Re: [SAtalk] mysql user-prefs script?

2003-09-18 Thread rODbegbie
. - -- :: rODbegbie :: http://www.groovymother.com/ :: Sorry, son! I didn't know you, Jay Leno and a monkey were bathing a clown. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.3-nr1 (Windows XP) iD8DBQE/akIvN/YdXIyAw18RAp6tAJ9pOQCPdyk24niFSk5M55JNML5kYQCfZZC0 plyiBcXNdR5BjbQJqNj09xE= =hMLE

Re: [SAtalk] Naughty test names

2003-06-28 Thread rODbegbie
Personally, I think BANG_OPRAH is the most disturbing test name. What a horrible thought. rOD. -- :: rODbegbie :: http://www.groovymother.com/ :: So what do you do? Oh yeah, I wait tables too. No, I haven't heard your band, cause you guys are pretty new

Re: [SAtalk] Why is this lists Reply-To: Header set to the wrong address?

2003-06-09 Thread rODbegbie
Ben Johansen wrote: So Why is the reply-to set to this Reply-To: [EMAIL PROTECTED] It isn't. HTH. HAND. rOD. -- :: rODbegbie :: http://www.groovymother.com/ :: So what do you do? Oh yeah, I wait tables too. No, I haven't heard your band, cause you guys are pretty new

Re: [SAtalk] I hate Mandatory Mail Filtering!!!! - speakeasy.net bites the dust. (was I hate SpamAsssassin)

2003-06-09 Thread rODbegbie
. rOD. -- :: rODbegbie :: http://www.groovymother.com/ :: I think I'm in love. Probably just hungry. --- This SF.net email is sponsored by: Etnus, makers of TotalView, The best thread debugger on the planet. Designed with thread debugging

Re: [SAtalk] spamd frozen?

2003-01-09 Thread rODbegbie
Rob Bos wrote: This morning I woke up with a system load around thirty Something similarly wacky happened here today. My mailserver was freaking out: load at about 30 and suchlike. Very interesting. (qmail - maildrop - spamc - spamd, running 2.43 release) rOD. -- Fast! Fast! Faster!

Re: [SAtalk] spamd frozen?

2003-01-09 Thread rODbegbie
rODbegbie wrote: Something similarly wacky happened here today. My mailserver was freaking out: load at about 30 and suchlike. Oh, and the base of my machine is RedHat 7.3 (although there's not a great deal still on it that came from those RPMs!) rOD. -- He gave his life for tourism

Re: [SAtalk] white and blacklist .cf files

2002-12-11 Thread rODbegbie
Matthew Boeckman wrote: I am running spamassassin sitewide for my company, using spamd/spamc and sendmail. I think I have misunderstood something from the documentation: spamd compiles and stores the system-wide rules on start-up to speed up processing. If you edit the local.cf file, you

Re: [SAtalk] Interesting Nigerian scam article

2002-10-24 Thread rODbegbie
Matthew Cline wrote: Not in my inbox. And 1% of recipients reply? How sad. Yet another blow to my faith in humanity... Have you tried replying to them? It's *fun*! Try asking them complex questions, and watch them answer in incredibly tortured English which must take them hours to write.

Re: [SAtalk] RedHat 8.0 - Sendmail

2002-10-23 Thread rODbegbie
Greg Jamison wrote: The spamassassin service is running, but spam of all kinds is still pouring through. Any ideas on what I need to do to get it working? Any input is greatly appreciated. Thanks!! From the RPM notes: To enable spamassassin, if you are receiving mail locally, simply add this

[SAtalk] cloudmark to start charging for razor lookups?

2002-10-10 Thread rODbegbie
http://sourceforge.net/mailarchive/forum.php?thread_id=1166564forum_id=4258 Looks like Razor2 should be given a 0 score in the same manner as the SpamCop blacklist. rOD. -- I'm as mad as hell and I'm not going to take this anymore! Doing the blogging thang again at

[SAtalk] Why isn't CPAN mentioned on SA website? (was: Newbie help-RH7.2+Postfix)

2002-10-03 Thread rODbegbie
Steve Thomas wrote: The easiest way to install SA would be to run: perl -MCPAN -e 'install Mail::SpamAssassin' and answer yes to any questions about following dependencies. In my experience, CPAN certainly is the easiest way to install and/or upgrade SA. SHouldn't we recommend its usage on

Re: [SAtalk] Graphics-only spam?

