On Thu, Dec 04, 2003 at 01:10:17PM -0500, Owen Becker wrote:
> This is somewhat interesting. A fair number of mails are getting through with:
>
> X-Spam-Status: No, hits=-89.6 required=6.0 tests=BAYES_99,BIZ_TLD,
> CASHCASHCASH,DATE_IN_PAST_06_12,HTML_70_80,HTML_FONTCOLOR_BLUE,
> H
On Thu, Dec 04, 2003 at 08:09:31AM -0800, Gary Funck wrote:
>
> > From: [EMAIL PROTECTED]
> >
> > Assuming my minor tweaks to the original script I saw posted here are
> > correct, here are my latest spam stats.. *sheesh*
> >
> > Mail Statistics;
> > Mails spam
On Thu, Dec 04, 2003 at 09:10:01AM -0500, Rubin Bennett wrote:
> WEhat are you all seeing for spam vs. ham stats out there? I just ran
> my list statistics script and here's what I'm experiencing (much WORSE
> than the current "accepted" statistics of about 50/50):
>
> Stats since the 1st of the
On Wed, Dec 03, 2003 at 07:17:28PM -0500, Rick Macdougall wrote:
> Peter P. Benac wrote:
>
> > I have been using Emacs for almost 20 years. Is there any other editor :)
> >
> > :s/old stuff/newstuff/g only works if you only have one instance of "old
> > stuff" per line!!
>
> H?
>
> What
On Wed, Dec 03, 2003 at 11:48:03AM -0500, Vee Persaud wrote:
>
> How can I tell that SA is actually using these rules (located in
> /etc/mail/spamassassin/bigevil.cf) ?
Feed your MTA a mail designed to match one or more of the rules, and
look for the match in your logs.
On Fri, Nov 07, 2003 at 12:09:58PM -0500, Roberto Salazar wrote:
> Hi:
>
> I have Spamassasin with Postfix working . This server is a Gateway for
> others internal mail servers (in these are the users accounts).
>
> I need that spamassasin erase spam mails directly (DELETE FILTER ) in my
> serv
On Thu, Oct 30, 2003 at 04:33:35PM -0800, Kelsey Cummings wrote:
> On Thu, Oct 30, 2003 at 03:37:02PM -0600, Chris Barnes wrote:
> > mikea <[EMAIL PROTECTED]> wrote:
> > > I have, from time to time, published stats generated by my
> > > mailstats2.pl Perl scr
On Thu, Oct 30, 2003 at 02:45:39PM -0800, Kenneth Porter wrote:
> --On Thursday, October 30, 2003 2:26 PM -0600 'mikea' <[EMAIL PROTECTED]>
> wrote:
>
> > my $s = grep /is spam/, @wholefile; # spam
>
> This doesn't work with
0.07%)
use IO::File;
use POSIX qw(tmpnam);
use FileHandle;
my $path = "/var/log";
# formats for static headers
format HEADER0 =
Mail Statistics;
Produced by isdmon2:/home/mikea/bin/mailstats.pl; Run by isdmon2:/etc/crontab
.
format HEADER1 =
I have, from time to time, published stats generated by my
mailstats2.pl Perl script. Pretty much every time I get
mail remarking on how pretty the output is and asking for
a copy.
Since I can't put it up on the corporate webserver at work,
I'll offer to post it if:
1) Anyone is interested, an
On Thu, Oct 30, 2003 at 01:01:49PM -0500, Colin A. Bartlett wrote:
> Chris Santerre Sent: Thursday, October 30, 2003 12:01 PM
>
> > My ratio has been about the same. ~55% average spam.
>
> My SA server, which is used by my own company and another small ISP, is
> currently receiving about 75% SPAM
On Wed, Oct 29, 2003 at 11:58:35AM -0800, Justin Mason wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
>
> Bill Polhemus writes:
> > I am running SA 2.60 installed from the RPMs on Red Hat 9, on an AMD 2100+
> > based system with a half-gig of RAM.
