RE: [SAtalk] RE: New Ruleset Available!!! TRIPWIRE! You don't want to miss this o ne!

2004-01-14 Thread Clary, Patrick M.
r the great new ruleset! Patrick Clary Data Security Engineer, UMB Bank -Original Message- From: Chris Santerre [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 14, 2004 4:03 PM To: 'Kurt Yoder'; Chris Santerre Cc: 'Matthew Trent'; Spamassassin-Talk Subject: RE:

Re: [SAtalk] New rule? Based on domain registry

2004-01-04 Thread Patrick Steiner
I think its no possible to filter mails bye its whois entry. you can only filter some text that it be in the message or in the header from the mail. if you want to do that you must write a litte separete progam that make for all incomming mail a whois lookup and i thing thats not a good idea. i t

Re: [SAtalk] spamd virtual homes and user_prefs

2003-12-24 Thread Patrick von der Hagen
s I'll think of something next year... -- CU, Patrick. --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from

[SAtalk] Save user rules in mysql?

2003-12-01 Thread Patrick T. Tsang
Hello, Spamc can read user preference from mysql. This is working fine. However, how can I store the user filtering rules / setting on mysql and let spamc to read it? I have tried insert some rules into mysql but failed. Any one can help? Patrick Tsang

[SAtalk] spamc (+mysql) user setting looking at local.cf !!

2003-12-01 Thread Patrick T. Tsang
spamassassinc daemon to load new rules from new created .cf under /etc/mail/spamassassin. For anyone who experience the same problem please help. Thanks a lot Patrick --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net

Re: [SAtalk] mysql spamc ignores the email in mailling list

2003-11-27 Thread Patrick T. Tsang
Hello Rob, I would like to have the worked example since Jason McCormick has suggested a different approach (check the post). His suggestion is well enough for my basic requirement. However, I am looking for a better way. Best Regards Patrick Tsang - Original Message - From: &quo

Re: [SAtalk] mysql user rules (no local.cf definition)

2003-11-26 Thread Patrick T. Tsang
Hello Adam, There is a work-around but not good at all. As Spamassassin will be looking at all the files under /etc/mail/spamassassin/ , you can just made a user.cf file and conditionally restart spamd (I use RPM version). Quite a bad idea, though. Best Regards Patrick Tsang - Original

[SAtalk] Drop spam into a cyrus mailbox?

2003-11-26 Thread Patrick T. Tsang
Hello, I would like to know if anyone have the experience to integrate Spamassassin with Cyrus-imapd. I want a spam mail can be dropped into a user's mailbox. It seems that only procmal with some peal script which handle cyrus-imapd can do this. Anyone has the suggestions? Best Regards Pa

Re: [SAtalk] mysql user rules (no local.cf definition)

2003-11-26 Thread Patrick T. Tsang
Dear Adam, Thanks. It is working fine. As same as your problem, my user-defined rules are still duplicated in local.cf. However I don't think modification on local.cf for user is a good idea. We have to wait for bug fix. Anyone have the work around? Best Regards Patrick Tsang - Ori

Re: [SAtalk] mysql user rules (no local.cf definition)

2003-11-26 Thread Patrick T. Tsang
nough fields to do these. Totally confused... In your question, I don't know "allow_user_rules 1" should help you or not. It doesn't make sense if the rules should be in local.cf file. Best Regards Patrick Tsang - Original Message - From: "Adam Denenberg&q

[SAtalk] Postfix & Spamassassin - problem in mailling list?

2003-11-20 Thread Patrick T. Tsang
- Original Message - From: "Patrick T. Tsang" <[EMAIL PROTECTED]> To: "Jason McCormick" <[EMAIL PROTECTED]> Sent: Thursday, November 20, 2003 6:47 PM Subject: Re: Postfix & Spamassassin - problem in mailling list? > Dear Jason, > > Thanks f

[SAtalk] mysql spamc ignores the email in mailling list

2003-11-20 Thread Patrick T. Tsang
- Original Message - From: "Patrick T. Tsang" <[EMAIL PROTECTED]> To: "Matt Kettler" <[EMAIL PROTECTED]> Sent: Thursday, November 20, 2003 6:57 PM Subject: Re: [SAtalk] mysql spamc ignores the email in mailling list > At 06:09 PM 11/19/03 +0800, Pat

[SAtalk] mysql spamc ignores the email in mailling list

2003-11-20 Thread Patrick T. Tsang
Dear Ryan, Thanks for your help. Do u have any worked examples? Patrick - Original Message - From: "Ryan Moore" <[EMAIL PROTECTED]> To: "Patrick T. Tsang" <[EMAIL PROTECTED]>; "spamassassin-Talk" <[EMAIL PROTECTED]> Sent: Thursday

[SAtalk] mysql spamc ignores the email in mailling list

2003-11-19 Thread Patrick T. Tsang
eck against the user-defined rules in Mysql. That is, it skips the user-defined of the others in the mailling list. Of course, spamc also check against the global rules in the mysql. I would like to know if it is normal?? OR it is the problem in postfix mailler? Thanks Patr

[SAtalk] spamc only handle ONE smtp session?

