Re: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread Daryl C. W. O'Shea
On 6/3/2006 2:39 AM, spectacularstuff wrote: Hi again Daryl, I just need to know what you are asking to fix it. You know more than anyone what is going on with it. I can bring your bid back to corporate on Monday. Thanks for the reply. I was wondering if I was going to hear from you. :) I'd

Re: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread spectacularstuff
Hi again Daryl, I just need to know what you are asking to fix it. You know more than anyone what is going on with it. I can bring your bid back to corporate on Monday. Thanks for the reply. I was wondering if I was going to hear from you. :) Wayne -- View this message in context: http://www

RE: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread spectacularstuff
I understand the issue of troubleshooting and repair. How long I have worked on it is irrelavant as I have alreayd said, I don't know what I am doing. If I did have the knowledge I would be able to fix it and more than likely, quickly. I personally work in computer repair, not in Server Setup or

Re: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread Daryl C. W. O'Shea
On 6/2/2006 11:44 PM, spectacularstuff wrote: We already have SA setup and working with Smartermail. We would like to hire someone that is familiar with SpamAssassin and a Windows 2003 server system in order to come set this thing up so that our own emails are not being detected as SPAM. Is any

RE: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread Greg Allen
You say the problem is 30 min to 2 hours. But you have been working on it for how long and not fixed it? You are probably over-simplifying the issue (maybe, maybe not). When you quote a job you have to plan for worse case. Dealing with vendors, dns issues, propagation issues, looking at the entire

RE: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread spectacularstuff
If you are going to make remarks, please state all of the facts, 1. We do not require onsite service. 2. Guarantees are accepted. 3. Trying to justify the cost because propagation will take 2-3 days (which you and I both know, usually takes 24 hours or less in most of the places. 72 hours is a f

RE: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread Greg Allen
Well, we already know you don't consider $1,000 for onsite service and a money back guarantee reasonable. ;-) > I would much rather fine someone to hire at a reasonable cost to > come in and > fix the errors that are making SA detect our own emails as SPAM. > > Wayne > -- > View this message in

Re: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread spectacularstuff
I am using the GUI interface for SA. I can also modify local.cf myself if that is where you are talking about modifying it so the -D is in there. Yes, our users are using their dynamic IPs from their comcast accounts, etc etc etc. I do understand that but what I am most interested in is the MX r

Re: website position spam

2006-06-02 Thread jdow
By the way - that is the last time I retrieve something from savefiles. If wget does not work - forget it. {^_^} - Original Message - From: "Chris" <[EMAIL PROTECTED]> To: Sent: Friday, June 02, 2006 20:45 Subject: website position spam

Re: website position spam

2006-06-02 Thread jdow
Spam detection software, running on the system "xxx.xxx.xxx", has identified this incoming email as possible spam. The original message has been attached to this so you can view it (if it isn't spam) or label similar future email. If you have any questions, see for details. Content pr

Re: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread jdow
OK, I take it SpamAssassin is running on Windows and not an "ix box"? I hope you have some good luck tracking it down. Finding the expert you need may be difficult. Can you modify whatever is running SpamAssassin so that it adds a "-D " to the invocation of spamassassin or spamd as appropriate? R

Re: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread spectacularstuff
Thanks for the reply. Most of that is greek to me. I have spent the better part of 3 weeks not knowing what I am doing attempting to get this fixed. I don't have anymore time left. We are looking to hire someone to come in and do this. This is not a very complicated setup. There is no exchan

Re: Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread List Mail User
You have a bunch of problems; You have no PTR record for your MXs except to the dead end of worldfamousgiftbaskets.net - That domain has bogus Whois/registration data (i.e. "Not Given" is invalid). Also that domain has no 'A' or 'MX' records. Your NS records in the TLD zone files don't m

Re: website position spam

2006-06-02 Thread Matt Kettler
Chris wrote: > This one got a -0.4 for me and I'm pretty sure its spam. You can d/l the > message here. Please let me know if you get anything different and what > rules were hit. Here is the link - http://www.savefile.com/files/5914312 > It looks like you might want to review your bayes tra