2002-07-24 Thread rODbegbie
Hess, Mtodd, /mth wrote: I hate to bring this up, but I see more and more spams that contain very little, if any, text. Instead, most of the spam text is in a graphic image. How will we be able to detect those as spam? OCR? There are still ways to analyse it. 1) Analyse the headers. Are

Re: [SAtalk] Re: [SAdev] Scoring Yahoo Ads

2002-07-24 Thread rODbegbie
Justin Mason wrote: As a result I'm now collecting a corpus of nonspam SCEs, using a few common FP'ing SCE sources. BTW if anyone knows of more FP'ing SCE sources, I'd appreciate if they posted them; the more the better. The e-mail club at www.newbury.com is a good one -- It's a weekly list

Re: [SAtalk] Microsoft developer newsletter tagged as spam

2002-07-23 Thread rODbegbie
Bart Schaefer wrote: Just to demonstrate that even a score of 10 or more doesn't guarantee that something is spam, Oh, absolutely. Have a look at the attached email, which scores over 15 points with recent CVS. SPAM: Start SpamAssassin results SPAM: 15.9 hits, 5 required; SPAM: * 1.5

Re: [SAtalk] the non spam sample gets 8.5 hits

2002-07-23 Thread rODbegbie
John Covici wrote: I am using spamassassin 2.40 and I am getting 8.6 hits for the non spam sample -- should I change the threshold or what? Teehee. First up, if you're new to SA, you really should use a release version, since the code is tested and the scores settled upon by the GA engine.

[SAtalk] Re: [SAdev] Scoring Yahoo Ads

2002-07-23 Thread rODbegbie
Matt Kettler wrote: Hmm, I think that Marc, being one of the most active and prolific posters to this list Prolific != Useful. certainly understands SA much better than most. Certainly better than I do, and I suspect better than you do rOD. Yeah. What do I know? Only been contributing to

Re: [SAtalk] Rules Question

2002-07-23 Thread rODbegbie
Kevin Gagel wrote: Based on the following header info, is my rule built correctly? Received: from (127.0.0.1) by MAIL3041.flowgo.com (PowerMTA(TM) v1.5); Mon, 22 Jul 2002 17:19:56 -0700 (envelope-from [EMAIL PROTECTED]) I want to make a rule that will tag it bassed on the

Re: [SAtalk] Is this an attempt to throw off SA?

2002-07-22 Thread rODbegbie
Darian Rafie wrote: I've noticed two recent spam emails, both from mortgage lenders, with some nonsense like this attached at the end. Is this an attempt to throw SA off the trail? Could be -- Decrease the chance of hitting a spam phrase score by padding out the message? Could also be

[SAtalk] DCC is not available

2002-07-11 Thread rODbegbie
DCC was working fine on my system. I installed the latest CVS, and now I see this in my maillog: Jul 11 12:02:49 blazing spamd[5952]: debug: DCC is not available: system failed Did the fix to stop the DCC not found messages cause SA to stop finding DCC? Anyone else? rOD. -- Sell to them the

Re: [SAtalk] Web Front End To Alter Individual Settings?

2002-07-10 Thread rODbegbie
Jim Hale wrote: I know that SquirrelMail has something that will do it, but I'm using the Horde Suite. Horde are working on just such a package, called sam. It's not released, but it is in their CVS repository. I grabbed a copy last week and had a wee bit of a poke, but didn't have much luck

[SAtalk] Re: [SAdev] spamassassin for windows

2002-06-26 Thread rODbegbie
Matt Sergeant wrote: Alternatively, yes, I'd use sourceforge. They're crap, but probably the best crap we have ;-) Or as the old Your Sinclair t-shirts used to say: It's CRAP! But in a funky, skillo sort of way rOD. -- Everybody's screwed up in their own special way! I'm Mr. Punchy!

