Re[2]: Spamassassin "crashing" on long email

2005-10-10 Thread Robert Menschel
Hello Bjorn, others Monday, October 10, 2005, 2:24:11 AM, you wrote: BJ> Loren Wilton wrote: >> There is a recent bug report that one of the SARE rules will cause extreme >> processor use on a particular spam that has the entire message on a single >> line. This looks like it may be another exam

Re: AWL Annoyance

2005-10-10 Thread satalk
I use a procmail recipe to catch these annoying emails. :0 fH * ^To:.*\" * [EMAIL PROTECTED]@ * ^To:.*USERNAME@ * ! ^To:.*\".*(USER_SURNAME)\" * ^X-Spam-Status: No, score=[0-9][0-9]?[0-9]?\.[0-9]? \/.* | formail -I"X-Spam-Status: Yes, score=99.3 $MATCH" Anthony

Re: Spamc not working when spamd running with -A option

2005-10-10 Thread jdow
From: "Geoff Varney" <[EMAIL PROTECTED]> Hi, I am trying to set up SpamAssassin on my Redhat FC3 box in order to call spamd from an IMail email server using a spamc client. I have verfied that spamassassin works alone on the test messages and that spamc on the Linux box also works when runn

Spamc not working when spamd running with -A option

2005-10-10 Thread Geoff Varney
Hi, I am trying to set up SpamAssassin on my Redhat FC3 box in order to call spamd from an IMail email server using a spamc client. I have verfied that spamassassin works alone on the test messages and that spamc on the Linux box also works when running the spamd daemon. The problem comes when

RE: i always get score 0.0

2005-10-10 Thread Bret Miller
> I installed spamassassin 3.0.4 and qmail-scanner and clam > together with > the SQL feature described at > http://wiki.apache.org/spamassassin/UsingSQL. > > The problem is all mails are scored 0.0, and I cant figure > out why. Any > hints why? I've included some logparts below which might give so

Re: OT: marketing service?

2005-10-10 Thread Christopher X. Candreva
On Mon, 10 Oct 2005, Christopher X. Candreva wrote: > Constantcontact.com is roving.com -- block on sight here. I had forgotten why -- Constant Contact has written editorials against confirmed opt-in mailing lists. See http://roving.com/marketing/newsletters/hints-tips/volume7-issue3.html See di

Re: OT: marketing service?

2005-10-10 Thread Christopher X. Candreva
On Mon, 10 Oct 2005, Matthew Lenz wrote: > The company I work with would like to start sending out a monthly flier > to our business contacts. We've found one that seems to offer what we > are looking for: http://www.constantcontact.com/ My first priority is Constantcontact.com is roving.com --

OT: marketing service?

2005-10-10 Thread Matthew Lenz
The company I work with would like to start sending out a monthly flier to our business contacts. We've found one that seems to offer what we are looking for: http://www.constantcontact.com/ My first priority is that whoever we use has no history of being a spammer haven and that the emails don't

Re: The Ultimate Online Pharmaceutical

2005-10-10 Thread jdow
Leo seems to be working overtime to try to get scores up high. I am using a lot of SARE rules. That sort of spam has managed to score as high as 98.7 points on the rules I have. The only "doctored" rule it hit was my BAYES_99 which is set to 5.0. (Leo, I know you're reading this list. You'll just

Re: Explosion in uk.geocities.com spam

2005-10-10 Thread MATSUDA Yoh-ichi
Hello. From: "Loren Wilton" <[EMAIL PROTECTED]> Subject: Re: Explosion in uk.geocities.com spam Date: Sat, 8 Oct 2005 22:01:22 -0700 > > They use html and tables very smart, thus avoiding Bayes rules. > > Basically it is an invisible tables, using one row and several columns. > > The first column

Re: score based on MX's IP?

2005-10-10 Thread Mike Jackson
Perhaps this is too much to ask of SpamAssassin, but... My server receives a piece of spam that's undeliverable. It looks up the MX for the sender's address, and finds that the IP is 127.0.0.1. It then complains that there's a configuration problem because it's not set up to handle mail for th

Re: The Ultimate Online Pharmaceutical

2005-10-10 Thread JamesDR
Pierre Thomson wrote: Aha, I was about to post something about that exact spam. We have been receiving them in big batches, and some of the recipients have hardly got any spam before. I'm guessing it's a new operator with a fresh list of addresses from *somewhere*. They always use this exac

Re: score based on MX's IP?

2005-10-10 Thread Jay Lee
Mike Jackson wrote: Perhaps this is too much to ask of SpamAssassin, but... My server receives a piece of spam that's undeliverable. It looks up the MX for the sender's address, and finds that the IP is 127.0.0.1. It then complains that there's a configuration problem because it's not set up

score based on MX's IP?

2005-10-10 Thread Mike Jackson
Perhaps this is too much to ask of SpamAssassin, but... My server receives a piece of spam that's undeliverable. It looks up the MX for the sender's address, and finds that the IP is 127.0.0.1. It then complains that there's a configuration problem because it's not set up to handle mail for th

Re: dependencies: cpan vs. runtime?

