RE: Bounces

2005-02-10 Thread Matt Kettler
At 06:03 PM 2/10/2005, Jason Bennett wrote: I agree whole heartedly, so I've set all the amavisd rules to D_REJECT, but I still get the "Undeliverable:Undelivered Mail Returned to Sender" bounces. How do I turn these off? If you're post-queue, you can't use D_REJECT.. It's too late. You've got to

RE: Bounces

2005-02-10 Thread Jason Bennett
I agree whole heartedly, so I've set all the amavisd rules to D_REJECT, but I still get the "Undeliverable:Undelivered Mail Returned to Sender" bounces. How do I turn these off? Thanks a lot for the hlp! J. -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Thursday

Re: Bounces

2005-02-10 Thread Matt Kettler
At 05:33 PM 2/10/2005, Jason Bennett wrote: 2. How can I reduce or even dump the bounces all together so my queue's aren't filling up with junk bounces with invalid destinations? Just don't use bouncing as a spam action at all if you filter after queue.. this is just a bad thing to do in general.

Re: Configuration Confusion

2005-02-10 Thread Matt Kettler
At 05:39 PM 2/10/2005, Scott Moss wrote: Ok this is kind of driving me nutty. I've changed ever version of any local.cf file on my machine and SA is still sending with default rules. Is there any way to find out where the current installation is reading the config file from ? I've searched all o

Re: Configuration Confusion

2005-02-10 Thread Theo Van Dinter
On Fri, Feb 11, 2005 at 08:39:09AM +1000, Scott Moss wrote: > local.cf file on my machine and SA is still sending with default rules. Is > there any way to find out where the current installation is reading the > config file from ? I've searched all of the machine for any type of rogue When in

Re: best way to look for Bcc:d mail

2005-02-10 Thread Matt Kettler
At 05:27 PM 2/10/2005, Vicki Brown wrote: I want to bump the score if neither the To: nor the Cc: field contains my address. I'm guessing I want something like this: header __NOT_TO_ME To !~ /[EMAIL PROTECTED]/ header __NOT_CC_ME Cc !~ /vlb~cfcl.com/ meta NOT_FOR_ME ( __NOT_TO_ME && __NO

Configuration Confusion

2005-02-10 Thread Scott Moss
Ok this is kind of driving me nutty. I've changed ever version of any local.cf file on my machine and SA is still sending with default rules. Is there any way to find out where the current installation is reading the config file from ? I've searched all of the machine for any type of rogue loca

Bounces

2005-02-10 Thread Jason Bennett
Sorry if this isn't the right place for this, but I'd thought I'd ask: I'm using postfix, spamassassin and amavisd-new. I'm using the filter after queue method to accept mail and process them afterward - of course, this can generate more bounces than the filter before queue method. Here are my

best way to look for Bcc:d mail

2005-02-10 Thread Vicki Brown
I want to set up a High-scoring rule for mail that looks like this :( Date: Thu, 10 Feb 2005 17:53:31 +0200 From: Morris Price <[EMAIL PROTECTED]> Subject: Is your daughter a a sick person To: Katydid <[EMAIL PROTECTED]> I'm not in the To: list (the To: is a nonexistent address but that's be

Re: bayesian filter training

2005-02-10 Thread Matt Kettler
At 05:06 PM 2/10/2005, Matias Lopez Bergero wrote: Just a question, It is worth to train the bayes filter with messages already detected and flagged as spam by spamassassin? That would do any good? Yes. And even if they are already flagged as BAYES_99 it is still worthwhile. The reason why is tha

bayesian filter training

2005-02-10 Thread Matias Lopez Bergero
Hi Just a question, It is worth to train the bayes filter with messages already detected and flagged as spam by spamassassin? That would do any good? BR, Matías.

Re: Humor: "The Ultimate Spam Email"

2005-02-10 Thread Kris Deugau
Jonathan Nichols wrote: > This oughta replace GTUBE! > > http://lowendmac.com/lite/05/0210.html Heh. I spent an afternoon going through SA tests and very carefully assembling a spam that would trip as many tests as possible. I copied headers from a message that tripped all kinds of RBLs, I copi

RE: Broken Ratware-Setup? May be useful for Rules?

