Re: Securitysage rhsbl down

2007-02-13 Thread Gene Heskett
On Wednesday 14 February 2007, Ramprasad wrote: >my MTA is configured to block domains listed in securitysage but I cant >see any hits lately >Is blackhole.securitysage.com down ?? > >Thanks >Ram According to my procmail.log, its down. -- Cheers, Gene "There are four boxes to be used in defense

Securitysage rhsbl down

2007-02-13 Thread Ramprasad
my MTA is configured to block domains listed in securitysage but I cant see any hits lately Is blackhole.securitysage.com down ?? Thanks Ram

Re: Vbounce ruleset whitelist_bounce_relays

2007-02-13 Thread Matt Kettler
Steve [Spamassassin] wrote: > Justin Mason wrote: >> could you post an example of your config and the message you're testing >> with, in full? > OK in /etc/mail/spamassassin/local.cf > Received: by mail.mydomain.com (Postfix) id EFBE62E48F; Wed, 7 Feb > 2007 12:57:43 + (GMT) Nice.. A Re

RE: FuzzyOcr - no image files found in samples?

2007-02-13 Thread Philip Seccombe
What if you point directly to the .eml eg Spamassassin -tD < /this/is/the/directory/samples/ocr-animated.eml Just to be absolutely sure it is findingthe correct place?? Check permissions on the .eml, view it and see if it seems to have an image inside Just the usual I can suggest sorry Kind Reg

Remember Me? -> RememberMe.pm plugin

2007-02-13 Thread Raul Dias
Hi, I have been looking (as I described earlier) for a way to use variables in the rules for a few days without lucky. I tried to hack SA, mix with plugins and got to the conclusion that the only way to do this was to reevaluates the rules (REs) on every new message, which is a huge draw back. S

Re: MTA Search: Non contiguous ranges?

2007-02-13 Thread John Rudd
Dan wrote: On Feb 13, 2007, at 13:41, Magnus Holmgren wrote: On Tuesday 13 February 2007 19:57, Dan wrote: I would like a Mail Transfer Agent recommendation. What's the best MTA, running on any platform, that will accept two or more thresholds (non-contiguous weight values) for treating mess

Re: MTA Search: Non contiguous ranges?

2007-02-13 Thread Dan
On Feb 13, 2007, at 13:41, Magnus Holmgren wrote: On Tuesday 13 February 2007 19:57, Dan wrote: I would like a Mail Transfer Agent recommendation. What's the best MTA, running on any platform, that will accept two or more thresholds (non-contiguous weight values) for treating messages as spam

RE: FuzzyOcr - no image files found in samples?

2007-02-13 Thread Steve Pfister
Sorry... forgot to mention that it's seeing incoming message and is listing messageids, senders, and recipients for those. I don't think it's successfully run FuzzyOcr on any of them yet, though. -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 13, 20

RE: FuzzyOcr - no image files found in samples?

2007-02-13 Thread Steve Pfister
I've just tried it with an actual spam message that I've extracted from my own mailbox. The message has a normal looking message id, but it still says no messageid/sender/recipient. --Steve -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 13, 2007 5:

RE: FuzzyOcr - no image files found in samples?

2007-02-13 Thread Steve Pfister
Yes, it has the message Id that you gave. Line wraps look OK. Maybe I'll try and get a hold of my own test message. I get plenty of image spam. --Steve -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 13, 2007 5:38 PM To: Steve Pfister Cc: users@spam

RE: ANTIDRUG rulesets

2007-02-13 Thread Alexis Manning
[EMAIL PROTECTED] says... > I believe there a way to use sa-update to get the SARE rules from > saupdates.openprotect.com. There's a good guide here: http://daryl.dostech.ca/sa-update/sare/sare- sa-update-howto.txt HTH -- A.

Re: FuzzyOcr - no image files found in samples?

