Mail::SpamAssassin to setup required_score

2005-05-09 Thread Markus Hardiyanto
can i use Mail::SpamAssassin to setup required_score? i already read the manual but still don't know how to do it. i creating a perl script that calling Mail::SpamAssassin to check emails is it a spam or not. i want that i can configure the "required_score" from my script, not from /etc/spamassa

Re: Problems reporting spam with Pyzor

2005-05-09 Thread Kevin W. Gagel
Jamie, The output you provided shows your running pyzor from SpamAssassin. Have you tested your Pyzor install as standalone? Try this: su -l USERID USERID should be the user that your MTA/SpamAssassin will run as. Then: pyzor -d check < mailmessage | less The output will show you any debug mess

Re: how to config SA to scan mail from localhost

2005-05-09 Thread Duncan Hill
On Tuesday 10 May 2005 05:16, forum wrote: > I'm testing the SA but my server can't connect to outside world. Thus, i've > to send mail from localhost to myself to find how accurate SA is. > Unfortunately, SA don't scan mails that sent from localhost. SA scans what you hand to it to scan. If your

how to config SA to scan mail from localhost

2005-05-09 Thread forum
I'm testing the SA but my server can't connect to outside world. Thus, i've to send mail from localhost to myself to find how accurate SA is. Unfortunately, SA don't scan mails that sent from localhost.   how can I reconfig it to scan every mail.   really need your help heng

Problems reporting spam with Pyzor

2005-05-09 Thread Jamie L. Penman-Smithson
[Apologies if this gets sent to the list twice, the first time it didn't appear.] I'm having problems reporting spam through pyzor with spamassassin -r. I'm running SA 3.0.2 with amavisd-new and pyzor (1:0.4.0+cvs20030201-4), razor2 (2.670) from Debian (Sid) packages, DCC (from source). Reporting

Re: Small Problem with Razor2 via SpamAssassin

2005-05-09 Thread Theo Van Dinter
On Mon, May 09, 2005 at 02:37:19PM -0700, Kevin W. Gagel wrote: > I've taken the actual message and removed the markup from > SpamAssassin and run a razor-check and come up empty. This > manual check says that the message is not listed (with and > without the SA markup). Razor can list both messag

Re[4]: HTML Table SPAM? ** RESOLVED **

2005-05-09 Thread Robert Menschel
Hello Devon, Monday, May 9, 2005, 11:30:36 AM, you wrote: DH> Many thanks to Bob on the recent SARE rules release.  This DH> caught those HTML Table SPAMS!!! But I notice there was no description on those report lines. I'll have that fixed by the weekend. Bob Menschel

Re: Use of uninitialized value error ?

2005-05-09 Thread Robert Menschel
Hello Simon, Monday, May 9, 2005, 2:46:15 AM, you wrote: SB> Hi Everyone, SB> Upgraded from 2.64 to 3.0.3 today + a few of the SARE rulesets, and I'm SB> noticing a spamd warning message in the log files occasionally that was SB> not occuring on the test server I evaluated 3.0.3 on: SB> May 9

Re: Difference in scores between spamc and spamassassin

2005-05-09 Thread Matt Kettler
At 06:26 PM 5/9/2005, Nick Gilbert wrote: X-Spam-Status: Yes, score=10.8 required=5.0 tests=AWL,HELO_DYNAMIC_COMCAST,INFO_TLD,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_SORBS_DUL,URIBL_OB_SURBL,URIBL_SBL autolearn=unavailable version=3.0.3 but: spamc < spa

Poisoned bayes in SQL?

