Re: Describing AWL

2011-03-07 Thread Dennis German
works at http://www.real-world-systems.com/mail/sa-heatu.html#backgrnd which adds aging so as to loose old entries otherwise kept forever. I also have some thoughts about discarding hammers at the end of that document. Any feedback on this would be welcome. Dennis German

Re: Supporting 3.3 and 3.2?

2011-03-04 Thread Dennis German
On 3/3/11 10:09 PM, Karsten Bräckelmann wrote: On Fri, 2011-03-04 at 03:36 +0100, Karsten Bräckelmann wrote: On Thu, 2011-03-03 at 15:52 -1000, Warren Togami Jr. wrote: Could we please make an official project statement that 3.2.x is unsupported and people should really update to 3.3.x? That

Re: low score for ($1.5Million)

2011-03-04 Thread Dennis German
On 3/3/11 8:06 PM, Karsten Bräckelmann wrote: On Fri, 2011-03-04 at 01:53 +0100, Mikael Syska wrote: I get the following hits: Content analysis details: (19.1 points, 5.0 required) Note though, that your score is on SA 3.3.x, while the OP uses SA 3.2.x. Yes, I can tell this from the scores.

low score for ($1.5Million)

2011-03-03 Thread Dennis German
Can someone comment on the low score assigned to the email located at http://www.cccu.us/hundredThousand.txt X-Spam-testscores: AWL=1.086,BAYES_00=-2.599,HTML_MESSAGE=0.001, MILLION_USD=1.528 Is my bayes broken?

Re: Collecting IP reputation data from many people

2010-10-25 Thread Dennis German
On Oct 23, 2010, at 12:31 PM, Royce Williams wrote: On Sat, Oct 23, 2010 at 7:31 AM, Per Jessen p...@computer.org wrote: Royce Williams wrote: On Fri, Oct 22, 2010 at 5:19 AM, Michael Scheidell michael.scheid...@secnap.com wrote: On 10/21/10 8:50 PM, dar...@chaosreigns.com wrote: I'd

rule for To: undisclosed-recipients:;

2010-10-24 Thread Dennis German
Is there? should there be a rule for a header like: To: undisclosed-recipients:;

Spam US$350,000 not tripped

2010-10-19 Thread Dennis German
I am surprised this plain text spam did not trip for US$350,000 sa 3.2.4 http://www.Real-World-Systems.com/mail/spam.un

Re: Spam US$350,000 not tripped

2010-10-19 Thread Dennis German
On Oct 19, 2010, at 5:56 PM, Karsten Bräckelmann wrote: On Tue, 2010-10-19 at 22:41 +0100, Ned Slider wrote: On 19/10/10 22:34, Dennis German wrote: I am surprised this plain text spam did not trip for US$350,000 sa 3.2.4 Uhm, a generic amount of money on it's own is not a sign of spam

spamc sometimes complains MISSING_MID sometimes not with same message

2010-10-09 Thread Dennis German
pts rule name $1.oo |grep -v \-\-\-\- where user_prefs.rptonly contains add_header all report _REPORT_ add_header all testscores _TESTSSCORES(,)_ I run the script multiple times and get unpredictable results regarding the appearance of MISSING_MID. Thank you, Dennis German Hello world

Re: spamc sometimes complains MISSING_MID ... NOT...

2010-10-09 Thread Dennis German
There is at least one problem with my script, NOT spamassassin. I did not expect the results to be in different order. The grep -A14 'pts rule name' may not display all the errors. Sorry 'bout that. Dennis

spamc sometimes complains MISSING_MID sometimes not with same message

2010-10-08 Thread Dennis German
complaints of BLs and before HTML issues. Has anyone seen this behavior? Thank you, Dennis German Hello world, goodnight moon

Re: Expiring Bayes; aka bayes files are BIG

2010-09-15 Thread Dennis German
and the output will be significantly smaller. I don't know of any program, but if there is interest I might write one. Dennis German

Re: Expiring Bayes; aka bayes files stay BIG

2010-09-15 Thread Dennis German
On Sep 15, 2010, at 1:42 PM, RW wrote: On Wed, 15 Sep 2010 11:18:20 -0400 Dennis German dger...@real-world-systems.com wrote: On Aug 26, 2010, at 10:11 AM, Grant Peel wrote: ... ~/.spamassassin/bayes* files had grown to 1.5 GB I have put: use_bayes 0 bayes_auto_learn0

spam caught, now how to catch spammer

2010-09-05 Thread Dennis German
In the last several weeks I have been receiving a lot of spam with email addresses of the form: learningmadeeasy.???...@??.yourseemlost.net learningmadeeasy.???...@??.hisoftenusing.net learningmadeeasy.???...@??.wheatdrinkcontrol.net learningmadeeasy....@??.actbookfelt.net

AWL demoted??

