Changes in SA 3.0?

I added the line score SUBJ_DOLLARS 2.8 (I checked my real mail and $ shows up in less that 0.1% of my ham's Subjects and never as the initial character, so I was considering putting this at 5.0, but thought I would try with 2.8 for now) to /etc/mail/spamassassin/local.cf I then did a /usr/local

Re: SA 3.0 Maillog parser

On 08 Jul 2004, at 09:35, Dallas L. Engelken wrote: I just whipped up a quick maillog parser display top rules firing in 3.0. It reads all maillog* files and generates top firing rules for ham and spam, as well as some general info. A copy of it can be found here http://www.rulesemporium.com/pro

SURBL problem resolved...

So I was having problems with the following whenever I lint'ed SA 2.63 after installing SURBL. >> >debug: uri tests: Done uriRE >> >Failed to compile URI SpamAssassin tests, skipping: >> >(syntax error at /etc/mail/spamassassin/spamcop_uri.cf, rule >> >SPAMCOP_URI_RBL, line 1, near "eval:

FW: 3.0pre2 is great!!!

It's fridays alright I just replied to myself -Original Message- From: lists [mailto:[EMAIL PROTECTED] Sent: Friday, July 16, 2004 4:15 PM To: 'lists' Subject: RE: 3.0pre2 is great!!! Email: 8156 Autolearn: 162 AvgScore: 2.89 AvgScanTime: 2.03 sec Spam: 1069 Autolearn

Re: How do I get off this list?

> Fair enough, but why would somebody who cannot read email headers be > using spam assassin? > Touché.

Re: SURBLs and skip_rbl_checks

On Friday, July 16, 2004, 4:17:33 AM, John Wilcock wrote: > On Fri, 16 Jul 2004 04:09:26 -0700, Jeff Chan wrote: >> Chris' answer is reasonable that the 3.0 code hopefully may >> treat SURBLs like other RBLs in that skip_rbl_checks may work >> as expected. Reading the source code would probably re

3.0pre2 is great!!!

So far SA3.pre2 with --max-conn-per-child=2 as so far taken every single CC bomb that I have gotten so far with out taking down my server. The most ram it's gotten to before dying is about 100+ meg which is nothing as long as I don't get 20 copies of 100+ meg. In debug say a hit for 100 CC with n

Re: [SURBL-Discuss] A sincere request for help

On Wednesday, July 14, 2004, 10:06:17 AM, William Stearns wrote: > I'm asking everyone that uses any surbls (that includes anyone > using the sa-blacklist.cf, sa-blacklist.uri.cf, ws.surbl.org, *.surbl.org, > spamassasin 3.0, and spamassassin 2.x with spamcopuri) for help. If you > get any

RE: How do I get off this list?

Crap, you can tell it's Friday. I didn't even send it to the entire list... Maybe I should be talking Levitra instead... Gary -Original Message- From: Gary Smith Sent: Friday, July 16, 2004 12:36 PM To: 'Chris Santerre' Subject: RE: How do I get off this list? All's I know it that I t

RE: How do I get off this list?

>-Original Message- >From: Evan Platt [mailto:[EMAIL PROTECTED] >Sent: Friday, July 16, 2004 3:43 PM >To: [EMAIL PROTECTED] >Subject: RE: How do I get off this list? > > >At 12:27 PM 7/16/2004, you wrote: > >>AFLAK! >> >>I can tell it's Friday! :) > >How did AFLAK get LOPEZ?? > He just

RE: How do I get off this list?

At 12:27 PM 7/16/2004, you wrote: AFLAK! I can tell it's Friday! :) How did AFLAK get LOPEZ??

RE: How do I get off this list?

> > I'll come to the poor guy's defense... not all web-based providers > > show headers easily, and a newbie may not think to check > them. I knew > > here with Gmail you have to jump through two hoops to see the actual > > headers. > > It's worse than that. Look what he's using: > > > X-Mailer: M

Re: How do I get off this list?

--On Friday, July 16, 2004 1:48 PM -0400 "D.J." <[EMAIL PROTECTED]> wrote: I'll come to the poor guy's defense... not all web-based providers show headers easily, and a newbie may not think to check them. I knew here with Gmail you have to jump through two hoops to see the actual headers. It's wor

RE: Lint failed - Rules Du Jour

A!!! Mommy! I guess they are. I'm Bccing this to the Ninjas. Lets just take it off over the weekend. --Chris >-Original Message- >From: Gary Smith [mailto:[EMAIL PROTECTED] >Sent: Friday, July 16, 2004 2:59 PM >To: [EMAIL PROTECTED] >Subject: RE: Lint failed - Rules Du Jour > > >

RE: How do I get off this list?

