Re: bayes?!

2005-01-13 Thread Jon Drukman
kalin mintchev wrote: X-Spam-Status: Yes, score=4.6 required=3.0 tests=DATE_IN_FUTURE_12_24, DRUGS_ERECTILE,DRUGS_PAIN,FORGED_HOTMAIL_RCVD,MIME_BASE64_TEXT autolearn=no version=3.0.2 note that the ones that were detected scored 4 - lower than the actual default of the recomended 5

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-13 Thread Jeff Chan
On Wednesday, January 12, 2005, 8:15:12 AM, Darren Coleman wrote: Figured out why URIBL_SBL wasn't firing for me for that email - I can't even resolve that domain! Have tried resolving it on several machines I have shell access to (including external machines who peer with different

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-13 Thread Jeff Chan
On Wednesday, January 12, 2005, 4:57:57 PM, Jeff Chan wrote: On Wednesday, January 12, 2005, 8:15:12 AM, Darren Coleman wrote: Figured out why URIBL_SBL wasn't firing for me for that email - I can't even resolve that domain! Have tried resolving it on several machines I have shell access to

Re: bayes?!

2005-01-13 Thread kalin mintchev
thanks Jon.. first, your Bayes rules don't appear to be hitting. that's what i'm thinking also... this could be because you haven't trained enough mail. you need minimum 200 ham and 200 spam before they kick in. i did feed about 2500 messages into both spam and ham the first time, last

Re: White list problem

2005-01-13 Thread Ollie Acheson
On Tue, Jan 11, 2005 at 11:04:12PM -0500, Matt Kettler wrote: Ollie, Something isn't adding up in a big way. Have you run spamassassin --lint lately? Perhaps SA is getting heavily confused. Indeed you are right about things not adding up. Is there any chance you could re-run the message

Re: bayes?!

2005-01-13 Thread kalin mintchev
sa-learn --dbpath /var/spamdb/bayes --dump magic i get this: 0.000 0 3 0 non-token data: bayes db version 0.000 0 2852 0 non-token data: nspam 0.000 0 2515 0 non-token data: nham 0.000 0 116330

Dumping auto-whitelist?

2005-01-13 Thread simon matthews
Does anyone have a script/perl file that will dump auto-whitelists, including the scores? Simon

Re: AWL problem??

2005-01-13 Thread Robert Menschel
Hello John, Wednesday, January 12, 2005, 4:54:24 AM, you wrote: JF I've never seen this before - I don't know squat about AWL, but I JF sure need help understanding the following headers! JF X-Spam-Status: Yes, hits=26.1 required=5.0 JF tests=AWL,BAYES_00,SARE_HEAD_XBEEN autolearn=ham

Re: SARE Custom rules

2005-01-13 Thread Robert Menschel
Hello Joe, Wednesday, January 12, 2005, 5:31:32 AM, you wrote: JZ I posted this some time ago, but I was wondering if anyone had any JZ information on the timeframe for when some of the SARE custom rules JZ would be updated? I know there had been some posts by the developers JZ about updating

Perl-only install possible?

2005-01-13 Thread Richard Connamacher
I've got a web hosting account that has been receiving an enormous amount of spam recently. While I can ssh into it, I can edit my sendmail.cf file, and I can run Perl 5.6.0 applications, I cannot access C compiler tools. Also, the version of Perl included is only 5.6.0. SpamAssassin 3.0.0 and

Re: Training byessian filter in a gatway situation.

2005-01-13 Thread Johann Spies
On Wed, Jan 12, 2005 at 12:43:34PM +, Anthony Metcalf wrote: As the server my mail client interacts with is not the one spam filtering, I would like to set up two accounts on the gateway box, ham and spam, so I can farward mail to those accounts, and have spamassassin learn what is ham

THANKS - Re: AWL problem??