2005-05-09 Thread BQ
Hi All, I configured SpamAssassin on a busy server. It was/is working nicely but I can see lately that a lot of spam is getting through with BAYES_00 being hit, which leads me to thing that the Bayes database was poisoned. So couple of questions for more knowledgable ... 1) I didn't touch any ex

Re: Difference in scores between spamc and spamassassin

2005-05-09 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nick Gilbert wrote: | Hi, | | Why do I get (VERY) different results on the same machine if I call | spamassassin in two different ways? Eg: | | spamassassin -D < spam.txt | | Gives: | | X-Spam-Status: Yes, score=10.8 required=5.0 | tests=AWL,HELO_DYNAMI

RE: Way to evade URI checks

2005-05-09 Thread Bret Miller
> > On 5/7/2005 8:40 AM +0200, Rakesh wrote: > > > http://www.coolestrxever.com; (a semicolon) > > > http://www.coolestrxever.com, (a comma) > > > http://www.coolestrxever.com. (a fullstop) > > > http://www.coolestrxever.com? (a question mark) > > > > add constantcontact.com) to the list. Actually

Difference in scores between spamc and spamassassin

2005-05-09 Thread Nick Gilbert
Hi, Why do I get (VERY) different results on the same machine if I call spamassassin in two different ways? Eg: spamassassin -D < spam.txt Gives: X-Spam-Status: Yes, score=10.8 required=5.0 tests=AWL,HELO_DYNAMIC_COMCAST,INFO_TLD,RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_BL_SPAMCOP_NET,

Re: delete email

2005-05-09 Thread jdow
From: "Jonathan Nichols" <[EMAIL PROTECTED]> > jdow wrote: > > From: "Jonathan Nichols" <[EMAIL PROTECTED]> > > > >>Is there any way in the stock SA install to tell it to delete email? I > >>know you can do it with procmail, milter, etc, but that's not what I want. > >> > >>I'm asking because the

Re: delete email

2005-05-09 Thread Jonathan Nichols
jdow wrote: From: "Jonathan Nichols" <[EMAIL PROTECTED]> Is there any way in the stock SA install to tell it to delete email? I know you can do it with procmail, milter, etc, but that's not what I want. I'm asking because the question has come up about "can spamassassin itself with NO add-ons be se

Small Problem with Razor2 via SpamAssassin

2005-05-09 Thread Kevin W. Gagel
I'm using SpamAssassin 3.0.2 with Razor2 (agent 2.61). I have a user that has had his email from his home ISP tagged as spam when he sends to himself at work (here). Looking at the headers shows that SpamAssassin found the message listed in Razor2. I've taken the actual message and removed the ma

Re: delete email

2005-05-09 Thread jdow
>From a typical email: X-Spam-Level: * X-Spam-Status: No, score=1.1 required=5.0 tests=BAYES_50,FM_NO_STYLE, HTML_80_90,HTML_MESSAGE,SPF_HELO_PASS,SPF_PASS,TW_JC autolearn=disabled version=3.0.2 The X-Spam-Level: entry allows you to filter to /dev/null just fine. You can even have a graduated fi

Re: delete email

2005-05-09 Thread jdow
From: "Jonathan Nichols" <[EMAIL PROTECTED]> > Is there any way in the stock SA install to tell it to delete email? I > know you can do it with procmail, milter, etc, but that's not what I want. > > I'm asking because the question has come up about "can spamassassin > itself with NO add-ons be set

Re: Way to evade URI checks

2005-05-09 Thread jdow
From: "Niek" <[EMAIL PROTECTED]> > On 5/7/2005 8:40 AM +0200, Rakesh wrote: > > http://www.coolestrxever.com; (a semicolon) > > http://www.coolestrxever.com, (a comma) > > http://www.coolestrxever.com. (a fullstop) > > http://www.coolestrxever.com? (a question mark) > > add constantcontact.com) t

Re: Re[2]: HTML Table SPAM? ** RESOLVED **

2005-05-09 Thread Devon Harding
Many thanks to Bob on the recent SARE rules release.  This caught those HTML Table SPAMS!!! 0.05FORGED_RCVD_HELOReceived: contains a forged HELO 0.07HTML_FONT_INVISIBLEHTML font color is same as background 0.00HTML_MESSAGEHTML included in message 0.60J_CHICKENPOX_121alpha-pock-2alpha 0.60J_CHICKE

bayes issue

2005-05-09 Thread Jon Fraley
My current setup: SpamAssassin version 3.0.2 running on Perl version 5.6.1. Everyday I do an /usr/bin/sa-learn on a ham folder and a spam folder for which users drop emails in. However this morning after running sa-learn against the folders my nham and nspam have both dropped below 200. Now of c

Re: Problem with SA/spamass-milter/MySQL/bayes.