>
> Could you post the output of "rp
On Wed, Oct 29, 2003 at 11:36:59AM -0500, Tobin wrote:
> Hello,
>
> I was wondering if anyone could help me fix a broken rule. Im getting a
> error
>
> "Failed to compile body spamassassin tests, skipping:
> (syntax error at /ect/mail/spamassassin/local.cf, rule Porn, line 1,
> near "/)
>
> and
On Thu, Oct 23, 2003 at 10:41:25AM -0400, Chris Santerre wrote:
> Why are some URI rules written normally like this:
> uri name /regex/
> and others:
> uri name m{regex}
> uri name [EMAIL PROTECTED]@
> What is up with the m's?
They're equivalent. Have a look in, f'rex, _Programming Perl_
or _Pe
On Fri, Oct 24, 2003 at 09:43:12AM -0700, ian douglas wrote:
> Right now I have MailScanner configured to delete high scoring spam so it
> doesn't end up in my user's mailbox, but what about the 'bounce' option?
>
> I'd *really* like to find a way to spoof a 550 error or a 'user unknown' error
> t
4
: for <[EMAIL PROTECTED]>; Mon, 20 Oct 2003 14:22:44 -0500
: Date: Mon, 20 Oct 2003 14:21:19 -0500
: From: [EMAIL PROTECTED]
: To: mikea <[EMAIL PROTECTED]>
: Subject: DELIVERY FAILURE: User doesnotexistanywhereinthisdomain ([EMAIL PROTECTED])
not
: listed in public Name &
On Tue, Oct 14, 2003 at 03:25:14PM -0500, David B Funk wrote:
> 2) Virus/worm hijacked PCs. We're seeing lots of PCs on cable modems
> that have "remote control" trojan/worms on them that are being
> used by spammers as open proxies (for both SMTP & HTTP).
> So you may be able to
On Tue, Oct 14, 2003 at 08:33:03AM -0700, Patrick Morris wrote:
> I got one of these, too, last night, from a machine at a Korean ISP, and
> I've been trying to figure what I did.
>
> Somehow I feel less special now. :)
>
> Chris Santerre wrote:
>
> >Did anyone else get a nasty email this morni
On Tue, Oct 14, 2003 at 08:28:24AM -0500, Leon Oosterwijk wrote:
> All,
>
> I would like some feedback from you all on the following idea. What if
> spamassassin followed unsubscribe links for all emails that came through
> it's filter for emails that are obviously spam. This way people would
> a
On Mon, Oct 13, 2003 at 04:02:05PM -0400, Larry Gilson wrote:
> Does anyone know of a list of either:
> 1) existing/allowed consonant/vowel pairs or sequences
> 2) non-existing/not-allowed consonant/vowel pairs or sequences
>
> For the English language preferably.
I'd google on "English digraph f
On Mon, Oct 13, 2003 at 10:24:27AM -0400, Scott Blomquist wrote:
>
>
> Simon Byrnand wrote:
>
> >>We run around 50%. And that's by count. With the MS worms flying in we
> >>have noticably more spam by volume than real mail.
> >
> >
> > Our current stats are 57% Spam, 43% ham. And thats not cou
On Fri, Oct 10, 2003 at 03:54:42PM +0200, [EMAIL PROTECTED] wrote:
> Hi
> I have some mail in my mailbox that I think is SPAM but spamassassin does
> not.
> All mail look almost the same, there is some text and two urls and some
> junk at the bottom and all mail ends with Thanks, bye
> Is there a w
On Thu, Oct 09, 2003 at 08:47:50AM -0600, Eric wrote:
> anyone see a problem with this rule
> header funky subject =~ /[A-Za-z][0-9][A-Za-z]
> for catching subjects like g00d dTbt c0ns0lidati0n pr0graAm
>
> so far its caught only spam but I noticed one spam had an ID number that
> could possibly b
On Thu, Oct 09, 2003 at 11:56:29AM -0300, Fabiano Bonin wrote:
> I am using SpamAssassin sice yesterday and i put it in production today,
> site wide.
> It's amazing.
> It's filtering 95% on my daily messages, and all blocked messages are
> really spams.
