RE: What rule can we use to catch this spam?

2006-03-23 Thread Martin Hepworth
Peter Here's the rules that triggered on my system...(3.1.0) 1.0 L_DRUGS12 L_DRUGS12 1.1 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry 1.1 HELO_EQ_LT4_SA HELO_EQ_LT4_SA 1.1 SPF_NEUTRALSPF: sender does not match SPF record (neutral)

Bayesian filtering : the full story and question

2006-03-23 Thread Pieter Vanmeerbeek
Hi, I'm investigating the bayesian filtering in Spam assassin and although a lot of info is available on it, no full story is available. I've tried to gather all info and created my full story. Can anyone correct my if I'm wrong? And can somebody answer the question at the bottem ? Thanks,

Re: INVALID_DATE

2006-03-23 Thread jdow
Strftime does not exist either. Windows is DUMB. It IS found in VC++'s documentation, though. {^_-} - Original Message - From: [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Wednesday, March 22, 2006 23:26 Subject: RE: INVALID_DATE jdow wrote: c:\man strftime 'man' is not

Re: Bayesian filtering : the full story and question

2006-03-23 Thread jdow
From: Pieter Vanmeerbeek [EMAIL PROTECTED] ??? QUESTION : I could not find if manually learning still respects the tresholds above ?? In other words if a mail is delivered with score 6, can it be added to the bayes db by manuallt learning it ??? jdow Of course it can. Do it all the time.

RE: What rule can we use to catch this spam?

2006-03-23 Thread Peter M. Abraham
Greetings Martin: May I have the complete (match, describe, score) rules for the following: HELO_EQ_LT4_SA MISSING_HB_SEP FR_BR_AFTER_HTML FM_NO_STYLE FM_MULTI_ODD2 Thank you. At 04:10 AM 3/23/2006, Martin Hepworth wrote: Peter Here's the rules that

RE: What rule can we use to catch this spam?

2006-03-23 Thread Martin Hepworth
Peter HELO_EQ_LT4_SA is in 88_FVGT_headers.cf MISSING_HB_SEP is in the standard 3.1.0 tests FR_BR_AFTER_HTML is in 88_FVGT_rawbody.cf FM_NO_STYLE and FM_MULTI_ODD2 are in 99_FVGT_meta.cf The FVGT rules can be obtained from... http://www.rulesemporium.com/other-rules.htm which also has

Re: SPF and Domain Keys

2006-03-23 Thread Jeferson Pessoa Santana
Jeferson Pessoa Santana wrote: [EMAIL PROTECTED] wrote: Jeferson Pessoa Santana wrote: I'm back with new doubts hehehe. I've been reading a lot of articles and e-mails from the list about SPF and Domain Keys but I don't know how to use they in

Re: INVALID_DATE

2006-03-23 Thread hamann . w
c:\man strftime 'man' is not recognized as an internal or external command, operable program or batch file. The mere fact that documentation is less accessible on windows should not be taken as an excuse by programmers to reinvent the wheel as an egg-shaped thingy Wolfgang Hamann

Re: INVALID_DATE

2006-03-23 Thread Craig Morrison
[EMAIL PROTECTED] wrote: c:\man strftime 'man' is not recognized as an internal or external command, operable program or batch file. The mere fact that documentation is less accessible on windows should not be taken as an excuse by programmers to reinvent the wheel as an egg-shaped thingy

Re: SA just stopped working

2006-03-23 Thread Liam-PrintingAutomation
jdow wrote: From: "Liam-PrintingAutomation" [EMAIL PROTECTED] I installed spamassassin not long ago on our server, and it worked great! Then sometime in the last couple of weeks it appears to have just stopped working. No incoming e-mails are being tagged with spamassassin headers

Re: INVALID_DATE

2006-03-23 Thread Sander Holthaus
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Lee wrote: Thanks for trying to bring it back on-topic. The topic was about the legality of a timezone: GMT Standard Time in: Date: Wed, 22 Mar 06 12:00:00 GMT Standard Time being applied by an ISP to their outbound email. Nothing to do

