Re: clamav virus db update

2006-08-03 Thread hamann . w
I had to reboot my FreeBSD mail server and noticed something unusual. As the boot messages scrolled by on the console, libclamav complained that the virus databases were more than 7 days old and should be updated. I have a cron job for that, but what the heck I ran freshclam as soon as

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread hamann . w
jdow wrote: From: Marc Perkel [EMAIL PROTECTED] Magnus Holmgren wrote: On Wednesday 02 August 2006 14:37, Marc Perkel took the opportunity to say: Why not just eliminate the SMTP protocol for end users and keep SMTP as a server to server protocol and have users send

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread hamann . w
Hi Mark, sorry to put this on the list: your mailserver seems to be rejecting mails from millions of potential senders [EMAIL PROTECTED] SMTP error from remote mailer after end of data: host mx.junkemailfilter.com [69.50.231.5]: 550 REJECTED - honeypot - 194.25.134.19 is

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread John Andersen
On Wednesday 02 August 2006 23:18, [EMAIL PROTECTED] wrote: if a provider's smarthost gets blacklisted, users will have a problem. This has happened before Hundreds of times, to major ISPs. And blacklist sites are not too cooperative in removing bogus blacklistings. Since all mail from a

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread Steve Thomas
Why use 2 protocols when you can use one? Oh I don't know. Maybe because the infrastructure for it is already in place in the form of hundreds of thousands of existing mail servers that already require authentication if the message being transmitted isn't destined for a local user? There

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Matthias Keller
Davin Flatten wrote: Just thought this might help someone out. Thanks to M. Blapp for an excellent SA Plugin. Optical Character Recognition (OCR) can be used to nab those pesky spam messages that are hidden in gif,jpeg, or png images... Here is what I did to get the plugin running. (...)

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread MennovB
jdow wrote: Menno, if the Earthlink progressive delays strategy is adopted then even spam relayed through ISPs becomes time expensive. Personally I don't believe much in delaying/throttling, there are so much zombies that it's just a matter of dispersing the load intelligently. I can see

sa-update error

2006-08-03 Thread Nigel Frankcom
Hi All, I ran sa-update across several Centos 64 32 bit machines here yesterday and today and received the following error... channel: attempt to rm channel pre file failed, attempting to continue anyway at /usr/bin/sa-update line 694 --lint -D shows no errors, just wondering if I should be

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread MennovB
jdow wrote: The direct in that case is probably the fault of the underlying cable provider more than Earthlink. Did the spam come through the Earthlink servers or merely from an address that claimed to be Earthlink? By the way, there is no such address as cable.earthlink.net. The address

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Davin Flatten
Matthias- Yes I had the same issue on my setup which I forgot to mention. I had to copy the Timeout.pm module from the SpamAssassin source tree into the installation path. On my machine it was cp /usr/local/src/Mail-SpamAssassin-3.1.1/lib/Mail/SpamAssassin/Timeout.pm

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Matthias Keller
Davin Flatten wrote: Matthias- Yes I had the same issue on my setup which I forgot to mention. I had to copy the Timeout.pm module from the SpamAssassin source tree into the installation path. On my machine it was Hmm I downloaded the archive for 3.1.0 and there's no Timeout.pm at all - so

Spam Assassin If Plugin Method ...

2006-08-03 Thread Ashok kumar
hii, Does if plugin method of spamassassin supports else part. Eg: I have created a custom ruleset which works with SPF rulset so in my cf file i check for whether Mail::SpamAssasssin::Plugin is enable or not, if it is enable and SPF ruleset is getting hit, i assign x score for my custom

RBL with Spamassassin works, but spamc/spamd don't use it

2006-08-03 Thread decoder
Hello, Recently I installed some rbl rules, using DNS, enabled rbl checks in the config etc. It all works fine with spamassassin message. I see several scores from blacklists, so it is working. The problem is, spamc/spamd don't use these rules, they simply ignore rbl for the same kind of spam.

Re: Am I wasting my time with SpamCop?

