Re: RDJ and bogus virus warnings rule

2005-04-07 Thread .rp
I did not have a problem downloading it this week.

Net::DNS trouble

2005-04-07 Thread Craig Baird
I just attempted an upgrade from SA 2.64 to 3.0.2, and am now having problems with SURBLs and RBLs not working. I upgraded all of the perl modules mentioned in INSTALL to the latest versions prior to installing SA 3.0.2, including Net::DNS, which is at version 0.49. When I run: spamassassin -

RE: Spam is marked but delivered anyway

2005-04-07 Thread Rakesh
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, April 08, 2005 12:13 AM To: users@spamassassin.apache.org Subject: Re: Spam is marked but delivered anyway > On Thursday 07 April 2005 09:38, [EMAIL PROTECTED] typed: > > > SpamAssassin is only a tagging

Re: Spam is marked but delivered anyway

2005-04-07 Thread Evan Platt
At 11:42 AM 4/7/2005, you wrote: so I would think that SpamAssassin is the one deciding on which spam to drop and which spam to let through. SpamAssassin is only a filter. SpamAssassin cannot 'drop' mail or reject mail. If that isn't the case, any idea what file I need to edit to block the BAYES_

Re: Spam is marked but delivered anyway

2005-04-07 Thread mailings
> On Thursday 07 April 2005 09:38, [EMAIL PROTECTED] typed: > >> I recently took over admin duty for a mailserver. The system I'm taking >> over is a FreeBSD mailserver with SpamAssassin 3.0.2 running. >> Unfortunately, a significant amount of spam gets through, and I think I >> know the reason.

Re: Tables obscuring words

2005-04-07 Thread Todd Ellison
Matt Kettler wrote: See yesterday's thread "Re: Extra Sare Rules for meds?" Jesse Houwing posted a beta-grade rule for this: BODY TABLEOBFU m{]+|"[^"]+)>(<([^>]+|"[^"]+)>)*[a-z]{1,2}(<([^>]+|"[^"]+)>)*]+|"[^"]+)>}i Argh. I hate when I do that. Looks like I just stopped reading that thread to

Re: Tables obscuring words

2005-04-07 Thread Matt Kettler
Todd Ellison wrote: > Hi all. > > I have seen several spammers lately using tables to obscure offensive > words in the message body. Most of them get caught by other tests, > but some get through. Do you guys have any ideas for rules to check > this? (Example table source below) See yesterday'

Tables obscuring words

2005-04-07 Thread Todd Ellison
Hi all. I have seen several spammers lately using tables to obscure offensive words in the message body. Most of them get caught by other tests, but some get through. Do you guys have any ideas for rules to check this? (Example table source below) Thanks Todd ---Begin example-

RE: Re[2]: it's getting worse again

2005-04-07 Thread Chris Santerre
> >I hold down a 50-60 hour work week, family, volunteer time for NPOs, >plus personal interests, and still find time to fight spam via SARE, >because it's that important to me. Personal preference. > >If you don't want to spend the time required to tweak SA to a high >enough performance (you proba

RE: Rule-sets

2005-04-07 Thread David Brodbeck
On Thu, 7 Apr 2005 12:27:58 +0100, Gray, Richard wrote > You probably also want to learn more about regular expressions too. > There > Was a lot of stuff that I didn't know before I started doing this. > > In particular, useful things like back chaining and forward referencing > are useful to unde

Re: Re[2]: it's getting worse again

2005-04-07 Thread Florin Andrei
On Thu, 2005-04-07 at 11:24 -0400, Kevin Sullivan wrote: > If you think about this, it isn't surprising. At the time the mass-checks > ran for 3.0.2, the 3.0.2 rules caught almost all of the spam of that time. > (If they didn't, then people wrote rules until they did.) So dynamic > systems li

Re: rules du jour and windows

2005-04-07 Thread Chris Thielen
Hi Ben, Ben Wylie wrote: I run spamassassin on windows. I like the SARE rules and would love to be able to automatically keep them up to date. Is there a windows alternative for "rules do jour"? I do have cygwin installed. Is it easy to set it up with that? I guess I would prefer to do it in windo