2003-11-17 Thread Patrick T. Tsang
he different rules to each user. (recipient and cc. email) My question is that if spamc with -u option only supports ONE smtp session? so at-least one of the email is ignored in the mailling list? Is that the design to prevent spammers? Thanks Patrick --

[SAtalk] spamc only handle ONE smtp session?

2003-11-17 Thread Patrick T. Tsang
should select the different rules to each user. (recipient and cc. email) My question is that if spamc with -u option only supports ONE smtp session? so at-least one of the email is ignored in the mailling list? Is that the design to prevent spammers

Re: [SAtalk] Sole scanner?

2003-11-03 Thread Patrick Morris
Angel Gabriel wrote: I want to setup a machine, with a sole purpose, of scanning email. All email to be delivered to my domain, will be accepted by this machine, and then, after scanning delivered to my mail server. How can I achieve such a setup? There are more ways to do this than I can count

[SAtalk] Re: Whitelist not working?

2003-11-03 Thread Patrick Beard
PROTECTED] whitelist_from [EMAIL PROTECTED] whitelist_from [EMAIL PROTECTED] That worked for me. -- Patrick --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it hel

Re: [SAtalk] Need advice on new SA setup.. Which delivery agent is best??

2003-11-02 Thread Patrick Morris
Robert Leonard III wrote: I am wondering, what, in your opinions, is the best choice for building SA.. I am using it for a Site-Wide proxy, to pass on to my MS Exchange server. No local mail accounts, simply pass-through. Qmail? Postfix? Sendmail? I'm running all three in various places, and

Re: [SAtalk] Postfix Spamtrap Configuration

2003-10-31 Thread Patrick von der Hagen
ing all headers) automatically add their footers (which would usually indicate ham) or even add comments ("I got this spam three times! Do something about it!!"). So forwarded mails are not the best thing to have bayes learn... -- CU, Patrick.

Re: [SAtalk] using spamd/spamc to reject SMTP connection

2003-10-31 Thread Patrick Morris
In most cases I can think of, spamc doesn't get the message until after the connection is already finished. A milter is the only way I can think of you can get a result from SA before Sendmail's finished receiving the mail, and all the milters I'm aware of are capable of just the sort of behav

Re: [SAtalk] Rule for reverse lookup similarities

2003-10-30 Thread Patrick Morris
Steven Manross wrote: I'm seeing a few/lot of spam that has a reverse lookup name that is like the originating IP. i.e. If it were 192.168.52.45 that was the originating IP, the reverse lookup might be 192-168-52-45-clients.domain.com This is a *very* common naming convention for ISPs that ass

Re: [SAtalk] How filter ...

2003-10-30 Thread Patrick Morris
There's a thread currently going on about this exact same subject. Check out the "Open Source is Naughty" thread. Andrea Riela wrote: Hi folks, How could I filter this type of spam: Penis P.enis Pe.nis Pen.is Peni.s In the html body? Thanks for your advices Andrea --

Re: [SAtalk] RE: How can I mark all mails with specific words in the subject as spam?

2003-10-30 Thread Patrick Morris
Gerhard Hofmann wrote: I thought I could furtherly improve configuration by adding something like "whitelist_subject" or "blacklist_subject". It seems to me that'd be pretty redundant... There's a mechanism in place already to score e-mails that have specific tags in the subject. For examp

Re: [SAtalk] What on earth is this? FW: Undeliverable Mail: RE: [SAtalk] [RD] Open source is Naughty!!!

2003-10-29 Thread Patrick Morris
Chris Santerre wrote: I'm not sure if this is a Spam or legit! Anyone ever got one of these from the list? A bounce message from someone whose susbcribed e-mail address is no longer valid? Sure, I see them all the time. This message is intended only for the use of the person(s) listed above

Re: [SAtalk] testing/installation error

2003-10-29 Thread Patrick Morris
Fred Marton wrote: Great! Thanks. Only now, when I try to run spamd, I get: Could not create INET socket: Cannot assign requested address IO::Socket::INET: Cannot assign requested address Either it's already running, or something else is running on the port spamd wants. This message is i

Re: [SAtalk] Broken Rule

2003-10-29 Thread Patrick Morris
Tobin wrote: Hello, I was wondering if anyone could help me fix a broken rule. Im getting a error "Failed to compile body spamassassin tests, skipping: (syntax error at /ect/mail/spamassassin/local.cf, rule Porn, line 1, near "/) Debugging a custom rule would be a lot easier if you showed us

Re: [SAtalk] Need help with configuration....

