Re: Almost no score

I could be asking the same thing as Charles, if I am I apologize. I installed the rules below, ran the headers.txt file- thru SA and the rules did not trigger. Do I need to configure something else? Thanks Craig >>> Charles Gregory 5/1/2009 9:48 AM >>> Uh, what do the

Re: New spam-to me-and how do I stop. THANK YOU!

if ever feel we are expert enough to help answer any, or more sadly, take the time too. I do appreciate those of you who help people like me out! Cheers- Craig >>> Sergey Kovalev 1/9/2009 3:52 AM >>> Craig wrote: > > Here are the links to 3 sample messages- &

Re: New spam-to me-and how do I stop.

>>> Randy 1/8/2009 8:09 AM >>> Matus UHLAR - fantomas wrote: > On 07.01.09 11:46, Craig wrote: > >> X-Mailer: Novell GroupWise Internet Agent 7.0.2 HP >> > > >>>>> Randy 1/6/2009 2:42 PM >>> >>>>>

Re: New spam-to me-and how do I stop.

Links would help- http://pastebin.com/d59f95b6d http://pastebin.com/d17f12f4 http://pastebin.com/m46ce2877 >>> "Craig" 1/7/2009 11:46 AM >>> >>> Randy 1/6/2009 2:42 PM >>> Craig wrote: > > > >>> Randy 1/6/2009 2:18 PM >>

Re: New spam-to me-and how do I stop.

>>> Randy 1/6/2009 2:42 PM >>> Craig wrote: > > > >>> Randy 1/6/2009 2:18 PM >>> > Craig wrote: > > Hello All- > > > > I have recently been getting MANY spam slipping through Spamassassin > > and I am looking for help o

Re: New spam-to me-and how do I stop.

>>> Randy 1/6/2009 2:42 PM >>> Craig wrote: > > > >>> Randy 1/6/2009 2:18 PM >>> > Craig wrote: > > Hello All- > > > > I have recently been getting MANY spam slipping through Spamassassin > > and I am looking for help o

Re: New spam-to me-and how do I stop.

>>> Randy 1/6/2009 2:18 PM >>> Craig wrote: > Hello All- > > I have recently been getting MANY spam slipping through Spamassassin > and I am looking for help on how to stop. I have used Spamassassin > with Bayes successfully for many years now and once

Listing all rules and all scores

f the rule names/ scores. Thanks, Craig D. Cocca Lead Developer ULTIMATE Internet Access [EMAIL PROTECTED]

Re: not scoring correctly

short of all these 70K+ PDF messages. What is recommended bypass these days considering the types of spam out there? I raised it to 128*1024, but I don't want to choke these heavily used gateways. begin:vcard fn:Dr. Craig Carriere n:Carriere;Craig org:Cobatco Inc.;Technology Developmen

Re: pdf tools clarification?

Not really SA specific, but to add to your list are the SaneSecurity virus definitions for ClamAV which also apparently catches a lot of this type of rodent-mail if you are willing to use third party virus definitions. I have also enabled additional RBL look-ups for our site for some of the qu

Re: Returned mail: see transcript for details

Jonathan: No need to apologize at all; you did me a favor by letting me know we were still having these issues with our ISP's "anti-spam" methods. Will get this sorted out one way or the other. Trying to keep your user's mailboxes free of spam is work enough, but having to to battle with your IS

SaneSecurity

Perhaps more a clamav question, but does anyone use the additional definitions for clam from SaneSecurity and are they helpful in the Spam Wars? Thanks

Re: Solution to Bayes poisoning, high load levels, image spam, and botnet spam

Matt wrote: >> First - use dummy MX records. Real mail retries. Botnet and must >> spammers don't. It's easier for them to try to spam someone else than to >> fight your filter. MX config is as follows: >> >> dummy - 10 >> real - 20 >> real-backups - 30 >> dummy - 40 >> dummy - 50 >> dummy - 60 >

Re: Bayes Misidentification

system any more and after many user > complaints, I've opted to turn it off. However, setting use_bayes 0 > doesn't seem to do anything; messages are still coming through with > BAYES_99. > > Is anyone else having this issue? Is my database just being poisoned > over and o

