Re: Spam as attachments

2006-01-25 Thread mouss
Jim Maul a écrit : > > Well for one, it eliminates the possibility of false negatives being > deleted. you mean False Positives. The OP probably doesn't know that no filter can detect all spam, and just spam. Any filter will have some amount of: - False positives: ham classified as spam - F

Sudden appearance of frequent server hit by SIGCHLD

2006-01-25 Thread Geoff
Hi, I noticed today that I didn't seem to have nearly as many SPAMs getting caught as I should. When I checked the maillog I see "server hit by SIGCHLD" on almost every connection from the spamc client. This was not the case before. It looks like this started happening around midnight this mo

Re: Spam as attachments

2006-01-25 Thread jdow
From: "Michael Di Martino" <[EMAIL PROTECTED]> Theo Van Dinter wrote: On Wed, Jan 25, 2006 at 12:51:32PM -0500, Michael Di Martino wrote: I am using the latest stable ver of spamassassin along w/ Simscan on an SMTP (qmail) stor-&-forward server. No local Mailboxes. [...] My question is why is a

Re: hapaxes and chi2

2006-01-25 Thread Bill Sickles
On Wed, 25 Jan 2006, Matt Kettler wrote: > Bill Sickles wrote: > > Hi, > > I have searched the [EMAIL PROTECTED] and [EMAIL PROTECTED] archives but > > didn't come up with a lot on this topic. Sorry if I missed something > > obvious but I am wondering if anyone is using hapaxes. > > Pretty much

Re: hapaxes and chi2

2006-01-25 Thread Matt Kettler
Bill Sickles wrote: > Hi, > I have searched the [EMAIL PROTECTED] and [EMAIL PROTECTED] archives but > didn't come up with a lot on this topic. Sorry if I missed something > obvious but I am wondering if anyone is using hapaxes. Pretty much everyone does. They're on by default. You have to explic

hapaxes and chi2

2006-01-25 Thread Bill Sickles
Hi, I have searched the [EMAIL PROTECTED] and [EMAIL PROTECTED] archives but didn't come up with a lot on this topic. Sorry if I missed something obvious but I am wondering if anyone is using hapaxes. Through googling I did see some references to a user or two turning this off as the database got t

RE: Spam as attachments

2006-01-25 Thread James Butler
Eliminating spam is not really an option unless you are willing to toss out anything valuable that SA might catch by accident. The plan is to *manage* spam. We pipe spam to a separate mailbox just for that purpose, and then check that mailbox every so often to (a) loosen rules that are catching

Re: Spam as attachments

2006-01-25 Thread Jim Maul
Michael Di Martino wrote: Theo Van Dinter wrote: On Wed, Jan 25, 2006 at 12:51:32PM -0500, Michael Di Martino wrote: I am using the latest stable ver of spamassassin along w/ Simscan on an SMTP (qmail) stor-&-forward server. No local Mailboxes. [...] My question is why is an email with an conte

RE: Spam as attachments

2006-01-25 Thread Michael Di Martino
Theo Van Dinter wrote: > On Wed, Jan 25, 2006 at 12:51:32PM -0500, Michael Di Martino wrote: >> I am using the latest stable ver of spamassassin along w/ Simscan on >> an SMTP (qmail) stor-&-forward server. No local Mailboxes. [...] >> My question is why is an email with an content analysis of 4.3

RE: Notification when user sends email

2006-01-25 Thread Nathaniel Dell
You are an enormous help! I will do it with procmail, since it doesn't seem like there is another way to do. Just need to get down and dirty with qmail... Thanks for all your help on this! Ate -Original Message- From: Dale Morin [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 25, 200

Re: Notification when user sends email

2006-01-25 Thread Dale Morin
Hello, > It looks like the server that is hosting our email doesn't have procmail > configured with qmail. Further the provider won't support it Procmail is > installed, but this seems a lot less intuitive than I thought at first. > Would there be a less intruisive way to do this? All I really

Re: Possible to leave Bayes scoring intact, but not have it count towards total spamscore?