Re: Processing many mbox folders

2006-06-02 Thread Kenneth Porter
--On Friday, June 02, 2006 11:28 PM -0400 "Gary D. Margiotta" <[EMAIL PROTECTED]> wrote: Yep, but his original e-mail said mail/Lists was for ham training, nothing about spam, so that's why I put that in there. It really was a quick and dirty answer, and in his other reply, there's more folder

Re: Processing many mbox folders

2006-06-02 Thread Gary D. Margiotta
Thanks, that handles the top level. ;) Yeah, it was quick and simple for just the one scenario you had in your e-mail. Me, I redirect mail using a combo of procmail and Postfix header checks to 2 users on the border servers (hamfilter and spamfilter), then I do 2 nightly script runs to sa-

website position spam

2006-06-02 Thread Chris
This one got a -0.4 for me and I'm pretty sure its spam. You can d/l the message here. Please let me know if you get anything different and what rules were hit. Here is the link - http://www.savefile.com/files/5914312 Content analysis details: (-0.4 points, 5.0 required) pts rule name

Hiring for Spam Assassin Troubleshooting

2006-06-02 Thread spectacularstuff
We already have SA setup and working with Smartermail. We would like to hire someone that is familiar with SpamAssassin and a Windows 2003 server system in order to come set this thing up so that our own emails are not being detected as SPAM. Is anyone interested in this? If you are interested l

Re: Processing many mbox folders

2006-06-02 Thread Gary D. Margiotta
Gary, doesn't that presuppose that the mail/lists directory does not contain a spam list? Yep, but his original e-mail said mail/Lists was for ham training, nothing about spam, so that's why I put that in there. It really was a quick and dirty answer, and in his other reply, there's more fold

Re: Processing many mbox folders

2006-06-02 Thread jdow
Gary, doesn't that presuppose that the mail/lists directory does not contain a spam list? I also sense a lack of spam training here. One sided Bayes training is not a good thing. {^_^} From: "Gary D. Margiotta" <[EMAIL PROTECTED]> #!/bin/sh cd mail/Lists for x in `ls` do sa-learn --ham --mbo

Re: Processing many mbox folders

2006-06-02 Thread Kenneth Porter
On Friday, June 02, 2006 10:51 PM -0400 "Gary D. Margiotta" <[EMAIL PROTECTED]> wrote: # !/bin/sh cd mail/Lists for x in `ls` do sa-learn --ham --mbox $x done Thanks, that handles the top level. ;) I figure I'll need to do something like: find mail/Lists -type f -exec sa-learn --ham

Re: Processing many mbox folders

2006-06-02 Thread Gary D. Margiotta
#!/bin/sh cd mail/Lists for x in `ls` do sa-learn --ham --mbox $x done -Gary On Fri, 2 Jun 2006, Kenneth Porter wrote: On Friday, June 02, 2006 9:47 PM -0400 JamesDR <[EMAIL PROTECTED]> wrote: How many messages have you trained? You'll need 200 each to get it going, and I recommen

Processing many mbox folders

2006-06-02 Thread Kenneth Porter
On Friday, June 02, 2006 9:47 PM -0400 JamesDR <[EMAIL PROTECTED]> wrote: How many messages have you trained? You'll need 200 each to get it going, and I recommend at least a thousand of each to really get it going. I use procmail to distribute my mail to over a hundred folders in a large tr

Re: Stock Spams; aka Pump and Dump

2006-06-02 Thread JamesDR
David Goldsmith wrote: We are running SA 3.1.0. Reading this thread today, I just found the SARE_STOCKS ruleset. I updated the rules_du_jour script and pulled down the ruleset. Have received some messages already that are being caught. Some others are making it through with scores of 6.7 -

Re: Stock Spams; aka Pump and Dump

2006-06-02 Thread David Goldsmith
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kenneth Porter wrote: > --On Thursday, June 01, 2006 1:41 PM -0400 DAve > <[EMAIL PROTECTED]> wrote: > >> Currently 3.0.4 on the toasters, 3.0.2 on the MailScanner boxes. These >> may or may not get updates this month. I've never been fond of "update"

