- Original Message -
From: "Matt Kettler" <[EMAIL PROTECTED]>
To: "John Fleming" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Friday, August 27, 2004 10:41 PM
Subject: Re: another auto_learn
> At 06:32 PM 8/27/2004 -0500, John Fleming wrote:
I've read the FAQ about why autolearning might not appear to be working.
However, nothing seems to fit. Bayes -IS- working, but no ham or spam is
being autolearned. I've recently installed a new Linux distro and only have
200-some spam and ham learned. I know there have been messages analyzed
th
- Original Message -
From: "Doc Webb" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, August 17, 2004 4:23 PM
Subject: (re)installing spamassassin
> I have spamassassin 2.64 installed and working.
>
> During the install process it asked be questions along the way for each
> e
I've switched from running Debian Unstable to Debian Testing. Since the new
installation, I can't run sa-stats:
Luke:/etc/mail/spamassassin# perl sa-stats.pl -u -s 'yesterday' -e
'now' --logfile=/var/log/mail.log
Can't locate Date/Manip.pm in @INC (@INC contains: /etc/perl
/usr/local/lib/perl/5.8
> I thought that the "default" location was actually /etc/mail/spamassassin.
> --
> Mike Burger
It depends on your definition of "default". ;-)
The "main default" stuff is in /etc/mail/spamassassin. However, on Debian
systems, there is a little file in /etc/default (/etc/default/spamassassin)
> John Fleming wrote:
> > I seem to remember that in Debian unstable, I had a little conf file in
> > /etc/spamassassin - something like spamassassin.conf (??). It seems
like
> > there was a place in there to tell it a couple of important things, but
I
> > can't
I had SA working sweetly on Debian unstable. Today I have been trying to
get things going on a new install of Debian testing on the same machine.
I'm using the same SA version (2.63) as before. I used apt-get for the SA
install.
If I feed the mail to "spamassassin" via procmail, it works. Howe
- Original Message -
From: "Mike Burger" <[EMAIL PROTECTED]>
To: "John Fleming" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Friday, July 23, 2004 6:46 AM
Subject: Re: Unlearn
> "sa-learn --forget < /path/to/file/with/message"
I finally have a need to unlearn a message that was auto-learned. My
messages are in mbox format. How can I unlearn an individual email? Tnx -
John
This receipe should delete only those scoring 8 or higher in procmail:
:0
* ^X-Spam-Level: \*\*\*\*\*\*\*\*
/dev/nullFrom:
http://www.exit0.us/index.php/So%20you%20want%20to%20'delete'%20all%20your%2
0spam!- Original Message -
From: "Craig Mayers" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTE
> You may also be able to use "| spamc -u $LOGNAME" in your
> /etc/procmailrc, although I don't know offhand where/when/from what
> $LOGNAME is set. There should be some way to get the destination user
> information into procmail's processing, and pass it to spamc.
Something like $LOGNAME is wha
- Original Message -
From: John Fleming
To: [EMAIL PROTECTED]
Sent: Wednesday, July 07, 2004 4:08 PM
Subject: sa-stats -u only showing root
When I run sa-stats.pl and ask for breakdown by users (-u), I'm only showing
data for one user, and that is root. Consistent with this
- Original Message -
From: "Kris Deugau" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, July 07, 2004 5:02 PM
Subject: Re: sa-stats -u only showing root
> John Fleming wrote:
> > I guess I'm running spamc/spamd as root as judged
When I run sa-stats.pl and ask for breakdown by
users (-u), I'm only showing data for one user, and that is root.
Consistent with this, the mail.log file shows messages being received for root,
at least as seen by spamd.
I guess I'm running spamc/spamd as root as judged
by other entries i
- Original Message -
From: "Eleanor Cheung" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, July 01, 2004 7:28 PM
Subject: How to filter spam to another mailbox
Hi,
Does anyone know how to filter spam to another mailbox?
