Re[2]: [SARE] header rules updated

2005-02-18 Thread Robert Menschel
Hello George, Thursday, February 17, 2005, 8:16:21 AM, you wrote: Fair enough. In this most recent publication of updates to the 70_sare_header*.cf family, 40 rules were added, and 50 rules were moved from one file to another, including 8 or 9 that were moved from various files to the archive

Re: Bayes - Training Legitimate Mail as Spam

2005-02-18 Thread Robert Menschel
Hello Matt, Thursday, February 17, 2005, 6:30:10 AM, you wrote: MF I do have a question with regards to training. Once in a while, I MF receive advertisement e-mails from trusted sites. What is the MF best practice to handle these messages? Is it more prudent to MF sa-learn --spam them, or to

Re: Bayes filters not running

2005-02-18 Thread Theo Van Dinter
On Thu, Feb 17, 2005 at 08:52:11PM -0600, Lightology Postmaster wrote: in local.cf I have use_bayes 1 and bayes_auto_learn 1 but in the processed email header I don't see sa running the bayes filters. what can be wrong? Run with -D, see what it says. My guess is that you haven't learned

Re: Bayes - Training Legitimate Mail as Spam

2005-02-18 Thread Matt Florido
Robert Menschel wrote: Hello Matt, Thursday, February 17, 2005, 6:30:10 AM, you wrote: [...] Why do you receive these advertising emails? What defines a trusted site? As an example, I subscribe my domains through GoDaddy.com. Once in a while, I receive notices such as a domain is going to

Re: [SARE] header rules updated

2005-02-18 Thread George Georgalis
Hi Bob, On Thu, Feb 17, 2005 at 06:11:49PM -0800, Robert Menschel wrote: Hello George, Thursday, February 17, 2005, 8:16:21 AM, you wrote: Fair enough. In this most recent publication of updates to the 70_sare_header*.cf family, 40 rules were added, and 50 rules were moved from one file to

Re: [SARE] header rules updated

2005-02-18 Thread George Georgalis
Didn't realize this was a on list with my private reply On Thu, Feb 17, 2005 at 04:51:08PM -0600, Chris Thielen wrote: George, Maybe the way RDJ does the roll back needs be addressed? I know version 2 is nearing release, and this wouldn't be difficult to add: It could check the cf file for

Re[2]: [SARE] header rules updated

2005-02-18 Thread Robert Menschel
Hello George, Thursday, February 17, 2005, 7:43:27 PM, you wrote: GG Hi Bob, And as I said, the equivalent change log for this last update to the header* files would have been close to 100 lines long. Is that what you would like to see? GG I count approximately 35 active cf files in

Re: [SARE] header rules updated

2005-02-18 Thread George Georgalis
On Thu, Feb 17, 2005 at 07:57:54PM -0800, Robert Menschel wrote: Hello George, Thursday, February 17, 2005, 7:43:27 PM, you wrote: GG I count approximately 35 active cf files in rulesemporium. Of course the GG changes aren't evenly distributed, but that's an average of 3 changes GG per file,

RE: Continued problems with RBL

2005-02-18 Thread Austin Weidner
According to the docs: On UNIX systems the defaults are read from the following files, in the order indicated: /etc/resolv.conf $HOME/.resolv.conf ./.resolv.conf What OS is this server running? Try running this: perl -MNet::DNS -e '$r=Net::DNS::Resolver-new;print

Re: Less spam blocked with 3.02 - AWL-related?