2006-08-03 Thread up
On Wed, 2 Aug 2006, Andrzej Adam Filip wrote: Steven W. Orr [EMAIL PROTECTED] writes: On Wednesday, Aug 2nd 2006 at 13:50 -0700, quoth Derek Harding: =On Wed, 2006-08-02 at 16:37 -0400, Tom Ray wrote: = Anyone serious about stopping SPAM should not use SpamCop. They have no = real

Re: Allowing IMAP/POP to Send Email

2006-08-03 Thread Tony Finch
The reason that message submission is done with SMTP is because of the number of SMTP extensions that the MUA will want to use, in particular DSNs, deliver-by, deliver-after, message tracking, and whatever else may be invented in the future. If you want to make message submission a part of IMAP

RE: Spam Assassin If Plugin Method ...

2006-08-03 Thread Michael Scheidell
-Original Message- From: Ashok kumar [mailto:[EMAIL PROTECTED] Sent: Thursday, August 03, 2006 8:39 AM To: users@spamassassin.apache.org Subject: Spam Assassin If Plugin Method ... hii, Does if plugin method of spamassassin supports else part. Eg: I have created a custom

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Mark Martinec
On Thu, Aug 03, 2006 at 12:21:07AM +0100, Mike Bostock wrote: I use a default build of sa (i.e. I change absolutely no config variables) and the default definitions dir is /usr/share/spamassassin running sa-update puts new definitions in *its* default of /var/lib/spamassasin/version

Re: Required Score parameter

2006-08-03 Thread Magnus Holmgren
On Thursday 03 August 2006 15:23, Patrick Sherrill took the opportunity to say: Sorry to bother the list, but I can't seem to find where spamassassin (v3.1.0) is getting the required_score from. The headers show a required score of 5.5 and the required_score (required_hits) in local.cf is

Re: Allowing IMAP/POP to Send Email

2006-08-03 Thread Marc Perkel
Tony Finch wrote: The reason that message submission is done with SMTP is because of the number of SMTP extensions that the MUA will want to use, in particular DSNs, deliver-by, deliver-after, message tracking, and whatever else may be invented in the future. If you want to make message

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Loren Wilton
I downloaded the archive for 3.1.0 and there's no Timeout.pm at all - so i guess this has been introduced in 3.1.1 or so..? Does anyone know if it's safe to let it away? JM would be the one with the definitive answer. But my recollection is that it is a new/clean implementation of a manager

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 02:14:38PM +0200, Matthias Keller wrote: I downloaded the archive for 3.1.0 and there's no Timeout.pm at all - so i guess this has been introduced in 3.1.1 or so..? Correct, it was added into 3.1.1 (bug 4696). Does anyone know if it's safe to let it away? I haven't

Re: Required Score parameter

2006-08-03 Thread Loren Wilton
First: are you sure the strange required score is your SA and not some upstream SA that left headers in the message? Awful hard to find a config line when it is on someon else's server. Loren

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 07:19:51AM -0400, Davin Flatten wrote: You could try commenting out the line that loads this module. On you machine it might be already loaded, but on my installation it does not get loaded by default. If you have 3.1.1 installed it should be there already. Notice

ANNOUNCE: SpamAssassin plugin for CommuniGate Pro 4.x, 5.x

2006-08-03 Thread Jonn R Taylor
SpamAssassin plugin for CommuniGate Pro 4.x, 5.x Installation and usage instructions can be found at http://www.stalker.com/CGPSpamCatcher/#Integrate Copyright (C) 2003-2006 Andy Igoshin [EMAIL PROTECTED] Version 1.1.3

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Obantec Support
- Original Message - From: Mark Martinec [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Thursday, August 03, 2006 2:28 PM Subject: Re: sa-update (sa v 3.1.4) On Thu, Aug 03, 2006 at 12:21:07AM +0100, Mike Bostock wrote: I use a default build of sa (i.e. I change

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 03:28:05PM +0200, Mark Martinec wrote: Well, this is not entirely true. It is not the SpamAssassin modules that sets a default value for LOCAL_STATE_DIR = '/var/lib' in the SA object, but it is the application program that does it: the spamassassin, sa-update and spamd.