2005-02-10 Thread Chris Santerre
> >Hi! > >I attach a 'funny' Mail I got bounced from one of our >Users, because it looks like 'broken/misconfigured Ratware'. >Maybe somebody can update Rules for such things/structures? > >The most interesting point seems to be, that the >Tool creates three 'Received-Headers' to fool >'first-hop'

Re: Humor: "The Ultimate Spam Email"

2005-02-10 Thread Jim Maul
Mike Jackson wrote: http://lowendmac.com/lite/05/0210.html I sent it to myself... X-Spam-Report: * 1.8 URG_BIZ BODY: Contains urgent matter * 0.7 SARE_MONEYTERMS BODY: Talks about money in some way. * 0.7 SARE_URGBIZ BODY: Contains urgent matter * 2.6 NA_DOLLARS BODY: Talks about a million Nor

Re: Humor: "The Ultimate Spam Email"

2005-02-10 Thread Mike Jackson
http://lowendmac.com/lite/05/0210.html I sent it to myself... X-Spam-Report: * 1.8 URG_BIZ BODY: Contains urgent matter * 0.7 SARE_MONEYTERMS BODY: Talks about money in some way. * 0.7 SARE_URGBIZ BODY: Contains urgent matter * 2.6 NA_DOLLARS BODY: Talks about a million North American dollars *

Re: _DOMAIN_ not being set?

2005-02-10 Thread Michael Parker
On Thu, Feb 10, 2005 at 11:50:21AM -0800, Adam Harrison wrote: > This forwards just fine and procmail reads the ~sw000100/.promailrc > file and runs: > > :0fw > | /usr/bin/spamc -f > > Spamc connects with spamd just fine, and it reads the MySQL > prefferences just fine. But some how the full ad

valentine spam from my own provider?

2005-02-10 Thread hamann . w
Hi, I just received the spam below. T-online.de, a spinoff of former state telekom, is one of the major providers in germany for private internet access. The IP addresses in the header are valid, but there is no reverse DNS for the server mailing.t-online.de listed in the body of the mail, and

Broken Ratware-Setup? May be useful for Rules?

2005-02-10 Thread Chr. von Stuckrad
Hi! I attach a 'funny' Mail I got bounced from one of our Users, because it looks like 'broken/misconfigured Ratware'. Maybe somebody can update Rules for such things/structures? The most interesting point seems to be, that the Tool creates three 'Received-Headers' to fool 'first-hop' IP/Domain c

Humor: "The Ultimate Spam Email"

2005-02-10 Thread Jonathan Nichols
This oughta replace GTUBE! http://lowendmac.com/lite/05/0210.html

Care and feeding instructions for SpamAssassin?

2005-02-10 Thread FH
Hopefully this isn't a FAQ, I looked over the list on the website and while there is some useful info there I didn't see answers to all my questions (or maybe I just didn't realize they were answered as this is all new to me ;)) THE PROBLEM: Recently the hit %age has dropped significantly (to ab

_DOMAIN_ not being set?

2005-02-10 Thread Adam Harrison
I'm running SpamAssassin 3.0.2 with Perl 5.8.0 and MySQL 4.0.20. I run spamd in daemon mode, calling spamc from a users .procmailrc to test. Eventually it will be in the system procmailrc. I host a number of domains, and I would like to have domain preferences, but _DOMAIN_ is always test to NUL

users@spamassassin.apache.org

2005-02-10 Thread Daniel Quinlan
Can you file a bug against this in bugzilla.spamassassin.org? Attach an example message too please. Thanks. -- Daniel Quinlan http://www.pathname.com/~quinlan/

Re: Spamassasin Market research

2005-02-10 Thread Daniel Quinlan
Chris, Wow, she emailed a lot of people individually (not me, though ;-). You can always forward stuff like this to the PMC at <[EMAIL PROTECTED]> since we might miss it on the higher-volume users list. Daniel -- Daniel Quinlan http://www.pathname.com/~quinlan/

question about bayes and awl.