Re: SA 3.2 , AWL and auto_whitelist_factor

very confused now. How does it determine which message to use for the 'old score' ? if I wanted to assign a negative number to those addresses that are whitelisted in order to let more of them through, what am I supposed to use if not AWL ? thanks, On 31 May 2007 at 11:56, Craig

Re: SA 3.2 , AWL and auto_whitelist_factor

is in the auto white-list where did the -0.1 come from? how can i change it to -1.0 ? thanks. begin:vcard fn:Dr. Craig Carriere n:Carriere;Craig org:Cobatco Inc.;Technology Development adr:;;1215 NE Adams Street;Peoria;IL;61550;USA email;internet:[EMAIL PROTECTED] tel;work

Re: Lint results question

not be called. Clay Davis wrote: Should I be concerned with the following as a result of "--lint -D"?   config: SpamAssassin failed to parse line, skipping: check_mx_delay  5 warning: description for FS_START_DOYOU2 is over 50 chars   Thanks, Clay begin:vcard fn

Re: BAYES_99 triggered on every message

alled SA > once more again via cpan, while earlier versions installed with Debian > Sarge worked ok. Also earlier versions installed via cpan on top of > Red Hat 7.3 worked ok. > > > begin:vcard fn:Dr. Craig Carriere n:Carriere;Craig org:Cobatco Inc.;Technology Development adr:;;1215

Re: Problem installing SA 3.2.0 via CPAN on OPenSuSE 10.2 or SLES 10

Stephen: A follow up to my own message. I have been able to successfully install 3.2 on my backup SLES 10 mail server from the download source code. CPAN still fails with the error you mentioned. When I installed 3.18 I used CPAN without problems. Best Craig Carriere wrote: > Step

Re: Problem installing SA 3.2.0 via CPAN on OPenSuSE 10.2 or SLES 10

examined in: log/d.spamc_z/out.1 > t/spamc_z...FAILED tests 2-9 > Failed 8/9 tests, 11.11% okay > > Thanks, > > begin:vcard fn:Dr. Craig Carriere n:Carriere;Craig org:Cobatco Inc. adr:;;1215 NE Adams Street;Peoria;IL;61550;USA email;internet:[EMAIL PROTECTED] tel;work:309.676.2663 tel;fax:309.676.2667 url:http://www.cobatco.com version:2.1 end:vcard

Re: AWL Troubles

not too spammy otherwise, but from a layman's perspective, definitely not something that should be on a whitelist.  I know how to remove from the whitelist, but how did they get there in the first place?   Thanks, gang.   Clay     begin:vcard fn:Dr. Craig Carriere n:Carriere;

Re: ANNOUNCE: Apache SpamAssassin 3.2.0 available

ertrap.com _ begin:vcard fn:Dr. Craig Carriere n:Carriere;Craig org:Cobatco Inc. adr:;;1215 NE Adams Street;Peoria;IL;61550;USA email;internet:[EMAIL PROTECTED] tel;work:309.676.2663 tel;fax:309.676.2667 url:http://www.cobatco.com version:2.1 end:vcard

Re: RBL tests on MTA vs. RBL rules on SA

your DNS server caches the result. Bret begin:vcard fn:Dr. Craig Carriere n:Carriere;Craig org:Cobatco Inc. adr:;;1215 NE Adams Street;Peoria;IL;61550;USA email;internet:[EMAIL PROTECTED] tel;work:309.676.2663 tel;fax:309.676.2667 url:http://www.cobatco.com version:2.1 end:vcard

Bayes Question

probability is 20 to 40% [score: 0.2729] Thoughts? Thanks Craig

Re: Rules report

I utilize amavisd-maia (Maia Mailguard) which provides updated rules stats.  The program also provides an easy method to constantly train your bayes filters.  You might want to take a look at it. Best Robert Fitzpatrick wrote: On Thu, 2007-04-19 at 15:03 +0100, Chris Lear wrote:

Re: Fighting ham

Does this really mean that auto-learn is "out of balance"? My first guess is that this site probably relies only on SA to combat spam and does little at the MTA level to reject UBE mail. They may even run a catch-all account which would markedly increase his spam count if he is not rejecting for