2003-10-29 Thread Patrick Morris
Darryl Snover wrote: I've done the patch, and also re-installed everything, checking my steps carefully, watching for errors. I can now run the 'spamassassin --lint' without errors, and things like 'spamassassin -V' return as expected. However, still no success on actually running an email or

[SAtalk] Re: Re: All pdf attachments are defanged

2003-10-29 Thread Patrick Beard
e with the -s solved it. Thanks Martin -- Patrick --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help us help

Re: [SAtalk] Need help with configuration....

2003-10-28 Thread Patrick Morris
Darryl Snover wrote: I've just re-made spamassassin, and now, running the spamassassin --lint results in the error: razor2 check skipped: No such file or directory Inescure dependency in connect while running with -T switch at /System/Library/Perl/5.8.1/darwin-thread-multi-2level/IO/Socket.pm

Re: [SAtalk] Auto-Learn

2003-10-28 Thread Patrick Morris
Then it's probably functioning correctly. "autolearn=no" means *that* message wasn't autolearned. Bill Polhemus wrote: How can I know for sure if Auto-Learn is functioning correctly? It does seem to be working for SOME messages but the headers in many of them say: X-Spam-Status: … autolearn=n

[SAtalk] Re: Re: All pdf attachments are defanged

2003-10-28 Thread Patrick Beard
(Sorry Patrick - I think you'll get this twice) > How are you passing mail to SpamAssassin? > I'm using Exim 3.36 as a relay in our DMZ, so I configured Exim with the following transport and router; TRANSPORT: spamcheck: driver = pipe command = spamc | exim -oMr

Re: [SAtalk] Re: All pdf attachments are defanged

2003-10-28 Thread Patrick Morris
Patrick Beard wrote: After a few more tests it seems that it is nothing to do with pdf attachments. Emails with a total attachment of less than 200k come through fine. Emails greater than 200k are corrupted. The fact that spamassassin is not logging anything in debug would suggest its having real

[SAtalk] Re: All pdf attachments are defanged

2003-10-28 Thread Patrick Beard
ug would suggest its having real problems. With spamassassin disabled, mail greater than 200k is just fine. Any Ideas? -- Patrick --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more product

[SAtalk] All pdf attachments are defanged

2003-10-28 Thread Patrick Beard
f these two emails were tagged as spam (which is correct). I have tried setting report_safe to zero but no change. Any ideas anyone? -- Patrick --- This SF.net email is sponsored by: The SF.net Donation Program. Do you like what SourceForge.ne

Re: [SAtalk] Synchronising SA on different servers

2003-10-27 Thread Patrick Morris
Johann Spies wrote: +*1ADBMt-00024Y-00*obt1AWUAynY* X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on maties1.sun.ac.za X-Spam-DCC: : X-Spam-Status: No, hits=6.8 required=8.0 tests=BAYES_90,NO_REAL_NAME, RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_SORBS autolearn=no version=2.60

Re: [SAtalk] How do I ensure that SpamAssassin is auto-learning both ham and s pam?

2003-10-25 Thread Patrick Morris
Tony White wrote: The subject says it all. I know the defaults on this, and have not changed them. I'm fairly certain that SA is autolearning spam -- because of the growth of the bayes_seen and bayes_toks databases. But I'm not sure about ham at all. Currently, I'm not sending outgoing mai

Re: [SAtalk] Re: [OT] What is next step?

2003-10-25 Thread Patrick Morris
AltGrendel wrote: I agree with that. I see addresses at my client that haven't existed in 5+ years. No one should kid themselves that spam lists are cleaned or that they learn from being blocked at the firewall. According to my most recent spam statistics, two out of the top three spam recipie

Re: [SAtalk] Procmail help PLEASE - really nobody knows ?

