Re: Help with rule for geocities spam

2006-05-23 Thread Daryl C. W. O'Shea
On 5/23/2006 2:51 AM, Benny Pedersen wrote: http://wiki.apache.org/spamassassin/WebRedirectPlugin there is a slight config error on the page [WWW] http://people.apache.org/~dos/sa-plugins/3.1/WebRedirect.cf [WWW] http://people.apache.org/~dos/sa-plugins/3.1/WebRedirect.pm in the cf file the

Re: Spamd memory leak?

2006-05-23 Thread Michael Monnerie
On Dienstag, 23. Mai 2006 00:50 Alan Fullmer wrote: Mem:   8108656k total,  5907792k used,  2200864k free,   218704k buffers Swap:  2031608k total,        0k used,  2031608k free,  2867736k cached That doesn't show spamd is using memory. It's the overall system, and of course it will use all

RE: Spamd memory leak?

2006-05-23 Thread Sietse van Zanen
Indeed, as long as it says swap: 0k used I would say it is just good memory management. :-) -Sietse From: Michael Monnerie [mailto:[EMAIL PROTECTED] Sent: Tue 23-May-06 9:34 To: users@spamassassin.apache.org Subject: Re: Spamd memory leak? On Dienstag, 23.

RE: Outlook 2003 Junk filter

2006-05-23 Thread Sietse van Zanen
There you have said it: A good spam filter. And I was talking about Outlook.. :-) From: Justin Mason [mailto:[EMAIL PROTECTED] Sent: Tue 23-May-06 13:18 To: Sietse van Zanen Cc: users@spamassassin.apache.org Subject: Re: Outlook 2003 Junk filter

Re: out of memory when receiving larger mails

2006-05-23 Thread nxxs
But I am using spamc/spamd. I think that the ifspamh-script is a wrapper for spamc. Inside the ifspamh-script gets spamc called. I read already that spamc normally won't scan messages larger 256kb by default. Thats my problem: It seems that spamc tries to scan the large messages anyway. The

Re: Proposal: First URI black list, how about email address black lists?

2006-05-23 Thread Maurice Lucas
On Thu, 2006-05-18 at 07:23 -0700, Marc Perkel wrote: URI based black lists have been extremely effected in identifying spam. I propose another kind of black list. A list of email addresses embedded in the message body as replies to nigerian type spam and other spam where you are instructed

RE: Naming conventions for tests

2006-05-23 Thread Chris Santerre
Title: RE: Naming conventions for tests -Original Message- From: Ben Kreunen [mailto:[EMAIL PROTECTED]] Sent: Monday, May 22, 2006 8:07 PM To: SPAMAssassin email list Subject: Naming conventions for tests Hi All I've been approaching the problem of filtering spam at the

RE: conf file

2006-05-23 Thread Bowie Bailey
Nathan Broderick wrote: Where does the local.cf file first get read in by SpamAssassin? Run 'spamassassin -D --lint' and you can see exactly when all the config files are read in. -- Bowie

Re: Setting up my own RBL - How?

2006-05-23 Thread David Filion
Marc Perkel wrote: So - if I wanted to set up my own RBL for others to query me, how would I do that? I'm seriously thinking about it. Alternatively, I can stream my spam to anyone else who is already doing it. I've modified my spam stream to exclude stuff already listed in several other

RE: Rules for that mutating subject drug mails

2006-05-23 Thread Bret Miller
I´d like to know if it´s possible to filter efficiently all those emails about Viagra and friends with a subject that always changes and has different letters inserted between the letters of the drug name. I guess you know which ones I´m talking about (Re: test VhtAGGRA / CItAlLIS).

Spamassassin not checking email

2006-05-23 Thread Benjamin Adams
I have the following headers in my local.cfadd_header all Flag _YESNOCAPS_add_header all Status _YESNO_, hits=_HITS_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_add_header all Level _STARS(*)_add_header all Checker-Version SpamAssassin _VERSION_ (_SUBVERSION_) on

RE: Spamd memory leak?

2006-05-23 Thread Alan Fullmer
Very true. However I started with 1 gig of ram, then 2, then 8. Each time it gets up to using the swap space, regardless of how much I put in there. Thanks for the thoughts, I will let this one ride out a little longer to see what happens. -Original Message- From: Sietse van Zanen

RE: conf file

2006-05-23 Thread Nathan Broderick
That's just what I was looking for. Thank you. On Tue, 2006-05-23 at 10:11 -0400, Bowie Bailey wrote: Nathan Broderick wrote: Where does the local.cf file first get read in by SpamAssassin? Run 'spamassassin -D --lint' and you can see exactly when all the config files are read in.

Re: 3.1.2?

2006-05-23 Thread up
On Thu, 27 Apr 2006, Theo Van Dinter wrote: On Wed, Apr 26, 2006 at 05:32:45PM -0400, Joe Flowers wrote: Any educated guesses on when 3.1.2 will be released? From a selfish point of view, I'm trying to kill several upgrades with one stone. I was hoping to get it out this month, but I

Score ends in +10?

2006-05-23 Thread Aaron Grewell
Hello list, I'm trying to run amavislogsumm against my mail logs, and some of the scores are listed with a +10 at the end, which breaks the script. For example: May 23 10:17:22 216.186.73.25 amavis[7301]: (07301-01-9) SPAM-TAG, [EMAIL PROTECTED] - [EMAIL PROTECTED], Yes, score=6.13+10

Re: Score ends in +10?

