RE: removing old/stale rules

2010-06-11 Thread Jean-Paul Natola
cheidell [scheid...@secnap.net] Sent: Friday, June 11, 2010 3:03 PM To: users@spamassassin.apache.org Subject: Re: removing old/stale rules On 6/11/10 1:00 PM, Jean-Paul Natola wrote: > > Hi all, > > Since my upgrade to 3.3.1, I see when running, sa –lint –D that > there’s a bunch of

removing old/stale rules

2010-06-11 Thread Jean-Paul Natola
Hi all, Since my upgrade to 3.3.1, I see when running, sa -lint -D that there's a bunch of stuff, I assume are no longer used? Like the entry below Jun 11 12:57:36.792 [18565] dbg: config: warning: score set for non-existent rule AXB_HELO_LH_HOME Is there a way to just start clean? rat

RE: remmonded max children settings

2010-05-21 Thread Jean-Paul Natola
On Fri, 21 May 2010, Bowie Bailey wrote: > Jean-Paul Natola wrote: > > Hi all, > > > > I am constantly getting the server reached --max children setting entries > > in my log > > > > I started with 10 max children and have been raising it by 2. I am

RE: remmonded max children settings

2010-05-21 Thread Jean-Paul Natola
>Just accept the fact that mail gets into a queue when using processes like >SA. If outgoing spam is not a concern, set your system so that outbound >mail is not passed thru SA. I actually only use the exim/sa as incoming filter, I do not send through it. The reason I was trying to tweak it, ma

remmonded max children settings

2010-05-21 Thread Jean-Paul Natola
Hi all, I am constantly getting the server reached --max children setting entries in my log I started with 10 max children and have been raising it by 2. I am now at 40 , but still getting the messages (though not as often) how high can I go given these specs: sa 3.3 on freebsd , hardwar

RE: Spamassasin as a gateway filter for Exchange

2010-05-20 Thread Jean-Paul Natola
-Original Message- > I think it would be easier to just accept only emails for your domain(s) at > your mta (postfix or exim), then enable the antispam filter on exchange and > configure it drop (not reject / bounce) any messages to invalid addresses. That's a very bad idea-- legitima

RE: Spamassasin as a gateway filter for Exchange

2010-05-20 Thread Jean-Paul Natola
> You can use Postfix's probing (or Exim's callout) to query the Exchange 'server' provided it is set up to reject invalid recipients. As pointed out if this is not done Exchange will happily take any old rubbish and bounce it some time later. Alternatively have the MTA make an LDAP callout to AD.

RE: Spamassasin as a gateway filter for Exchange

2010-05-19 Thread Jean-Paul Natola
>The only real problem, validating recipients at the front MX, based on >the data in the backend Exchange servers. I think it would be easier to just accept only emails for your domain(s) at your mta (postfix or exim), then enable the antispam filter on exchange and configure it drop (not

RE: Spamassasin as a gateway filter for Exchange

2010-05-19 Thread Jean-Paul Natola
> Can anybody point me in the diretion of a document or place where I could find information about setting up a >solo Linux Debian server running spamassassin as a gateway spam filter that sends the mail along to an exchange server? I have that exact setup , but I have it running on Freeb

RE: applying patch

2010-05-18 Thread Jean-Paul Natola
I setup this box YEARS ago, and only updated the versions of sa exim and clamav, (this only filters my mail before it hands it off to my exchange server. But lately its been timing out a lot, and I read there's a patch to address this issue Freebsd exim clam and sa sw config 3.3 -O

applying patch

2010-05-18 Thread Jean-Paul Natola
How do apply an SA patch, Running SA on FreeeBSD thx Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 136 Fax: 212-941-5563 Mailto: jnat...@familycareintl.org

RE: accepted connection from DNSBL's

2010-04-13 Thread Jean-Paul Natola
-Original Message- From: Jason Bertoch [mailto:ja...@i6ix.com] Sent: Tuesday, April 13, 2010 2:53 PM To: users@spamassassin.apache.org Subject: Re: accepted connection from DNSBL's On 2010/04/13 2:38 PM, Jean-Paul Natola wrote: > Well just to confirm I have taken the IP a