Re: Fighting ham

Robert: It sounds like your problem rests with your bayes database. Some SA rules will fire on almost all mail, but a properly trained bayes filter should be able to reduce your scores to under your spam threshold. None of these scores rate out very aggressively so I am surprised that these are

Response

Mário Gamito wrote: > Hi, > > How can i know how many messages did already sa-learn processed ? You mean the total number of messages learned in the bayes database (includes sa-learn and autolearn)? sa-learn --dump magic Make sure you run as SA user to query the right database.

sa-update too quiet

Could future versions of sa-update please be a little more vocal? Like maybe "no new updates found | loaded xxx new updates | error xxx" Exit codes are not evident when simply typing sa-update on the command line... -- View this message in context: http://www.nabble.com/sa-update-too-quiet-

SA 3.1.8 with Guinevere and Groupwise integration

correct answers. Are there some changes I can do to SA to allow me to continue upgrading to the latest versions of SA, or am I going to top out at 3.1.7? Obviously I could give Missing_HB_SEP a score of 0, but I would prefer to keep all tests. Thanks Craig Canfield

Retry of inquiry about single-GIF leaks

and if so can I get them, and if so, how? If not, can anyone suggest resources that might help me write my own test(s)? Particularly of interest are routines that measure the source length or decoded area of an image. Thanks, Craig MacKenna www.animalhead.com P.S.: those of you interested in DN

spam with image/gif doesn't show a rule for "image"

line? If so, is this a known problem and is there a fix available? Thanks for your consideration, Craig MacKenna www.animalhead.com Los Gatos, CA

Re: Training Bayesian Filter

Do you have a size limit set? I.E. only messages less than xxx size will be scanned-and are these spam greater than xxx. >>> <[EMAIL PROTECTED]> 1/4/2007 4:14 AM >>> >[EMAIL PROTECTED] wrote: > Running spamassassin 3.0 and I'm invoking it through amavisd. When I > train the spamassassin using sa

Re: SA not firing on every email

with Guinevere, and Groupwise is my mail application. Any and all suggestions are welcome! >>> Rick Macdougall <[EMAIL PROTECTED]> 12/06/2006 5:01 PM >>> Craig wrote: > Yes I have asked this question previously, but with not as much detail. > > MY ENVIRONMEN

SA not firing on every email

Yes I have asked this question previously, but with not as much detail. MY ENVIRONMENT SA 3.1.7 running on Windows 2000 Using Bayes In the past 2 days my email server has received 14,973 email messages, Spamassassin has scanned 10,951 of those messages, and my users have received @ 250 spam

Re: Best Choice for Bayes filtering on SpamAssassin

es backend.. -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: forged spam emails from my own domain

] is just for a test. whitelist_from_rcvd [EMAIL PROTECTED] sourceforge.net Use this to supplement the whitelist_from addresses with a check against the Received headers. The first parameter is the address to whitelist, and the second is a string to match the relay’s rDNS. -- Craig smime.p7s

Re: How does some spam pass through?

Thanks for your quick reply Ok, I am new to this-and I am sure its a "no brainer" but "non-spam tagging" -I do not understand. If you could explain-or if its documented feel free to scold me-I would appreciate it. Craig >>> "Loren Wilton" <[EMAIL

How does some spam pass through?

Below are the results from a Spamassassin -D test of a message that was previously delivered this morning. How does something like this pass through- when I run the checks on the email after it is delivered the system clearly knows its spam. Thanks Craig X-Spam-Status: Yes, score=20.3

Re: Easyjet e-mail scoring very high

write a rule or two to offset the score. -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: Prevent scanning internal mail

procedures. Point well taken Gary. I didn't see much of anything on this subject in the Wiki. Neither did I. I've been googling a bit and the cornucopia of hits for +spamassassin is a mess. :-) -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: whitelisted where?

rt MailScanner I see "Read 755 hostnames from the phishing whitelist" As a follow-up: http://wiki.mailscanner.info/doku.php?id=maq:index # For whitelist: edit the spam.whitelist.rules from the rules directory following the format shown in the file. # -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: whitelisted where?