2005-02-18 Thread Jeff Chan
On Thursday, February 17, 2005, 6:45:58 AM, Juergen Georgi wrote: Score set 3 - the fourth score - applies when Bayes is enabled and network tests are enabled. In addition, non-zero score set 3 values in 3.0.2 are much lower than those in 2.64, e.g. 2.64: score SORTED_RECIPS 4.299 4.300

Re: Continued problems with RBL

2005-02-18 Thread Jeff Chan
On Thursday, February 17, 2005, 8:56:40 PM, Austin Weidner wrote: According to the docs: On UNIX systems the defaults are read from the following files, in the order indicated: /etc/resolv.conf $HOME/.resolv.conf ./.resolv.conf What OS is this server running? Try

RE: Continued problems with RBL

2005-02-18 Thread Austin Weidner
Do you have any of the other files: /etc/resolv.conf $HOME/.resolv.conf ./.resolv.conf where . and $HOME are for the user SA runs as. Jeff C. Jeff, Thanks for the reply... I am happy to say: PROBLEM SOLVED! I was so happy to see this: debug: RBL: success for 12 of

Re: Bayes for VoIP anyone?

2005-02-18 Thread Alan Premselaar
Richard Ozer wrote: I can't wait to tell my customers that they need to get SpitAssassin. RO That just makes me think of 'Alumn' (referenced from the old Bugs Bunny / Daffy Duck cartoons) alan

Re: Bayes for VoIP anyone?

2005-02-18 Thread Alan Premselaar
Jim Maul wrote: Chris Santerre wrote: Autodialing for commercial solicitation to a residence without prior consent by a for-profit group that you're not already doing business with is automatically subject to a $500 minimum damage per-call. I don't know of many residences with VoIP ;) Also: LOL

ROLEX spam

2005-02-18 Thread Gray, Richard
Does anyone have a good ruleset for catching all this fake watch spam? I'm seeing more of it in our systems here, and don't want to duplicate effort if one of you fine people has already got one written. TIA Richard --- This email from

Whitelising IP's?

2005-02-18 Thread Johann Spies
I have received the following request: We request to be on your whitelist. We are double opt-in only. We operate using several different upstream providers, and the complete list of our ip address blocks can be found at Apparently they provide mailing-list services and our spamfilter has

Re: ROLEX spam

2005-02-18 Thread Martin Hepworth
Richard they tend to get caught by our general rules from the SARE ninja's/URI-RBL etc. what version of SA and what extra rules are you running?? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Gray, Richard wrote: Does anyone have a good ruleset for

Re: Bayes filters not running

2005-02-18 Thread Martin Hepworth
Chris might not have met any tokens in the email it knows about. Or you haven't pre-fed it with 200 spam and 200 ham to kick start it. try running spammassasin -D --lint and see if it mentions opening and using the bayes DB -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel:

alternatives

2005-02-18 Thread R McGlue
I am aware that this is a SA list.. and my posting my generate some flames... but can anyone perhaps highlight some of the main plus points of SA over .eg. Dspam?? One of my objectives here in work is to (even though we are enjoying the best anti spam experience in recent history since i

Re: ROLEX spam

2005-02-18 Thread Robert Brooks
Gray, Richard wrote: Does anyone have a good ruleset for catching all this fake watch spam? http://www.violetdreams.com/sa/rolex.cf I'm seeing more of it in our systems here, and don't want to duplicate effort if one of you fine people has already got one written. someone needs to get these

RE: alternatives

2005-02-18 Thread Gray, Richard
Hi Ronan, I myself have been looking at this for the company I work for, and may be able to provide some insight. DSPAM is an entirely statistical filter, so is similar in behaviour to the BAYES part of SA. It implements a number of more sophisticated algorithms and strategies for recognising

Re: spam ham ratio for bayes filter

2005-02-18 Thread Thomas Arend
Hello Thomas, Am Donnerstag, 17. Februar 2005 19:17 schrieb Thomas Bolioli: Interesting but what happens in the case where someone, like me, is getting 250+ spam a day and only about ten or so legitimate emails? This is not counting this account that my mailing lists go to which I have far

Looking for rule set to combat loan offer spam

2005-02-18 Thread Chris Withers
Matt Kettler wrote: At 05:27 AM 2/17/2005, Chris Withers wrote: I now only have TRIPWIRE ANTIDRUG EVILNUMBERS in my_rules_du_jour. Are these still worth having? They don't seem to have been updated in ages... Antidrug is likely to not be updated, I'm lacking time to work on it. It's also now a

