Re: another auto_learn

2004-08-28 Thread John Fleming
- Original Message - From: "Matt Kettler" <[EMAIL PROTECTED]> To: "John Fleming" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Friday, August 27, 2004 10:41 PM Subject: Re: another auto_learn > At 06:32 PM 8/27/2004 -0500, John Fleming wrote:

another auto_learn

2004-08-28 Thread John Fleming
I've read the FAQ about why autolearning might not appear to be working. However, nothing seems to fit. Bayes -IS- working, but no ham or spam is being autolearned. I've recently installed a new Linux distro and only have 200-some spam and ham learned. I know there have been messages analyzed th

Re: (re)installing spamassassin

2004-08-18 Thread John Fleming
- Original Message - From: "Doc Webb" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, August 17, 2004 4:23 PM Subject: (re)installing spamassassin > I have spamassassin 2.64 installed and working. > > During the install process it asked be questions along the way for each > e

Help sa-stats error

2004-08-17 Thread John Fleming
I've switched from running Debian Unstable to Debian Testing. Since the new installation, I can't run sa-stats: Luke:/etc/mail/spamassassin# perl sa-stats.pl -u -s 'yesterday' -e 'now' --logfile=/var/log/mail.log Can't locate Date/Manip.pm in @INC (@INC contains: /etc/perl /usr/local/lib/perl/5.8

Re: Switched distro quest

2004-08-16 Thread John Fleming
> I thought that the "default" location was actually /etc/mail/spamassassin. > -- > Mike Burger It depends on your definition of "default". ;-) The "main default" stuff is in /etc/mail/spamassassin. However, on Debian systems, there is a little file in /etc/default (/etc/default/spamassassin)

Re: Switched distro quest

2004-08-16 Thread John Fleming
> John Fleming wrote: > > I seem to remember that in Debian unstable, I had a little conf file in > > /etc/spamassassin - something like spamassassin.conf (??). It seems like > > there was a place in there to tell it a couple of important things, but I > > can't

Switched distro quest

2004-08-16 Thread John Fleming
I had SA working sweetly on Debian unstable. Today I have been trying to get things going on a new install of Debian testing on the same machine. I'm using the same SA version (2.63) as before. I used apt-get for the SA install. If I feed the mail to "spamassassin" via procmail, it works. Howe

Re: Unlearn

2004-07-23 Thread John Fleming
- Original Message - From: "Mike Burger" <[EMAIL PROTECTED]> To: "John Fleming" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, July 23, 2004 6:46 AM Subject: Re: Unlearn > "sa-learn --forget < /path/to/file/with/message"

Unlearn

2004-07-23 Thread John Fleming
I finally have a need to unlearn a message that was auto-learned. My messages are in mbox format. How can I unlearn an individual email? Tnx - John

Re: Discarding spam based on score range

2004-07-09 Thread John Fleming
This receipe should delete only those scoring 8 or higher in procmail: :0 * ^X-Spam-Level: \*\*\*\*\*\*\*\* /dev/nullFrom: http://www.exit0.us/index.php/So%20you%20want%20to%20'delete'%20all%20your%2 0spam!- Original Message - From: "Craig Mayers" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTE

Re: sa-stats -u only showing root

2004-07-08 Thread John Fleming
> You may also be able to use "| spamc -u $LOGNAME" in your > /etc/procmailrc, although I don't know offhand where/when/from what > $LOGNAME is set. There should be some way to get the destination user > information into procmail's processing, and pass it to spamc. Something like $LOGNAME is wha

Work-around Re: sa-stats -u only showing root

2004-07-08 Thread John Fleming
- Original Message - From: John Fleming To: [EMAIL PROTECTED] Sent: Wednesday, July 07, 2004 4:08 PM Subject: sa-stats -u only showing root When I run sa-stats.pl and ask for breakdown by users (-u), I'm only showing data for one user, and that is root. Consistent with this

Re: sa-stats -u only showing root

2004-07-07 Thread John Fleming
- Original Message - From: "Kris Deugau" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, July 07, 2004 5:02 PM Subject: Re: sa-stats -u only showing root > John Fleming wrote: > > I guess I'm running spamc/spamd as root as judged

sa-stats -u only showing root

2004-07-07 Thread John Fleming
When I run sa-stats.pl and ask for breakdown by users (-u), I'm only showing data for one user, and that is root.  Consistent with this, the mail.log file shows messages being received for root, at least as seen by spamd.   I guess I'm running spamc/spamd as root as judged by other entries i

