Re: DIGEX

2005-01-18 Thread Matt Kettler
At 02:42 AM 1/18/2005, jdow wrote: Spam really did come from 164.109.26.27. Is DigiEx not marked in any of the BLs around? Why would digex be listed? AFAIK they are an fairly well behaved nowdays. I mean, sure they were notorious in the 1990's, but recently? No listing in any blacklists: http://w

Re: bayes training with whitelisted addresses

2005-01-18 Thread Matt Kettler
At 05:49 PM 1/18/2005, Will Yardley wrote: How smart is SpamAssassin when dealing with whitelisted / blacklisted email addresses and the bayes module? For instance, is it necessary to retrain email which is spam (and would have been marked as spam other than the whitelisting) if the sender or recip

Re: Might spamd be loading my machine?

2005-01-18 Thread Matt Kettler
At 04:44 PM 1/18/2005, Pat Traynor wrote: Lately, I've been having rather high load averages lately on my web/mail server. From what I can tell, the html traffic hasn't gone up that much, so I've got to assume that it's mail-related. Here's the beginning of a "top" that I just ran, sorted by memo

Re: Logging from SpamAssassin / spamd ?

2005-01-18 Thread Matt Kettler
At 06:08 PM 1/18/2005, Brian Ipsen wrote: I've got two different mailservers, both using SA 3.0.2 and Qmail-Scanner 1.24 st One had SA 3.0.2 when QS was configured, the other one has been upgraded from 2.64 to 3.0.2 recently... In the maillog from the one, who initially had 3.0.2, I get these

Re: A good stats script?

2005-01-18 Thread Mike Burger
spamstats.pl On Tue, 18 Jan 2005, MIKE YRABEDRA wrote: > What is a good script that folks are using to generate SA stats off a mail > log? -- Mike Burger http://www.bubbanfriends.org Visit the Dog Pound II BBS telnet://dogpound2.citadel.org or http://dogpound2.citadel.org To be notified of up

A good stats script?

2005-01-18 Thread MIKE YRABEDRA
What is a good script that folks are using to generate SA stats off a mail log?

Logging from SpamAssassin / spamd ?

2005-01-18 Thread Brian Ipsen
Hi, I've got two different mailservers, both using SA 3.0.2 and Qmail-Scanner 1.24 st One had SA 3.0.2 when QS was configured, the other one has been upgraded from 2.64 to 3.0.2 recently... In the maillog from the one, who initially had 3.0.2, I get these log entries: Jan 18 23:16:12 wbel s

bayes training with whitelisted addresses

2005-01-18 Thread Will Yardley
How smart is SpamAssassin when dealing with whitelisted / blacklisted email addresses and the bayes module? For instance, is it necessary to retrain email which is spam (and would have been marked as spam other than the whitelisting) if the sender or recipient address is whitelisted?

Re: bayes 2

2005-01-18 Thread kalin mintchev
> At 03:50 AM 1/18/2005, kalin mintchev wrote: >>spamassassin -D --lint test.txt >> >>where test.txt is a spam message i just used with sa-learn. here is what >> i >>get for the bayes: >> >>debug: cannot use bayes on this message; not enough usable tokens found >>debug: bayes: not scoring message,

Might spamd be loading my machine?

2005-01-18 Thread Pat Traynor
Lately, I've been having rather high load averages lately on my web/mail server. From what I can tell, the html traffic hasn't gone up that much, so I've got to assume that it's mail-related. Here's the beginning of a "top" that I just ran, sorted by memory usage. 4:17pm up 3 days, 4

command line to disable bayes?

2005-01-18 Thread Keith Whyte
Is there a way, or a work around to disable bayes on the command line, similar to using spamassassin -t -L to disable Network tests? i realise i could copy my config , disable bayes in the copied config and then use -C, but maybe a command line option that allowed the specification of a single

Re: spamassassin process a single message for 10 minutes !