Re: gobs of misses suddenly

2006-06-02 Thread Sean Harding
On Fri Jun 02 at 09:38:32 AM, List Mail User wrote: > There are more problems here than just being at the leading edge > of a spam-run (DNS and net test timeouts maybe?). Actually, I just figured out a major part of the problem. [10971] dbg: dns: is Net::DNS::Resolver available? no I'm no

Re: Stock Spams; aka Pump and Dump

2006-06-02 Thread Kenneth Porter
--On Thursday, June 01, 2006 1:41 PM -0400 DAve <[EMAIL PROTECTED]> wrote: Currently 3.0.4 on the toasters, 3.0.2 on the MailScanner boxes. These may or may not get updates this month. I've never been fond of "update" as a solution to a problem unless I know the change in version will directly

Re: Anyone using MyDNS to create private dsn rbl lists?

2006-06-02 Thread Logan Shaw
On Fri, 2 Jun 2006, David B Funk wrote: On Fri, 2 Jun 2006, Marc Perkel wrote: The reason I chose MyDNS was it was MySQL based and could be updated live. And I thought that if I added a field that set an expiration of now+24 hours then I could expire old entries with a simple script. rbldns

RE: Integrating Spam assasin with exchange server.

2006-06-02 Thread Bret Miller
> I apologize in advance for making a lazy question, but is > there a quick > guide somewhere as to how to integrate Spam Assassin with an exchange > server? Or maybe some way to set it in a way it will get the > mails before, filter and then forward them to exchange unchanged?. http://wiki.apach

Re: gobs of misses suddenly

2006-06-02 Thread Gary V
>There are more problems here than just being at the leading edge > of a spam-run (DNS and net test timeouts maybe?). Unresponsive DNS could be a contributing factor. I used to use djbdns as a local caching name server but found that on my setup it degraded over time (could have been the w

Re: gobs of misses suddenly

2006-06-02 Thread Theo Van Dinter
On Fri, Jun 02, 2006 at 09:38:32AM -0700, List Mail User wrote: > >My guess is that these came in before any of razor, uribl, etc, got ahold of > >them. I just checked them all: [...] > Many of the name servers involved have been SBL listed for weeks. > Also his Bayes failed horribly on some

Re: Anyone using MyDNS to create private dsn rbl lists?

2006-06-02 Thread David B Funk
On Fri, 2 Jun 2006, Marc Perkel wrote: > The reason I chose MyDNS was it was MySQL based and could be updated > live. And I thought that if I added a field that set an expiration of > now+24 hours then I could expire old entries with a simple script. rbldnsd can be updated semi-live. Every "check

RE: required_score

2006-06-02 Thread Bowie Bailey
Michaux Julien wrote: > Yes I use amavis... > > So it's in the amavis configuration that I have to set the > required_score? Do you know it is? Search amavisd.conf for "sa_tag_level". This should find all of the score settings for amavis. Amavis is much more flexible than SA alone and has more

Re: gobs of misses suddenly

2006-06-02 Thread List Mail User
>... >My guess is that these came in before any of razor, uribl, etc, got ahold of >them. I just checked them all: > >score=3D43.64 >score=3D16.961 >score=3D24.61 >score=3D13.893 >score=3D10.81 >score=3D34.878 >score=3D39.367 >score=3D23.321 >score=3D41.673 >score=3D47.624 >score=3D36.642 >score=3

RE: required_score

2006-06-02 Thread Bowie Bailey
Julien Michaux wrote: > Hi everybody, > > I have a problem using spamassassin. The required_score option > doesn't work... > > I use the lastest spamassassin version, postfix 2.2, clamav, > courier-imap and openLDAP. My operating system is Debian testing with > kernel 2.6.12. > > I set the r

Re: required_score

2006-06-02 Thread Theo Van Dinter
On Fri, Jun 02, 2006 at 06:24:14PM +0200, Julien Michaux wrote: > I use the lastest spamassassin version, postfix 2.2, clamav, courier-imap > and openLDAP. My operating system is Debian testing with kernel 2.6.12. There's something else too which you didn't list. > X-Spam-Status: No, score=3.65

