Re: user_prefs: "required_hits" is working but "rewrite_subject" isn't ?

2004-11-29 Thread Rick Macdougall
Andrew Nelson wrote: Hi, I have the following user_prefs: required_hits 5.4 rewrite_subject 1 subject_tag*SPAM* report_safe 0 use_terse_report0 use_bayes 1 auto_learn 1 When I change the required_hits, I can see i

user_prefs: "required_hits" is working but "rewrite_subject" isn't ?

2004-11-29 Thread Andrew Nelson
Hi, I have the following user_prefs: required_hits 5.4 rewrite_subject 1 subject_tag*SPAM* report_safe 0 use_terse_report0 use_bayes 1 auto_learn 1 When I change the required_hits, I can see it working as shown by

Re: Bayes learning

2004-11-29 Thread snowjack
On Mon, 29 Nov 2004 17:24:48 -0500, "Lisa Casey" <[EMAIL PROTECTED]> said: > I changed ownership of the file in /etc/cron.daily from root to defang. No, change that back to root! You don't want the defang user to be able to change *anything* in /etc/cron.daily! Instead, change the script to look

Re: Bayes learning

2004-11-29 Thread Kris Deugau
Lisa Casey wrote: > So I should just drop the -C /etc/mail/spamassassin part in the > script? Yep. Unless you specifically want a different configuration/ruleset for your sa-learn call (odd but not unheard-of) you don't need to tell SA where to find its configuration. > In /etc/mail/spamassassin

Re: Bayes learning

2004-11-29 Thread Lisa Casey
- Original Message - From: "Kris Deugau" <[EMAIL PROTECTED]> To: Sent: Monday, November 29, 2004 5:05 PM Subject: Re: Bayes learning > Aside from the two "make sure you're running as the correct user" > suggestions, I'd change your script a little, to: > > sa-learn --spam --showdots /v

Re: Bayes learning

2004-11-29 Thread Kris Deugau
Lisa Casey wrote: > I'm still fairly new to Spamassassin. I have a question regarding > Bayes learning in Spamassassin. I'm running Spamassassin 3.0.1 on > Redhat Linux. I have one mailbox on this server that receives nothing > but spam and quite a lot of it. I decided that would be a good > mailb

Re: Bayes learning

2004-11-29 Thread Jim Maul
Lisa Casey wrote: - Original Message - From: <[EMAIL PROTECTED]> To: "Lisa Casey" <[EMAIL PROTECTED]> Cc: Sent: Monday, November 29, 2004 4:21 PM Subject: Re: Bayes learning Make sure the user you are running the script as is the same user that spamassassin runs as and that you are logg

Re: Bayes learning

2004-11-29 Thread Lisa Casey
- Original Message - From: <[EMAIL PROTECTED]> To: "Lisa Casey" <[EMAIL PROTECTED]> Cc: Sent: Monday, November 29, 2004 4:21 PM Subject: Re: Bayes learning > Make sure the user you are running the script as is the same user that > spamassassin runs as and that you are logged in as that

RE: Mail::audit & mail::spamassassin is SLOW - not using spamd ?

2004-11-29 Thread Tim A
> -Original Message- > From: Theo Van Dinter <[EMAIL PROTECTED]> > Date: Sun, 28 Nov 2004 19:35:12 -0500 > Subject: Re: Mail::audit & mail::spamassassin is SLOW - not using spamd ? > To: users@spamassassin.apache.org > > > On Mon, Nov 29, 2004 at 11:27:31AM +1100, Andrew Nelson wrote: > >

Re: Bayes learning

2004-11-29 Thread Jim Maul
Lisa Casey wrote: Hi All, I'm still fairly new to Spamassassin. I have a question regarding Bayes learning in Spamassassin. I'm running Spamassassin 3.0.1 on Redhat Linux. I have one mailbox on this server that receives nothing but spam and quite a lot of it. I decided that would be a good mailbox

Re: How does the autolearn feature work?