2005-01-18 Thread Keith Whyte
It seems ok on my system linux stock 2.2.17 perl 5.8.6 dunno what other libs might make a difference. i ran it like this: wget -O - http://mail.units.it/6474 |spamassassin -t -D it scored thus: X-Spam-Status: Yes, score=15.1 required=9.5 tests=BAYES_50,J_CHICKENPOX_26, J_CHICKENPOX_31,J_CHIC

Re: spamassassin process a single message for 10 minutes !

2005-01-18 Thread Dave Goodrich
Christian Recktenwald wrote: On Tue, Jan 18, 2005 at 10:56:22AM +, Stefano Catani wrote: here is the message: http://mail.units.it/6474 it contains a lot of email addresses and stops our mailserver these are the times on a dual PIII 1GHz (SpamAssassin 3.0.2) time spamc < 6474 real9m59.995s

Re: Memory problems with SA 3.0.1?

2005-01-18 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 [EMAIL PROTECTED] writes: > Are there any memory problems for SA version 3.0.1? We recently upgraded > to 2 gigs of memory on the server and SA just gobbled up the memory. We > dip down to under 20 megs here and there and 30-40 megs the rest of the >

RE: Verizon hosting spammers :)

2005-01-18 Thread Chris Santerre
> >Huh. Reverse DNS on my business DSL line from Verizon comes out as >bdsl.66.15.96.103.gte.net > >(One thing I've asked their tech is if they would delegate reverse DNS >to my name server, but the tech had no idea what I was talking about. >I'll try again later ...) Ditto for Conversent :/ --

Re: Verizon hosting spammers :)

2005-01-18 Thread Kelson
j o a r wrote: I was _hammered_ all throughout last year by messages to unknown accounts from machines in the sc0pub.verizon.net segment (nn = 01 - 99). Eventually I had to blacklist anything matching that pattern. Seems to be a lot more quiet now though. Actually, I suspect those are (misguided

Re: Verizon hosting spammers :)

2005-01-18 Thread Morris Jones
Menno van Bennekom wrote: Mojo wrote: Alas, I'm moving to a Verizon business DSL account for my server. Is there any distinction between residential DSL and business DSL in their network addresses? I don't know but my postfix check on dsl-verizon.net is based on DNS not on ip-address. So if you ch

Re: Verizon hosting spammers :)

2005-01-18 Thread Menno van Bennekom
> Mojo wrote: > Alas, I'm moving to a Verizon business DSL account for my server. Is > there any distinction between residential DSL and business DSL in their > network addresses? I don't know but my postfix check on dsl-verizon.net is based on DNS not on ip-address. So if you change the dsl-veriz

Memory problems with SA 3.0.1?

2005-01-18 Thread rbartlett
Are there any memory problems for SA version 3.0.1? We recently upgraded to 2 gigs of memory on the server and SA just gobbled up the memory. We dip down to under 20 megs here and there and 30-40 megs the rest of the time. I lowered the number of processes from 15 to 10 and according to top the RSS

Re: spamassassin process a single message for 10 minutes !

2005-01-18 Thread Christian Recktenwald
On Tue, Jan 18, 2005 at 10:56:22AM +, Stefano Catani wrote: > here is the message: > http://mail.units.it/6474 > > it contains a lot of email addresses and stops our mailserver > > these are the times on a dual PIII 1GHz (SpamAssassin 3.0.2) > > time spamc < 6474 > real9m59.995s > user

Re: bayes 2

2005-01-18 Thread Matt Kettler
At 03:50 AM 1/18/2005, kalin mintchev wrote: spamassassin -D --lint test.txt where test.txt is a spam message i just used with sa-learn. here is what i get for the bayes: debug: cannot use bayes on this message; not enough usable tokens found debug: bayes: not scoring message, returning undef debug

SpamAssassin Timing Out? Bayes?