>
> BUT, in my particular point of view, sp
On Mon, Oct 06, 2003 at 09:56:37PM +0200, Alexander Newald wrote:
> Hello,
>
> I have hangs for about 20-30 sec. after the fullowing lines are displayed
> (debug mode) using spamd:
>
> debug: forged_rcvd_trail: entry 1: by=sourceforge.net from=sourceforge.net
> mismatches=0
> debug: forged_rcvd_t
On Mon, Oct 06, 2003 at 03:30:17PM -0400, Rob Mangiafico wrote:
> Actually, when I type "spamd --help" from the command line with our newly
> installed 2.60 software, I get:
> ---
> Insecure directory in $ENV{PATH} while running with -T switch at
> /usr/lib/perl5/5.6.0/Cwd.pm line 85.
Perhaps y
On Wed, Oct 01, 2003 at 08:55:08AM -0700, John Schneider wrote:
> I have been working too much lately, so my eyes might be a little
> crossed But, the following message seems to have met the required value
> for spam, but was not flagged:
>
> Received: from supply.erhouse.com ([211.217.250.70]
On Tue, Sep 30, 2003 at 10:03:41AM -0400, Jeff Koch wrote:
>
> Can someone explain what triggers 'FORGED_MUA_OUTLOOK'. We're using 2.55
> and have seen some cases where for reasons we cannot explain this is
> getting triggered and with the default scoring of 3.5 legit mails are
> getting spam f
On Thu, Sep 25, 2003 at 12:15:10PM -0400, Matt Chapman wrote:
> sendmail[2427]: h8PG5C9C002427: smtpout.mac.com [17.250.248.97] did not
> issue MAIL/EXPN/VRFY/ETRN during connection to MTA
>
> This is showing up all the time. This is me at my .mac account trying
> to send to my domain which is re
On Wed, Sep 24, 2003 at 12:00:55PM -0500, Chris Barnes wrote:
> I am about to upgrade fro SA2.6 (pre-rc1) to SA2.6 final release. I see
> in the docs that if I want to continue to use Bayes, I have to install
> DB_File and run "sa-learn --import".
>
> Ok, doesn't sound too bad.
>
> But where do
On Tue, Sep 23, 2003 at 09:32:15PM +0200, Jim Knuth wrote:
> Hallo Erik Slooff,
>
> am Dienstag, 23. September 2003, 20:18:08, schriebst Du:
>
> >> > You need to pass the logfile name of your mail-daemon, e.g.
> >> > ./spamstats0.4b5.pl /var/log/mail
> >> > I use spamd, and it works.
> >>
> >> >
On Mon, Sep 22, 2003 at 12:07:06PM -0400, Alicia Forsythe wrote:
> The following spam is making it through. When I test this same mail, it
> scores over 20 points. Why is it still getting through?
>
>
> Return-path: <[EMAIL PROTECTED]>
> Received: from 209.118.212.3
> ([200.167.37.247])
On Thu, Sep 18, 2003 at 09:55:12AM -0700, Mitch (WebCob) wrote:
> What am I missing?
>
> I tacked this on to the end of 20_head_tests.cf (note key info obscured to
> protect the innocent, but the pattern match works in a test perl script - is
> there another way to test a rule?)
>
> header MY_CLI
On Tue, Sep 16, 2003 at 07:42:22PM +0100, [EMAIL PROTECTED] wrote:
>
> > I'm sure ICANN has already gotten an earful. I, for one, and going to
> > leave ICANN alone so that they can concentrate on a course of action
> > against Verisign.
> >
> They have already responded in a letter to VeriSign:
>
On Tue, Sep 16, 2003 at 01:14:07PM +0200, Andrea Riela wrote:
> Hi
>
> > # Domain name starts with number(s)
> <...>
> > # Domain name ends with number(s)
> <...>
>
> And domain name with number(s) like:
> Getit4less
> Hotxxxmail4u
> ...??
Be aware that scoring mail-IDs this way may cause fals
On Thu, Sep 04, 2003 at 07:10:37PM -0500, Thomas Cameron wrote:
> From: "Matt Tencati" <[EMAIL PROTECTED]>
> > I've been looking into the same situation actually. I haven't
> > gotten far enough to try yet because of different things I've
> > seen. Domino changes the headers around somewhat, espe
On Fri, Sep 05, 2003 at 01:25:38PM +0100, Darren Coleman wrote:
> What's exactly the problem with Osirusoft at the moment then? Have they
> actually "blacklisted the entire Internet" (accidentally?) or is that
> just an overexaggeration?
