reversing encapsulation

2005-10-17 Thread Michael Hrivnak
My install of SA 3.1.0 uses the option to encapsulate identified spam as an attachment. I keep all of these messages for future bayes purposes, and I'd like to be able to extract the encapsulated messages. Specifically, I'd like to allow other bayes software like bogofilter learn from that

Re: Is this really eBay?

2005-10-17 Thread Michael Monnerie
On Samstag, 8. Oktober 2005 12:51 Anders Norrbring wrote: http://zmi.at/x/ebay.txt Nope. It's a scam, all eBay e-mails originates from ebay.com ebay.co.uk ebay.de etc... The e-mail you copied originates from easynet.de Then why isn't the spoofed eBay rule hitting? It should be improved.

Re: reversing encapsulation

2005-10-17 Thread Matt Kettler
At 02:51 AM 10/17/2005, Michael Hrivnak wrote: My install of SA 3.1.0 uses the option to encapsulate identified spam as an attachment. I keep all of these messages for future bayes purposes, and I'd like to be able to extract the encapsulated messages. Specifically, I'd like to allow other

Relative Kill Scores, 2.63 to 3.1?

2005-10-17 Thread Spam Admin
I've been running SA as our main inbound SMTP gateway in front of our GroupWise system for about 18 months now. I process, filter, and quarantine for the whole enterprise and do not offer individual user control. I use postfix, amavisd, SA w/ Bayes, RDJ, Razor, some minimal SMTP-level RBLs, CA

Re: Relative Kill Scores, 2.63 to 3.1?

2005-10-17 Thread Matt Kettler
Spam Admin wrote: I've been running SA as our main inbound SMTP gateway in front of our GroupWise system for about 18 months now. I process, filter, and quarantine for the whole enterprise and do not offer individual user control. I use postfix, amavisd, SA w/ Bayes, RDJ, Razor, some

RE: Relative Kill Scores, 2.63 to 3.1?

2005-10-17 Thread Bowie Bailey
From: Spam Admin [mailto:[EMAIL PROTECTED] Last week I upgraded our system from SA v2.63 to v3.1; I am pleased at how well the process went. However, I immediately began to see a lot of false positives. Primarily, it seems that v3.1 has increased the BAYES_00 from -4 to -2.599, and

Server Wide Tagging of Very High Scoring Spam

2005-10-17 Thread Daniel W
I'm looking to be able to do a system such as follows: local.cf (global spam settings) === required_hits 100 rewrite_subject 1 subject_tag [DEFINITE_SPAM] body ANG_KILL_RULE_FALSE_VIRUS_SCANNER /\+\+\+ Attachment: No Virus found/ describe

Re: sa-learn

2005-10-17 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 M.Lewis wrote: Is there a best practices recommendation for how often to run sa-learn ? In addition to all the good responses you've had I would add that if you keep the spam after learning, as I do (in case the bayes DB get killed) then it can

adult language rules

2005-10-17 Thread Hancock, Scott
Are there any other rules similar to http://www.rulesemporium.com/rules/70_sare_adult.cf This rule (on my system anyway) will only find f in subject but not f'ed. So for instance f'ed in the a for a subject is not scored. I don't trust myself to write regex's but I will if that is my only

RE: sa-learn

2005-10-17 Thread Bowie Bailey
From: Craig McLean [mailto:[EMAIL PROTECTED] In addition to all the good responses you've had I would add that if you keep the spam after learning, as I do (in case the bayes DB get killed) then it can sometimes take a while for sa-learn to finish, even though it will skip messages it has

Re: adult language rules

2005-10-17 Thread Matt Kettler
Hancock, Scott wrote: Are there any other rules similar to http://www.rulesemporium.com/rules/70_sare_adult.cf This rule (on my system anyway) will only find f in subject but not f'ed. So for instance f'ed in the a for a subject is not scored. I don't trust myself to write regex's

Re: Relative Kill Scores, 2.63 to 3.1?

2005-10-17 Thread Michael Monnerie
On Montag, 17. Oktober 2005 16:52 Spam Admin wrote: So, to temporarily resolve this, I bumped our kill_level to 5.9 and am monitoring it; my false positives have pretty much disappeared. Of course, I've seen a *slight* increase in fasle negatives versus 2.63, so I'll be tuning. I use 5.0 (the

AWL maintenance...

2005-10-17 Thread Gary W. Smith
Title: AWL maintenance... I just though Id share this with everyone. I noticed that our backend MySQL data instance was running a little slow recently with more of a load on it. This instance is shared between 4 front end servers so I figured maybe we were getting a little more of a load.

Re: executing spamassassin at remote host?

2005-10-17 Thread Matt Kettler
At 11:58 PM 10/16/2005, Monty Ree wrote: Hello, all. I have used well spamassassin at my local mailserver. But spamassassin can work at same mailserver using procmail. It definitely doesn't have to work on the same mailserver as your procmail. Mine doesn't. I'd suggest that a very large