Re: confusion with autolearning

2004-03-02 Thread Alex van den Bogaerdt
On Tue, Mar 02, 2004 at 05:43:10PM -0500, Theo Van Dinter wrote: > Anyway, it should now, once an hour in theory, update the website and > the devel tarballs to the latest 3.0.0 code. Looking quite different indeed :) Minor issue: README and INSTALL cannot be found. Thanks for your help. chee

RE: 2 SA Processes running

2004-03-02 Thread Nick Fisher
> I'm running Mandrake 9.0, Kmail 3.0.3, SA 2.63. Question I have > is there is > always a SA process running as shown by Ksysguard. When mail comes in > another SA process starts along with spamc. Is this normal? If not, > anyone know how to stop the second spamd process from being called?

Re: Horde/IMP - 'Report as Spam' button attaches the mail

2004-03-02 Thread Loren Wilton
> I now have a folder full of emails from legitimate users with verified > spam as attachments - the spam attachments appear to have all headers. > > Can i just run "sa-learn --spam" on that folder? Does spamassassin know > to only look at the attachment? No and no. > Or do i somehow have to extr

Horde/IMP - 'Report as Spam' button attaches the mail

2004-03-02 Thread Jonathan Soong
Hi Guys, I am using Horde/IMP webmail and have enabled the 'Report as Spam' link which emails me the offending spam mail AS AN ATTACHMENT. Is this correct behaviour? I now have a folder full of emails from legitimate users with verified spam as attachments - the spam attachments appear to have a

Statistics

2004-03-02 Thread Josh Dayberry
I am not sure if this is common knowledge or not, but I was curious about the frequency each test identified spam so I ran some numbers and I got the following. I was trying to determine if I should continue to run dcc, razor and pyzor. The 'mails' column is the total number of spam caught. The

2 SA Processes running

2004-03-02 Thread Chris
I'm running Mandrake 9.0, Kmail 3.0.3, SA 2.63. Question I have is there is always a SA process running as shown by Ksysguard. When mail comes in another SA process starts along with spamc. Is this normal? If not, anyone know how to stop the second spamd process from being called? Thanks Ch

Re: .procmailrc

2004-03-02 Thread Matthias Fuhrmann
On Tue, 2 Mar 2004, Jeff wrote: [...] > This is whats in my .procmailrc > MAILDIR=$HOME/mail > LOGFILE=$HOME/.proclog > > :0fw > | spamassassin dunno how those procmail logs looks like, but maybe a $PATH problem ? try: | /usr/local/bin/spamassassin well, if there is another prefix,

Re: Outlook 2003 Urgent Email Being Filtered

2004-03-02 Thread Eric Fagan
I opened a bug on this when 2.55 was current; I received word on 18Feb that it was corrected in the current 2.70 cvs. SA isn't 'filtering' the high priority messages but it does assign an extra half-point hit if sent via Exchange. http://bugzilla.spamassassin.org/show_bug.cgi?id=2300 --eric --

Forgetmei not!

2004-03-02 Thread Loren Wilton
Gee, an entire domain to add to BigEvil! ;-) About 10 different spams from this guy in the last couple hours. It looks like everrthing in front of forgetmei in the url is just random words. Loren http://driven.fragrant.forgetmei.com/gld/gld.php"; target=3D"_bl= ank"> http://liven.respo

Re: .procmailrc

2004-03-02 Thread Butrus orman
no you don't need to upgrade but i had a similar problem when i updated perl so i just downgraded again On Tue, 2004-03-02 at 17:39, Jeff Honken wrote: > No, I haven't upgraded. I'm using 5.6.1. What > should version should I upgrade to? Jeff > --- Butrus orman <[EMAIL PROTECTED]> wrote: > >

Spamassassin + Amavis-new

2004-03-02 Thread Dan Spray
Hello,   I have been running Spamassassin 2.63 with spamd for some time now and have really not had any problems.  However, I would like to add virus scanning to my setup and the only way I see to do this is with Amavis.  I downloaded and installed Amavis and have it working…basically.  T

Re: confusion with autolearning

2004-03-02 Thread Theo Van Dinter
On Tue, Mar 02, 2004 at 03:01:02PM -0500, Theo Van Dinter wrote: > It hasn't been called 2.70 for a while (over a month?), and the latest > revision is 6970. Turns out the cronjob to update the website dev code wasn't quite working right. Beyond the fact it was trying to do cvs ... ;) Anyway, it

