On Thu, Dec 04, 2003 at 09:10:01AM -0500, Rubin Bennett wrote:
WEhat are you all seeing for spam vs. ham stats out there? I just ran
my list statistics script and here's what I'm experiencing (much WORSE
than the current accepted statistics of about 50/50):
Stats since the 1st of the month
On Thu, Dec 04, 2003 at 08:09:31AM -0800, Gary Funck wrote:
From: [EMAIL PROTECTED]
Assuming my minor tweaks to the original script I saw posted here are
correct, here are my latest spam stats.. *sheesh*
Mail Statistics;
Mails spamassassin
On Wed, Dec 03, 2003 at 11:48:03AM -0500, Vee Persaud wrote:
How can I tell that SA is actually using these rules (located in
/etc/mail/spamassassin/bigevil.cf) ?
Feed your MTA a mail designed to match one or more of the rules, and
look for the match in your logs.
On Wed, Dec 03, 2003 at 07:17:28PM -0500, Rick Macdougall wrote:
Peter P. Benac wrote:
I have been using Emacs for almost 20 years. Is there any other editor :)
:s/old stuff/newstuff/g only works if you only have one instance of old
stuff per line!!
H?
What you talking
On Fri, Nov 07, 2003 at 12:09:58PM -0500, Roberto Salazar wrote:
Hi:
I have Spamassasin with Postfix working . This server is a Gateway for
others internal mail servers (in these are the users accounts).
I need that spamassasin erase spam mails directly (DELETE FILTER ) in my
server
On Thu, Oct 30, 2003 at 01:01:49PM -0500, Colin A. Bartlett wrote:
Chris Santerre Sent: Thursday, October 30, 2003 12:01 PM
My ratio has been about the same. ~55% average spam.
My SA server, which is used by my own company and another small ISP, is
currently receiving about 75% SPAM. And,
I have, from time to time, published stats generated by my
mailstats2.pl Perl script. Pretty much every time I get
mail remarking on how pretty the output is and asking for
a copy.
Since I can't put it up on the corporate webserver at work,
I'll offer to post it if:
1) Anyone is interested,
qw(tmpnam);
use FileHandle;
my $path = /var/log;
# formats for static headers
format HEADER0 =
Mail Statistics;
Produced by isdmon2:/home/mikea/bin/mailstats.pl; Run by isdmon2:/etc/crontab
.
format HEADER1 =
Mails spamassassin rejected scanner
On Thu, Oct 30, 2003 at 02:45:39PM -0800, Kenneth Porter wrote:
--On Thursday, October 30, 2003 2:26 PM -0600 'mikea' [EMAIL PROTECTED]
wrote:
my $s = grep /is spam/, @wholefile; # spam
This doesn't work with my copy of SA, which is using spamc/spamd. Instead
On Thu, Oct 30, 2003 at 04:33:35PM -0800, Kelsey Cummings wrote:
On Thu, Oct 30, 2003 at 03:37:02PM -0600, Chris Barnes wrote:
mikea [EMAIL PROTECTED] wrote:
I have, from time to time, published stats generated by my
mailstats2.pl Perl script. Pretty much every time I get
mail
On Wed, Oct 29, 2003 at 11:36:59AM -0500, Tobin wrote:
Hello,
I was wondering if anyone could help me fix a broken rule. Im getting a
error
Failed to compile body spamassassin tests, skipping:
(syntax error at /ect/mail/spamassassin/local.cf, rule Porn, line 1,
near /)
and
Failed
On Wed, Oct 29, 2003 at 11:58:35AM -0800, Justin Mason wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Bill Polhemus writes:
I am running SA 2.60 installed from the RPMs on Red Hat 9, on an AMD 2100+
based system with a half-gig of RAM.
Could you post the output of rpm -qa? And
On Thu, Oct 23, 2003 at 10:41:25AM -0400, Chris Santerre wrote:
Why are some URI rules written normally like this:
uri name /regex/
and others:
uri name m{regex}
uri name [EMAIL PROTECTED]@
What is up with the m's?
They're equivalent. Have a look in, f'rex, _Programming Perl_
or _Perl in
On Fri, Oct 24, 2003 at 09:43:12AM -0700, ian douglas wrote:
Right now I have MailScanner configured to delete high scoring spam so it
doesn't end up in my user's mailbox, but what about the 'bounce' option?
