Bowie Bailey wrote:
RDJ is supposed to download to the RulesDuJour directory. After it
downloads
the files there, it moves them from ${TMPDIR} to ${SA_DIR}. ${TMPDIR} is
RDJ's
working directory. You don't want SA reading it's rules from there. RDJ
may
have multiple copies of each rule
will
receive occasional warnings until you remove ANTIDRUG from the
TRUSTED_RULESETS in the RDJ config file.
Also, sorry for releasing so many updates to RDJ in such a short time
period!
Chris Thielen
Sorry about that! It's fixed now and 1.29b is available on the web site.
Max Matslofva wrote:
Hi
RulesDuJour 1.29 tries to fetch 70_sare_stocks.cf from
http://www.rulesemporium.com/rules/rules/70_sare_stocks.cf
The correct URL for 70_sare_stocks.cf is
to wiki vandalism.
You can forward this out to the SA community if you want.
AltGrendel
I am trying to piece together the information that was in the wiki using
google cache, wayback, etc. In the meantime, you can get the script
itself from http://sandgnat.com/rdj/rules_du_jour
Chris
the proposed
change through the masscheckers.
Thanks for the patch!
Chris Thielen
Thank you for posting this.
Unfortunately after RDJ downloaded all those parking pages, their
timestamps were then LATER THAN the timestamps on the real rules files.
Because of this, the if-modified-since checks all returned false and the
real rulesets didn't clobber the broken ones.
Chris
Jo Rhett wrote:
Is there any difference here that I'm overlooking? Any advantage to RDJ?
And leading to my next point, given that sa-update is working fine --
isn't rdj going to be slimmed down to just the part that restarts the
process after running sa-update?
Hi Jo,
I'm the author of
Theo Van Dinter wrote:
FWIW, it happens to be the official tool since no one ever submitted
RDJ to be the official tool, so we had to write our own.
I would have offered, had I known there was any interest.
Chris T.
Matt Kettler wrote:
Chris Thielen wrote:
Does antidrug still get updates? If you are going to continue
Well, eventually I might do some updates and split antidrug into
antidrug-pre30.cf, antidrug-30x.cf, antidrug-31x.cf, etc. But my spare
time is near zero nowdays. I've got a 7-week
Matt,
Does antidrug still get updates? If you are going to continue
publishing updates to antidrug I will change the URL in RDJ to wherever
eventually move it. If, however, there are no additional updates
foreseen it should probably be removed from RDJ altogether.
LMK.
Chris Thielen
.
Daryl C. W. O'Shea wrote:
On Wed, August 16, 2006 18:16, Chris Thielen wrote:
CoWorker (dialup) -- mail server (office) -- fetchmail (home) --
I tried this just now and found that removing the fetchmail headers
doesn't change the received header parsing. The fetchmail headers
I am using fetchmail to retrieve messages from my work account.
However, messages sent to my work account from coworkers are being
tagged with various dynamic IP rules. My setup is something like this:
CoWorker (dialup) -- mail server (office) -- fetchmail (home) --
spamassassin
When a
debian sarge which has version 1.997-2, so
unless there are other major problems I'll just live with an older
version right now.
On Wed, August 16, 2006 18:16, Chris Thielen wrote:
CoWorker (dialup) -- mail server (office) -- fetchmail (home) --
you can make fetchmail so it does not add
Coffey, Neal wrote:
I'm trying to create a rule to catch some of the perscription drug
references that come into our system. We're not in pharmaceuticals, so
I'm not too concerned about false positives :)
Some examples of what I'm looking for (using an innocent drug so I don't
trip someone
Michael Monnerie wrote:
On Mittwoch, 15. März 2006 19:32 Theo Van Dinter wrote:
A channel is essentially a set of rules published by some
organization, which is accessed and downloaded via dns/http. ie:
Would that be a possible replacement for RulesDuJour? I love that
script, but
Way cool! Thanks Justin
Justin Mason wrote:
You might find this interesting -- it's a regexp visualizer, which
compiles a regexp into its NFA/DFA, then presents it for viewing in a
Flash app! It's amazing.
http://osteele.com/tools/reanimator/
--j.
the different uribls? From my stats, I get 50% of spam that hits
SURBL hitting 4 or 5 of the SURBL lists. Shouldn't the perceptron have
noticed that and lowered the scores? Or is the bug in mass-check which
Theo mentioned causing the scores to not be deflated?