>
> Should I be zero'ing all of their tests?
Joe Jared set
On Wed, Sep 03, 2003 at 07:11:34PM +0200, Ralf G. R. Bergs wrote:
> Martin Radford schrieb:
> [...]
> >>4) I am new to spamassassin. What parameter should I use in my
> >>configuration to cause spamassassin to stop using osirusoft open relay?
> >
> > See the news article at http://news.spamassas
On Tue, Sep 02, 2003 at 02:03:36PM -0600, Karl Larsen wrote:
>
> I just got spamd and spamc working with procmail in Red Hat 9
> Linux. There are still a few spam messages getting through. I'm saving
> them in a file /home/karl/mail/spam. Is there any way I can help SA do
> better if I pu
On Tue, Sep 02, 2003 at 09:06:33AM -0500, Robin Witkop-Staub wrote:
> I am getting the following error in my maillog but cant determine from the
> error where exactly I should be looking for the error:
>
> Sep 1 02:10:44 mail spamd[3420]: Failed to compile body SpamAssassin tests,
> skipping: ^I(
On Wed, Aug 27, 2003 at 11:37:26AM -0500, Robin Witkop-Staub wrote:
> I was trying the following filter found on the suggested script sharing
> page. For some reason it was tagging emails that had the word "pizza" in
> them. Why?
>
> body RAVEN_MaskedWordsF
> /\b(?:excIusive|GiangBiang|sIut|
On Sat, Aug 23, 2003 at 10:19:54PM -0700, Kai MacTane wrote:
> Hi. I can't speak to your issue with Bayes file corruption, but I have
> recently had to deal with huge amounts of mail spiking my CPU. (Admittedly,
> this isn't hard, since my mail server is a Pentium (that's Pentium I,
> pre-MMX)
On Wed, Aug 20, 2003 at 07:30:23PM -0600, Bob Proulx wrote:
> Erick Calder wrote:
> > I'm getting a bunch of mails from MAILER-DAEMONs around the world
> > complaining mostly that [EMAIL PROTECTED] does not exist.
> > these are generated by dictionary spammers who are using my e-mail address
> > fo
On Fri, Aug 08, 2003 at 02:35:38PM -0400, Jean-Paul Natola wrote:
> Well here's the scenario, (and no comments from the anti-windoze )
> we have a windows 2000 network
> active directory etc.. I will be deploying an exchange server (free
> for non-profits) a few macs here as well.
> I cannot get
On Fri, Aug 08, 2003 at 09:12:36AM -0400, Jean-Paul Natola wrote:
> Now that i have this info, is there any kind of Content filter that is linux
> based, if so ,
>
> can it run on the same box as SA?
SA is a *fine* content filter! It can filter on the headers, of
course, but also can filter
On Tue, Aug 12, 2003 at 12:32:58PM +0100, [EMAIL PROTECTED] wrote:
> Hi Everyone
>
> I receive a daily email from a financial mailing list, it is never usually
> identified as spam, however, they today made the mistake of capitalising the subject
> line of the email, but the really killer was th
On Fri, Jul 25, 2003 at 12:50:02PM -0400, [EMAIL PROTECTED] wrote:
> i dont know how useful this would be, but i was thinking of a spam
> reporting tool that did the following:
> sends a message to root/webmaster/whatever of the mailing ip
> traceroutes the ip, and finds the location f
On Wed, Jul 23, 2003 at 07:00:34PM -0700, Jim Blevins wrote:
> How does one go about blacklisting an entire network, say for example
> [EMAIL PROTECTED] does not seem to work?
In my sendmail access file (`input to makemap hash accesshttp://aspnet.click-url.com/go/psa0013ave/direct;at.aspnet_07
On Wed, Jul 23, 2003 at 12:42:34AM -0400, Daniel Carrera wrote:
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
> I'm trying to teach SA. I just fed it a about 7,000 spam messages and it
> claims to have only learned from 11. Here is the output:
>
> dcarrera ~$ # The following step takes a
On Wed, Jul 23, 2003 at 12:13:03AM +0200, Jim Knuth wrote:
> Hi, what mean this?
