Re: DCC in Spamassassin

2005-03-13 Thread Norman Zhang
I also uncommented the DCCIFD_ARGS line. # used to start dccifd # a common value is # DCCIFD_ARGS=-SHELO -Smail_host -SSender -SList-ID DCCIFD_ARGS= My DCCIFD_ARGS is empty. Should I add the options that is shown above? Was there a dccd file created in /etc/init.d as part of the installation

Re: SA addr tests need to be updated

2005-03-13 Thread List Mail User
... Date: Sat, 12 Mar 2005 18:46:52 -0500 From: Eric A. Hall [EMAIL PROTECTED] User-Agent: Mozilla Thunderbird 1.0 (Windows/20041206) X-Accept-Language: en-us, en MIME-Version: 1.0 To: users@spamassassin.apache.org Subject: Re: SA addr tests need to be updated References: [EMAIL PROTECTED] [EMAIL

Re: DCC in Spamassassin

2005-03-13 Thread Matt Kettler
At 10:07 PM 3/12/2005, Norman Zhang wrote: Someone pointed out to me I should look for rcdcc, but I only have # slocate cdcc /usr/bin/cdcc I'm not too familiar with the scripts that come with DCC for this.. I just wrote my own init script to start dccifd. Should I use this instead? BTW do I

RE: DCC in Spamassassin

2005-03-13 Thread Greg Allen
My dcc on RedHat 8.0 is located in /var/dcc directory You should see DCCIFD there as well. I had to change a line in the /var/dcc/dcc_conf to DCCIFD_ENABLE=ON Also, make sure you install the latest DCC with DCCIFD from the Rayolite website (if you do not have it). Put the path to DCC in

What's wrong with my test?

2005-03-13 Thread shirlei
Hi everyone! Probably I'm doing a stupid question... but, anyway, here it go: I saved in a folder some messages that I received classified as no spam. So, i run these command: sa-learn --spam path to folder So I take the following : Learned from 2 message(s) (3 message(s) examined). So, I

Re: DCC in Spamassassin

2005-03-13 Thread Bill Randle
On Sat, 2005-03-12 at 19:07 -0800, Norman Zhang wrote: I also uncommented the DCCIFD_ARGS line. # used to start dccifd # a common value is # DCCIFD_ARGS=-SHELO -Smail_host -SSender -SList-ID DCCIFD_ARGS= My DCCIFD_ARGS is empty. Should I add the options that is shown above? I

Re: What's wrong with my test?

2005-03-13 Thread shirlei
Citando Matt Kettler [EMAIL PROTECTED]: At 11:57 PM 3/12/2005, you wrote: So, I redirect those messages to me and I received them as no spam again! Define exactly what you mean by redirect those messages. What specific actions did you do? I used redirect tool from webmail (horde)

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-13 Thread Bob Proulx
Jens Ahlin wrote: When trying to build rpm using rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz fails with error: Failed build dependencies: perl(Digest::SHA1) is needed by spamassassin-3.0.2-1 perl(HTML::Parser) is needed by spamassassin-3.0.2-1 After installing these modules

Re: rule for mail not to me

2005-03-13 Thread Vicki Brown
At 20:15 -0800 03/06/2005, Vicki Brown wrote: I can create a user rule for mail not addressed (To or Cc) to me header CF_NOT_FOR_METoCc !~ /[EMAIL PROTECTED]/ score CF_NOT_FOR_ME 4.0 describe CF_NOT_FOR_ME Neither To nor Cc me However, the

Bayes DB does not grow anymore

2005-03-13 Thread GRP Productions
Hello, for some days now my bayesian DB does not seem to grow. Its size remains stable. It is read with no problems by SA 3.0.2, but nothing new is written. I send an email to me, it is classified as BAYES_50. I sa-learn it as spam, send it again, and it is still BAYES_50 (I expected to see it

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-13 Thread Jens Ahlin
Jens Ahlin wrote: When trying to build rpm using rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz fails with error: Failed build dependencies: perl(Digest::SHA1) is needed by spamassassin-3.0.2-1 perl(HTML::Parser) is needed by spamassassin-3.0.2-1 After installing these

