Re: Rules for short spams?

2006-07-29 Thread Evan Platt
At 10:40 AM 7/28/2006, you wrote: Enable network tests. URIBL rules were basically invented for this type of spam, and they tend to work quite well. It looks like I'm not, but I'm not able to see how to - I use spamassassin on a os/x box. I call spamc from procmail spamc -s 512000 All

spamassassin on qmail

2006-07-29 Thread Kaushal Shriyan
Hi ALL does spamassassin workon qmail MTA Thanks and Regards Kaushal

Re: spamassassin on qmail

2006-07-29 Thread Kjetil Kjernsmo
On Saturday 29 July 2006 08:48, Kaushal Shriyan wrote: does spamassassin work on qmail MTA Yes. Also, you might want to look into using the qpsmtpd component, as it gives you a lot of power over the SMTP dialogue: http://smtpd.develooper.com/ Best, Kjetil -- Kjetil Kjernsmo Programmer /

Re: sa-learn killed, bayes not available

2006-07-29 Thread Leander Koornneef
It looks like the process is getting killed from an external signal. Maybe this is the Linux OOM killer in action? What is the memory/swap status of this machine? Have you tried running sa-learn with the -D option? Leander On 29-jul-2006, at 0:31, Steven Scotten wrote: The bayesian filter

Re: sa-learn killed, bayes not available

2006-07-29 Thread Leander Koornneef
Or perhaps there is some other form of resource control in place. What's the output of ulimit -a? Leander On 29-jul-2006, at 14:22, Leander Koornneef wrote: It looks like the process is getting killed from an external signal. Maybe this is the Linux OOM killer in action? What is the

Re: spamassassin on qmail

2006-07-29 Thread Andrew
Kjetil Kjernsmo wrote: On Saturday 29 July 2006 08:48, Kaushal Shriyan wrote: does spamassassin work on qmail MTA Yes. Also, you might want to look into using the qpsmtpd component, as it gives you a lot of power over the SMTP dialogue: http://smtpd.develooper.com/ You might also want

Re: Image spams getting thru

2006-07-29 Thread Loren Wilton
From: Rory [mailto:[EMAIL PROTECTED] From: Barbra [mailto:[EMAIL PROTECTED] Something like header FROMFROM=~ /[A-Z]\w+ \[mailto\: \w+\.\w+\@/ There is a way to be more specific, but it costs considerably more. I'd try this first. Loren

Re: Rules for short spams?

2006-07-29 Thread Theo Van Dinter
On Fri, Jul 28, 2006 at 11:03:12PM -0700, Evan Platt wrote: On a similiar note: I added urirhssub URIBL_BLACK multi.uribl.com.A 2 urirhssub URIBL_GREY multi.uribl.com.A 4 Any ideas? Any reason you don't just use sa-update which has the uribl.com folks

Re: Image spams getting thru

2006-07-29 Thread Tim
Does DCC, RAZOR, PYZOR, or any other signature algorithms work with the image spams? It's not apparent from reading the man pages. It seems to me that one could compare the signatures of attachments instead of the whole e-mail and provide additional detection. Thanks, Tim

Re: Image spams getting thru

2006-07-29 Thread John D. Hardin
On Sat, 29 Jul 2006, Loren Wilton wrote: From: Rory [mailto:[EMAIL PROTECTED] From: Barbra [mailto:[EMAIL PROTECTED] Something like header FROMFROM=~ /[A-Z]\w+ \[mailto\: \w+\.\w+\@/ There is a way to be more specific, but it costs considerably more. Namely: header

Re: Image spams getting thru

2006-07-29 Thread John D. Hardin
On Sat, 29 Jul 2006, John D. Hardin wrote: header FROMFROM=~ /[A-Z]\w+ \[mailto\: \w+\.\w+\@/ It won't work. [A-Z] without the case-insensitive flag won't match the samples provided. Whoops! Comment retracted! -- John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardin/

Re: Image spams getting thru

2006-07-29 Thread hamann . w
Does DCC, RAZOR, PYZOR, or any other signature algorithms work with the image spams? It's not apparent from reading the man pages. It seems to me that one could compare the signatures of attachments instead of the whole e-mail and provide additional detection. Thanks, Tim Hi Tim, it

Re: Image spams getting thru

2006-07-29 Thread John Andersen
On Saturday 29 July 2006 10:22, [EMAIL PROTECTED] wrote: Does DCC, RAZOR, PYZOR, or any other signature algorithms work with the image spams? It's not apparent from reading the man pages. It seems to me that one could compare the signatures of attachments instead of the whole e-mail and