> This is the output from "spamassassin -lint -D < sample-spam.txt"
>
>
> debug: executable for pyzor was found at /usr/bin/pyzor
> debug: Pyzor is available: /usr/bin/pyzor
> debug: entering helper-app run mode
> de
On Tue, Jul 22, 2003 at 11:44:38AM -0700, Justin Mason wrote:
> It works like:
> header CHECK_DNSBL_NAMErbleval:check_rbl('setname', 'zone')
> describe CHECK_DNSBL_NAME Insert CHECK_DNSBL_NAME description here
> tflags CHECK_DNSBL_NAMEnet
> header CHECK_RESULTS rbleval:check_r
On Tue, Jul 22, 2003 at 01:34:18PM -0400, [EMAIL PROTECTED] wrote
about spam from "[EMAIL PROTECTED]":
>
> just wondering--
>
> does anyone know what virus causes that one?
That's SoBig.A, according to Symantec's website.
The more recent SoBig flavors are a little less predictable.
--
Mike A
I'm looking at adding a local DNSBL, served out of one of the
nameservers here.
Let's say that I want to look up an IP address, a.b.c.d, on
my server bl.odot.org, and want to add 5 points for entries
that map to 127.0.0.4.
Here:
#==
header ODOT_RCVD_B
On Mon, Jul 21, 2003 at 03:13:59PM -0400, Chris Santerre wrote:
> I got a spam today that came from "YOUNGIL ELEMENTARY SCHOOL" in Korea. They
> are starting them early I guess :)
>
> It was a "how to lose 20 lb" spam.
The Korean government is said to have done "cookie-cutter" installs
at all s
On Fri, Jul 18, 2003 at 01:20:42PM +0200, Henrik Larsson wrote:
> Hi
>
> I know this is properly not a pure Spamassassin issue as you can se below,
> but since all the Spamassasin experts is here, I would take the liberty to
> asking the question anyway.
>
> Please don't flame me to much if this
On Thu, Jul 17, 2003 at 03:51:00PM -0500, Hill, John wrote:
> Error on start up:
>
> Use of uninitialized value in scalar assignment at
> /usr/local/lib/perl5/site_perl/5.8.0/Mail/Spamassassin/Util.pm line 154
>
> Latest spamd-cvs Slackware 8.1 perl 5.8.0 kernel 2.4.21.
>
> It works but I get th
On Wed, Jul 16, 2003 at 04:51:27PM -0400, Dragoncrest wrote:
>
> >Erm ... _no_, actually. What's in the vicinity of line 420 of
> >/usr/local/lib/perl5/site_perl/5.005/Mail/SpamAssassin/Dns.pm
> >on the machine with the problem?
>
> I've got the same thing you do on like 420 that you hav
On Tue, Jul 15, 2003 at 07:50:57PM -0400, Dragoncrest wrote:
> Nobody knows anything about this error?
>
> At 04:22 PM 7/14/03 -0400, Dragoncrest wrote:
> >Just viewing my mail logs today because i started getting fetchmail
> >errors saying I had duplicate processes running which usually
On Tue, Jul 15, 2003 at 05:08:31PM +0100, Huw Jenkins wrote:
> Hi there list,
> I'm fairly new to SA so forgive my ignorance. I've installed
> SpamAssasssin and it works very nicely. I've got my threshold set pretty
> high as we're an ISP and I don't want and False Negatives. I've noticed that
On Fri, Jul 11, 2003 at 09:59:22AM -0700, Support wrote:
> Hi,
>
> I have a user who gets SPAM with scores of around -6.0 points. One thing
> I've noticed is that they have asian characters(and some english). Could
> this be inducing a false negative?
>
> Also one side question. how exactly is
On Fri, Jul 11, 2003 at 01:02:01PM -0400, Fred Bacon wrote:
> Hi, I'm running spamassassin 2.54 on a Redhat 7.3 distribution.