2005-01-18 Thread David Thurman
Our system seems to be getting sporadic at times, all of the sudden spam will flood in and after checking the header I am finding this on the messages getting by: SpamAssassin (SpamAssassin rebuilding) We are running sa-learn as a cron job. I am currently running this in our cron job. #! /bin/s

Re: URIBL_SBL

2005-01-18 Thread Matt
Works now. Thanks. Matt Matt install Net::DNS from CPAN perl -MCPAN -eshell install Net::DNS the RH RPMs are nortious at sticking stuff in stupid places that only other RH RPM based packages can see. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Matt wrote

Re: whitelisting localhost

2005-01-18 Thread Theo Van Dinter
On Tue, Jan 18, 2005 at 04:58:12PM +0100, ADNET GHISLAIN wrote: > I use spamassassin 2.64 and i want to configure it so every mail sent > by the local server is whitelisted or not even scanned by spamassassin. The only way to skip being scanned by spamassassin is not to call it. You need to config

whitelisting localhost

2005-01-18 Thread ADNET GHISLAIN
Hi, I use spamassassin 2.64 and i want to configure it so every mail sent by the local server is whitelisted or not even scanned by spamassassin. I tried quite a lot of config but whatever the config i try i allways have the localhost sent that is tagged as spam. spamassassin --lint and debug give

Re: Verizon hosting spammers :)

2005-01-18 Thread Morris Jones
Menno van Bennekom wrote: You have sent this mail to the list through out014pub.verizon.net and not directly from your own dsl-verizon.net address so you wouldn't have been blocked by me ;) Menno Alas, I'm moving to a Verizon business DSL account for my server. Is there any distinction between re

RE: spamassassin process a single message for 10 minutes !

2005-01-18 Thread Jason Gauthier
Hm... time spamc < 6474 real0m3.040s user0m0.001s sys 0m0.008s This is a PIII 1.3. (SA 3.0.2) Might be something in your config? > -Original Message- > From: news [mailto:[EMAIL PROTECTED] On Behalf Of Stefano Catani > Sent: Tuesday, January 18, 2005 5:56 AM > To: us

spamassassin process a single message for 10 minutes !

2005-01-18 Thread Stefano Catani
here is the message: http://mail.units.it/6474 it contains a lot of email addresses and stops our mailserver these are the times on a dual PIII 1GHz (SpamAssassin 3.0.2) time spamc < 6474 real9m59.995s user0m0.000s sys 0m0.000s any suggestions ??? Thanks Stefano

Re: Use of uninitialized value

2005-01-18 Thread German Staltari
On Tue, 18 Jan 2005 14:33:55 +, Martin Hepworth <[EMAIL PROTECTED]> wrote: Hi probably means you sa 2.x rules don't parse in the SA 3.x world have you "spamassassin --lint" checked to if it gives you any more info ot does it die here as well.?? It's a clean installation, I dont't have a

Re: Use of uninitialized value

2005-01-18 Thread Martin Hepworth
Hi probably means you sa 2.x rules don't parse in the SA 3.x world have you "spamassassin --lint" checked to if it gives you any more info ot does it die here as well.?? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 German Staltari wrote: Hi list, I've up

Use of uninitialized value

2005-01-18 Thread German Staltari
Hi list, I've upgraded to 3.0.2 and now I'm seeing this in my logs: Jan 18 10:03:17 qsmtp-mx-06 spamd[20906]: Use of uninitialized value in pattern match (m//) at /usr/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/Message.pm line 225, line 76. Jan 18 10:12:42 qsmtp-mx-01 spamd[29014]: Use of uniniti

Re: Begginer Spam getting through

2005-01-18 Thread cron
I was missing the big picture, I think now I will be able to make it work as expected. Thanks all for the help. Angelo - Original Message - From: "Thomas Arend" <[EMAIL PROTECTED]> To: Sent: Monday, January 17, 2005 5:06 PM Subject: Re: Begginer Spam getting through -BEGIN PGP SIGN

Re: add_header in 3.0.2 not working

2005-01-18 Thread Roger WJ Alterskjær
FYI, to anyone who runs into the same problem, there is a patched version of qmail-scanner.pl that allow you to include SA-created headers (plus other cool options not in the original): http://xoomer.virgilio.it/j.toribio/qmail-scanner/READMEpatched.html -Roger

Re: add_header in 3.0.2 not working

2005-01-18 Thread Roger WJ Alterskjær
on 18.01.2005 12:30 Roger WJ Alterskjær said the following: on 17.01.2005 19:47 Andy Jezierski said the following: [snip] I don't use qmail-scanner, but do you have to re-start it for new config changes to take effect? Does qmail-scanner have it's own config file that overrides SA

Re: add_header in 3.0.2 not working

2005-01-18 Thread Roger WJ Alterskjær
on 17.01.2005 19:47 Andy Jezierski said the following: [snip] I don't use qmail-scanner, but do you have to re-start it for new config changes to take effect? Does qmail-scanner have it's own config file that overrides SA like amavisd-new? qmail-scanner.pl is called when receiving and email.