2007-02-13 Thread Matt Kettler
Interesting. What's odd is that FuzzyOCR calls it has having no messageid. Does any other part of the debug output indicate SA understands the message id/sender/recipients? Does the file itself contain a message-id header? ie: Message-ID: <[EMAIL PROTECTED]> Do the line-wraps look right, or ar

RE: FuzzyOcr - no image files found in samples?

2007-02-13 Thread Steve Pfister
Sorry... I guess I wasn't clear. I'm running: Spamassassin -tD < ocr-animated.eml In the samples directory of FuzzyOcr-3.5.1. It's saying there's no image files found. -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Tuesday, February 13, 2007 4:41 PM To: Steve Pfis

Re: MTA Search: Non contiguous ranges?

2007-02-13 Thread Magnus Holmgren
On Tuesday 13 February 2007 19:57, Dan wrote: > I would like a Mail Transfer Agent recommendation. What's the best > MTA, running on any platform, that will accept two or more thresholds > (non-contiguous weight values) for treating messages as spam? > Something like: > > 0-1 is ham > >

Re: FuzzyOcr - no image files found in samples?

2007-02-13 Thread Matt Kettler
Steve Pfister wrote: > > I’m trying to install FuzzyOcr 3.51 (with patches for < 10.34 netpbm) > on RedHat Linux 9 with Spamassassin 3.1.7. I’m trying to test it out > with the samples images, but I keep getting: > > > > [25404] dbg: FuzzyOcr: Starting FuzzyOcr... > > [25404] info: FuzzyOcr: Proc

Re: Whitelist question

2007-02-13 Thread Matt Kettler
Joe Zitnik wrote: > How would I whitelist mail from a listserv? Since the mail is shown > to be from the user who sent it and not the listserv, I can't do a > whitelist_from. Would it be easier to make a rule to look for the > listserv domain in the header? How would I make a rule to look for >

RE: ANTIDRUG rulesets

2007-02-13 Thread Jon Armitage
> -Original Message- > From: Anthony Peacock [mailto:[EMAIL PROTECTED] > Sent: 13 February 2007 15:56 > To: SpamAssassin Users > sa-update updates the stock rules that are distributed with > SA. Rules Du Jour is used to update add-on rulesets like the > SARE rules. > > If you are not r

Re: MTA Search: Non contiguous ranges?

2007-02-13 Thread Kelson
Dan wrote: I would like a Mail Transfer Agent recommendation. What's the best MTA, running on any platform, that will accept two or more thresholds (non-contiguous weight values) for treating messages as spam? Something like: ... Where 4 paths are possible, instead of the normal 2 (below 10

Re: MTA Search: Non contiguous ranges?

2007-02-13 Thread Theo Van Dinter
On Tue, Feb 13, 2007 at 10:57:44AM -0800, Dan wrote: > I would like a Mail Transfer Agent recommendation. What's the best > MTA, running on any platform, that will accept two or more thresholds > (non-contiguous weight values) for treating messages as spam? MTAs don't care about ham or spa

MTA Search: Non contiguous ranges?

2007-02-13 Thread Dan
Hello, I would like a Mail Transfer Agent recommendation. What's the best MTA, running on any platform, that will accept two or more thresholds (non-contiguous weight values) for treating messages as spam? Something like: 0-1 is ham 2-9 is spam 10 is ham

FuzzyOcr - no image files found in samples?

2007-02-13 Thread Steve Pfister
I'm trying to install FuzzyOcr 3.51 (with patches for < 10.34 netpbm) on RedHat Linux 9 with Spamassassin 3.1.7. I'm trying to test it out with the samples images, but I keep getting: [25404] dbg: FuzzyOcr: Starting FuzzyOcr... [25404] info: FuzzyOcr: Processing Message with ID "" ( -> ) [254

Re: Cannot find the /var/lib/spamassassin catalgue

2007-02-13 Thread Dag Ringdal
Tirsdag 13 februar 2007 19:15, skrev Theo Van Dinter: > On Tue, Feb 13, 2007 at 06:37:23PM +0100, Dag Ringdal wrote: > > I care about the rules as well. Where can I find whether the lastest > > rules is updated and in use? > > > > [25234] dbg: dns: query failed: 7.1.3.updates.spamassassin.org => NO

