Re: SpamAssassin large-scale users willing to comment?

2006-02-24 Thread jdow
From: Jeff Peng [EMAIL PROTECTED] Hi,Jdow, I think you have misunderstood me.I'm not working for Netzero.In fact,our mail systems' end-users numbers are more than a hundred million far away.We use SA as part of our antispam mechanism. Certainly,it's not the original one written with Perl.We

spamassasin --lint fails after a RDJ update

2006-02-24 Thread Tom Brown
Hi Seems something has gone wonky with my SA install - From my cron logs it seems that a rdj update happenned last night and then during the --lint phase this was the output below - I am as far as i'm aware fully upto date with my SA install and a cpan install Mail::SpamAssassin tells me

Re: spamassasin --lint fails after a RDJ update

2006-02-24 Thread Tom Brown
Seems something has gone wonky with my SA install - From my cron logs it seems that a rdj update happenned last night and then during the --lint phase this was the output below - I am as far as i'm aware fully upto date with my SA install and a cpan install Mail::SpamAssassin tells me there

RE: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Bowie Bailey
Gene Heskett wrote: On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: snippage I don't seem to be getting any email from RDJ recently. Maybe since the time I switch this system from fetchmail to a mailfile, and

Re: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Gene Heskett
On Friday 24 February 2006 09:06, Bowie Bailey wrote: Gene Heskett wrote: On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: snippage I don't seem to be getting any email from RDJ recently. Maybe since the time I

Re: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Bob McClure Jr
On Fri, Feb 24, 2006 at 12:25:02AM -0500, Gene Heskett wrote: On Thursday 23 February 2006 23:20, Bob McClure Jr wrote: On Thu, Feb 23, 2006 at 10:59:02PM -0500, Gene Heskett wrote: A snippet or 3 from a 'crontab -l' as root: [EMAIL PROTECTED] 06 22 * * * /etc/init.d/asmb restart

RE: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Bowie Bailey
Gene Heskett wrote: On Friday 24 February 2006 09:06, Bowie Bailey wrote: Gene Heskett wrote: On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: snippage I don't seem to be getting any email from RDJ recently.

How easy is Spam Assassin really?

2006-02-24 Thread Chris Norman
I host about 10 domains on a w2k server (when you're done mocking, please continue). Currently, I use ASSP which isn't very effective but helps a lot. Occasionally, I'll get fed up and dig into implementing SA instead but then stop short after readying about how it doesn't run as a service

RE: How easy is Spam Assassin really?

2006-02-24 Thread Bret Miller
I host about 10 domains on a w2k server (when you're done mocking, please continue). Currently, I use ASSP which isn't very effective but helps a lot. Occasionally, I'll get fed up and dig into implementing SA instead but then stop short after readying about how it doesn't run as a service

RE: How easy is Spam Assassin really?

2006-02-24 Thread MacDonald, Mike
Im runnning SA using ALT-N Mdaemon for my mail and I dont have any problems with it running on XP Professional -Original Message- From: Chris Norman [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 10:26 AM To: users@spamassassin.apache.org Subject: How easy is Spam Assassin

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread jp
On Thu, Feb 23, 2006 at 04:48:09PM -0500, JamesDR wrote: Vivek Khera wrote: On Feb 23, 2006, at 1:08 PM, Mike Jackson wrote: So, I suppose the question is: How do you deal with getting forwarded mail through to AOL without being branded as a spammer? You stop forwarding email to AOL...

RE: (OT, but relevant) Playing with AOL?

2006-02-24 Thread Matthew.van.Eerde
Dave Pooser wrote: If you are seeing the AOL members addresses then I'd like to know what you did to receive them, because you appear the only one is several list I belong to that are discussing this very issue that is seeing those addresses. I'd also like to get the AOL member's address,

RE: How easy is Spam Assassin really?

2006-02-24 Thread Chris Santerre
Title: RE: How easy is Spam Assassin really? Do you have to constantly tune your rules? How often do you need to do this for it to be effective? Some honest feedback and maybe a link or two would be helpful. Implementing SA on a win32 doesn't seem like it'd be too difficult,

GIF stock spams

2006-02-24 Thread Chris Conn
Hello, Has anyone written any rules to catch the following types of spam http://nisk.creenet.com/~cconn/sa/ They consist of a few lines of text (sometimes), and a .gif attachment that is in fact some penny stock being pushed. Thanks in advance, Chris

Re: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Gene Heskett
On Friday 24 February 2006 09:42, Bowie Bailey wrote: Gene Heskett wrote: On Friday 24 February 2006 09:06, Bowie Bailey wrote: Gene Heskett wrote: On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: snippage I