I know how to trash messages with certain spam score
- Original Message -
From: "Jim Maul" <[EMAIL PROTECTED]>
To: "Mario Gamito" <[EMAIL PROTECTED]>
Cc: "ML spamassassin" <[EMAIL PROTECTED]>
Sent: Thursday, July 01, 2004 10:40 AM
Subject: Re: Log
> Quoting Mario Gamito <[EMAIL PROTECTED]>:
>
> > Hi,
> >
> > Sorry for not being so clear i
> Hi
>
> I have question about useing clamassasin and spamassasin together
>
> i have install em both ans spamassasin or rather spamc works as a charm
> but when i add clamassasin in the procmailrc it stops removing spams but
> it does remove suspected virus files
>
> my procmailrc looks like this
On Wed, 2004-06-23 at 09:37, Harald Arnold wrote:
> I installed amavis and spamassassin with the instructions
> of Scott Vintinner. I am using:
>
Where are those found please? Thanks
- Original Message -
From: "Brandon Kuczenski" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, June 19, 2004 4:21 PM
Subject: FAQ? Howto include files in local.cf
> I haven't been able to find anything about this in the documentation: is
> it necessary to actually copy-and-p
I had SA running smoothly on a Fedora Core 2 system, including Bayes and
some rule sets I added in local.cf. Now I'm trying to get the same
functionality going on a Debian Sid system. Has anyone done both and know
of any important configuration differences that would make or break it
working?
I
I think I have clamav going with SpamAssassin now. I'm getting headers
added by SpamAssassin and Clamav. So far, only clean-of-virus emails.
Should clamav pickup the eicar_com test virus in a zip file? How else to
test clamav setup in real action? Tnx - Off-list replies probably best.
Sri bandw
> each spawned process sit around much longer than it needed too. I've got a
> RH9 Dell 2.4 ghz P4 with 512 MB RAM, 40 GB IDE drive, and each process takes
> about a second or so.
This is interesting to me. What spamd process time range are people
seeing? Mine's about 10-12 sec, Fedora Core 2, >
> If you instead call spamc, the logging in /var/log/maillog will be
> amenable to analysis by the sa-learn program
DUH! I meant sa-stats.pl!
On Thu, 2004-06-03 at 08:18, Dimitrios wrote:
> Hello, i'm using this method of running SA on my system:
>
> :0fw
> | /home/user/spamassassin/sausr/bin/spamassassin
>
> Is there any way i can generate statistics from that?
>
> I haven't found any commandline options which are
> able to save a lo
- Original Message -
From: "Matt Kettler" <[EMAIL PROTECTED]>
To: "John Fleming" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Wednesday, June 02, 2004 11:22 PM
Subject: Re: bayes_* R/W: tie failed
> At 10:06 PM 6/2/04 -0500, John Fleming wrot
- Original Message -
From: "John Fleming" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, June 02, 2004 10:06 PM
Subject: bayes_* R/W: tie failed
> wrong. I'm also not sure of the effects of the error. I'm calling spamc
> with
Would someone explain the following maillog entries to me? I know it has
something to do with the user and permissions, but I'm not sure what's
wrong. I'm also not sure of the effects of the error. I'm calling spamc
with no options, e.g. /usr/sbin/spamc. The properties of
/var/.spamassassin ar
If Bayes is working, you will see something about Bayes in the
header. Here are the pertinent headers from your message as received
here:
X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
LukeX-Spam-Level: X-Spam-Status: No, hits=-4.8 required=5.0
tests=BAYES_00,HTML_MESSAGE, RM_r
I was watching my maillog for another reason and noticed the error below.
SpamAssassin appears to be working properly in spite of the error, but I'm
not sure what problems might be inherent in the problem. My bayes data is
in /var/.spamassassin, owner and group root, permissions 755. Should these
On Mon, 2004-03-22 at 17:04, Bryan Haase wrote:
> Hi,
> HELP! I have small amount of email that somehow bypasses the SA scoring and
> is sent directly on. The style of email varies from html, multi-part message
> in MIME format, and Base64 Encoded Files. SA blocks around 1200+ emails
> daily. My
I had SA well-learned and then switched to using a new server. I
transferred my local.cf file and all the rules files from
/etc/mail/spamassassin to the new server. I also transferred all of the
bayes_toks, bayes_seen, and bayes_journal files to the corresponding
directory on the new server and r
> 1) Is there a RH8 how-to document anywhere? Something that leads to a
> successful implementation of the current release (2.63)?
> 2) Are the RH8 issues also found in Fedora Core 1?
What are the RH8 issues? Once I learned how to use it, I don't have any
issues with it in Fedora.
> 3) I have b
- Original Message -
From: "Darren Honeyball [ML]" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, March 06, 2004 7:10 PM
Subject: sa-stats.pl problem
> Running SA 2.63, sa-stats.pl, Solaris 9, qmail-1.03, qmail-scanner 1.20,
> clamav 0.67
>
> When I run sa-stats.pl I get
> Do `perldoc sa-stats.pl` for documentation.
>
> Also, try
>
> ./sa-stats.pl --start "today midnight" --end "now" --logfile /var/log/mail
>
> substituting the name of your local mail logfile.