2005-02-10 Thread Matias Lopez Bergero
Hi, I'm relatively new using SA and I have a couple of doubts about the bayes db and the awl db. I'm running a 3.0.2 site wide install, and I have saw that for each user there is an .spamassassin directory, storing Bayesian and awl databases a part from the user preferences file. The bayes and

Re: Disabling automatic X-Spam-* header removal

2005-02-10 Thread Robert Szerwinski
Am Donnerstag, 10. Februar 2005 17:26 schrieben Sie: > Did you do a clear_headers prior to adding X-Spam-2ndCheck? > > Note that clear_headers should not remove the existing ones in the message. > It should, theoretically, clear your header *settings*. Yes, I did this to get rid of spamassassins (

Re: MIME attachment not decoded from some servers

2005-02-10 Thread Stuart Johnston
I have upgraded MIME::Tools to version 5.417 but that didn't fix it. Thanks though. Stuart Johnston Martin Hepworth wrote: Stuart there are known problems with the MIME::tools perl module which are fixed in version 5.417. If you have this and it's used by amavis-new it's best to make sure you a

Re: DCC implementation questions

2005-02-10 Thread Matias Lopez Bergero
Matt Kettler wrote: At 09:50 AM 2/10/2005, Matias Lopez Bergero wrote: Thanks for the info Matt. It would be better(faster/reliable) to use DCC apart from SA(dccm), or using SA with dccifd is a better choice? It's not going to be faster or more reliable.. It's really a matter of what you want DCC

RE: Less spam blocked with 3.02 - AWL-related?

2005-02-10 Thread Sander Holthaus - Orange XL
> 3) Stop using AWL. Seriously, I found it did more harm then > good and got big too fast. I don't have any problem with it, and it is doing it's job quite well actually. BUT I do think that it will only work if you have a good working setup, in which there is a clear distinction in score's for

Re: Disabling automatic X-Spam-* header removal

2005-02-10 Thread Matt Kettler
At 09:52 AM 2/10/2005, Robert Szerwinski wrote: I have the following problem: my mail comes in tagged with X-Spam-* headers and I want to make decisions inside *my* spamassassin based on those tags. How can I force spamassassin to leave the old headers untouched? (I have added a X-Spam-2ndCheck hea

Re: DCC implementation questions

2005-02-10 Thread Matt Kettler
At 09:50 AM 2/10/2005, Matias Lopez Bergero wrote: Thanks for the info Matt. It would be better(faster/reliable) to use DCC apart from SA(dccm), or using SA with dccifd is a better choice? It's not going to be faster or more reliable.. It's really a matter of what you want DCC to do. If you call

RE: Spamassasin Market research

2005-02-10 Thread Chris Santerre
>-Original Message- >From: Janine Bonk [mailto:[EMAIL PROTECTED] >Sent: Thursday, February 10, 2005 4:18 AM >To: [EMAIL PROTECTED] >Subject: Spamassasin > > >Hello, > >we are doing a market research on the threat of spam and >possible solutions. As >the market of spam solutions is very c

RE: Less spam blocked with 3.02 - AWL-related?

2005-02-10 Thread Chris Santerre
>-Original Message- >From: Johann Spies [mailto:[EMAIL PROTECTED] >Sent: Thursday, February 10, 2005 2:20 AM >To: [EMAIL PROTECTED] >Subject: Less spam blocked with 3.02 - AWL-related? > > >I have upgraded spamassassin on three mail (2.63 -> 3.02 on two and >2.64 -> 3.02 on the other) se

RE: [OT] GPG Keysigning at Linux World

2005-02-10 Thread Chris Santerre
>> You need to be absolutely sure someone is who they say they are. I'd >> probably be lynched if I signed someone's key without checking a >> government issued ID. (Hence, why I have signed very few keys.) > >Lynched by who? Being its Duncan, either the greys or the men in black ;) --Chris (Ho

Re: more ALL_TRUSTED issues?

2005-02-10 Thread Sandy S
Alan - (BI ran into this same issue earlier - the IP address your message came from (Bis incorrectly marked in the current version of Spamassassin as being a (Breserved IP address. It sounds like this issue has been fixed in future (Bversions of Spamassassin, but meanwhile you can use the fix

Re: SA is changing attachments ?