Deep recursion error

2005-01-18 Thread Martin Karol Zuziak
Hi There has been a few posts about this error but so far no solution. I have a mail which, when sent to spamd with spamc, causes spamd to consume a lot of memory and cpu time. The scanning takes about 30 seconds for this mail of approx. 200 kB but the real problem is that it causes spamd to go f

Re: URIBL_SBL

2005-01-18 Thread Martin Hepworth
Matt install Net::DNS from CPAN perl -MCPAN -eshell install Net::DNS the RH RPMs are nortious at sticking stuff in stupid places that only other RH RPM based packages can see. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Matt wrote: Alright, I think I ha

bayes 2

2005-01-18 Thread kalin mintchev
i rebuild the databases as root. with new unmarked spam and new ham. i used spamassassin as root like: spamassassin -D --lint test.txt where test.txt is a spam message i just used with sa-learn. here is what i get for the bayes: debug: cannot use bayes on this message; not enough usable tokens f

Re: SA 3.01 and BAYES probability too high

2005-01-18 Thread Guillaume Urbejtel
Loren Wilton wrote: For some days BAYES probabilty jump for almost all messages, i've BAYES_50 for almost all message including ham... What can be the reason ? Why do you think bayes 50 is wrong? BTW: Bayes_50 I would consider as ham. Bayes_50 means th

Re: URIBL_SBL

2005-01-18 Thread Jeff Chan
On Monday, January 17, 2005, 11:57:26 PM, Matt Matt wrote: > Alright, I think I have figured something out by turning spamd -D debug > mode on. > Net::DNS version is 0.23, but need 0.34dnsavailable-1 at > /usr/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/Dns.pm line 1230. > Thing is I just inst

Re: Verizon hosting spammers :)

2005-01-18 Thread j o a r
On 2005-01-18, at 08.49, Menno van Bennekom wrote: You have sent this mail to the list through out014pub.verizon.net and not directly from your own dsl-verizon.net address so you wouldn't have been blocked by me ;) I was _hammered_ all throughout last year by messages to unknown accounts from ma

Re: URIBL_SBL

2005-01-18 Thread Matt
Alright, I think I have figured something out by turning spamd -D debug mode on. Net::DNS version is 0.23, but need 0.34dnsavailable-1 at /usr/lib/perl5/site_perl/5.8.3/Mail/SpamAssassin/Dns.pm line 1230. Thing is I just installed "perl-Net-DNS-0.48-0.1.fc2.rf.i386.rpm". So I double check.

Re: Verizon hosting spammers :)

2005-01-18 Thread Menno van Bennekom
> Hey now, you all. I have a Verizon address, and to the best of my ability, > unless I set up SSH tunneling through them, I cannot send mail from any > other > account than mine. > > And don't blacklist me! > > Rob You have sent this mail to the list through out014pub.verizon.net and not directly

DIGEX

2005-01-18 Thread jdow
Spam really did come from 164.109.26.27. Is DigiEx not marked in any of the BLs around? {^_^}

Re: Score in Local.cf does not work

2005-01-18 Thread Loren Wilton
>> I am using Spamassassin 2.63 with SQL-Configuration. >> When I want to redefine scores in my local.cf it simply does not work. The >> new Score i am setting will not be used. >> >> score MSGID_FROM_MTA_SHORT 1.0 1.0 1.0 1.0 >> >> What else do I have to do to make Spamassassin use these new d

Re: Problem with a message that got through.