OK I think I'm done rambling now!
Chris
: the month buckets listed aren't exactly accurate because they use
the Date header sent from the spammer, not the Date received header.
This should be good enough to get an idea though.
Chris Thielen
Stats for SPAM 38 months old:
0: 98.5% ( 268 / 272 )
1: 0.0% ( 0 / 272 )
2: 0.0% ( 0 / 272 )
3
Barton L. Phillips wrote:
Is there a combined list distribution? Many other email lists
distribute one combined email per day instead of dozens of separate
email. The volume of emails makes it hard to keep up .
One thing you can do is set up a separate folder for each mailing list
you
Doc Schneider wrote:
http://rulesemporium.com/rules/70_sare_stocks.cf
Is the latest addition to the SARE rule sets.
-Doc (SARE Ninja)
Added to RDJ version 1.28 as SARE_STOCKS
signature.asc
Description: OpenPGP digital signature
Martin Hepworth wrote:
Hi all (and Chris Thielen specifically)
I'm try to create some new RDJ config sets ... here's an example
JG_badhosts=9006;
CF_URLS[9006]=http://files.grayonline.id.au/rules/local_badhosts.
cf;
CF_NAMES[9006]=James Gray's badhost rules
Martin Hepworth wrote:
Why?
In /etc/mail/spamsassassin/RulesDuJour the filename is correct with the .cf
at the end not the .2?
Sorry for the rapid fire response.
As for why?:
The script doesn't currently autodetect the filename being downloaded.
If no filename is set, the
James Keating wrote:
Well the simplest fix is the one that I did not implement in the first
place, using ON DUPLICATE KEY. However, I did not implement that
because of its only being in version 4.1 of MySQL and I still use
Debian stable for most production machines, which runs 4.0.x.
LuKreme wrote:
what I get is:
No index found for ruleset named SARE_HTML. Check that this ruleset
is still valid.
No index found for ruleset named SARE_OBFU. Check that this ruleset
is still valid.
No index found for ruleset named SARE_URI_ENG. Check that this
ruleset is still
Matt Kettler wrote:
At 08:57 AM 12/1/2005, Bowie Bailey wrote:
Doesn't RDJ have a rule renaming feature? I seem to remember getting
a message from RDJ at one point saying that one of the SARE rules had
changed names.
Renaming is quite different. If you re-name, at least your users will
. The spamassassin command itself launches a perl
interpreter each and every time it's run.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
Wolfgang Zeikat wrote:
SARE is about to release a stock ruleset. Looks really good. I was
going to
work on one, Then I saw the ninjas have it under control, and I'm just
sitting back and watching the fun. Not sure on the release date.
GO, ninjas, GO!
Any news when that one is going to be
Hi Tracey!
Tracey Gates wrote:
I have followed the installation steps from the Rules Du Jour site
(_http://www.exit0.us/index.php?pagename=RulesDuJour_) and am trying
to run the script manually but I get the following error:
[EMAIL PROTECTED] sbin]# ./rules_du_jour
: bad interpreter: No
James Lay wrote:
Here's the rule:
bodyGATEWAY_001 /tripod\.com/i
score 5
describematch tripod.com
Here's the result:
Nov 9 13:42:03 gateway spamd[17880]: spamd: result: . -2
-ALL_TRUSTED,AWL,BAYES_00,GATEWAY_001
Matt Kettler wrote:
shenanigans wrote:
I was interested in getting feedback from current mail group users.