2004-11-29 Thread M. Possamai
At 22:04 29-11-2004, you wrote: At 02:44 PM 11/29/2004, M. Possamai wrote: How does this autolearn thingy work? What will happen when I turn it on? I mean, how will it know what's spam and what's not spam? It calclulates what score it would have gotten in a non-bayes scenario. There are ajustable

Re: sa-learn on a 15,000 email mbox file?

2004-11-29 Thread snowjack
On Mon, 29 Nov 2004 12:01:02 -0900, "Andy Firman" <[EMAIL PROTECTED]> said: > I just started using Spamassasin 3.0 and am very > impressed with it. Recently, on an old server that I > just started to manage, I just found a spam > infested mbox spool file with 15,000 spams in it. (52MB) > Nobody

Re: Bayes learning

2004-11-29 Thread snowjack
Make sure the user you are running the script as is the same user that spamassassin runs as and that you are logged in as that same user when you run "spamassassin --lint --debug". You're probably training a different database file than the one that's getting used when you run the --lint check. O

Bayes learning

2004-11-29 Thread Lisa Casey
Hi All, I'm still fairly new to Spamassassin. I have a question regarding Bayes learning in Spamassassin. I'm running Spamassassin 3.0.1 on Redhat Linux. I have one mailbox on this server that receives nothing but spam and quite a lot of it. I decided that would be a good mailbox for spamassassin

Re: sa-learn on a 15,000 email mbox file?

2004-11-29 Thread Jim Maul
Andy Firman wrote: I just started using Spamassasin 3.0 and am very impressed with it. Recently, on an old server that I just started to manage, I just found a spam infested mbox spool file with 15,000 spams in it. (52MB) Nobody had checked the mailbox in about 10 months. Is it a good idea to r

Re: How does the autolearn feature work?

2004-11-29 Thread Matt Kettler
At 02:44 PM 11/29/2004, M. Possamai wrote: How does this autolearn thingy work? What will happen when I turn it on? I mean, how will it know what's spam and what's not spam? It calclulates what score it would have gotten in a non-bayes scenario. There are ajustable learn thresholds. If it's under

Re: Messages received via OR

2004-11-29 Thread Matt Kettler
At 02:49 PM 11/29/2004, Rakotomandimby (R12y) Mihamina wrote: How could I diagnosys such a thing ? Use grep to look for it. First check for it in /usr/share/spamassassin. Below is the proper output for 2.64. If you get more, you may have a problem. $ grep RCVD_IN_ORBS /usr/share/spamassassin/* /u

sa-learn on a 15,000 email mbox file?

2004-11-29 Thread Andy Firman
I just started using Spamassasin 3.0 and am very impressed with it. Recently, on an old server that I just started to manage, I just found a spam infested mbox spool file with 15,000 spams in it. (52MB) Nobody had checked the mailbox in about 10 months. Is it a good idea to run sa-learn on this

Re: Messages received via OR

2004-11-29 Thread Rakotomandimby (R12y) Mihamina
On Mon, 2004-11-29 at 20:39, Matt Kettler wrote: > ># spamassassin -V > >SpamAssassin version 2.64 > > If your system actually has a "RCVD_IN_ORBS" rule, then you likely have > some form of config-file corruption and are using rules from an old version > of SA. How could I diagnosys such a thi

Re: SURBL caching

2004-11-29 Thread Matt Kettler
At 06:45 AM 11/29/2004, Ronan wrote: what changes do i need to make to the local.cf site-wide configuration if I am putting the SURBL zone files into my DNS? Am i right in saying that i really dont need to make much change (to SA) other than configuring the dns to act as a secondary to the surb

How does the autolearn feature work?

2004-11-29 Thread M. Possamai
Hi, I was wondering.. How does this autolearn thingy work? What will happen when I turn it on? I mean, how will it know what's spam and what's not spam?

Re: autolearn=unavailable ... ?