Thanks, Bob. Do I have to be running Sendmail, or can it work with
Postfix?? - John
Where is any info about any required setup prior to running sa-stats? I
tried it and got the following output:
[EMAIL PROTECTED] john]# perl sa-stats.pl
Use of uninitialized value in division (/) at sa-stats.pl line 271,
line 28840.
Use of uninitialized value in division (/) at sa-stats.pl line
> > organization that receives all this spam. What I would like to have is
> > some typical statistics to show him
What's wrong here please?
[EMAIL PROTECTED] spamstats-0.5b]# perl spamstats0.5b.pl -help
Can't locate Compress/Zlib.pm in @INC (@INC contains:
/usr/lib/perl5/5.8.3/i386-linux-thread
- Original Message -
From: "Matt Thoene" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, March 05, 2004 3:39 PM
Subject: Re: Spam Statistics
> On Friday, March 5, 2004 @ 10:30:31 AM [-0700], Jason Granat wrote:
>
> > Feel free to keep sending. I'll drop a 3 inch binder on his
- Original Message -
From: "Thomas Muller" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, March 02, 2004 6:10 AM
Subject: NEWBIE: Not extremely happy with SA filtering so far
> SpamAssassins,
>
> I've been trying out CommuniGate in conjunction with SpamAssassin for a
> while
Sorry - Lost the thread - The image of the doc
in white coat selling drugs seems to be easily learned by Bayes, which added
enough to tag by itself:
X-Spam-Report:
* 1.2 HTML_IMAGE_ONLY_02 BODY: HTML: images with 0-200 bytes of words
* 0.1 HTML_50_60 BODY: Message is 50% to 60% HTML
* 0.1
My understanding is that user_prefs overrides what is in
/etc/mail/spamassassin/local.cf. I use local.cf for site-wide settings, but
users can still change their own user_prefs file for their preferences.
- Original Message -
From: "Juergen Klueners" <[EMAIL PROTECTED]>
To: <[EMAIL PROTE
- Original Message -
From: "Loren Wilton" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, February 28, 2004 9:01 AM
Subject: Re: Please - some being missed?
> I've noticed here (where we have a very old and slow machine to run SA on)
> that every now and then something will
- Original Message -
From: "Butrus orman" <[EMAIL PROTECTED]>
To: "SpamAssassin Mailing List" <[EMAIL PROTECTED]>
Sent: Saturday, February 28, 2004 7:02 AM
Subject: tag as no
> X-Spam-Checker-Version: SpamAssassin 2.63 (2004-01-11) on
> pepino.despiertapr.com
> X-Spam-Level:
> X
I can't seem to get any help on this problem. I get email forwarded from
another off-site server. That server is apparently running SA. Some, but
not all, of these emails are not evaluated at all by my server's SA. I have
examples of some that get my SA's headers added to those from the other
s
I only know of one way to tag - spam above a certain threshhold, e.g. 5.00.
Is there a way to tag score 5-10 with one label and scores >10 with another?
Thanks! - John
I didn't get anywhere with this before and want to try again.
99% of my mail gets the expected evaluation by SA. However, most days there
are a few msgs that are apparently not filtered by SA. Please look at the
headers below. This email was received at another server (at
churchquest.com) and t
- Original Message -
From: "Raquel Rice" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, February 21, 2004 7:57 PM
Subject: Re: Why some don't get scanned?
> On Sat, 21 Feb 2004 19:51:55 -0500
> "John Fleming" <[EMAIL PROTE
- Original Message -
From: "John Fleming" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Saturday, February 21, 2004 7:46 PM
Subject: Why some don't get scanned?
> I have an occasional mail that doesn't appear to get evaluated by my SA.
> The
I have an occasional mail that doesn't appear to get evaluated by my SA.
The headers below are from a mail that was forwarded from an off-site
account to my Linux machine running SA. I get lots of mail this way
(forwarded from other accts), and almost all get evaluated properly - So why
would an o
- Original Message -
From: "jdow" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, February 19, 2004 5:36 PM
Subject: Re: SPAMD with sa-learn
>
> - Original Message -
> From: "Jonathan Tai" <[EMAIL PROTECTED]>
> On Mon, 2004-02-16 at 00:02, Asif Iqbal wrote:
> >> Hi
It's painful, but I have to ask a dumb question again. Why auto-learn
messages with, say, a spam score of 9? (Or any score above your spam
threshhold?) It seems that to score that high, the types of stuff in that
message are ALREADY being recognized as spam. So what's the reasoning
behind auto-
- Original Message -
From: "Chris" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, February 13, 2004 10:50 PM
Subject: Newbie setting up Bayes
I'm really new to SA and just upgraded last night to 2.63. I'm trying to
get Bayes filtering setup. I have the following in my local
> Anyone know what causes this bayes.lock msg??