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 02:47:28PM +0100, Obantec Support wrote: i am using sa3.1.3 and first run of sa-update --updatedr /var/lib/spamassassin got me drwxr-xr-x 3 root root 4096 Jul 22 14:18 /var/lib/spamassassin/3.001003 which contains drwxr-xr-x 2 root root 4096 Jul 22 14:18

Re: sa-update error

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 10:19:44AM +0100, Nigel Frankcom wrote: channel: attempt to rm channel pre file failed, attempting to continue anyway at /usr/bin/sa-update line 694 --lint -D shows no errors, just wondering if I should be concerned? Hrm. Well, it's one of those features as opposed to

Re: Am I wasting my time with SpamCop?

2006-08-03 Thread David Baron
On Wednesday 02 August 2006 23:09, Zinski, Steve wrote: I use SpamCop to report my spam. I use the SpamHaus RBL as a first line of defense then I use SpamAssassin to catch the rest of the spam coming to my server. Am I wasting my time? Should I just delete low-scoring spam and let the

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Will Nordmeyer
On Thu, Aug 03, 2006 at 10:01:26 -0400 Theo Van Dinter [EMAIL PROTECTED] wrote: Generally speaking, unless the defaults don't work for you for some reason, stick with the defaults. So, what I'm concluding is... If I run sa-update without any other parameters, it'll create an update dir

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Obantec Support
- Original Message - From: Theo Van Dinter [EMAIL PROTECTED] To: users@spamassassin.apache.org Sent: Thursday, August 03, 2006 3:01 PM Subject: Re: sa-update (sa v 3.1.4) Hi Theo your right i just ran sa-update and it updated the /var/lib/spamassassin/3.001003 folder files. Mark

Re: Allowing IMAP/POP to Send Email

2006-08-03 Thread Chris Lear
* Marc Perkel wrote (03/08/06 14:39): Tony Finch wrote: The reason that message submission is done with SMTP is because of the number of SMTP extensions that the MUA will want to use, in particular DSNs, deliver-by, deliver-after, message tracking, and whatever else may be invented in the

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Mike Bostock
In your message regarding Re: sa-update (sa v 3.1.4) dated Thu, 3 Aug 2006 15:16:42 +0100, Obantec Support said that ... OS- - Original Message - OS- From: Theo Van Dinter [EMAIL PROTECTED] OS- To: users@spamassassin.apache.org OS- Sent: Thursday, August 03, 2006 3:01 PM OS- Subject: Re:

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Stuart Johnston
Davin Flatten wrote: Just thought this might help someone out. Thanks to M. Blapp for an excellent SA Plugin. Optical Character Recognition (OCR) can be used to nab those pesky spam messages that are hidden in gif,jpeg, or png images... This OCR stuff looks promising. Any comments on

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Matthias Keller
Theo Van Dinter wrote: On Thu, Aug 03, 2006 at 02:14:38PM +0200, Matthias Keller wrote: I downloaded the archive for 3.1.0 and there's no Timeout.pm at all - so i guess this has been introduced in 3.1.1 or so..? Correct, it was added into 3.1.1 (bug 4696). Does anyone know if

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Mark Martinec
Theo, to change Mail::SpamAssassin to provide a suitable default for LOCAL_STATE_DIR. Please consider this a feature request. http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4952 :) Appreciated! # sa-update --updatedir /usr/local/share/spamassassin Warning: This will break

Re: Am I wasting my time with SpamCop?

2006-08-03 Thread Andrzej Adam Filip
David Baron [EMAIL PROTECTED] writes: On Wednesday 02 August 2006 23:09, Zinski, Steve wrote: I use SpamCop to report my spam. I use the SpamHaus RBL as a first line of defense then I use SpamAssassin to catch the rest of the spam coming to my server. Am I wasting my time? Should I just

Re: Am I wasting my time with SpamCop?

2006-08-03 Thread Andrzej Adam Filip
[EMAIL PROTECTED] writes: On Wed, 2 Aug 2006, Andrzej Adam Filip wrote: Steven W. Orr [EMAIL PROTECTED] writes: On Wednesday, Aug 2nd 2006 at 13:50 -0700, quoth Derek Harding: =On Wed, 2006-08-02 at 16:37 -0400, Tom Ray wrote: = Anyone serious about stopping SPAM should not use

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 10:15:47AM -0400, Will Nordmeyer wrote: If I run sa-update without any other parameters, it'll create an update dir put the updates in it and spamassassin will use the generated updates dir by default (do I need to restart SA, or does sa-update handle that?). Yes.