RE: accepted connection from DNSBL's

2010-04-13 Thread Jean-Paul Natola
-Original Message- From: Jason Bertoch [mailto:ja...@i6ix.com] Sent: Tuesday, April 13, 2010 2:27 PM To: users@spamassassin.apache.org Subject: Re: accepted connection from DNSBL's On 2010/04/13 2:11 PM, Jean-Paul Natola wrote: > > ... I think my blacklists aren't worki

RE: accepted connection from DNSBL's

2010-04-13 Thread Jean-Paul Natola
From: Jean-Paul Natola [mailto:jnat...@familycareintl.org] Sent: Tuesday, April 13, 2010 2:05 PM To: 'users@spamassassin.apache.org' Subject: accepted connection from DNSBL's Hi all , I recently upgraded to sa-3.3.0  and I think my bl

accepted connection from DNSBL's

2010-04-13 Thread Jean-Paul Natola
Hi all , I recently upgraded to sa-3.3.0 and I think my blacklists aren't working, I'm getting nailed from servers around the globe that are on the DNSBL list, I did run sa-update after the upgrade How can I confirm that the BL rules are working

RE: unclosed if error

2009-06-22 Thread Jean-Paul Natola
At 08:32 22-06-2009, Jean-Paul Natola wrote: >I copied this rule from someone here on the list > >header __CTYPE_MULTIPART_ANY Content-Type =~ /multipart\/\w/i >ifplugin Mail::SpamAssassin::Plugin::MIMEHeader >mimeheader __ANY_TEXT_ATTACH Content-Type =~ /te

unclosed if error

2009-06-22 Thread Jean-Paul Natola
Can someone help me out here I copied this rule from someone here on the list header __CTYPE_MULTIPART_ANY Content-Type =~ /multipart\/\w/i ifplugin Mail::SpamAssassin::Plugin::MIMEHeader mimeheader __ANY_TEXT_ATTACH Content-Type =~ /text\/\w+/i meta MIME_NO_TEXT (__CTYPE_MULTIPART_A

RE: word doc spam

2009-06-02 Thread Jean-Paul Natola
ue, 2 Jun 2009, Jean-Paul Natola wrote: >> >>> Is there a rule to catch these messages with no body and a 550 bite >>> word attachment? >> >> Can you post a sample somewhere for us? > > Hi, > > I assume he means the recent surge in "rtf" at

RE: word doc spam

2009-06-02 Thread Jean-Paul Natola
Correction they are rtf not doc ftp://ftp.fcimail.org/IT/SA_Sample/shambling.rtf -Original Message- From: John Hardin [mailto:jhar...@impsec.org] Sent: Tuesday, June 02, 2009 9:47 AM To: Jean-Paul Natola Cc: users@spamassassin.apache.org Subject: Re: word doc spam On Tue, 2 Jun

word doc spam

2009-06-02 Thread Jean-Paul Natola
Hi all, Is there a rule to catch these messages with no body and a 550 bite word attachment? thx The only rule its triggering is the RCVD_IN_SORBS_DUL RBL: SORBS: sent directly from dynamic IP address

RE: Almost no score

2009-05-01 Thread Jean-Paul Natola
On Thu, 2009-04-30 at 09:23 -0400, Jean-Paul Natola wrote: > Hi all, > > I just upgraded to 3.2.5 ran sa-update and I got this message with only one > rule tripped > > I'm putting a link to the message as well as the headers > > If anyone can shed some light

RE: Almost no score

2009-04-30 Thread Jean-Paul Natola
On 30-Apr-2009, at 09:53, Jean-Paul Natola wrote: > Where did you get the KB_RATWARE rules from? Karsten Bräkelmann (guent...@rudersport.de) >> You can find KB_RATWARE_BOUNDARY in my sandbox, where it's still >> badly >> named KB_RATWARE_OUTLOOK_08. I need to re

RE: Almost no score

2009-04-30 Thread Jean-Paul Natola
-Original Message- From: Evan Platt [mailto:e...@espphotography.com] Sent: Thursday, April 30, 2009 12:50 PM To: users@spamassassin.apache.org Subject: Re: Almost no score At 09:33 AM 4/30/2009, you wrote: >>mimeheader DSL4DIG_PNG Content-Type =~ /name\=\"DSL[0-9]{4}\.png\"/ > >I'd be