2005-10-10 Thread LA Walsh
Bonjour, No -- don't really need them. Just trying to trace down why, with another upgrade, the my emails have gone from being tagged by SA to not being tagged. I didn't know if the missing modules were contributing to the problem. I had noted earlier emails of some people having problem

RE: The Ultimate Online Pharmaceutical

2005-10-10 Thread Pierre Thomson
Aha, I was about to post something about that exact spam. We have been receiving them in big batches, and some of the recipients have hardly got any spam before. I'm guessing it's a new operator with a fresh list of addresses from *somewhere*. They always use this exact subject line, so you c

Fw: The Ultimate Online Pharmaceutical

2005-10-10 Thread List
Hi, Is there a ruleset to block this kind of emails? Vlaxgra - $3.3 Levintra - $3.3 Ciadlis - $3.7 Imitgrex - $16.4 Flompax - $2.2 Ultrxam - $0.78 Viosxx - $4.75 Ambqien - $2.2 Valxium - $0.97 Xanahx - $1.09 Sozma - $3 Meriidia - $2.2 our website ___ Best regards, Online Pharmaceutical

Re: Explosion in uk.geocities.com spam

2005-10-10 Thread Andrew_Hoying
We've been using this with great success: uri GEOCITIES_SPAM m'^https?://[a-z]+\.geocities\.com/([a-z]+/)+[?][a-z]+'i Andrew Hoying "Maurice Lucas"

Re: Explosion in uk.geocities.com spam

2005-10-10 Thread Matthew Newton
On Mon, Oct 10, 2005 at 04:21:50PM +0200, Maurice Lucas wrote: > Matthew Newton wrote: > >On the assumption that "normal" URLs don't use the construct /? in > >them, and especially at geocities (are CGI scripts even allowed > >there?) how about the following? > > > >full UOLCC_UKGEO > >/http:\

Re: Explosion in uk.geocities.com spam

2005-10-10 Thread Maurice Lucas
Matthew Newton wrote: On Sat, Oct 08, 2005 at 10:01:22PM -0700, Loren Wilton wrote: They use html and tables very smart, thus avoiding Bayes rules. Basically it is an invisible tables, using one row and several columns. The first column contains the first letter of every line, separated by "" an

Re: How to disable spamd using milter w/ sendmail temporarily for testing?

2005-10-10 Thread Andy Jezierski
Dr Robert Young <[EMAIL PROTECTED]> wrote on 10/10/2005 07:48:14 AM: > We are looking at doing some testing w/ Postini as our "outside" spam   > filter. Currently we are running SA 3.0.4 internally, with the milter- > spamc/sendmail combo. > > What is the "best" way to temporarily disable SA so

Re: Explosion in uk.geocities.com spam

2005-10-10 Thread Matthew Newton
On Sat, Oct 08, 2005 at 10:01:22PM -0700, Loren Wilton wrote: > > They use html and tables very smart, thus avoiding Bayes rules. > > Basically it is an invisible tables, using one row and several columns. > > The first column contains the first letter of every line, separated by > > "" and optiona

How to disable spamd using milter w/ sendmail temporarily for testing?

2005-10-10 Thread Dr Robert Young
We are looking at doing some testing w/ Postini as our "outside" spam filter. Currently we are running SA 3.0.4 internally, with the milter- spamc/sendmail combo. What is the "best" way to temporarily disable SA so it is removed from the "test"? If we simply "stop" spamd, will mail simply "

Re: Explosion in uk.geocities.com spam

2005-10-10 Thread Nix
On Sat, 8 Oct 2005, Loren Wilton murmured woefully: >> They use html and tables very smart, thus avoiding Bayes rules. >> Basically it is an invisible tables, using one row and several columns. >> The first column contains the first letter of every line, separated by >> "" and optionally some style

Re: Spamassassin "crashing" on long email

2005-10-10 Thread Bjorn Jensen
Loren Wilton wrote: There is a recent bug report that one of the SARE rules will cause extreme processor use on a particular spam that has the entire message on a single line. This looks like it may be another example of the same thing. Thanks for this hint, I found the bug at http://bugzill

Re: Spamassassin "crashing" on long email

2005-10-10 Thread Loren Wilton
There is a recent bug report that one of the SARE rules will cause extreme processor use on a particular spam that has the entire message on a single line. This looks like it may be another example of the same thing. Loren

Spamassassin "crashing" on long email

2005-10-10 Thread Bjorn Jensen
During the last few days we have had huge problems with spamassassin grinding to a halt and having to restart it to be able to have it scan again. After investigating this it seems we have several emails in our queue that "crashes" spamassassin, or rather, spamd/spamassassin goes to 100% cpu an

Re: Configuration tool updated

2005-10-10 Thread jdow
list-unsubscribe: (From the message headers.) {^_^} - Original Message - From: "liyas_m m" <[EMAIL PROTECTED]> unsubscribe On 10/8/05, michael moncur <[EMAIL PROTECTED]> wrote: My SpamAssassin Configuration Tool, which is linked from the SpamAssassin sit

Re: Configuration tool updated

2005-10-10 Thread liyas_m m
unsubscribeOn 10/8/05, michael moncur <[EMAIL PROTECTED]> wrote: My SpamAssassin Configuration Tool, which is linked from the SpamAssassin site and hasn't worked with 3.0 or 3.1, has finally been updated.http://www.yrex.com/spam/spamconfig.php It now works with 3.0 or 3.1, although 3.1 will need s

Re: AWL annoyance

2005-10-10 Thread mouss
Michael Monnerie a écrit : On Montag, 10. Oktober 2005 01:14 mouss wrote: some spams use the recipient address as their From header. This causes AWL to put a significant negative score. Is there any way to fight these (other than disabling awl)? Yes, install and check SPF. This makes

Re: AWL annoyance

2005-10-10 Thread Michael Monnerie
On Montag, 10. Oktober 2005 01:14 mouss wrote: > some spams use the recipient address as their From header. This > causes AWL to put a significant negative score. > Is there any way to fight these (other than disabling awl)? Yes, install and check SPF. This makes it impossible to spoof the sender