Re: sa-learn is re-learning the same messages

2005-02-04 Thread Theo Van Dinter
On Fri, Feb 04, 2005 at 11:37:22PM -, Kyle Silfer wrote: > command: > su spamfilter -D -c '/usr/bin/sa-learn --spam ./unham/1.' I don't know what -D passed to su will do. > So it's the same message ID, but the journal line indicates different entry > counts. What does that mean? Journal coun

Re: sa-learn is re-learning the same messages

2005-02-04 Thread Kyle Silfer
Theo Van Dinter <[EMAIL PROTECTED]> said: > If you put it after the --spam, the "./unham/1." will be considered an option > to -D. That was indeed my problem. Thanks. > Verify the DBs in use, and what msgid is being learnt. The DBs and msgid are the same each time, but I am getting different j

Issue upgrading to new database in 3.0.2

2005-02-04 Thread Christopher W. Richardson
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, Today I'm attempting to upgrade spamassassin from 2.x to 3.0.2, and I'm experiencing issues surrounding the new database format. I've read both UPGRADE and http://wiki.apache.org/spamassassin/BayesUpgradeError, but apparently to no avail. Running

How to get mailbox to use Bayesian filter?

2005-02-04 Thread Steve Dondley
Hi, I've been feeding spamassassin spam and ham. But the Bayesian filter is not having any effect on my e-mail account. Now, I've been feeding the bayesian filter logged in as one user "A" on my server and the soft linking the 'bayes_seen', 'bayes_toks' and 'user_prefs' files for user "B" ove

SA being overwhelmed?

2005-02-04 Thread up
Since upgrading to 3.02 from 2.63 and tweaking some rules, I've had problems with smtp connections skyrocketing at times. I have raised the limit (qmail-smtpd with tcpserver) to 400 connections so there would always be an smtp connection available for legitimate relaying, but it occasionally hits

Re: sa-learn is re-learning the same messages

2005-02-04 Thread Theo Van Dinter
> cornelius:/tmp # su spamfilter -c '/usr/bin/sa-learn --spam ./unham/1.' > Learned from 1 message(s) (1 message(s) examined). > > cornelius:/tmp # su spamfilter -c '/usr/bin/sa-learn --spam ./unham/1.' > Learned from 1 message(s) (1 message(s) examined). When in doubt, run with -D. > When re-ru

Re: Outgoing mail scanning

2005-02-04 Thread Kenneth Andresen
Hello Filip, Thank you for your script! I have been looking up several alternative paths now, and yours seem to be the better way to go. I had not noticed before that /usr/sbin/sendmail in fact only was a symlink. I have been testing your script, and it is necessary for me to modify it. This is

Re: sa-learn is re-learning the same messages

2005-02-04 Thread Jim Maul
Kyle Silfer wrote: I am a little surprised nobody has any advice for me. Let me restate this as a yes/no question: If sa-learn is relearning the same messages over and over again and can't forget them (details below), is my Bayesian database just hosed beyond repair? /k I would try moving (not dele

Re: sa-learn is re-learning the same messages

2005-02-04 Thread Kyle Silfer
I am a little surprised nobody has any advice for me. Let me restate this as a yes/no question: If sa-learn is relearning the same messages over and over again and can't forget them (details below), is my Bayesian database just hosed beyond repair? /k > Clearly something is broken, but I'm not s

broken spamassassin

2005-02-04 Thread shane mullins
When I run spamassassin --lint, I get the following error: # spamassassin --lint config: SpamAssassin failed to parse line, skipping: smtp inet - y - - smtpd config: SpamAssassin failed to parse line, skipping: pickupfifo - y 60 1 picku

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Joe Polk
First, I had understood that Bayes can learn previously tagged emails without stripping Spamassassin tags. Has this changed? Second, all of my users use a webmail client, though they can use OE if they wish. It is probably best for them to use IMAP so that server-side scanning can better be setup.