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 03:33:59PM +0100, Mike Bostock wrote: OK Now I am really confused. Do I assume that SpamAssassin looks in /var/lib/spamassassin/version/ for rules definitions and not /usr/share/spamassassin? Right -- if the update directory exists, SA will use that instead of the

Re: sa-update error

2006-08-03 Thread Nigel Frankcom
On Thu, 3 Aug 2006 10:06:31 -0400, Theo Van Dinter [EMAIL PROTECTED] wrote: On Thu, Aug 03, 2006 at 10:19:44AM +0100, Nigel Frankcom wrote: channel: attempt to rm channel pre file failed, attempting to continue anyway at /usr/bin/sa-update line 694 --lint -D shows no errors, just wondering if

Re: Allowing IMAP/POP to Send Email

2006-08-03 Thread Logan Shaw
On Thu, 3 Aug 2006, Marc Perkel wrote: Not really - what I'm proposing is that the IMAP connection just pipe the message into an SMTP server. The IMAP is acting only and an authenticated connection back to SMTP. I'm not suggesting replacing SMTP. What I'm suggesting is that POP/IMAP can be

Re: sa-update error

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 04:08:16PM +0100, Nigel Frankcom wrote: channel: attempt to rm channel pre file failed, attempting to continue anyway at /usr/bin/sa-update line 694 --lint -D shows no errors, just wondering if I should be concerned? I don't use updatedir - just straight sa-update.

Looking for advice on rule creation regular expressions

2006-08-03 Thread Coffey, Neal
I'm trying to create a rule to catch some of the perscription drug references that come into our system. We're not in pharmaceuticals, so I'm not too concerned about false positives :) Some examples of what I'm looking for (using an innocent drug so I don't trip someone else's filters):

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread Kenneth Porter
--On Wednesday, August 02, 2006 12:02 PM -0700 MennovB [EMAIL PROTECTED] wrote: Anyway, IMHO with SYN throttle you would only be rate-limiting the zombies, I would rather they stopped sending spam completely.. What I don't understand is how making them use the ISP server stops them from

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread Kenneth Porter
--On Wednesday, August 02, 2006 2:03 PM -0500 Logan Shaw [EMAIL PROTECTED] wrote: What might really be nice is some sort of language that could be used to write up a document to configure a mail client for a given ISP and user. It could configure all necessary settings and would work with any

Re: Looking for advice on rule creation regular expressions

2006-08-03 Thread Logan Shaw
On Thu, 3 Aug 2006, Coffey, Neal wrote: I'm trying to create a rule to catch some of the perscription drug references that come into our system. We're not in pharmaceuticals, so I'm not too concerned about false positives :) Some examples of what I'm looking for (using an innocent drug so I

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread MennovB
Kenneth Porter wrote: What I don't understand is how making them use the ISP server stops them from spamming any more than rate-limiting direct port 25 connections. Why do the packets need to be reassembled in an MTA and stored and forwarded? What does that step buy you? I don't want

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread Kenneth Porter
--On Wednesday, August 02, 2006 3:25 PM -0700 jdow [EMAIL PROTECTED] wrote: I keep several gigabytes of email data around. With POP3 it is easy to store locally. With IMAP it's a pain in the censored. My boss logs in from several computers, including a laptop he takes everywhere. I got

RE: sa-update (sa v 3.1.4)

2006-08-03 Thread Bret Miller
On Thu, Aug 03, 2006 at 03:28:05PM +0200, Mark Martinec wrote: Well, this is not entirely true. It is not the SpamAssassin modules that sets a default value for LOCAL_STATE_DIR = '/var/lib' in the SA object, but it is the application program that does it: the spamassassin, sa-update and

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread Kenneth Porter
--On Wednesday, August 02, 2006 2:47 PM -0700 jdow [EMAIL PROTECTED] wrote: That slightly more than a year I spent as perhaps one of the VERY first online stalking victims ever (1985-1987) was a hell I'd rather not repeat. Is this written up somewhere? I'd be interested in understanding the