2005-01-18 Thread Loren Wilton
> I have this in my local.cf > > header MY_MNUMERIC_TO To =~ /[EMAIL PROTECTED]/i > To: <[EMAIL PROTECTED]> You have "start of line followed by M". The To has "start of line followed by < followed by M". Try header MY_MNUMERIC_TO To =~ /^

Re: URIBL_SBL

2005-01-18 Thread Matt
I just installed the latest version of 0.48 Net::DNS and still no go. This is how I start Spamd in rc.local. /usr/bin/spamd -d -c -m 5 This is running under Exim Exiscan. Looks like it uses spamc -u to connect to spamd as a given user. Any other ideas? Thanks. Matthew On Monday, January 17, 200

Re: Problem with a message that got through.

2005-01-18 Thread jdow
Never mind - as soon as I sent it my brain registered my mistrake. {+_+} Duh! - Original Message - From: "jdow" <[EMAIL PROTECTED]> > What part of the rule does the "m" in "m2355" match? > {^_^}

Re: Problem with a message that got through.

2005-01-18 Thread jdow
What part of the rule does the "m" in "m2355" match? {^_^} - Original Message - From: "Steven W. Orr" <[EMAIL PROTECTED]> > I have this in my local.cf > > header MY_MNUMERIC_TO To =~ /[EMAIL PROTECTED]/i > score MY_MNUMERIC_TO 5.0 > describeMY_MNUMERIC_TO All numer

Re: SA 3.01 and BAYES probability too high

2005-01-18 Thread Loren Wilton
>> For some days BAYES probabilty jump for almost all messages, i've >> BAYES_50 for almost all message including ham... >> What can be the reason ? >> > Why do you think bayes 50 is wrong? BTW: Bayes_50 I would consider as ham. Bayes_50 means that Bayes doesn't know if the message is ham or spam,

Re: URIBL_SBL

2005-01-18 Thread Jeff Chan
On Monday, January 17, 2005, 6:01:28 PM, Matt Matt wrote: > I have SpamAssassin 3.0.2 installed on Fedora Core 2 release. How do I get > URIBL_SBL to work? > I see in "25_uribl.cf": > # Requires the Mail::SpamAssassin::Plugin::URIDNSBL plugin be loaded. > # Note that this plugin defines a new c

Semi-OT: Spammer sues spam-report

2005-01-18 Thread Matthew Cline
A spammer is suing someone who reported their spam for "Tortuous Interference with Contract" and "Defamation": > The defendant knew intentionally and improperly interfered with the > performance of the said contract by inducing Lightship Telecom and > Spectra Access, Inc., to terminate the contra

URIBL_SBL

2005-01-18 Thread Matt
I have SpamAssassin 3.0.2 installed on Fedora Core 2 release. How do I get URIBL_SBL to work? I see in "25_uribl.cf": # Requires the Mail::SpamAssassin::Plugin::URIDNSBL plugin be loaded. # Note that this plugin defines a new config setting, 'uridnsbl', # which lists the zones to look up in adva

Re: Request for spam from Kennedy-Western/kw.edu

2005-01-18 Thread Tim B
William Stearns wrote: Good evening, all, I have a favor to ask. Kennedy Western has written in asking to be removed from the sa-blacklist - the audacity! :-) Could I trouble any of you that keep your back spam to grab any Kennedy Wester spams and send them along to [EMAIL PROTECTED] (

Re: Score in Local.cf does not work

2005-01-18 Thread Cor
Hi Alex, Actually you should upgrade your current SA version to 3.0.2. Best Regards, -Cor alexander hachmann said: > Hello, > I am using Spamassassin 2.63 with SQL-Configuration. > When I want to redefine scores in my local.cf it simply does not work. The > new Score i am setting will not be us

Re: Request for spam from Kennedy-Western/kw.edu

2005-01-18 Thread Jeff Chan
On Monday, January 17, 2005, 3:51:14 PM, William Stearns wrote: > Good evening, all, > I have a favor to ask. Kennedy Western has written in asking to > be removed from the sa-blacklist - the audacity! :-) > Could I trouble any of you that keep your back spam to grab any > Kenne