>-Original Message- >From: Evan Platt [mailto:[EMAIL PROTECTED] >Sent: Friday, July 16, 2004 2:50 PM >To: [EMAIL PROTECTED] >Subject: RE: How do I get off this list? > > >At 11:30 AM 7/16/2004, you wrote: >>Hey! I got some good news...no I can't help you unsubscibe, >but I saved a >>pil

RE: How do I get off this list?

At 11:30 AM 7/16/2004, you wrote: Hey! I got some good news...no I can't help you unsubscibe, but I saved a pile 'o money on my car insurance! I lowered my cholesterol!

RE: Lint failed - Rules Du Jour

BTW It failed again today. Chris, Are the rate limiters still in effect? Gary Wayne Smith

Re: Lint failed - Rules Du Jour

- Original Message - From: "Gary Smith" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, July 15, 2004 12:07 PM Subject: Lint failed - Rules Du Jour All servers using rules_du_jour failed today. Is this a residual side effect of the rulesemporium outages that occurred earlie

Re: How do I get off this list?

Chris Santerre wrote: Do you have a live chicken to sacrafice? No? For the low sum of 25 quid I could remove you? Don't have? I can show you ways to make money from home! Or you can check out these cool new things that came out in the internet last week. Called Email Headers. Personally I love

Re: 3.0 pre2 and Razor

On Fri, Jul 16, 2004 at 01:35:15PM -0500, Richard Humphrey wrote: > Is anyone running 3.0 pre2 and Razor successfully. I tried installing Yep. > Digest::SHA1 object version 2.01 does not match bootstrap parameter 2.10 > at /usr/lib/perl5/5.8.0/i386-linux-thread-multi/DynaLoader.pm line 249. Ye

3.0 pre2 and Razor

Is anyone running 3.0 pre2 and Razor successfully. I tried installing latest Razor2 from tarball and it couldnt find my Digest::SHA1 in the check (I think it looks for 2.01, but I am running 2.10) and then during the make install it appears to see 2.10 but doesnt like what it sees. Error below.

RE: How do I get off this list?

Hey! I got some good news...no I can't help you unsubscibe, but I saved a pile 'o money on my car insurance! Tom (it's Friday and payday so I'm dancin' in the office [a real sight to behold])

RE: SURBL Help?

Unfortunately, it's not working for me. Here's the result of the test: Content analysis details: (1001.4 points, 7.5 required) pts rule name description -- -- 1000 GTUBE BODY: Generic Test

RE: SURBL Help?

I'm not really saying anything other then it will work. I'm not sure why that is failing there, but I *think* it has something to do with that line. I'm hoping Eric will see this. The other error you posted is an error with Bigvil.cf ? (Which reminds me..time to go update that...) --Chris

Re: How do I get off this list?

On Fri, 2004-07-16 at 18:48, D.J. wrote: > > I'll come to the poor guy's defense... not all web-based providers > show headers easily, and a newbie may not think to check them. I knew > here with Gmail you have to jump through two hoops to see the actual > headers. Fair enough, but why would so

RE: SURBL Help?

Oops. Maybe I misread your email. Are you saying that I shouldn't be "http://surbl-org-permanent-test-point.com/foo/bar"; as a test URL? If so, which one should I use? Thanks. --Henry Kwan On Fri, 16 Jul 2004, Chris Santerre wrote: > It will work. I'm not sure why everyone is getting thes

RE: SURBL Help?

Hi. I copied over the spamcop_uri.cf to /etc/mail/spamassassin and restarted spamd but when I try to test it by feeding it a test email via: spamassassin -t -D < /opt/spamassassin/Mail-SpamAssassin-2.63/sample-spam.txt (which contains a "surbl-org-permanent-test-point.com" URL) I get this erro

RE: SURBL Help?

> Hi. Did anyone run into a open_redirect problem when > installing the SURBL > plugin? (See error log below) > > And if I try to install it anyway by copying over the .cf > file, SA spits out > this error when testing: > > debug: uri tests: Done uriRE > Failed to compile URI SpamAssassin tests, s

RE: How do I get off this list?