Re: .procmailrc

2004-03-02 Thread Jeff Honken
No, I haven't upgraded. I'm using 5.6.1. What should version should I upgrade to? Jeff --- Butrus orman <[EMAIL PROTECTED]> wrote: > did you upgrade your perl after installing SA > > On Tue, 2004-03-02 at 17:18, Jeff wrote: > > I'm getting some errors in my log file for > Spamassassin. It kee

Re: .procmailrc

2004-03-02 Thread Butrus orman
did you upgrade your perl after installing SA On Tue, 2004-03-02 at 17:18, Jeff wrote: > I'm getting some errors in my log file for Spamassassin. It keeps giving me > an "spamassassin: No such file or directory" error in the log file. > Also I'm not getting the spam in my "spam" file. The confi

.procmailrc

2004-03-02 Thread Jeff
I'm getting some errors in my log file for Spamassassin. It keeps giving me an "spamassassin: No such file or directory" error in the log file. Also I'm not getting the spam in my "spam" file. The configuration that I have is Redhat Linux 7.3 and Spamassassin 2.63-1 and Procmail 3.22-5. My .p

Re: Outlook 2003 Urgent Email Being Filtered

2004-03-02 Thread Bob George
Christopher Joyce <[EMAIL PROTECTED]> wrote: > Currently, I am running SA 2.63 and it appears that whenever > someone sends an "urgent" email with Outlook 2003, it's > filtered by SA. By "filtered", do you mean scored as spam? > If the email is sent with Outlook 2000 and > labeled as "urgent", SA

Outlook 2003 Urgent Email Being Filtered

2004-03-02 Thread Christopher Joyce
Hello, Currently, I am running SA 2.63 and it appears that whenever someone sends an "urgent" email with Outlook 2003, it's filtered by SA. If the email is sent with Outlook 2000 and labeled as "urgent", SA will not filter the message. This problem only exists with Outlook 2003. Has anyone ex

Re: I need to write a rule with a 'greater than or equal to' eval

2004-03-02 Thread Bart Schaefer
On Mon, 1 Mar 2004, Bob George wrote: > header MY_SPAM_1 X-MessageWall-Score: =~/(1[5-9]|[2-9][0-9]).*/ > describe MY_SPAM message wall scored between 15 and 99 > > work? Almost. Nobody has pointed this out yet, but the ".*" is extraneous at the end of the regexes suggested by nearly everyone s

Re: amavis-d and spamd not working?

2004-03-02 Thread Bob Mortimer
On Monday 01 Mar 2004 6:16 pm, Bob Mortimer wrote: > > In your amavisd.conf file, set $sa_tag_level_deflt to -99.0 to get > > the X-Spam-Status header added to all emails. > > Seems to make no difference at all - I'm getting it to send a notification > alert which works OK, but the original spam e

Re: confusion with autolearning

2004-03-02 Thread Alex van den Bogaerdt
On Tue, Mar 02, 2004 at 09:15:46PM +0100, Alex van den Bogaerdt wrote: > The original file I fetched (also today) was dated february 16th. > > Sorry I didn't spot this; I'll try some other mirrors. and now I'm ready to give up :( ll -rt Mail-Spam* -rw---1 alex alex 961950 Jan

Re: confusion with autolearning

2004-03-02 Thread Alex van den Bogaerdt
On Tue, Mar 02, 2004 at 03:06:50PM -0500, Matt Kettler wrote: > Case in point - running CVS builds, while 99% likely to work correctly, > does occasionally result in a non-working version as a result of developer > re-writes. Thanks. I'm just curious about SPF support so I'll take my chances :

Re: confusion with autolearning

2004-03-02 Thread Alex van den Bogaerdt
On Tue, Mar 02, 2004 at 03:08:52PM -0500, Theo Van Dinter wrote: > On Tue, Mar 02, 2004 at 03:01:02PM -0500, Theo Van Dinter wrote: > > > X-Spam-Checker-Version: SpamAssassin 2.70-r6565 (2004-02-07) on > > > > It hasn't been called 2.70 for a while (over a month?), and the latest > > revision is 6

Re: confusion with autolearning

2004-03-02 Thread Theo Van Dinter
On Tue, Mar 02, 2004 at 03:01:02PM -0500, Theo Van Dinter wrote: > > X-Spam-Checker-Version: SpamAssassin 2.70-r6565 (2004-02-07) on > > It hasn't been called 2.70 for a while (over a month?), and the latest > revision is 6970. yes, before anyone corrects me, I do, now that I thought about it, re