Re: ROLEX spam

2005-02-18 Thread Thomas Arend
Am Freitag, 18. Februar 2005 10:11 schrieb Gray, Richard: Does anyone have a good ruleset for catching all this fake watch spam? My rules can be found here: http://www.rulesemporium.com/forums/showthread.php?s=postid=329#post329 There is also a mass check with a former version. Thomas I'm

Re: Looking for rule set to combat loan offer spam

2005-02-18 Thread Richard Ozer
I find that the following additional rulesets helps SA squash 99.7% of our spam; including mortgage. This is with SA 3.0x 70_sare_random.cf bogus-virus-warnings.cf weeds.cf chickenpox.cf stocks.cf biz.cf evilnumbers.cf mangled.cf tripwire.cf All of these are avaiable at rulesemporium. -

Re: Looking for rule set to combat loan offer spam

2005-02-18 Thread Richard Ozer
I find that the following additional rulesets helps SA squash 99.7% of our spam; including mortgage. This is with SA 3.0x 70_sare_random.cf bogus-virus-warnings.cf weeds.cf chickenpox.cf stocks.cf biz.cf evilnumbers.cf mangled.cf tripwire.cf All of these are avaiable at rulesemporium. -

where is database updated by sa-learn

2005-02-18 Thread Tracey Gates
Title: Message I have a server that I have been running SpamAssassin's sa-learnon for a long time. I just built another server and would like tocopy the information for the production server over to the new server so I don't have to have the new server re-learn the spam. I have SA 2.63 on

Re: where is database updated by sa-learn

2005-02-18 Thread Joe Polk
It really depends. If you've not given it a path, then it will be in a subdirectory under each user, usually if you're been sa-learning as root then look under root's .spamassassin directory for a bayes directory. If you don't intend to use user prefs (letting users have their own bayes db's) then

RE: Whitelising IP's?

2005-02-18 Thread Chris Santerre
I have received the following request: We request to be on your whitelist. We are double opt-in only. We operate using several different upstream providers, and the complete list of our ip address blocks can be found at Apparently they provide mailing-list services and our spamfilter has

Re: Continued problems with RBL

2005-02-18 Thread Stuart Johnston
Austin Weidner wrote: Hopefully someone else can learn from this because the docs are a little deceiving, as you said it says in the docs that the order is checked like: /etc/resolv.conf $HOME/.resolv.conf ./.resolv.conf However it was checking like this: $HOME/.resolv.conf /etc/resolv.conf I've

Re: yet more whitelisting clarification...

2005-02-18 Thread Matt Kettler
At 12:15 PM 2/17/2005, you wrote: whitelist_from_rcvd [EMAIL PROTECTED] apache.org I have these headers to work with: Erm.. is that it? Where are the Received: headers?? You can't match a whitelist_from_rcvd rule without a Received: header...

RE: Less spam blocked with 3.02 - AWL-related?

2005-02-18 Thread Chris Santerre
-Original Message- From: Jeff Chan [mailto:[EMAIL PROTECTED] Sent: Friday, February 18, 2005 12:30 AM To: SpamAssassin Users Subject: Re: Less spam blocked with 3.02 - AWL-related? On Thursday, February 17, 2005, 6:45:58 AM, Juergen Georgi wrote: Score set 3 - the fourth score -

RE: Continued problems with RBL

2005-02-18 Thread Rosenbaum, Larry M.
Actually, these files are essentially ANDed together. It doesn't just stop once it has read your /etc/resolv.conf, it keeps going and adds in servers from the other two files. The relevant code is here: http://search.cpan.org/src/CREIN/Net-DNS-0.48/lib/Net/DNS/Resolver/UNIX. pm Also you can

