AWL questions (faq?)

2004-10-13 Thread MATSUDA Yoh-ichi
Hello, spamassassinners. I have some question about AWL, perhaps they're classified in novis class. If my questions are FAQ, simply give me only pointer to the documents, please. (1) How to monitor AWL registered listings? In my spambox, there are many various scored mail address. I want

Weird problem - not fixed

2004-10-13 Thread Rick Macdougall
Hi, Well, what I thought was fixed with the /root problem with a -u Spamd user in spamd has not gone away, spamd is still trying to create everything with root privileges. Do the devs have any ideas for me ? Regards, Rick

Re: Spamassasin 3.x amavisd-new

2004-10-13 Thread Mark Martinec
I know (I read changelog now) ... sorry. But I have problem with this combination (SA3 + amavisd-new-20030616-p10): Oct 5 15:33:11 x amavis[25039]: (24614-01) ESMTP: 500 5.5.2 Error: bad syntax; PENALIZE: ... FIY: After PENALIZE: is only one line from email source. Something in SA

[OT] Spammer behaviour

2004-10-13 Thread Alan Munday
I'm in the process of building a couple of new servers and to run some test mail through, put one of them on the tertiary address for a domain. While I know this topic was discussed a while ago I was surprised at what I was seeing in the logs namely; - all traffic to the tertiary was UCE - there

Re: RBL Misfires?

2004-10-13 Thread Jeff Chan
On Tuesday, October 12, 2004, 10:28:06 AM, Nate Schindler wrote: Once in a while, I notice a hit for an RBL-related test that seems a little off. When I check for the existance of a record in the list, I can't find one. Below is a match SA 3 found in an e-mail from one of our dealers. I

Re: AWL questions (faq?)

2004-10-13 Thread Matt Kettler
At 08:25 AM 10/13/2004 +0900, MATSUDA Yoh-ichi wrote: (1) How to monitor AWL registered listings? In my spambox, there are many various scored mail address. I want to monitor registered email address and scoring. I couldn't find method for monitoring or dumping list. If you look in

Expiring AWL entries

2004-10-13 Thread Jason Frisvold
Is there any accepted method for expiring AWL entries? I'm currently using the SQL implementation of AWL. If there was no accepted method, my plan was to add a TIMESTAMP field to the database and expire old records... Thanks! -- Jason 'XenoPhage' Frisvold [EMAIL PROTECTED]

Re: Rewriting subject results in broken up headers

2004-10-13 Thread Loren Wilton
When I configure SpamAssassin to modify the subject of spam, the headers break up in 2 pieces...up to and including the Subject header remain headers. All headers after the Subject header move to the body/message part of the mail! Some people seem to be seeing this, others aren't. I wonder if

Re: *SPAM* feeding frenzy for ws.surbl.org!!!

2004-10-13 Thread Jonathan Nichols
LOL, oh please let me know how that conversation went! Uh...yeah..hello. Is this Tanya? You actually exhist? Ok, thanks. *click* I bet she slept well that night! I got voicemail. :P Good thing about Vonage, you don't get long distance charges. 6 pack of Pyramid Ale offerings, and I'll call

spamassassin and user whitelist/blacklist prefs

2004-10-13 Thread ip.guy
hi my qmail server only acts as the spam/av gateway server to our internal MS server(s). i need to allow users, with mail accounts on our internal server(s), to access the whitelist/blacklist functions of spamassassin but without seeing the entire list, i'm only interested in allowing them to

sa-learn --ham not running from horde/imp.

2004-10-13 Thread Sahil Tandon
I understand my problem might be rooted in Horde, amavisd-new, or Postfix. However, I want to be sure it's not a fundamental misunderstanding (on my part) of how SA should be setup. Postfix filters mail via amavisd-new (which calls SA). Everything runs smoothly except the Report as Spam link

RE: Expiring AWL entries

2004-10-13 Thread Dallas L. Engelken
On Tue, Oct 12, 2004 at 09:31:28PM -0400, Jason Frisvold wrote: Is there any accepted method for expiring AWL entries? I'm currently using the SQL implementation of AWL. If there was no accepted method, my plan was to add a TIMESTAMP field to the database and expire old

Re: sa-learn --ham not running from horde/imp.

