Re: reporting spam/non-spam for those mis-identification of spam email

2005-08-31 Thread Adrian Mak
2005/9/1, jdow <[EMAIL PROTECTED]>: > For the installation here, two experienced computer users, I have a pair > of folders on the Linux SpamAssassin machine for each user in the user's > $HOME/Mail directory. I have the dovecot pop3/imap server for extracting > mail from the system. We prefer the

Problems keeping SA running...

2005-08-31 Thread Paul 'Google' Smit
Linux: Fedora Core 4 (upgrade from 3) sendmail: 8.13.4-2 spamassassin: 3.0.4-1 spamass-milter: 0.3.0-8 --- It has run for a day and now it stopped working. I'm currently having the same problems as described here: http://www.mail-archive.com/sp

Re: some error when perform spamassassin --lint -D

2005-08-31 Thread Robert Menschel
Hello Adrian, Wednesday, August 31, 2005, 4:10:29 PM, you wrote: AM> debug: PATH included '/root/bin', which doesn't exist, dropping. Were you running as user = root? $HOME/bin is normally included in the SA $PATH, if it exists. If it doesn't exist, no harm done. AM> debug: diag: module not in

Re: hp.com / atdmt.com busted??

2005-08-31 Thread Robert Menschel
Hello Rob,    Wednesday, August 31, 2005, 12:04:03 PM, you wrote:   RMPS> SEE:  RMPS> http://pvsys.com/busted01.txt    RMPS> This was sent to an e-mail address for a client of mine's  RMPS> former employee. ...    RMPS> A few days ago, this box recieved what appears to be an  RMPS> option confi

Re: reporting spam/non-spam for those mis-identification of spam email

2005-08-31 Thread JamesDR
Adrian Mak wrote: the train byans learn spam, we can use sa-learn to pass a spam or non-spam email I know that some webmail e.g. squirrelmail, has such feature that allow user to mark an email is a spam/non-spam so that next time the same originate email will not marked as spam. But if email cli

Re: reporting spam/non-spam for those mis-identification of spam email

2005-08-31 Thread jdow
For the installation here, two experienced computer users, I have a pair of folders on the Linux SpamAssassin machine for each user in the user's $HOME/Mail directory. I have the dovecot pop3/imap server for extracting mail from the system. We prefer the folder system that OE allows with pop3 conn

reporting spam/non-spam for those mis-identification of spam email

2005-08-31 Thread Adrian Mak
the train byans learn spam, we can use sa-learn to pass a spam or non-spam email I know that some webmail e.g. squirrelmail, has such feature that allow user to mark an email is a spam/non-spam so that next time the same originate email will not marked as spam. But if email clients like outlook ex

Re: some error when perform spamassassin --lint -D

2005-08-31 Thread Matt Kettler
Adrian Mak wrote: > my mailsystem is using spamassassin 3.0.4 > when I performed spamassassin --lint -D > I saw some strange message. > > debug: PATH included '/root/bin', which doesn't exist, dropping. harmless. It's debug information and you're only seeing this because you specified -D. > debu

Re: some error when perform spamassassin --lint -D

2005-08-31 Thread Theo Van Dinter
On Thu, Sep 01, 2005 at 07:10:29AM +0800, Adrian Mak wrote: > here is the spamassassin local.cf [...] > sa-learn --sync > > when I performed spamassassin --lint -D > I saw some strange message. > > debug: PATH included '/root/bin', which doesn't exist, dropping. > debug: diag: module not installe