Re: [SURBL-Discuss] List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
On Friday, March 11, 2005, 11:27:52 PM, Jeff Chan wrote: Does anyone have or know about a list of spam-advertised URIs where the spam they appeared in was sent through open relays, zombies, open proxies, etc. In other words does anyone know of a list of spamvertised web sites or their domains

Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
On Sunday, March 13, 2005, 5:12:30 AM, Jeff Chan wrote: On Friday, March 11, 2005, 11:27:52 PM, Jeff Chan wrote: Does anyone have or know about a list of spam-advertised URIs where the spam they appeared in was sent through open relays, zombies, open proxies, etc. In other words does anyone

Re: Bayes DB does not grow anymore

2005-03-13 Thread Kai Schaetzl
GRP Productions wrote on Sun, 13 Mar 2005 11:21:12 +0200: for some days now my bayesian DB does not seem to grow. Its size remains stable. It is read with no problems by SA 3.0.2, but nothing new is written. I send an email to me, it is classified as BAYES_50. I sa-learn it as spam, send

Re: What's wrong with my test?

2005-03-13 Thread Kai Schaetzl
wrote on Sun, 13 Mar 2005 01:57:18 -0300: So, I redirect those messages to me and I received them as no spam again! As I just wrote to GRP Productions: Bayes doesn't work this way. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Tests results are different?

2005-03-13 Thread David Suen
Hi all, I installed spam assassin (3.0.2) in my linux box and looks like does not work (probably due to my configuration). I tried RTFM but still cannot make it work. Situation: I use spamassassin with simscan + qmail. My problem is when I use the spamassassin (not spamc) + sample-spam.txt it

Re: [SURBL-Discuss] List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Kai Schaetzl
Jeff Chan wrote on Sun, 13 Mar 2005 05:12:30 -0800: One fairly easy for anyone running a large SpamAssassin installation to help us get this data would be to simply grep for XBL and SURBL rules hitting the same message and report out the URI domains from those messages. I have a large

Re: [Slight OT] Problems with perl modules req for rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz

2005-03-13 Thread List Mail User
...The person with two clocks is never really sure of the current time. OT, but... above - *not* a good quote, but it sounds nice) To be `sure' of the time, you need at least three clocks (look at the documentation for ntp/ntpd). ... ... Paul Shupak

Re: Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
On Sunday, March 13, 2005, 5:36:55 AM, Raymond Dijkxhoorn wrote: Hi! Perhaps some kind person could write a reporting function in SpamAssassin for this? Hmm, perhaps if we could extract *all* URI domains from messages sent through XBLed senders then prioritize those say by frequency of

Re: [SURBL-Discuss] Re: Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
On Sunday, March 13, 2005, 7:31:01 AM, Raymond Dijkxhoorn wrote: I'm not asking for trap data. I'm asking to look for XBL hits, then take the URIs from messages that hit XBL. In other words I want to get the sites that are being advertised through exploited hosts. Nothing to do with traps

Re: Was: List of spamvertised sites sent via zombies, open proxies, etc.?

2005-03-13 Thread Jeff Chan
It would probably help if I explained that I brought up two different but related ides in quick succession: 1. Asking for URI domains of messages sent through zombies, open relays, open proxies, etc. detected by XBL that mentioned SURBL URIs. 2. Asking for URI domains of messages sent through

[RD] evilnumbers update changes

2005-03-13 Thread Matt Yackley
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi all, I've released a new version of evilnumbers and there are several changes in the new version. Ruleset name change: In order to get this old setup in line with current SARE standards the name of the ruleset has changed from evilnumbers.cf to

Re: Bayes DB does not grow anymore

2005-03-13 Thread GRP Productions
This doesn't prove anything. sa-learn --dump magic shows you what's inside. Also, Bayes is not a checksum system like Razor, that's its strength. If you learn something to it that means that it extracts tokens (short pieces) from the message and adjusts its internal probability for them being

Re: Bayes DB does not grow anymore

2005-03-13 Thread GRP Productions
That is the output of --dump magic? I haven't ever seen it formatted that nicely. I assume you skipped the first line, but there's also missing the expire atime delta. So, where do you got this from? Not directly from sa-learn --dump magic I'd say. You are running SA thru some interface? You