Re: confusion with autolearning

2004-03-02 Thread Matt Kettler
At 02:53 PM 3/2/2004, Alex van den Bogaerdt wrote: Hi, I have a problem with autolearning and the latest snapshot. Somehow, I managed to set spamassassin up so that a spam score of over 18 results in _ham_... According to bugzilla, this *was* a bug and is already fixed. However: X-Spam-Flag: YES

Re: confusion with autolearning

2004-03-02 Thread Theo Van Dinter
On Tue, Mar 02, 2004 at 08:53:53PM +0100, Alex van den Bogaerdt wrote: > I have a problem with autolearning and the latest snapshot. Well, you're not on the last snapshot by a long shot. > X-Spam-Checker-Version: SpamAssassin 2.70-r6565 (2004-02-07) on > slot.hollandcasino.net It hasn't

confusion with autolearning

2004-03-02 Thread Alex van den Bogaerdt
Hi, I have a problem with autolearning and the latest snapshot. Somehow, I managed to set spamassassin up so that a spam score of over 18 results in _ham_... According to bugzilla, this *was* a bug and is already fixed. However: Mar 2 15:34:16 slot spamd[19098]: debug: DNS MX records found: 2

Re: [spa] Re: Excuse Rules scored low?

2004-03-02 Thread Charles Gregory
On Tue, 2 Mar 2004, Loren Wilton wrote: > 0.037? 1.118? Are you sure you are running stock scores? I dug into this a little further. I *thought* that SA would be triggering on the 'compliance with US federal laws' line, but it turns out the only two tests were for standard 'click to take off'

RE: the nerve! wiki spammer

2004-03-02 Thread Yackley, Matt
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Tuesday, March 02, 2004 12:51 PM > To: [EMAIL PROTECTED] > Subject: the nerve! wiki spammer > > I've just cleaned up a "search engine optimization" web > spammer's attempts > to use the SpamAssassin Wiki

Re: Tricky spam

2004-03-02 Thread Jonathan Nichols
Matt Thoene wrote: Anyone else receive one like below? It's tricky in that it shows up as a forward, and has a bunch of MailScanner info in the headers. I'm not running MailScanner on my server... Almost looks like they forgot the spam? And of all things I've seen spamvertized.. a TORTOISE?! Has d

Re: Custom Rule Help

2004-03-02 Thread Dan Bullock
James Nelson wrote: Greetings, I am trying to create a custom rule that will take away x pts if an email is sent from a particular domain. Can someone please let me know if this is correct syntax? If not, please correct me. describe DOMAIN_CHECK Mail from a particular domain header DOM

Tricky spam

2004-03-02 Thread Matt Thoene
Anyone else receive one like below? It's tricky in that it shows up as a forward, and has a bunch of MailScanner info in the headers. I'm not running MailScanner on my server... -- Regards, Matt Return-Path: <[EMAIL PROTECTED]> X-Original-To: [EMAIL PROTECTED] Delivere

the nerve! wiki spammer

2004-03-02 Thread Justin Mason
I've just cleaned up a "search engine optimization" web spammer's attempts to use the SpamAssassin Wiki to gain PageRank. The irony of attempting to use an anti-spam Wiki, to spam, should not be overlooked ;) The spammer came from 61.17.115.6 -- : jm 1008...; whois 61.17.115.0 % [whois.apnic.ne

Re: I need to write a rule with a 'greater than or equal to' evaluati on.

2004-03-02 Thread Adam D. Lopresto
On Mon, 1 Mar 2004 [EMAIL PROTECTED] wrote: > I've been using Messagewall for a while now, and I decided to throw > SpamAssassin into the mix. Messagewall is great, but it's not dynamic > enough. > > Problem is that I eventually want messagewall to tag messages only, then > pass them on to SA. >

Re: Did antidrug move?

2004-03-02 Thread Matt Kettler
At 01:22 PM 3/2/2004, Jack L. Stone wrote: ...which means they may restore an older version of your file?? No, I checked on the back end via FTP.. it's all there and up-to-date.. it's just the linkage between the back end and the front end that seems hosed now. (ie: the webserver fails to rea

Re: Weeds2?

2004-03-02 Thread Chris Thielen
jennifer said: > Does anyone have a copy of weeds2.cf? I put the sets back up on my page > because so many people have been emailing that they couldn't get them. > I don't, however, have a copy of weeds2 for some reason. (I like the > original weeds better anyway) I could rewrite them, but I don

Re: Did antidrug move?