Re: Looking for advice on rule creation regular expressions

2006-08-03 Thread Chris Thielen
Coffey, Neal wrote: I'm trying to create a rule to catch some of the perscription drug references that come into our system. We're not in pharmaceuticals, so I'm not too concerned about false positives :) Some examples of what I'm looking for (using an innocent drug so I don't trip someone

Re: Looking for advice on rule creation regular expressions

2006-08-03 Thread Dhawal Doshy
Coffey, Neal wrote: Logan Shaw wrote: For what it's worth, I thought all spams of that form were prescription drug spams, but recently I got one like this as well: [snip: rolex, tiffany, etc...] Come to think of it, I've seen one or two of these ones, too, and totally forgot. Guess I'll be

Re: sa-update (sa v 3.1.4)

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 08:56:42AM -0700, Bret Miller wrote: The Mail::SpamAssassin module doc in 3.1.4 doesn't list local_state_dir as an option for Mail::SpamAssassin-new. Should it? Is that how an app is supposed to pass this information? Gah! /me continues cursing JM's addition of

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread Kenneth Porter
--On Thursday, August 03, 2006 6:43 AM +0100 Graham Murray [EMAIL PROTECTED] wrote: ADSL is both always on and a 'fixed' (ie your phone line is physically connected to a DSLAM port) so the ISPs must have sufficient IP addresses for all their ADSL customers. Not necessarily. A lot of

sa-update problems

2006-08-03 Thread Bjorn Jensen
I just ran sa-update for the first time today, and now I'm getting this when starting up spamd: Aug 3 18:05:30 mail3 spamd[590]: config: cannot opendir /var/lib/spamassassin/3.001003: Permission denied Aug 3 18:05:30 mail3 spamd[590]: config: cannot opendir /var/lib/spamassassin/3.001003:

postres bayes db and high load

2006-08-03 Thread Dan
Over the past few weeks, my company's mail server has been experiencing high loads that result in SA skipping emails. I use a postgres database to manage bayes, awl and userprefs. I am pretty sure that it is the bayes db that is causing the high load and resultant skipping, but I have no idea how

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread Kenneth Porter
--On Thursday, August 03, 2006 8:47 AM -0700 MennovB [EMAIL PROTECTED] wrote: I don't want to make the zombies use the ISP's SMTP server, I want to stop them from spamming. Right now they can only connect directly to the Internet so if the ISP blocks direct SMTP outgoing the zombies stop

More honesty in spam

2006-08-03 Thread Kelson
I received a stock spam this morning. The randomly generated sender name was, and I kid you not... Bagle variant Somehow, that wouldn't surprise me at all! -- Kelson Vibber SpeedGate Communications www.speed.net

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Stephan Bosch
Davin Flatten schreef: Just thought this might help someone out. Thanks to M. Blapp for an excellent SA Plugin. Optical Character Recognition (OCR) can be used to nab those pesky spam messages that are hidden in gif,jpeg, or png images... I ran a search on the patch and I didn't see any

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread MennovB
Kenneth Porter wrote: Will ISP's do anything? Are they doing anything now for outbound spam? They will have to otherwise they will end up in a blacklist ;-) Most of the ISP's here are already scanning on inbound spam, not too hard to do it for outgoing then. The ISP I use the most reacts

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Davin Flatten
Stuart- Not significant that I have noticed. We are running a dedicated spamassassin gateway however. It's only job is to process spam. It is running dual Xeon 2.80GHz/2MB cache with 4GB of RAM over RAID5 with some scratch partitions loaded in RAM. We also run clamav, mimedefang, bayes out

Re: Allowing IMAP/POP to Send Email

2006-08-03 Thread Marc Perkel
Chris Lear wrote: What if I set up an SMTP server at home behind my ADSL router, collect my vanity-domain mail there, and access it via IMAP or POP3? It seems I only have one option, which is to send my mail via IMAP to my home server. Which then sends via SMTP to... the Internet (or via

Re: Allowing IMAP/POP to Send Email

2006-08-03 Thread Marc Perkel
Logan Shaw wrote: On Thu, 3 Aug 2006, Marc Perkel wrote: Not really - what I'm proposing is that the IMAP connection just pipe the message into an SMTP server. The IMAP is acting only and an authenticated connection back to SMTP. I'm not suggesting replacing SMTP. What I'm suggesting is