Re: [SAtalk] Razor

2002-06-24 Thread rODbegbie
Theo Van Dinter wrote: As someone else stated, 2.3x doesn't support Razor2 yet (although patches are available via Bugzilla). SA doesn't look for the razor-* programs, it calls the modules directly. When you installed Razor2 it didn't get rid of the Razor1 modules, and they're named

Re: [SAtalk] Razor

2002-06-24 Thread rODbegbie
Lars Hansson wrote: Eh, shouting down? Matt Perry's message is anything but constructive. I'd be pretty pissed off too if someone tried to tell me how to do my job and basicly accused me of being incompetent. *Releasing* a version of razor which fails to actually check spam

Re: [SAtalk] dcc_add_header and spamd.

2002-06-18 Thread rODbegbie
Deanna Phillips wrote: dcc_add_header 1 to my /etc/mail/spamassassin/local.cf and restart spamd, I'm not seeing the header. This setting does work when I put it into my ~/.spamassassin/user_prefs file and run spamassassin -t. It's working fine here when in my local.cf file. Try deleting

[SAtalk] Fw: [Razor-users] Announce: Vipul's Razor v2

2002-06-13 Thread rODbegbie
Off to do a build now. I'll report back on how it does with SA later. rOD. -- I think I'm in love. Probably just hungry. Doing the blogging thang again at http://www.groovymother.com/ - Original Message - From: Vipul Ved Prakash [EMAIL PROTECTED] To: [EMAIL PROTECTED] Cc: [EMAIL

Re: [SAtalk] Fw: [Razor-users] Announce: Vipul's Razor v2

2002-06-13 Thread rODbegbie
rODbegbie wrote: Off to do a build now. I'll report back on how it does with SA later. Initial signs are promising. Nothing seems broken in the SA integration. Coolio! rOD. -- You have the right to remain *fabulous* Doing the blogging thang again at http://www.groovymother.com

Re: [SAtalk] RE: Broken Bugzilla links? - RE: [SAdev] [Bug 436]

2002-06-12 Thread rODbegbie
Michael Moncur wrote: X-Spam-Status: No, hits=4.8 required=5.0 tests=FROM_MISSING,DATE_MISSING,MISSING _HEADERS,SUBJ_MISSING version=2.20 I should mention that this only started happening (to me) sometime yesterday when I installed the latest CVS, so if this is a spamassassin problem it's

Re: [SAtalk] MySQL/PHP Interface to SpamAssassin

2002-06-11 Thread rODbegbie
Jim Scott wrote: Any chance someone is willing to share some code to put together a nice web inteface for end users to configure personal settings for SpamAssassin on Redhat 7.x with MySQL and PHP or perhaps even just a perl script? The lovely chaps at Horde (www.horde.org) are working on

Re: [SAtalk] Re: scoring question

2002-06-10 Thread rODbegbie
Jeremy Zawodny wrote: Right, his rule would only trigger if SA had already decided it was SPAM. So it's not *that* bad. I wonder how often you'd see PORN rules triggered in non-porn spam. That's the only problem, right? Quite often, I'm afraid.PORN_* matches 753/4129 of my nonspam

Re: [SAtalk] Freeze for 2.30, call for nonspam.log submissions

2002-06-10 Thread rODbegbie
On Sun, 9 Jun 2002, Craig R. Hughes said: Anyone have any thoughts for a cool release name for 2.30? Chinese Dentist? You know... the old joke: Q. What time does a chinaman go to the dentist? A. Tooth-hurty. rOD. (non-PC) -- Before Stonehenge, there was Woodhenge and Strawhenge.

[SAtalk] Still running as root

2002-06-10 Thread rODbegbie
Just tried upgrading my system to SA 2.30pre, but spamd isn't behaving well. All of a sudden, I'm getting the following message in my maillog during startup: Jun 10 14:23:50 blazing spamd[981]: Use of uninitialized value in scalar chomp at

Re: [SAtalk] Re: scoring question

2002-06-10 Thread rODbegbie
Vivek Khera wrote: But how many of those were scoring 5 or more to be flagged as spam as well? [rod@blazing masses]$ cat nonspam-rODbegbie.log | grep ^Y | grep PORN | wc 197 788 40835 So, about 4% of my non-spam matches a PRON rule. rOD. -- Before Stonehenge, there was Woodhenge