Re: misfire of FORGED_YAHOO_RCVD

2005-08-31 Thread Matt Kettler
Matt Kettler wrote: > Ryan Castellucci wrote: > >>I'm running spamassassin 3.0.2 on debian sarge, and this message getts >>flagged with FORGED_YAHOO_RCVD and it's a legit message from yahoo. >> >>http://ryanc.org/junk/yahoo_fp.msg.gz >> > > > Perhaps you should consider running 3.0.4, which has

some error when perform spamassassin --lint -D

2005-08-31 Thread Adrian Mak
my mailsystem is using spamassassin 3.0.4 here is the spamassassin local.cf trusted_networks 61.129.115.29 dcc_home /var/dcc razor config /var/amavis/.razor/razor-agent.conf bayes_path /var/amavis/.spamassassin/bayes auto_whitelist_path /var/amavis/.spamassassin/auto-whitelist lock_method flock

Re: misfire of FORGED_YAHOO_RCVD

2005-08-31 Thread Matt Kettler
Ryan Castellucci wrote: > I'm running spamassassin 3.0.2 on debian sarge, and this message getts > flagged with FORGED_YAHOO_RCVD and it's a legit message from yahoo. > > http://ryanc.org/junk/yahoo_fp.msg.gz > Perhaps you should consider running 3.0.4, which has this fixed? http://bugzilla.spa

Re: Too many recipients

2005-08-31 Thread MC
Irina wrote: Hello All, Below is my old message I've posted. And a suggestion from Justin Mason. We have no solution yet. We had another glitch today. I passed a message to spamassassin with -t flag for debugging. It generated perl.core. I then shortened the message to only headers and tes

misfire of FORGED_YAHOO_RCVD

2005-08-31 Thread Ryan Castellucci
I'm running spamassassin 3.0.2 on debian sarge, and this message getts flagged with FORGED_YAHOO_RCVD and it's a legit message from yahoo. http://ryanc.org/junk/yahoo_fp.msg.gz -- Ryan Castellucci http://ryanc.org/

Re: Delete an address from the AWL?

2005-08-31 Thread John Rudd
On Aug 31, 2005, at 2:37 PM, John Rudd wrote: On Aug 31, 2005, at 1:49 PM, Matt Kettler wrote: Bowie Bailey wrote: Ok. I thought that might be the case, but I wasn't sure. The --add-addr-to-blacklist entry in the man page states that it is added with a high score, but the --add-addr-to-

Re: Delete an address from the AWL?

2005-08-31 Thread John Rudd
On Aug 31, 2005, at 1:49 PM, Matt Kettler wrote: Bowie Bailey wrote: Ok. I thought that might be the case, but I wasn't sure. The --add-addr-to-blacklist entry in the man page states that it is added with a high score, but the --add-addr-to-whitelist entry doesn't mention score. The use o

Re: Delete an address from the AWL?

2005-08-31 Thread Jon Drukman
Thomas Deliduka wrote: Ah, Gotcha. So, how can I simply empty out the AWL? I want it reverted to nothing so I can start fresh. rm $HOME/.spamassassin/auto-whitelist*

Re: Delete an address from the AWL?

2005-08-31 Thread Matt Kettler
Bowie Bailey wrote: > > > Ok. I thought that might be the case, but I wasn't sure. The > --add-addr-to-blacklist entry in the man page states that it is added > with a high score, but the --add-addr-to-whitelist entry doesn't > mention score. > > The use of the word "whitelist" in the man page

Re: OK, got one for you experts

2005-08-31 Thread jdow
Quoth Theo: Sure. You can do anything in a plugin. :) Retorteth jdow: Sure you can if you are fluent in silly write only languages or have the time to waste to become so. I am not and do not have the time. Backwards speak randomly not I do well, either. I perl inaccessible find. {^_^}

RE: Delete an address from the AWL?

2005-08-31 Thread Bowie Bailey
From: Matt Kettler [mailto:[EMAIL PROTECTED] > > Bowie Bailey wrote: > > > Reading the man page raises another (somewhat related) > > question, tho. > > > >--add-addr-to-whitelist > >Add the named email address to the automatic whitelist. > >Note that you must be running "sp

Re: Too many recipients

2005-08-31 Thread Irina
Hello All, Below is my old message I've posted. And a suggestion from Justin Mason. We have no solution yet. We had another glitch today. I passed a message to spamassassin with -t flag for debugging. It generated perl.core. I then shortened the message to only headers and tested again. It d

Re: Delete an address from the AWL?