2004-03-02 Thread Jack L. Stone
At 11:27 AM 3.2.2004 -0500, Matt Kettler wrote: >At 10:05 AM 3/2/2004, Gary Smith wrote: >>Rules_du_jour is generating errors today: >> >>The following rules had 404 errors: >>Matt Kettler's AntiDrug not found (404) at >>http://mywebpages.comcast.net/mkettler/sa/antidrug.cf > >Update: I just spoke

Weeds2?

2004-03-02 Thread jennifer
Does anyone have a copy of weeds2.cf? I put the sets back up on my page because so many people have been emailing that they couldn't get them. I don't, however, have a copy of weeds2 for some reason. (I like the original weeds better anyway) I could rewrite them, but I don’t really feel like it.

Re: Custom Rule Help

2004-03-02 Thread Loren Wilton
Looks to me like it should work. Note you could also use whitelist_from, but that subtracts a whole lotta points. Loren > I am trying to create a custom rule that will take away x pts if an > email is sent from a particular domain. Can someone please let me know if > this is correct syn

Re: Need a rule for random words & weird punctuation.

2004-03-02 Thread Loren Wilton
> Anybody know of a rule for the long strings of random words that don't > contain words like 'the, to, a, an, then, and' and those sort of words? I'd Here are two sets. The first one checks only for long strings without punctuation, and works pretty well. The second set is a modified version th

Re: Custom Rule Help

2004-03-02 Thread Matt Kettler
At 12:58 PM 3/2/2004, James Nelson wrote: Greetings, I am trying to create a custom rule that will take away x pts if an email is sent from a particular domain. Can someone please let me know if this is correct syntax? If not, please correct me. describe DOMAIN_CHECK Mail from a particu

Custom Rule Help

2004-03-02 Thread James Nelson
Greetings, I am trying to create a custom rule that will take away x pts if an email is sent from a particular domain. Can someone please let me know if this is correct syntax? If not, please correct me. describe DOMAIN_CHECK Mail from a particular domain header DOMAIN_CHECK From =

Re: LISTOPS: Can we do something about this?

2004-03-02 Thread Steven Dickenson
JC wrote: Richard J. Kieran is fast becoming the bane of my existance. Can we cut him loose? Please? :) This guy ended up in my killfile after the second NDR. Stupid, dumb, MTA. Use the Envelope-From!!! ARGH! Steven -- Steven Dickenson <[EMAIL PROTECTED]> http://www.mrchuckles.net

Re: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread Christopher M. Iarocci
Jon Etkins wrote: I've put a temporary copy up at http://www.snikte.net/antidrug.cf until Comcast gets Matt's site back on the air. Thank you Jon. Chris

RE: Need a rule for random words & weird punctuation.

2004-03-02 Thread JC
Lol, yeah. That idea seems like it's getting worse and worse with every post. Anybody know of a rule for the long strings of random words that don't contain words like 'the, to, a, an, then, and' and those sort of words? I'd try to write one, but my REGEX skills are inexistent. Thanks for y

Re: Excuse Rules scored low?

2004-03-02 Thread Loren Wilton
0.037? 1.118? Are you sure you are running stock scores? Those seem REALLY low to me! I just ran that here, and with the truncated headers the only meaningful test that hit was EARN_MONEY at 1.0 points. I am a little surprised that I didn't get some hits on things like the "federal email laws"

BayesSQL Errors

2004-03-02 Thread Doug Eubanks
Hi everyone! I seem to have a strange problem I am using SpamAssassin 2.70-CVS (Yesterday's build) with a BayesSQL Store. SA-Learn works when I populated the BayesTables or when I do a rebuild, without errors. However, I am seeing "autolearn=unavailable" in the headers of my messages. Th

Re: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread JRiley
> > Forgive me being a total novice, is it a central storage where rules can > be downloaded and deployed (probably need a how-to description as well)? http://www.spamfighter.org has a download section with the major rulesets that this list talks about. These are direct links to the authors rules.

Re: Need a rule for random words & weird punctuation.

2004-03-02 Thread Bob George
JC <[EMAIL PROTECTED]> wrote: > Darn. I hadn't thought of that. C wouldn't have been a huge > issue, but the emoticons I could see as possibly an issue. Well, messages to the procmail list often wind up with content translated TO emoticons by "friendly" client software. Add procmail to the list o

Another one for the list

2004-03-02 Thread Loren Wilton
No waiting rooms. Here. http://www.majesticdrugs.biz.

pop3proxy list?

