Re: Was One large image now is several small images

2006-06-20 Thread Loren Wilton
I am seeing this too. It's the only spam I get now. Stocks with GIF images inline. How annoying. I bumped up SARE_GIF_ATTACH to 4.75 points but that's not enough to kill it. Anyone have a good rule for this?? Well, after some digging the lowest score I found for these was Content

SA::DBI plugin and SA 3.1.3

2006-06-20 Thread Michael Monnerie
Hi, I'm using it, but there are a lot of warnings. I have loadplugin Mail::SpamAssassin::Plugin::DBI /usr/lib/perl5/site_perl/5.8.6/i586-linux-thread-multi/DBI.pm in my v310.pre config file. What could be the problem? I checked the logs, and can't see persistent connections. [11538] warn:

ZMI_GERMAN ruleset

2006-06-20 Thread Michael Monnerie
Dear users, I got several reports about warnings in SA versions 3.1. I'm sorry for this, I use 3.1.3, which doesn't give any lint warnings for that. Some hours ago I made an update by shortening the description for these rules. So please update via RDJ to get a copy without warnings. If

Re: How to install iXhash

2006-06-20 Thread Matt Kettler
Marc Perkel wrote: Here's the link to the wiki, but I don't know what to do with it. http://wiki.apache.org/spamassassin/iXhash Disclaimer: I've never tried this. However, the following is a fairly well educated guess at how to install it. 1) copy paste the bottom half into a file called

HUMOR: Gap needs to fire Marketing people.

2006-06-20 Thread Chris Santerre
Title: HUMOR: Gap needs to fire Marketing people. This is HAM. Signed up for by the user. But whoever is creating these mailers for The Gap, needs to be fired. Subject: Size Matters. Find Out Why Inside. Seriously, they paid someone to come up with that? Its like they are trying to be

SQL installation problem

2006-06-20 Thread boka
Hello, i'm trying to configure sql whitelisting/... etc. I've made all steps from: http://wiki.apache.org/spamassassin/UsingSQL and it is not working. From my /var/log/maillog ... Jun 20 16:15:58 rilej amavis[19547]: Module DBD::mysql 3.0006 Jun 20 16:15:58 rilej amavis[19547]:

RE: HUMOR: Gap needs to fire Marketing people.

2006-06-20 Thread Dallas L. Engelken
or maybe M.O. needs to can their email admin for not whitelisting those all important gap mailers. ;) From: Chris Santerre [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 20, 2006 09:16 To: Spaml (E-mail); SaTalk (E-mail)

Re: How to install iXhash

2006-06-20 Thread Marc Perkel
Matt Kettler wrote: Marc Perkel wrote: Here's the link to the wiki, but I don't know what to do with it. http://wiki.apache.org/spamassassin/iXhash Disclaimer: I've never tried this. However, the following is a fairly well educated guess at how to install it. 1)

SARE_SPOOF_EBAYFORM - lots of false positives

2006-06-20 Thread Peter Campion-Bye
Last few genuine emails from ebay UK have started to trigger this rule. Might be worth whoever is responsible for this one taking a look, in the meantime I'll override the score to 0. Can provide an example message if necessary, let me know (don't want to send it to everyone as it's 37K)

Re: HUMOR: Gap needs to fire Marketing people.

2006-06-20 Thread Matt Kettler
Dallas L. Engelken wrote: or maybe M.O. needs to can their email admin for not whitelisting those all important gap mailers. ;) Or adjust their mail filters so they're not so over-zealous that you need to whitelist everything of a commercial nature. I personally detest using whitelists and

Re: SQL installation problem

2006-06-20 Thread Mark Martinec
boka, i'm trying to configure sql whitelisting/... etc. I've made all steps from: http://wiki.apache.org/spamassassin/UsingSQL Jun 20 16:15:58 rilej amavis[19547]: Module DBD::mysql 3.0006 Jun 20 16:15:58 rilej amavis[19547]: Module DBI 1.51 ... Jun 20 16:15:58

RE: How to install iXhash

2006-06-20 Thread Bret Miller
/lib/Mail/SpamAssassin/Plugin From: Marc Perkel [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 20, 2006 7:29 AMTo: Matt KettlerCc: users@spamassassin.apache.orgSubject: Re: How to install iXhash Matt Kettler wrote: Marc Perkel wrote: Here's the link to the wiki, but I

Re: SQL installation problem

2006-06-20 Thread boka
Mark Martinec wrote: These log entries refer to SQL use by amavisd-new directly, i.e. for logging to SQL, pen pals soft-whitelisting and per-recipient settings including whitelisting and blacklisting (which is independent from w/b-listing in SA). ok SA accesses SQL through its own methods

RE: HUMOR: Gap needs to fire Marketing people.