RE: Almost no score

2009-04-30 Thread Jean-Paul Natola
-Original Message- From: LuKreme [mailto:krem...@kreme.com] Sent: Thursday, April 30, 2009 10:40 AM To: users@spamassassin.apache.org Subject: Re: Almost no score On 30-Apr-2009, at 07:23, Jean-Paul Natola wrote: > Hi all, > > I just upgraded to 3.2.5 ran sa-update and I

Almost no score

2009-04-30 Thread Jean-Paul Natola
Hi all, I just upgraded to 3.2.5 ran sa-update and I got this message with only one rule tripped I'm putting a link to the message as well as the headers If anyone can shed some light here , I would appreciate it. ftp://ftp.fcimail.org/IT/SA/headers.txt ftp://ftp.fcimail.org/IT/SA/Would%20you

RE: 3.2.5 upgrade - getting clobbered

2009-04-27 Thread Jean-Paul Natola
Thanks that did the trick- removed ALL Perl mods and reinstalled exim and sa Greatly appreciated -Original Message- From: Jean-Paul Natola [mailto:jnat...@familycareintl.org] Sent: Monday, April 27, 2009 12:20 PM To: Mark Martinec; users@spamassassin.apache.org Subject: RE: 3.2.5

RE: 3.2.5 upgrade - getting clobbered

2009-04-27 Thread Jean-Paul Natola
I tried to fetchindex but it failed with make: don't know how to make fetchindex. -Original Message- From: Mark Martinec [mailto:mark.martinec...@ijs.si] Sent: Friday, April 24, 2009 12:34 PM To: users@spamassassin.apache.org Subject: Re: 3.2.5 upgrade - getting clobbered Possibly

RE: 3.2.5 upgrade - getting clobbered

2009-04-24 Thread Jean-Paul Natola
UHLAR - fantomas [mailto:uh...@fantomas.sk] Sent: Friday, April 24, 2009 10:49 AM To: users@spamassassin.apache.org Subject: Re: 3.2.5 upgrade - getting clobbered > On 24.04.09 09:56, Jean-Paul Natola wrote: > > Hi all I just upgraded to 3.2.5 and I went from receiving about 2 spams a >

RE: 3.2.5 upgrade - getting clobbered

2009-04-24 Thread Jean-Paul Natola
Subject: Re: 3.2.5 upgrade - getting clobbered > On 24.04.09 09:56, Jean-Paul Natola wrote: > > Hi all I just upgraded to 3.2.5 and I went from receiving about 2 spams a > > day to about 15 > > > > Did I over look something? > > >Did you configure your module

RE: 3.2.5 upgrade - getting clobbered

2009-04-24 Thread Jean-Paul Natola
On 24.04.09 09:56, Jean-Paul Natola wrote: > Hi all I just upgraded to 3.2.5 and I went from receiving about 2 spams a > day to about 15 > > Did I over look something? >Did you configure your modules and configs the same way as before? >Did you sa-update (and reload spamd)

3.2.5 upgrade - getting clobbered

2009-04-24 Thread Jean-Paul Natola
Hi all I just upgraded to 3.2.5 and I went from receiving about 2 spams a day to about 15 Did I over look something? Jean-Paul

spamd -u

2008-11-07 Thread Jean-Paul Natola
I'm sorry all, where / how do I add the -u on spamd? Thanks,

RE: Spamassassin+amavis

2008-10-23 Thread Jean-Paul Natola
maybe if you block messages with no rdns record? if its from infected pc's there shouldnt be a record? From: Luis Croker [mailto:[EMAIL PROTECTED] Sent: Thu 10/23/2008 19:56 To: users@spamassassin.apache.org Subject: Spamassassin+amavis Hi...