rt MailScanner I see "Read 755 hostnames from the phishing whitelist" thanks for any help [snippage] X-English-FSU-MailScanner-SpamCheck: not spam (whitelisted), I think you answered your own question here.. 'not spam (whitelisted)' is not something SA adds. Might wanna

Re: webg bug

me info on installing procmail ? http://www.google.com/search?q=installing+procmail -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: Prevent scanning internal mail

se to SpamAssassin. Once SA gets a mail, it'll be scanned. Is there a FAQ entry for this somewhere on the wiki? If not, there should be.. This is the 3rd or 5th time in the past couple days something similar has been asked.. -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: forged spam emails from my own domain

your MTA's documentation to find the recipe though. -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: This is so obvious...

case, yes. -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: tagging based on score level

be redirected/ quarantined for further inspection) can not parse the score directly. perldoc Mail::SpamAssassin::Conf Look for the TEMPLATE TAGS section, in particular the _STARS(*)_ tag. -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: Loads of 'xxx wrote:' Spam

sa-update, even though it's been out for months. I suggest we add a section to the next release announcements about it. Since its right off the home page and there is a tab for it labeled 'Docs', this would be an excellent place: http://spamassassin.apache.org/doc.html -- Crai

Re: Why won't imageinfo.pm work with SA 3.17? - access

Michael W Cocke wrote: I can't get the imgeinfo plugin to load with SA 3.17? I put this in v310.pre loadplugin Mail::SpamAssassin::Plugin::ImageInfo Try this: loadplugin Mail::SpamAssassin::Plugin::ImageInfo ImageInfo.pm -- Craig smime.p7s Description: S/MIME Cryptographic Signature

Re: How to use --allow-tell?

Craig Morrison wrote: Todd A. Jacobs wrote: I was perusing the man pages for spamd in spamassassin 3.1.7, and came across something that seems to imply that I can use spamc to tell spamd to update a sitewide bayesian database: -l, --allow-tell Allow learning and forgetting (to a local

Re: How to use --allow-tell?

r' and 'content-length' spamd headers. For spamc: spamc ... -L spam|ham|forget -C report|revoke ... -- Craig

Not sure what to do about this...

don't know what more to do. Sometimes the same message ends up in my junk filter, and the bayes score is in the header. I'm at a loss. Thanks, Craig The message got sent back to me, so i'm going to have to just paste what I can from the headers... To: <[EMAIL PROTECTED]>

Re: Who wants my spam - seriously!

just your general nature, I wouldn't trust anything you published for consumption. -- Craig

Re: saupdate

Jack Gostl wrote: - Original Message - From: "Craig Morrison" <[EMAIL PROTECTED]> To: "Jack Gostl" <[EMAIL PROTECTED]> Cc: "spamassassin" Sent: Thursday, November 23, 2006 2:40 PM Subject: Re: saupdate Please keep replies on the list fo

Re: A false positive...

Michael Scheidell wrote: -Original Message- From: Craig Morrison [mailto:[EMAIL PROTECTED] Sent: Thursday, November 23, 2006 12:53 PM To: users@spamassassin.apache.org Subject: Re: A false positive... TZ format you should consider sa-learn'ing the messages as ham. On your SA

Re: saupdate

actual kill and restart? That is highly dependent upon how spamd is invoked. -- Craig Thanks for the response. It was invoked through /etc/inittab with the command: spam:2:once:/usr/opt/perl5/bin/spamd -m20 -d -A 10.165.1.3,127.0.0.1 -i Which means no automatic respawning. So does spamd respond

Re: saupdate

o I need an actual kill and restart? That is highly dependent upon how spamd is invoked. -- Craig

Re: A false positive...

as ham. On your SA setup these messages are hitting BAYES_95 which is adding 3 points to their score. -- Craig

Re: ****Re: blarsbl

ow I've asked Google why they don't have a logo change for > > Memorial Day. Why do they choose to do logos for other non-international > > holidays, but nothing for Veterans? > > > > Maybe they forgot who made that choice possible. > > I would think a phone call to your account manager with an appropriate > link to the guys website would be enough to get the problem solved. > > http://www.blars.org/blars06c.jpg > > A copy of your past quarter bill from ATT would help to put the point > into perspective. by appearances, he doesn't seem much like that AT&T type - that picture pretty much sums it up. ;-) Craig

Re: Are other people seeing higher Load Averages after moving to 3.1.7?

that we've been getting hit *really* hard. After deciding that the load average was likely due to actual spam load, I implemented a couple of RBLs at the MTA level. My load is now back down between 1 and 3, and messages making it through to SA are now back to around 200,000 per day.