2003-10-25 Thread Patrick Morris
Peter Rosa wrote: Hello list's friends. I'm sorry for writting same message third time, but please be patient with me - I have about 200 spam messages a day so I REALLY need to block them. You'd probably have more luck un a procmail list, since that's where your problem really lies. That sai

Re: [SAtalk] [RD] Domain has digits - test rules

2003-10-25 Thread Patrick Morris
You're going to get a *lot* of meaningless hits on some of these -- any mail from level3.net, for example. They'd score a hit on your rules, and they're a pretty decent-sized ISP with a *lot* of legit servers (including a few of mine). You'd also get automatic hits for sending mails from serve

Re: [SAtalk] yahoo redirect

2003-10-25 Thread Patrick Morris
Unless I'm reading this regex incorrectly: /^https?\:\/\/rd\.yahoo\.com\/(?:[0-9]{4,}|partner\b|dir\b)/i it's pretty specific about looking for "http[s]://rd.yahoo.com". Colin A. Bartlett wrote: Can anyone hazard a guess as to why a message with an image and several links in this fashion did no

Re: [SAtalk] Building SA 2.60, errors

2003-10-24 Thread Patrick Morris
Hugh Caley wrote: I'm trying to build spamassassin 2.60 as a non-root user on my ISP's mail server. RedHat 7.3, perl version 5.004_04. I'm not sure where to go from here. I'm getting the following errors: That's a really ancient version of Perl. I'm not sure you'll be able to make it work.

Re: [SAtalk] Message being marked as spam with less score

2003-10-23 Thread Patrick Morris
Guessing from the incomplete stuff you posted, it appears you're running SA through another package -- amavisd, maybe. Check there -- whatever package you're using probably has a lower spam threshold set than the one you've set in SpamAssassin. ---

Re: [SAtalk] Re: Swap Space

2003-10-21 Thread Patrick Morris
Kris Deugau wrote: I found that even this wasn't lightweight enough on the filter server I'm adminning, so I wrote a microprogram to use the load average instead. Ideally, this should be hacked into sendmail itself in some way; I'm not going there myself. I *might* poke it into procmail if I ge

Re: [SAtalk] sa-learn ? postfix & SA protecting Exchange server

2003-10-21 Thread Patrick Morris
Mike Schrauder wrote: I get: debug: tokenize: header tokens for X-MimeOLE = "Produced By Microsoft Exchange V6.0.5762.3" Can anyone tell me if this is screwing up the reclassification of these msgs as spam? Do I have to strip out all headers that were added after the spam got past the postfix bo

Re: [SAtalk] custom rules >> local.cf

2003-10-21 Thread Patrick Morris
Thomas Kinghorn wrote: Hi List. Just a quick question. Do all custom rules have to be added to the /etc/mail/spamassassin/local.cf file OR can a seperate .cf file be placed in the spamassassin directory? Either will probably work, but it depends a bit on how you call SpamAssassin. Generally

Re: [SAtalk] Spamd relay to external server

2003-10-21 Thread Patrick Morris
[EMAIL PROTECTED] wrote: Is it possible to send the mail elaborated from spamd to another external server. I use smtproutes in order to select the relay with AntiVirus and/or AntiSpamming. domain1.com:localhost:2525#antivirus domain2.com:localhost:783 #antispamming ===

Re: [SAtalk] Scoring of 5.0 means spam. ist possible to drop mails with a scoring of i.e. 15?

2003-10-21 Thread Patrick Morris
Vittorio Muth wrote: I've read in the FAQ, that spamassassin does not drop mails. OK. Is there anyone who got it, to configure spamassassin like that:? As you read in the FAQ, SpamAssassin doesn't drop e-mails. Warnings that deleting mail SpamAssassin marks as spam aside, it's impossible to sa

Re: [SAtalk] Check whitelist

2003-10-19 Thread Patrick Morris
The permissions most likely aren't OK. Are you running the "check_whitelist" command as root? If not, you probably have no access to the /root directory. Jim Knuth wrote: Hallo SA-List, I wont use the tool "check_whitelist". When I use the command: ./check_whitelist | grep [EMAIL PROTECTED

Re: [SAtalk] "Insecure dependency in sysopen"

2003-10-18 Thread Patrick Morris
Bill Polhemus wrote: I realize this is a Perl problem, but can anyone help me diagnose this? I know next to NOTHING about Perl. The following is an error message I get when attempting to run SA from an email alias under Sendmail: - Transcript of session follows - Insecure

Re: [SAtalk] FAKE_HELO_AOL

2003-10-17 Thread Patrick Morris
Bill Polhemus wrote: This one got through. Can we figure out how and why? With just the body of the message and no headers, probably not. That really not enough to work with. --- This SF.net email sponsored by: Enterprise Linux Forum Conf

Re: [SAtalk] slow list

2003-10-17 Thread Patrick Morris
Welcome to SourceForge... Happens all the time with their lists. Colin A. Bartlett wrote: Moderately Off Topic: Does anyone else have trouble getting their messages on the list in a timely fashion? It seems when I reply to the list it takes 15 to 45 minutes for my message to appear. By the time