Re: INVALID_DATE

2006-03-23 Thread Craig Morrison
David Lee wrote: On Thu, 23 Mar 2006, Craig Morrison wrote: At any rate and to try and bring this discussion somewhat back on topic, strftime makes it trivial to change date formats merely by changing the format string given as one of its arguments. Any debate regarding difficulty of change by

Bayers error

2006-03-23 Thread sinofzik
Ok.. Iam trying to do a spamassassin upgrade.. using tha last stable one version. 3.1.1 when i try to run the make test with mbayes into mysql enabled i received this errors.. The mysql user that have the access for this database is ROOT, so i dont thing it is a permission problem.. the SQL

RES: Bayers error

2006-03-23 Thread Sinofzik
Ok, more one error Now with the night build.. t/bayessql.ok 1/53plugin: failed to create instance of plugin validuserplugin: Can't locate object method new via package validuserplugin (perhaps you forgot to load validuserplugin?) at (eval 722) line 1. I stil blinf in

RES: Bayers error

2006-03-23 Thread Sinofzik
Using in a direct way the test [EMAIL PROTECTED]:/home/package/spamassassin/t# ./bayessql.t 1..53 # Running under perl version 5.008007 for linux # Current time local: Thu Mar 23 16:50:22 2006 # Current time GMT: Thu Mar 23 19:50:22 2006 # Using Test.pm version 1.25 ok 1 ok 2 Segmentation

RE: SPF and Domain Keys

2006-03-23 Thread Matthew.van.Eerde
Jeferson Pessoa Santana wrote: Does anyone have the link of this Domain Keys patch for the version 3.1.0? Doing a Google Search I found some information about this patch but any file or text to create the file. http://issues.apache.org/SpamAssassin/attachment.cgi?id=3210 --

Re: Uninstalling SA on OS-X

2006-03-23 Thread Kai Schaetzl
BMWrider wrote on Wed, 22 Mar 2006 22:57:57 -0500: What I would like to do is uninstall SA and start fresh. That depends entirely on how it was installed. If it came included with OS X I suggest you better ask on a OS X Mailing List what's the standard way of uninstalling if it is not

Bayes rules taking minutes - solved by moving to innodb?

2006-03-23 Thread Andrew Donkin
Hi, people. This started as a plea for help but ended as a report of an investigation, so hopefully it will be a useful addition to the archives. About 1% of my scans were taking more than 300 seconds. Extra debugging in spamd showed me that the Bayes checks were the culprit: 13:38:05

Webadmin tool for Spamassassin??

2006-03-23 Thread Abel Jeffcoat
Hello, Does anyone know if there is a webadmin tool to admistor Spamassassin via a web page? Abel Jeffcoat

Re: SA just stopped working

2006-03-23 Thread mouss
Liam-PrintingAutomation a écrit : I uhm, er, have no idea How do I find out? I can't find anything in the Sendmail settings to indicate. I use Webmin for server management, and since you mentioned Procmail I took a look at the Webmin GUI for that, and found this: Set variable DROPPRIVS

Re: SPF penetration

2006-03-23 Thread Michael Monnerie
On Mittwoch, 22. März 2006 00:11 Sander Holthaus wrote: and it wouldn't surprise me if actively rejecting SPF-fails has the similar effects as strict RFC-enforcement or double reverse DNS-lookup. Lots less spam and lots more false positives. No, because 1) by forcing strict RFC, lots of HAM

Re: SPF penetration

2006-03-23 Thread Michael Monnerie
On Mittwoch, 22. März 2006 18:47 Bazooka Joe wrote: with isp's blocking port 25 and requireing you to use thier mail server how are business going to enable spf of thier domain when thier employees could be sending mail from hundreds of different mail servers?? Use VPNs. Never allow anybody

Re: INVALID_DATE

2006-03-23 Thread Daryl C. W. O'Shea
David Lee wrote: If, conversely, it is not in breach, then SA has a problem: it shouldn't be marking it INVALID_DATE. Incidentally, it is this aspect (rather than any other) of the date that is triggering this SA rule, isn't it? I guess we could fix it by renaming the rule