Re: Mail server performance problems. Possible SA slow down?

this is very likely not what is causing your problem. But it sometimes pays to consider the non-obvious. Your problem may be caused by something relatively unrelated to (but affected by) mail. Craig Quoting Matias Lopez Bergero <[EMAIL PROTECTED]>: Hello! I was very happy using SpamAss

Re: Non-blocklisted embedded URLs are getting hits on URIBL_AB_SURBL and URIBL_PH_SURBL in SpamAssassin 3.1.5

, and switch to something else for the SpamAssassin server. cheers, Don Craig Jeff Chan wrote: On Wednesday, September 27, 2006, 11:17:59 PM, Donald Craig wrote: And Theo Van Dinter pointed out: You're not by chance using the opendns.{com,org} folks for DNS, are you?

Re: Non-blocklisted embedded URLs are getting hits on URIBL_AB_SURBL and URIBL_PH_SURBL in SpamAssassin 3.1.5

And Theo Van Dinter pointed out: You're not by chance using the opendns.{com,org} folks for DNS, are you? Of course. I'm an idiot. I switched to OpenDNS a couple of weeks back. Time to return from whence I came. Thank you,

Non-blocklisted embedded URLs are getting hits on URIBL_AB_SURBL and URIBL_PH_SURBL in SpamAssassin 3.1.5

with lookups in http://www.rulesemporium.com/cgi-bin/uribl.cgi This is SpamAssassin 3.1.5, all was fine in 3.1.2. For now I have set both those tests to 0.00. Don Craig

Re: .GIF images without .gif in filename and empty messages

rule would be failing. Can you post one as a txt message Sure: http://pastebin.com/769187 Note that I am aware that I am running an older version of SA (3.0.x). Unfortunately, upgrading is not feasible at this time. Thanks for any help or advice you can give! Craig

.GIF images without .gif in filename and empty messages

ago, I was getting flooded with these, and I solved the problem by using the SARE_HTML_NO_BODY rule from 70_sare_html4.cf. However, this rule does not seem to hit on this recent crop of empty messages. I have no idea why. Is anyone else seeing these, and more importantly, does anyone have a rule for them? Craig

Slow scan time

http://www3.2cah.com/spam/sa_slowhtml.txt I got inundated with messages similar to this today. The average scan time here for these is 25+ seconds when the box is under _low_ load. My guess is that it has to do with the number of URLs. Any thoughts on this? -- Craig

Re: SPF and envelope senders

d whatever is calling SpamAssassin (MailScanner) should be at least faking it in the message it hands SA. Daryl http://wiki.apache.org/spamassassin/EnvelopeSenderInReceived Is also useful for the bag of tricks too.. -- Craig

Re: Always add report headers

add_header all Status _YESNO_, hits=_HITS_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_ report_safe1 The point is, who or what is calling spamassassin.. You have to have something in the mix of things that is screwing with your headers. Even with report_safe 0, SA adds the X-Spam* headers.. -- Craig

Re: What changes would you make to stop spam? - United Nations Paper

r better yet, use mockingbirds instead of pigeons, I think this new internet architecture will stop the spammers in their tracks. No, really, it will. Either that or get them shat on, which would be a messy affair. :-D /me goes back to lurking... -- Craig

RE: Help for beginner

On Tue, 2006-07-25 at 16:02 -0600, Nels Lindquist wrote: > On 25 Jul 2006 at 14:17, Craig White wrote: > > > > > http://www.mailscanner.info/linux.html > > > > This is the information page for installing MailScanner on RPM based > > Linux system. > >

