Re: INVALID_MSGID hitting improperly?

2005-05-01 Thread Loren Wilton
| If a rule doesn't FP for you, then you can set it to 20. Sure, you *can*, but why would you want to score a single rule at 20? Especially one like this which, as we've just seen, can produce FP's. Well, as an example I have a couple of rules that *can* (and for others, outright *would*) FP,

spamd Blowing up

2005-05-01 Thread Jeremy Beaty
I'm currently running SpamAssassin 3.01 on a linux box running Exim 4.43. When I upgraded to SA 3.01 I also configured exim to reject messages at data time based on a spam score that was sufficiently high. Since doing that I have found that every once in a while one of the spamd child

Re: upgrade to SA 3.0.3 - pod2man path issue

2005-05-01 Thread Tim Boyer
On Sat, 30 Apr 2005 17:24:24 -0400, Greg Allen [EMAIL PROTECTED] wrote: FYI: Ok, I just tried upgrading 3.0.2 to 3.0.3 and get the following -- During install, after I run: perl Makefile.PL It asks me a few setup questions then I get: Warning: I could not locate your

Re: Adding addresses to blacklist manually

2005-05-01 Thread Antonio DeLaCruz
There are two places that you can look for blacklist entries. Either in the local.cf file or in the user_prefs file. I use the user_prefs since not everyone wants the same addresses blocked. Squirrel Mail is supposed to have a plug in that will allow each user to manage their user_prefs file.

Re: HTML Table SPAM?

2005-05-01 Thread Devon Harding
There's got to be a way to stop this. I'm getting over 100 of these a day. -DevonOn 4/30/05, Bret Miller [EMAIL PROTECTED] wrote: In an older episode (Saturday 30 April 2005 16:03), Devon Harding wrote: Has any seen these kind of SPAM passing through? Where the SPAMMER would use HTML tables to

Re: spamd Blowing up

2005-05-01 Thread Michael Parker
On Sat, Apr 30, 2005 at 08:06:46PM -0600, Jeremy Beaty wrote: From the release notes for 3.02 and 3.03 I don't believe this has been addressed as a specific issue, so though I will be upgrading, I don't think it will fix this problem. Does anyone know what causes this and ways to fix it?

Re: SpamAssassin 3.0.3 Released

2005-05-01 Thread John Andersen
On Friday 29 April 2005 05:49 am, [EMAIL PROTECTED] wrote: one minor complaint: effectively released on a Friday. I can't be the only one with a company policy of not changing stuff on Friday (before the weekend) Ok, Brian, next time we will insist the developers check with you for your

Re: Reporting scams to fraudwatchinternational

2005-05-01 Thread Loren Wilton
Are yoiu cc-ing yourself on the reports? I've had stupid mail systems kick back mail I sent to people claiming 'relaying denied' if I had a cc that wasn't at the target destinaiton. Loren

SA + SQL + per-user prefs

2005-05-01 Thread Gerald V. Livingston II
OK, this is probably just an over-cautious MySQL question. All of the examples I look at for setting up per-user prefs using SQL show creating a table that looks like: username pref value So, if I want to allow users to control 5 values I would have a table that looks like thsi: user1 pref1

regexp: exclude a string

2005-05-01 Thread wolfgang
in a SA rule, i want to match /p(?:0|o)rtf(?:0|o)(?:\||l)i(?:0|o)/ but not portfolio what exactly is the regexp syntax to achieve that? thanks, wolfgang

OT: The highest score?

2005-05-01 Thread Roman Serbski
Hi all, What was the highest score you've ever seen? I received a message yesterday that was scored with 51.9(!). =) SA in action: ;-) Sat, 30 Apr 2005 19:45:21 KGST:80593: SA: REPORT hits = 51.9/3.5 4.1 MIME_BOUND_DD_DIGITS Spam tool pattern in MIME boundary 1.2 SUBJ_HAS_SPACES Subject

Re: OT: The highest score?

2005-05-01 Thread Doc Schneider
I've seen one as high as 94.2 and was a really short spam too. Funny how scoing works. 8*) -Doc (SA/SARE/URIBL/SURBL - Stealth Ninja) Roman Serbski wrote: Hi all, What was the highest score you've ever seen? I received a message yesterday that was scored with 51.9(!). =) SA in action: ;-) Sat, 30

Re: regexp: exclude a string

2005-05-01 Thread Loren Wilton
/p(?:0|o)rtf(?:0|o)(?:\||l)i(?:0|o)/ but not portfolio /(?!portfolio)p(?:0|o)rtf(?:0|o)(?:\||l)i(?:0|o)/ Loren

Re: Reporting scams to fraudwatchinternational

2005-05-01 Thread Chris
On Saturday 30 April 2005 10:59 pm, Loren Wilton wrote: Are yoiu cc-ing yourself on the reports? I've had stupid mail systems kick back mail I sent to people claiming 'relaying denied' if I had a cc that wasn't at the target destinaiton. Loren Nope, I finally managed to get an email

Re: SA + SQL + per-user prefs

2005-05-01 Thread JamesDR
Gerald V. Livingston II wrote: OK, this is probably just an over-cautious MySQL question. All of the examples I look at for setting up per-user prefs using SQL show creating a table that looks like: username pref value So, if I want to allow users to control 5 values I would have a table that

Upgrading to 3.0.3 - SPAN indexes stale?