2005-05-09 Thread Steven W. Orr
On Monday, May 9th 2005 at 12:11 -0500, quoth Dan Nelson: =>In the last episode (May 08), Steven W. Orr said: =>> Since I switched over to using MySQL to hold the userprefs, awl and bayes, =>> I see that the bayes processing no longer functions. =>> =>> Here's the relevant bayes debug output for

RE: delete email

2005-05-09 Thread Bill Baird
The way I have sa setup is if SA exits with an error code, it will drop the email. I don't do this, because I would much rather just mark the message as spam and let the enduser delete it themselves. A nice feature would be if SA could makes messages as spam for a certain score or higher and th

RE: delete email

2005-05-09 Thread Bowie Bailey
From: Jonathan Nichols [mailto:[EMAIL PROTECTED] > > Is there any way in the stock SA install to tell it to delete email? I > know you can do it with procmail, milter, etc, but that's not what I want. > > I'm asking because the question has come up about "can spamassassin itself > with NO add-ons

Re: delete email

2005-05-09 Thread James R
Jonathan Nichols wrote: Is there any way in the stock SA install to tell it to delete email? I know you can do it with procmail, milter, etc, but that's not what I want. I'm asking because the question has come up about "can spamassassin itself with NO add-ons be set to delete email." Short an

delete email

2005-05-09 Thread Jonathan Nichols
Is there any way in the stock SA install to tell it to delete email? I know you can do it with procmail, milter, etc, but that's not what I want. I'm asking because the question has come up about "can spamassassin itself with NO add-ons be set to delete email."

Re: Can't find the cause for "lint: 1 issue"

2005-05-09 Thread Theo Van Dinter
On Mon, May 09, 2005 at 03:39:33PM +0300, turgut kalfaoglu wrote: > Hi there. when I "lint" the spamassassin, > I get 1 issues, but I can't tell what it is from the log: > > # spamassassin --lint --debug [...] > debug: Excluding meta test L_BROKEN_ANTIVIRUS; unsolved meta dependencies: > L_BROKEN

Re: Way to evade URI checks

2005-05-09 Thread Niek
On 5/7/2005 8:40 AM +0200, Rakesh wrote: http://www.coolestrxever.com; (a semicolon) http://www.coolestrxever.com, (a comma) http://www.coolestrxever.com. (a fullstop) http://www.coolestrxever.com? (a question mark) add constantcontact.com) to the list. Niek

SpamCopURI not working, was RE: More Messed Up www URLs

2005-05-09 Thread Stewart, John
> On Friday, May 6, 2005, 3:23:56 PM, John Stewart wrote: > > I upgraded just the other day (at which point I suspect I > broke something) > > as I saw on a site somewhere that 2.6.3 was vulnerable to a > DOS attack. I > > upgraded to 2.6.4 for SA, and 0.25 for SpamCopURI > > > Grepping through

RE: SpamAssassin 3.0.2 flags messages from users@spamassassin.apa che.org

2005-05-09 Thread Bowie Bailey
From: Loren Wilton [mailto:[EMAIL PROTECTED] > > Of course, the better way to do this is not let the list mail get to SA in > the first place. I let SA mark all my mail. Mail from this list gets sorted out before I sort out the spam. That way I still have the SA markup in case I want to look at