2006-01-25 Thread Theo Van Dinter
On Wed, Jan 25, 2006 at 03:11:50PM +0100, [EMAIL PROTECTED] wrote: > Did I overlook something in the documentation or ain't it possible > at all without setting all those BAYES_* scores to 0? It's not possible since the BAYES_* rules have no special meaning to SpamAssassin. You wouldn't want to s

RE: Notification when user sends email

2006-01-25 Thread Nathaniel Dell
It looks like the server that is hosting our email doesn't have procmail configured with qmail. Further the provider won't support it Procmail is installed, but this seems a lot less intuitive than I thought at first. Would there be a less intruisive way to do this? All I really need to know is

Re: Spam as attachments

2006-01-25 Thread Theo Van Dinter
On Wed, Jan 25, 2006 at 12:51:32PM -0500, Michael Di Martino wrote: > I am using the latest stable ver of spamassassin along w/ Simscan on an > SMTP (qmail) stor-&-forward server. No local Mailboxes. [...] > My question is why is an email with an content analysis of 4.3 being > delivered to me as a

Re: whitelist mailman lists

2006-01-25 Thread Matthias Fuhrmann
On Tue, 24 Jan 2006, mouss wrote: > Matthias Fuhrmann a écrit : > > Hello, > > > > we have some lists on a server maintained by mailman. since mails for > > moderators contains offten spammy content, those mails are rated as spam > > too. i tried whitelisting with for example: > > > > whitelist_fr

Re: whitelist mailman lists

2006-01-25 Thread Matthias Fuhrmann
On Tue, 24 Jan 2006, David B Funk wrote: Hello, [..] > Many mechanisms for calling SA do -not- make the envelope-from address > available for rule matching (including miltrassassin), thus the failure of > your whitelist_from_rcvd. our version currently runnign is: (using Revision: 1.15 Date: 200

Spam as attachments

2006-01-25 Thread Michael Di Martino
I am using the latest stable ver of spamassassin along w/ Simscan on an SMTP (qmail) stor-&-forward server. No local Mailboxes. I have my simscan configured with the following options. ---enable-spam --enable-spam-hits=4.0 However, SPAM is being sent to me as attactment w/ SpamAssassin letting m

Re: whitelist mailman lists

2006-01-25 Thread Matthias Fuhrmann
On Tue, 24 Jan 2006, Mike Jackson wrote: > > we have some lists on a server maintained by mailman. since mails for > > moderators contains offten spammy content, those mails are rated as spam > > too. i tried whitelisting with for example: > > > > whitelist_from_rcvd [EMAIL PROTECTED] domain > > w

RE: Notification when user sends email

2006-01-25 Thread Nathaniel Dell
Sorry forgot to put in the code * ^From.*dell4242 { :0c: ${DEFAULT} :0 c ! [EMAIL PROTECTED] } -Original Message- From: Nathaniel Dell [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 25, 2006 12:34 PM To: '[EMAIL PROTECTED]'; 'users@spamassassin.apache.org' Subject: RE: Noti

RE: Notification when user sends email

2006-01-25 Thread Nathaniel Dell
Will this do the same thing? -Original Message- From: Dale Morin [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 25, 2006 12:01 PM To: users@spamassassin.apache.org Cc: Nathaniel Dell Subject: Re: Notification when user sends email Hello, You will need to modify it where I am extra

Re: Notification when user sends email

2006-01-25 Thread Dale Morin
Hello, You will need to modify it where I am extracting the username part of the email address from the To: address. That is where you will want to examine the From: address instead. Note that I am altering the subject to insert the original username in front of the subject so that messages in

Bayes user

2006-01-25 Thread John Hall
Hi, I'm using Exim 4.60 and SpamAssassin 3.1 and scanning at SMTP time. My bayes data is stored in a Mysql database. I've configured exim to submit spam to spamd as the user 'mail'. I've recently discovered that it has been storing all the bayes data against the user 'root', whereas everything