2006-05-23 Thread Theo Van Dinter
On Tue, May 23, 2006 at 12:04:11PM -0700, Aaron Grewell wrote: May 23 10:17:22 216.186.73.25 amavis[7301]: (07301-01-9) SPAM-TAG, [EMAIL PROTECTED] - [EMAIL PROTECTED], Yes, score=6.13+10 tagged_above=1 required=6.2 tests=[BAYES_50=0.001, BODY_OPT_OUT=1, [...] Is that a score SA is

Re: Score ends in +10?

2006-05-23 Thread Aaron Grewell
Is that a score SA is generating, or do I need to redirect this to the amavisd-new list? That's an amavis log entry, so you'd have to ask them. OK, will do. Thanks Theo. -Aaron

Re: Score ends in +10?

2006-05-23 Thread Gary V
On Tue, May 23, 2006 at 12:04:11PM -0700, Aaron Grewell wrote: May 23 10:17:22 216.186.73.25 amavis[7301]: (07301-01-9) SPAM-TAG, [EMAIL PROTECTED] - [EMAIL PROTECTED], Yes, score=6.13+10 tagged_above=1 required=6.2 tests=[BAYES_50=0.001, BODY_OPT_OUT=1, [...] Is that a score SA is

Re: Score ends in +10?

2006-05-23 Thread Aaron Grewell
Sorry this is off-topic. From amavisd-new RELEASE_NOTES: - in passed and quarantined mail a header field X-Spam-Status now shows score as an explicit sum of SA score and a by-recipient score_sender boost (when the boost is nonzero); the X-Spam-Score header field still shows a sum of both

Integrated Spamd in Postfix

2006-05-23 Thread Jana Nguyen
I've integrated spamassassin with postfix using spamd via the instructions: http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix How do I test if I've done the integration correctly, how do I test out spamassassin with postfix? p.s. Thanks!

Re: Integrated Spamd in Postfix

2006-05-23 Thread Theo Van Dinter
On Tue, May 23, 2006 at 02:20:24PM -0700, Jana Nguyen wrote: How do I test if I've done the integration correctly, how do I test out spamassassin with postfix? Take a look at http://wiki.apache.org/spamassassin/TestingInstallation -- Randomly Generated Tagline: `The best way to get a drink

Re: orkut phishing? Why??

2006-05-23 Thread Kelson
John D. Hardin wrote: Is somebody trying to phish Orkut user accounts? Could be. It certainly looks suspicious. ...and if so, why??? :) Maybe to take advantage of the fact that people often reuse passwords? -- Kelson Vibber SpeedGate Communications www.speed.net

RE: Naming conventions for tests

2006-05-23 Thread Ben Kreunen
Would it not be easier to create meta rules for the rules you are looking for, then simply add more points for those? Thats what most of us do. Otherwise you are prbly fighting a losing battle trying to get a standard naming scheme. Its a great idea, that simply won't get followed. It

RE: checksumming image spam

2006-05-23 Thread Paul Matthews
Razor is also a good check, but it only free for personal use (same as dcc): http://razor.sourceforge.net Razor compile and install is a bit more difficult than dcc or pyzor, as it might need a whole lot of perl modules (depending on what is already there), so better get your CPAN right and

Re: Spamd memory leak?

2006-05-23 Thread jdow
The data you showed, Alan, does NOT show the swap space being used. Mem: 8108656k total, 5907792k used, 2200864k free, 218704k buffers Swap: 2031608k total,0k used, 2031608k free, ^ ^^^ 2867736k cached So you are reading the report

Re[2]: checksumming image spam

2006-05-23 Thread Sanford Whiteman
And to me that sounds like me running a Small Business Server I should be alrighht? Yes, absolutely. --Sandy

Re: Naming conventions for tests

2006-05-23 Thread Sanford Whiteman
The main problem with this approach is that it requires monitoring of the SPAM assassin tests being applied as the software is updated... Well, I'd say this is a problem chiefly because whoever _is_ administering the server -- not spamassassin.apache.org -- is clearly not

Re: Custom SA Filters

2006-05-23 Thread Daryl C. W. O'Shea
On 5/23/2006 9:42 PM, Chan, Wilson wrote: Anyone know of any good custom SA filters? Im already using SARE with Rules dejour. Are there any other good custom filters online? Thanks! Are you looking to catch a particular type of spam? Most people with an up-to-date SpamAssassin version and a

Re: Spam Assassin Detecting our emails as spam

2006-05-23 Thread spectacularstuff
Here is a complete header without the report_safe 1. Below the header is the result of my MXLookup and NSLookup. You will notice that I put my score down to 5 from my previous 8 in order to get this to report as spam. My question is what do I have to do in order to stop SA from reporting that

Re: Re[2]: checksumming image spam

2006-05-23 Thread Paul Matthews
And to me that sounds like me running a Small Business Server I should be alrighht? Yes, absolutely. --Sandy When I want to test that spam assassin it working it's fairly easy, look in the header information or user the gtude command http://spamassassin.apache.org/gtube/ But what

false scoring for DNS_FROM_RFC_ABUSE

2006-05-23 Thread padma
Event though hotmail.com domain has a abuse address and a postmaster address, why do mails from hotmail.com domain get trigerred for these tests 0.4 DNS_FROM_RFC_ABUSE 1.4 DNS_FROM_RFC_POST Regards Padma ERNET Helpdesk

RE: Custom SA Filters

2006-05-23 Thread Chan, Wilson
Are you looking to catch a particular type of spam? Most people with an up-to-date SpamAssassin version and a complement of SARE rules are either looking to catch something specific or are looking to fix a mis-configuration. Daryl Im basically trying to build a better spam filtering box then