Chris Santerre <[EMAIL PROTECTED]> wrote on 07/16/2004 12:40:20 PM: > Or you can check out these cool new things that came out in the > internet last week. Called Email Headers. Personally I love them and > I hope they catch on. > GREAT SCOTT!! I've never heard of such a thing before. When d

Re: How do I get off this list?

Quoting "D.J." <[EMAIL PROTECTED]>: Or you can check out these cool new things that came out in the internet last week. Called Email Headers. Personally I love them and I hope they catch on. list-unsubscribe: --Chris I'll come to the poor guy's defense... not all web-

RE: SURBL Help?

It will work. I'm not sure why everyone is getting these. I've looked at the code in there and the only thing that stands out is that all of those lines contain "http://surbl-org-permanent-test-point.com/foo/bar"; So there may lie the problem? --Chris >-Original Message- >From: [EMAIL P

Re: How do I get off this list?

> Or you can check out these cool new things that came out in the internet last > week. Called > Email Headers. Personally I love them and I hope they catch on. > list-unsubscribe: > --Chris I'll come to the poor guy's defense... not all web-based providers show hea

Re: How do I get off this list?

At 10:32 AM 7/16/2004, you wrote: unsubscribe How did you get ON this list? You sent an e-mail to a SEPERATE address with "SUBSCRIBE" in it. So you do the opposite - send a message to that address with UNSUBSCRIBE in it. Failing that, look in the headers of every message: list-unsubscribe:

Re: Bayes Bit Me

On Fri, 16 Jul 2004 10:11:58 -0700, Gary Smith <[EMAIL PROTECTED]> wrote: > No, we did something a little different. > > We have some NFS shares to some tmp directories on the machine. We copy > the compressed bayes files over there and then dump a control file to > it. There is a cronjob set to

RE: How do I get off this list?

Quoting Chris Santerre <[EMAIL PROTECTED]>: Do you have a live chicken to sacrafice? No? For the low sum of 25 quid I could remove you? Don't have? I can show you ways to make money from home! Or you can check out these cool new things that came out in the internet last week. Called Email Headers.

RE: How do I get off this list?

Do you have a live chicken to sacrafice? No? For the low sum of 25 quid I could remove you? Don't have? I can show you ways to make money from home!   Or you can check out these cool new things that came out in the internet last week. Called Email Headers. Personally I love them and I hope t

Re: Spamassassin Manual?

[EMAIL PROTECTED] wrote: > I am running spamassassin with the following method: > > /usr/local/bin/spamd -a -c -d (perl) > > And I can see in my headers that it is scanning my e-mail. However I > am not sure how to add domains to my blacklist. Or is the spamd > program reading some remote blackli

How do I get off this list?

unsubscribe  

SURBL Help?

Hi. Did anyone run into a open_redirect problem when installing the SURBL plugin? (See error log below) And if I try to install it anyway by copying over the .cf file, SA spits out this error when testing: debug: uri tests: Done uriRE Failed to compile URI SpamAssassin tests, skipping: (syntax

RE: Bayes Bit Me

No, we did something a little different. We have some NFS shares to some tmp directories on the machine. We copy the compressed bayes files over there and then dump a control file to it. There is a cronjob set to run every x minutes that looks for the control file. If found then we untar then i

Re: Problem with new installation of spamassassin

On Mon, Jul 12, 2004 at 12:48:34PM -0400, Brent Kennedy wrote: > what information would be required to determine where the issue is? The first thing to do, as always, is run with -D and look for anything obvious in the output, such as bad paths, etc. -- Randomly Generated Tagline: "Leadership is

Re: 3.0 Pre2 install

On Fri, Jul 16, 2004 at 07:41:27AM -0500, Richard Humphrey wrote: > ]# rpmbuild --tb Mail-SpamAssassin-3.0.0.tar.gz > error: File /root/Mail-SpamAssassin-3.00.tar.gz: No such file or > directory > > What should I rename this to exactly? Yeah, the file version numbering was changed between pr

SA 3.0 and SARE rules

I'm installing SA3.0 and am currently looking through the announcement of new features trying to figure out which SARE rules I can delete. Sounds like I can definitely remove the antidrug and backhair rules. Seems as though 3.0 has added rules for bayes poison and anti-fraud, so does that mea

dynablock and LOCAL_AUTH_RCVD

as #2 here http://wiki.apache.org/spamassassin/DynablockIssues does LOCAL_AUTH_RCVD work, I can't find it in the SpamAssassin-2.63 source and even when it hits it doesn't stop RCVD_N_DYNABLOCK and friends from hitting for that recieved header. Regards, Rob -- Robert Brooks, Network Man