2005-08-31 Thread Thomas Deliduka
Ah, Gotcha. So, how can I simply empty out the AWL? I want it reverted to nothing so I can start fresh. On 8/31/05 3:08 PM this was written: > Thomas Deliduka wrote: >> How do you simply clear out the entire AWL? I don't know where it is >> physically located. >> >> I tried spamassassin -R but

Re: Debian Packages for 3.1.0-rc2

2005-08-31 Thread Chris Thielen
Duncan Findlay wrote: On Mon, Aug 29, 2005 at 11:41:39PM -0400, Duncan Findlay wrote: Debian packages or 3.1.0-rc2 are available from the experimental distibution (version 3.0.99pre3.1.0+rc2-1). I'd appreciate help testing them, so that all the bugs in the packaging can be worked out by the

Re: Delete an address from the AWL?

2005-08-31 Thread Matt Kettler
Bowie Bailey wrote: > Reading the man page raises another (somewhat related) question, tho. > >--add-addr-to-whitelist >Add the named email address to the automatic whitelist. Note that >you must be running "spamassassin" or "spamd" with the auto- >whitelist enabled.

Re: Delete an address from the AWL?

2005-08-31 Thread Matt Kettler
Thomas Deliduka wrote: > How do you simply clear out the entire AWL? I don't know where it is > physically located. > > I tried spamassassin -R but it just hangs with -D it just stops after it > loads the bayes stuff. > Yeah.. did you feed it a message? As standard input? -R, aka --remove-from

hp.com / atdmt.com busted??

2005-08-31 Thread Rob McEwen (PowerView Systems)
hp.com / atdmt.com busted?? SEE: http://pvsys.com/busted01.txt This was sent to an e-mail address for a client of mine's former employee. After this employee left my client's company MANY months ago, they asked me to turn her mailbox off because of the "large" amount of spam recieved at that f

RE: Delete an address from the AWL?

2005-08-31 Thread Bowie Bailey
> Bowie Bailey wrote: > > I have a particular address which has been learned incorrectly by > > the AWL. I have added a custom rule to catch these spams, but the > > AWL is currently deducting about 2.2 points from each one (the > > last one went from 6.3 to 4.1 because of the AWL). Is there any

Re: Delete an address from the AWL?

2005-08-31 Thread Thomas Deliduka
How do you simply clear out the entire AWL? I don't know where it is physically located. I tried spamassassin -R but it just hangs with -D it just stops after it loads the bayes stuff. On 8/31/05 2:29 PM this was written: > At 11:21 AM Wednesday, 8/31/2005, Matt Kettler wrote -=> >> Bowie Baile

Re: Delete an address from the AWL?

2005-08-31 Thread Ed Kasky
At 11:21 AM Wednesday, 8/31/2005, Matt Kettler wrote -=> Bowie Bailey wrote: > I have a particular address which has been learned incorrectly by the AWL. > I have added a custom rule to catch these spams, but the AWL is currently > deducting about 2.2 points from each one (the last one went from

Re: Delete an address from the AWL?

2005-08-31 Thread Matt Kettler
Bowie Bailey wrote: > I have a particular address which has been learned incorrectly by the AWL. > I have added a custom rule to catch these spams, but the AWL is currently > deducting about 2.2 points from each one (the last one went from 6.3 to 4.1 > because of the AWL). Is there any way to remo

Delete an address from the AWL?