I'd *really* like to find a way to spoof a 550 error or a 'user unknown' error
that
: [EMAIL PROTECTED]
: To: mikea [EMAIL PROTECTED]
: Subject: DELIVERY FAILURE: User doesnotexistanywhereinthisdomain ([EMAIL PROTECTED])
not
: listed in public Name Address Book
: Message-ID: [EMAIL PROTECTED]
: References: [EMAIL PROTECTED]
: Mime-Version: 1.0
: User-Agent: Mutt/1.2.5.1i
: X-ODOT
On Tue, Oct 14, 2003 at 08:28:24AM -0500, Leon Oosterwijk wrote:
All,
I would like some feedback from you all on the following idea. What if
spamassassin followed unsubscribe links for all emails that came through
it's filter for emails that are obviously spam. This way people would
On Tue, Oct 14, 2003 at 08:33:03AM -0700, Patrick Morris wrote:
I got one of these, too, last night, from a machine at a Korean ISP, and
I've been trying to figure what I did.
Somehow I feel less special now. :)
Chris Santerre wrote:
Did anyone else get a nasty email this morning? I
On Tue, Oct 14, 2003 at 03:25:14PM -0500, David B Funk wrote:
2) Virus/worm hijacked PCs. We're seeing lots of PCs on cable modems
that have remote control trojan/worms on them that are being
used by spammers as open proxies (for both SMTP HTTP).
So you may be able to get a
On Mon, Oct 13, 2003 at 10:24:27AM -0400, Scott Blomquist wrote:
Simon Byrnand wrote:
We run around 50%. And that's by count. With the MS worms flying in we
have noticably more spam by volume than real mail.
Our current stats are 57% Spam, 43% ham. And thats not counting viruses,
On Mon, Oct 13, 2003 at 04:02:05PM -0400, Larry Gilson wrote:
Does anyone know of a list of either:
1) existing/allowed consonant/vowel pairs or sequences
2) non-existing/not-allowed consonant/vowel pairs or sequences
For the English language preferably.
I'd google on English digraph
On Thu, Oct 09, 2003 at 08:47:50AM -0600, Eric wrote:
anyone see a problem with this rule
header funky subject =~ /[A-Za-z][0-9][A-Za-z]
for catching subjects like g00d dTbt c0ns0lidati0n pr0graAm
so far its caught only spam but I noticed one spam had an ID number that
could possibly be an
On Fri, Oct 10, 2003 at 03:54:42PM +0200, [EMAIL PROTECTED] wrote:
Hi
I have some mail in my mailbox that I think is SPAM but spamassassin does
not.
All mail look almost the same, there is some text and two urls and some
junk at the bottom and all mail ends with Thanks, bye
Is there a way to
On Thu, Oct 09, 2003 at 11:56:29AM -0300, Fabiano Bonin wrote:
I am using SpamAssassin sice yesterday and i put it in production today,
site wide.
It's amazing.
It's filtering 95% on my daily messages, and all blocked messages are
really spams.
BUT, in my particular point of view, spam
On Mon, Oct 06, 2003 at 03:30:17PM -0400, Rob Mangiafico wrote:
Actually, when I type spamd --help from the command line with our newly
installed 2.60 software, I get:
---
Insecure directory in $ENV{PATH} while running with -T switch at
/usr/lib/perl5/5.6.0/Cwd.pm line 85.
Perhaps you
On Mon, Oct 06, 2003 at 09:56:37PM +0200, Alexander Newald wrote:
Hello,
I have hangs for about 20-30 sec. after the fullowing lines are displayed
(debug mode) using spamd:
debug: forged_rcvd_trail: entry 1: by=sourceforge.net from=sourceforge.net
mismatches=0
debug: forged_rcvd_trail:
On Wed, Oct 01, 2003 at 08:55:08AM -0700, John Schneider wrote:
I have been working too much lately, so my eyes might be a little
crossed But, the following message seems to have met the required value
for spam, but was not flagged:
Received: from supply.erhouse.com ([211.217.250.70])
On Tue, Sep 30, 2003 at 10:03:41AM -0400, Jeff Koch wrote:
Can someone explain what triggers 'FORGED_MUA_OUTLOOK'. We're using 2.55
and have seen some cases where for reasons we cannot explain this is
getting triggered and with the default scoring of 3.5 legit mails are
getting spam
On Thu, Sep 25, 2003 at 12:15:10PM -0400, Matt Chapman wrote:
sendmail[2427]: h8PG5C9C002427: smtpout.mac.com [17.250.248.97] did not
issue MAIL/EXPN/VRFY/ETRN during connection to MTA
This is showing up all the time. This is me at my .mac account trying
to send to my domain which is
On Wed, Sep 24, 2003 at 12:00:55PM -0500, Chris Barnes wrote:
I am about to upgrade fro SA2.6 (pre-rc1) to SA2.6 final release. I see
in the docs that if I want to continue to use Bayes, I have to install
DB_File and run sa-learn --import.