RE: sa-update

2008-10-23 Thread Jean-Paul Natola
ctory named spamassassin to check where they are. Regards. On Thu, 2008-10-23 at 19:18 -0400, Jean-Paul Natola wrote: Hi all, I've been out of the loop for a couple of months do a rollout, so I came back to my SA today as I have seen A LOT more spam comi

sa-update

2008-10-23 Thread Jean-Paul Natola
Hi all, I've been out of the loop for a couple of months do a rollout, so I came back to my SA today as I have seen A LOT more spam coming in than normal, I upgraded to 3.2.5 today, and ran sa-update but , i dont seem to see any new rules, and i;m getting clobbered with spam. Has something

RE: Blacklist Mining Project - Project Tarbaby

2008-08-25 Thread Jean-Paul Natola
Hi everyone, I'm launching a free spam reduction service to help build up my blacklists. It involves adding a fake high numbered MX record to your existing MX list that points to one of our servers. We always return a 451 error but we have a very good way of detecting virus infected spam bots

OT: listed

2008-07-23 Thread Jean-Paul Natola
Hi all, We have been having problems for a couple of days emailing some our insurance providers- I then emailed them from a hotmail account and it went through- how can I see if we've been blacklisted 68.167.21.154 Thanks, jp

RE: Connection timed out

2008-05-01 Thread Jean-Paul Natola
-Original Message- From: Ross Boylan [mailto:[EMAIL PROTECTED] Sent: Thursday, May 01, 2008 3:33 PM To: Jean-Paul Natola Cc: [EMAIL PROTECTED]; SpamAssassin Subject: RE: Connection timed out On Thu, 2008-05-01 at 13:54 -0400, Jean-Paul Natola wrote: > OPTIONS="--create-pre

RE: Connection timed out

2008-05-01 Thread Jean-Paul Natola
OPTIONS="--create-prefs --max-children 5 --helper-home-dir \ --username=mail --socketpath=/var/run/spamd/socket" >I'm running on a Pentium 4 with hyperthreading, which appears as 2 CPU's >to the OSs. There's really only 1 CPU. I wonder if that could have >something to do with the troubl

RE: netstat info-blacklist IP

2008-04-29 Thread Jean-Paul Natola
How do I go about shunning the IP - via Exim or via SA? And where if possible -Original Message- From: Jack Pepper [mailto:[EMAIL PROTECTED] Sent: Tuesday, April 29, 2008 11:48 AM To: users@spamassassin.apache.org Subject: Re: netstat info-blacklist IP Quoting Jean-Paul Natola

netstat info-blacklist IP

2008-04-29 Thread Jean-Paul Natola
I was running in major overloads on my box and I kept noticing entries such as these enewsletter11.ru.2500 TIME_WAIT enewsletter11.ru.2353 ESTABLISHED enewsletter11.ru.2371 TIME_WAIT enewsletter11.ru.2350 ESTABLISHED half of them would eventually time out- SMTP command timeout on connection

RE: use_bayes 0 Clarification

2008-04-14 Thread Jean-Paul Natola
Jean-Paul Natola wrote: > If I set the use_bayes 0 > > Will that negate the training of spam? > this will disable the use of bayes completely. After setting that, no BAYES_* rules should match any email. > > I've trained sa with approx 7000 spam messages , yet I

use_bayes 0 Clarification

2008-04-14 Thread Jean-Paul Natola
If I set the use_bayes 0 Will that negate the training of spam? I've trained sa with approx 7000 spam messages , yet I still get the -2.6 BAYES_00

RE: office rule

2008-04-03 Thread Jean-Paul Natola
ram wrote: > On Wed, 2008-04-02 at 10:23 -0700, Kelson wrote: > >> ram wrote: >> >>> header __FROMOFFICE From =~/office/i >>> header __SUBOFFICE Subject =~/office/i >>> >>> meta OFFICERULE (__FROMOFFICE || __SUBOFFICE ) >>> score OFFICERULE 4.0 >>> >> And don't forget to add word

RE: office rule

2008-04-02 Thread Jean-Paul Natola
apache.org Subject: Re: office rule > On Wed, 2008-04-02 at 11:07 -0400, Jean-Paul Natola wrote: > > Hi all, > > > > I'd like to create a rule that scores 4 points if the word office is in the > > From field, or in the subject line On 02.04.08 21:07, ram wrote: &

office rule

2008-04-02 Thread Jean-Paul Natola
Hi all, I'd like to create a rule that scores 4 points if the word office is in the >From field, or in the subject line Can someone help me there? thx J

RE: -2.6 bayes_00

2008-03-30 Thread Jean-Paul Natola
i have site-wide config, as I only filter the mail and pass it on to exchange- no ind users setup I run sa-learn --spam --showdots J From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Sun 3/30/2008 21:11 To: Jean-Paul Natola Cc: users