RE: rules du jour and windows

2005-04-07 Thread Bret Miller
> I run spamassassin on windows. > I like the SARE rules and would love to be able to > automatically keep them > up to date. Is there a windows alternative for "rules do > jour"? I do have > cygwin installed. Is it easy to set it up with that? I guess > I would prefer > to do it in windows, but if

rules du jour and windows

2005-04-07 Thread Ben Wylie
I run spamassassin on windows. I like the SARE rules and would love to be able to automatically keep them up to date. Is there a windows alternative for "rules do jour"? I do have cygwin installed. Is it easy to set it up with that? I guess I would prefer to do it in windows, but if cygwin is the

Re: it's getting worse again

2005-04-07 Thread Kris Deugau
Robert Menschel has already addressed most of your points pretty well. MEE too!!oneone!1!! Florin Andrei wrote: > > > I've a fairly demanding job, i've a few pretty convoluted personal > projects i'm involved in, i've a family and other details that > typically show up if one is not an archetypa

RE: Rule-sets

2005-04-07 Thread Chris Santerre
>-Original Message- >From: Bowie Bailey [mailto:[EMAIL PROTECTED] >Sent: Thursday, April 07, 2005 10:44 AM >Cc: users@spamassassin.apache.org >Subject: RE: Rule-sets > > >From: Ron McKeating [mailto:[EMAIL PROTECTED] >> >> On Thu, 2005-04-07 at 12:27 +0100, Gray, Richard wrote: >> > > >

RE: Rule-sets

2005-04-07 Thread Bowie Bailey
From: Ron McKeating [mailto:[EMAIL PROTECTED] > > On Thu, 2005-04-07 at 12:27 +0100, Gray, Richard wrote: > > > > Thanks to all the replied, we have rules_du_jour and I am now > > > > getting an idea of how it works. I suppose the obvious question is > > > > has anybody written a good howto on wri

Re: Rule-sets

2005-04-07 Thread Matt Kettler
At 05:53 AM 4/7/2005, Matthew Newton wrote: The "main" site for rules is generally http://www.rulesemporium.com/, and spefically the http://www.rulesemporium.com/rules.htm page. They have descriptions for what they do. You'll also find more on http://www.exit0.us/, including the RulesDuJour script

Re: Retain original headers

2005-04-07 Thread Kevin Peuhkurinen
Harry Putnam wrote: [Possible duplicate Alert... Posted on gmane a few days ago but did I'd like to get the old behavior temporarily, where SA just inserted headers into the mail instead of encapsulating etc. Just to see what is really happening for sure. Scanning thru perldoc Mail::SpamAssassin::

RE: it's getting worse again

2005-04-07 Thread Bowie Bailey
From: Florin Andrei [mailto:[EMAIL PROTECTED] > > On Wed, 2005-04-06 at 15:53 -0400, Kris Deugau wrote: > > > I'm a little puzzled what you're asking for, then; addon rulesets are > > available from SARE, and somewhere there's a tool to automatically check > > for updates on those rules. > > My

RE: Rule-sets

2005-04-07 Thread Ron McKeating
On Thu, 2005-04-07 at 12:27 +0100, Gray, Richard wrote: > > > Thanks to all the replied, we have rules_du_jour and I am > > now getting > > > an idea of how it works. I suppose the obvious question is > > has anybody > > > written a good howto on writing your own rules. And if so > > where is

Got it installed, now what?

2005-04-07 Thread Josh Peters
Parden me for my ignorance, or maybe this queston doesn't belong here, but I've looked at all the documentation and it seems there's an endless amount of ways to setup SpamAssassin. So I'll start from the beginning. I have a VPS FreeBSD server, running Apacahe and Sendmail as my mail service.