2004-03-02 Thread Jon Etkins
Is there a discussion list or support forum for pop3proxy? Mine died last night with the following error: Can't create new socket for incoming connection: Bad file descriptor at D:\pop3proxy\pop3proxy.pl line 397. While it's stable 99% of the time, this is the second time this has happened, and

Re: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread Jon Etkins
On Tue, 02 Mar 2004 11:03:13 -0500, Christopher M. Iarocci wrote: >Matt Kettler wrote: > >> At 11:10 AM 3/2/04 +, Thomas Muller wrote: >> >>> In particular I need some more rules that can take all the viagra >>> variants (like Generi*c V-iagra Half Price Guaran-teed etc). >> >> >> >> http://my

RE: I need to write a rule with a 'greater than or equal to' eval uati on.

2004-03-02 Thread nate
Yeah, there's probably be an easier way to write this, but in the interest of time here's what I ended up with (and it works): bayes_ignore_header X-MessageWall-Score header MW_SPAM_15_AND_19 X-MessageWall-Score =~ /1[5-9].*/ describe MW_SPAM_15_AND_19 Messagewall scored between 15 and 19 score

Re: Did antidrug move?

2004-03-02 Thread Matt Kettler
At 10:05 AM 3/2/2004, Gary Smith wrote: Rules_du_jour is generating errors today: The following rules had 404 errors: Matt Kettler's AntiDrug not found (404) at http://mywebpages.comcast.net/mkettler/sa/antidrug.cf Update: I just spoke with comcast. Apparently they had some problems with their per

Excuse Rules scored low?

2004-03-02 Thread Charles Gregory
Hallo! Well, this is a bit strange. I got a spam with some very obvious spam 'taglines' in it, and went looking for the reason it scored so low. As seen below, SA hit on the 'excuses' but scored them ridiculously low. Is there really any ham that uses those excuses that they need to be scored so l

Re: Did antidrug move?

2004-03-02 Thread Matt Kettler
At 10:05 AM 3/2/2004, Gary Smith wrote: Rules_du_jour is generating errors today: The following rules had 404 errors: Matt Kettler's AntiDrug not found (404) at http://mywebpages.comcast.net/mkettler/sa/antidrug.cf Gary No, I've not moved.. it appears comcast's server is having issues. The underly

Re: Did antidrug move?

2004-03-02 Thread Christopher M. Iarocci
Gary Smith wrote: Rules_du_jour is generating errors today: The following rules had 404 errors: Matt Kettler's AntiDrug not found (404) at http://mywebpages.comcast.net/mkettler/sa/antidrug.cf Gary None of the rules on Jennifer's site are working either. I know she said they were moving, but I

LISTOPS: Can we do something about this?

2004-03-02 Thread JC
Richard J. Kieran is fast becoming the bane of my existance. Can we cut him loose? Please? :) > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Tuesday, March 02, 2004 11:04 AM > To: JC > Subject: NDN: RE: Need a rule for

Problem with spamd - unable to find user

2004-03-02 Thread Dan Didier
Hi, I am running redhat 8 with spamassassin 2.63, with qmail-scanner and clamscan. I recently upgraded to clamscan 1.20 (was running clamscan 1.20rc3) and now I am getting the following messages in my maillog. It seems that I am also not getting the messages tagged as spam. When upgrading to qma

RE: Need a rule for random words & weird punctuation.

2004-03-02 Thread JC
Darn. I hadn't thought of that. C wouldn't have been a huge issue, but the emoticons I could see as possibly an issue. > > > One of the things I noticed about this was the > punctuation. It's there, but > > NOBODY I know puts a space BEFORE their punctuation. > > U

Re: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread Christopher M. Iarocci
Matt Kettler wrote: At 11:10 AM 3/2/04 +, Thomas Muller wrote: In particular I need some more rules that can take all the viagra variants (like Generi*c V-iagra Half Price Guaran-teed etc). http://mywebpages.comcast.net/mkettler/sa/antidrug.cf Won't cover the half-price part, but covers a very

Did antidrug move?

2004-03-02 Thread Gary Smith
Rules_du_jour is generating errors today: The following rules had 404 errors: Matt Kettler's AntiDrug not found (404) at http://mywebpages.comcast.net/mkettler/sa/antidrug.cf Gary

Re: Trying to detect bogus end tags

2004-03-02 Thread Berend De Schouwer
On Monday 01 March 2004 11:54, Berend De Schouwer wrote: > On Saturday 28 February 2004 05:46, Loren Wilton wrote: > > I'm trying to come up with a way to detect bogus end tags, and so > > far I'm not having much luck. > > > > What I'm specifically trying to catch are things like > > > > > > > >