2006-06-20 Thread Chris Santerre
Title: RE: HUMOR: Gap needs to fire Marketing people. -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED]] Sent: Tuesday, June 20, 2006 10:36 AM To: Dallas L. Engelken Cc: SaTalk (E-mail) Subject: Re: HUMOR: Gap needs to fire Marketing people. Dallas L.

Re: Can SA be used to implement greylisting?

2006-06-20 Thread Jonas Eckerman
Logan Shaw wrote: Basically, greylisting has an achilles heel: legit messages from unknown senders are delayed a long time. This is fine for Only if you use a long delay. In my experience a grey period of 3 minutes is enough to stop most spam and viruses. Especially if you combine it with

Re: How to install iXhash

2006-06-20 Thread Dirk Bonengel
Marc, just drop both files (.cf and .pm) into the directory where your local.cf is. One important piece of (missing) info: You must be running SA v 3.1.0 or higher (not 3.0 as stated). If this is a problem I can easily post a version working with 3.0.x Dirk Marc Perkel schrieb: Matt

Re: SA::DBI plugin and SA 3.1.3

2006-06-20 Thread Michael Parker
Michael Monnerie wrote: Hi, I'm using it, but there are a lot of warnings. I have loadplugin Mail::SpamAssassin::Plugin::DBI /usr/lib/perl5/site_perl/5.8.6/i586-linux-thread-multi/DBI.pm in my v310.pre config file. What could be the problem? I checked the logs, and can't see persistent

Re: Can SA be used to implement greylisting?

2006-06-20 Thread Kelson
Jonas Eckerman wrote: Logan Shaw wrote: Basically, greylisting has an achilles heel: legit messages from unknown senders are delayed a long time. This is fine for Only if you use a long delay. Or if the sender has a long retry period. Yeah, you can expect them to retry in 10-15

RE: How to install iXhash

2006-06-20 Thread Benny Pedersen
/lib/Mail/SpamAssassin/Plugin /etc/mail/spamassassin so it beeing there after next upgrade of sa ?

Re: How to install iXhash

2006-06-20 Thread Marc Perkel
OK - I updated the Wiki - but - how about writing up a good overview of what the plugin does and why people would want to use it.

ham and spam

2006-06-20 Thread Michael Di Martino
I am sure this has been posted b/4 however I am having a hard time finding it in the archives How does one feed bayes ham and spam on an smpt gateway(no local deliverey). All sever does is accetp mail for one 2 domains scrub for virus and spam and then forward it to its nastly littly exchange

RE: ham and spam

2006-06-20 Thread Gary W. Smith
Michael, There are a couple ways of doing. It really depends on how easy you want to make it for your users/admins. It also depends on your configuration. We use MySQL for bayes and awl. This make it easy for us as we have an internal machine running Cyrus and SA. We have a local account

RE: ham and spam

2006-06-20 Thread Bret Miller
How does one feed bayes ham and spam on an smpt gateway(no local deliverey). All sever does is accetp mail for one 2 domains scrub for virus and spam and then forward it to its nastly littly exchange server. Can you set up shared Exchange folders that can be exported to mbox format? If

Re: How to install iXhash

2006-06-20 Thread Marc Perkel
OK - so far so good. It seems to be detecting spam. I have a few questions though. If SA determines that it is spam and ixhash doesn't detect it, will SA sort of report it to ixhash to the ixhash will learn it? If not - shouldn't it? Is there any confidence levels that can be returned. If

Querying Bayes

2006-06-20 Thread Matt Hampton
Hi I have had a quick check of the archives but can't see any relavent threads. I would like to be able to find out what effect a token would have on Bayes scoring. For example - I want to be able to find out whether a header that I am inserting before SpamAssassin sees the message is having

Re: Querying Bayes

2006-06-20 Thread Logan Shaw
On Tue, 20 Jun 2006, Matt Hampton wrote: I have had a quick check of the archives but can't see any relavent threads. I would like to be able to find out what effect a token would have on Bayes scoring. For example - I want to be able to find out whether a header that I am inserting before