Re: Cannot find the /var/lib/spamassassin catalgue

2007-02-13 Thread Theo Van Dinter
On Tue, Feb 13, 2007 at 06:37:23PM +0100, Dag Ringdal wrote: > I care about the rules as well. Where can I find whether the lastest rules is > updated and in use? > > [25234] dbg: dns: query failed: 7.1.3.updates.spamassassin.org => NOERROR In your case, you got a DNS error... I'd get that prob

Re: Cannot find the /var/lib/spamassassin catalgue

2007-02-13 Thread Dag Ringdal
Tirsdag 13 februar 2007 16:30, skrev Theo Van Dinter: > On Tue, Feb 13, 2007 at 03:48:02PM +0100, Dag Ringdal wrote: > > 3.1.7 and are doing sa-update from time to time, but I'm not assured that > > the latest version is installed. When I type sa-update -V, I get: > > sa-update version svn454083 >

Re: sa-stats and Spamtagging

2007-02-13 Thread LuKreme
On 13-Feb-2007, at 09:08, Alexis Manning wrote: [EMAIL PROTECTED] says... Am I worrying over nothing? I do seem to get spam only on those accounts for which greylisting is inactive, but on those I get a LOT that SA fails to tag, including just about every one of those image spams with the 2K or

Re: sa-stats and Spamtagging

2007-02-13 Thread LuKreme
On 13-Feb-2007, at 08:39, Chris St. Pierre wrote: This is where a user feedback look -- such as spam/ham reporting links in your webmail client, or the equivalent training for desktop client users -- can be really useful. Ideally I'd like to have per-user bayes, but some of my users are manag

Re: sa-stats and Spamtagging

2007-02-13 Thread Alexis Manning
[EMAIL PROTECTED] says... > Am I worrying over nothing? I do seem to get spam only on those > accounts for which greylisting is inactive, but on those I get a LOT > that SA fails to tag, including just about every one of those image > spams with the 2K or so of seemingly randomish text in th

Re: ANTIDRUG rulesets

2007-02-13 Thread Anthony Peacock
Rocco Scappatura wrote: The other thing to do is to run sa-update to make sure you are running the latest versions of the standard SA rules. http://spamassassin.apache.org/full/3.1.x/doc/sa-update.html I already use rules_du_jour.. It's OK? Or I can obtain further improvement using sa-update?

Re: sa-stats and Spamtagging

2007-02-13 Thread Chris St. Pierre
On Tue, 13 Feb 2007, LuKreme wrote: Now, perhaps I am misunderstanding, but BAYES_99 is hitting on 5% of ham? and AWL on 35% of spam? Keep in mind that AWL is slightly misnamed; it doesn't just whitelist, it adjusts scores (both positively and negatively) based on previous history. So the fac

sa-stats and Spamtagging

2007-02-13 Thread LuKreme
I recently ran sa-stats (Dallas's script, not the one in SA) Email:10373 Autolearn: 1575 AvgScore: 7.45 AvgScanTime: 3.74 sec Spam: 6179 Autolearn: 680 AvgScore: 12.44 AvgScanTime: 4.03 sec Ham: 4194 Autolearn: 895 AvgScore: 0.10 AvgScanTime: 3.33 sec

Re: Cannot find the /var/lib/spamassassin catalgue

2007-02-13 Thread Theo Van Dinter
On Tue, Feb 13, 2007 at 03:48:02PM +0100, Dag Ringdal wrote: > 3.1.7 and are doing sa-update from time to time, but I'm not assured that the > latest version is installed. When I type sa-update -V, I get: > sa-update version svn454083 > running on Perl version 5.8.8 > How can I know this is the