RE: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Jeff Moss
We're getting some image-spam stuck in the queue because they crash SA with this plugin turned on. We are using a custom setup built from amavisd-lite. I'm still trying to figure out what's causing it. Jeff Moss -Original Message- From: Stuart Johnston [mailto:[EMAIL PROTECTED] Sent:

Re: Allowing IMAP/POP to Send Email

2006-08-03 Thread JamesDR
Marc Perkel wrote: Spam is never eliminated - just reduced. Most spam comes from virus infected zombies that talk SMTP. If end users were by default set up so that they can only send email by IMAP then you can block off SMTP ports for end users isolating them from the SMTP world. That would

Re: Allowing IMAP/POP to Send Email

2006-08-03 Thread Magnus Holmgren
On Thursday 03 August 2006 19:25, Marc Perkel took the opportunity to say: Chris Lear wrote: What if I set up an SMTP server at home behind my ADSL router, collect my vanity-domain mail there, and access it via IMAP or POP3? It seems I only have one option, which is to send my mail via IMAP

Re: Geographic Zone to Headers?

2006-08-03 Thread David Cary Hart
On Wed, 2 Aug 2006 21:27:48 +0200 (CEST), Benny Pedersen [EMAIL PROTECTED] opined: On Wed, August 2, 2006 17:51, David Cary Hart wrote: EXPERIMENTALLY, I have added world.tqmcube.com as a zone which is obviously not included in the composite. This returns a text record of the country of

Allowing IMAP/POP to Send Email United Nations etc....

2006-08-03 Thread Nigel Frankcom
I'll put on my flameproof underwear for this There's been a huge amount of crossfire on these/this subject, but I don't see how it has anything to do with SA; or am I missing the point? Different protocols, yet another level of policing, but nothing about the fact that SA does a damned fine

Re: Allowing IMAP/POP to Send Email

2006-08-03 Thread Steve Thomas
Spam is never eliminated - just reduced. Most spam comes from virus infected zombies that talk SMTP. If end users were by default set up so that they can only send email by IMAP then you can block off SMTP ports for end users isolating them from the SMTP world. That would take a huge bite out

Re: Allowing IMAP/POP to Send Email United Nations etc....

2006-08-03 Thread Dhawal Doshy
Nigel Frankcom wrote: I'll put on my flameproof underwear for this There's been a huge amount of crossfire on these/this subject, but I don't see how it has anything to do with SA; or am I missing the point? Different protocols, yet another level of policing, but nothing about the fact

Re: What changes would you make to stop spam? - United Nations Paper

2006-08-03 Thread John D. Hardin
On Wed, 2 Aug 2006, John Andersen wrote: On Wednesday 02 August 2006 20:55, Sanford Whiteman wrote: Because ?of ?that experience, I find myself agreeing ?with ?the ?overall reaction of, in essence: Kill me now, if his ?proposal ?is ?going ?to be disseminated by any entity who doesn't

RE: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread davea
I will be testing this later this evening using the instructions provided. I will keep you posted. Dave Augustus We're getting some image-spam stuck in the queue because they crash SA with this plugin turned on. We are using a custom setup built from amavisd-lite. I'm still trying to figure

RE: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Jeff Moss
Still trying to debug SA crashing with the OCR plugin. I extracted the base64 encoding from one of the offending messages. Then I converted it to image001.gif with uudeview. But when I try to convert it to a pnm file from the command line I get errors. [filter]# giftopnm image001.gif

Re: Allowing IMAP/POP Thread to Continue?

2006-08-03 Thread David Cary Hart
What a COLOSSAL waste of bandwidth, cycles and keyboard erosion. -- Our DNSRBL - Eliminate Spam at the Source: http://www.TQMcube.com Don't Subsidize Criminals: http://boulderpledge.org

Re: postres bayes db and high load

2006-08-03 Thread John D. Hardin
On Thu, 3 Aug 2006, Dan wrote: The mail servers stats: ~3500 email/day 2GHz Intel Celeron 768M ram Throw some more memory at it, if the motherboard supports it. Aug 2 14:48:19 mail spamd[3675]: spamd: identified spam ( 25.9/5.0) for bug:0 in 5525.1 seconds, 2163 bytes. OUCH! 5500

PureMessage-like spam gauge?