RE: Help for beginner

Cabell > > -----Original Message- > From: Craig White [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 25, 2006 12:00 PM > To: users@spamassassin.apache.org > Subject: Re: Help for beginner > > On Tue, 2006-07-25 at 14:16 -0400, Theo Van Dinter wrote: > > FWIW, Dale&#x

Re: Help for beginner

ds a lot of requisite perl packages and finally mailscanner itself into rpm files and installs the rpm's (or not if you already have newer versions of the rpm's installed already). It's a sophisticated, comprehensive approach to installing a whole lot of stuff and doing it the way the system is configured (via rpm). Craig

Re: Network tests slowing down spamassassin

other lists locally ? Commercial agreements also are ok. Are you running a local caching nameserver? For my group that seems to help a great deal. -- Craig

RE: sudden deluge of university spams

mple 555.555., 555-555-, 555 555 , 555- 555-, (555)555., etc etc. So you have to write your rules to take that into account. Craig

Re: Its nice when spammers declare their intentions...

efraud me. Maybe I won't bother > playing their game. > > Loren Heh, got this one yesterday: From: "Lazarus Dennis" To: <[EMAIL PROTECTED]> Subject: bastard And thought, why's he calling me a bastard? Maybe he knows his crap isn't going to get through.

Re: Loading Rules - Possible Memory Issue

ago. FWIW I have had real success using FBSD-6.0-RELEASE, SA from CPAN and spamass-milter and sendmail from the ports collection. Just lately I've moved away from the milter, towards a procmail-based SA setup for better configurability. Ping me if you want more details. C. - -- Craig McLea

Re: For those who are considering a Barracuda Network Device server

. > Some humor was needed.) You mean calling GPL License 'nonsense' wasn't your best effort of the day? You hurled similar bombshells on other lists? Craig

Re: SA 3.1.3 Binary RPMs for FC4?

> Don't know about 3.1.3, but Axel hosts 3.1.2 at atrpms.net: http://atrpms.net/dist/fc4/spamassassin/ instructions on setting up yum to use the atrpms repo can also be found on the site: http://atrpms.net/install.html C. - -- Craig McLeanhttp://fukka.co.uk [EMAIL PROTECTE

Auto delete if >= X on per user basis

Hello all, I've had a good look around but am unable to find an answer to this exact scenario. I've had a bash @ using global settings on the user_pref's file, but didn't appear to work, so figured I'd ask. If you are aware of a reference to this that I've missed, I apologise. Pretty much al

Re: SPAM: Re: Re[2]: Hiring for Spam Assassin Troubleshooting

supported as vendor-supported. This is not being thorough, for what seems like an urgent issue. --Sandy . FREE emoticons for your email! click Here! <http://www.incredimail.com/index.asp?id=98432> -- Craig

RE: 3.1.2-Windows, exit codes broken?

e message according to the result code is too good to give up :) Thanks, Craig

Re: Lots of this kind of spam getting through

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Craig McLean wrote: > > Razor and multi.uribl.com RBL for the first 3 Oops, and multi.surbl.org... C. - -- Craig McLeanhttp://fukka.co.uk [EMAIL PROTECTED] Where the fun never starts Powered by FreeBSD, and GIN!

Re: Lots of this kind of spam getting through

rect plugin and a rule which gives any geocities URL a healthy dose of points (a la http://fukka.co.uk/sa-rules/local/misc.cf) for the second 2. XBL and spamcop (no flames please) for all, plus make sure you get your bayes trained on this type of spam to drive the score up there, too. Mine doesn&#

RE: 3.1.2-Windows, exit codes broken?

>> 3.1.2 is not setting a non-zero exit code when a message is classified >> as spam (spamassassin.bat -e < mailfilein > mailfileout) Known >> issue/bug? >There is something about exit codes in the changelog. I had checked the changelog and didn't see anything obviously relevant. Craig

3.1.2-Windows, exit codes broken?