Re: [SAtalk] adding SPAM hits score to headers

2003-10-17 Thread Patrick Morris
Yevgeniy Miretskiy wrote: On [10/17/03 09:54], Colin A. Bartlett wrote: Diego Puppin Sent: Friday, October 17, 2003 8:55 AM is it possible to add the spamassassin "hits" score to the spam mails, so that I can sort my spam box and find the "spammest" emails? Yep, it's in the Docs at

Re: [SAtalk] New Box

2003-10-17 Thread Patrick Morris
Everything in /etc/mail/spamassassin, and all the files from wherever your Bayes stuff is stored. I'll admit I'm a bit fuzzy on how to pull off the AWL transfer -- maybe someone else could pipe in on that. This is, of course, assuming you've installed SA on the new box, and weren't planning on

Re: [SAtalk] New Box

2003-10-17 Thread Patrick Morris
Assuming you've got all the Perl modules installed on the new box, and the same version of the Berkeley DB libs, a direct copy should work fine. Mike Carlson wrote: After a hugely successful test of spamassassin, I now need to move it to a bigger badder production box. Can I just copy file from

Re: [SAtalk] New User question

2003-10-16 Thread Patrick Morris
How are you calling SpamAssassin? If you're running it via some sort of helper app like Amavis or MIMEdefang, it may be stripping the headers normally added by SpamAssassin. Michael Balamuth wrote: Further info. Upon reviewing the Mail::SpamAssassin::Conf documentation, I noticed that one hea

Re: [SAtalk] Failed to parse line in SpamAssassin configuration

2003-10-15 Thread Patrick Morris
Arlo Gilbert wrote: Spamassassin 2.6, perl 5.8 on a redhat 9 machine called from perl i get the following debug messages even though it appears to read those two settings as sa does abide by them. debug: Failed to parse line in SpamAssassin configuration, skipping: report_header 1 debug: Faile

Re: [SAtalk] Fan Mail!!! LOL We shut one down!

2003-10-14 Thread Patrick Morris
I got one of these, too, last night, from a machine at a Korean ISP, and I've been trying to figure what I did. Somehow I feel less special now. :) Chris Santerre wrote: Did anyone else get a nasty email this morning? I did! This weekend ROCKED for my SA config. Jennifer, if you were here I'd k

Re: [SAtalk] different version number ?

2003-10-10 Thread Patrick Morris
You probably have two versions installed on that system. Remove the old one. Petre Bandac wrote: [EMAIL PROTECTED]:~/kits/Mail-SpamAssassin-2.60# spamassassin -V SpamAssassin version 2.43 if I use spamd/spamc, I get in the headers sa-version=2.60, but if I user spamassassin I get version=2.43

Re: [SAtalk] using sa-learn...

2003-10-10 Thread Patrick Morris
Jeff Lasman wrote: If I should, then I'll probably uses messages sent to this list, as I know there's no spam hidden in them; I can't guarantee that about any of my other folders. Is that a reasonable assumption? Should I try to put through the same number of messages? Or doesn't it matter?

Re: [SAtalk] SA newbie question...

2003-10-09 Thread Patrick Morris
Brad wrote: body MOON /moon/i score MOON5.0 I'm not positive, but I think the "describe" line is also necessary. This message is intended only for the use of the person(s) listed above as the intended recipient(s), and may contain information that is PRIVILEGED and C

Re: [SAtalk] SA 2.60 *VERY* slow.

2003-10-09 Thread Patrick Morris
Mike Van Pelt wrote: It's still having spells of rejecting connections as "it's busy" when CPU is less than 50%. (This is on a Solaris box.) Are you running MIMEDefang with the multpilexor? If so, have you tried raising the maximum number of allowed connections? ---

Re: [SAtalk] Razor2.patch croaks under Solaris 8

2003-10-08 Thread Patrick Morris
[EMAIL PROTECTED] wrote: Under Solaris 8, applying the Razor2.patch to fix the taint problem Dies horribly: Are you using Solaris's "patch," or the GNU one? If you're not using GNU's, you might give it a shot. smime.p7s Description: S/MIME Cryptographic Signature This message is intended

Re: [SAtalk] Spamd log

2003-10-08 Thread Patrick Morris
[EMAIL PROTECTED] wrote: Is it possible to write in log the IP of the source server and not 127.0.0.1? I use qmail->qmail-scanner ->spamd (spamassassin) Thanks Sep 8 07:03:47 email spamd[7832]: connection from localhost [127.0.0.1] at port 40938 Sep 8 07:03:47 email spamd[18364]: chec