We have mirrored your mail list in a new application that provides a
more aggregated and safe environment which utilizes the power of broadband.
Roomity.com v 1.5 is a web 2.01
registry (I should have done
this LOONG ago!). Please email me directly with new rulesets to add to the
standard registry. [EMAIL PROTECTED] (Chris Thielen)
# Version 1.20 Updated Tim Jackson's Bogus Virus warnings URL. Update to this
version of RDJ if you use Tim Jackson's Bogus Virus
Doc Schneider wrote:
You need to re-download this rule set. I believe this was fixed **last
yesterday*. *
hehe, that made me laugh out loud, thanks doc :)
signature.asc
Description: OpenPGP digital signature
[EMAIL PROTECTED] wrote:
Greetings, battlers.
I would like to rewrite headers on incoming spam without having SA
prepend X-Spam- to them. Two reasons:
I'm not sure what your set up is, but I use procmail and formail to
rewrite headers.
signature.asc
Description: OpenPGP digital
Michael Monnerie wrote:
Hello list,
I tried hard to receive more german text SPAM, and succeeded :-)
Therefore, I was able to start to write german text based rules, which I
put in an extra file. This file already contains the actual
netbanking.at phishing rules, and should be quite helpful.
[EMAIL PROTECTED] wrote:
Hmmm... is it possible that you're running the email through SpamAssassin,
attaching the report, and then running it through SpamAssassin again?
I agree, this is very likely what you are doing.
signature.asc
Description: OpenPGP digital signature
MailScanner, or cause
MailScanner to reload its config files.
Note: I don't know that mailscanner can actually reload SpamAssassin
config files, I just assume it might have the capability.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
Michele Neylon :: Blacknight.ie wrote:
Chris Thielen wrote:
Hi Casey,
Larry and Dhawal are correct, you shouldn't be restarting spamd if you
don't use it (spamassassin --lint does NOT require spamd). I recommend
changing SA_RESTART to a command that will restart MailScanner, or cause
Aha!
I see you've found a bug in Rules du Jour! Bill is returning a 302 http
response code which indicates a temporary URL change. However, RDJ is
incorrectly interpreting the 302 as a not changed.
Short term solution is to upgrade to the new RDJ with the current URL as
you've stated. I
William Stearns wrote:
I see you've found a bug in Rules du Jour! Bill is returning a 302
http response code which indicates a temporary URL change. However,
RDJ is incorrectly interpreting the 302 as a not changed.
Short term solution is to upgrade to the new RDJ with the current URL
as
...
Try it like this:
TRUSTED_RULESETS=TRIPWIRE
ANTIDRUG
SARE_EVILNUMBERS0
Chris Thielen
signature.asc
Description: OpenPGP digital signature
Robert Menschel wrote:
SARE's General Subject rules files and the Whitelist rules files have
been updated.
snip
Note that RDJ has not yet been updated for these two new files.
RDJ is now updated. The new ruleset names are: SARE_WHITELIST_SPF and
SARE_WHITELIST_RCVD
Chris
Hi John,
First off, did you modify the rules_du_jour script in any way? It
appears that it is trying to execute the names of the rulesets as
commands. May I see your config file? Are you by chance using this on
cygwin?
John Fleming wrote:
I've had such good results with SA that I
has been updated to point to the new domain.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
Larry Starr wrote:
Martin,
It appears that a problem, with one of my internal mail servers, may have
contributed to the confusion on this issue.
It looks like it's queue runner was not working, and messages that were not
forwarded immediately were never forwarded. I kicked that queue
Christoph Petersen wrote:
Hi,
I've tried to upgrade to SA 3.1 on my Debian Sarge. But there is no Debian
package avalable. Neither in Sarge nor in Sid... When that package is via
apt available?
I installed it via the unstable archive.
I think, perhaps, a better question may be: when
Momo wrote:
Christoph Petersen [EMAIL PROTECTED] a écrit :
Hi,
I've tried to upgrade to SA 3.1 on my Debian Sarge. But there is no
Debian
package avalable. Neither in Sarge nor in Sid... When that package is
via
apt available?
