Changing an entry in my Bayes database.

I'm seeing a lot of spam slip through today. The entry in my Bayes database is 0.351 31 18 1105745757 www.q*e*n*.com (The *'s indicate the same letter as before, so qqee??) I don't want any more positive hits on this. I believe that the 0.351 is the weight based off of the

Re: Begginer Spam getting through

ok, Bayes it not working, cant find any docs on how to configure Bayes. i'm sure there is but my googling skills arent doing the job. Any ideias? Angelo Quoting Thomas Arend [EMAIL PROTECTED]: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Freitag, 14. Januar 2005 18:52 schrieb [EMAIL

Make fails

I am trying to build SpamAssassin 3.0.2 on RH9 and it fails when I try to run make. The error message is: /usr/bin/perl spamc/configure.pl --prefix=/usr --sysconfdir=/etc/mail/spamassassin --datadir=/usr/share/spamassassi n --enable-ssl=no cd spamc /usr/bin/perl version.h.pl version.h.pl:

Re: Verizon hosting spammers :)

On Friday, January 14, 2005, 3:26:35 PM, Alex Broens wrote: Chris Santerre wrote: Brief header I'm not too interested in. HTML code showing verizon site. Should we block all mysite pages? /sniker/ a DEFANGED_Onmouseover=window.status='See Your Savings!';return true;

Re: Verizon hosting spammers :)

On Friday, January 14, 2005, 2:13:27 PM, Chris Santerre wrote: HTML code showing verizon site. Should we block all mysite pages? /sniker/ a DEFANGED_Onmouseover=window.status='See Your Savings!';return true; href=http://mysite.verizon.net/resoxfmz/1.htm;img border=0

Re: Changing an entry in my Bayes database.

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Samstag, 15. Januar 2005 01:12 schrieb Mike Wiebeld: I'm seeing a lot of spam slip through today. The entry in my Bayes database is 0.351 31 18 1105745757 www.q*e*n*.com (The *'s indicate the same letter as before, so qqee??)

Re: Begginer Spam getting through

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Samstag, 15. Januar 2005 01:16 schrieb [EMAIL PROTECTED]: ok, Bayes it not working, cant find any docs on how to configure Bayes. i'm sure there is but my googling skills arent doing the job. Any ideias? Hello Angelo try man

Re: Make fails

Giff Hammar said: I am trying to build SpamAssassin 3.0.2 on RH9 and it fails when I try to run make. The error message is: /usr/bin/perl spamc/configure.pl --prefix=/usr --sysconfdir=/etc/mail/spamassassin --datadir=/usr/share/spamassassi n --enable-ssl=no cd spamc /usr/bin/perl

Re: Make fails

On Fri, Jan 14, 2005 at 07:47:45PM -0500, Giff Hammar wrote: version.h.pl: version.h.pl: version.h.pl: Digest:: SHA1 object version 2.01 does not match bootstrap parameter 2.07 at /usr/lib/perl5/5.8.0/i386-linux-thread-multi/DynaLoa der.pm line 249. Any ideas on how to make this work?

Re: Make fails

Hi Giff, I recently had a lot of problems getting SA 3.0.2 to work, and it was due to upgrading perl from 5.6.0 to 5.8.6 See thread: what the hell is sha1_hex.al ?? about 2 weeks ago on this list. A lot of people suggested that I upgrade the offending perl module via CPAN, which i did,

Re[2]: empty body

Hello Stuart, Friday, January 14, 2005, 9:17:56 AM, you wrote: SJ __MIME_ATTACHMENT, I believe, requires a new feature not in 3.0.2 so you SJ won't be able to simply drop in this rule. The problem is that without SJ that rule, you'll match messages with an attachment but no other body text. SJ

Re: Odd hanging on mail servers

Hi Matt, maybe you could try running some mail manually through spamassassin, or spamc - to see what's causing delay. I've never used spamc/spamd, so I'm not sure what to do there, but save a message as /tmp/mailmsg and cat /tmp/mailmsg | spamassassin -t -D should allow you to see the