2004-11-29 Thread Tuc at Beach House
> On Mon, Nov 29, 2004 at 02:46:50PM -0400, Marc G. Fournier wrote: > > I know its working, since I can see the data updating in the database, an= > d=20 > > some log entries are reported as =3Dspam, =3Dham and =3Dno ... but what i= > s=20 > > =3Dunavailable? > > http://wiki.apache.org/spamassassi

Re: Messages received via OR

2004-11-29 Thread Matt Kettler
At 02:22 PM 11/29/2004, Rakotomandimby (R12y) Mihamina wrote: > By the way, how ancient a version of SA are you using? ORBS hasn't been > used by SA since 2.55. (although alternate-language describes existed > through 2.64, no actual rule exists in the 2.6x or 3.x families) # spamassassin -V SpamAs

Re: Messages received via OR

2004-11-29 Thread Rakotomandimby (R12y) Mihamina
On Mon, 2004-11-29 at 19:19, Matt Kettler wrote: > By the way, how ancient a version of SA are you using? ORBS hasn't been > used by SA since 2.55. (although alternate-language describes existed > through 2.64, no actual rule exists in the 2.6x or 3.x families) # spamassassin -V SpamAssassin v

Re: autolearn=unavailable ... ?

2004-11-29 Thread Theo Van Dinter
On Mon, Nov 29, 2004 at 02:46:50PM -0400, Marc G. Fournier wrote: > I know its working, since I can see the data updating in the database, and > some log entries are reported as =spam, =ham and =no ... but what is > =unavailable? http://wiki.apache.org/spamassassin/AutolearningNotWorking Has so

Re: SQL Bayes Database ... not updating?

2004-11-29 Thread Marc G. Fournier
d'oh ... I searched through the man page looking for 'sql' settings for both, and found the dns/username stuff, but missed the others :( working now, thanks ... On Sun, 28 Nov 2004, Michael Parker wrote: On Sun, Nov 28, 2004 at 11:59:26PM -0400, Marc G. Fournier wrote: My local.cf has the follo

autolearn=unavailable ... ?

2004-11-29 Thread Marc G. Fournier
I know its working, since I can see the data updating in the database, and some log entries are reported as =spam, =ham and =no ... but what is =unavailable? Marc G. Fournier Hub.Org Networking Services (http://www.hub.org) Email: [EMAIL PROTECTED] Yahoo!: yscrappy

Re: Messages received via OR

2004-11-29 Thread Matt Kettler
At 01:19 PM 11/29/2004, Matt Kettler wrote: By the way, how ancient a version of SA are you using? ORBS hasn't been used by SA since 2.55. (although alternate-language describes existed through 2.64, no actual rule exists in the 2.6x or 3.x families) Side note on the subject.. ORBS is in fact dea

Re: Messages received via OR

2004-11-29 Thread Matt Kettler
At 11:08 AM 11/29/2004, Rakotomandimby (R12y) Mihamina wrote: HEllo, I would like to know how to increase the "rate" or the "mark" of a message received from an open relay. In fact, we're 99,9% sure that it's a spam! are'nt we? I would like to set the "rate" of the RCVD_IN_ORBS to 4 (at least). How

[Q]: Spamassassin perl API....

2004-11-29 Thread Chris Bshaw
Hi I hope this isn't a stupid question I was just wondering if it is possible (and reasonably easy) to call specific functions in the SpamAssassin perl code to just check a person's whitelist and blacklist? (i.e. no other checks). By the time the email reaches the machine I am doing this

Re: My IP listed in dnsbl.sorbs.net

2004-11-29 Thread Steve Sobol
Ron McKeating wrote: I could understand if they really were 56k modem dialup ip addresses, but this is a ntl cable modem, the linux server sits on it 24-7 and matches the ip address against the dns entry for my domain every hour by cron. If the ip address changes, then the dns gets updated. Lots of

Re: stats

2004-11-29 Thread rbartlett
http://spamreport.digitalphx.com It is for qmail, but according to the setup Im sure you can use it for other systems. Robert > > > On 11/29/2004 8:03 AM, Ronan wrote: >> just out of curiosity are there any other packages out there that could >> be useful? Im using exim + exiscan w/ SA > > I use