>
> I have my users place unmarked spam into a shared IMAP folder on our
> server. Every night I have a cron job learn the contents of the folder
> as spam. On occasion (
On Thu, Jul 10, 2003 at 02:47:50PM -0400, Wendell Smith wrote:
> I am trying to feed sa-learn some spam/ham and I was wondering
> something...
>
> Can I feed sa-learn ONE file that contains a large number of emails? I
> ask this because I use Evolution and sort my mail into folders. Now
> instead
On Thu, Jul 10, 2003 at 11:53:01AM -0300, German Staltari wrote:
> Hi, i've attahced a very tricky SPAM mail that has been scored with 0.8
> points, what can be done with this kind of SPAM?.
First and foremost, you can feed it to the Bayesian classifier as spam
using sa-learn. That will cause all
On Wed, Jul 09, 2003 at 08:45:13AM -0500, Thomas Cameron wrote:
> All -
>
> There was a spam message in my inbox when I ran sa-learn --ham on it. What
> is the best way to unlearn it as ham and learn it as spam? Can I just stick
> it in my spam mbox and run sa-learn --spam on it, or do I need to
On Tue, Jul 08, 2003 at 11:22:59AM -0400, VonEssen, John wrote:
> In 50_scores.cf there are different formats of scores:
>
> score SCORE_NAME 0.0 3.017 0.0 2.635
>
> or
>
> score SCORE_NAME 1.0
>
> What is the difference and what do the extra fields mean? I would like
> to change the weighting
On Tue, Jul 08, 2003 at 11:42:33AM +0930, [EMAIL PROTECTED] wrote:
> Hi All,
> I've got spam assassin working like a dream on our small sendmail box.
> works like a bought one.what i want to do is setup a gateway arrangment
> for an Exchange Server (everyone shudders, i know).
>
> like so:
>
On Mon, Jul 07, 2003 at 02:50:46PM -0500, Richard Humphrey wrote:
> I posted this a week or so ago and didnt get much in the way of a
> response. Figured I would try again.
> I enabled bayes in /etc/mail/spamassassin/local.cf and when I run
> spamassassin -D --lint as any user, I get the following
On Mon, Jul 07, 2003 at 11:45:59AM -0700, Matthew Thomas wrote:
> Greetings,
>
> I'm using 2.53 spamassassin (with Mimedefang and sendmail). I've got my
> bayes database seeded. When I test spam using "spamassassin -tD <
> sample-spam", I get accurate bayes information. But I have yet to see th
On Mon, Jul 07, 2003 at 09:21:27AM -0700, Christopher Lyon wrote:
> I was looking to get spamassassin and an anti virus program, sophos,
> openantivirus, or anything that would work in conjunction with
> spamassassin as a mail gateway. I have a production mail server and I
> want to create just a S
On Mon, Jun 30, 2003 at 03:22:39PM +0100, Darren Coleman wrote:
> It would be nice, although ultimately unworkable I guess, if SA could be
> engineered to ignore anything which isn't humanly-visible in an email.
> i.e. when spammers insert fake PGP signatures in color="White"> tags to lower their
On Fri, Jun 27, 2003 at 07:45:04AM -0500, Richard Humphrey wrote:
> Ok, thanks for the info.I think i will just disable SA being called
> through procmail and let MailScanner handle it. Is this the correct way
> of doing it? I have one more question regarding MailScanner and SA. If
> I set it to h
On Fri, Jun 27, 2003 at 08:06:27AM +0300, Hannu Liljemark wrote:
> On Thu, Jun 26, 2003 at 11:57:00PM +0300, Vasantha Narayanan wrote:
>
> > The documentation seems to indicate, spamd and spamc are
> > included in the distribution. But I can't find it. Can you
> > please tell me where it is? D
On Wed, Jun 25, 2003 at 05:13:32PM +0100, Jim Ford wrote:
> On Tue, Jun 24, 2003 at 03:30:40PM -0700, Abigail Marshall wrote:
>
> > As to proving where it comes from, I'm just not sure it's
> > worth the effort on an individual basis -- a lot of time &
> > expense involved. That's another thing t
73 matches
Mail list logo