RE: GIF stock spams

2006-02-24 Thread Ruben Cardenal
I catch them all, for example: X-Spam-Report: * 1.0 ICAB_FW2 ICAB_FW2 * 1.1 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry * 1.9 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words * 0.0 HTML_MESSAGE BODY: HTML included in message * 6.0

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread Christopher X. Candreva
On Thu, 23 Feb 2006, Gene Heskett wrote: And exactly what, and where can I get this 'verp'? Many mailing lists I'm on could make good use of this feature. If you run a mailing list, read the documentation for your program. If you don't, ask the person who does run it to read the

RE: GIF stock spams

2006-02-24 Thread Maurice Lucas
* 6.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% So 6.0 point for your BAYES I hope your BAYES is well trained and never gets corrupted Maurice Lucas On Fri, 2006-02-24 at 17:44 +0100, Ruben Cardenal wrote: I catch them all, for example: X-Spam-Report: * 1.0

RE: GIF stock spams

2006-02-24 Thread Shawn R. Beairsto
I'm getting hammered by these as well, usually scoring below 2 points. I'm running most of the standard SARE rules (including SARE_STOCKS). Any advice? Bayes training has (so far) been ineffective. -Shawn -Original Message- From: Chris Conn [mailto:[EMAIL PROTECTED] Sent: Friday,

RE: GIF stock spams

2006-02-24 Thread Joey
Hi Ruben, Sorry to be such a nube, but can you tell me exactly what I need to do to impliment what is working for you. These damn image files are killing us. Thanks, Joey -Original Message- From: Ruben Cardenal [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 11:45 AM To:

RE: GIF stock spams

2006-02-24 Thread Ruben Cardenal
* 6.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% So 6.0 point for your BAYES I hope your BAYES is well trained and never gets corrupted Works like a charm :) Ruben

Re: GIF stock spams

2006-02-24 Thread Tom Brown
* 6.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% So 6.0 point for your BAYES I hope your BAYES is well trained and never gets corrupted Works like a charm :) i've only dared goto a 3 however so far so good

Re: GIF stock spams

2006-02-24 Thread Craig Baird
I get a ton of these. However, I've also got about 30 spamtrap addresses aliased to my account. I also run my SA threshold at 7, so those two factors probably account for a lot of the reason I get so many. Anyway, the SARE stock rules help quite a bit, but I still see a fair number of these

RE: GIF stock spams

2006-02-24 Thread Ruben Cardenal
Hi Joel, Well, I have spamassassin scoring as spam from 3.0 on, and until 14 gets quarantined for review for messages not scoring BAYES_99. Almost 250.000 messages scoring over 14 with only 1 FP being rejected (and was quite an unusual situation). That kind of mails have all Fw: 12345,

RE: How easy is Spam Assassin really?

2006-02-24 Thread Herb Martin
-Original Message- From: Bret Miller [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 9:56 AM To: users@spamassassin.apache.org Subject: RE: How easy is Spam Assassin really? I host about 10 domains on a w2k server (when you're done mocking, please continue).

RE: GIF stock spams

2006-02-24 Thread Joey
So if I use postfix I'm SOL? -Original Message- From: Ruben Cardenal [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 1:02 PM To: users@spamassassin.apache.org Subject: RE: GIF stock spams Hi Joel, Well, I have spamassassin scoring as spam from 3.0 on, and until 14 gets

RE: GIF stock spams

2006-02-24 Thread Joey
Sorry wasn't thinking, should this work? header ICAB_FW2 Subject =~ /^Fw:\s\d{1,9}$/i score ICAB_FW2 1 score ICAB_FW2 4 describe ICAB_FW2 IMAGE SPAM -Original Message- From: Ruben Cardenal [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 1:02 PM To:

RE: GIF stock spams

2006-02-24 Thread Ruben Cardenal
IF your mails have that kind of subject too, yes, but is malformed: header ICAB_FW2 Subject =~ /^Fw:\s\d{1,9}$/i score ICAB_FW2 4 describe ICAB_FW2 IMAGE SPAM (ICAB is related to my work, feel free to change it) Ruben. -Mensaje original- De: Joey [mailto:[EMAIL PROTECTED]

RE: How easy is Spam Assassin really?

2006-02-24 Thread Chris Santerre
Title: RE: How easy is Spam Assassin really? -Original Message- From: Herb Martin [mailto:[EMAIL PROTECTED]] Sent: Friday, February 24, 2006 12:25 PM To: 'SpamAssassin Users' Subject: RE: How easy is Spam Assassin really? -Original Message- From: Bret Miller

Re: attachment policy?

2006-02-24 Thread Theo Van Dinter
On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: question: what's this list's policy for sending attachments to the list ? i'm noticing, e.g., *.pl scripts as attachments ... rather than links to posts at code-paste sites. I don't think we have a policy about it specifically.