Re: Querying Bayes

2006-06-20 Thread John D. Hardin
On Tue, 20 Jun 2006, Matt Hampton wrote: I am adding the AS Number and CIDR by a milter. I want to track which AS Numbers are producing the most spam. How does Bayes help you do that? You need something to pull the AS number out of messages that are marked as spam, which is the province of

Re: SA::DBI plugin and SA 3.1.3

2006-06-20 Thread Michael Monnerie
On Dienstag, 20. Juni 2006 18:09 Michael Parker wrote: You're pointed at the wrong DBI.pm.  I updated the wiki to make it more obvious. Thank you. Now I found my error. Is there a way to download that DBI.pm other can copypaste from the Wiki? I can't see a link. Anyway, I copied it and now it

Re: How to install iXhash

2006-06-20 Thread David Goldsmith
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Dirk Bonengel wrote: Marc, just drop both files (.cf and .pm) into the directory where your local.cf is. One important piece of (missing) info: You must be running SA v 3.1.0 or higher (not 3.0 as stated). If this is a problem I can easily post

Re: How to install iXhash

2006-06-20 Thread David Goldsmith
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Goldsmith wrote: Dirk Bonengel wrote: Marc, just drop both files (.cf and .pm) into the directory where your local.cf is. One important piece of (missing) info: You must be running SA v 3.1.0 or higher (not 3.0 as stated). If this is a

Re: Can SA be used to implement greylisting?

2006-06-20 Thread jdow
From: Jonas Eckerman [EMAIL PROTECTED] Logan Shaw wrote: Basically, greylisting has an achilles heel: legit messages from unknown senders are delayed a long time. This is fine for Only if you use a long delay. In my experience a grey period of 3 minutes is enough to stop most spam and

Re: Can SA be used to implement greylisting?

2006-06-20 Thread jdow
From: Kelson [EMAIL PROTECTED] Jonas Eckerman wrote: Logan Shaw wrote: Basically, greylisting has an achilles heel: legit messages from unknown senders are delayed a long time. This is fine for Only if you use a long delay. Or if the sender has a long retry period. Yeah, you can

Re: ham and spam

2006-06-20 Thread Steven Stern
John D. Hardin wrote: On Tue, 20 Jun 2006, Michael Di Martino wrote: How does one feed bayes ham and spam on an smpt gateway(no local deliverey). All sever does is accetp mail for one 2 domains scrub for virus and spam and then forward it to its nastly littly exchange server. Can you set

RE: How to detect current images-only messages?

2006-06-20 Thread Thomas Raef
Title: Re: How to detect current images-only messages? This thread might be dead, but I just read this and thought it might provide some insight, or thought, or something: Network World's Messaging Newsletter, 06/20/06 How IronPort tackles image-based spam By Michael Osterman Following

Re: Can SA be used to implement greylisting?

2006-06-20 Thread Rick Macdougall
jdow wrote: From: Jonas Eckerman [EMAIL PROTECTED] Logan Shaw wrote: Basically, greylisting has an achilles heel: legit messages from unknown senders are delayed a long time. This is fine for Only if you use a long delay. In my experience a grey period of 3 minutes is enough to stop most

Re: How to detect current images-only messages?

2006-06-20 Thread jdow
I am imagining the amount of processor resource scanning 100,000 messages per day let alone the tens of millions or more that some sites see. I think Google could do it with their machine. It's not needed, either. VERY few get through in practice. All ya need is SpamAssassin and SARE. Then Bob's

Re: Can SA be used to implement greylisting?

2006-06-20 Thread jdow
From: Rick Macdougall [EMAIL PROTECTED] jdow wrote: From: Jonas Eckerman [EMAIL PROTECTED] Logan Shaw wrote: Basically, greylisting has an achilles heel: legit messages from unknown senders are delayed a long time. This is fine for Only if you use a long delay. In my experience a grey

Re: HUMOR: Gap needs to fire Marketing people.

2006-06-20 Thread Alan Premselaar
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 snip... And the first thing in the Ham was about adding their address to your contacts to make sure you get their email. If they were so worried, they would write better marketing emails. --Chris Maybe you should send them an email to tell

Re: HUMOR: Gap needs to fire Marketing people.

2006-06-20 Thread jdow
From: Alan Premselaar [EMAIL PROTECTED] -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 snip... And the first thing in the Ham was about adding their address to your contacts to make sure you get their email. If they were so worried, they would write better marketing emails. --Chris Maybe