Re: How to filter spam to another mailbox

2004-07-02 Thread John Fleming
- Original Message - From: "Eleanor Cheung" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, July 01, 2004 7:28 PM Subject: How to filter spam to another mailbox Hi, Does anyone know how to filter spam to another mailbox? I know how to trash messages with certain spam score

Re: Log

2004-07-02 Thread John Fleming
- Original Message - From: "Jim Maul" <[EMAIL PROTECTED]> To: "Mario Gamito" <[EMAIL PROTECTED]> Cc: "ML spamassassin" <[EMAIL PROTECTED]> Sent: Thursday, July 01, 2004 10:40 AM Subject: Re: Log > Quoting Mario Gamito <[EMAIL PROTECTED]>: > > > Hi, > > > > Sorry for not being so clear i

Re: spamassasin and clamassasin question

2004-07-01 Thread John Fleming
> Hi > > I have question about useing clamassasin and spamassasin together > > i have install em both ans spamassasin or rather spamc works as a charm > but when i add clamassasin in the procmailrc it stops removing spams but > it does remove suspected virus files > > my procmailrc looks like this

Re: amavis_new with spamassasin

2004-06-23 Thread John Fleming
On Wed, 2004-06-23 at 09:37, Harald Arnold wrote: > I installed amavis and spamassassin with the instructions > of Scott Vintinner. I am using: > Where are those found please? Thanks

Re: FAQ? Howto include files in local.cf

2004-06-19 Thread John Fleming
- Original Message - From: "Brandon Kuczenski" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, June 19, 2004 4:21 PM Subject: FAQ? Howto include files in local.cf > I haven't been able to find anything about this in the documentation: is > it necessary to actually copy-and-p

SA on Debian vs Fedora

2004-06-18 Thread John Fleming
I had SA running smoothly on a Fedora Core 2 system, including Bayes and some rule sets I added in local.cf. Now I'm trying to get the same functionality going on a Debian Sid system. Has anyone done both and know of any important configuration differences that would make or break it working? I

OT-ClamAV-SA

2004-06-06 Thread John Fleming
I think I have clamav going with SpamAssassin now. I'm getting headers added by SpamAssassin and Clamav. So far, only clean-of-virus emails. Should clamav pickup the eicar_com test virus in a zip file? How else to test clamav setup in real action? Tnx - Off-list replies probably best. Sri bandw

RE: Limit number of spamd processes

2004-06-04 Thread John Fleming
> each spawned process sit around much longer than it needed too. I've got a > RH9 Dell 2.4 ghz P4 with 512 MB RAM, 40 GB IDE drive, and each process takes > about a second or so. This is interesting to me. What spamd process time range are people seeing? Mine's about 10-12 sec, Fedora Core 2, >

Re: statistics and procmailrc

2004-06-03 Thread John Fleming
> If you instead call spamc, the logging in /var/log/maillog will be > amenable to analysis by the sa-learn program DUH! I meant sa-stats.pl!

Re: statistics and procmailrc

2004-06-03 Thread John Fleming
On Thu, 2004-06-03 at 08:18, Dimitrios wrote: > Hello, i'm using this method of running SA on my system: > > :0fw > | /home/user/spamassassin/sausr/bin/spamassassin > > Is there any way i can generate statistics from that? > > I haven't found any commandline options which are > able to save a lo

Re: bayes_* R/W: tie failed

2004-06-03 Thread John Fleming
- Original Message - From: "Matt Kettler" <[EMAIL PROTECTED]> To: "John Fleming" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Wednesday, June 02, 2004 11:22 PM Subject: Re: bayes_* R/W: tie failed > At 10:06 PM 6/2/04 -0500, John Fleming wrot

Re: bayes_* R/W: tie failed

2004-06-03 Thread John Fleming
- Original Message - From: "John Fleming" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, June 02, 2004 10:06 PM Subject: bayes_* R/W: tie failed > wrong. I'm also not sure of the effects of the error. I'm calling spamc > with

bayes_* R/W: tie failed

2004-06-03 Thread John Fleming
Would someone explain the following maillog entries to me? I know it has something to do with the user and permissions, but I'm not sure what's wrong. I'm also not sure of the effects of the error. I'm calling spamc with no options, e.g. /usr/sbin/spamc. The properties of /var/.spamassassin ar

Re: is bayes working ?