Re: [SAtalk] bayes over NFS

2003-10-08 Thread Patrick Morris
Daniel Quinlan wrote: In theory, it's safe. In practice, it's slow and ... ? In practice, in my case, it's not slow at all -- But NetApps seem to have a pretty decent NFS implementation. Access to a lot of stuff (though I haven't clocked Bayes specifically) is often faster than local disk

Re: [SAtalk] bayes over NFS

2003-10-07 Thread Patrick Morris
Dan Wilder wrote: On Tue, Oct 07, 2003 at 11:54:07AM -0700, Patrick Morris wrote: I thought i read somewhere that somebody was sharing bayes over NFS with a netapp filer with no > probs. I'm doing it -- no problems to report. With things writing to the same db from d

Re: [SAtalk] bayes over NFS

2003-10-07 Thread Patrick Morris
> I thought i read somewhere that somebody was sharing bayes over NFS with a netapp filer with no > probs. I'm doing it -- no problems to report. --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf

Re: [SAtalk] Questions about Spam Assassin 2.60

2003-10-05 Thread Patrick Morris
Gwen Morse wrote: How do you run SpamAssassin. I'll bet you a dollar SA's not what's saying it's possible spam. You're probably running it through a helper app that's interpreting SA's output incorrectly. I'm running it through spamc, as my initial message indicated. Please Paypal that do

Re: [SAtalk] Upgrading from 2.53 to 2.60

2003-10-04 Thread Patrick Morris
Yusuf Goolamabbas wrote: Hi, I want to upgrade from SA 2.53 to 2.60. It's very likely that some rules may have been added/deleted. I have modified some scores in my local.cf What happens if rules corresponding to the modified scores no longer exist in SA 2.60 ? Nothing will happen... You'll ju

Re: [SAtalk] Questions about Spam Assassin 2.60

2003-10-04 Thread Patrick Morris
Gwen Morse wrote: 2) below is the result of my test of sample-nonspam.txt. I find it confusing because although it scores 0.0/5.0 (Which I assume reads a 0 total score when 5 is the default for it to be spam), the message *says* it's been identified as possible incoming spam. Is that normal for _a

Re: [SAtalk] Re: Pyzor in 2.60?

2003-10-04 Thread Patrick Morris
Scott Rothgaber wrote: debug: executable for pyzor was found at /usr/local/bin/pyzor debug: Pyzor is available: /usr/local/bin/pyzor debug: entering helper-app run mode debug: Pyzor: got response: /usr/local/bin/pyzor: not found s2:[/etc/mail/spamassassin] > ls -l /usr/local/bin/pyzor -rwx--x--x

Re: [SAtalk] incorrect info in X-Spam-Level header

2003-10-04 Thread Patrick Morris
Looks like you're probably scanning the message twice. Jay Pfaffman wrote: X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on learn.coe.utk.edu X-Spam-Level: X-Spam-Status: No, hits=4.0 required=5.0 tests=CLICK_BELOW,FRONTPAGE, HTML_MESSAGE,SAVE_ON_INSURANCE autolearn=no

Re: [SAtalk] Does Spamassassin support Maildir?

2003-10-03 Thread Patrick Morris
Robert Nicholson wrote: when running with qmail on a plex box with virtual users where will spamassassin look for the "users" spamassassin configuration? ie. what normally is ~/.spamassassin It won't. If the user has no home directory, it won't use user prefs (since there's no place to put the

Re: [SAtalk] sa-learn question?

2003-10-02 Thread Patrick Morris
Sure: sa-learn --spam --dir /var/spool/mailbox/224/sa_spam/in/*orourke.ca Dan Tappin wrote: I have created spam and ham accounts to utilize sa-learn. I am using Tenon's Post.Office on OS X as a mail server. I was running sa-learn like this: sa-learn --spam --dir /var/spool/mailbox/224/sa_spam/

Re: [SAtalk] sa-learn question?

2003-10-02 Thread Patrick Morris
Oops... drop the --dir parameter (assuming your copy of SA is updated -- the --dir and --file parameters are deprecated). Patrick Morris wrote: Sure: sa-learn --spam --dir /var/spool/mailbox/224/sa_spam/in/*orourke.ca Dan Tappin wrote: I have created spam and ham accounts to utilize sa

Re: [SAtalk] required value met, but spam not flagged

2003-10-01 Thread Patrick Morris
The 8.0 value you're seeing for the score is a rounded value, and is probably slightly below 8. John Schneider wrote: I have been working too much lately, so my eyes might be a little crossed But, the following message seems to have met the required value for spam, but was not flagged: [s