2004-10-13 Thread Thomas Bolioli
What is likely happening is that sa-learn is running as root, with nobody's permissions since apache su's itself to nobody by default on RH 9/FC1 (I am assuming this version of linux from the LC_ALL/LANG issue, although mac osx is a possibility). When you click the link in horde, it is

Re: [ot] comments about the mailing list

2004-10-13 Thread M.Lucas
On Tue, 2004-10-12 at 09:26, martin f krafft wrote: 1. ezmlm provides no NOMAIL feature. Many people use different email addresses to read and post, or post from multiple email addresses. I, for one, receive my list mail at an address created specifically for this list (I do

Cannot open bayes databases /var/amavisd/.spamassassin/bayes_* R/O: tie failed: Inappropriate file type or format

2004-10-13 Thread Chris Weiss
I'm using SA in the environment described by Scott Vintinner at http://www.flakshack.com/anti-spam/ (Fairly-Secure Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC). Things had been running smoothly until I recent upgraded from v2.6 to 3.0. The upgrade went

Re: Cannot open bayes databases /var/amavisd/.spamassassin/bayes_* R/O: tie failed: Inappropriate file type or format

2004-10-13 Thread Matt Kettler
At 12:55 AM 10/13/2004 -0700, Chris Weiss wrote: debug: config: SpamAssassin failed to parse line, skipping: rewrite_subject 1 debug: config: SpamAssassin failed to parse line, skipping: use_terse_report 0 debug: config: SpamAssassin failed to parse line, skipping: auto_learn 1 debug: config:

Re: JS and EXE test isn't working?

2004-10-13 Thread Niek
On 10/12/2004 10:22 PM +0200, Brett Romero wrote: I sent the following message through SA 3.0 on Windows. [SNIP HTML] The following were returned: UPPERCASE_25_50 0.10 message body is 25-50% uppercase MISSING_SUBJECT 1.40 Missing Subject: header ALL_TRUSTED -2.80 Did not pass

Re: Strange problem

2004-10-13 Thread Niek
On 10/13/2004 12:41 AM +0200, Rick Macdougall wrote: Hi, I'm running spamd on it's own server with the following command line (under daemontools) exec /usr/local/bin/spamd -q -x -m 10 --max-conn-per-child=20 -i 206.123.6.18 -A 206.123.6.19,206.123.6.18,216.162.64.120 -u Spamd 21 Try this as

RE: upgrade not going to plan

2004-10-13 Thread Alan Munday
-Original Message- From: Ronan [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 13, 2004 11:32 AM To: spam Subject: upgrade not going to plan Just completed an upgrade to v3.0 from 2.63. SA not accepting *any* external connections on the one mailhub i upgraded on. The

spamd header failure

2004-10-13 Thread Roel Bindels
Dear Listers, I'm having problems with spamd. It does not add any information to the header. I'm running version 3.0.0 of SA. I'm using a global procmailrc file. Further am I running a Postfix mailserver and my distro is the SuSE Server. /* SENDER=$1 SHIFT=1 # Until now, mail is

Re: Expiring AWL entries

2004-10-13 Thread Jason Frisvold
On Tue, 12 Oct 2004 22:04:49 -0500, Michael Parker [EMAIL PROTECTED] wrote: How odd, I was just writing a blurb about this in my ApacheCon presentation. In the future, AWL will have some sort of expiration, in the mean time, with SQL, I've had great success with a lastupdate of type TIMESTAMP

Re: Expiring AWL entries

2004-10-13 Thread Jason Frisvold
On Tue, 12 Oct 2004 22:58:43 -0500, Dallas L. Engelken [EMAIL PROTECTED] wrote: John, if you need expiry right now, you can use my patch on bug 3802 if you want. It will basically do what Michael is talking about except for purging count=1 entries.

RE: [OT] Spammer behaviour

2004-10-13 Thread Chris Santerre
-Original Message- From: Alan Munday [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 8:11 PM To: users@spamassassin.apache.org Subject: [OT] Spammer behaviour I'm in the process of building a couple of new servers and to run some test mail through, put one of them on the

New to SpamAssassin, searching for a specific word rule

2004-10-13 Thread Chris Frederick
Hello everyone, I was wondering if SA had a rule or score that you could define a specific word to look for. I don't get a lot of spam mail and SA has been working well so far, but I've been getting a few loan apps lately. They don't get any hits at all: X-Spam-Status: No, hits=0.0

RE: What Missing Subject?

2004-10-13 Thread Chris Santerre
-Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Tuesday, October 12, 2004 6:10 PM To: Brett Romero; [EMAIL PROTECTED] Subject: Re: What Missing Subject? At 05:37 PM 10/12/2004, Brett Romero wrote: What is this test: MISSING_SUBJECT 1.40 Missing Subject:

[ot] If you see this domain in spam....

2004-10-13 Thread Chris Santerre
I need a shower after we removed this domain from SURBL: hypnoticsellingsecrets.com I would like to know if anyone gets a report of spam that has this domain in it. They just make me feel all icky. The more I read their site, the more I wished we didn't remove them. But...I need a spam.

Re: AWL questions (faq?)