Re: [SAtalk] Re: scoring question

2002-06-10 Thread rODbegbie
Vivek Khera wrote: r == rOD rODbegbie writes: r Vivek Khera wrote: But how many of those were scoring 5 or more to be flagged as spam as well? r [rod@blazing masses]$ cat nonspam-rODbegbie.log | grep ^Y | grep PORN | wc r 197 788 40835 r So, about 4% of my non-spam matches

Re: [SAtalk] Updating Rules

2002-06-06 Thread rODbegbie
Craig R Hughes wrote: It's now been quite a while since our last release, and so I'm going to do the 2.30 release imminently. I will post a separate thread message with the usual freeze request plus requests for nonspam.log submissions. Just a thought, but should we wait for the

Re: [SAtalk] Re: Spamassassin-talk digest, Vol 1 #456 - 14 msgs

2002-06-03 Thread rODbegbie
[EMAIL PROTECTED] wrote: = WECS.COM AUTOMATIC NOTICE = Teehee. Yet another example of why bouncing/devnulling mail tagged as spam is a bad idea :) bhoover -- you might want to consider whitelist_toing spamassassin-talk. rOD. -- I'll hide somewhere, and you'll wear big

Re: [SAtalk] OutLook Express 3.14159

2002-05-30 Thread rODbegbie
Patrice Fournier wrote: Has anyone ever seen a legitimate email with an X-Mailer: header of OutLook Express 3.14159? I'm also seeing this here. I'd agree with the rule being added. rOD. -- I'm in love with rock and roll and I'll be out all night Doing the blogging thang again at

Re: [SAtalk] large numbers of tiny scores = SPAM!

2002-05-29 Thread rODbegbie
Rob Winters wrote: How about a bonus for cumulative effect? Why not do a second-level analysis after scoring; something like: 3 positive score matches - add 1.0 4 positive score matches - add 2.0 5 positive score matches - add 4.0 6 positive score matches - add 8.0 This reminds me...

Re: [SAtalk] Searchable archive

2002-05-19 Thread rODbegbie
Matt Thoene wrote: Is there a searchable spamassassin mail list archive somewhere? I'd search the archive for the answer but... There's a search box on the left-hand-side of https://sourceforge.net/mailarchive/forum.php?forum_id=1981 rOD. -- Sorry, son! I didn't know you, Jay Leno and a

Re: [SAtalk] I viewed your web site-http://www.resuba.com/bucks/index.html (fwd)

2002-05-14 Thread rODbegbie
Doug Crompton [EMAIL PROTECTED] wrote: What is this nonsense? They added headers to track abuse? This is abuse! X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Original Domain - crompton.com Nah. My guess is that since SpamCop

Re: [SAtalk] Exchanger^H^H^H^H^H^H^H^H^HSpamAssassin

2002-05-13 Thread rODbegbie
Jose Celestino [EMAIL PROTECTED] wrote: the idea behind spam assassin is indeed great, the problem is that after about 3 minutes the server load goes to: mail:/var/log/qmail# uptime 18:15:06 up 6 days, 21:40, 3 users, load average: 15.22, 8.96, 7.77 How are you running it? spamc/spamd

[SAtalk] Fw: User has been terminated

2002-05-06 Thread rODbegbie
Title: User has been terminated Thought some of you might be happy to see this... rOD. --I think I'm in love.Probably just hungry. Doing the blogging thang again at http://www.groovymother.com/ - Original Message - From: abuse Sent: Monday, May 06, 2002 3:19 PM Subject: User

[SAtalk] Re: [SAdev] Re: CVS: spamassassin/lib/Mail/SpamAssassinPerMsgStatus.pm,1.99,1.100

2002-04-30 Thread rODbegbie
Sidney Markowitz [EMAIL PROTECTED] wrote: So for the purpose of stripping out comments in HTML you would want to match from a leading '!--' to a trailing '--' and you would specifically not want to match other legal SGML comment syntax that would not be recognized by most browsers. But, if

Re: [SAtalk] Add NJABL DNSBL to SA

2002-04-26 Thread rODbegbie
[EMAIL PROTECTED] wrote: I currently use SpamCop, OsiruSoft, and NJABL for RBL on my Postfix implementation. How can I add NJABL to SA? I have the following lines in my /etc/mail/spamassassin/local.cf file: header RCVD_IN_NJABLeval:check_rbl('relay', 'dnsbl.njabl.org') describe

Re: [SAtalk] What's an easy way to report the spam I get?