Re: Bayes Bit Me

> if the two machines use the SAME db version, then yes. > > if they use different, the trick is to use db_dump on the primary > machine and then db_load on the secondary to convert everything > to its own version of db. > Beware... this doesn't always work. I ended up having to trash my corpus

Re: Bayes Bit Me

On Thu, 15 Jul 2004 10:17:54 -0700, Gary Smith <[EMAIL PROTECTED]> wrote: > It's common... The short answer is yes, copy bayes_* over, and restart. > We have a job that does this every so often to our offsite cluster. > > Actually, we do this on 6 machines. We take the bayes db files one of > ou

Spamassassin Manual?

Hi All,I am running spamassassin with the following method:/usr/local/bin/spamd -a -c -d (perl)And I can see in my headers that it is scanning my e-mail. However I am not sure how to add domains to my blacklist. Or is the spamd program reading some remote blacklist? I think I can edit the local.cf

SpamCopURI redirect question

Sorry if this is a bit off-topic, but I have a question about the SpamCopURI plugin. I'm running Slackware 9.1 and have all the pre-requisite perl modules all up to date. When I try to install SpamCopURI from CPAN, I get a few test errors on the open redirects. I forced the install and i

Re: SA2.63 and SPF ?

At 01:42 PM 7/16/2004 +0200, Per Jessen wrote: http://spamassassin.apache.org/tests.html it appears that SPF tests can be done with 2.63? Is that correct or is the list of tests shown a bit premature? The "tests" page is automaticaly built from the .cf files, however the SA 2.63 .cf files do NOT

RE: SARE_FORGED_EBAY fp/question

I think it's being kicked back by one of the users. Received: by vjo-lxutil-07.primeexalia.com (Postfix, from userid 120) id 811B216A02B; Fri, 16 Jul 2004 06:43:27 -0700 (PDT) Received: from bradys-sbs.bbsbradys.local (03-007.001.usol.com [64.18.238.7]) by vjo-lxutil-07.primeexalia

RE: SARE_FORGED_EBAY fp/question

Quoting Gary Smith <[EMAIL PROTECTED]>: Is the list operating correctly? I sent this email on the 13th and received it on the 16th at the MTA. This problem was fixed already. I've noticed this also this morning. I received duplicate copies of replies to messages i sent a couple days ago. It a

RE: SARE_FORGED_EBAY fp/question

Title: SARE_FORGED_EBAY fp/question Is the list operating correctly?  I sent this email on the 13th and received it on the 16th at the MTA.  This problem was fixed already.   -Original Message- From: Gary Smith [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 13, 2004 4:22 PM To: Ga

Logo Contest reminder

Don't forget about the contest! Some great stuff there already! http://wiki.apache.org/spamassassin/LogoContestEntries Chris Santerre System Admin and SARE Ninja http://www.rulesemporium.com http://www.surbl.org 'It is not the strongest of the species that survives, not the most intelligent, but

Re: Clustering spamassassin

We're currently evaluating how to cluster spamassassin without having to have different heuristic databases (shared knowledge). I guess the best way to go is to put the spamd/.spamassassin in a shared file system so that every machine connected to it could read/write to the same file. I haven't bee

Re: Bayes Bit Me

>>> Matt Kettler <[EMAIL PROTECTED]> 07/15/04 02:59PM >>> I've also had some moderate successes with GroupWise's "forward as attachment", but you'll have to experiment a bit. Forward it to an account on your forwarding mailserver that doesn't get forwarded. Matt, thanks. I'm new to Postfix and

Re: Log to qmailmrtg7

Mario Gamito wrote: Hi, I have this script to log spamassain in multilog format so it can be read by qmailmrtg7 for statistics. I use spamassassin option to send the log information to stdout. Then pipe that to multilog. Then point qmailmrtg7 at that multilog directory. Like so: spamd -c -

3.0 Pre2 install

I had the same problem when trying to build rpm from tar ball on pre1. I renamed pre1 to remove the -pre in the name and once doing that it worked. On pre2 when I remove the -pre2 from the name it is named Mail-SpamAssassin-3.0.0.tar.gz. When I run the following I still have problems. ]# rpmb

SA2.63 and SPF ?