It will come very soon in unstable, but you can grab the
Jamie,
Jamie Pratt wrote:
Fred wrote:
Yes we are aware of this issue, the site has changed owners a couple
times
and during those transitions we had to change the way we updated the
pages,
from SSH to FTP to CVS.. Not all of us have kept up on how the
changes need
to be made. At one
;) .
If there is an example email that isn't too private, could you send it
as an attachment to me? I'd like to see how it's FPing and possibly see
about updating backhair.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
Hi Felix,
[EMAIL PROTECTED] wrote:
I got a bit of curiousity in my brain about neural networks, and
someone suggested I take a look at how SpamAssassin trains itself. I
have been looking into .../masses and come across some things which
set off warning bells. I don't think I have actually
.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
Duncan Findlay wrote:
On Mon, Aug 29, 2005 at 11:41:39PM -0400, Duncan Findlay wrote:
Debian packages or 3.1.0-rc2 are available from the experimental
distibution (version 3.0.99pre3.1.0+rc2-1). I'd appreciate help
testing them, so that all the bugs in the packaging can be worked out
by the
Chris Santerre wrote:
-- Bizzaro-Chris (I know all of the real Chris's dark secrets!)
Bizarro! Bizarro! Bizarro!
eom
signature.asc
Description: OpenPGP digital signature
://sandgnat.com/cmos/cmos.jsp?multigapenabled=truemultigap=2duplicatecharsenabled=trueduplicatechars=2words=viagra
You will want to rename the rule, score, and description because it
generates too-long rule names.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
, for example, your TRUSTED_RULESETS may look like this:
TRUSTED_RULESETS=TRIPWIRE BOGUSVIRUS SARE_ADULT SARE_RANDOM SARE_HTML
(I just picked some random rulesets from the list).
Chris Thielen
signature.asc
Description: OpenPGP digital signature
Dallas L. Engelken wrote:
BAYES_00 hits 15.27 of spam on yours, the %ofspam on top ham rules and
%ofham on top spam rules must be buggy.
i'm not running that version with the 5th column. It must be buggy.
i play with it after bit.
Dallas
Dallas,
Did you see the patch I sent to the
Hi Dirk,
Dirk Bonengel wrote:
Hi all,
maybe this list can give me some feedback on a plugin I've written a
few weeks ago.
The Plugin is based on parts of the 'NiXSpam' project by the German IT
magazine iX. NiXSpam is an elaborate procmail recipe (for more info
see
wolfgang wrote:
Hi,
http connections to www.rulesemporium.com are timing out here. Maybe someone
in charge is reading this and can fix it ...
regards,
wolfgang
There seems to be an issue with the filesystem on that box. Email sent
to the appropriate people, but it looks like a
Hi Thomas,
Your email scored nearly 25 on my system. Chickenpox contributed 4.2,
uribls contributed tons.
HTH :)
Thomas Booms wrote:
Spam detection software, running on the system ns1.sandgnat.com, has
identified this incoming email as possible spam. The original message
has been
Andy Jezierski wrote:
Chris Thielen [EMAIL PROTECTED] wrote on 07/07/2005
01:15:24 AM:
Hi Thomas,
Your email scored nearly 25 on my system. Chickenpox contributed 4.2,
uribls contributed tons.
HTH :)
As has been pointed out, make sure your network tests are turned on. I
am
restart
That's fine, use that. The default built into the script is actually
/etc/init.d/spamassassin restart, if I remember correctly.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
Hi Dave,
What os are you on and what version of curl do you have installed?
[EMAIL PROTECTED]:~$ curl --version
curl 7.13.2 (i386-pc-linux-gnu) libcurl/7.13.2 OpenSSL/0.9.7e zlib/1.2.2
libidn/0.5.13
Protocols: ftp gopher telnet dict ldap http file https ftps
Features: IDN IPv6 Largefile
SARE has started using SVN to maintain the rulesets, however the top200
script hasn't been updated to commit to SVN. The maintainer of the
script is starting a business right now and hasn't had time to update
the script!