Re: Stupid rule question

2005-05-09 Thread Matt Kettler
At 10:52 AM 5/9/2005, Michael W Cocke wrote: Isn't getting caught by this rule? bodyMWC19 /americaspharma.com/i describeMWC19 local rule19 score MWC19 20.0 change it from a body rule to a uri rule, also for correctness add a \ in front of . (otherwise . is a wil

RE: Stupid rule question

2005-05-09 Thread Chris Santerre
>-Original Message- >From: Kevin Peuhkurinen [mailto:[EMAIL PROTECTED] >Sent: Monday, May 09, 2005 11:02 AM >To: [EMAIL PROTECTED] >Subject: Re: Stupid rule question > > >Michael W Cocke wrote: >> This is really getting on my nerves... Using Spamassassin >3.03, could >> someone please t

Re: Stupid rule question

2005-05-09 Thread Kevin Peuhkurinen
Michael W Cocke wrote: This is really getting on my nerves... Using Spamassassin 3.03, could someone please tell me why this message - Dear Customer, We have all the rx you may need. http://americaspharma.com/ From hard to find pain killers to diet solutions. Thank you, S

Stupid rule question

2005-05-09 Thread Michael W Cocke
This is really getting on my nerves... Using Spamassassin 3.03, could someone please tell me why this message - Dear Customer, We have all the rx you may need. http://americaspharma.com/ >From hard to find pain killers to diet solutions. Thank you, Supply. -

Re: Oops - drug rules need more work

2005-05-09 Thread jdow
From: "Robert Menschel" <[EMAIL PROTECTED]> > Yes, please send me a copy and I'll see if it has new manglings worth > testing for. I sent the body again privately. It was quoted in its entirety in the email on the 8th at about 4:30AM. (The headers don't count. It's body rules that gave it a miss.

Re: Oops - drug rules need more work

2005-05-09 Thread Robert Menschel
Hello jdow, Sunday, May 8, 2005, 4:21:26 AM, you wrote: j> This text sailed right through all the SARE rules except one ratware j> rule: j> ===8<--- j> X-Spam-Status: No, score=4.4 required=5.0 j> tests=BAYES_80,DATE_IN_PAST_12_24, j> RATWR10a_MESSID,URIBL_SBL autolearn=disabled version=3.0.2 j>

Re: SpamAssassin don't see my body instruction ?

2005-05-09 Thread jdow
From: "Phibee Network operation Center" <[EMAIL PROTECTED]> > but don't see: > body PERSO_CORPS_88 /\C_I_A_L_I_S\b/i > score PERSO_CORPS_885 Try this: body PERSO_CORPS_88 /C_I_A_L_I_S\b/i {^_^}

Re: Can't find the cause for "lint: 1 issue"

2005-05-09 Thread James R
turgut kalfaoglu wrote: Hi there. when I "lint" the spamassassin, I get 1 issues, but I can't tell what it is from the log: # spamassassin --lint --debug debug: SpamAssassin version 3.0.3 debug: Score set 0 chosen. <> debug: Excluding meta test L_BROKEN_ANTIVIRUS; unsolved meta dependencies: L

Can't find the cause for "lint: 1 issue"

2005-05-09 Thread turgut kalfaoglu
Hi there. when I "lint" the spamassassin, I get 1 issues, but I can't tell what it is from the log: # spamassassin --lint --debug debug: SpamAssassin version 3.0.3 debug: Score set 0 chosen. debug: running in taint mode? yes debug: Running in taint mode, removing unsafe env vars, and resetting PATH

Re: hillsdale media = PWN3D

2005-05-09 Thread Martin Hepworth
Jonathan Nichols wrote: Ok, right on! I fixed the trusted_networks thing, and check this out! BTW, the jerks are using another domain.. for a new "division." my god, CAN-SPAM is a piece of crap. How the *hell* did it get passed? Ugh. Jonathan Yup complete waste of time, not unlike the crud gettin

SpamAssassin don't see my body instruction ?

