Re: Custom SA Filters

2006-05-24 Thread Michael Monnerie
On Mittwoch, 24. Mai 2006 06:40 Chan, Wilson wrote: Im basically trying to build a better spam filtering box then what they have in the commerical side. With SARE, Sendmail SBL, my box is doing pretty good, but spam is still getting through. Use * sa-update * greylisting and look at the SA

RE: Re[2]: checksumming image spam

2006-05-24 Thread Sietse van Zanen
As long as you don't make money out of your spam filtering. But I assume it would only cost you money to do so. :-) -Sietse From: Sanford Whiteman [mailto:[EMAIL PROTECTED] Sent: Wed 24-May-06 3:23 To: Paul Matthews; users@spamassassin.apache.org Subject:

RE: Spamd memory leak?

2006-05-24 Thread Sietse van Zanen
We already reached that conclusion. ;-) Anyway, if it is a memory leak, the swap should start to fill up sooner or later. Keep in mind thought, that it would be waste of memory, if your systems and application use about 4GB , to leave the other 4GB doing nothing. Linux will gradually fill it

Re: Spamd memory leak?

2006-05-24 Thread jdow
Actually as I read the sequence of messages it went in a circle with Alan asking the same question all over again in the message to which I replied. If I mis-read it please forgive. ===8--- from below Very true. However I started with 1 gig of ram, then 2, then 8. Each time it gets up to using

Re: false scoring for DNS_FROM_RFC_ABUSE

2006-05-24 Thread John Rudd
On May 24, 2006, at 3:01 AM, [EMAIL PROTECTED] wrote: Event though hotmail.com domain has a abuse address and a postmaster address, why do mails from hotmail.com domain get trigerred for these tests 0.4 DNS_FROM_RFC_ABUSE 1.4 DNS_FROM_RFC_POST I believe the requirement is not just that the

rules_du_jour

2006-05-24 Thread Paul Matthews
Hi there, I've found this website http://www.exit0.us/index.php?pagename=RulesDuJour It's a list of rules that can automatically update, it's telling me in the config file you can tell it what lists to download TRUSTED_RULESETS=TRIPWIRE SARE_ADULT SARE_OBFU1 SARE_URI0 SARE_URI1 Can anyone

Re: rules_du_jour

2006-05-24 Thread Jo
Paul Matthews wrote: Hi there, I've found this website http://www.exit0.us/index.php?pagename=RulesDuJour It's a list of rules that can automatically update, it's telling me in the config file you can tell it what lists to download TRUSTED_RULESETS=TRIPWIRE SARE_ADULT SARE_OBFU1 SARE_URI0

Re: Bypassing scan on locally originated mail

2006-05-24 Thread Rich Winkel
According to Andrzej Adam Filip: How do you deployed spamassassin? I use a milter ... Rich

Re: rules_du_jour

2006-05-24 Thread jdow
From: Paul Matthews [EMAIL PROTECTED] Hi there, I've found this website http://www.exit0.us/index.php?pagename=RulesDuJour It's a list of rules that can automatically update, it's telling me in the config file you can tell it what lists to download TRUSTED_RULESETS=TRIPWIRE SARE_ADULT

RE: false scoring for DNS_FROM_RFC_ABUSE

2006-05-24 Thread Sietse van Zanen
Because Hotmail is NOTmail. Hotmail (Microsofties), does not reply to abuse and postmaster mails. That's is against RFC, not nice, anti-social etc. etc. Therefor hotmail, as the same with yahoo is SPAM by default. Some mail server admins even block mail coming from there by default.

spamc -u semi-obsoleted?

2006-05-24 Thread Justin Mason
[EMAIL PROTECTED] writes: -u username This argument has been semi-obsoleted. To have spamd use per-user-config files, run spamc as the user whose config files spamd should load. If youre running spamc as some other user, though, (eg. root, mail, nobody, cyrus, etc.)

spamd ignoring add_header

2006-05-24 Thread Rainer Sokoll
Hi all, in my local.cf, I have (among others): add_header all Contact Rainer Sokoll If I pipe a mail through spamassassin, a header X-Spam-Contact: is added, as expected. But spamd does not. spamd is called with these options: -d -u vscan --siteconfigpath=/usr/local/sendmail/etc/spamassassin -m

Re: Bypassing scan on locally originated mail

2006-05-24 Thread Andrzej Adam Filip
Rich Winkel [EMAIL PROTECTED] writes: According to Andrzej Adam Filip: How do you deployed spamassassin? I use a milter ... If you use open source milter (or closed source with right option) then it should be possible to exclude some sending hosts (e.g. 127.0.0.1) from some checks. I think

Re: Bypassing scan on locally originated mail

2006-05-24 Thread Steven Stern
Rich Winkel wrote: According to Andrzej Adam Filip: How do you deployed spamassassin? I use a milter ... If you're using spamass-milter, edit /etc/sysconfig/spamass-milter and add excluded addresses with the -i paramater: EXTRA_FLAGS=-i 192.168.1.0/24,127.0.0.1 -- Steve