Re: Looking for rule set to combat loan offer spam

2005-02-18 Thread Matt Kettler
At 06:33 AM 2/18/2005, Chris Withers wrote: At 05:27 AM 2/17/2005, Chris Withers wrote: I now only have TRIPWIRE ANTIDRUG EVILNUMBERS in my_rules_du_jour. Are these still worth having? They don't seem to have been updated in ages... Antidrug is likely to not be updated, I'm lacking time to

RE: where is database updated by sa-learn

2005-02-18 Thread Tracey Gates
I don't have a bayes directory but I have the following files in the .spamassassin directory for the user that I have been sa-learning. bayes_toks bayes_seen bayes_journal I don't intend to use user prefs. Can I copy these files in the spamassassin directory on my new server and it be

RE: ROLEX spam

2005-02-18 Thread Tracey Gates
I downloaded the .cf files from the rulesemporium.com site but I don't know what to do with them. Do I just place them in the same folder as my local.cf and SpamAssassin will automatically use them or do I need to place something in a configuration file to make SpamAssassin use them? Tracey

RE: where is database updated by sa-learn

2005-02-18 Thread Kang, Joseph S.
-Original Message- From: Tracey Gates [mailto:[EMAIL PROTECTED] Sent: Friday, February 18, 2005 11:41 AM To: 'Joe Polk'; users@spamassassin.apache.org Subject: RE: where is database updated by sa-learn I don't have a bayes directory but I have the following files in the

Re: ROLEX spam

2005-02-18 Thread John Fleming
On Friday 18 February 2005 12:53 pm, Tracey Gates wrote: I downloaded the .cf files from the rulesemporium.com site but I don't know what to do with them. Do I just place them in the same folder as my local.cf and SpamAssassin will automatically use them or do I need to place something in a

Is my bayes database healthy?

2005-02-18 Thread Vincent
Hi folks, I am running clamav/amavisd-new/spamassassin, spamassassin is called from amavis. my amavis is runned as user clamav. I did not explicitly set bayes_auto_learn,bayes_path.. in /etc/mail/spamassassin/local.cf, but under ~clamav, I can see bayes database file, I run sa-learn --dump magic

SA 3.02 - How to relocate auto-whitelist, bayes_journal, bayes_seen and bayes_toks to another device?

2005-02-18 Thread David A . Roth
I know this might seem like an odd request for those of you with tons of disk space available so please be kind. I'm running SpamAssassin version 3.0.2. For server space reasons (I'm a user on this system not root), I need to relocate auto-whitelist, bayes_journal, bayes_seen and bayes_toks

RE: ROLEX spam

2005-02-18 Thread Chris Santerre
I downloaded the .cf files from the rulesemporium.com site but I don't know what to do with them. Do I just place them in the same folder as my local.cf and SpamAssassin will automatically use them or do I need to place something in a configuration file to make SpamAssassin use them? Correct,

spamassassin and LDAP lookups

2005-02-18 Thread Eric A. Hall
http://svn.apache.org/repos/asf/spamassassin/branches/3.0/sql/README (which has a bad MIME-type definition, btw [text/english is not real]) says that SQL lookups are only used with spamd, and so presumably they are not used with spamassassin itself. Further poking seems to prove this assumption

Re: alternatives

2005-02-18 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Well, let us put the *other* side of the story ;) See http://wiki.apache.org/spamassassin/WhyUseRules . - --j. Gray, Richard writes: Hi Ronan, I myself have been looking at this for the company I work for, and may be able to provide some

Re: spamassassin and LDAP lookups

2005-02-18 Thread Matt Kettler
At 02:03 PM 2/18/2005, Eric A. Hall wrote: http://svn.apache.org/repos/asf/spamassassin/branches/3.0/sql/README (which has a bad MIME-type definition, btw [text/english is not real]) says that SQL lookups are only used with spamd, and so presumably they are not used with spamassassin itself.