2005-05-09 Thread Phibee Network operation Center
Hi i use SpamAssassin 3.0.1 on a qmail/qmail-scanner 1.25st. i have my list into personnal.cf my problems that is SpamAssassin see my instruction: header PERSO_SUJET_18 Subject =~ /New! Vìagra soft/i score PERSO_SUJET_18 3.0 but don't see: body PERSO_CORPS_88 /\C_I_A_

Re: how to force SA to scan mail that send from php

2005-05-09 Thread wolfgang
In an older episode (Monday 09 May 2005 12:08), forum wrote: > My server uses a local ip so it can't receive real > mails. Thus i've to feed every mail by myself. Be aware that SA uses a lot of tests that are based on "outside" information like Received: headers. If the mails that you feed do not

Re: how to force SA to scan mail that send from php

2005-05-09 Thread forum
mails that i received form other servers are added with a line such as "X-Spam-Status: No, hits=-4.4 required=4.0" This type of mail is very important for me because i'm studying the accuracy of SA for my project. My server uses a local ip so it can't receive real mails. Thus i've to feed every ma

Use of uninitialized value error ?

2005-05-09 Thread Simon Byrnand
Hi Everyone, Upgraded from 2.64 to 3.0.3 today + a few of the SARE rulesets, and I'm noticing a spamd warning message in the log files occasionally that was not occuring on the test server I evaluated 3.0.3 on: May 9 21:41:39 mail spamd[30290]: Use of uninitialized value in substitution (s///) a

Re: how to force SA to scan mail that send from php

2005-05-09 Thread wolfgang
In an older episode (Monday 09 May 2005 11:01), forum wrote: > i use the command > mail([EMAIL PROTECTED],"subject","message"); > and there are many keywords that affect my rules > but when i receive it, there aren't any header from spam assassin In other mails you receive, there are headers from

Re: Opteron or Xeon for runnning SpamAssassin ?

2005-05-09 Thread Dan Hollis
On Mon, 9 May 2005, Robert Gomezi wrote: > I am not sure if the extra registers on the Opteron help regexp > performance or not ? The extra bandwidth of the opteron helps (if you run dual channel) helps the most, as does the better cache. Plus the opteron is better price/performance ratio than t

how to force SA to scan mail that send from php

2005-05-09 Thread forum
Hi, I've wrote php command to send an e-mail to myself and i found that SA didn't scan it.   i use the command mail([EMAIL PROTECTED],"subject","message"); and there are many keywords that affect my rules but when i receive it, there aren't any header from spam assassin   which part of SA cod

Opteron or Xeon for runnning SpamAssassin ?

2005-05-09 Thread Robert Gomezi
Hi, Has anybody compared the performance of running SpamAssassin on a dual Opteron and compared it with a dual Xeon ? Is there any substantial performance differences ? I am not sure if the extra registers on the Opteron help regexp performance or not ? Thanks Robert

Re: SpamAssassin 3.0.2 flags messages from users@spamassassin.apache.org

2005-05-09 Thread Joshua Tinnin
On Sun 8 May 05 18:46, "Thomas Cameron" <[EMAIL PROTECTED]> wrote: > > so I whitelist on: > > List-Id: > > Do you mind posting the exact syntax in your local.cf to do this? Well, I think Loren answered it, but I tend to use other filtering tools to deal with that, so in procmail, I'd do somethi

Re: SpamAssassin 3.0.2 flags messages from users@spamassassin.apache.org

2005-05-09 Thread Loren Wilton
> > so I whitelist on: > > List-Id: > > Do you mind posting the exact syntax in your local.cf to do this? Don't know about the OP's, but mine is header WHITELIST_SA List-Id =~ /(?:dev|users)\.spamassassin\.apache\.org/i describe WHITELIST_SA SA List score WHITELIST_SA -100 You can simpl