Re: SPF and Domain Keys

2006-03-23 Thread Daryl C. W. O'Shea
Jeferson Pessoa Santana wrote: Does anyone have the link of this Domain Keys patch for the version 3.1.0? Doing a Google Search I found some information about this patch but any file or text to create the file. http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4623 Note that it is only

Re: penis spam coming thru

2006-03-23 Thread Michael Monnerie
On Mittwoch, 22. März 2006 01:16 List Mail User wrote: Do you have URIBL enabled? Anyway, the best bet to block these is a combination of DUL checks, BAYES and digests (DCC, Razor and Pyzor).  *And* make sure to feed it back to sa-learn if it slipped through to begin with. I have a very hard

Re: SPF and Domain Keys

2006-03-23 Thread Daryl C. W. O'Shea
[EMAIL PROTECTED] wrote: Jeferson Pessoa Santana wrote: Does anyone have the link of this Domain Keys patch for the version 3.1.0? Doing a Google Search I found some information about this patch but any file or text to create the file.

RE: SPF and Domain Keys

2006-03-23 Thread Matthew.van.Eerde
Daryl C. W. O'Shea wrote: [EMAIL PROTECTED] wrote: http://issues.apache.org/SpamAssassin/attachment.cgi?id=3210 I'd actually use attachment 3212 -- the one we applied to, and tested against, the 3.1 branch. http://issues.apache.org/SpamAssassin/attachment.cgi?id=3312 Oops. That's what I

Re: INVALID_DATE

2006-03-23 Thread mouss
Craig Morrison a écrit : I guess 'man strftime' is too difficult to manage. ;-D sure, but unix and C are obsolete. (sure, this calls for war, but I didn't start it).

Re: Webadmin tool for Spamassassin??

2006-03-23 Thread Abel Jeffcoat
All, I have gotten a couple of replies, (thank you) but I thought I could be more clear. I'm looking for a tool that will all users to adminstor their blacklist and/or whitelist. I use Qmail and have mail delivered to a Spam folder. I would like my users to be able to login to a website and

Re: Re: INVALID_DATE

2006-03-23 Thread Nigel Frankcom
Just a mild - un-warlike comment, but - there are a few of us out here that use win-based servers; I freely admit win have a skewed idea of dates, but that doesn't change the problem. Craig kindly wrote an awk that did the date conversion for my (squid) logs so that I can get some sanity from my

exceptions

2006-03-23 Thread Larry
Can I blacklist a domain but make an exception for one person in that domain? Like; blacklist_from [EMAIL PROTECTED] with the exception of [EMAIL PROTECTED] Thanks BTW; SpamAssassin version 3.1.0 running on Perl version 5.8.5 on linux Thanks again -- LINUX is simple. It just

Re: INVALID_DATE

2006-03-23 Thread mouss
Daryl C. W. O'Shea a écrit : David Lee wrote: If, conversely, it is not in breach, then SA has a problem: it shouldn't be marking it INVALID_DATE. Incidentally, it is this aspect (rather than any other) of the date that is triggering this SA rule, isn't it? I guess we could fix it by

Re: INVALID_DATE

2006-03-23 Thread mouss
Nigel Frankcom a écrit : Just a mild - un-warlike comment, but - there are a few of us out here that use win-based servers; I freely admit win have a skewed idea of dates, but that doesn't change the problem. Craig kindly wrote an awk that did the date conversion for my (squid) logs so that

Re: Training SA with Thunderbird Junk folder

2006-03-23 Thread mouss
Edward Diener a écrit : Does anybody know the instructions for training SA with the contents of the Thunderbird Junk folder ? My web host, where SA is tunning, suggests I do this in order to reduce the amount of spam I get, and I can login to my web host, transfer files from my local

Re: INVALID_DATE

2006-03-23 Thread Daryl C. W. O'Shea
mouss wrote: I here mean that you can't go as a std crusader and at the same time break the standards by tagging std compliant mail. statistics are no excuse for rejecting/tagging mail. I'm not being a std crusader. I'm simply pointing out that someone going there own way shouldn't expect