Re: spamassassin and LDAP lookups

2005-02-18 Thread Eric A. Hall
On 2/18/2005 2:17 PM, Matt Kettler wrote: At 02:03 PM 2/18/2005, Eric A. Hall wrote: http://svn.apache.org/repos/asf/spamassassin/branches/3.0/sql/README (which has a bad MIME-type definition, btw [text/english is not real]) says that SQL lookups are only used with spamd, and so presumably

Re: spamassassin and LDAP lookups

2005-02-18 Thread Matt Kettler
At 02:21 PM 2/18/2005, Eric A. Hall wrote: That's not mutually exclusive, and is actually somewhat inclusive. I mean, if people are using the spamassassin script on a low-volume basis, then there's a low volume of SQL/LDAP lookups, so the complaint is nulled. True, but it's also intended for users

Re: SA 3.02 - How to relocate auto-whitelist, bayes_journal, bayes_seen and bayes_toks to another device?

2005-02-18 Thread Kris Deugau
David A. Roth wrote: I know this might seem like an odd request for those of you with tons of disk space available so please be kind. I'm running SpamAssassin version 3.0.2. For server space reasons (I'm a user on this system not root), I need to relocate auto-whitelist, bayes_journal,

Re: spamassassin and LDAP lookups

2005-02-18 Thread jdow
From: Eric A. Hall [EMAIL PROTECTED] On 2/18/2005 2:17 PM, Matt Kettler wrote: At 02:03 PM 2/18/2005, Eric A. Hall wrote: http://svn.apache.org/repos/asf/spamassassin/branches/3.0/sql/README (which has a bad MIME-type definition, btw [text/english is not real]) says that SQL lookups are

Re: SA 3.02 - How to relocate auto-whitelist, bayes_journal, bayes_seen and bayes_toks to another device?

2005-02-18 Thread Kevin Peuhkurinen
David A. Roth wrote: I know this might seem like an odd request for those of you with tons of disk space available so please be kind. I'm running SpamAssassin version 3.0.2. For server space reasons (I'm a user on this system not root), I need to relocate auto-whitelist, bayes_journal,

Re: spamassassin and LDAP lookups

2005-02-18 Thread Michael Parker
FYI, confusing subject lines and content don't help get your questions answered. Are you talking about LDAP or SQL? In this case maybe there isn't much of a distinction, but when I filter by subject only, the chances are lower that I'm gonna read an email about LDAP, but pretty high I'll read one

RE: where is database updated by sa-learn

2005-02-18 Thread Tracey Gates
I followed the steps below that are posted on the website http://spamassassin.apache.org/full/3.0.x/dist/UPGRADE but I get an error when I run the sa-learn --sync after copying the bayes files over from my version 2.63 to 3.0.2. The files I copied are the bayes_toks and bayes_seen files. Error

Re: where is database updated by sa-learn

2005-02-18 Thread Michael Parker
On Fri, Feb 18, 2005 at 01:47:26PM -0600, Tracey Gates wrote: I followed the steps below that are posted on the website http://spamassassin.apache.org/full/3.0.x/dist/UPGRADE but I get an error when I run the sa-learn --sync after copying the bayes files over from my version 2.63 to 3.0.2.

*** Can anyone understand this?

2005-02-18 Thread Sao31113
Hi: See how strange it is. I have two servers, both of them runinng Linux Fedora Core-2 with Spam Assassin. The configuration files .cf are the same for both. When I send an email to one address in the same server where my mailbox is, it is being discarded as Spam. When I send to one address in

Re: spamassassin and LDAP lookups

2005-02-18 Thread Eric A. Hall
On 2/18/2005 2:41 PM, Michael Parker wrote: FYI, confusing subject lines and content don't help get your questions answered. Are you talking about LDAP or SQL? I'm talking about LDAP but it uses the SQL interfaces (from what I gather) and the only real docs are for SQL so that's what I have

Re: spamassassin and LDAP lookups

2005-02-18 Thread Michael Parker
On Fri, Feb 18, 2005 at 02:51:42PM -0500, Eric A. Hall wrote: On 2/18/2005 2:41 PM, Michael Parker wrote: FYI, confusing subject lines and content don't help get your questions answered. Are you talking about LDAP or SQL? I'm talking about LDAP but it uses the SQL interfaces (from what