Re: [SAtalk] sendmail question

2003-09-30 Thread Patrick Morris
Check out MIMEDefang, amavisd, spamass-milter, or one of the other packages that can tie SpamAssassin to Sendmail. Vivek Kumar wrote: Hi there, I am using sendmail and wat ot install spamassassin. The way sendmail is configured is all the incoming mails comes to sendmail(on Linux box) and then

Re: [SAtalk] WEIRD Razor2 Error

2003-09-30 Thread Patrick Morris
Check out the README and install files, or look at the list archives for messages about Razor. you'll need to patch it. Scott Rothgaber wrote: [2.60 on FreeBSD 5.0] Watching the mail log go by and I noticed this... razor2 check skipped: Bad file descriptor Insecure dependency in open while r

Re: [SAtalk] BAYES broken from 2.55 to 2.6

2003-09-30 Thread Patrick Morris
Justin Mason wrote: Rather disappointed in how many things are broken in 2.6 , like installation, working with mimedefang, bayes, and who knows what next. What's wrong with MIMEDefang? I'll admit I'm a bit curious about this myself. We run SA on four servers with MIMEDefang here and didn

Re: [SAtalk] BAYES broken from 2.55 to 2.6

2003-09-29 Thread Patrick Morris
That's why reading the README and INSTALL files is always a good idea -- you'll probably run into other problems (use Razor?) if you don't. Danny Aldham wrote: I have recently upgraded spamassassin from 2.55 to 2.6 . It looks like a new method of creating the BAYES database is used, that require

Re: [SAtalk] Razor-users-2.36 make install error: Can't locate loadable object for module Digest::SHA1

2003-09-29 Thread Patrick Morris
You might try "force install Digest::SHA1." It looks like *parts* of it are up to date, but not all of it. John Schneider wrote: Can I do that in CPAN or do I have to do it outside to correct the problem? When I do a "install Digest::MD5" and "install Digest::SHA1" in CPAN currently it tells

Re: [SAtalk] No tests run at all??

2003-09-29 Thread Patrick Morris
Odhiambo Washington wrote: Sometimes I see an e-mail and looking at the full headers I see: X-Spam-Checker-Version: SpamAssassin 2.60 (1.212-2003-09-23-exp) on ns2.wananchi.com X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=no version=2.60 This is an e-mail from "out there",

Re: [SAtalk] Sendmail error help...

2003-09-25 Thread Patrick Morris
Usually, this error means something connected to port 25 of your server, then disconnected before issuing any commands. Do you have a system monitoring the SMTP port on that server? I get these once a minute from my monitoring system, that's just checking to make sure the daemon's alive. Matt

Re: [SAtalk] Scoring on the fly vs. Scoring manually

2003-09-24 Thread Patrick Morris
Since you didn't post the e-mail, what rules got hit (either time), or how you've got SA set up (network tests enabled? DCC? Razor?), it's impossible to say why you got two different scores -- but it's not too uncommon for the same message tested at different times to get different scores, fo

Re: [SAtalk] Why is auto-learn set to no?

2003-09-23 Thread Patrick Morris
Robert Nicholson wrote: > RE: > > X-Spam-Status: > Yes, hits=10.7 required=0.6 tests=DATE_IN_PAST_03_06, > DATE_SPAMWARE_Y2K,FORGED_MUA_OUTLOOK,FORGED_OUTLOOK_HTML,HTML_60_70, > HTML_FONTCOLOR_BLUE,HTML_FONTCOLOR_GREEN,HTML_FONTCOLOR_RED, > HTML_MESSAGE,MIME_HTML_ONLY,MIME_HTML_ONLY_MULTI,MISSING_

Re: [SAtalk] Autodeleting spam based on score without deleting all spam

2003-09-21 Thread Patrick Morris
A "milter" is a filter program that works exclusively with Sendmail. A quick Google search found it here: http://savannah.nongnu.org/projects/spamass-milt Milters don't work with Qmail. Tomáš Macek wrote: Can you tell me, where can I get the "spamass-milter" program?? Is it a script? Does it w

Re: [SAtalk] Spamassassin algorithm question.

2003-09-20 Thread Patrick Morris
Mark London wrote: Does spamassassin simply total up the scores of all the tests which are found to be valid for a message, or does it increase the score based on whether a combination of tests exist? Sometimes. SpamAssassin has both additive rules (each hit is worth a set number of points)

Re: [SAtalk] Spam slipped through, why no Bayes?