Windows Server 2003 SP1 ActivePerl 5.8.8.817 Upgrade from a working 3.1.1 installation 3.1.2 is not setting a non-zero exit code when a message is classified as spam (spamassassin.bat -e < mailfilein > mailfileout) Known issue/bug? Craig

Re: sa-learn script

> i've come up with this > > #!/bin/bash > > for i in $( ls /home/MYDOMAIN); do > sa-learn --spam /home/MYDOMAIN/i$/mail/Junk > done > > If i set it to run as a cron job once a week, Will that do what I want it > to do? > Almost certainly no

Re: SA Milter problem

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chan, Wilson wrote: > Any else having this problem with spamass-milter with spamassassin? Nope. (ask a vague question...) C. - -- Craig McLeanhttp://fukka.co.uk [EMAIL PROTECTED] Where the fun never starts Powered

Re: AWL whitelist & CGPSA

ad, Given: > -- > 4.8 FROM_KING_COM From known spammer 'king.com' and: > [EMAIL PROTECTED] I'd say that the FROM_KING_COM rule might be misfiring, and for 4.8 points too! C. - -- Craig McLeanhttp://fukka.co.uk [EMAIL PROTECTED] Where the fun never

Re: Proposal: First URI black list, how about email address black lists?

ned... Thanks, C. [1] http://fukka.co.uk/sa-rules/local/PhoneBL.pm [2] http://fukka.co.uk/sa-rules/local/phone.cf [3] http://fukka.co.uk/sa-rules/local/evilnumbers.db - -- Craig McLeanhttp://fukka.co.uk [EMAIL PROTECTED] Where the fun never starts Powered by FreeBSD, and GIN!

Re: Delete spam or move to a folder?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will Nordmeyer wrote: > Craig, > > How do you have procmail set up to deliver to the spam vs. likely spam > folders? Use the "X-Spam-Level" marker. Anything with < 10 stars and a "X-Spam-Status" of "Yes"

Re: Filtering windows-1252 charset

#x27;t >> even have to scan them. >> >> > > Which brings up the subject... How legitimate is email sent as > windows-1252? I have a bunch of stuff from paypal and ebay, and much more, which include this charset. I'm not attempting to answer the philosophical question,

Re: Delete spam or move to a folder?

spam into different folders. This means we can quickly see misfires either way, and has the added benefit over milter-level bounces that bayes gets to see everything too. C. - -- Craig McLeanhttp://fukka.co.uk [EMAIL PROTECTED] Where the fun never starts Powered

Re: Comment Crashes

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David B Funk wrote: > On Tue, 16 May 2006, Craig McLean wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> [snipped] >> >> I use this style to catch a couple of common text formatting oddities

Re: Comment Crashes

_DODGY_DIVS m'(?:\s{0,}?[\$%\w]\s{0,}?.{1,40}?){30}'i Stick with rawbody, you don't need full. Also, you'll probably want case-insensitive, and \s{0,}? to match zero or more whitespace. C. - -- Craig McLeanhttp://fukka.co.uk [EMAIL PROTECTED] Where the fun ne

Re: Comment Crashes

27;i describe T_4_DODGY_DIVS Testing... score T_4_DODGY_DIVS0.01 (note, the regexp should be on one line with no spaces) That will catch it. You'd have to see what it FPs on though. You could also get it to pick on single alphas between html tags with a little tweaking. C. - -- Craig M

Re: RULE using %

XT_LOANBODY: Loan at a certain rate. 2.0 TVD_DEAR_HOMEOWNER BODY: TVD_DEAR_HOMEOWNER 1.5 CM_CREDIT_SCOREBODY: Your score doesn't matter 1.0 CM_IMMEDIATE_CASH BODY: Immediate cash 1.0 CM_DEAR_HOMEOWNER BODY: Dear Homeowner Plus BAYES_99 for 4 points, and

Re: RULE using %

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Craig McLean wrote: > Jean-Paul Natola wrote: >>> Hi all >>> >>> These homeowner spasm are still getting through ( a lot less though since >>> adding the KAM_GEO_STRING2 rule. >>> >>> I do NOT

Re: RULE using %

ozen "%" characters. If you are going to match, try doing it with patterns, like (off the top of my head, and untested!) /(?:£\$}\s?\d+(?:[\.,]\d+)?.{1,20}\d.{1,10}%/ might attempt to match: "$250,000 loan at 6.35%" "£ 1 for you just 6%!" C. - -- Craig McLean

  1   2   3   >