Shelley Waltz wrote:
The 70_sc_top200.cf on rulesemporium has not
Pál László (Sq.) wrote:
It looks this entry has been skipped somehow. Other rule moving spam
police messages to /dev/nul works fine.
SA invoked by amavisd
L:
Hi,
Sorry, I don't know anything about amavisd... I assume SA is being
called BEFORE procmail kicks in for
Regarding RDJ and windows, I did put together a short HOWTO for setting
up RDJ on cygwin: http://www.exit0.us/index.php?pagename=InstallRdjOnCygwin
Evan Platt wrote:
At 02:04 AM 6/29/2005, you wrote:
RulesDuJour. Loren doesn't do French well. (Erm, neither do I for that
matter.)
Oui.
the entire output of your
interactive run and I can probably help diagnose the problem.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
[EMAIL PROTECTED] wrote:
Wolfgang Zeikat wrote:
On 06/29/05 20:19, Evan Platt wrote:
wget -N URL only downloads a file if the copy on the server is newer
than your local one.
Presumably, by adding an HTTP If-Modified-Since header with a value
corresponding to the modified-time
Pál László (Sq.) wrote:
I also would like to remove spams over a certain level, so I'v created
the following .procmailrc entry
:0
* ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\*
/dev/null
It seems not working. What is the problem?
Looks fine to me. Is that recipe in your procmailrc AFTER
Pál László (Sq.) wrote:
It looks this entry has been skipped somehow. Other rule moving spam
police messages to /dev/nul works fine.
I'm not seeing where SA is called. It appears that SA is being invoked
from outside procmail.
Can you give more info about your system's processing chain?
a stop and then a
start, that too works okay.
Hi John,
Maybe try changing your SA_RESTART to killall -HUP spamd. I think
spamd will correctly reload configuration files with a HUP signal.
Chris Thielen
PS. two copies of this email may appear. I accidentally sent the first
from a non
Theo Van Dinter wrote:
On Mon, Jun 13, 2005 at 08:56:04AM -0400, Ugo Bellavance wrote:
I want to interact with this list via nntp (gmane), but since this list
is member-only, I must subscribe to post. I didn't find the way to set
the option not to receive messages from the list.
of RDJ?
Chris Thielen
signature.asc
Description: OpenPGP digital signature
have to tell RDJ what and where they are. There are links on the
www.rulesemporium.com web site that explain how to add the configuration
entries, however I am noticing that they are all missing (404) at the
moment!
I'll see if we can track down the relavent information.
Chris Thielen
Chris Thielen wrote:
Thomas Cameron wrote:
Hey all -
I am brand new to RDJ. I just set up my script and I am getting the no
index errors below. Is this normal?
Nope, it's not normal. You are missing some configuration entries for
those rulesets. Those are not included in the stock
Jason Marshall wrote:
When a new rules_du_jour is released, it downloads it, and i have to
manually add the Personal Rule snippets to the script again.
Is there a way to put those in the /etc/rulesdujour/config file so
that they don't need to be re-added all the time?
Yes! You should
Jason Marshall wrote:
Yes! You should be able to add these directly to the config file in
the same way you are (I believe) currently adding them to the
built-in registry.
Thanks, Chris, do they just get added to the bottom, or do they need
to be contained in some kind of $variable=
reads /etc/mail/spamassassin/*.cf and does not recurse.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
for mc override all the paths that
typically point to /etc or ~/.spamassassin.
Heres an example of how I am launching spamassassin:
../spamassassin.raw --lint --prefs-file=./to-test/user_prefs
--siteconfigpath=./to-test/fake_etc lint.out 21 # check for rules errors
Hope this helps.