Cannot find the /var/lib/spamassassin catalgue

2007-02-13 Thread Dag Ringdal
on my system, and can therfore not find the latest config files. I run SA 3.1.7 and are doing sa-update from time to time, but I'm not assured that the latest version is installed. When I type sa-update -V, I get: sa-update version svn454083 running on Perl version 5.8.8 How can I know this is

Re: dkim: lookup failed: DNS query timeout

2007-02-13 Thread Chris
On Tuesday 13 February 2007 7:42 am, Mark Martinec wrote: > > > I notice that several of my hourly logcheck messages are missing from a > > certain time period forward, also in my spam folder one message is > > repeated multiple times. Looking in my earthlink webmail folder I see > > that same mes

Re: Vbounce ruleset whitelist_bounce_relays

2007-02-13 Thread Steve [Spamassassin]
Justin Mason wrote: could you post an example of your config and the message you're testing with, in full? OK in /etc/mail/spamassassin/local.cf -- allow_user_rules 1 bayes_auto_expire 0 whitelist_bounce_relays mail.mydomain.com -- A bounce message which should have been whitelisted: c

Re: [2] Sender domain must have a DNS MX

2007-02-13 Thread Jt9373
Hi Ron and Dan I have the same issues. Have you resolved this problem? If you did, and have a solutions, could you please help me out with it? Thank you in advance more detail below. JT X-Message-Info: LsUYwwHHNt3660MmjhEvYg2f34OAemlKwfim1hp8BGs= Received: from bay0-omc3-s19.bay0.hotmail.com (

RE: ANTIDRUG rulesets

2007-02-13 Thread Rocco Scappatura
> The other thing to do is to run sa-update to make sure you > are running the latest versions of the standard SA rules. > > http://spamassassin.apache.org/full/3.1.x/doc/sa-update.html I already use rules_du_jour.. It's OK? Or I can obtain further improvement using sa-update? rocsca

Re: dkim: lookup failed: DNS query timeout

2007-02-13 Thread Mark Martinec
Chris, > Feb 13 03:07:31 localhost spamd[15060]: dkim: lookup failed: DNS query > timeout for _policy._domainkey.littlepinkeggs.com DNS setup of domain littlepinkeggs.com is terribly broken, they have no name servers, and even whois gets stuck on them. The response from dkim plugin is normal. >

Re: Vbounce ruleset whitelist_bounce_relays

2007-02-13 Thread Justin Mason
Steve [Spamassassin] writes: > I've been trying to use the Vbounce ruleset > [http://wiki.apache.org/spamassassin/VBounceRuleset] on spamassassin 3.1.4. > > I'm unable to get whitelist_bounce_relays to work... When I > intentionally send an email to a non-existent remote address I get a > boun

dkim: lookup failed: DNS query timeout

2007-02-13 Thread Chris
The whole error shown is: Feb 13 03:07:31 localhost spamd[15060]: dkim: lookup failed: DNS query timeout for _policy._domainkey.littlepinkeggs.com I notice that several of my hourly logcheck messages are missing from a certain time period forward, also in my spam folder one message is repeated

Vbounce ruleset whitelist_bounce_relays

2007-02-13 Thread Steve [Spamassassin]
I've been trying to use the Vbounce ruleset [http://wiki.apache.org/spamassassin/VBounceRuleset] on spamassassin 3.1.4. I'm unable to get whitelist_bounce_relays to work... When I intentionally send an email to a non-existent remote address I get a bounce message marked exactly as if it had be

Re: ANTIDRUG rulesets

2007-02-13 Thread Anthony Peacock
Rocco Scappatura wrote: Your network tests are still not working. Run spamassassin -D again to make sure the Net::DNS installation is being used by SA. Infact, I'm tryng to install it cos it is not installed.. I have succeded.. Attached there is the output of spamassassin -D before and after

Re: Whitelist question

2007-02-13 Thread Sebastian Ries
Hi > How would I whitelist mail from a listserv? Since the mail is shown to > be from the user who sent it and not the listserv, I can't do a > whitelist_from. Would it be easier to make a rule to look for the > listserv domain in the header? How would I make a rule to look for just > a word in