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Sander Holthaus - Orange XL
> -Original Message- > From: Stuart Johnston [mailto:[EMAIL PROTECTED] > Sent: Friday, February 04, 2005 7:35 PM > To: Peter Marshall; SpamAssassin Users > Subject: Re: Manually training SpamAssassin by forwarding mail > > Peter Marshall wrote: > > Stuart Johnston wrote: > > > >> Pete

Re: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Stuart Johnston
Peter Marshall wrote: Stuart Johnston wrote: Peter Marshall wrote: Kevin Sullivan wrote: --On 02/03/05 01:59:21 +0100 Sander Holthaus - Orange XL wrote: I've been interested in offering customers to train manually train the SpamAssassin Bayes filter for ham and spam (to reduce false positives and

Re: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Peter Marshall
Stuart Johnston wrote: Peter Marshall wrote: Kevin Sullivan wrote: --On 02/03/05 01:59:21 +0100 Sander Holthaus - Orange XL wrote: I've been interested in offering customers to train manually train the SpamAssassin Bayes filter for ham and spam (to reduce false positives and negatives). However, I

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Sander Holthaus - Orange XL
> -Original Message- > From: Stuart Johnston [mailto:[EMAIL PROTECTED] > Sent: Friday, February 04, 2005 5:20 PM > To: users@spamassassin.apache.org > Cc: Peter Marshall > Subject: Re: Manually training SpamAssassin by forwarding mail > > Peter Marshall wrote: > > Kevin Sullivan wrote:

new spam

2005-02-04 Thread Carnegie, Martin
Hi all, I seem to be getting some new spam that includes the content in an attached .html file. here is the header information. Microsoft Mail Internet Headers Version 2.0 Received: from removed ([xxx.xxx.xxx.xx]) by removed with Microsoft SMTPSVC(5.0.2195.6713); Fri, 4 Feb 2005 09:40:

Re: Is there a list of SYMBOLIC_TEST_NAMEs

2005-02-04 Thread Theo Van Dinter
On Fri, Feb 04, 2005 at 10:57:28AM -, Dermot Paikkos wrote: > tripped on and adjust the scores. For example I want to increase all the > URIBL type scores and I keep seeing new ones. $ grep URIBL /usr/share/spamassassin/[2-4]*.cf everything else, RTFM. :) -- Randomly Generated Tagline: "Yo

Re: Addition Problem?

2005-02-04 Thread Mark T. Valites
On Wed, 2 Feb 2005, Matt Kettler wrote: > At 05:44 PM 2/2/2005, Alan Munday wrote: > >Matt Kettler wrote the following on 02/02/2005 22:02: > > > Actually, it's limit in SA's header generation that I forgot about. > > > I > > forgot that it forces X-Spam as a prefix. > > > > > > >Does that mean I

Re: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Stuart Johnston
Peter Marshall wrote: Kevin Sullivan wrote: --On 02/03/05 01:59:21 +0100 Sander Holthaus - Orange XL wrote: I've been interested in offering customers to train manually train the SpamAssassin Bayes filter for ham and spam (to reduce false positives and negatives). However, I can only find document

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Sander Holthaus - Orange XL
> --On 02/04/05 16:08:53 +0100 Sander Holthaus - Orange XL wrote: > > Basically, I've got two option. All mail that is received > is backupped > > on the mailserver before adding any headers. I could match > those with > > mail received in the spam-learn and ham-learn accounts. > However, mail

Re: Side-warning about the new proxy zombies...

2005-02-04 Thread Spam Admin
Don't know if it's related, but I'm seeing a SIGNIFICANT increase in SMTP REJECTs, something to the tune of a 10- to 15-fold increase. I started seeing it simultaneously on both my primary and secondary boxes, starting around 7:AM EST yesterday (Thursday). I log RBL rejects as 'spam' so this is som

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Kevin Sullivan
--On 02/04/05 16:08:53 +0100 Sander Holthaus - Orange XL wrote: Basically, I've got two option. All mail that is received is backupped on the mailserver before adding any headers. I could match those with mail received in the spam-learn and ham-learn accounts. However, mail is backupped only for a