RE: Notification when user sends email

2006-01-25 Thread Nathaniel Dell
This sounds like exactly what I need. Any pointers to where I can find documentation on how to do this? Thanks for all your help on this! Nate -Original Message- From: Dale Morin [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 25, 2006 10:40 AM To: users@spamassassin.apache.org Subjec

RE: How to dump Bayes

2006-01-25 Thread Matthew.van.Eerde
Marc Dufresne wrote: > I have reviewed the man pages before posting, but couldn't find any > --export option. I have already tried dumping the Bayes database to a > file, but receive this error. Sorry, there's no --export option. Do --backup or --force-expire work? What about moving the files s

Re: Bayes journal problem

2006-01-25 Thread Enrico Morelli
On Wed, 25 Jan 2006 10:06:13 -0500 Matt Kettler <[EMAIL PROTECTED]> wrote: > Enrico Morelli wrote: > > Dear all, > > > > SA tried to write a large block of data to disk and the OS only > allowed it to write 4040 bytes. > > Possible causes: > > 99% chance of disk full or user quota exceeded. > 1%

Re: Notification when user sends email

2006-01-25 Thread Dale Morin
Hello, Yes, it can be done fairly easily using procmail. We have a client that has a copy of every incoming email forwarded to another account. My personal objections to Big Brother aside, it works nicely. Modifying that recipe so that it fires only when the From: address is [EMAIL PROTECTED]

Re: Notification when user sends email

2006-01-25 Thread Matt Kettler
Nathaniel Dell wrote: > > Is it possible to receive a notification when a user sends a emai to > anyone in the company? I need to implement something like this. > > Help would be greatly appreciated!! > Sounds like a job for swatch or logsurfer. These tools are designed to watch your logs for even

Re: Bayes journal problem

2006-01-25 Thread Matt Kettler
Enrico Morelli wrote: > Dear all, > > I'm using spamassassin 3.1.0 without problems. > Starting from today I see the following messages in the log files of my > mail server: > Jan 24 16:35:13 alpha spamd[8295]: partial write to Bayes > journal /etc/mail/spamassassin/BAYES/bayes_journal (4040 of 118

OT: Misuse of spamcop

2006-01-25 Thread Michele Neylon :: Blacknight Solutions
Some "intelligent" individual decided to report two emails that were sent to this list including my signature and URI to our company website. The email was obviously not spam and reporting it as such to spamcop is extremely irresponsible. If you have an issue with my email signature feel free to

Notification when user sends email

2006-01-25 Thread Nathaniel Dell
Is it possible to receive a notification when a user sends a emai to anyone in the company? I need to implement something like this. Help would be greatly appreciated!!

Re: Possible to leave Bayes scoring intact, but not have it count towards total spamscore?

2006-01-25 Thread Matthias Keller
[EMAIL PROTECTED] wrote: Hi all, I want to throw the newly built Bayes DB onto our mailservers, but for testing purposes I do not want any Bayes score to influence the final spamscore, but nevertheless I want it to become visible in the spam_report. Basically I want to see how often Bayes mat

Possible to leave Bayes scoring intact, but not have it count towards total spamscore?

2006-01-25 Thread srunschke
Hi all, I want to throw the newly built Bayes DB onto our mailservers, but for testing purposes I do not want any Bayes score to influence the final spamscore, but nevertheless I want it to become visible in the spam_report. Basically I want to see how often Bayes matches ham/spam, without it hav

RE: How to dump Bayes

2006-01-25 Thread Marc Dufresne
I have reviewed the man pages before posting, but couldn't find any --export option. I have already tried dumping the Bayes database to a file, but receive this error. sa-learn --dump all >salearndump Out of memory during ridiculously large request at /usr/local/lib/perl5/site_perl/5.8.7/Mail/Spam

Re: Exim+SA=Server Overloaded!

2006-01-25 Thread Chr. v. Stuckrad
On Tue, Jan 24, 2006 at 02:01:55PM -0200, Eduardo wrote: > Hello! > Sorry to send another email about the same subject. But my mail server > crashed so i couldn't see the answers. > > I am calling my spamassassin service in SMTP time with some ACL rules in > my exim4 configuration file. I start

Re: Bayes journal problem

2006-01-25 Thread Enrico Morelli
On Wed, 25 Jan 2006 04:04:28 -0800 "Loren Wilton" <[EMAIL PROTECTED]> wrote: > > I add some disk quota to the users that was out of quota, but the > > problem seems unresolved. > > > > Jan 25 12:31:13 alpha spamd[2021]: bayes: write failed to Bayes > > journal /etc/mail/spamassassin/BAYES/bayes_jo

Re: Bayes journal problem

2006-01-25 Thread Theo Van Dinter
On Wed, Jan 25, 2006 at 04:04:28AM -0800, Loren Wilton wrote: > > Jan 25 12:31:13 alpha spamd[2021]: bayes: write failed to Bayes > > journal /etc/mail/spamassassin/BAYES/bayes_journal (0 of 263856)! Jan > > 25 12:31:13 alpha spamd[2021]: Exiting subroutine via last > This still looks like a quota

Re: Bayes journal problem

2006-01-25 Thread Loren Wilton
> I add some disk quota to the users that was out of quota, but the > problem seems unresolved. > > Jan 25 12:31:13 alpha spamd[2021]: bayes: write failed to Bayes > journal /etc/mail/spamassassin/BAYES/bayes_journal (0 of 263856)! Jan > 25 12:31:13 alpha spamd[2021]: Exiting subroutine via last T

Re: [exim] Exim+SA=Server Overloaded!

2006-01-25 Thread Loren Wilton
> My problem still remains: I disabled ALL the rules I use to check (Rules > du Jour, Bayes, Razor and Pyzor) and, believe it or not, it is still > getting overloaded :( How many children are you running? Overload is almost always due to running out of memory and going into thrashing. This happe

Re: Bayes journal problem

2006-01-25 Thread Enrico Morelli
On Wed, 25 Jan 2006 12:31:02 +0100 Enrico Morelli <[EMAIL PROTECTED]> wrote: > On Wed, 25 Jan 2006 03:14:30 -0800 > "Loren Wilton" <[EMAIL PROTECTED]> wrote: > > > Perhaps you have per-user Bayes and the user has gone over-quota on > > disk space? > > > > Loren > > > > I checked and ye

Re: Bayes journal problem

2006-01-25 Thread Enrico Morelli
On Wed, 25 Jan 2006 03:14:30 -0800 "Loren Wilton" <[EMAIL PROTECTED]> wrote: > Perhaps you have per-user Bayes and the user has gone over-quota on > disk space? > > Loren > I checked and yes I have per-user Bayes and some users was out of quota. This is the problem? Thanks a lot. --

Re: Bayes journal problem

2006-01-25 Thread Loren Wilton
Perhaps you have per-user Bayes and the user has gone over-quota on disk space? Loren

Re: [exim] Exim+SA=Server Overloaded!

2006-01-25 Thread Eduardo
George R. Kasica wrote: On Tue, 24 Jan 2006 14:01:55 -0200, you wrote: Hello! Sorry to send another email about the same subject. But my mail server crashed so i couldn't see the answers. I am calling my spamassassin service in SMTP time with some ACL rules in my exim4 configuratio

Bayes journal problem

2006-01-25 Thread Enrico Morelli
Dear all, I'm using spamassassin 3.1.0 without problems. Starting from today I see the following messages in the log files of my mail server: Jan 24 16:35:13 alpha spamd[8295]: partial write to Bayes journal /etc/mail/spamassassin/BAYES/bayes_journal (4040 of 118632), recovering. Jan 24 16:35:14 a