2006-08-03 Thread Chris St. Pierre
I'm switching to SpamAssassin from PureMessage. One feature I'm used to is the GAUGE, which is used in rewriting headers much the same way as _STARS(*)_. PureMessage differs from SpamAssassin in that it uses a percentage rather than a score for determining if something is spam -- things are 0%

Re: Looking for advice on rule creation regular expressions

2006-08-03 Thread Rob McEwen (PowerView Systems)
I've come up with a rule that'll match every one of those instances, but also has the unfortunate consequence of matching plain old ADVIL: Create the rule you mentioned, then create another rule for plan old advil Something like: /badvil/b But make this additional rule **subtract** points...

Re: Looking for advice on rule creation regular expressions

2006-08-03 Thread Kelson
Rob McEwen (PowerView Systems) wrote: Create the rule you mentioned, then create another rule for plan old advil ... But make this additional rule **subtract** points... either the same or a little less than the amount of points added by the obfuscation-catching rule, depending on whether you

Re: PureMessage-like spam gauge?

2006-08-03 Thread Chris St. Pierre
Once I realized how easy it was to add new header rewrite functions, I just hacked my own in. If anyone's interested, the diff follows. --- Mail/SpamAssassin/PerMsgStatus.pm.bak 2006-08-03 13:52:55.0 -0500 +++ Mail/SpamAssassin/PerMsgStatus.pm 2006-08-03 14:24:02.0

Re: Allowing IMAP/POP to Send Email United Nations etc....

2006-08-03 Thread Michael Parker
Nigel Frankcom wrote: I'll put on my flameproof underwear for this There's been a huge amount of crossfire on these/this subject, but I don't see how it has anything to do with SA; or am I missing the point? Different protocols, yet another level of policing, but nothing about the

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Davin Flatten
Jeff- Make sure you apply the patches to both the gocr source and Image::ExifTool. The gocr patch deals specifically with the segfault issues. From the docs: # - Perl module Image::ExifTool and a patch for GIF pics: # http://antispam.imp.ch/patches/patch-GIF-Colortable # # - Gocr from

ImageInfo plugin for SA

2006-08-03 Thread Dallas L. Engelken
Greetings, For those of you that dont want the overhead or hassel of installing all extras to get OCR running, I give you a simpler (maybe less effective) option.. It basically determines pixel coverage similar to what eval:html_image_ratio() does, but html_image_ratio() actually reads height=

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Davin Flatten
Jeff- You might also want to see if you copy the message out of a client application like Thunderbird and then copy the image to your server and running giftopnm on it. It might be that uudeview is the problem and not giftopnm. The errors sounds like a corrupt gif image. This should not

Re: RBL with Spamassassin works, but spamc/spamd don't use it

2006-08-03 Thread John Andersen
On Thursday 03 August 2006 04:47, decoder wrote: Hello, Recently I installed some rbl rules, using DNS, enabled rbl checks in the config etc. It all works fine with spamassassin message. I see several scores from blacklists, so it is working. The problem is, spamc/spamd don't use these

RE: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-03 Thread Jeff Moss
Patching GIF.pm seems to have fixed the problem. I patched gocr because that was in the instructions that got posted, but patching GIF.pm wasn't so I missed it. Jeff Moss -Original Message- From: Davin Flatten [mailto:[EMAIL PROTECTED] Sent: Thursday, August 03, 2006 3:54 PM To: Jeff

Re: clamav virus db update

2006-08-03 Thread John Thompson
On 2006-08-03, Benny Pedersen [EMAIL PROTECTED] wrote: On Wed, August 2, 2006 22:28, John Thompson wrote: Any explanation? make sure you have same database path in both freshclam.conf and clamd.conf Bingo. Thanks! -- -John ([EMAIL PROTECTED])

spamass milter + clamav milter + milter greylist != working

2006-08-03 Thread Bazooka Joe
Has anyone gotten the 3 fore mentioned milters working together? SA and clam work but greylist does nothing. no errors, no added headers just nothing. if i take out clamav from the mc then greylisting works and SA works but not all three together. parts of sendmail.mc in question. (in order)