Here's my console:
[EMAIL PROTECTED] .spamassassin]# sa-learn --spam --mbox --showdots
/home/john/testspams
..
Learned from 2 message(s) (2 message(s) examined).
[EMAIL PROTECTED] .spamassassin]# ls
bayes_seen bayes_toks
[EMAIL PROTECTED] .spam
- Original Message -
From: "John Fleming" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 10, 2004 7:43 PM
Subject: 8791 unlink failed: .../bayes.lock
> As root, I ran sa-learn on my spam corpus from the /root directory, and I
> got a m
As root, I ran sa-learn on my spam corpus from the /root directory, and I
got a msg when it finished like the one below only a different number. Then
I ran the same sa-learn command, although from the /root/spamassassin
directory (bayes_path), and this time it completed without the "lock" msg.
It
- Original Message -
From: "John Fleming" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 10, 2004 6:53 AM
Subject: Can't re-learn
> As you know, I've been struggling to get Bayes going. I'm real close now,
> but now hav
As you know, I've been struggling to get Bayes going. I'm real close now,
but now have a [new] problem. Each time I've advanced my understanding,
I've started over with sa-learn. Based on the counsel of this group, I've
done as follows:
1. Delete all bayes_toks, bayes_seen, and bayes_journal f
> However, I've had to symlink the various bayes_* files in
> ~root/.spamassassin as sa-learn does not seem to respect the bayes_path
> option in local.cf. :/
I know what you mean. However, this worked: I made the directory
spamassassin in /var. Then I ran sa-learn from /var/spamassassin. The
I want the Bayes intelligence to apply site-wide. I don't see any
indication in my headers that SA is using Bayes.
In local.cf, I have:
use_bayes 1
bayes_path /root/.spamassassin/bayes
I have run sa-learn on both ham and spam (>200 each) and have bayes_toks and
bayes_seen files in:
/root/.spama
I've tried various tests today, and I don't see the pattern. I want to
generate Bayes intelligence that will function site-wide. I don't
understand any logic for where it puts the bayes_toks and bayes_seen files,
nor do I understand whether it matters where they reside.
I've tried using the opti
- Original Message -
From: "Alan Baxter" <[EMAIL PROTECTED]>
To: "John Fleming" <[EMAIL PROTECTED]>
Cc: <[EMAIL PROTECTED]>
Sent: Sunday, February 08, 2004 10:47 AM
Subject: Re: How to start over with Bayes
> On Sun, 8 Feb 2004 04:59:32 -0500, &
I didn't get an answer to my first post, so I want to try again.
I want to know how to "start fresh" with Spamassassin/Bayes. I want to know
this in general, and I have a specific reason too.
My mail is in mbox format, but the first time I ran sa-learn, I didn't
specify the --mbox option. Thus
OK, I finally tried sa-learn for the first time:
sa-learn --spam --showdots --siteconfigpath=/etc/mail/spamassassin
/home/john/SPAM
It worked for quite awhile (I went out to eat), and finally said it learned
from ONE message (400+ in directory). However, I realize now that I
should've added the
I'm finally ready to try learning some messages. If I run sa-learn on a
folder of spam in the user John directory, ie /home/john/mail/SPAM, does the
learned knowledge only relate to that user's email?
If so, is there a way to make it relate site-wide? (I have users with
similar spam preferences
- Original Message -
From: "Kevin A. McGrail" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, February 05, 2004 6:37 PM
Subject: Re: Phish Rule Question
> > I am trying to write a rule that helps catch phishing emails. These
> emails
> > do NOT have any url spoofing in them
- Original Message -
From: "Geoff Dyment" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Tuesday, February 03, 2004 2:54 PM
Subject: Subject Tag
> How hard would it be to get a subject tag for this list in the subject
like
> the old list? Outlook doesn't like filtering based on recip
=> That's the Tripwire ruleset.
I see various of these rulesets that are in the form filename.cf. Are these
used automatically if the ruleset file is in the proper SA directory, or do
they have to be specifically invoked somewhere? - John
- Original Message -
From: Dean M. Wilder
To: [EMAIL PROTECTED]
Sent: Monday, February 02, 2004 7:23 PM
Subject: Directing mail to folder
Hi
I just joined this list tonight. I use Outlook Express. I can't use the
subject line to direct this mail to a folder. I tried using the To:
67 matches
Mail list logo