the purpose." I feel that a rule to catch .exe attachments would be great. However, if this gets taken as far as blocking .vbs files, then you're treading into the realm of viruses. - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG

Re: [SAtalk] [Fwd: I have some exclusive information for you.]

> improve rules or just added the spam corpus? On a related note, how can one send his spam collection to be included in the spam corpus? - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://w

Re: [SAtalk] [PATCH] DCC Reporting

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 01 May 2002 22:29 pm, Craig R Hughes wrote: > Richie Laager wrote: > > RL> Attached is a patch that runs messages through "dccproc > -t RL> many" when "spamassassin -r" is run. > > > Great

Re: [SAtalk] [PATCH] DCC Reporting

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Wednesday 01 May 2002 22:01 pm, Richie Laager wrote: > As usual, it works for me! Your mileage may vary. :-) I just realized that there were two extra lines in that patch. They are the ones that include $response = undef. These were left o

[SAtalk] [PATCH] DCC Reporting

r. (By doing this, a message is instantly given a status of MANY, instead of having to get enough "bulkiness" to gain this status.) As usual, it works for me! Your mileage may vary. :-) - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6

[SAtalk] Spamassassing Lists and the Whitelist

s. Any thoughts? - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org iD8DBQE80J6vbfU6uV4fG84RAhX5AJ9F/2y/CwJAgPRZvV2XDhlXzQMeNQCgklaY d8VamL/EQX0JuzHfPN1Bjvw= =CfwP -EN

Re: [SAtalk] way to override system-wide whitelist?

d by not running the auto-report if the blacklist was triggered? Alternatively, the blacklist score could be ignored when comparing the score to the auto-report threshold. - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Co

[SAtalk] w flag and spamtraps

ccount which is running spamassassin. I'm using the Debian package of SpamAssassin, with Exim as my mailer. Any thoughts? Thanks, Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see

[SAtalk] Automatic Handling of SpamTraps

the above tasks. (In the future, I plan to run a more thorough reporting script: report to razor, spamcop, check for open relays, etc.) Any suggestions on how to do this? Thanks, Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE--

Re: [SAtalk] Suggested Makefile.PL patch

ult install. Okay, so let's create it. There's no restriction against that. I personally like this idea. The only problem is that the FHS specifically states that "host-specific system configuration" is to be stored in /etc. It's a tough call. Richie - -- Richie

Re: [SAtalk] Using SpamAssassin if you don't own ... (clarification)

.) In this plan, all mail would be reported to the Razor server. I think this is similar to how the DCC system works. I could be off-base here though, as this isn't my area of expertise. Just some food for thought. Richie Laager -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux)

Re: [SAtalk] SpamCop False Positivies

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Sunday 24 February 2002 15:15 pm, Richie Laager wrote: > body SPAMCOP_REPORT3Body =~ /- SpamCopy V\d\.\d\.\d -/ > body SPAMCOP_REPORT4Body =~ /http:\/\/spamcop.net\/w3m\?i=/ Doh! I forget to lookup the specifiecs of checking the bod

[SAtalk] CVS Notification -- Potential False Positive

SpamAssassin. header CVS_NOTIFICATION Subject =~ /CVS.*Notification/i describe CVS_NOTIFICATION The message is a CVS notification. score CVS_NOTIFICATION -2.5 - -- Richie Laager Wikstrom Telecom Internet -BEGIN PGP SIGNATURE- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http

[SAtalk] ManageAuctions.com -- False Positive

ler is using our services managing his/her auctions. You may acknowledge this notification online through our site -- that is, to enter your shipping destination information into your seller's account and to leave notes for him/her. http://auction2.inetu.net/cgi-bin/ack.cgi?seller=eforcity&am

[SAtalk] Datek Online -- False Positive

ou with an annual notice in = plain language of our Principles and before making any material change. CC-DA29 / #69068=A0=A006-22-01 http://www.m0.net/m/logopen02.asp?vid= =3D580&catid=3D3939342949&ecid=3D233094" alt=3D" "> -=_NEXT_e7419bb9b6-- -- Richie Laager Wikstrom Telecom Internet ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] SpamCop False Positivies

would be the best one(s) to use. Also, the scores may need to be adjusted. -- Richie Laager Wikstrom Telecom Internet ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk

[SAtalk] Crontab Mailing -- False Positives

names and hostnames on a Unix machine must start with a letter. If this is not true, the [:alpha:]\w* could be changed to \w+ -- Richie Laager Wikstrom Telecom Internet ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lis

[SAtalk] Multiple Thresholds

flagged as spam but sent through. If it's higher than 9, delete the message and inform the sender of this action. I would like to do this without resorting to running the mail through multiple copies of SpamAssassin. I'm hoping to make this solution scale to a large number of u