Re: attachment policy?

2006-02-24 Thread OpenMacNews
hi theo, On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: question: what's this list's policy for sending attachments to the list ? i'm noticing, e.g., *.pl scripts as attachments ... rather than links to posts at code-paste sites. I don't think we have a policy about it

Re: attachment policy?

2006-02-24 Thread Matt Kettler
OpenMacNews wrote: hi theo, On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: question: what's this list's policy for sending attachments to the list ? i'm noticing, e.g., *.pl scripts as attachments ... rather than links to posts at code-paste sites. I don't

Whitelist testing with GTUBE

2006-02-24 Thread Joel Gudknecht
Hi, I've added my email address like: whitelist_from [EMAIL PROTECTED] to a whitelist.cf in /etc/mail/spamassassin and sent a GTUBE email. It was still flagged. Is this normal, expected behavior? Thanks, Joel

Re: attachment policy?

2006-02-24 Thread OpenMacNews
Matt Kettler wrote: OpenMacNews wrote: hi theo, On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: question: what's this list's policy for sending attachments to the list ? i'm noticing, e.g., *.pl scripts as attachments ... rather than links to posts at code-paste

Re: Whitelist testing with GTUBE

2006-02-24 Thread Theo Van Dinter
On Fri, Feb 24, 2006 at 02:48:34PM -0600, Joel Gudknecht wrote: whitelist_from [EMAIL PROTECTED] to a whitelist.cf in /etc/mail/spamassassin and sent a GTUBE email. It was still flagged. Is this normal, expected behavior? Yes. Here's some thoughts: You shouldn't try whitelisting your own

Re: attachment policy?

2006-02-24 Thread Christopher X. Candreva
On Fri, 24 Feb 2006, Theo Van Dinter wrote: On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: i'm noticing, e.g., *.pl scripts as attachments ... rather than links to posts at code-paste sites. I don't think we have a policy about it specifically. Generally speaking though,

Re: attachment policy?

2006-02-24 Thread mouss
OpenMacNews a écrit : Matt Kettler wrote: OpenMacNews wrote: hi theo, On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: question: what's this list's policy for sending attachments to the list ? i'm noticing, e.g., *.pl scripts as attachments ... rather than links to

Re: attachment policy?

2006-02-24 Thread OpenMacNews
bounce? aheh? bounce to whom? if you bounce to the list, you'll be unsubscribed. if you bounce to the original sender, you'll get block listed, may be even bombed, hated, and your photos will be sent to fox news :). i said discard/bounce ... i bounce to people i consider friendly, to let

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread jdow
From: jp [EMAIL PROTECTED] On Thu, Feb 23, 2006 at 04:48:09PM -0500, JamesDR wrote: Vivek Khera wrote: On Feb 23, 2006, at 1:08 PM, Mike Jackson wrote: So, I suppose the question is: How do you deal with getting forwarded mail through to AOL without being branded as a spammer? You stop

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread Gene Heskett
On Friday 24 February 2006 20:11, jdow wrote: From: jp [EMAIL PROTECTED] On Thu, Feb 23, 2006 at 04:48:09PM -0500, JamesDR wrote: Vivek Khera wrote: On Feb 23, 2006, at 1:08 PM, Mike Jackson wrote: So, I suppose the question is: How do you deal with getting forwarded mail through to AOL

Re: How easy is Spam Assassin really?

2006-02-24 Thread jdow
From: Chris Norman [EMAIL PROTECTED] I host about 10 domains on a w2k server (when you're done mocking, please continue). Currently, I use ASSP which isn't very effective but helps a lot. Occasionally, I'll get fed up and dig into implementing SA instead but then stop short after readying

SPF Error: cannot get HELO, cannot use SPF

2006-02-24 Thread Chris Purves
I am not getting SPF_ hits for most messages that I expect should pass SPF. On one message when I run through spamassassin with debug I see: [5959] dbg: spf: checking HELO (helo=, ip=66.111.4.28) [5959] dbg: spf: cannot get HELO, cannot use SPF [5959] dbg: spf: checking EnvelopeFrom (helo=,

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread Chris Purves
jdow wrote: Of course, if AOL gets away with this then they are not a common carrier anymore. So they become responsible for their content. Sue them for any bad content and throw their charges in their face as evidence that they are not a carrier, they are a content service. Nail their sorry

Re: SPF Error: cannot get HELO, cannot use SPF

2006-02-24 Thread Chris Purves
Chris Purves wrote: I am not getting SPF_ hits for most messages that I expect should pass SPF. On one message when I run through spamassassin with debug I see: [5959] dbg: spf: checking HELO (helo=, ip=66.111.4.28) [5959] dbg: spf: cannot get HELO, cannot use SPF [5959] dbg: spf: checking