2005-08-31 Thread Bowie Bailey
I have a particular address which has been learned incorrectly by the AWL. I have added a custom rule to catch these spams, but the AWL is currently deducting about 2.2 points from each one (the last one went from 6.3 to 4.1 because of the AWL). Is there any way to remove an address from the AWL o

Re: OK, got one for you experts

2005-08-31 Thread Theo Van Dinter
On Wed, Aug 31, 2005 at 02:49:05AM -0700, jdow wrote: > Is it possible to build a rule that reads an environmental variable > such as "$USER". If so how might that be done. Sure. You can do anything in a plugin. :) -- Randomly Generated Tagline: Bender: "I came here with a simple dream, a dream

Re: URIBL?

2005-08-31 Thread Thomas Deliduka
Just to post back to the group on this one. It turns out the reason why these were not working is because the user that amavisd ran as didn't have permissions to see the directory that contained Net::DNS::Resolver For some reason cpan installed it with root only permissions. After I fixed the che

Re: Debian Packages for 3.1.0-rc2

2005-08-31 Thread Stuart Johnston
Bob Proulx wrote: jdow wrote: Is it found in a handy place in CPAN? {^_^} Because CPAN is for released modules (I am talking designed process and not observed quality here) I don't see how it could get there until it is actually released. CPAN does have a way for tagging a "Developer Relea

Re: Debian Packages for 3.1.0-rc2

2005-08-31 Thread Bob Proulx
jdow wrote: > Is it found in a handy place in CPAN? > {^_^} Because CPAN is for released modules (I am talking designed process and not observed quality here) I don't see how it could get there until it is actually released. If you are installing by CPAN and not using a package manager then using

Re: DATE_IN_FUTURE

2005-08-31 Thread Matt Kettler
At 02:44 AM 8/31/2005, Beast wrote: 3. I have train hundreds (or thousands) spam/ham mail to sa-learn but it seems it still not quite good detecting non-english mail. Because SpamAssassin is based on the english language. SpamAssassin doesn't know that in (example) Language X that "blahblahbla

Re: DATE_IN_FUTURE

2005-08-31 Thread Matt Kettler
At 01:58 AM 8/31/2005, Beast wrote: --- Received: from notes.trakindo.co.id (notes.trakindo.co.id [202.152.6.165]) by mail.indorama.com (Postfix) with ESMTP id 31F50E7932 for <[EMAIL PROTECTED]>; Wed, 31 Aug 2005 12:15:29 +0700 (WIT) From: [EMAIL PROTECTED] To: "My User" <[EMAIL

Re: Anyone ever see this?

2005-08-31 Thread mostlyharmless
Thanks for the input all!

AWL / BAYES_SEEN MySQL

2005-08-31 Thread Ronan
ok ive read around but im gettin nowhere fast. I want to make sure im getting the best from my AWL setup. I have queried the MySQL where the DB is stored and i have 1000 records. I dont see many references to the AWL in the spams that get tagged, what are the MySQL commands to prune, check that

OK, got one for you experts

2005-08-31 Thread jdow
Is it possible to build a rule that reads an environmental variable such as "$USER". If so how might that be done. (And if not, this needs to be zilla-ed.) For Earthlink users there are some really nice tricks you can do to filter a significant spam fraction. But they need the "$USER" to make it g

Re: Anyone ever see this?

2005-08-31 Thread Phil Barnett
On Tuesday 30 August 2005 05:40 pm, [EMAIL PROTECTED] wrote: > Got a nasty spam with an extremly oversized Thread-Index header.  (I set > my word wrap to 72 characters, I don't know if it will hold up however > when I hit send). > > Does anyone know if it is exploiting a known Outlook/Exchange secu

Re: Debian Packages for 3.1.0-rc2

2005-08-31 Thread jdow
Is it found in a handy place in CPAN? {^_^} - Original Message - From: "Duncan Findlay" <[EMAIL PROTECTED]>

Re: Anyone ever see this?

2005-08-31 Thread jdow
Might have to handle these things with procmail level tools. {^_^} - Original Message - From: <[EMAIL PROTECTED]> Got a nasty spam with an extremly oversized Thread-Index header. (I set my word wrap to 72 characters, I don't know if it will hold up however when I hit send). Does anyo