RE: Relay Country

2005-02-04 Thread Sander Holthaus - Orange XL
> What does one need to do to activate the relay country tests? > We have the CPAN module installed and added this line to local.cf > > loadplugin Mail::SpamAssassin::Plugin::RelayCountry > > Do we need to add any scores or tests? > > We are not yet seeing any evidence that the test is bein

Re: Relay Country

2005-02-04 Thread Alex S Moore
Jeff Koch wrote: What does one need to do to activate the relay country tests? We have the CPAN module installed and added this line to local.cf loadplugin Mail::SpamAssassin::Plugin::RelayCountry I do not use that plugin, but I would uncomment the entry in init.pre and not touch local.cf.

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Sander Holthaus - Orange XL
> --On 02/04/05 09:17:55 -0400 Peter Marshall wrote: > > My question is the same as Henrik, I have a bunch of email that is > > spam (either tagged by spam assassin or not tagged at all. > I forwared > > it as an attachment to a "spam" mail box. What do I have to do now > > before I can get b

Relay Country

2005-02-04 Thread Jeff Koch
What does one need to do to activate the relay country tests? We have the CPAN module installed and added this line to local.cf loadplugin Mail::SpamAssassin::Plugin::RelayCountry Do we need to add any scores or tests? We are not yet seeing any evidence that the test is being used. Best Rega

Re: rule for mixed case URI scheme

2005-02-04 Thread Robert Menschel
Hello Daniel, Thursday, February 3, 2005, 6:58:47 PM, you wrote: DQ> Something close to this will be in 3.1, so you'll want to remove DQ> the rule then, maybe name it something else too. DQ> uri URI_SCHEME_MIXED_CASE /^(?![a-z]{3,6}:|[A-Z]{3,6})[A-Za-z]{3,6}:\// DQ> describe URI_SCHEME_MIXE

Still got this error

2005-02-04 Thread Ron McKeating
Hi all, Apologies for cross posting this on the SA and exim list but there are many years of experienced linux email managers on the two lists. I am still frequently getting an error from our cron job. The cron entry is service spamd restart and the log entry is Feb 4 14:15:00 bill spamd: sp

Re: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Kevin Sullivan
--On 02/04/05 09:17:55 -0400 Peter Marshall wrote: My question is the same as Henrik, I have a bunch of email that is spam (either tagged by spam assassin or not tagged at all. I forwared it as an attachment to a "spam" mail box. What do I have to do now before I can get bayes to learn the messag

Re: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Peter Marshall
Kevin Sullivan wrote: --On 02/03/05 01:59:21 +0100 Sander Holthaus - Orange XL wrote: I've been interested in offering customers to train manually train the SpamAssassin Bayes filter for ham and spam (to reduce false positives and negatives). However, I can only find documentation to this for loca

RE: Odd subject line spam

2005-02-04 Thread Steven Rocha
After many suggestions from this group, I have come up with the following rule. It works great!!! headerSR_SUB_STOCKS Subject =~ /0[tT[cC]|[pP]erf0rmance|[fF]r0[mM]|[wW]a\|\||[aA]\|ert|[gG]r0wth|[pP]\|ay|[yY]0[uU]|[sS]tOck|[sS]t0ck|[iI]nvest0r|[iI]nvestOr|[pP]OwerhOuse|[pP]0ssib\|e|[

broken line in maillog

2005-02-04 Thread Sander Holthaus - Orange XL
In my maillogfile's I came across the following line:   spamd[11786]: result: Y 76 - BAYES_99,J_CHICKENPOX_101,J_CHICKENPOX_12,J_CHICKENPOX_13,J_CHICKENPOX_14,J_CHICKENPOX_15,J_CHICKENPOX_16,J_CHICKENPOX_21,J_CHICKENPOX_210,J_CHICKENPOX_22,J_CHICKENPOX_23,J_CHICKENPOX_24,J_CHICKENPOX_25,J_CHI

Is there a list of SYMBOLIC_TEST_NAMEs

2005-02-04 Thread Dermot Paikkos
Hi, It there somewhere I can find a list of the SYMBOLIC_TEST_NAMEs and hopefully there definition so I can edit their scores. At the moment I am having to wait for spam to get through and look at the tests it tripped on and adjust the scores. For example I want to increase all the URIBL typ