Retain original headers

2005-04-07 Thread Harry Putnam
[Possible duplicate Alert... Posted on gmane a few days ago but did not appear on my server... now posted direct to list] Running SA 3.0.2 I may be just missunderstanding something here, if so I hope someone will help me straighten out my flawed view of how this works. I pull down mail from an

Re: WHich is better

2005-04-07 Thread Peter Marshall
Thank you for the detailed response. spamassassin wil automatically autolearn ham as ham ? I thought you had to autolearn ham messages manually (and do an equil number as you do with spam). I also read that you have to learn about 200 of both spam and no spam messages for it to work ... Also,

Re: Create mbox directory structure

2005-04-07 Thread Duncan Hill
On Thursday 07 April 2005 14:22, [EMAIL PROTECTED] typed: > Hello All > > Does someone know a linux command to create a mailbox (mbox) without X11 or > KDE. A mbox mailbox is merely a named file in a location. mkdir, touch. So long as the directory is there, most MTAs and MDAs can deal with the

Create mbox directory structure

2005-04-07 Thread bruno . delladucata
Hello All Does someone know a linux command to create a mailbox (mbox) without X11 or KDE. I have to create two mailboxes for Spam and Ham learning Each mbox has its own user account. Thanks

RE: WHich is better

2005-04-07 Thread Gray, Richard
> -Original Message- > From: Peter Marshall [mailto:[EMAIL PROTECTED] > Sent: 07 April 2005 13:30 > To: SpamAssassin list > Subject: WHich is better > > I am looking for opinions. > > Problems I have with both: > 1. What is the best method of obtaining the spam / ham. I > have the

RE: Rule-sets

2005-04-07 Thread Chris Santerre
> >Thanks to all the replied, we have rules_du_jour and I am now >getting an >idea of how it works. I suppose the obvious question is has anybody >written a good howto on writing your own rules. And if so where is it? > >Ron see this page: http://www.rulesemporium.com/links.htm I need to add m

Re: lint: issues detected - where?

2005-04-07 Thread Dermot Paikkos
Excellent - big typo in my meta rule. I had spelt BAYES as BAYNES. Thanx Anthony. Dp. On 7 Apr 2005 at 13:39, [EMAIL PROTECTED] wrote: > Hi, > > I think your problems lie here: > > > > warning: description exists for non-existent rule > ANTI_BAYES_SPAMCOP_00 warning: description exists for

Re: lint: issues detected - where?

2005-04-07 Thread a . peacock
Hi, I think your problems lie here: warning: description exists for non-existent rule ANTI_BAYES_SPAMCOP_00 warning: description exists for non-existent rule ANTI_BAYES_SPAMCOP_40 warning: description exists for non-existent rule ANTI_BAYES_SPAMCOP_05 warning: description exists for non-exis

WHich is better

2005-04-07 Thread Peter Marshall
I am looking for opinions. I have been building a new mailserver to replace my old one. The new one has postfix, Cyrus-imap, anomy, spamassassin. I am trying to set up the bays auto-learn stuff. Each user has a home directory on the server (they can not log onto the server). I am using the Mai

lint: issues detected - where?

2005-04-07 Thread Dermot Paikkos
hi, SA 3.0.0 with exim-acl I ran spamassassin -D --lint after making a change to the local.cf and noticed the following: debug: tests=ALL_TRUSTED,BAYES_40,MISSING_HEADERS,MISSING_SUBJECT,NO_REAL_NAM E debug: subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_MSGID,__ UNUSABLE_MSGID

RE: Rule-sets

2005-04-07 Thread Gray, Richard
> > Thanks to all the replied, we have rules_du_jour and I am > now getting > > an idea of how it works. I suppose the obvious question is > has anybody > > written a good howto on writing your own rules. And if so > where is it? > You probably also want to learn more about regular expressio

Re: Rule-sets

2005-04-07 Thread Matthew Newton
On Thu, Apr 07, 2005 at 11:00:52AM +0100, Ron McKeating wrote: > On Thu, 2005-04-07 at 10:53 +0100, Matthew Newton wrote: > > Ron, > > > > On Thu, Apr 07, 2005 at 10:23:24AM +0100, Ron McKeating wrote: > > > Thanks to all of you who replied about the job offer spams. Could > > > anybody point at t