Re: exceptions

2006-03-23 Thread Daryl C. W. O'Shea
Larry wrote: Can I blacklist a domain but make an exception for one person in that domain? Like; blacklist_from [EMAIL PROTECTED] with the exception of [EMAIL PROTECTED] blacklist_from [EMAIL PROTECTED] won't blacklist [EMAIL PROTECTED] or [EMAIL PROTECTED] Now blacklist_from [EMAIL

Re: exceptions

2006-03-23 Thread Matt Kettler
Daryl C. W. O'Shea wrote: Larry wrote: Can I blacklist a domain but make an exception for one person in that domain? Like; blacklist_from [EMAIL PROTECTED] with the exception of [EMAIL PROTECTED] blacklist_from [EMAIL PROTECTED] won't blacklist [EMAIL PROTECTED] or [EMAIL PROTECTED]

Re: Training SA with Thunderbird Junk folder

2006-03-23 Thread Michael Parker
mouss wrote: what I would like to see is a plugin to J a message... AOL Me Too! /AOL If anyone is a Thunderbird plugin wizard and interested in doing a plugin that will report/learn to spamd speak up, I'm very interested. Michael

Re: INVALID_DATE

2006-03-23 Thread mouss
Daryl C. W. O'Shea a écrit : I'm not being a std crusader. I'm simply pointing out that someone going there own way shouldn't expect everyone to accept their way, especially when there's an established majority going the other way. Just because a mail is standards compliant doesn't mean

Re: Training SA with Thunderbird Junk folder

2006-03-23 Thread Forrest Aldrich
Such a mechanism would still depend upon some organization on the server side... as far as I can tell, it's very much to the local sysadmin (ie: aliases to send to, forward or attach properly, etc). Would this even work well potentially? Might be interesting if there were somehow a way to

Re: Training SA with Thunderbird Junk folder

2006-03-23 Thread mouss
Forrest Aldrich a écrit : Such a mechanism would still depend upon some organization on the server side... as far as I can tell, it's very much to the local sysadmin (ie: aliases to send to, forward or attach properly, etc). Would this even work well potentially? oh I'm not asking for that

Re: Training SA with Thunderbird Junk folder

2006-03-23 Thread Matt Kettler
Forrest Aldrich wrote: Such a mechanism would still depend upon some organization on the server side... as far as I can tell, it's very much to the local sysadmin (ie: aliases to send to, forward or attach properly, etc). Would this even work well potentially? You don't need any of that in

Re: INVALID_DATE

2006-03-23 Thread jdow
From: [EMAIL PROTECTED] c:\man strftime 'man' is not recognized as an internal or external command, operable program or batch file. The mere fact that documentation is less accessible on windows should not be taken as an excuse by programmers to reinvent the wheel as an egg-shaped thingy

Re: INVALID_DATE

2006-03-23 Thread jdow
From: mouss [EMAIL PROTECTED] I lately saw an FP with RCVD illegal IP, because of a 127.0.0.80 IP. while this rarely used, it's not illegal. so the rule is just bogus IMHO. 50_scores.cf:score RCVD_ILLEGAL_IP 1.585 0.234 1.813 0.288 With a set 3 score of 0.288, I'd say this isn't a big

Re: SA just stopped working

2006-03-23 Thread jdow
From: Liam-PrintingAutomation [EMAIL PROTECTED] jdow wrote: From: Liam-PrintingAutomation [EMAIL PROTECTED] I installed spamassassin not long ago on our server, and it worked great! Then sometime in the last couple of weeks it appears to have just stopped working. No incoming e-mails are

rulesdujour, lint, and whitelist_spf

2006-03-23 Thread Michael Monnerie
Anybody else got this problem? Lots of warnings suddenly. mfg zmi -- Forwarded message from root: -- Subject: RulesDuJour/power2u: 'spamassassin --lint' failed. Please fix your SpamAssassin configuration. Date: Freitag, 24. März 2006 05:08 ***NOTICE***: spamassassin --lint