Chris
Hi Craig,
Craig Baird wrote:
Quoting Jeff Chan [EMAIL PROTECTED]:
The usual way problems like this happen is when upgrades are done
using different mechanisms, i.e. CPAN vs tarball vs Subversion,
etc.
The different upgrade mechanisms have different ways of keeping
track of versions, paths, etc.
want to try, I'll walk through it with you and
we can come up with a HOWTO. Feel free to contact me offlist.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
Matt Yackley wrote:
Hi all,
I've released a new version of evilnumbers and there are several
changes in the new
version.
snip
RulesDuJour:
A new version of RDJ will be released soon to handle these changes,
but here is a
manual fix.
I've updated RDJ with the new names for evilnumbers. There
Hi Martin,
Martin Hepworth wrote:
Matt
myrdj not downloading the files as it can't get the file sizes for
some reason...
Can you give me the error messages? I just downloaded the new
evilnumbers using RDJ 1.19 (which I just uploaded) and it went off
without a hitch. I use curl (not wget),
Hi,
[EMAIL PROTECTED] wrote:
Stuart Johnston wrote:
[EMAIL PROTECTED] wrote:
Stuart Johnston wrote:
body L_MILLBILL /[mb]i(?:\|l|l\||\|\|)ions?/i
body L_MILLBILL /[mb]i[l|][l|]ions?/i
I started with something similar to that but it will also match
millions which we
George,
Maybe the way RDJ does the roll back needs be addressed? I know version
2 is nearing release, and this wouldn't be difficult to add: It could
check the cf file for a grep-able, commented, this release changes
entry, which may include a rules.htm#ChangesVerX url.
RDJ has always reported
Hi Chris,
Chris Thielen wrote:
John Fleming wrote:
Bayes in the current version will not autolearn against itself (will
not auto-learn as ham something it thought was spam, or v.v.) -- it
might be a good enhancement to also have bayes look at AWL if active,
and if AWL disagrees with the auto-learn
John Fleming wrote:
Bayes in the current version will not autolearn against itself (will
not auto-learn as ham something it thought was spam, or v.v.) -- it
might be a good enhancement to also have bayes look at AWL if active,
and if AWL disagrees with the auto-learn judgment, then do not
Darren Coleman wrote:
Hi Loren,
Firstly, thanks for your help.
I have searched around rulesemporium without much success trying to find
these LOCAL_OBFU_* rules. I don't suppose you could tell me the
filename that they occur in could you? (I assume they will be in
/etc/mail/Spamassassin or
RuulesDuJour working again. Can anybody help?
Thanks.
Dimitri
Hope this helps.
Chris Thielen
signature.asc
Description: OpenPGP digital signature
contact me if interested
signature.asc
Description: OpenPGP digital signature
Hi,
http://www.backports.org/package.php?search=spamassassin
Regards,
Chris Thielen
Rakotomandimby (R12y) Mihamina wrote:
Hello,
I'm looking for a recent package of Spamassassin for Debian STABLE
(Woody) please. Either 2.64 or 3.x ?
The apt-get.org has no one.
Where could I find
;
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES): http://www.sandgnat.com/cmos/
Keep up to date with the latest third party SpamAssassin Rulesets:
http://www.exit0.us/index.php/RulesDuJour
signature.asc
Description
/mail/rulesdujour can be found at:
http://www.netbits.us/rulesdujour
Oh - perl 5.6.1 on debian
Thanks,
Josh
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES): http://www.sandgnat.com/cmos/
Keep up to date
Debian (sarge). I'm using
bash 2 now, but I just tried it on bash 3 and it worked with that as
well.
On Thu, 2004-09-16 at 12:09 -0500, Josh Trutwin wrote:
On Thu, 16 Sep 2004 10:59:56 -0500
Chris Thielen [EMAIL PROTECTED] wrote:
Hi Josh,
On Wed, 2004-09-15 at 15:57 -0500, Josh Trutwin wrote
92 matches
Mail list logo