2010-08-10 Thread Dennis German
on SpamAssassin 3.2.4 (2008-01-01) I request they upgrade last year and they weren't interested. I request this last week and they are still evaluating it. Thank you, Dennis German

Re: SA: lottery message scored hammy by bayes

2009-08-27 Thread Dennis German
to see the X-Spam-report (which is Not included in ham !) My userprefs is always available at http:/www.Real-World-Systems.com/mail/user_prefs.html I have not manually trained bayes. Thanks John Hardin wrote: On Tue, 25 Aug 2009, Dennis German wrote: email with this content: CONGRATULATION

lottery message scored hammy by bayes

2009-08-25 Thread Dennis German
email with this content: CONGRATULATION YOUR EMAIL ADDRESS HAS WON YOU THE 2010 FIFA WORLDCUP LOTTER= Y OPEN THE ATTACHMENT AND VIEW THE PROFILE OF YOUR WINNING FUND=2C ALSO CON= TACT YOUR CLAIM AGENT received these scores X-Spam-testscores:

sa: lottery message scored hammy by bayes:salearn --dump magin

2009-08-25 Thread Dennis German
sa-learn --dump magic config: could not find site rules directory 0.000 0 3 0 non-token data: bayes db version 0.000 0 262297 0 non-token data: nspam 0.000 0 24621 0 non-token data: nham 0.000 0 142776

blacklisting a forger

2009-08-01 Thread Dennis German
I have received many emails in the last hour which were undeliverable, NOT sent by me. It seems someone is forging usernames in my domain Real-World-Systems.com as the from: and the return-path: . Received-From-MTA: dns;triband-mum-59.184.51.13.mtnl.net.in I have sent a message to

Re: Email from myself to myself

2009-05-28 Thread Dennis German
Do you see any x-Spam headers in the emails ? Is this on a shared server (cPanel)? hateSpam wrote: I have spamassassin installed in my server but I have never had an email wht [SPAM] in the subject. I get lots of spam. I think it is not checking properly. anybody know how to solve the

Re: AWL - lets change the name to HEAT with ln

2009-05-28 Thread Dennis German
How 'bout a link from HEAT ( Heuristic Email Address Tracking ) Matus UHLAR - fantomas wrote: On Mittwoch 27 Mai 2009 LuKreme wroteNo, you are confused. This is common, lots of people are confused about this. This is why many people think the name needs to be changed to Averaged

Re: SA: what do SPF_SOFTFAIL SPF_NEUTRAL mean++ThankYou

2009-05-18 Thread Dennis German
Sahil Tandon wrote: On Sun, 17 May 2009, Dennis German wrote: Could someone discuss or add a wiki page about? SPF_SOFTFAIL http://www.openspf.org/RFC_4408#op-result-softfail SPF_NEUTRAL http://www.openspf.org/RFC_4408#op-result-neutral

SA: what do SPF_SOFTFAIL SPF_NEUTRAL mean

2009-05-17 Thread Dennis German
Could someone discuss or add a wiki page about? SPF_SOFTFAIL SPF_NEUTRAL

SA: user_prefs contains required 4.97,

2009-04-03 Thread Dennis German
I have had required_score 3.97 since 4/1/09 but spamassassin email says X-Spam-Report: ... Content analysis details: (18.4 points, 4.0 required) also MISSING_DATE 3.0 should be 2.97 and MISSING_MID 3.0 should be 2.97 I had these values several days ago! Any

spamassassin: Determining last sa-update

2009-03-29 Thread Dennis German
I believe this is another cPanel issue. Attempting to run sa-update displays: mkdir /etc/mail: Permission denied at /usr/bin/sa-update line 1226 How can I determine that last time sa-update was run?

SA: Determining last sa-update

2009-03-29 Thread Dennis German
I believe this is another cPanel issue. Attempting to run sa-update displays: mkdir /etc/mail: Permission denied at /usr/bin/sa-update line 1226 How can I determine that last time sa-update was run?

SA: Determining last sa-update

2009-03-29 Thread Dennis German
I believe this is another cPanel issue. Attempting to run sa-update displays: mkdir /etc/mail: Permission denied at /usr/bin/sa-update line 1226 How can I determine that last time sa-update was run?

sa-update when was last run?

2009-03-29 Thread Dennis German
I believe this is another cPanel issue. Attempting to run sa-update displays: mkdir /etc/mail: Permission denied at /usr/bin/sa-update line 1226 How can I determine that last time sa-update was run?

spam assassin: default scores for URIBL_.._SURBL seem low to me

2009-03-24 Thread Dennis German
? Thanks, Dennis German

spamassasin: sa-learn --dump magic intrepretation

2009-03-16 Thread Dennis German
Is there a document regarding the interpretation of sa-learn --dump magic config: could not find site rules directory 0.000 03 0 non-token data: bayes db version 0.000 0 261451 0 non-token data: nspam 0.000 018530

Re: spamassasin: sa-learn --dump magic interpretation good/bad/other?

2009-03-16 Thread Dennis German
0) Michael, thanks 1) what are the various zero columns?? for example in 0.000 0 3 0 non-token data: bayes db version 2) Is this good? not too good? bad? trouble? On Mar 16, 2009, at 14:03, Michael Scheidell wrote: Is there a document regarding the interpretation

spamassassin: hosting service/cpanel problems user_prefs partially ignored -updated-

2009-03-13 Thread Dennis German
Updated, Thought you all might be interested ( see updates) My intention is to observe false negatives (i.e. spam seen as ham) and increase the score of one or more of the tests in an effort to cause additional spam to be detected. I am using a hosting service where spamassassin

spamassassin: attempt to process a single message fails at PerMsgStatus.pm line 164.

2009-03-13 Thread Dennis German
Attempting to see how spamassassin would score a message I tried spamassassin lottery.msg [32179] warn: config: could not find site rules directory check: no loaded plugin implements 'check_main': cannot scan! at

spamassassin: auto-whitelist : display/modify ?

2009-03-10 Thread Dennis German
Is there a utility to display auto-whitelist ? Modify entries? remove entries?