2004-05-30 Thread John Fleming
If Bayes is working, you will see something about Bayes in the header.  Here are the pertinent headers from your message as received here:   X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on LukeX-Spam-Level: X-Spam-Status: No, hits=-4.8 required=5.0 tests=BAYES_00,HTML_MESSAGE, RM_r

? permissions lockfile

2004-05-23 Thread John Fleming
I was watching my maillog for another reason and noticed the error below. SpamAssassin appears to be working properly in spite of the error, but I'm not sure what problems might be inherent in the problem. My bayes data is in /var/.spamassassin, owner and group root, permissions 755. Should these

Re: Spamassassin not scoring all incoming e-mails

2004-03-22 Thread John Fleming
On Mon, 2004-03-22 at 17:04, Bryan Haase wrote: > Hi, > HELP! I have small amount of email that somehow bypasses the SA scoring and > is sent directly on. The style of email varies from html, multi-part message > in MIME format, and Base64 Encoded Files. SA blocks around 1200+ emails > daily. My

Transfer to new server

2004-03-16 Thread John Fleming
I had SA well-learned and then switched to using a new server. I transferred my local.cf file and all the rules files from /etc/mail/spamassassin to the new server. I also transferred all of the bayes_toks, bayes_seen, and bayes_journal files to the corresponding directory on the new server and r

Re: RH8 how-to?

2004-03-12 Thread John Fleming
> 1) Is there a RH8 how-to document anywhere? Something that leads to a > successful implementation of the current release (2.63)? > 2) Are the RH8 issues also found in Fedora Core 1? What are the RH8 issues? Once I learned how to use it, I don't have any issues with it in Fedora. > 3) I have b

Re: sa-stats.pl problem

2004-03-07 Thread John Fleming
- Original Message - From: "Darren Honeyball [ML]" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, March 06, 2004 7:10 PM Subject: sa-stats.pl problem > Running SA 2.63, sa-stats.pl, Solaris 9, qmail-1.03, qmail-scanner 1.20, > clamav 0.67 > > When I run sa-stats.pl I get

Re: sa-stats help?

2004-03-06 Thread John Fleming
> Do `perldoc sa-stats.pl` for documentation. > > Also, try > > ./sa-stats.pl --start "today midnight" --end "now" --logfile /var/log/mail > > substituting the name of your local mail logfile. Thanks, Bob. Do I have to be running Sendmail, or can it work with Postfix?? - John

sa-stats help?

2004-03-06 Thread John Fleming
Where is any info about any required setup prior to running sa-stats? I tried it and got the following output: [EMAIL PROTECTED] john]# perl sa-stats.pl Use of uninitialized value in division (/) at sa-stats.pl line 271, line 28840. Use of uninitialized value in division (/) at sa-stats.pl line

Re: Spam Statistics

2004-03-05 Thread John Fleming
> > organization that receives all this spam. What I would like to have is > > some typical statistics to show him What's wrong here please? [EMAIL PROTECTED] spamstats-0.5b]# perl spamstats0.5b.pl -help Can't locate Compress/Zlib.pm in @INC (@INC contains: /usr/lib/perl5/5.8.3/i386-linux-thread

Re: Spam Statistics

2004-03-05 Thread John Fleming
- Original Message - From: "Matt Thoene" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, March 05, 2004 3:39 PM Subject: Re: Spam Statistics > On Friday, March 5, 2004 @ 10:30:31 AM [-0700], Jason Granat wrote: > > > Feel free to keep sending. I'll drop a 3 inch binder on his

Re: NEWBIE: Not extremely happy with SA filtering so far

2004-03-02 Thread John Fleming
- Original Message - From: "Thomas Muller" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, March 02, 2004 6:10 AM Subject: NEWBIE: Not extremely happy with SA filtering so far > SpamAssassins, > > I've been trying out CommuniGate in conjunction with SpamAssassin for a > while

Doctor in white coat

2004-03-01 Thread John Fleming
Sorry - Lost the thread - The image of the doc in white coat selling drugs seems to be easily learned by Bayes, which added enough to tag by itself:   X-Spam-Report: * 1.2 HTML_IMAGE_ONLY_02 BODY: HTML: images with 0-200 bytes of words * 0.1 HTML_50_60 BODY: Message is 50% to 60% HTML * 0.1

Re: Using user_prefs an a systemwide installation

2004-03-01 Thread John Fleming
My understanding is that user_prefs overrides what is in /etc/mail/spamassassin/local.cf. I use local.cf for site-wide settings, but users can still change their own user_prefs file for their preferences. - Original Message - From: "Juergen Klueners" <[EMAIL PROTECTED]> To: <[EMAIL PROTE

Re: Please - some being missed?