RE: -2.6 bayes_00

2008-03-30 Thread Jean-Paul Natola
i've trained SA with about 12000 messages that have made it through the filters , i last trained 1 week ago Jean-Paul From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Sun 3/30/2008 19:22 To: Jean-Paul Natola Cc: users@spamassassin.apach

-2.6 bayes_00

2008-03-28 Thread Jean-Paul Natola
Why does this hit on the most OBVIOUS messages? Its almost an oxymoron How can all these rules get triggered 0.6 J_CHICKENPOX_34BODY: 3alpha-pock-4alpha 0.6 J_CHICKENPOX_64BODY: 6alpha-pock-4alpha 0.6 J_CHICKENPOX_82BODY: 8alpha-pock-2alpha -2.6 B

back hair rule

2008-03-26 Thread Jean-Paul Natola
Hi all, Our president was unable to communicate with one of her colleagues After reviewing the logs , I saw her messages were hitting the backhair rule What exactly is it ? tia j

russian?

2008-03-21 Thread Jean-Paul Natola
I just started getting a rush of these, Coincidentally after adding the 50_blogspot and the 30_software rules and running sa-update ftp://ftp.fcimail.org/samples/russian.txt the second one is in its original Unicode ftp://ftp.fcimail.org/samples/russ.txt J

RE: Spamassassin Database Question

2008-03-19 Thread Jean-Paul Natola
Hi everyone, I've tried looking this up and i dunno if i missed the part about the explanation or not but i couldn't find it. When training spamassassin with new spam and ham mails does the database need an existing copy of the emails you trained it with in order to work? For instance: i use

languages

2008-03-18 Thread Jean-Paul Natola
Hi all, I seem to have forgotten where to put acceptable languages in SA We just got a slew of our colleagues from Spain complaining, and when I looked the headers I saw 2.8 UNWANTED_LANGUAGE_BODY BODY: Message written in an undesired language I guess when I had my "little" SA disas

RE: Plugin eval failed

2008-03-14 Thread Jean-Paul Natola
n) to improve memory efficiency. Do not know how to set this either-- >6) Pray that some botnet doesn't latch on to you and obliterate your server! But that's me. I am assuming your system had a working configuration with a stock SA installation. Good luck. Jean-Paul Nat

RE: Plugin eval failed

2008-03-13 Thread Jean-Paul Natola
day, March 13, 2008 8:44 PM Cc: SpamAssassin Subject: Re: Plugin eval failed On 13/03/2008 8:02 PM, Jean-Paul Natola wrote: > What other info should I post? The output of vmstat while this is happening. A definition of "constantly". Every message, some % of messages? For some common

RE: Plugin eval failed

2008-03-13 Thread Jean-Paul Natola
What other info should I post? -Original Message- From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] Sent: Thursday, March 13, 2008 7:16 PM To: Jean-Paul Natola Cc: SpamAssassin Subject: Re: Plugin eval failed On 13/03/2008 7:08 PM, Jean-Paul Natola wrote: > Hi all, > >

Plugin eval failed

2008-03-13 Thread Jean-Paul Natola
Hi all, I upgraded to sa 3.2.4 And I've been restarting spamd every 15 minutes just to keep mail coming in, This is what is constantly coming up in the maillog plugin: eval failed: child processing timeout at /usr/local/bin/spamd line 1259. Any help would be appreciated Running Freebsd 6.

RE: How to Know

2008-02-19 Thread Jean-Paul Natola
From: Tarak Ranjan [mailto:[EMAIL PROTECTED] Sent: Tue 2/19/2008 7:23 To: Spamassassin Subject: How to Know Hi List, how do i come to know that each and every incoming & outgoing mail is massing through SA. / Tarak For incoming, look at the mess

RE: Exchange Question - OT

2008-02-05 Thread Jean-Paul Natola
I have * I think* what you are looking for, SMTP traffic goes to my bsd then after cleaning, scoring, AV checking , it the hands it to Exchange , However, I use sitewide configs so u would have to setup individual prefs if necessary. Jean-Paul Natola Network Administrator