Ok, doesn't sound too bad.
But where do I get
On Tue, Sep 23, 2003 at 09:32:15PM +0200, Jim Knuth wrote:
Hallo Erik Slooff,
am Dienstag, 23. September 2003, 20:18:08, schriebst Du:
You need to pass the logfile name of your mail-daemon, e.g.
./spamstats0.4b5.pl /var/log/mail
I use spamd, and it works.
Markus
you have
On Mon, Sep 22, 2003 at 12:07:06PM -0400, Alicia Forsythe wrote:
The following spam is making it through. When I test this same mail, it
scores over 20 points. Why is it still getting through?
Return-path: [EMAIL PROTECTED]
Received: from 209.118.212.3
([200.167.37.247])
On Tue, Sep 16, 2003 at 01:14:07PM +0200, Andrea Riela wrote:
Hi
# Domain name starts with number(s)
...
# Domain name ends with number(s)
...
And domain name with number(s) like:
Getit4less
Hotxxxmail4u
...??
Be aware that scoring mail-IDs this way may cause false positives, and
On Tue, Sep 16, 2003 at 07:42:22PM +0100, [EMAIL PROTECTED] wrote:
I'm sure ICANN has already gotten an earful. I, for one, and going to
leave ICANN alone so that they can concentrate on a course of action
against Verisign.
They have already responded in a letter to VeriSign:
To
On Fri, Sep 05, 2003 at 01:25:38PM +0100, Darren Coleman wrote:
What's exactly the problem with Osirusoft at the moment then? Have they
actually blacklisted the entire Internet (accidentally?) or is that
just an overexaggeration?
Should I be zero'ing all of their tests?
Joe Jared set the
On Thu, Sep 04, 2003 at 07:10:37PM -0500, Thomas Cameron wrote:
From: Matt Tencati [EMAIL PROTECTED]
I've been looking into the same situation actually. I haven't
gotten far enough to try yet because of different things I've
seen. Domino changes the headers around somewhat, especially the
On Wed, Sep 03, 2003 at 07:11:34PM +0200, Ralf G. R. Bergs wrote:
Martin Radford schrieb:
[...]
4) I am new to spamassassin. What parameter should I use in my
configuration to cause spamassassin to stop using osirusoft open relay?
See the news article at http://news.spamassassin.org/
On Tue, Sep 02, 2003 at 09:06:33AM -0500, Robin Witkop-Staub wrote:
I am getting the following error in my maillog but cant determine from the
error where exactly I should be looking for the error:
Sep 1 02:10:44 mail spamd[3420]: Failed to compile body SpamAssassin tests,
skipping:
On Tue, Sep 02, 2003 at 02:03:36PM -0600, Karl Larsen wrote:
I just got spamd and spamc working with procmail in Red Hat 9
Linux. There are still a few spam messages getting through. I'm saving
them in a file /home/karl/mail/spam. Is there any way I can help SA do
better if I put
On Wed, Aug 27, 2003 at 11:37:26AM -0500, Robin Witkop-Staub wrote:
I was trying the following filter found on the suggested script sharing
page. For some reason it was tagging emails that had the word pizza in
them. Why?
body RAVEN_MaskedWordsF
On Sat, Aug 23, 2003 at 10:19:54PM -0700, Kai MacTane wrote:
Hi. I can't speak to your issue with Bayes file corruption, but I have
recently had to deal with huge amounts of mail spiking my CPU. (Admittedly,
this isn't hard, since my mail server is a Pentium (that's Pentium I,
pre-MMX) at
On Wed, Aug 20, 2003 at 07:30:23PM -0600, Bob Proulx wrote:
Erick Calder wrote:
I'm getting a bunch of mails from MAILER-DAEMONs around the world
complaining mostly that [EMAIL PROTECTED] does not exist.
these are generated by dictionary spammers who are using my e-mail address
for the
On Fri, Aug 08, 2003 at 09:12:36AM -0400, Jean-Paul Natola wrote:
Now that i have this info, is there any kind of Content filter that is linux
based, if so ,
can it run on the same box as SA?