2005-02-10 Thread Matt Kettler
At 09:19 AM 2/10/2005, kutt wrote: so how do i fix this bug ? (or "feature"?) btw: why was this added in first place ? most mail servers have a extension + virus filters ... OS: Debian Mailserver: postfix (sql), amavis, uvscan, spamassassin Sounds like it's an amavis feature.. you might want to ask

Re: DCC implementation questions

2005-02-10 Thread Matias Lopez Bergero
Matt Kettler wrote: At 04:12 PM 2/9/2005, Matias Lopez Bergero wrote: It's dccm a better implementation rater than dccproc for those who are using Sendmail? And if this is yes, how do I need to configure SA to work with dccm? I couldn't find anything about dccm and SA. You can't configure SA to

Disabling automatic X-Spam-* header removal

2005-02-10 Thread Robert Szerwinski
Hi list, I have the following problem: my mail comes in tagged with X-Spam-* headers and I want to make decisions inside *my* spamassassin based on those tags. How can I force spamassassin to leave the old headers untouched? (I have added a X-Spam-2ndCheck header to show decisions based on my loc

Re: [OT] GPG Keysigning at Linux World

2005-02-10 Thread Theo Van Dinter
On Wed, Feb 09, 2005 at 10:47:12PM -0900, John Andersen wrote: > Lynched by who? I'm guessing the Debian people. When it comes to GPG signatures, they're ... extreme. -- Randomly Generated Tagline: "Why don't you just come move in with me?" -Bender "Really? That would be great! You sure I w

Re: SA is changing attachments ?

2005-02-10 Thread Theo Van Dinter
On Thu, Feb 10, 2005 at 03:19:26PM +0100, kutt wrote: > to: > DEFANGED- > > i didn't find any notes about that in the doc's or upgrade notes. > even when i grep for it i cant find it. Of course not, it's not SpamAssassin doing it. > btw: why was this added in first place ? most mail servers hav

SA is changing attachments ?

2005-02-10 Thread kutt
hey all! i upgradet my spamassassin recently to version: 3.0.2-1 well works like a charm so far. but i noticed that it changes the filenames of attached files. to: DEFANGED- i didn't find any notes about that in the doc's or upgrade notes. even when i grep for it i cant find it. but it's 100

RE: Less spam blocked with 3.02 - AWL-related?

2005-02-10 Thread Sander Holthaus - Orange XL
> On Thu, Feb 10, 2005 at 11:48:18AM +0100, Sander Holthaus - > Orange XL wrote: > > Your (mail)logs might come in handy for this, if you write out > > SpamAssassin's basic output there. With a basic Perl-script > (you can > > do this in almost any other script-language of course) you can see

qmail and spamassassin

2005-02-10 Thread Hans-Georg Glöckler
I am using spamassassin version 2.64 on SuSE 8.2 I have a problem with qmail and spamassassin. In my logfile of qmail (/var/log/qmail/current) I get the following error: @4000420b375904f72fd4 delivery 401: success: Argument_"\010802984^Q7^KB"_isn't_numeric_in_numeric_gt_(>)_at_/usr/lib/perl5/s

RE: Less spam blocked with 3.02 - AWL-related?

2005-02-10 Thread Sander Holthaus - Orange XL
Your (mail)logs might come in handy for this, if you write out SpamAssassin's basic output there. With a basic Perl-script (you can do this in almost any other script-language of course) you can see most likely everything you need. Spam, ham and mail-scores, scan-times, tests that where hit (!), et

Re: MIME attachment not decoded from some servers

2005-02-10 Thread Martin Hepworth
Stuart there are known problems with the MIME::tools perl module which are fixed in version 5.417. If you have this and it's used by amavis-new it's best to make sure you are up to the latest version. -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Stuart J

Re: Less spam blocked with 3.02 - AWL-related?

2005-02-10 Thread Daniel Quinlan
Johann Spies <[EMAIL PROTECTED]> writes: > Average spam blocked per minute for the last > > Day WeekMonth Year (Since April-June last year) > mail1 5.946.217.678.20 > mail2 5.045.956.486.69 > mail3 4.954.67* 6.236.85 This is not an especial

Re: [OT] GPG Keysigning at Linux World

2005-02-10 Thread John Andersen
On Wednesday 09 February 2005 04:26 pm, Duncan Findlay wrote: > You need to be absolutely sure someone is who they say they are. I'd > probably be lynched if I signed someone's key without checking a > government issued ID. (Hence, why I have signed very few keys.) Lynched by who? -- ___

Less spam blocked with 3.02 - AWL-related?