RE: Help...dcc

2005-02-04 Thread Thomas Kinghorn [MTNNS -Rosebank]
Hi Laurent Here is the dcc stats output: [EMAIL PROTECTED] root]# cdcc stats dcc2.dcc-servers.net 212.95.66.24,6277 server-ID 1179 /var/dcc/map 09:45:36 version 1.2.50 tracing ANON CLNT 13860861 hash entries 7654642 used 418517136 DB bytes 51 ms delay 219262 NOPs 175 ADMN 6

Re: rule for mixed case URI scheme

2005-02-04 Thread Martin Hepworth
Daniel What would a suggested initial score be? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Daniel Quinlan wrote: Something close to this will be in 3.1, so you'll want to remove the rule then, maybe name it something else too. uri URI_SCHEME_MIXED_CASE

Re: Subject not being tagged

2005-02-04 Thread Prashanth Narayanan
hi, i have tried every possible comkbination in the local.cf file but the subject is just not getting taggwed whatever i do. here are the spamassassin headers for a recent junk mail: X-Spam-Status: Yes, hits=5.8 required=2.0 X-Spam-Level: + Received: from xx.xxx.xx.xx by mantra (envelope

Re: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Kevin Sullivan
--On 02/03/05 01:59:21 +0100 Sander Holthaus - Orange XL wrote: I've been interested in offering customers to train manually train the SpamAssassin Bayes filter for ham and spam (to reduce false positives and negatives). However, I can only find documentation to this for local mailboxes and IMAP. M

Re: Odd subject line spam

2005-02-04 Thread Loren Wilton
> > "Better st0ck perfOrmance fr0m 0tc helpline" > > > > Does anyone have a rule for these yet? > > There are rules for those, however, they only seem to exist for the body. > Mangled, Chickpox and SARE_adult all hit on that line. But keep in mind that body rules also get fed the Subject, so they

rule for mixed case URI scheme

2005-02-04 Thread Daniel Quinlan
Something close to this will be in 3.1, so you'll want to remove the rule then, maybe name it something else too. uri URI_SCHEME_MIXED_CASE /^(?![a-z]{3,6}:|[A-Z]{3,6})[A-Za-z]{3,6}:\// describe URI_SCHEME_MIXED_CASEURI scheme has mixed uppercase and lowercase The mass-check resu

Re: how to get Spam Assassin to modify mail-headers in wanted ways.

2005-02-04 Thread Henrik
Henrik wrote: Thank you Matt, Matt Kettler wrote: spam_level_stars 1 So, if I want the spam_level_stars-function added in every incoming email, what should be written in the local.cf-file for this? I searched the man-pages and got this for the star-labeling; "add_header all Level _STARS(*)_" ..a

Re: how to get Spam Assassin to modify mail-headers in wanted ways.

2005-02-04 Thread Henrik
Thank you Matt, Matt Kettler wrote: spam_level_stars 1 So, if I want the spam_level_stars-function added in every incoming email, what should be written in the local.cf-file for this? ..and what should I put in there to get the spam-word report to go inside the headers, folded and all, instead

Re: how to get Spam Assassin to modify mail-headers in wanted ways.

2005-02-04 Thread Matt Kettler
At 07:27 PM 2/3/2005, Henrik wrote: I want the "X-Spam-Flag:" header to show either "yes" or "no" for spam resp. no-spam labeled emails, in all emails labeled as spam, there should be a full report in the email-header with the words that Spam Assassin reacted upon. In the present state Spam Assa

how to get Spam Assassin to modify mail-headers in wanted ways.

2005-02-04 Thread Henrik
Hello, This is my first post to [EMAIL PROTECTED] I've got this problem where I can not get Spam Assassin (3.0) to modify the headers of all incoming email in the right way. I want the "X-Spam-Flag:" header to show either "yes" or "no" for spam resp. no-spam labeled emails, in all emails label