RE: russian spam

2007-12-05 Thread Jean-Paul Natola
Jean-Paul Natola schrieb: > Hi all, > > Is there a plugin and/or rule to block russian spam? > > Here's a sample [...] > Jean-Paul I think the key is to give special score for "cyrillic chars" (unless this doesnt affect your regular mails). Perhaps: ok

russian spam

2007-12-05 Thread Jean-Paul Natola
Hi all, Is there a plugin and/or rule to block russian spam? Here's a sample Новейшие базы данных * Физические лица Москвы и М О 2006 г. (телефоны, прописка, собственность) 2000 р. * ГАИ Москвы и М О и Р Ф (авто, владельцы, вод/уд, ДТП, ПДД, розыск) 2007 г. 2000 руб. * Пенсио

RE: TIMEOUT

2007-09-26 Thread Jean-Paul Natola
Jean-Paul Natola wrote: > Hi all > > I was just checking headers on messages that were flagged ( by my own rules > in outlook) and I'm curious as to what exactly it means > I dono, what do your outlook rules do? > _cbl.abuseat.org_TIMEOUT , >

TIMEOUT

2007-09-24 Thread Jean-Paul Natola
Hi all I was just checking headers on messages that were flagged ( by my own rules in outlook) and I'm curious as to what exactly it means _cbl.abuseat.org_TIMEOUT , __dnsbl.njabl.org_TIMEOUT , __sbl.spamhaus.org_TIMEOUT ' Now these emails are by no means spam- they are from the

how many children

2007-09-07 Thread Jean-Paul Natola
Hi all, I'm seeing a bunch of these in my maillog; prefork: child states: BB prefork: server reached --max-children setting, consider raising it This what I currently have set in my startup script command_args="-d --min-children=2 --max-children=10 --min-spare=2 --max-spare=3 --max-co

RE: Maybe I'm dense...

2007-09-06 Thread Jean-Paul Natola
-Original Message- From: winkerbean [mailto:[EMAIL PROTECTED] Sent: Thursday, September 06, 2007 1:44 PM To: users@spamassassin.apache.org Subject: Maybe I'm dense... but I cannot find anything to tell me whether I can use SpamAssassin in my situation. I download my messages from my I

RE: OT blacklist check

2007-08-28 Thread Jean-Paul Natola
Hi, Jean Paul, check this site: http://www.robtex.com/rbl.html It does multi RBL checks, saved my butt a few times ;) Peace, Luis 2007/8/28, Jean-Paul Natola <[EMAIL PROTECTED]>: > Hi all, > > I saw that my server wound up on http://spamcop.net/bl.shtml so I had my > serve

OT blacklist check

2007-08-28 Thread Jean-Paul Natola
Hi all, I saw that my server wound up on http://spamcop.net/bl.shtml so I had my server removed- however , I think I may on other blacklist(s) as I roadrunner *.rr.com is not accepting emails from our server- Is there a way I can check my IP to see if I've been blacklisted anywhere else?

3.2.3 TIME out

2007-08-14 Thread Jean-Paul Natola
Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

RE: PDFAssassin

2007-08-14 Thread Jean-Paul Natola
-Original Message- From: Bob Pierce [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 14, 2007 11:00 AM To: users@spamassassin.apache.org Subject: PDFAssassin Is anybody using the PDFAssassin module from http://blog.atmail.com/?p=61 I didn't think I saw it talked about on the list yet.

RE: what happened after 3.1.8?

2007-08-13 Thread Jean-Paul Natola
10:02 AM To: users@spamassassin.apache.org Subject: RE: what happened after 3.1.8? The fix is in 3.2.3. Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK > -Original Message- > From: Jean-Paul Natola [mailto:[EMAIL PROTECTED] > Sent: 13 August 2007 14:

RE: what happened after 3.1.8?

2007-08-13 Thread Jean-Paul Natola
-Original Message- From: McDonald, Dan [mailto:[EMAIL PROTECTED] Sent: Friday, August 03, 2007 6:40 PM To: Jean-Paul Natola Subject: Re: what happend after 3.1.8? On Fri, 2007-08-03 at 18:30 -0400, Jean-Paul Natola wrote: > Hi all, > > this is sort of a re-post , as I ne

what happend after 3.1.8?