Re: ANTIDRUG rulesets

2007-02-13 Thread Anthony Peacock
Hi, Rocco Scappatura wrote: Your network tests are still not working. Run spamassassin -D again to make sure the Net::DNS installation is being used by SA. Infact, I'm tryng to install it cos it is not installed.. I have succeded.. Attached there is the output of spamassassin -D before and

Whitelist question

2007-02-13 Thread Joe Zitnik
How would I whitelist mail from a listserv? Since the mail is shown to be from the user who sent it and not the listserv, I can't do a whitelist_from. Would it be easier to make a rule to look for the listserv domain in the header? How would I make a rule to look for just a word in the header, r

Re: ANTIDRUG rulesets

2007-02-13 Thread Anthony Peacock
Hi, Keep replies on the list. Rocco Scappatura wrote: [30482] dbg: dns: is Net::DNS::Resolver available? no [30482] dbg: dns: is DNS available? 0 Ive installed Net::DNS::Resolver. DNS server is local. And have you run spamassassin -D to make sure it is picking it up correctly?

Re: Blocking MMS messages?

2007-02-13 Thread Paolo Cravero
Steve Monkhouse wrote: Yeah that works for that one.. but with multiple originating sources and multiple carriers etc I thought there must be a better way than manually enetering every mms provider... ?? I'm old fashioned and don't own an MMS-enabled phone, but phone numbers are generally 12 n

Re: ANTIDRUG rulesets

2007-02-13 Thread Anthony Peacock
Hi, Rocco Scappatura wrote: I think the next thing you need to do is run the command with the -D switch. The output is attached.. There are a few problems that jump out at me here, I am sure others will pick up on any I have missed: 1. [30482] dbg: dns: is Net::DNS::Resolver availabl

RE: ANTIDRUG rulesets

2007-02-13 Thread Rocco Scappatura
> I think the next thing you need to do is run the command with > the -D switch. The output is attached.. > It doesn't look like you are running any network tests, you > are certainly not running any Bayes tests. I have executed the command you've sayed me after lauching spamd.. > Can you rem

Re: ANTIDRUG rulesets

2007-02-13 Thread Anthony Peacock
Hi, Rocco Scappatura wrote: If you have the email saved in a text file called email.txt, run this command making sure that you are logged in as the user who spamd run as. spamassassin -t < email.txt If you want a lot more information you can use the debug switch spamassassin -D -t < email.t

RE: ANTIDRUG rulesets

2007-02-13 Thread Rocco Scappatura
> If you have the email saved in a text file called email.txt, > run this command making sure that you are logged in as the > user who spamd run as. > > spamassassin -t < email.txt > > If you want a lot more information you can use the debug switch > > spamassassin -D -t < email.txt Thanks.

Re: ANTIDRUG rulesets

2007-02-13 Thread Anthony Peacock
Rocco Scappatura wrote: Can you so us which tests these emails hit on your system? Please tell me how I have to do.. If you have the email saved in a text file called email.txt, run this command making sure that you are logged in as the user who spamd run as. spamassassin -t < email.txt I

RE: ANTIDRUG rulesets

2007-02-13 Thread Rocco Scappatura
> Can you so us which tests these emails hit on your system? Please tell me how I have to do.. rocsca

RE: ANTIDRUG rulesets

2007-02-13 Thread Rocco Scappatura
> Enable network tests. You may have to set up several things > correctly to get this to work, but just removing "-L" from > the spamd startup line may be enough as a start. I don' understand.. If I have a message in mbox format, what I have to do so that I can see what score SA should assign

RE: ANTIDRUG rulesets

2007-02-13 Thread Rocco Scappatura
> > Put a full email (including all headers) on a web page somewhere. > > http://www.rocsca.it/it_by_confocal.out > > That's not a drug spam, that's a stock spam. It just happens > to be for a pharmacutical company. Sorry! I'm not very experienced with the kinds of spam.. I'ld very to learn t