2002-04-25 Thread rODbegbie
Brian Kendig wrote: I have a free reporting account on SpamCop. I suppose I could put a line into my procmailrc which forwards all my spam to my SpamCop reporting address; then SpamCop will send me back a confirmation email for each spam thus reported. That's a little messy, though, since

Re: [SAtalk] Porn mail deleting for school

2002-04-17 Thread rODbegbie
Matt Sergeant [EMAIL PROTECTED] wrote: 99.9% of companies have the fact that they can read and monitor your email and web browsing and just about everything you do with your computer as part of your contract of employment. Which is why all my emailing, web-browsing and IMing goes through a

[SAtalk] the ironing is delicious

2002-03-29 Thread rODbegbie
Spotted at the bottom of a recent spam: TIRED OF HITTING THE DELETE KEY? New technology STOPS SPAMand harmful email viruses BEFORE they reach your computer...FACT: Now you CAN take back 100% control of your email! rOD. -- "Sorry, son!

Re: [SAtalk] Stupid Outlook (procmail) tricks revisited

2002-03-28 Thread rODbegbie
According to a discussion on the procmail list, using the X-message-flag header in this way depends on something that the server does, not just on using Outlook. E.g., there was mention of the message being marked as flagged by an IMAP server. Can you verify that X-message-flag should work

Re: [SAtalk] blacklist_to; reporting spam

2002-03-01 Thread rODbegbie
Quoting William R Ward [EMAIL PROTECTED]: There are whitelist_from and whitelist_to but blacklist_from is the only form for blacklist. I'd like to propose that blacklist_to would be a good idea. Is there a reason why this is not there? There is a sneaky work-around... If you are just

[SAtalk] Re: [Razor-users] Agent Terminated

2002-02-27 Thread rODbegbie
I have found that this issue only happens when Razor *does not* need to run a server discovery. If I remove .razor.lst, spamassassin starts up fine. As a temporary hack, I've added 'force_discovery' = 1 to the %options in the razor_lookup method in Mail/SpamAssassin/Dns.pm, because I'm only

Re: [SAtalk] Envelope from

2002-02-14 Thread rODbegbie
Yes, a header will contain a line that says: X-eGroups-Return: ... But where do I add such rule? In head_test? I see some Perl regex in there, but also several eval functions. Put it in your /etc/mail/spamassassin/local.cf. Something like: header YAHOOGROUPSX-eGroups-Return =~ /\S/

[SAtalk] Port 81 (contains pr0n spam)

2002-02-06 Thread rODbegbie
I'm receiving an increasing number of Spams for porn sites hosted by splitrock.net which are operating on port 81 (see URLs below). 1) Anyone else getting them? 2) Is anyone adverse to adding a rule to catch http://.*:81/ into SpamAssassin? 3) Shouldn't these be getting points for being fully

Re: [SAtalk] Port 81 (contains pr0n spam)

2002-02-06 Thread rODbegbie
Yeah, I'm not sure why, but the PORN_3 rule wants 3 naughty words on a single line before it'll trigger. Can anyone think of a reason why it shouldn't be just one occurrence? The problem is that some of the words in the list can be used in quite innocent contexts (Amateur, Teen and Webcam

[SAtalk] 5 5?

2002-01-27 Thread rODbegbie
Two questions: 1) Why did this mail not get marked as spam, despite getting 5.0 hits? 2) Why did it not register as HTML text with no plaintext? rOD. -- That's what you get for not hailing to the chimp From [EMAIL PROTECTED] Sun Jan 27 23:43:52 2002 Received: (qmail 16600 invoked from

Re: [SAtalk] HTTP/URL rules

2002-01-22 Thread rODbegbie
Perhaps something that looks for a % symbol between http://; and the next / (or whitespace). I'm no regex wiz, but would http://[\w\.-]*%[\w\.-]*/? do the job? rOD. -- To me, clowns aren't funny. In fact, they're kind of scary. I've wondered where this started and I think it goes back to