>From this page: http://spamassassin.apache.org/tests.html it appears that SPF tests can be done with 2.63? Is that correct or is the list of tests shown a bit premature? thanks, Per Jessen, Zurich

Re: SURBLs and skip_rbl_checks

On Fri, 16 Jul 2004 04:09:26 -0700, Jeff Chan wrote: > Chris' answer is reasonable that the 3.0 code hopefully may > treat SURBLs like other RBLs in that skip_rbl_checks may work > as expected. Reading the source code would probably reveal > this if so. I would assume that it is not too late to g

Re: SURBLs and skip_rbl_checks

On Monday, July 12, 2004, 2:48:10 AM, Sean Doherty wrote: > On Fri, 2004-07-09 at 19:50, Fred wrote: >> For a test to be considered a net test, it needs to have a tflag set to net. >> For your surbl rules, they should all have: >> tflags SURBL_WHATEVERnet >> This will force them to be skipped

Re: SURBL - Spam URI Realtime Blocklist

On Wednesday, July 7, 2004, 4:08:26 PM, Evans Martin wrote: > I have been working to implement the SURBL and believe I have it set up > correctly. However, I don't know how to verify this. Can anyone give > me any pointers regarding verification that SURBL is in fact working? The official testp

Re: [SURBL-Discuss] Spamassassin 3 problems with SURBL

On Wednesday, June 23, 2004, 3:30:24 AM, Scott Truman wrote: > Hi, > I am having trouble using the new URIDNSBL plugin. I have the following > in my local.cf file: > loadpluginMail::SpamAssassin::Plugin::URIDNSBL > score URIBL_WS_SURBL 3.0 > score URIBL_SBL 3.0

Log to qmailmrtg7

Hi, I have this script to log spamassain in multilog format so it can be read by qmailmrtg7 for statistics. I use spamassassin option to send the log information to stdout. Then pipe that to multilog. Then point qmailmrtg7 at that multilog directory. Like so: spamd -c -v -u vpopmail -s s

RE: spamassassin

They weren't being attacked, and the main site was never down.  SpamAssassin has become an Apache project and has discontinued use of it's previous mirror websites, which probably accounts for your perceived outage.  www.spamassassin.org now redirects to http://spamassassin.apache.org/.

spamassassin

Hi   Are the main spamassassin systems backup and running again? I know they were being attacked a while ago and were shutdown. Is everything ok now and not going back down in a hurry again?     Travis ModNet Internet Services

[NOTICE] editing the wiki

Hi all -- Due to wiki spam, the ASF now requires that a UserPreferences ( http://wiki.apache.org/spamassassin/UserPreferences ) profile be created before pages can be edited. It's pretty trivial to create a user profile, and the votes were all positive on -dev, so we're ok with this ;) --j.

Re: Want to save hundreds on software? bdwc (fwd)

On Wed, 14 Jul 2004, Mike Burger wrote: > I'm not sure how this happened. > > As can be seen by the report in the headers, this hits a whole lot of > tests, but the score comes up as "nan" and ^X-SPAM-STATUS comes up as "no" > > This is running SA 2.63. Any ideas on how this scoring happened? Ye

Re: forwarding tagged spam from mail relay server ?

At 06:27 PM 7/15/2004, you wrote: it's not a question for a qmail mailing list, pure qmail knows nothing of Spamassassin or even qmail-scanner Doesn't matter. All SA does is mark a message as spam - nothing more. Perhaps a procmail script or other method. Evan

Re: forwarding tagged spam from mail relay server ?

Evan Platt wrote: At 05:05 PM 7/15/2004, you wrote: hi all. i may have asked this question before but did not receive a response. is anyone aware of any way to accomplish tagged spam forwarding to another address from a relay server without needing to hack the qmail-scanner script every time i n

Re: forwarding tagged spam from mail relay server ?

At 05:05 PM 7/15/2004, you wrote: hi all. i may have asked this question before but did not receive a response. is anyone aware of any way to accomplish tagged spam forwarding to another address from a relay server without needing to hack the qmail-scanner script every time i need to upgrade ? P

forwarding tagged spam from mail relay server ?

hi all. i may have asked this question before but did not receive a response. i have a qmail mail relay server forwarding all mail to an internal mail server. the mail relay is currently setup with qmail, qmail-scanner, spamassassin, mcafee av all is working really well, as been for over 1.