RE: Re[2]: checksumming image spam

2006-05-24 Thread Bowie Bailey
Paul Matthews wrote: And to me that sounds like me running a Small Business Server I should be alrighht? Yes, absolutely. --Sandy When I want to test that spam assassin it working it's fairly easy, look in the header information or user the gtude command

RE: Re[2]: checksumming image spam

2006-05-24 Thread Sietse van Zanen
Or do some tcpdumping on ports UDP 6277 (DCC) and TCP 2703 (Razor2) -Sietse From: Bowie Bailey [mailto:[EMAIL PROTECTED] Sent: Wed 24-May-06 15:24 To: users@spamassassin.apache.org Subject: RE: Re[2]: checksumming image spam Paul Matthews wrote: And to

Re: Custom SA Filters

2006-05-24 Thread Mike Jackson
Are you looking to catch a particular type of spam? Most people with an up-to-date SpamAssassin version and a complement of SARE rules are either looking to catch something specific or are looking to fix a mis-configuration. Daryl Im basically trying to build a better spam filtering box then

Re: false scoring for DNS_FROM_RFC_ABUSE

2006-05-24 Thread Mike Jackson
Event though hotmail.com domain has a abuse address and a postmaster address, why do mails from hotmail.com domain get trigerred for these tests 0.4 DNS_FROM_RFC_ABUSE 1.4 DNS_FROM_RFC_POST Because it's listed on both of those lists at rfc-ignorant.org:

Re: Bypassing scan on locally originated mail

2006-05-24 Thread David B Funk
On Wed, 24 May 2006, Rich Winkel wrote: According to Andrzej Adam Filip: How do you deployed spamassassin? I use a milter ... Rich Specifically which milter? Different milters have different features/options for that task. I use miltrassassin which did not have that feature, so I enhanced

Re: 3.1.2?

2006-05-24 Thread Theo Van Dinter
On Tue, May 23, 2006 at 12:50:41PM -0400, [EMAIL PROTECTED] wrote: I was hoping to get it out this month, but I think it'll probably be next early month before it's all ready to go. ie: hopefully a week or two, depending on how much time people have to create/review patches, etc. Any

Is it a bad idea to --clear the Bayes database

2006-05-24 Thread Clay Davis
Is it a bad idea to --clear the Bayes database and start over from scratch. I am not getting any false positives or having any other problems, but I almost never --learn the database and if I do I never learn any ham. I am getting ready to feed my bayes about 6000 of my most receint spam

RE: Is it a bad idea to --clear the Bayes database

2006-05-24 Thread Bret Miller
Is it a bad idea to --clear the Bayes database and start over from scratch. I am not getting any false positives or having any other problems, but I almost never --learn the database and if I do I never learn any ham. I am getting ready to feed my bayes about 6000 of my most receint spam

Re: Help! Integrated Spamd in Postfix

2006-05-24 Thread Jana Nguyen
Hello, I'm having problem sending email using spamd in postfix to send email with a spam heading on it. I ran some tests regarding to http://wiki.apache.org/spamassassin/TestingInstallation Running the first command test, I get: spamassassin --lint command I get: [2125] warn: config:

Re: Help! Integrated Spamd in Postfix

2006-05-24 Thread Theo Van Dinter
On Wed, May 24, 2006 at 01:05:36PM -0700, Jana Nguyen wrote: Running the first command test, I get: spamassassin --lint command I get: [2125] warn: config: failed to parse line, skipping: use_razor2 0 [2125] warn: config: failed to parse line, skipping: use_dcc

RE: Naming conventions for tests

2006-05-24 Thread Ben Kreunen
The main problem with this approach is that it requires monitoring of the SPAM assassin tests being applied as the software is updated... Well, I'd say this is a problem chiefly because whoever _is_ administering the server -- not spamassassin.apache.org -- is

RE: false scoring for DNS_FROM_RFC_ABUSE

2006-05-24 Thread padma
Thnks for the info! On Wed, 24 May 2006, Sietse van Zanen wrote: Because Hotmail is NOTmail. Hotmail (Microsofties), does not reply to abuse and postmaster mails. That's is against RFC, not nice, anti-social etc. etc. Therefor hotmail, as the same with yahoo is SPAM by default. Some

Re: false scoring for DNS_FROM_RFC_ABUSE

2006-05-24 Thread padma
that info was indeed good! On Wed, 24 May 2006, Mike Jackson wrote: Event though hotmail.com domain has a abuse address and a postmaster address, why do mails from hotmail.com domain get trigerred for these tests 0.4 DNS_FROM_RFC_ABUSE 1.4 DNS_FROM_RFC_POST Because it's listed on both