2005-02-10 Thread Johann Spies
I have upgraded spamassassin on three mail (2.63 -> 3.02 on two and 2.64 -> 3.02 on the other) servers about two weeks ago. On the old system I have disabled AWL and Auto-learn because they corrupted my bayesian database on at least one occasion. I have decided to try out AWL with 3.02. At firs

RE: DCC implementation questions

2005-02-10 Thread Matt Kettler
At 08:12 PM 2/9/2005, Jason Bennett wrote: debug: config: read file /etc/mail/spamassassin/local.cf debug: DCCifd is not available: no r/w dccifd socket found. In that spamassassin config file I have (I tried without this entry and get same thing): dcc_dccifd_path /var/dcc In the /var/dcc I have: s

Re: Problems with spamassassin suddenly forward all mails as SPAM

2005-02-10 Thread Chris Thielen
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tony Yat-Tung Cheung wrote: | Hi, | | I have configured spamassassin to filter my mails and move the | spams to a mail folder. It works fine for a while (e.g. several | weeks) and then it would start forwarding all mails, include those | marked as SPAM

[Administrivia] EditMoin

2005-02-10 Thread Justin Mason
https://moin.conectiva.com.br/EditMoin That's the editmoin web page. This program allows you to edit [WWW]Moin pages with your preferred editor. It means you can easily edit your pages, without the usual limitations of most web browsers' text areas. --j.

more ALL_TRUSTED issues?

2005-02-10 Thread alan premselaar
Today I got an email thru which hit ALL_TRUSTED. My mail server isn't (BNAT'd. I haven't specifically setup trusted_networks or (Binternal_networks but this is the first I've had a problem with it. (B (BI'm running RH 9 with Sendmail 8.13.3, MIMEDefang 2.49, SpamAssassin 3.02. (B (Bthe Recei

Re: MIME attachment not decoded from some servers

2005-02-10 Thread Daniel Quinlan
Stuart Johnston <[EMAIL PROTECTED]> writes: > Anyone have ideas here? Why would SA decode the same attachment > sometimes, but not always. My server is running SA 3.0.2, Postfix 2.0 > and amavisd-new 2.1.2. ^ If you run SpamAssassin directly, then amavisd-new is not invo

Re: Problems with spamassassin suddenly forward all mails as SPAM

2005-02-10 Thread up
As I'm sure others will point out, SA doesn't "move spams" to any folders, it just marks them up. You have some other filtering mechanism doing that, and that's where the problem is. On Thu, 10 Feb 2005, Tony Yat-Tung Cheung wrote: > Hi, > > I have configured spamassassin to filter my mails and

Problems with spamassassin suddenly forward all mails as SPAM

2005-02-10 Thread Tony Yat-Tung Cheung
Hi, I have configured spamassassin to filter my mails and move the spams to a mail folder. It works fine for a while (e.g. several weeks) and then it would start forwarding all mails, include those marked as SPAM and not marked as SPAM, to the mail folder. Once, the problem arises, I found that

Re: [OT] GPG Keysigning at Linux World

2005-02-10 Thread Duncan Findlay
On Wed, Feb 09, 2005 at 05:23:46PM -0500, Chris Santerre wrote: > >From: Rod Begbie [mailto:[EMAIL PROTECTED] > >If anyone's going to be at Boston Linux World next week, there's going > >to be a GPG keysigning party on Tuesday evening. Details are at > >http://www.biglumber.com/x/web?ev=68156. A

RE: DCC implementation questions

2005-02-10 Thread Jason Bennett
When I run spamassassin in debug, I get debug: config: read file /etc/mail/spamassassin/local.cf debug: DCCifd is not available: no r/w dccifd socket found. In that spamassassin config file I have (I tried without this entry and get same thing): dcc_dccifd_path /var/dcc In the /var/dcc I have: