Re: [sa-list] Re: Spamd keeps getting hung up!

2006-02-20 Thread Dan Mahoney, System Admin
On Fri, 10 Feb 2006, Daryl C. W. O'Shea wrote: I'm using it now. Let's give it a few days to see how it goes. I rarely have more than 14 days where it doesn't puke on me. -Dan Dan Mahoney, System Admin wrote: Hey All, I've been running the latest spamd for months now, and it seems to be

Updated Pump and Dump rules. 2006-02-20

2006-02-20 Thread Doc Schneider
I just committed version 01.00.07 of this ruleset to: http://rulesemporium.com/rules/70_sare_stocks.cf This one should now --lint fine with the SA SVN version. Added a 0. to the scores. It should appear within the hour. Enjoy. -Doc (SA/SARE/URIBL/SURBL -- Ninja)

Spammy left his index open

2006-02-20 Thread Dallas L. Engelken
http://businesgroupny.com You'll see neat little bulk email tools they use for sending their phishes * http://businesgroupny.com/bulk/ * http://businesgroupny.com/index.php -> Fi$hY Productions ;)

Re: Annoying spammer

2006-02-20 Thread List Mail User
Evan, The spammer is Taiwan Media (Telecom long ago) Ltd. They're using the domain swzo.com-MUNG with Whois/registration contacts email account at [EMAIL PROTECTED] and DNS from ns[12].0l23.com-MUNG. They are listed in Spamhaus' ROKSO with more data there - friends/associates of

Re: Annoying spammer

2006-02-20 Thread Matt Kettler
Evan Platt wrote: > Well, as if there's a NON annoying spammer.. > > I'm getting HAMMERED with the re: Hello spams. > > http://www.espphotography.com/stopthisspammer.txt > > Best way I can see to drop this guy is to block on "The Bat! (v3.62.14) > Home" in the header. > > Near as I can see sear

Re: Annoying spammer

2006-02-20 Thread mouss
Evan Platt a écrit : > Well, as if there's a NON annoying spammer.. > > I'm getting HAMMERED with the re: Hello spams. > > http://www.espphotography.com/stopthisspammer.txt > > Best way I can see to drop this guy is to block on "The Bat! (v3.62.14) > Home" in the header. > > Near as I can see s

Re: Annoying spammer

2006-02-20 Thread Matt Thoene
On Monday, February 20, 2006 @ 12:57:42 PM [-0700], Evan Platt wrote: >>> http://www.espphotography.com/stopthisspammer.txt >> >> I tried to take a look at your example but the link is not working for >> me...just sends me to your main index page. > Oops, I misspelled it. Fixed now. Aha...see it

Re: perceptron and over-scoring (Re: Over-scoring of SURBL lists... )

2006-02-20 Thread Raymond Dijkxhoorn
Hi! On Mon, Feb 20, 2006 at 07:38:42PM +, Justin Mason wrote: yes, I'm a little worried about that, too. So from these results, the FP rate is very low for SURBL (0.21%), and while there is a ton of overlap for spam (57.3%), there's very little for ham (0.01%). aha, that's very inte

Re: perceptron and over-scoring (Re: Over-scoring of SURBL lists... )

2006-02-20 Thread Justin Mason
Theo Van Dinter writes: > On Mon, Feb 20, 2006 at 07:38:42PM +, Justin Mason wrote: > > yes, I'm a little worried about that, too. > So from these results, the FP rate is very low for SURBL (0.21%), and > while there is a ton of overlap for spam (57.3%), there's very little > for ham (0.01%).

Re: Annoying spammer

2006-02-20 Thread Matt Thoene
On Monday, February 20, 2006 @ 12:07:13 PM [-0700], Evan Platt wrote: > I'm getting HAMMERED with the re: Hello spams. > http://www.espphotography.com/stopthisspammer.txt I tried to take a look at your example but the link is not working for me...just sends me to your main index page. > Best wa

Re: perceptron and over-scoring (Re: Over-scoring of SURBL lists... )

2006-02-20 Thread Theo Van Dinter
On Mon, Feb 20, 2006 at 07:38:42PM +, Justin Mason wrote: > yes, I'm a little worried about that, too. Just for some info... I went through the set1 spam logs for 3.1 score generation. 1112804 total messages 776108 messages hit SURBL 138407 1 SURBL list(s) hit (1+ = 776108) 189795 2 SURBL

Re: Annoying spammer

2006-02-20 Thread Ron Johnson
Evan Platt writes: > > Well, as if there's a NON annoying spammer.. > > I'm getting HAMMERED with the re: Hello spams. > > http://www.espphotography.com/stopthisspammer.txt > > Best way I can see to drop this guy is to block on "The Bat! > (v3.62.14) Home" in the header. > > Near as I can see

Annoying spammer

2006-02-20 Thread Evan Platt
Well, as if there's a NON annoying spammer.. I'm getting HAMMERED with the re: Hello spams. http://www.espphotography.com/stopthisspammer.txt Best way I can see to drop this guy is to block on "The Bat! (v3.62.14) Home" in the header. Near as I can see searching my 4+ years of archived messa

Re: X-Spam-Report

2006-02-20 Thread Jonn R Taylor
Thanks, I got it work. Was looking at report not summary. Jonn On Mon, 20 Feb 2006 11:17:50 -0800 "Kevin W. Gagel" <[EMAIL PROTECTED]> wrote: - Original Message - I am do not want to rewite the subject. I just want the X-Spam-Report to be added to all email, spam-wich is working, an

perceptron and over-scoring (Re: Over-scoring of SURBL lists... )

2006-02-20 Thread Justin Mason
Chris Thielen writes: > Now for a scoring question: isn't the perceptron supposed to factor out > decisively overlapping rules? If so, why the enormously high scores for > all the different uribls? From my stats, I get 50% of spam that hits > SURBL hitting 4 or 5 of the SURBL lists. Shouldn't t

Re: X-Spam-Report

2006-02-20 Thread Kevin W. Gagel
- Original Message - >I am do not want to rewite the subject. I just want the >X-Spam-Report to be added to all email, spam-wich is >working, and non-spam. > Jonn, Sorry, here is how I do it. fold_headers 1 clear_headers add_header all Autolearn Autolearned as _AUTOLEARN_ add_header al

Re: I prevent user subject_tag form rerititng the subject

2006-02-20 Thread Matt Kettler
Erwin Zavala wrote: > How do I prevent the ssubject tag from being appended. > > When i use > rewrite_subject 0 > subject_tag [SPAM] > it does not help What version of spammassasin are you using? That syntax isn't valid in SA 3.0.0 or higher. SA 3.0.x and 3.1.0 use "rewrite_header" commands ins

Re: X-Spam-Report

2006-02-20 Thread Jonn R Taylor
I am do not want to rewite the subject. I just want the X-Spam-Report to be added to all email, spam-wich is working, and non-spam. Jonn On Mon, 20 Feb 2006 10:55:24 -0800 "Kevin W. Gagel" <[EMAIL PROTECTED]> wrote: - Original Message - I tried to do it with the add_header option but

I prevent user subject_tag form rerititng the subject

2006-02-20 Thread Erwin Zavala
How do I prevent the ssubject tag from being appended. When i use rewrite_subject 0 subject_tag [SPAM] it does not help when I remove those two lines it does not help. Here is my user_prefs required_hits 5 rewrite_subject 1 subject_tag [SPAM] report_safe 0 clear_headers add_header all Flag _YES

Re: X-Spam-Report

2006-02-20 Thread Kevin W. Gagel
- Original Message - >I tried to do it with the add_header option but I only get >a blank line with X-Spam-Report. A little more info for >you: SA 3.1, RH9, Perl 5.8.0, CGP 5.0-8, MySQL. I am >calling spamd with spamc via scanspam.sh that is sending >the user to spamc. I am only adding

Re: Over-scoring of SURBL lists...

2006-02-20 Thread Chris Thielen
I'm also catching up on this thread and wasn't sure where to reply so I'll make my observations here. Matt, I think you have a legitimate concern. I think I can sum up the points of view as follows: 1. For grey URIs (perhaps scott's, for example) and/or FPs due to non-spam URIs being listed, a

Re: X-Spam-Report

2006-02-20 Thread Jonn R Taylor
I tried to do it with the add_header option but I only get a blank line with X-Spam-Report. A little more info for you: SA 3.1, RH9, Perl 5.8.0, CGP 5.0-8, MySQL. I am calling spamd with spamc via scanspam.sh that is sending the user to spamc. I am only adding headers to my email. Jonn On Mo

Re: Yup, I really believe this remove link will work!

2006-02-20 Thread Kelson
My favorite was an unsubscribe link that consisted of http:// /optout.php?mail= And yes, that was a space in there instead of a host/domain name. It also had a big long message about how easy it was to "oppt out," that they weren't "just saying that so that we can put on the facade tha

RE: Over-scoring of SURBL lists...

2006-02-20 Thread Chris Santerre
Title: RE: Over-scoring of SURBL lists... I'm still catching up on this thread, but I have some points: 1) Matt's taking a beating, and he shouldn't be. I see his concerns. I might not agree, but he has legitimate reasons for bringing it up, and only serves to help all of us. 2) Perhaps an

Re: X-Spam-Report

2006-02-20 Thread Barton L. Phillips
It is quite simple if you are using MIMEDefang, I do it and have even added a bit more information. I think you can use the 'add_header' configuration option if you are not using MIMEDefang. See Mail::SpamAssassin::Conf and look at the 'add_header' option it looks like it could o the job if you

Double checking ?

2006-02-20 Thread Emmanuel Lesouef
Hello, I just configured a postfix mail server. Amavis with spamassassin and clamav is installed on it. I have some emails that get checked two times. And amavis seems to add the two scores. Here is an example : X-Spam-Checker-Version: SpamAssassin 3.0.3 (2005-04-27) on guillaume.crbn.fr X-Spam

X-Spam-Report

2006-02-20 Thread Jonn R Taylor
Hi all, Is it possible to have X-Spam-Report added to all email headers(spam and non-spam) and if so how. Jonn

Re: URIBL_BLACK + OB_SURBL double-listed nonspam domain

2006-02-20 Thread Matt Kettler
List Mail User wrote: >> ... >> List Mail User wrote: >> >>> Huh? (Lookup "strawman" in a dictionary, please.) >>> >> That's my understanding of what you were claiming happened. Yes, it >> looks like an absurdly weak argument. However, it's the argument you >> presented, as best I can

Re: Two instances of spamd

2006-02-20 Thread Nix
On Sun, 12 Feb 2006, Henry F. Camacho, Jr. wrote: > You are seeing the child of spamd. Both are not taking 20 megs of > memory, that is the shared memory allocation. I think what you are > seeing is the shared memory being applied to each of the other > processes because spamd uses linux threads.

Re: Over-scoring of SURBL lists...

2006-02-20 Thread Raymond Dijkxhoorn
Hi! This is a potential if a list will add a site on the basis of ONE spam report. When it takes ten or twenty or more spam reports then sites will get listed. Your Scotts example is an example of how a large number of people would be likely to consider it to be spam and complain. Upon receiving

Re: Over-scoring of SURBL lists...

2006-02-20 Thread Raymond Dijkxhoorn
Hi! I have two things related to this: 1- if the lists are indeed separate (ie: different sources, etc,) then having multiple rules makes sense. They're about 95% separate.. They're all separately maintained, and have a lot of different approaches to making sure a listing is valid. I don't