Re: stats

2004-11-29 Thread Rupa Schomaker
On 11/29/2004 8:03 AM, Ronan wrote: > just out of curiosity are there any other packages out there that could > be useful? Im using exim + exiscan w/ SA I use the following: Package: amavis-stats Description: generate rrd statistics from amavis* log amavis-stats is a simple amavis statistics g

Messages received via OR

2004-11-29 Thread Rakotomandimby (R12y) Mihamina
HEllo, I would like to know how to increase the "rate" or the "mark" of a message received from an open relay. In fact, we're 99,9% sure that it's a spam! are'nt we? I would like to set the "rate" of the RCVD_IN_ORBS to 4 (at least). How to ? Is it a good idea ? -- ASPO Infogérance http://as

stats

2004-11-29 Thread Ronan
what sort of spam stats does anyone use on this list?? Im currently using spamstats-0.6a which works fine for the command line but it wont execute the graph portion. It doesnt appear to be dependency related, rather the perl syntax itself. just out of curiosity are there any other packages out t

Re: OT - How often to reboot?

2004-11-29 Thread Michael Barnes
On Sat, Nov 27, 2004 at 09:29:33AM -0500, Dan Barker wrote: > Excuse the bandwidth, but someone on this list is going to know. I've > always tried to reboot windoze boxes at least monthly. Back in "the > day", I'd reboot IBM mainframes each Standard/Daylight Savings > transition, just because I had

RE: No NS resolving, but Net::DNS OK

2004-11-29 Thread Dallas L. Engelken
All, Sorry for the top post :) Sven, Yes, it does not matter. With the DNS proxy enabled on the raptor, all outbound 53/udp is proxied. NS Resources are dropped completely. If you disable the proxy and open outbound port 53/udp and use an internal DNS look at root hints, or use an external n

RE: Strange differences

2004-11-29 Thread Gray, Richard
Title: Strange differences I suspect that the first time you see the mail it is not listed in the various URI blocklists, and when you re-run the message it is.   R From: Thomas Kinghorn [MTNNS -Rosebank] [mailto:[EMAIL PROTECTED] Sent: 29 November 2004 05:42To: users@spamassassin.apache.or

Re: SURBL caching

2004-11-29 Thread Jeff Chan
On Monday, November 29, 2004, 3:45:16 AM, Ronan Ronan wrote: > what changes do i need to make to the local.cf site-wide configuration > if I am putting the SURBL zone files into my DNS? > Am i right in saying that i really dont need to make much change (to SA) > other than configuring the dns

sa-learn question.

2004-11-29 Thread possamai
Hi, I'm new on the list so I'll give a small introduction. Just enough to not be boring :) I live in the Netherlands, I'm 26 years old. I use Spamassassin with sendmail and milter support on a FreeBSD-5.3 system. Now I have a smaal question about sa-learn. I know how it works so that's not the p

SURBL caching

2004-11-29 Thread Ronan
what changes do i need to make to the local.cf site-wide configuration if I am putting the SURBL zone files into my DNS? Am i right in saying that i really dont need to make much change (to SA) other than configuring the dns to act as a secondary to the surbl's dns?? ronan -- Regards Ronan McG

Re: bayes_xx rules - stupid newbie question

2004-11-29 Thread Kai Schaetzl
Steve Sobel wrote on Fri, 26 Nov 2004 13:31:38 -0600 (CST): > How can I find out what triggers these rules, and stop it from happening > on these emails? > These are Bayes scores, go to the documentation and read about Bayes. Bayes_10 means that message was considered spam with a probability be

Re: My IP listed in dnsbl.sorbs.net

2004-11-29 Thread Ron McKeating
On Sat, 2004-11-27 at 13:33, Nicolas wrote: > > > > > Hmmm, but I have my own domain, and I want all my email to come from my > > domain, my isp will not route email from my domain (ntl) through their > > mail servers, they want my to use my [EMAIL PROTECTED] account. I want to > > use my [EMAIL

Re: Mail::audit & mail::spamassassin is SLOW - not using spamd ?