2007-08-03 Thread Jean-Paul Natola
esult- so ONCE AGAIN i've had to downgrade to 3.1.8 is there a pre-requisite to upgrading above 3.1.8? is there something that I have to do in order to go beyond 3.1.8? I run FreeBSD 6.2 CLAMAV EXIM 4.67 SA 3.1.8 Jean-Paul Natola Network Administrator Information Technology F

RE: Plugin verification

2007-07-30 Thread Jean-Paul Natola
On Mon, 30 Jul 2007 at 09:53 -0400, [EMAIL PROTECTED] confabulated: > Hi all, > > I wanted to confirm something here in my setup regarding the plugins- > > If my init.pre has this line > > loadplugin Mail::SpamAssassin::Plugin::URIDNSBL > > now I check to see where the plugin actually is > > l

Plugin verification

2007-07-30 Thread Jean-Paul Natola
.3.gz /usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/URIDNSBL.pm Is it going to find/use the plugin - or do I need to specify the full path of the plugin- ? Thanks Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite

RE: measuring SA

2007-07-26 Thread Jean-Paul Natola
Hash: SHA1 On 7/25/07 1:32 PM, Ralf Hildebrandt wrote: > * David Newman <[EMAIL PROTECTED]>: >> SA 3.2.1 with Postfix >> >> What tools are available to measure how many messages SA classifies as >> spam per hour/day/week? > > mailgraph? >Perfect, thanks. It tracks mail and spam usage (and appar

Scantime on messages

2007-07-25 Thread Jean-Paul Natola
Hi everyone, I'm looking over my logs and it *seems* to me that its taking exceessivley long for these messages to scan, granted I don't have the latest and greatest hardware, but I rarely if ever use swap - so I don't *think* that it should take so long- Here's my top stats 28 processes: 1 run

cf for GIFs

2007-07-23 Thread Jean-Paul Natola
Hi all, I had to rebuild my machine and , although I have the 70_ rules, and have run sa-update, I think I'm missing the CF that catches the gif image spam- the pharmacy specials Can someone tell me which one that was TIA Jean-Paul Natola Network Administrator Information Techn

RE: PDF spam

2007-07-19 Thread Jean-Paul Natola
-Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Thursday, July 19, 2007 11:06 AM To: users@spamassassin.apache.org Subject: Re: PDF spam On Thu, Jul 19, 2007 at 12:50:05PM +0530, Tarak Ranjan wrote: > i'm getting pdf attached spam. please help me stop that using >

RE: spam scoring -2.6

2007-07-18 Thread Jean-Paul Natola
Jean-Paul Natola wrote: > Hi all, > > I'm getting creamed with these spams but they are getting > through due to; > > > -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% > [score: 0.0005] > > Why is this happening? This only says that Bayes

spam scoring -2.6

2007-07-18 Thread Jean-Paul Natola
Hi all, I'm getting creamed with these spams but they are getting through due to; -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% [score: 0.0005] Why is this happening? Jean-Paul Natola Network Administrator Information Technology Family

is this known as Bayes poisin

2007-07-17 Thread Jean-Paul Natola
amhaus XBL [64.115.25.140 listed in zen.spamhaus.org] This is one of those stock emails Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

3.2 timeouts

2007-07-11 Thread Jean-Paul Natola
Hi everyone, I'm curious to know if there's a bug of some sort with 3.2- These are the symptoms I experience I get spamd time-outs all over the place, and when I do a netstat I have dozens of connections to port 783 in the FIN_WAIT stage and it just hangs till they time out- I had this problem

RE: bayes directory

2007-07-11 Thread Jean-Paul Natola
From: Jari Fredriksson [mailto:[EMAIL PROTECTED] Sent: Tue 7/10/2007 15:22 To: Jean-Paul Natola; users@spamassassin.apache.org Subject: Re: bayes directory >>Bayes needs 200 ham & 200 spam to work. >>You can read it's statistics by com

bayes directory

2007-07-10 Thread Jean-Paul Natola
Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

RE: SA on iPhone yet?

