Re: OT - How often to reboot?

2004-11-30 Thread Rob
On Mon, Nov 29, 2004 at 10:44:45AM -0500, Michael Barnes wrote: I reboot computers after doing a kernel or fundamental OS upgrade that requires a reboot (rare), after a severe weather emergency (a hurricane, very rare), and when the power goes out longer than my UPS has battery power

Re: OT - How often to reboot?

2004-11-30 Thread jdow
From: Rob [EMAIL PROTECTED] On Mon, Nov 29, 2004 at 10:44:45AM -0500, Michael Barnes wrote: I reboot computers after doing a kernel or fundamental OS upgrade that requires a reboot (rare), after a severe weather emergency (a hurricane, very rare), and when the power goes out longer than my

Feature Request: Bayes as a more general detector

2004-11-30 Thread Gray, Richard
We consider the Bayes system as a detector of SPAM, which 'technically' it isn't. What it reports is how close a given message is to one of two sets, given that it has been previously shown examples of each of the two sets. Because this is the case, I'm thinking it should be possible to

New Hardware

2004-11-30 Thread Ronan
Hey list, I am in the quite sureal situation of being given a blank cheque by my boss to buy 2 new servers for SA. They were so impressed with the upgrade to v3 + SURIBLS et al that when i said that our current setup was hitting load max they found some cash for me... :D We are in a

Re: New Hardware

2004-11-30 Thread Jeff Chan
On Tuesday, November 30, 2004, 4:28:35 AM, Ronan Ronan wrote: Hey list, I am in the quite sureal situation of being given a blank cheque by my boss to buy 2 new servers for SA. They were so impressed with the upgrade to v3 + SURIBLS et al that when i said that our current setup

RE: sa-learn ham

2004-11-30 Thread Gustafson, Tim
Gray, Sorry for the delay in response. I just wanted to let you know that your script worked PERFECTLY and I now have a sensible newest atime, which allowed me to expire my database properly. Thanks a million! Tim Gustafson MEI Technology Consulting, Inc [EMAIL PROTECTED] (516) 379-0001 Office

Re: New Hardware

2004-11-30 Thread Martin Hepworth
Ronan I'd go for dual opteron V20z if you want to stick with sun kit. Will outperform the Sparc based stuff. no need to heart-beat, just have the two machines on same MX value and DNS will load balance for you. Would be interesting to see how Solaris 10 compares with Linux in this environment -

Re: New Hardware

2004-11-30 Thread Ronan
Jeff Chan wrote: On Tuesday, November 30, 2004, 4:28:35 AM, Ronan Ronan wrote: Hey list, I am in the quite sureal situation of being given a blank cheque by my boss to buy 2 new servers for SA. They were so impressed with the upgrade to v3 + SURIBLS et al that when i said that our current

Re: New Hardware

2004-11-30 Thread jay
You might also look at Solaris X86. I've just brought up such a box, and am impressed with the performance relative to Linux on the same box. jay Jeff Chan wrote: On Tuesday, November 30, 2004, 4:28:35 AM, Ronan Ronan wrote: Hey list, I am in the quite sureal situation of being given

RE: New Hardware

2004-11-30 Thread Gary W. Smith
We use 4 single processor machines 2.8ghz P4 HT and we are doing 150k per day now without breaking a sweat. We also have two additional backend servers for running spamd. Total 6. I know you said two but if you need to loose just one then your load might be affected. We can bring down half of

Re: New Hardware

2004-11-30 Thread Per Jessen
Ronan wrote: Which one will be better suited to SA? I know SA is more cpu/ram than disk IO so im leaning more toward the AMD approach. The reason there are 2 machines of each is because im gonna implement fail over using heartbeat. Depending on your setup, you can probably do without

wich is the best milter interface for spamassassin?

2004-11-30 Thread Matias Lopez Bergero
Hello, I'm running SA with sendmail using milter-spamc to connect them. It's working ok, but I would like to know about your experiences using SA and milter, and which one you think is the best to use. I have not seeing many people trough the list using milter-spamc, and I like to hear of some

Brightmail

2004-11-30 Thread Gray, Richard
Brightmail seems to be getting a lot of good press on the SPAM front. So I'm wondering, why do people running large mail systems choose SA over corporate offerings. Is it cost? Is it configurability, or performance? Can anyone shed any light on how Brightmail achieves the rather

Re: Sensible way to use SpamCop reporting?