RE: spamd running but not scanning

2004-03-02 Thread Matthias Fuhrmann
On Tue, 2 Mar 2004, James Nelson wrote: > This is the error I am seeing in the log when things start failing: > > Feb 29 23:50:09 mail3 spamc[6359]: failed sanity check, 1496 bytes claimed, > 6188 bytes seen > > Any clue what is causing this? have a look here, maybe its a character enconding prob

Another Spam

2004-03-02 Thread Jorge Valdes
Hi, Has anyone gotten this message? Definate SPAM, but only scores 1.3 -- X-Spam-Status: No, hits=1.3 required=5.0 tests=BIZ_TLD,HOT_NASTY,HTML_20_30, HTML_MESSAGE autolearn=no version=2.60 ever seen these wacky farm girl sites check out these hot cowgirls play with their animals. c

Re: spamd running but not scanning

2004-03-02 Thread Matthias Fuhrmann
On Tue, 2 Mar 2004, James Nelson wrote: > I am having a weird problem where at some point spamd just quits scanning > email. There is no particular reason why... any clues? A restart of the > daemon gets it back on track. we have those trouble sometimes if the load of our machine gets way too h

RE: spamd running but not scanning

2004-03-02 Thread James Nelson
This is the error I am seeing in the log when things start failing: Feb 29 23:50:09 mail3 spamc[6359]: failed sanity check, 1496 bytes claimed, 6188 bytes seen Any clue what is causing this? -Original Message- From: James Nelson [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 8

spamd running but not scanning

2004-03-02 Thread James Nelson
I am having a weird problem where at some point spamd just quits scanning email. There is no particular reason why... any clues? A restart of the daemon gets it back on track.

Re: When subscribe to ham uses an ad from a spammer????

2004-03-02 Thread Loren Wilton
Hum. If SA could do random rewrites, or maybe just URI rewrites, then all the BigEvil urls detected could be replaced with a link to a joke-of-the-day page instead in those cases. Amybe add a footer below the spam footer describing it as spam. Loren - Original Message - From: "

Re: Running SA from Procmail

2004-03-02 Thread Chris Withers
Chip Paswater wrote: Mostly locking problems. Hurm, I'm a noobie... how do I know if I'm having locking problems? Often Bayes would begin a rebuild then suddenly die in the middle leaving it's scratch and lock files laying around to trip up future spamassassin processes. I even tried using "learn_

Re: rule to detect this spam

2004-03-02 Thread Loren Wilton
Well, pretty much anything from HINET is spam, at least around here. So that is one possible check. There really isn't much else, other than another URL to add to the bigevil list if it isn't already there. Probably could write a couple of rules for spaced-out and misspelled common drug names.

Two copies of perl...

2004-03-02 Thread James Nelson
I have read that spamassassin has problems if there are two copies of perl installed on the server. When installing 2.60, I used cpan and the thing installed a newer version of perl. I believe this is causing both my problems with bayes and with DNS:NET:RESOLVER. I know this isn't the best place

Re: RE Rule write error

2004-03-02 Thread Matt Kettler
At 09:01 PM 3/1/04 -0800, Ed BK wrote: I have a test rule that is not working body LOCAL_DEMONSTRATION_RULE /test/ score LOCAL_DEMONSTRATION_RULE 5.0 describe LOCAL_DEMONSTRATION_RULE My test rule I get this error [EMAIL PROTECTED] root]# spamassassin --lint Created user preferences file: /root/.

Re: Why does bayes try for R/W tie when autolean=no?

2004-03-02 Thread David B Funk
On Mon, 1 Mar 2004, Jeff Makey wrote: > Regarding my patch, Theo Van Dinter wrote: > >you change the expiry algorithm from LRU to FIFO, which is > >very likely to cause checks to be less accurate. > > (For the acronym-impaired: those are Least Recently Used and > First In, First Out.) > > Does sa-

Re: SUBJ_ALL_CAPS FP for lists

2004-03-02 Thread Matt Kettler
At 04:25 PM 3/2/04 +0300, ÷ÁÓÉÌØÅ× áÎÄÓÅÊ wrote: The messages from different lists used to have tagged Subject:, but if we have non-ASCII charset in this field, the subject_is_all_caps() returns false positive hit because it verifies such charset only in the beginning of the line (/^=\?${C

Re: location of bayes_*

2004-03-02 Thread Matt Kettler
At 06:14 AM 3/2/04 -0600, Craig Jackson wrote: Hi, Spamassassin is running as user spamass. I wrote these Bash scripts that learn from spam in users' IMAP folder (.SPAM); howver, this script runs as root and then copies the bayes filters ... where? Into a .spamassassin directory in spamass's $HOME?