2004-11-29 Thread Martin Hepworth
Andrew what version of SA? what extra rules in /etc/mail/spamassassin? any RBLs or URI RBLs being used? Rather than bringing up SA each time, prob better to have something in th background that catches the email and run SA over it...that startup routines do seem to be kinda slow. I use MailScann

Re: reply from sorbs

2004-11-29 Thread John Rudd
On Nov 28, 2004, at 8:35 PM, Bob Amen wrote: John Rudd wrote: On Nov 28, 2004, at 9:00 AM, Bob Amen wrote: It's very depressing and getting worse, according to my mail servers' statistics. Hm. My mail servers' stats say it's getting better. For example, at home, I think I've only actually seen

Strange differences

2004-11-29 Thread Thomas Kinghorn [MTNNS -Rosebank]
Title: Strange differences Hi List. I have a number of spams that slip through lately. However, running spamassassin -t < message shows a much Higher score than the header when the mail was delivered to my inbox. I have attached the message that was delivered. Below is the output of s

Re: reply from sorbs

2004-11-29 Thread Bob Amen
John Rudd wrote: On Nov 28, 2004, at 9:00 AM, Bob Amen wrote: It's very depressing and getting worse, according to my mail servers' statistics. Hm. My mail servers' stats say it's getting better. For example, at home, I think I've only actually seen 1 spam message in the last month. I think

Re: SQL Bayes Database ... not updating?

2004-11-29 Thread Michael Parker
On Sun, Nov 28, 2004 at 11:59:26PM -0400, Marc G. Fournier wrote: > > My local.cf has the following setup: > > user_scores_dsn > dbi:Pg:dbname=centraldb;host=maildb.hub.org;port=5432 > user_scores_sql_usernamepgsql > user_scores_sql_table userpref > > bayes_sql

SQL Bayes Database ... not updating?

2004-11-29 Thread Marc G. Fournier
My local.cf has the following setup: user_scores_dsn dbi:Pg:dbname=centraldb;host=maildb.hub.org;port=5432 user_scores_sql_usernamepgsql user_scores_sql_table userpref bayes_sql_dsn dbi:Pg:dbname=centraldb;host=maildb.hub.org;port=5432 bayes_sql

Re: reply from sorbs

2004-11-29 Thread Chris
On Sunday 28 November 2004 08:18 pm, you wrote: > > Chris > > > > I would expect to see a cron entry in the syslog. Your snippet did > > > not show anything from cron. Therefore I have my suspicions that > > > cron is not running and that the logs you saw transferring mail was > > > from somethin

Re: reply from sorbs

2004-11-29 Thread Chris
On Sunday 28 November 2004 07:23 pm, Bob Proulx wrote: > > I would expect to see a cron entry in the syslog. Your snippet did > not show anything from cron. Therefore I have my suspicions that cron > is not running and that the logs you saw transferring mail was from > something else. But perhap

Re: reply from sorbs

2004-11-29 Thread Bob Proulx
Chris wrote: I didn't think my "listed in sorbs" and "reply from sorbs" threads would net > so many replies or so much help. What I guess caused all this is that I > was having results of cronjobs sent to me via my ISP. Welcome to the 'net. :-} > Again, I'll reinterate, I don't run a mail ser

Re: Mail::audit & mail::spamassassin is SLOW - not using spamd ?

2004-11-29 Thread Theo Van Dinter
On Mon, Nov 29, 2004 at 11:27:31AM +1100, Andrew Nelson wrote: > I want to use spamassassin through an Exim router pipe to a > Mail:Audit perl script. It's all working very effectively and i'm > impressed by SA's accuracy, but it's incredibly slow and grinds > my server to a halt when activated.

Mail::audit & mail::spamassassin is SLOW - not using spamd ?

2004-11-29 Thread Andrew Nelson
Hi, I want to use spamassassin through an Exim router pipe to a Mail:Audit perl script. It's all working very effectively and i'm impressed by SA's accuracy, but it's incredibly slow and grinds my server to a halt when activated. It's on FreeBSD 5.2.1. I'm not too sure how to make use of the spam