2004-10-13 Thread Kris Deugau
Chris wrote: Matt, I take it theres no check_whitelist in the cpan installed version of 2.63? At least I can't find it. I did find check_whitelist from the old 2.41 version I installed via Mandrake RPM a while back. It's always been included in the tarball so far as I recall; whether it

Re: Cannot open bayes databases /var/amavisd/.spamassassin/bayes_* R/O: tie failed: Inappropriate file type or format

2004-10-13 Thread Chris Weiss
Matt Kettler wrote: At 12:55 AM 10/13/2004 -0700, Chris Weiss wrote: debug: config: SpamAssassin failed to parse line, skipping: rewrite_subject 1 debug: config: SpamAssassin failed to parse line, skipping: use_terse_report 0 debug: config: SpamAssassin failed to parse line, skipping:

RE: [ot] If you see this domain in spam....

2004-10-13 Thread Chris Santerre
Exactly. Sometimes you have nothing to go on but the 'feeling' that you are being fed a load of horse crap. Even some of the people who always cry for whitlisting on SURBL felt a little fishy about this one. So we give the benefit of the doubt for the first time. But if we find you did feed us a

More Configuration Questions

2004-10-13 Thread J Thomas Hancock
I apologize for the questions, but this is how my Boss wants things done and who am I to argue with him. I figure he will listen to me better if I have a creditable source, the SpamAssassin mailing list, backing me up versus me by myself. Part 1: My boss is convinced that SpamAssassin

Re: [ot] If you see this domain in spam....

2004-10-13 Thread Christopher X. Candreva
On Wed, 13 Oct 2004, Chris Santerre wrote: I would like to know if anyone gets a report of spam that has this domain in it. They just make me feel all icky. The more I read their site, the more I Icky ? The biggest reason I think this is a scam is -- he obviously hasn't read his own book. I

Re: More Configuration Questions

2004-10-13 Thread Jim Maul
J Thomas Hancock wrote: I apologize for the questions, but this is how my Boss wants things done and who am I to argue with him. I figure he will listen to me better if I have a creditable source, the SpamAssassin mailing list, backing me up versus me by myself. Part 1: My boss is

Re: More Configuration Questions

2004-10-13 Thread Tobias von Koch
Hey, On Wed, 13 Oct 2004 12:10:59 -0500, J Thomas Hancock wrote: JTH[...] JTH What are the thoughts of the members of this list? Does anyone JTH have any other suggestions besides MailScanner and our two JTH solutions? Try amavisd-new. It integrates perfectly into the postfix mail system,

Re: [ot] If you see this domain in spam....

2004-10-13 Thread Robin Lynn Frank
On Wed, 13 Oct 2004 13:13:53 -0400 (EDT) Christopher X. Candreva [EMAIL PROTECTED] wrote: On Wed, 13 Oct 2004, Chris Santerre wrote: I would like to know if anyone gets a report of spam that has this domain in it. They just make me feel all icky. The more I read their site, the more I

Re: More Configuration Questions

2004-10-13 Thread Matt Yackley
Kevin Peuhkurinen said: J Thomas Hancock wrote: I apologize for the questions, but this is how my Boss wants things done and who am I to argue with him. I figure he will listen to me better if I have a creditable source, the SpamAssassin mailing list, backing me up versus me by myself.

I am getting Argument isn't numeric

2004-10-13 Thread scohen
I had this issue before where I got an error like this: Argument isn't numeric in addition (+) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Conf/Parser.pm line 572. I understand that you are supposed to change the rewrite subject line to rewrite_header, which I did. My local.cf file is

Re: I am getting Argument isn't numeric

2004-10-13 Thread Michael Parker
On Wed, Oct 13, 2004 at 04:30:41PM -0400, scohen wrote: bayes_auto_learn That line is the problem, you need a 1 or 0 (zero) there. Michael

Re: Best RBL's to use?

2004-10-13 Thread Kelson
Jerry wrote: Does anyone have a good list of RBL's they use that blocks majority of the spam? This comes up every few months (which is OK - spam changes, and so various lists' effectiveness changes), but the most recent thread was just two weeks ago. Check out the Preferred DNSBL thread:

Re: I am getting Argument isn't numeric

2004-10-13 Thread scohen
On Wed, 13 Oct 2004, Matt Kettler wrote: At 04:30 PM 10/13/2004, scohen wrote: Your error is in the bayes_auto_learn line.. you need to specify a 1 or a 0 after it. Thanks! I can't believe I missed that. Steve Cohen

Spamd children starting as root?

2004-10-13 Thread Ernie Dunbar
I'm running Spamassassin v3.0.0 on FreeBSD 4.9-RELEASE, and I run spamd like this: /usr/local/bin/spamd -A 127.0.0.1 -L -x -u spamc -d -m 10 When I use `ps aux |grep spamd` I get this: spamc 61970 0.5 3.9 21292 20032 ?? Is3:04PM 0:00.47 /usr/local/bin/spamd -A 127.0.0.1 -L -x -u