Re: postres bayes db and high load

2006-08-03 Thread Davin Flatten
Dan- Make sure you are vacuuming your database. I have seen similar postgresql slow downs with a large database that has not been vacuumed. For a permanent solution I would suggest migrating to mysql instead. I love postgresql but it has a lot of overhead designed to make it a

Re: spamass milter + clamav milter + milter greylist != working

2006-08-03 Thread Bazooka Joe
Thanks, I think I got it - i noticed you didn't have the clamav line define(`confINPUT_MAIL_FILTERS', `clmilter') so i took it out and clamav-milter seems to be working fine w/ out it. re: headers - milter-greylist writes a new header line Sender IP whitelisted, not delayed by

RE: postres bayes db and high load

2006-08-03 Thread Michael Scheidell
Title: Message -Original Message-From: Dan [mailto:[EMAIL PROTECTED] Sent: Thursday, August 03, 2006 12:24 PMTo: users@spamassassin.apache.orgSubject: postres bayes db and high load Over the past few weeks, my company's mail server has been experiencing high loads

Re: ImageInfo plugin for SA

2006-08-03 Thread Jason Haar
Just a comment to Dallas that his (? making a guess there) ImageInfo module seems to be doing a good job for me. I had a small sample of image-spam that currently gets past SA. Almost all of it scored +4/+5 points with his module activated. I also had a few recent inline-images real emails -

Re: postres bayes db and high load

2006-08-03 Thread Dan
Thanks for the advice!I guess the consensus is to buy more RAM and/or switch to mysql.-Dan

Re: ImageInfo plugin for SA

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 03:14:06PM -0500, Dallas L. Engelken wrote: All those scores in the cf are just WAGs, since none have been masschecked. Theo, could you sandbox this? I made some major edits (1/3 smaller and also faster :) ), but the core algorithm is the same. Overall, very good from

Re: PureMessage-like spam gauge?

2006-08-03 Thread Theo Van Dinter
On Thu, Aug 03, 2006 at 02:34:17PM -0500, Chris St. Pierre wrote: --- Mail/SpamAssassin/PerMsgStatus.pm.bak 2006-08-03 13:52:55.0 -0500 +++ Mail/SpamAssassin/PerMsgStatus.pm 2006-08-03 14:24:02.0 -0500 [...] + GAUGE = sub { + my $arg =

RE: ImageInfo plugin for SA

2006-08-03 Thread Dallas L. Engelken
-Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Thursday, August 03, 2006 6:52 PM To: users@spamassassin.apache.org Subject: Re: ImageInfo plugin for SA On Thu, Aug 03, 2006 at 03:14:06PM -0500, Dallas L. Engelken wrote: All those scores in the cf are

Re: postres bayes db and high load

2006-08-03 Thread Mark Martinec
Dan, Over the past few weeks, my company's mail server has been experiencing high loads that result in SA skipping emails. I use a postgres database to manage bayes, awl and userprefs. I am pretty sure that it is the bayes db that is causing the high load ... Are you using a

Re: ImageInfo plugin for SA

2006-08-03 Thread Michele Neylon:: Blacknight.ie
Very nice. Over 100 hits on one box in less than half an hour! -- Mr Michele Neylon Blacknight Solutions Quality Business Hosting Colocation http://www.blacknight.ie/ Tel. 1850 927 280 Intl. +353 (0) 59 9183072 Direct Dial: +353 (0)59 9183090 Fax. +353 (0) 59 9164239

Re: ImageInfo plugin for SA

2006-08-03 Thread Raymond Dijkxhoorn
Theo, On Thu, Aug 03, 2006 at 03:14:06PM -0500, Dallas L. Engelken wrote: All those scores in the cf are just WAGs, since none have been masschecked. Theo, could you sandbox this? I made some major edits (1/3 smaller and also faster :) ), but the core algorithm is the same. Overall, very

Re: ImageInfo plugin for SA

2006-08-03 Thread Theo Van Dinter
On Fri, Aug 04, 2006 at 02:38:48AM +0200, Raymond Dijkxhoorn wrote: Could you post the altered one also somewhere ? Yeah, the files are in my sandbox: http://svn.apache.org/repos/asf/spamassassin/rules/trunk/sandbox/felicity/ -- Randomly Generated Tagline: Running Linux 1.2 Because a 486 is a

  1   2   >