2005-05-01 Thread Dan O'Brien
I upgraded to SA 3.0.3 with no problem on a test server shortly after it came out. No problem. Now that I'm trying to update my production server from 3.0.2 to 3.0.3 (since Friday eve), every CPAN mirror I try results in the following messages Going to read

Upgrading to 3.0.3 - *CPAN* indexes stale?

2005-05-01 Thread Dan O'Brien
(Fixed duh! mistake in subject.) I upgraded to SA 3.0.3 with no problem on a test server shortly after it came out. No problem. Now that I'm trying to update my production server from 3.0.2 to 3.0.3 (since Friday eve), every CPAN mirror I try results in the following messages Going to read

Question about Bayes training - mozilla specifically

2005-05-01 Thread Bookworm
I've read through the archives several times, and hoped that over the last year or so someone would build the functionality, or at least mention it one way or another - I haven't seen it. Is there any way to take an already trained Mozilla bayes structure and hand it directly off to

Re: character set / encoding problem?

2005-05-01 Thread wolfgang
In an older episode (Sunday 01 May 2005 02:07), Loren Wilton wrote: Again and again, we receive messages that contain stuff like a href=3dhttp://advinc-ma=2enetfirms=2ecom/; instead of a href=http://advinc-ma.netfirms.com/; That prevents uri / body rules like e.g. no/yes

Re: regexp: exclude a string

2005-05-01 Thread wolfgang
In an older episode (Sunday 01 May 2005 12:49), Loren Wilton wrote: /p(?:0|o)rtf(?:0|o)(?:\||l)i(?:0|o)/ but not portfolio /(?!portfolio)p(?:0|o)rtf(?:0|o)(?:\||l)i(?:0|o)/ thanks, works fine. wolfgang

Re: Upgrading to 3.0.3 - *CPAN* indexes stale? - FIXED

2005-05-01 Thread Dan O'Brien
I'm still not sure exactly what was happening, but I was able to get it working after I deleted the ~/.cpan directory. Previously, I was just deleting ~/.cpan/Metadata. Dan O'Brien __ Axon Solutions, Inc. Telephone: 703-845-8400

Re: Adding addresses to blacklist manually

2005-05-01 Thread Gregory P. Ennis
Antonio, Thanks for your help!!! Actually, I have looked at each of these files and can not find the an entry in any of the files that represents the message that I manually tested. I was loged in as root when I tested. I have also logged in with other accounts and tested but still have not

Re: Upgrading to 3.0.3 - SPAN indexes stale?

2005-05-01 Thread John Andersen
On Sunday 01 May 2005 06:57 am, Dan O'Brien wrote: Warning: This index file is 42 days old.   Please check the host you chose as your CPAN mirror for staleness.   I'll continue but problems seem likely to happen. You just want to tell cpan to use a different source as its primary. You can do

Re: SpamAssassin 3.0.3 Released

2005-05-01 Thread Raymond Dijkxhoorn
Hi! Subject: SpamAssassin 3.0.3 Released From: Michael Parker [EMAIL PROTECTED] To: [EMAIL PROTECTED], users@spamassassin.apache.org, dev@spamassassin.apache.org Date: Thu, 28 Apr 2005 22:22:22 -0500 (20:22 PDT) check it out! was that

Folder redirection

2005-05-01 Thread Mark Harwood
Apologies if I missed this rather simple question in the FAQ's, but I really did look. I'm on fedora core 3, using spamassassin 3.0.3 with spamc/spamd. All seems to be working fine (probably as designed). The headers are getting rewritten just fine. What I want to do is STOP the spam from

Re: OT: The highest score?

2005-05-01 Thread John Andersen
On Sunday 01 May 2005 02:02 am, Roman Serbski wrote: Hi all, What was the highest score you've ever seen? I received a message yesterday that was scored with 51.9(!). =) Since you can control the scores by setting the score for one or several tests, I just don't see how this is in any way

Re: Folder redirection

2005-05-01 Thread Gregory P. Ennis
Mark, Take a look at your /etc/procmailrc file which probably controls where your spam is being routed. This is the entry in my procmailrc file that controls the spam to our system. If had the entry below all you would need to do is to remove or comment out all lines after # This

Re: Reporting scams to fraudwatchinternational

2005-05-01 Thread Martin G. Diehl
Loren Wilton wrote: Are yoiu cc-ing yourself on the reports? I've had stupid mail systems kick back mail I sent to people claiming 'relaying denied' if I had a cc that wasn't at the target destinaiton. Loren When I want to have a 'record' copy of that sort of correspondence ... I use bcc:

Re: Reporting scams to fraudwatchinternational

2005-05-01 Thread John Andersen
On Sunday 01 May 2005 02:26 pm, Martin G. Diehl wrote: Loren Wilton wrote: Are yoiu cc-ing yourself on the reports? I've had stupid mail systems kick back mail I sent to people claiming 'relaying denied' if I had a cc that wasn't at the target destinaiton. Loren When I want