2004-11-30 Thread Carlos Perez
I apologize for jumping into the thread late. I posted to the SpamCop forum concerning how to report spams using the latest SA 3.0 release. http://forum.spamcop.net/forums/index.php?showtopic=3129 To summarize: - generic SC reporting address in SA goes to bit bucket (might as well turn off

Re: New Hardware

2004-11-30 Thread Dennis Davis
Subject: RE: New Hardware Date: Tue, 30 Nov 2004 07:42:02 -0800 From: Gary W. Smith [EMAIL PROTECTED] To: Ronan [EMAIL PROTECTED], spam users@spamassassin.apache.org We use 4 single processor machines 2.8ghz P4 HT and we are doing 150k per day now without breaking a sweat. We also have two

Re: Brightmail

2004-11-30 Thread Matt Kettler
At 11:58 AM 11/30/2004, Gray, Richard wrote: Brightmail seems to be getting a lot of good press on the SPAM front. So I'm wondering, why do people running large mail systems choose SA over corporate offerings. Is it cost? Is it configurability, or performance? Can anyone shed any light on how

Re: Brightmail

2004-11-30 Thread jay
Richard, my day job is tech support for Sun mail systems. I support the integration with both SpamAssassin and Brightmail. Both do a very good job. Brightmail is commercial software, and is sold with a contract that automatically updates it, often. Many customers are more comfortable with

RE: Brightmail

2004-11-30 Thread Damian Mendoza
We sell BrightMail to customers that want a "Commercial" antispam solution and have deep pockets to pay a yearly subscription. We build SA based solutions (http://www.spamgate.us) for customers that want a "low-cost" antispam solution. Regards, Damian From: Gray, Richard

RE: Brightmail

2004-11-30 Thread David Birnbaum
Oddly enough, we went up head-to-head with our SpamAssassin solution against Brightmail three times in a row and won the customer every time. This is running 2.64. We have a single 8-way 3500, but we'll probably be upgrading that soon. David. - On Tue, 30 Nov 2004, Damian Mendoza wrote:

25 AWL AWL: From: address is in the auto white-list?

2004-11-30 Thread Jerry
I have some AWL's listed in my local.cf. However they are getting a postative score of 25 points and being marked as spam. Shouldn't it be scoring the message with a negative score so it doesn't get marked as spam?

ok_locales and ok_language purpose

2004-11-30 Thread Johnson, Robert F
What is the purpose of the ok_languages and ok_locales configurations? I read the POD doc but I am still a bit confused. For example, if Japanese was included in either ok_locales or ok_languages, does that mean that they would be evaluated for spam or ignored? Is it possible to use either of

simulating a live setup / testing spamd

2004-11-30 Thread Peter Matulis
Hi, I am currently on dial-up but I have spamassassin installed and spamd is running. I would like to test my setup in the most realistic way possible given my situation. I have tried forwarding spam I get on my regular windows machine to my lan mailserver (the one on which spamd is running)

Re: ok_locales and ok_language purpose

2004-11-30 Thread Matt Kettler
At 02:12 PM 11/30/2004, Johnson, Robert F wrote: What is the purpose of the ok_languages and ok_locales configurations? I read the POD doc but I am still a bit confused. For example, if Japanese was included in either ok_locales or ok_languages, does that mean that they would be evaluated for

Re: 25 AWL AWL: From: address is in the auto white-list?

2004-11-30 Thread Matt Kettler
At 12:42 PM 11/30/2004, Jerry wrote: I have some AWL's listed in my local.cf. You do? That's not likely true.. AWL has nothing to do with whitelist_from statements and the like. You can't create AWL entries in your local.cf. the AWL is the AUTOMATIC whitelist. It's just that.. automatic. You

Re: Missed spam

2004-11-30 Thread Jeremy Rumpf
On Friday 26 November 2004 10:28 am, Jerry Bell wrote: This spam went through with a score of 0. I'm using 3.01 with most of the sare rulesets. Any ideas on how to catch these? Just as a me too. I've been battling these for the last month or so with SA 3.0.1 with varied results. I run with

Re: reply from sorbs

2004-11-30 Thread David Brodbeck
On Sun, 28 Nov 2004 20:35:31 -0800, Bob Amen wrote And you said an aggressive greet delay. I tried that and found too many false positives with legitimate mail servers that are poorly configured. The only recourse for those false positives is another means of communication (eg. telephone).

Re: OT - How often to reboot?

2004-11-30 Thread David Brodbeck
On Tue, 30 Nov 2004 01:53:20 -0800, jdow wrote From: Rob [EMAIL PROTECTED] My power supply died on Sunday morning, and as much as I wanted it not too, the machine powered off. Doesn't meet any of your above requirements but I'll let it pass this once. Clearly you need to start ordering

SA 3.0 lint error

2004-11-30 Thread Kurt Buff
All, This is a relatively fresh install, new as of last week, not an upgrade of an old system. Ran spamassassin --lint as root, and got the following error: 'Argument isn't numeric in numeric eq (==) at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 578.' Where

Re: Brightmail (really, SA performance statistics)

2004-11-30 Thread Bob Amen
Robert LeBlanc wrote: The closest thing to a standard way of measuring a spam filter's effectiveness is the scientific model that medical researchers use for diagnostic tests. Even so, there are five separate tests, not just one: Thank you for that very well written and helpful explanation!

Re: SA 3.0 lint error

2004-11-30 Thread Matt Kettler
At 03:33 PM 11/30/2004, Kurt Buff wrote: Ran spamassassin --lint as root, and got the following error: 'Argument isn't numeric in numeric eq (==) at /usr/local/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Conf/Parser.pm line 578.' Where might I start in trying to correct this? snip

Re: Brightmail (really, SA performance statistics)

2004-11-30 Thread Bob Amen
Bob Amen wrote: Robert LeBlanc wrote: The closest thing to a standard way of measuring a spam filter's effectiveness is the scientific model that medical researchers use for diagnostic tests. Even so, there are five separate tests, not just one: Thank you for that very well written and

Re: Brightmail (really, SA performance statistics)

2004-11-30 Thread Matt Kettler
At 03:39 PM 11/30/2004, Bob Amen wrote: Thank you for that very well written and helpful explanation! Now, do you have a script that computes the test values from a SA log file that you'd care to share? You can't measure any of those performance metrics from logfiles alone.. there's no way

Re: Brightmail (really, SA performance statistics)

2004-11-30 Thread Robert LeBlanc
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Kettler wrote: | At 03:39 PM 11/30/2004, Bob Amen wrote: | | Thank you for that very well written and helpful explanation! Now, | do you have a script that computes the test values from a SA log file | that you'd care to share? | | | You can't

Re: simulating a live setup / testing spamd

2004-11-30 Thread Peter Matulis
Ok, you have SpamAssassin installed and you have spamd running. Where do you call spamc? I am not using spamc directly. How is that done? Actually, my system does not have a man page on this program. Anyway, I am using a Sendmail milter called smtp-vilter and I guess that it internally

OT: Lycos Make Love Not Spam screensaver

2004-11-30 Thread Kenneth Porter
A screensaver that DDoS's spammer websites: http://www.theregister.co.uk/2004/11/26/lycos_europe_spam_blitz/ http://makelovenotspam.com/intl/ http://www.google.com/search?num=100hl=enlr=safe=offq=lycos+make+love+not+spambtnG=Search

Image Composition Analysis

2004-11-30 Thread Smart,Dan
Messagelabs made a big deal of their option of using First 4 Internet's Image Composition Analysis tool to detect pornographic images. Is anyone in the open source world working on something similar. Catching image only E-mail with pornographic images is really difficult. My users are

Re: Image Composition Analysis

2004-11-30 Thread Evan Platt
Smart,Dan said: Messagelabs made a big deal of their option of using First 4 Internet's Image Composition Analysis tool to detect pornographic images. Is anyone in the open source world working on something similar. Catching image only E-mail with pornographic images is really difficult.

RE: Image Composition Analysis

2004-11-30 Thread Smart,Dan
The ones that get through have bayes poison at the bottom. It did hit a couple of the SARE rules that look for bayes poison, but didn't score enough to kill it. Very well crafted. Dan -Original Message- From: Evan Platt [mailto:[EMAIL PROTECTED] Sent: Tuesday, November 30,