SA is a *fine* content filter! It can filter on the headers, of
course, but also can filter on
On Fri, Aug 08, 2003 at 02:35:38PM -0400, Jean-Paul Natola wrote:
Well here's the scenario, (and no comments from the anti-windoze )
we have a windows 2000 network
active directory etc.. I will be deploying an exchange server (free
for non-profits) a few macs here as well.
I cannot get a
On Tue, Aug 12, 2003 at 12:32:58PM +0100, [EMAIL PROTECTED] wrote:
Hi Everyone
I receive a daily email from a financial mailing list, it is never usually
identified as spam, however, they today made the mistake of capitalising the subject
line of the email, but the really killer was the
On Fri, Jul 25, 2003 at 12:50:02PM -0400, [EMAIL PROTECTED] wrote:
i dont know how useful this would be, but i was thinking of a spam
reporting tool that did the following:
sends a message to root/webmaster/whatever of the mailing ip
traceroutes the ip, and finds the location
On Wed, Jul 23, 2003 at 12:13:03AM +0200, Jim Knuth wrote:
Hi, what mean this?
This is the output from spamassassin -lint -D sample-spam.txt
snip
debug: executable for pyzor was found at /usr/bin/pyzor
debug: Pyzor is available: /usr/bin/pyzor
debug: entering helper-app run mode
debug:
On Wed, Jul 23, 2003 at 12:42:34AM -0400, Daniel Carrera wrote:
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
I'm trying to teach SA. I just fed it a about 7,000 spam messages and it
claims to have only learned from 11. Here is the output:
dcarrera ~$ # The following step takes about
On Tue, Jul 22, 2003 at 01:34:18PM -0400, [EMAIL PROTECTED] wrote
about spam from [EMAIL PROTECTED]:
just wondering--
does anyone know what virus causes that one?
That's SoBig.A, according to Symantec's website.
The more recent SoBig flavors are a little less predictable.
--
Mike
I'm looking at adding a local DNSBL, served out of one of the
nameservers here.
Let's say that I want to look up an IP address, a.b.c.d, on
my server bl.odot.org, and want to add 5 points for entries
that map to 127.0.0.4.
Here:
#==
header
On Tue, Jul 22, 2003 at 11:44:38AM -0700, Justin Mason wrote:
It works like:
header CHECK_DNSBL_NAMErbleval:check_rbl('setname', 'zone')
describe CHECK_DNSBL_NAME Insert CHECK_DNSBL_NAME description here
tflags CHECK_DNSBL_NAMEnet
header CHECK_RESULTS
On Mon, Jul 21, 2003 at 03:13:59PM -0400, Chris Santerre wrote:
I got a spam today that came from YOUNGIL ELEMENTARY SCHOOL in Korea. They
are starting them early I guess :)
It was a how to lose 20 lb spam.
The Korean government is said to have done cookie-cutter installs
at all schools
On Fri, Jul 18, 2003 at 01:20:42PM +0200, Henrik Larsson wrote:
Hi
I know this is properly not a pure Spamassassin issue as you can se below,
but since all the Spamassasin experts is here, I would take the liberty to
asking the question anyway.
Please don't flame me to much if this is
On Thu, Jul 17, 2003 at 03:51:00PM -0500, Hill, John wrote:
Error on start up:
Use of uninitialized value in scalar assignment at
/usr/local/lib/perl5/site_perl/5.8.0/Mail/Spamassassin/Util.pm line 154
Latest spamd-cvs Slackware 8.1 perl 5.8.0 kernel 2.4.21.
It works but I get this
On Wed, Jul 16, 2003 at 04:51:27PM -0400, Dragoncrest wrote:
Erm ... _no_, actually. What's in the vicinity of line 420 of
/usr/local/lib/perl5/site_perl/5.005/Mail/SpamAssassin/Dns.pm
on the machine with the problem?