2004-02-28 Thread John Fleming
- Original Message - From: "Loren Wilton" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, February 28, 2004 9:01 AM Subject: Re: Please - some being missed? > I've noticed here (where we have a very old and slow machine to run SA on) > that every now and then something will

Re: tag as no

2004-02-28 Thread John Fleming
- Original Message - From: "Butrus orman" <[EMAIL PROTECTED]> To: "SpamAssassin Mailing List" <[EMAIL PROTECTED]> Sent: Saturday, February 28, 2004 7:02 AM Subject: tag as no > X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on > pepino.despiertapr.com > X-Spam-Level: > X

Please - some being missed?

2004-02-28 Thread John Fleming
I can't seem to get any help on this problem. I get email forwarded from another off-site server. That server is apparently running SA. Some, but not all, of these emails are not evaluated at all by my server's SA. I have examples of some that get my SA's headers added to those from the other s

Tag by score?

2004-02-28 Thread John Fleming
I only know of one way to tag - spam above a certain threshhold, e.g. 5.00. Is there a way to tag score 5-10 with one label and scores >10 with another? Thanks! - John

Some not filtered?

2004-02-25 Thread John Fleming
I didn't get anywhere with this before and want to try again. 99% of my mail gets the expected evaluation by SA. However, most days there are a few msgs that are apparently not filtered by SA. Please look at the headers below. This email was received at another server (at churchquest.com) and t

Re: Why some don't get scanned?

2004-02-22 Thread John Fleming
- Original Message - From: "Raquel Rice" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, February 21, 2004 7:57 PM Subject: Re: Why some don't get scanned? > On Sat, 21 Feb 2004 19:51:55 -0500 > "John Fleming" <[EMAIL PROTE

Re: Why some don't get scanned?

2004-02-22 Thread John Fleming
- Original Message - From: "John Fleming" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Saturday, February 21, 2004 7:46 PM Subject: Why some don't get scanned? > I have an occasional mail that doesn't appear to get evaluated by my SA. > The

Why some don't get scanned?

2004-02-22 Thread John Fleming
I have an occasional mail that doesn't appear to get evaluated by my SA. The headers below are from a mail that was forwarded from an off-site account to my Linux machine running SA. I get lots of mail this way (forwarded from other accts), and almost all get evaluated properly - So why would an o

Re: SPAMD with sa-learn

2004-02-20 Thread John Fleming
- Original Message - From: "jdow" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, February 19, 2004 5:36 PM Subject: Re: SPAMD with sa-learn > > - Original Message - > From: "Jonathan Tai" <[EMAIL PROTECTED]> > On Mon, 2004-02-16 at 00:02, Asif Iqbal wrote: > >> Hi

Why auto-learn

2004-02-16 Thread John Fleming
It's painful, but I have to ask a dumb question again. Why auto-learn messages with, say, a spam score of 9? (Or any score above your spam threshhold?) It seems that to score that high, the types of stuff in that message are ALREADY being recognized as spam. So what's the reasoning behind auto-

Re: Newbie setting up Bayes

2004-02-14 Thread John Fleming
- Original Message - From: "Chris" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Friday, February 13, 2004 10:50 PM Subject: Newbie setting up Bayes I'm really new to SA and just upgraded last night to 2.63. I'm trying to get Bayes filtering setup. I have the following in my local

Re: 8791 unlink failed: .../bayes.lock

2004-02-11 Thread John Fleming
> Anyone know what causes this bayes.lock msg?? Here's my console: [EMAIL PROTECTED] .spamassassin]# sa-learn --spam --mbox --showdots /home/john/testspams .. Learned from 2 message(s) (2 message(s) examined). [EMAIL PROTECTED] .spamassassin]# ls bayes_seen bayes_toks [EMAIL PROTECTED] .spam

Re: 8791 unlink failed: .../bayes.lock

2004-02-11 Thread John Fleming
- Original Message - From: "John Fleming" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 10, 2004 7:43 PM Subject: 8791 unlink failed: .../bayes.lock > As root, I ran sa-learn on my spam corpus from the /root directory, and I > got a m