Re: SUBJ_ALL_CAPS FP for lists

2004-03-02 Thread Keith C. Ivey
÷ÁÓÉÌØÅ× áÎÄÒÅÊ <[EMAIL PROTECTED]> wrote: > The messages from different lists used to have tagged > Subject:, but if we have non-ASCII charset in this field, the > subject_is_all_caps() returns false positive hit because it > verifies such charset only in the beginning of the line > (/^

Re: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread Keith C. Ivey
Thomas Muller <[EMAIL PROTECTED]> wrote: > I've been trying out CommuniGate in conjunction with SpamAssassin for a > while, and I must say my old client-side filter (Spammunition) caught a > lot more spams than the default setup of SpamAssassin are doing now. Are you using Bayes? Have you traine

RE: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread Scott Williams
John, I also experienced the exact same thing. The default setup with no bayes training really let most of my spam through our filters. I chose to let the auto training of bayes to work and it did well since I get to see at least 10,000 spams a day. Along with adding additional cf's I have

SUBJ_ALL_CAPS FP for lists

2004-03-02 Thread ÷ÁÓÉÌØÅ× áÎÄÒÅÊ
Hi! The messages from different lists used to have tagged Subject:, but if we have non-ASCII charset in this field, the subject_is_all_caps() returns false positive hit because it verifies such charset only in the beginning of the line (/^=\?${CHARSETS_LIKELY_TO_FP_AS_CAPS}\?/). And w

RE: Trying to detect bogus end tags

2004-03-02 Thread Mike Kuentz (2)
Try these, they're not the prettiest, but at least work most of the time :) #This takes care of tags that don't exist such as #The last / is in there so it doesn't freak out about closing tags. # is a valid tag, but I don't believe we'll see it all that much in email. #Added in to not pickup <[EM

Re: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread John Fleming
- Original Message - From: "Thomas Muller" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, March 02, 2004 6:10 AM Subject: NEWBIE: Not extremely happy with SA filtering so far > SpamAssassins, > > I've been trying out CommuniGate in conjunction with SpamAssassin for a > while

location of bayes_*

2004-03-02 Thread Craig Jackson
Hi, Spamassassin is running as user spamass. I wrote these Bash scripts that learn from spam in users' IMAP folder (.SPAM); howver, this script runs as root and then copies the bayes filters ... where? Into a .spamassassin directory in spamass's $HOME? I ask because I tried that and I'm not sure i

Re: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread Jon Gerdes
Thomas Look here: http://wiki.spamassassin.org/w/CustomRulesets The wiki is an excelent resource for SA config and usage tips and growing fast Cheers Jon Gerdes >>> "Thomas Muller" <[EMAIL PROTECTED]> 03/02/04 11:10am >>> SpamAssassins, I've been trying out CommuniGate in conjunction with Spa

Re: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread Matt Kettler
At 11:10 AM 3/2/04 +, Thomas Muller wrote: In particular I need some more rules that can take all the viagra variants (like Generi*c V-iagra Half Price Guaran-teed etc). http://mywebpages.comcast.net/mkettler/sa/antidrug.cf Won't cover the half-price part, but covers a very wide variety of via

Re: rule to detect this spam

2004-03-02 Thread Matt Kettler
At 01:00 AM 3/2/04 -0800, Jingmin (Jimmy) Zhou wrote: Hi, sorry I did not attach the complete message in the previous message - thought it's not so useful except the body. ;-) Hope this time it's better. Not to hawk my own rules, but this is the kind of garbage antidrug.cf was designed to pick u

NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread Thomas Muller
SpamAssassins, I've been trying out CommuniGate in conjunction with SpamAssassin for a while, and I must say my old client-side filter (Spammunition) caught a lot more spams than the default setup of SpamAssassin are doing now. I have the overall score threshold set to 5.0, but a lot of spam has o

Re: When subscribe to ham uses an ad from a spammer????

2004-03-02 Thread Andy Blanchard
> For stuff like this, I think the only thing I would maybe like to see is a > comment in the file that indicates it could be an issue and where to > comment > it out. This makes everybody happy. You get to stay a hard @zz. And the > folks that use BE are empowered to edit or skip the section th

rule to detect this spam

2004-03-02 Thread Jingmin (Jimmy) Zhou
Hi, sorry I did not attach the complete message in the previous message - thought it's not so useful except the body. ;-) Hope this time it's better.--- Begin Message --- I and my lover have both noticed beautiful improvements in our relationship.He is much older, and doesn't have the s e x u

Re: RE Rule write error

2004-03-02 Thread Danie Marais
Do you have an empty line after the last line?  Perhaps that is throwing you out.   Danie - Original Message - From: Ed BK To: [EMAIL PROTECTED] Sent: Tuesday, March 02, 2004 7:01 AM Subject: RE Rule write error I have a test rule that is not working   bo

Re: rule to detect this spam?