I've got the same thing you do on like 420 that you have on
On Tue, Jul 15, 2003 at 05:08:31PM +0100, Huw Jenkins wrote:
Hi there list,
I'm fairly new to SA so forgive my ignorance. I've installed
SpamAssasssin and it works very nicely. I've got my threshold set pretty
high as we're an ISP and I don't want and False Negatives. I've noticed that
On Tue, Jul 15, 2003 at 07:50:57PM -0400, Dragoncrest wrote:
Nobody knows anything about this error?
At 04:22 PM 7/14/03 -0400, Dragoncrest wrote:
Just viewing my mail logs today because i started getting fetchmail
errors saying I had duplicate processes running which usually
On Fri, Jul 11, 2003 at 01:02:01PM -0400, Fred Bacon wrote:
Hi, I'm running spamassassin 2.54 on a Redhat 7.3 distribution.
I have my users place unmarked spam into a shared IMAP folder on our
server. Every night I have a cron job learn the contents of the folder
as spam. On occasion
On Thu, Jul 10, 2003 at 11:53:01AM -0300, German Staltari wrote:
Hi, i've attahced a very tricky SPAM mail that has been scored with 0.8
points, what can be done with this kind of SPAM?.
First and foremost, you can feed it to the Bayesian classifier as spam
using sa-learn. That will cause all
On Thu, Jul 10, 2003 at 02:47:50PM -0400, Wendell Smith wrote:
I am trying to feed sa-learn some spam/ham and I was wondering
something...
Can I feed sa-learn ONE file that contains a large number of emails? I
ask this because I use Evolution and sort my mail into folders. Now
instead of
On Wed, Jul 09, 2003 at 08:45:13AM -0500, Thomas Cameron wrote:
All -
There was a spam message in my inbox when I ran sa-learn --ham on it. What
is the best way to unlearn it as ham and learn it as spam? Can I just stick
it in my spam mbox and run sa-learn --spam on it, or do I need to do
On Tue, Jul 08, 2003 at 11:42:33AM +0930, [EMAIL PROTECTED] wrote:
Hi All,
I've got spam assassin working like a dream on our small sendmail box.
works like a bought one.what i want to do is setup a gateway arrangment
for an Exchange Server (everyone shudders, i know).
like so:
On Tue, Jul 08, 2003 at 11:22:59AM -0400, VonEssen, John wrote:
In 50_scores.cf there are different formats of scores:
score SCORE_NAME 0.0 3.017 0.0 2.635
or
score SCORE_NAME 1.0
What is the difference and what do the extra fields mean? I would like
to change the weighting of some
On Mon, Jul 07, 2003 at 09:21:27AM -0700, Christopher Lyon wrote:
I was looking to get spamassassin and an anti virus program, sophos,
openantivirus, or anything that would work in conjunction with
spamassassin as a mail gateway. I have a production mail server and I
want to create just a SMTP
On Mon, Jul 07, 2003 at 02:50:46PM -0500, Richard Humphrey wrote:
I posted this a week or so ago and didnt get much in the way of a
response. Figured I would try again.
I enabled bayes in /etc/mail/spamassassin/local.cf and when I run
spamassassin -D --lint as any user, I get the following
On Mon, Jun 30, 2003 at 03:22:39PM +0100, Darren Coleman wrote:
It would be nice, although ultimately unworkable I guess, if SA could be
engineered to ignore anything which isn't humanly-visible in an email.
i.e. when spammers insert fake PGP signatures in font
color=White/font tags to lower
On Fri, Jun 27, 2003 at 08:06:27AM +0300, Hannu Liljemark wrote:
On Thu, Jun 26, 2003 at 11:57:00PM +0300, Vasantha Narayanan wrote:
The documentation seems to indicate, spamd and spamc are
included in the distribution. But I can't find it. Can you
please tell me where it is? Do I
On Fri, Jun 27, 2003 at 07:45:04AM -0500, Richard Humphrey wrote:
Ok, thanks for the info.I think i will just disable SA being called
through procmail and let MailScanner handle it. Is this the correct way
of doing it? I have one more question regarding MailScanner and SA. If
I set it to have
On Wed, Jun 25, 2003 at 05:13:32PM +0100, Jim Ford wrote:
On Tue, Jun 24, 2003 at 03:30:40PM -0700, Abigail Marshall wrote:
As to proving where it comes from, I'm just not sure it's
worth the effort on an individual basis -- a lot of time
expense involved. That's another thing the big
68 matches
Mail list logo