Re: Rule-sets

2005-04-07 Thread Ron McKeating
On Thu, 2005-04-07 at 10:53 +0100, Matthew Newton wrote: > Ron, > > On Thu, Apr 07, 2005 at 10:23:24AM +0100, Ron McKeating wrote: > > Thanks to all of you who replied about the job offer spams. Could > > anybody point at the best site for the latest rulesets and an > > explanation of what each on

Re: Rule-sets

2005-04-07 Thread Matthew Newton
Ron, On Thu, Apr 07, 2005 at 10:23:24AM +0100, Ron McKeating wrote: > Thanks to all of you who replied about the job offer spams. Could > anybody point at the best site for the latest rulesets and an > explanation of what each one does. The "main" site for rules is generally http://www.rulesempor

Rule-sets

2005-04-07 Thread Ron McKeating
Thanks to all of you who replied about the job offer spams. Could anybody point at the best site for the latest rulesets and an explanation of what each one does. Ron -- Ron McKeating Senior IT Services Specialist Computing Services Loughborough University 01509 222329

Re: Spam is marked but delivered anyway

2005-04-07 Thread Duncan Hill
On Thursday 07 April 2005 09:38, [EMAIL PROTECTED] typed: > I recently took over admin duty for a mailserver. The system I'm taking > over is a FreeBSD mailserver with SpamAssassin 3.0.2 running. > Unfortunately, a significant amount of spam gets through, and I think I > know the reason. > > The sp

Spam is marked but delivered anyway

2005-04-07 Thread mailings
I recently took over admin duty for a mailserver. The system I'm taking over is a FreeBSD mailserver with SpamAssassin 3.0.2 running. Unfortunately, a significant amount of spam gets through, and I think I know the reason. The spam that gets through is marked with [Suspected Spam]. Spamassasin say

Re: it's getting worse again

2005-04-07 Thread Martin Hepworth
Florin Depends on how well it's setup in the first place. The default ruleset are a pretty good starting point, but I find I need to add quite a few extra ones in from www.rulesemporium.com etc in order to get a reason catch rate. the URI-RBL from surbl.org has help tremendously in providing a

Re: RDJ and bogus virus warnings rule

2005-04-07 Thread Martin Hepworth
Chris Tim does seem to have quite a few problems with people getting to this on a regular basis. Perhaps he needs to host directly off the SARE pages Or can anyone give him bandwidth??? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 Chris wrote: I thin

Re[2]: it's getting worse again

2005-04-07 Thread Robert Menschel
Hello Florin, Wednesday, April 6, 2005, 5:40:10 PM, you wrote: FA> So what is the reason why BAYES_99 is scored so low? The algorithm/process that determines scores came out with a low score like that. It seemed a good bet for this new version. Many of us have decided that it wasn't, and we've

Re: it's getting worse again

2005-04-07 Thread Robert Menschel
Hello Florin, Wednesday, April 6, 2005, 11:29:51 AM, you wrote: FA> I'm using SA since... well, a long time ago, and one thing that i FA> noticed was a pattern in the way its efficiency varies: it's pretty good FA> soon after a new release, then it gets continuously worse; then a new FA> release

Re: it's getting worse again

2005-04-07 Thread Florin Andrei
On Wed, 2005-04-06 at 15:53 -0400, Kris Deugau wrote: > This WILL HAPPEN if you rely entirely on static rules - spammers adjust > their tactics to avoid those rules. That's why dynamic rules or systems > such as Bayes and SURBL are so important. I religiously feed false negatives back into Bayes

RDJ and bogus virus warnings rule

2005-04-07 Thread Chris
I think RDJ has been trying for about a week and a half now to download this rule. I either get a '403' error or today I got a new one: RulesDuJour Run Summary on cpollock.localdomain: The following rules had errors: Tim Jackson's (et al) bogus virus warnings had an unknown error: curl exit cod