8791 unlink failed: .../bayes.lock

2004-02-11 Thread John Fleming
As root, I ran sa-learn on my spam corpus from the /root directory, and I got a msg when it finished like the one below only a different number. Then I ran the same sa-learn command, although from the /root/spamassassin directory (bayes_path), and this time it completed without the "lock" msg. It

Re: Can't re-learn

2004-02-10 Thread John Fleming
- Original Message - From: "John Fleming" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 10, 2004 6:53 AM Subject: Can't re-learn > As you know, I've been struggling to get Bayes going. I'm real close now, > but now hav

Can't re-learn

2004-02-10 Thread John Fleming
As you know, I've been struggling to get Bayes going. I'm real close now, but now have a [new] problem. Each time I've advanced my understanding, I've started over with sa-learn. Based on the counsel of this group, I've done as follows: 1. Delete all bayes_toks, bayes_seen, and bayes_journal f

Re: Bayes not utilized?

2004-02-10 Thread John Fleming
> However, I've had to symlink the various bayes_* files in > ~root/.spamassassin as sa-learn does not seem to respect the bayes_path > option in local.cf. :/ I know what you mean. However, this worked: I made the directory spamassassin in /var. Then I ran sa-learn from /var/spamassassin. The

Bayes not utilized?

2004-02-09 Thread John Fleming
I want the Bayes intelligence to apply site-wide. I don't see any indication in my headers that SA is using Bayes. In local.cf, I have: use_bayes 1 bayes_path /root/.spamassassin/bayes I have run sa-learn on both ham and spam (>200 each) and have bayes_toks and bayes_seen files in: /root/.spama

Where sa-learn puts bayes files?

2004-02-08 Thread John Fleming
I've tried various tests today, and I don't see the pattern. I want to generate Bayes intelligence that will function site-wide. I don't understand any logic for where it puts the bayes_toks and bayes_seen files, nor do I understand whether it matters where they reside. I've tried using the opti

Re: How to start over with Bayes

2004-02-08 Thread John Fleming
- Original Message - From: "Alan Baxter" <[EMAIL PROTECTED]> To: "John Fleming" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Sunday, February 08, 2004 10:47 AM Subject: Re: How to start over with Bayes > On Sun, 8 Feb 2004 04:59:32 -0500, &

How to start over with Bayes

2004-02-08 Thread John Fleming
I didn't get an answer to my first post, so I want to try again. I want to know how to "start fresh" with Spamassassin/Bayes. I want to know this in general, and I have a specific reason too. My mail is in mbox format, but the first time I ran sa-learn, I didn't specify the --mbox option. Thus

1st try sa-learn only learned 1 msg

2004-02-07 Thread John Fleming
OK, I finally tried sa-learn for the first time: sa-learn --spam --showdots --siteconfigpath=/etc/mail/spamassassin /home/john/SPAM It worked for quite awhile (I went out to eat), and finally said it learned from ONE message (400+ in directory). However, I realize now that I should've added the

sa-learn ? for which users?

2004-02-07 Thread John Fleming
I'm finally ready to try learning some messages. If I run sa-learn on a folder of spam in the user John directory, ie /home/john/mail/SPAM, does the learned knowledge only relate to that user's email? If so, is there a way to make it relate site-wide? (I have users with similar spam preferences

Re: Phish Rule Question

2004-02-06 Thread John Fleming
- Original Message - From: "Kevin A. McGrail" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, February 05, 2004 6:37 PM Subject: Re: Phish Rule Question > > I am trying to write a rule that helps catch phishing emails. These > emails > > do NOT have any url spoofing in them

Re: Subject Tag

2004-02-03 Thread John Fleming
- Original Message - From: "Geoff Dyment" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Tuesday, February 03, 2004 2:54 PM Subject: Subject Tag > How hard would it be to get a subject tag for this list in the subject like > the old list? Outlook doesn't like filtering based on recip

Re: How to catch critters like this one??

2004-02-03 Thread John Fleming
=> That's the Tripwire ruleset. I see various of these rulesets that are in the form filename.cf. Are these used automatically if the ruleset file is in the proper SA directory, or do they have to be specifically invoked somewhere? - John

Re: Directing mail to folder

2004-02-03 Thread John Fleming
- Original Message - From: Dean M. Wilder To: [EMAIL PROTECTED] Sent: Monday, February 02, 2004 7:23 PM Subject: Directing mail to folder Hi I just joined this list tonight. I use Outlook Express. I can't use the subject line to direct this mail to a folder. I tried using the To: