RE: [SAtalk] stats

2004-01-22 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Vermyndax > Sent: Thursday, January 22, 2004 4:57 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] stats > > Greetings all... > > I am trying to implement a way to generate statistics for > Spam

RE: [SAtalk] BigEvil Archive

2004-01-19 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Gary Smith > Sent: Monday, January 19, 2004 1:21 PM > To: [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: RE: [SAtalk] BigEvil Archive > > Chris, > > Not to sound real bad but you should also b

RE: [WL] [SAtalk] Yikes.. rules_du_jour

2004-01-18 Thread Scott Harris
> > > > My wget client checks for a newer file, or did I miss your point? > > wget "cheats". It issues a "HEAD" command, and checks the timestamp. > If it turns out that it needs the file, then it issues a > "GET" command for it. > > This obviously saves downloading the file multiple times, bu

RE: [WL] [SAtalk] Yikes.. rules_du_jour

2004-01-18 Thread Scott Harris
> > HTTP provides a straightforward way to avoid repeated > downloads of a file that hasn't changed, by sending > If-Modified-Since requests. > > Unfortunately wget doesn't yet support this, though it is > mentioned in its TODO file. (This is with wget 1.9.1, which > is the current > ve

RE: [SAtalk] Problems running begevil and tripwire together (possibly solved)

2004-01-17 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Scott Harris > Sent: Thursday, January 15, 2004 2:05 PM > To: [EMAIL PROTECTED] > Subject: [SAtalk] Problems running begevil and tripwire together > > I think I

RE: [SAtalk] Problems running begevil and tripwire together

2004-01-16 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Scott Harris > Sent: Friday, January 16, 2004 9:59 AM > To: [EMAIL PROTECTED]; 'Chris Santerre' > Subject: RE: [SAtalk] Problems running begevil and tripwire tog

RE: [SAtalk] Problems running begevil and tripwire together

2004-01-16 Thread Scott Harris
gave the error. I guess time to hit up the mimedefang folks. Thanks! Scott (loving sunny SoCal 70 degree weather) Harris > -Original Message- > From: Chris Santerre [mailto:[EMAIL PROTECTED] > Sent: Thursday, January 15, 2004 8:16 PM > To: 'Scott Harris'; Spa

[SAtalk] Problems running begevil and tripwire together

2004-01-15 Thread Scott Harris
I think I've narrowed it down to this by trying different combos. The only change I've made in the past week was to update bigevil to 2.06i and add in the tripwire stuff (currently at 1.15). The error is below, and I'm somewhat inclined to believe it is a memory problem even though memory is

RE: [SAtalk] Yahoo, etc

2004-01-09 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Mi > Sent: Friday, January 09, 2004 12:37 PM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Yahoo, etc > > > >users that are constantly reminding me that they get > "absolutely no spam" > >on th

RE: [SAtalk] Bigevil 2.06f posted.

2004-01-08 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Upwood, Jim > Sent: Thursday, January 08, 2004 8:45 AM > To: Spamassassin-Talk (E-mail) > Subject: RE: [SAtalk] Bigevil 2.06f posted. > > I think he means smaller memory usage of the spamd proces

RE: [SAtalk] Useful to compare sender domain with relay?

2004-01-08 Thread Scott Harris
> I get a lot of these: > > Jan 2 14:53:38 linux1 sm-mta[22500]: i02MrVWw022500: > from=<[EMAIL PROTECTED]>, size=0, class=0, nrcpts=0, > proto=SMTP, daemon=MTA, > relay=200-168-30-167.dsl.telesp.net.br [200.168.30.167] > > Would a useful check be to reject anything where the relay > domai

RE: [SAtalk] send mail and spamassasin must be on the same machime

2004-01-08 Thread Scott Harris
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ceva Sent: Thursday, January 08, 2004 9:32 AM To: [EMAIL PROTECTED] Subject: [SAtalk] send mail and spamassasin must be on the same machime hi e

RE: [SAtalk] Bigevil 2.06f posted.

2004-01-08 Thread Scott Harris
>-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chris Santerre >Sent: Thursday, January 08, 2004 6:42 AM >To: Spamassassin-Talk (E-mail) >Subject: [SAtalk] Bigevil 2.06f posted. > >Another update. Bunch of stragler FPs removed. Thank you Robert M! >Fas

RE: [SAtalk] Bad Email Address

2004-01-06 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Paul Barbeau > Sent: Tuesday, January 06, 2004 3:23 AM > To: '[EMAIL PROTECTED]' > Subject: [SAtalk] Bad Email Address > > I get a large number of email send to the server for users > that have

RE: [SAtalk] Smart SPAM

2004-01-06 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Billy Huddleston > Sent: Tuesday, January 06, 2004 9:28 AM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Smart SPAM > > I've got a complete list of domains that I used with some > procmail scr

[SAtalk] Useful to compare sender domain with relay?

2004-01-02 Thread Scott Harris
I get a lot of these: Jan 2 14:53:38 linux1 sm-mta[22500]: i02MrVWw022500: from=<[EMAIL PROTECTED]>, size=0, class=0, nrcpts=0, proto=SMTP, daemon=MTA, relay=200-168-30-167.dsl.telesp.net.br [200.168.30.167] Would a useful check be to reject anything where the relay domain is not part of the sen

RE: [SAtalk] First spam directed to me at my SA email alias

2003-12-30 Thread Scott Harris
>-Original Message- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On >Behalf Of Peter Kiem >Sent: Monday, December 29, 2003 11:20 PM >To: [EMAIL PROTECTED] >Subject: Re: [SAtalk] First spam directed to me at my SA email alias >> track where the spam originates. Disappointing too b

[SAtalk] First spam directed to me at my SA email alias

2003-12-30 Thread Scott Harris
Title: First spam directed to me at my SA email alias Oh well, I guess it was bound to happen.  Got my first email addressed to the alias I use to post here.  That is why I do it I guess, so that I can track where the spam originates.  Disappointing too because now it will get sold and soon t

[SAtalk] List of products that use SA

2003-12-23 Thread Scott Harris
Is there a comprehensive list of products that use SA? I see the comments at: http://www.spamassassin.org/where.html That state: Where SpamAssassin Is Used This Page Is Obsolete! Since the number of products that support SpamAssassin(tm) have massively increased, I'm now tracking this data on th

RE: [SAtalk] Mailing lists and compliance verbage

2003-12-19 Thread Scott Harris
> > > > > This block of text has been going around for nearly 3-4 years > or more. It's not the same spam law that recently got signed > for the US. > The legit mailer using this SHOULD NOT be using this text. > > > > As a point of clarification, I thought it would be useful for people t

RE: [SAtalk] Mailing lists and compliance verbage

2003-12-19 Thread Scott Harris
> > > > > This block of text has been going around for nearly 3-4 years or more. > It's not the same spam law that recently got signed for the US. > The legit mailer using this SHOULD NOT be using this text. > > > > As a point of clarification, I thought it would be useful for people to k

[SAtalk] Mailing lists and compliance verbage

2003-12-19 Thread Scott Harris
I wanted to stir up some conversation about spam laws, disclosure and bulk emails/mailing lists. I have a user who subscribes to a few mailing lists and they have recently started adding the following disclosure to the emails they send: *** This me

RE: [SAtalk] Spammer causing Denial Of Service

2003-12-19 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Scott Williams > Sent: Thursday, December 18, 2003 11:10 PM > To: Scott Williams > Cc: Spamassassin-List > Subject: [SAtalk] Spammer causing Denial Of Service > > I was looking at the SA logs and

RE: [SAtalk] bigevil 2.04 posted

2003-12-17 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Gary Funck > Sent: Wednesday, December 17, 2003 11:51 AM > To: Spamassassin List > Subject: RE: [SAtalk] bigevil 2.04 posted > > > Hi Chris, welcome back. I've been running with the prior > ver

RE: [SAtalk] SpamAssassin and SendMail

2003-12-17 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Justin > Sent: Wednesday, December 17, 2003 9:08 AM > To: Brian Sneddon > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] SpamAssassin and SendMail > > On Wed, 17 Dec 2003, Brian Sneddon wrote: >

RE: [SAtalk] Help with Mark Motley's perl script

2003-12-10 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Lentz, Wayne > Sent: Wednesday, December 10, 2003 7:38 AM > To: '[EMAIL PROTECTED]' > Subject: [SAtalk] Help with Mark Motley's perl script > > Guys, > > I'm trying to use the perl script that M

[SAtalk] Spam that got through question

2003-12-07 Thread Scott Harris
Title: Spam that got through question The spam attached has the following random words at the bottom: automata childhood reflectance trevelyan tile captious hollingsworth cornstarch chinaman chicanery Is this to try to poison bayes or to just try and fool things to get it through or some

RE: [SAtalk] Re: BIG HUGE EVIL RULE NEWS!!!!

2003-12-06 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Chris Santerre > Sent: Thursday, December 04, 2003 12:18 PM > To: 'Chris Barnes'; [EMAIL PROTECTED] > Subject: RE: [SAtalk] Re: BIG HUGE EVIL RULE NEWS > > > > > > I'm too embarrassed to tel

[SAtalk] Big huge evil rules FP question

2003-12-06 Thread Scott Harris
Title: Big huge evil rules FP question Should I post what I believe are FPs here?  I've got one that fired two rules and I'm not quite sure.  Thanks, Scott

[SAtalk] Big huge evil rules FP question

2003-12-06 Thread Scott Harris
Title: Big huge evil rules FP question Should I post what I believe are FPs here?  I've got one that fired two rules and I'm not quite sure.  Thanks, Scott

RE: [SAtalk] Re: BIG HUGE EVIL RULE NEWS!!!!

2003-12-06 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Chris Santerre > Sent: Thursday, December 04, 2003 12:18 PM > To: 'Chris Barnes'; [EMAIL PROTECTED] > Subject: RE: [SAtalk] Re: BIG HUGE EVIL RULE NEWS > > > > > > I'm too embarrassed to tel

RE: [SAtalk] Interesting about BIG HUGE EVIL RULEs

2003-12-04 Thread Scott Harris
Title: Interesting about BIG HUGE EVIL RULEs Never mind about this, from another thread learned that it is just working as advertised.  Over anxious I guess.   From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott HarrisSent: Thursday, December 04, 2003 2:04

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-04 Thread Scott Harris
Ahh, that would explain my previous post then. Never mind I guess! > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Matthew Western,R&D Aust > Sent: Thursday, December 04, 2003 2:25 PM > To: [EMAIL PROTECTED] > Subject: RE: [SAtalk] BIG HUGE E

[SAtalk] Interesting about BIG HUGE EVIL RULEs

2003-12-04 Thread Scott Harris
Title: Interesting about BIG HUGE EVIL RULEs Because I don't have sourceforge whitelisted, 6 of the last 20 messages to the list were labeled as spam. Rules that hit were:  3.0 BigEvilList_70 BODY: Generated BigEvilList_70  3.0 BigEvilList_150    BODY: Generated BigEvilList_1

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-03 Thread Scott Harris
> -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Rick Macdougall > Sent: Wednesday, December 03, 2003 4:17 PM > To: 'SA List' > Subject: Re: [SAtalk] BIG HUGE EVIL RULE NEWS > > Peter P. Benac wrote: > > > I have been using Emacs for almos

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-03 Thread Scott Harris
Doesn't anyone use VI anymore?!! :-) Sorry, couldn't resist adding to the war. :%s/old stuff/new stuff/g -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mike Kuentz (2) Sent: Wednesday, December 03, 2003 10:46 AM To: Spamassassin-Talk (E-mail) Subje

RE: [SAtalk] AT&T PATENTS ANTI-ANTISPAM TECHNOLOGY

2003-11-19 Thread Scott Harris
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kai MacTane Sent: Wednesday, November 19, 2003 12:36 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] AT&T PATENTS ANTI-ANTISPAM TECHNOLOGY At 11/19/03 10:42 AM , Steve Thomas wrote: >I read this on TheRegis

[SAtalk] A new way to circumvent local RBLs?

2003-11-13 Thread Scott Harris
I received 4 of the emails like the one addressed in the log file below. I have [EMAIL PROTECTED] blocked via sendmail's virtusers file. Notice the To: is to=<00-ALLBouncesOnly0603-0-4999.txt:[EMAIL PROTECTED]> Somehow this is circumventing my local virtusers, then the first part is be

RE: [SAtalk] new to spamassassin

2003-11-11 Thread Scott Harris
> > >2. My compnay wants to block all swears (dont ask me why!) > How can this > >be done? > > Write some custom rules with high scores: > > bodyLOCAL_SWEARWORD1/\bf***\b/i > score LOCAL_SWEARWORD1 10.0 > > Substitute f*** for your favorite swear word.. Be sure to > frame you

RE: [SAtalk] sa-learn via email

2003-11-07 Thread Scott Harris
I got tired of more or less manually grabbing ham and spam from special accounts and just implemented the public folder setup also. I created the ham and spam public folders for users to drag stuff into and then implemented the scripts at: http://marc.theaimsgroup.com/?l=spamassassin-talk&m=104806

RE: [SAtalk] RBL check

2003-10-09 Thread Scott Harris
I turned mine off today for just that reason. A lot of the legitimate mailing lists were being blocked. Unfortunately now I'm starting to see the opt*, lf* and ls* coming back. After a week of testing I'm VERY please to not have to add those to my site RBL, but very dissatisfied with dropping le

RE: [SAtalk] RBL check

2003-10-09 Thread Scott Harris
h dropping legitimate mailing lists and other relays. Scott Scott Harris Synthys 6120 Paseo Valiente Carlsbad, CA 92009 760.579.0118 Fax: 309.214.7721 E-Mail/IM: [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Doug Crompton Sen

RE: [SAtalk] RBL check

2003-10-07 Thread Scott Harris
I turned mine off today for just that reason. A lot of the legitimate mailing lists were being blocked. Unfortunately now I'm starting to see the opt*, lf* and ls* coming back. After a week of testing I'm VERY please to not have to add those to my site RBL, but very dissatisfied with dropping le