2005-01-13 Thread John Fleming
Bayes in the current version will not autolearn against itself (will not auto-learn as ham something it thought was spam, or v.v.) -- it might be a good enhancement to also have bayes look at AWL if active, and if AWL disagrees with the auto-learn judgment, then do not auto-learn. Looking at

Re: spamassassin + filter.sh

2005-01-13 Thread werner detter
hi again, Matt Kettler wrote: At 11:53 AM 1/11/2005, werner detter wrote: thanks for your help, migration to spamc/spamd wouldn't be the problem - it's even planned within the next half year. there is only one reason this hasn't been done so far: there is no desicion from the company management

autoreporting spam/ham by forward mails

2005-01-13 Thread KaiserM
Hello all, i configured procmail like this site describes: http://www.stearns.org/doc/spamassassin-setup.current.html#autoreporting now my question: how can i test if sa-learn learns the spam/ham mails right. below are the executed commands: /usr/bin/spamassassin -r -d -a

Re: maintaining the 2.6 branch

2005-01-13 Thread Per Jessen
Martin Hepworth wrote: Another reason [snip] I shall be sticking to 2.64 for the forsee-able future as 3.02 gives me no advantage and quite a high likelihood of more spam dropping through the system! Not specific to Martins reply, but thanks to all the responses regarding continued use

SA List Subject/From Indicators

2005-01-13 Thread Rob McEwen
RE: SA List Messages Subject/From Indicators Often, when I receive messages from the SA list, the FROM displays the name of the sender rather than the name of the list. Furthermore, the SUBJECT line is often an obvious SA-related phrase... BUT NOT ALWAYS. I find it annoying sometimes when this

RE: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-13 Thread Darren Coleman
-Original Message- From: Jeff Chan [mailto:[EMAIL PROTECTED] Sent: 13 January 2005 01:07 To: Jeff Chan Cc: Darren Coleman; Jack L. Stone; Loren Wilton; users@spamassassin.apache.org Subject: Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules On Wednesday,

Re: Perl-only install possible?

2005-01-13 Thread Martin Hepworth
Richard could always use SA 2.64... would work fine, might even be able to get the URIRBL pluging installed which is really useful. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Richard Connamacher wrote: I've got a web hosting account that has been

Re: Perl-only install possible?

2005-01-13 Thread Richard Connamacher
Tried that. While 'perl Makefile.PL' seemed to work (after giving me a warning), 'make' choked because it couldn't find any installed C compilers. (I doubt I'll be able to install the updated MakeMaker that it requested. However, that wouldn't change the fact that it seems to want a C compiler to

Re: Lots of spam being missed with SA 3.0.2 + lots of RulesEmp rules

2005-01-13 Thread Jeff Chan
On Thursday, January 13, 2005, 1:19:58 AM, Darren Coleman wrote: From: Jeff Chan [mailto:[EMAIL PROTECTED] % dig 2.0.0.127.sbl.spamhaus.org a ; DiG 8.3 2.0.0.127.sbl.spamhaus.org a ;; res options: init recurs defnam dnsrch ;; got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id:

Re: Perl-only install possible?

2005-01-13 Thread Martin Hepworth
Richard hmm perl -MCPAN -eshell and install J/JM/JMASON/Mail-SpamAssassin-2.64.tar.gz will prob choke as well then :-( -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Richard Connamacher wrote: Tried that. While 'perl Makefile.PL' seemed to work (after giving

HOtmail

2005-01-13 Thread Ron McKeating
Hi we run all our incoming email through spamassassin (uptodate as of last month) we notice however that a disproportionate number of emails from hotmail get false positived. Is anybody aware of a reason for this ? Ron

RE: SA List Subject/From Indicators

2005-01-13 Thread Rob McEwen
Thanks Bob Joseph. Good suggestions! Rob McEwen

Deep recursion

2005-01-13 Thread C.Zimmermann
Hi, I am runnig FreeBSD 4.9 SpamAssassin Server version 3.0.1 Perl 5.6.1 and get at lot of deep recursions . spamd[29517]: Deep recursion on subroutine Mail::SpamAssassin::Message::Node::finish at /usr/local/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Message/Node.pm line 659. spamd[29517]:

Re: Question Regarding sa-learn

2005-01-13 Thread Michael Parker
On Thu, Jan 13, 2005 at 08:42:31AM -0600, Jason Novak wrote: In the previous version of spamassassin I've been able to see what the data actually is (rather than the example of '3bd6a7ead4'). Any ideas what I may be missing? SA 3.0 switched from storing tokens in a raw format to storing

Re: spamassassin + filter.sh

2005-01-13 Thread Matt Kettler
At 03:38 AM 1/13/2005, werner detter wrote: Yeah, so? Why should this inhibit you from using spamd now? hm, but even if i implement spamd/spamc - i still got the problem that every mail (even if it's bigger then e.g. 4mb is passed through spamd/spamc then insteat of spamassassin. please correct

Re: THANKS - Re: AWL problem??

2005-01-13 Thread Chris Thielen
John Fleming wrote: Bayes in the current version will not autolearn against itself (will not auto-learn as ham something it thought was spam, or v.v.) -- it might be a good enhancement to also have bayes look at AWL if active, and if AWL disagrees with the auto-learn judgment, then do not

Re: spamc exit code 98

2005-01-13 Thread Larry
Have you tried it with the -E switch? L -Original Message- From: Dallas L. Engelken [mailto:[EMAIL PROTECTED] Posted At: Wednesday, January 12, 2005 4:09 PM Posted To: sa-users Conversation: spamc exit code 98 Subject: RE: spamc exit code 98 I suspect some kind of timeout

Re: empty body

2005-01-13 Thread Matt Kettler
At 06:27 AM 1/13/2005, Ingo Reinhart wrote: Hello! How can I test for an empty Mailbody? Any existing rule? Best Regards, Ingo Grab the latest SVN image from the downloads page and look at EMPTY_MESSAGE.

RE: phishing rule

2005-01-13 Thread hamann . w
I was suggesting - a while ago, to make a more general check (which would probably be a plugin) - to detect phish based on different urls (e.g check whether they end up at the same ip) but was told that quite a lot of legit email have differing urls While I understand that datbased systems may

Re: Question Regarding sa-learn

2005-01-13 Thread Jon Drukman
Jason Novak wrote: I'm currently running spamassassin 3.0.2 and everything seems to be running well. sa-learn works correctly when I want to learn spam and ham messages. My only question is when it comes to looking at the data when I run 'sa-learn --dump all' I get the following example.

sa-learn freezing?

2005-01-13 Thread Sunny Forro
Interesting problem: I blew away the old Bayes DB because I couldn't get it to upgrade for 3.0.2. No problem, I'll just run some spam/ham through sa-learn to create a new one. So after running 15000 spams through or so, about 1200 or so at a time, I tried to learn some spam from today.

Re: Spam getting through

2005-01-13 Thread Thomas Arend
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Donnerstag, 13. Januar 2005 12:47 schrieb Joe Zitnik: We've been having a group of the same type of e-mails making it through spamassassin. These are the e-mails that have the get a capable html e-mailer line in them. I have yet to see any

Re: autoreporting spam/ham by forward mails

2005-01-13 Thread Thomas Arend
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Donnerstag, 13. Januar 2005 09:47 schrieb [EMAIL PROTECTED]: Hello all, i configured procmail like this site describes: http://www.stearns.org/doc/spamassassin-setup.current.html#autoreporting now my question: how can i test if sa-learn

Re: upgrading methods

2005-01-13 Thread Thomas Arend
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Mittwoch, 12. Januar 2005 21:42 schrieb Hans du Plooy: I was wondering what method you guys gals prefer for upgrading spamassassin on the more mainstream rpm based distros (MDK/Fedora/rh/SUSE). I have a SUSE 9.1 server, running spamassassin

Re: spamc exit code 98

2005-01-13 Thread Daryl C. W. O'Shea
Larry wrote: Have you tried it with the -E switch? The only way I can reproduce the return code, 98, is if I pass spamc a valid, running, spamd host and give it /dev/null as input. Passing it a bad hostname results, expectedly, in 68. spamc -E -t 60 -d valid.spamd.server /dev/null Why you