Re: gobs of misses suddenly

2006-06-02 Thread Theo Van Dinter
On Fri, Jun 02, 2006 at 08:37:19AM -0700, Sean Harding wrote: > Here are several example messages that have gotten through in the last day > or so (including the scores they got): > > http://dogcow.org/tmp/spam-misses-20060602/ > > I have SA installed locally in my home di

required_score

2006-06-02 Thread Julien Michaux
Hi everybody,I have a problem using spamassassin. The required_score option doesn't work...I use the lastest spamassassin version, postfix 2.2, clamav, courier-imap and openLDAP. My operating system is Debian testing with kernel  2.6.12.I set the required_score option to 5 and when I received a spa

Re: gobs of misses suddenly

2006-06-02 Thread List Mail User
le messages that have gotten through in the last day >or so (including the scores they got): > >http://dogcow.org/tmp/spam-misses-20060602/ > >I have SA installed locally in my home dir, running through procmail (no >spamd/spamc involvement). I theoretically have network checks on

Re: gobs of misses suddenly

2006-06-02 Thread Stuart Johnston
tten through in the last day or so (including the scores they got): http://dogcow.org/tmp/spam-misses-20060602/ I have SA installed locally in my home dir, running through procmail (no spamd/spamc involvement). I theoretically have network checks on (I'm not running SA with '-L').

RE: Stock Spams; aka Pump and Dump

2006-06-02 Thread Bret Miller
> Bayes, arrgg!! More than once I've been given examples of bayes being > the solution I need. I really really really want bayes to > work. But each > time I set it up, the db gets huge, scan times go through the > roof, and > I end up disappointed. The one time it worked for me I ended > up traini

Re: Isssues after upgrading / updating SA

2006-06-02 Thread Ken A
"spamassassin time out" can be caused by slow dns lookups. I assume you are using the rbls in S.A., and not MailScanner? Are you running a local caching nameserver? What do `vmstat` and `free` say? Any swap in use? If yes, get more ram. 1gb ram would be a good place to start for a MailScanner/

RE: gobs of misses suddenly

2006-06-02 Thread Bowie Bailey
; Here are several example messages that have gotten through in the > last day or so (including the scores they got): > > http://dogcow.org/tmp/spam-misses-20060602/ > > I have SA installed locally in my home dir, running through procmail > (no spamd/spamc involvement). I theo

gobs of misses suddenly

2006-06-02 Thread Sean Harding
last day or so (including the scores they got): http://dogcow.org/tmp/spam-misses-20060602/ I have SA installed locally in my home dir, running through procmail (no spamd/spamc involvement). I theoretically have network checks on (I'm not running SA with '-L'). Any thoughts on what

Re: Anyone using MyDNS to create private dsn rbl lists?

2006-06-02 Thread Marc Perkel
Ramprasad wrote: On Thu, 2006-06-01 at 19:52 -0700, Marc Perkel wrote: I'm thinking about using MyDNS to create my own DNS blacklist. I'm thinking I'll make it available to everyone to list IPs that are not on other lists. Mostly virus infected zombies and such. So - has anyon

RE: Isssues after upgrading / updating SA

2006-06-02 Thread Chris Santerre
Spamassassin -D --lint   Might show you where its getting hung up. Also where did you exactly add the rule HTMAL_MESSAGE? What file, what dir?   Can you run TOP and see your memory usage?   --Chris -Original Message-From: yossim [mailto:[EMAIL PROTECTED]Sent: Friday, June 02, 2

Re: Anyone using MyDNS to create private dsn rbl lists?

2006-06-02 Thread Ramprasad
On Thu, 2006-06-01 at 19:52 -0700, Marc Perkel wrote: > I'm thinking about using MyDNS to create my own DNS blacklist. I'm > thinking I'll make it available to everyone to list IPs that are not on > other lists. Mostly virus infected zombies and such. > > So - has anyone else done this? Looking

RE: Isssues after upgrading / updating SA

2006-06-02 Thread Sietse van Zanen
1. SA3.x seems to need a little more memory + cpu than 2.x. If you can't add memory just up the time-out value for your milter or other piping mechanism you're using. 2. Lots and lots and then lots more has changed in the configuration between 2.64 and 3.1.1. Read the documentation on configur