2007-07-03 Thread Jean-Paul Natola
-Original Message- From: Loren Wilton [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 03, 2007 9:16 AM To: users@spamassassin.apache.org Subject: Re: SA on iPhone yet? > on 7/2/07 10:08 PM, Robert - eLists at [EMAIL PROTECTED] wrote: > >> Anyone get Spamassassin installed on their iPhone

Rule verification

2007-06-21 Thread Jean-Paul Natola
want this rule to block messages that are addressed to him ([EMAIL PROTECTED]) ONLY IF the subject reads Warning: could not send message for past 4 hours Did I do it correctly? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 N

RE: Connection wont close

2007-06-13 Thread Jean-Paul Natola
WAIT Is there something I missed during the upgrade? I'm downgrading to 3.18 to see if it changes anything- FreeBsd 5.5 Exim CLAM SA Well that worked- downgrading to 3.18 seems to have "fixed" my connection problem Jean-Paul Natola Network Administrator Information Techno

Connection wont close

2007-06-13 Thread Jean-Paul Natola
WAIT Is there something I missed during the upgrade? I'm downgrading to 3.18 to see if it changes anything- FreeBsd 5.5 Exim CLAM SA Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 3

RE: HELP!!! SA timing out after 3.2 upgrade-NOT

2007-06-12 Thread Jean-Paul Natola
Sorry all I just panicked - I didn't know that upgrading would replace my startup script - So I just added the arguments back into the startup script. -Original Message- Now that I added the arguments back to my startup script for SA my CPU usage is getting nailed 43 processes

RE: HELP!!! SA timing out after 3.2 upgrade-FIXED

2007-06-12 Thread Jean-Paul Natola
Sorry all I just panicked - I didn't know that upgrading would replace my startup script - So I just added the arguments back into the startup script. -Original Message- From: Jean-Paul Natola [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 12, 2007 2:41 PM To:

HELP!!! SA timing out after 3.2 upgrade

2007-06-12 Thread Jean-Paul Natola
Hi all I just upgraded to 3.2 Now every message is timing out- If anyone has any ideas can you CC me at [EMAIL PROTECTED] As no messages are coming in THANKS Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY

RE: sa-update - max children

2007-05-29 Thread Jean-Paul Natola
These should* not be related should it? _ My current settings are as follows command_args="-d --min-children=2 --max-children=14 --min-spare=2 --max-spare=3 --max-conn-per-child=100 -r BSD 5.5 EXIM 4.67 SA 3.2 Jean-Paul Natola Ne

sa-update - max children

2007-05-29 Thread Jean-Paul Natola
should* not be related should it? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

RE: tracking down problem messages

2007-05-16 Thread Jean-Paul Natola
Jean-Paul Natola wrote: > Ok I was able to track them and found that they are timing out after about 5 > mins- spamd is timing them out- I'm assuming its large messages that it is > timing out on- what rule/acl would I need and WHERE would I enter it to > tell SA to ignor

RE: tracking down problem messages

2007-05-15 Thread Jean-Paul Natola
39 Average clean message score :-18.02 How can I track the messages that are causing this to happen? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mail

tracking down problem messages

2007-05-15 Thread Jean-Paul Natola
ssage score :-18.02 How can I track the messages that are causing this to happen? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]

whitelist Limit

2007-05-14 Thread Jean-Paul Natola
Is there a limit to how many entries a whitelist can have and still run efficiently? The box is a PIII 550 512 ram- Its now scanning approx 3000 messages per day- Someone asked me if it was possible to add their entire address book ( roughly 600 addresses) to the whitelist ( we have sitewide

no score on 419

2007-04-25 Thread Jean-Paul Natola
Hi everyone, Curious to know why this scored ( well didn't score) this way; 0.0 ADVANCE_FEE_1 Appears to be advance fee fraud (Nigerian 419) Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY

RE: Spamassassin is useless

2007-04-17 Thread Jean-Paul Natola
On Tue, Apr 17, 2007 at 09:09:07PM +0100, jpff wrote: > is a flurry of mail I get timeouts from spamd, and then errors about > deleteing unallocated memory in spamassassin, and no mail is If you're getting errors about dealing with memory, that's perl and not SpamAssassin. FYI. I'm stepping

RE: spamd as root-children Crashing

2007-04-16 Thread Jean-Paul Natola
On Mon, Apr 16, 2007 at 11:18:20AM -0400, Jean-Paul Natola wrote: > I know it not recommended to run spamd as root-, however during the install Really? Where do you get that impression? Running it as root is the default and how most people use it. However, running as few processes as r

  1   2   3   >