Re: spamassassin and LDAP lookups

2005-02-18 Thread Eric A. Hall
On 2/18/2005 2:54 PM, Michael Parker wrote: So, you missed the ldap/README file? http://spamassassin.apache.org/full/3.0.x/dist/doc/ doesn't have it and http://spamassassin.apache.org/doc.html has zero references to ldap. So yeah I missed it. -- Eric A. Hall

Re: spamassassin and LDAP lookups

2005-02-18 Thread Matt Kettler
At 02:49 PM 2/18/2005, Eric A. Hall wrote: You need it added to your third-party script, as, based on your description, it's invoking the SA perl API's directly. http://www.worlddesign.com/index.cfm/rd/mta/spampd.htm is what I'm currently using. It doesn't provide any additional parameters over

Re: SA 3.02 - How to relocate auto-whitelist, bayes_journal, bayes_seen and bayes_toks to another device?

2005-02-18 Thread David A . Roth
On Feb 18, 2005, at 2:38 PM, Kevin Peuhkurinen wrote: David A. Roth wrote: I know this might seem like an odd request for those of you with tons of disk space available so please be kind. I'm running SpamAssassin version 3.0.2. For server space reasons (I'm a user on this system not root), I

Re: SA 3.02 - How to relocate auto-whitelist, bayes_journal, bayes_seen and bayes_toks to another device?

2005-02-18 Thread Kevin Peuhkurinen
David A. Roth wrote: On Feb 18, 2005, at 2:38 PM, Kevin Peuhkurinen wrote: David A. Roth wrote: I know this might seem like an odd request for those of you with tons of disk space available so please be kind. I'm running SpamAssassin version 3.0.2. For server space reasons (I'm a user on this

Re: ROLEX spam

2005-02-18 Thread Thomas Arend
Am Freitag, 18. Februar 2005 19:01 schrieb John Fleming: On Friday 18 February 2005 12:53 pm, Tracey Gates wrote: I downloaded the .cf files from the rulesemporium.com site but I don't know what to do with them. Do I just place them in the same folder as my local.cf and SpamAssassin will

Re: spamassassin and LDAP lookups

2005-02-18 Thread Eric A. Hall
On 2/18/2005 3:05 PM, Matt Kettler wrote: spampd implements calls directly to the SA perl API via Mail::SpamAssassin. By using the API, the tool becomes responsible for directly setting up some of the user configuration. In particular, the caller of the perl API specifies where to get

Re: error in BayesStore.pm

2005-02-18 Thread Thomas Arend
Am Donnerstag, 17. Februar 2005 09:47 schrieb Hans-Georg Gloeckler: I use spamassassin version 2.64, SuSE 8.2 and qmail. I get the following problem: Argument_\010862517M-U^TB_isn't_numeric_in_numeric_gt_()_a t_/usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/BayesStore.pm_line_1260. The

Re: spamassassin and LDAP lookups

2005-02-18 Thread Eric A. Hall
On 2/18/2005 3:39 PM, Eric A. Hall wrote: Basically... I've already got postfix calling LDAP for a variety of filters (see http://www.ehsco.com/reading/20040916ncf1b.gif), and I'd like to extend those LDAP entries for global spamassassin tests (I don't do any per-user tests at the global

Re: spamassassin and LDAP lookups

2005-02-18 Thread Matt Kettler
At 03:39 PM 2/18/2005, Eric A. Hall wrote: Is the LDAP stuff in SA usable for global tests, or is it per-user only, or is there less of a difference than I am imagining here? The LDAP stuff is to replace user_prefs, not the global test list. Since you need to get as far as parsing the site config

Re: Time for my monthly beating again...

2005-02-18 Thread Joe Emenaker
Joe Flowers wrote: Very preliminary results are no less than AWESOME. So... how are you implementing the drifting spam threshold? - Joe smime.p7s Description: S/MIME Cryptographic Signature