Re: False positive in 70_sare_header0

Hello Christoph, Friday, January 14, 2005, 9:50:27 AM, you wrote: CMT in 70_sare_header0.cf rule SARE_RECV_SPAM_DOMN0a, mediaways.net CMT is listed as an apparent spammer domain. CMT Telefonica Germany uses mediaways.net for their dial-ups CMT (they are the a large ISP in Germany, specialized in

Re: Verizon hosting spammers :)

Jeff Chan wrote: On Friday, January 14, 2005, 3:26:35 PM, Alex Broens wrote: Chris Santerre wrote: Brief header I'm not too interested in. HTML code showing verizon site. Should we block all mysite pages? /sniker/ a DEFANGED_Onmouseover=window.status='See Your Savings!';return true;

Re: Spam getting through

We use a program called Guinevere, that works with Novell GroupWise systems to filer the e-mail after it has passed through SA. All of the suggestions I have received seem to point to the fact that this may be where the error lies. I appreciate all the suggestions by the group. That's about

Re: Verizon hosting spammers :)

HTML code showing verizon site. Should we block all mysite pages? /sniker/ a onmouseover=window.status='See Your Savings!';return true; Personally I block anything that I can find a window.status= in. They are all phish as near as I can tell. Loren

Re: False positive in 70_sare_header0

Hi, ## Robert Menschel ([EMAIL PROTECTED]): Can you forward me a few complete emails with headers, non-spam, that demonstrate this? (My contribution to The Corpus was sent off-list). SARE rules are built from our experience, and scored according to the emails in our corpora, and none of us

Re: spamassassin-3.0.2 doesnt recognize spam mails

At 10:54 AM 1/15/2005, Zé wrote: I use mandrake with kde-3.3.2. After i installed spamassassin-spamc-3.0.2-1mdk stoped classifing spam emails. No more spam mails were recognized. Have you checked that SA is working at all by running spamassassin --lint? It should run silently. If it complains,

RE: SA restarting problems, Address already in use

What is the output of netstat? I will add a 'netstat' command to my 'spamassassin' init script, before the spamd command, in order to see what listens to port 783 at that time. I will post the output of netstat when available. So did I. And I waited for the same problem to happen again. I

Re: Verizon hosting spammers :)

--On Saturday, January 15, 2005 6:25 AM -0800 Loren Wilton [EMAIL PROTECTED] wrote: Personally I block anything that I can find a window.status= in. They are all phish as near as I can tell. No false positives? If not, you might enter a bugzilla to get it entered as an official rule. I'd love

Training ham

Title: Training ham Greetings, Using SA 3.0.2 . I'm also using postfix/amavisd. I built a rule to negatively score, for my AWL, anything sent from my network outside. Is there anyway I can pump all outbound messages through sa-learn? I don't like the idea that someone replying to an

Spamassassin cutting mails short

I've recently started to receive emails with everything below (qmail 14692 invoked from network); 15 Jan 2005 20:22:01 - cut off, it is simply non existant. When I try it without delivering to spamassassin via the /var/qmail/bin/qmail-queue (it's debian). it works, but then i've got no

Re[2]: False positive in 70_sare_header0

Hello Christoph, Saturday, January 15, 2005, 7:08:44 AM, you wrote: Can you forward me a few complete emails with headers, non-spam, that demonstrate this? CMT (My contribution to The Corpus was sent off-list). Received and applied to the corpus. Thanks. SARE rules are built from our

Re: Training ham

On Sat, Jan 15, 2005 at 03:07:27PM -0500, Jason Gauthier wrote: Is there anyway I can pump all outbound messages through sa-learn? What about tagging all mails with a From: [EMAIL PROTECTED] with an unreasonable negative score (lets say, -100), and thean hava SA auto-learning them as ham?