2004-03-02 Thread Daniel Quinlan
"Jingmin (Jimmy) Zhou" <[EMAIL PROTECTED]> writes: > Sorry if it's reported already. I wonder if there is any rule to > detect the following kind of spams? Recently I have noticed that > many spams tend to be very short. Spammers are becoming more and > more smart. ;-) You really need to attach (

Re: Why does bayes try for R/W tie when autolean=no?

2004-03-02 Thread Theo Van Dinter
On Mon, Mar 01, 2004 at 10:00:52PM -0800, Jeff Makey wrote: > Does sa-learn not update the atime on the Bayes tokens that it > modifies? My full procedure includes using sa-learn on all > non-whitelisted mail, so I would expect that the LRU aspect would be > preserved. Yes, sa-learn will update a

Re: Why does bayes try for R/W tie when autolean=no?

2004-03-02 Thread Jeff Makey
Regarding my patch, Theo Van Dinter wrote: >you change the expiry algorithm from LRU to FIFO, which is >very likely to cause checks to be less accurate. (For the acronym-impaired: those are Least Recently Used and First In, First Out.) Does sa-learn not update the atime on the Bayes tokens that i

Re: Why does bayes try for R/W tie when autolean=no?

2004-03-02 Thread Theo Van Dinter
On Mon, Mar 01, 2004 at 09:35:53PM -0800, Jeff Makey wrote: > I want to better understand the implications of the patch below before > I submit it for use in a future version. In short: you change the expiry algorithm from LRU to FIFO, which is very likely to cause checks to be less accurate. --

Re: Why does bayes try for R/W tie when autolean=no?

2004-03-02 Thread Jeff Makey
A month ago I got no response when I asked for a solution to this problem, so let me describe what I came up with. It's not pretty, but it works. First of all, spamd needs these settings: bayes_auto_expire 0 # expiration requires write access bayes_auto_learn 0 # learnin

RE Rule write error

2004-03-02 Thread Ed BK
I have a test rule that is not working   body LOCAL_DEMONSTRATION_RULE  /test/score LOCAL_DEMONSTRATION_RULE  5.0describe LOCAL_DEMONSTRATION_RULE My test rule   I get this error [EMAIL PROTECTED] root]# spamassassin --lintCreated user preferences file: /root/.spamassassin/user_prefsFailed to parse

Re: Rule write question

2004-03-02 Thread Ed BK
Sorry   I'm using qmail with SA & qmail-scanner on a rh9 OS I have my_rules.cf located in /usr/share/spamassassin/ my setting is for server wide nothing local   Thanks Ed   PS I did restart sa after I added it  service spamassassin restart/etc/rc.d/init.d/spamassassin restart Either works to restar

Re: Rule write question

2004-03-02 Thread jdow
From: "Ed BK" <[EMAIL PROTECTED]> > I am trying to write a test rule but it will not work > > example > body LOCAL_DEMONSTRATION_RULE /test/ > score LOCAL_DEMONSTRATION_RULE 5.0 > describe LOCAL_DEMONSTRATION_RULE My test rule > > I put this in a file named my_rules.cf in > /etc/mail/spamassas

re-create bayes from sa.dump

2004-03-02 Thread Adam Denenberg
Hello, I would like to rebuild my bayes DB from a sa.dump output. I then run the sa.dump output thru a quick perl script that fixes things like "spam count < 0", "ham count < 0", "atime > time()". this way i can properly expire my tokens. i tried using michael parker's script but it was crea

Rule write question

2004-03-02 Thread Ed BK
I am trying to write a test rule but it will not work   example body LOCAL_DEMONSTRATION_RULE /test/score LOCAL_DEMONSTRATION_RULE 5.0describe LOCAL_DEMONSTRATION_RULE My test rule   I put this in a file named my_rules.cf in /etc/mail/spamassassin/ and then run service spamassassin restart  

Rule write question

2004-03-02 Thread Ed BK
I am trying to write a test rule but it will not work   example body LOCAL_DEMONSTRATION_RULE /test/score LOCAL_DEMONSTRATION_RULE 5.0describe LOCAL_DEMONSTRATION_RULE My test rule   I put this in a file named my_rules.cf in /etc/mail/spamassassin/ and then run service spamassassin restart   My hi

  1   2   >