2003-09-18 Thread Patrick Morris
1. Did you enable rules in user prefs in the system sa config? The default settings don't allow rules to be defined in user prefs (See man Perl::SpamAssassin::Conf). 2. The Bayes rules that score 0 (most of the mid-range of Bayes checks) don't show up in the report, but that doesn't mean Bayes ch

Re: [SAtalk] Using SA (via hosted unix account) on Outlook 2002/XP with IMAP

2003-09-17 Thread Patrick Morris
Adam Lasnik wrote: 1) I have mails over a threshold of 5 thrown into a "Spam" IMAP folder by SA automatically. That works fine. But I wanted to use Outlook's "in header" rule to move items scoring 2 or 3 or 4 stars into a "Possibly spam" folder. Good luck using Outlook's filters on an IMAP fol

Re: [SAtalk] Help Unblacklisting RBL

2003-09-17 Thread Patrick Morris
Nope -- it's got nothing to do with SpamAssassin at all, so no amount of whitelisting it in SA will help you. You need to whitelist it in the software that's actually marking it as spam. Jennifer Wheeler wrote: what am i doing wrong here? I am trying to unblacklist an address getting tagged b

Re: [SAtalk] MILTER problem with sendmail/spamassassin/mimedefang

2003-09-15 Thread Patrick Morris
The site.config.m4 file looks OK -- are you sure you're using a copy of Sendmail built with those options? Maybe you've got more than one copy floating around on that system. McWhirter,Julia wrote: Having problems integrating spamassassin/mimedefang and sendmail on our external SMTP server. Us

Re: [SAtalk] osirusoft gone mad?

2003-09-03 Thread Patrick Morris
SA reads any config files in /etc/mail/spamassassin automatically. Ralf G. R. Bergs wrote: Martin Radford schrieb: [...] 4) I am new to spamassassin. What parameter should I use in my configuration to cause spamassassin to stop using osirusoft open relay? See the news article at http://news.s

Re: [SAtalk] FW: Best Child Pornography Site

2003-08-27 Thread Patrick Morris
That has got to be the single funniest piece of spam I've seen in a long time. :) jherschel wrote: -Original Message- *From:* Tyler Madison [mailto:[EMAIL PROTECTED] *Sent:* Wednesday, August 27, 2003 2:05 PM *To:* [EMAIL PROTECTED] *Subject:* Best Child Pornography Site Welcome to th

[SAtalk] SoBig Virus

2003-08-22 Thread Patrick Bores
Hello, I'd like to add spamassassin rules to match certain attachment filenames, but I can't seem to get it right. I'm trying things like: rawbody SOBIG_VIRUS /filename="?application.pif|document_all.pif|thank_you.pif"?/ Any ideas on how to match attac

Re: [SAtalk] auto_report_threshold

2003-08-21 Thread Patrick Morris
It's no longer an option in recent versions. It used to be the score at which a message would automatically be reported as spam to DCC, Razor, et al. For various reasons (all of them good ones, IMHO), it was removed. Louis LeBlanc wrote Most of this I understand, and I know some of this has c

Re: [SAtalk] Configure to delete messages

2003-08-20 Thread Patrick Morris
It depends how you have SA set up, and what calls it. SpamAssassin will not ever delete mails -- it just tags them. Daniel Kaliel wrote: I have been trying to find documentation on how to do this, but have not found any. I spoke with the partnership of my company on this and how it is safer

Re: [SAtalk] What is the point of this spam?

2003-08-20 Thread Patrick Morris
Maybe the big image with a Viagra ad in the middle of it has something to do with it. :) Jim wrote: I've been getting these once in a while, they just seem to have random words in them.. no sales pitch that I can see. And they are always different sets of words. I made a few tiny edits to obfus

Re: [SAtalk] `HTML::Parser' not found.

2003-08-19 Thread Patrick Morris
What are the permissions on the file (and the directories it's in)? Maybe SA can't read it. Luis Muñiz wrote: Hi there! I've just setup (not system-wide[1]) Mail-SpamAssassin-2.55. My problem is that every time a mail is received, procmail' log shows the following: Can't locate HTML

Re: [SAtalk] Individual user SA processing w/ Qmail?

2003-08-18 Thread Patrick Morris
You can use the whitelist_to, more_spam_to, and all_spam_to configuration options, but it won't cause SpamAssassin not to process the mail, just not to tag it as spam (to varying degrees). Another downside is that, if a mail comes in to a whitelisted user and a non-whitelisted user, it'll most

Re: [SAtalk] Blacklist To problem

2003-08-18 Thread Patrick Morris
This option no longer exists. I used to use it myself, but after it was gone I realized it was a lot more efficient to stop them before they get to SA (in my case, by having Sendmail reject mail to invalid accounts). Walter S. Arnold wrote: This is quite different from blacklist_from as I unde

  1   2   >