RE: 3.1.2 issue with UnixNFSSafe.pm ?

2006-05-31 Thread Matthew.van.Eerde
n't see any other reference in the > docs... See perldoc Mail::SpamAssassin::Conf, "LEARNING OPTIONS" use_bayes 0 (default is 1) -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: 3.1.2 issue with UnixNFSSafe.pm ?

2006-05-31 Thread Matthew.van.Eerde
king on a Bayes write? Try disabling Bayes temporarily. If that fixes it, move to a SQL-based Bayes instead of DBM. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: false scoring for DNS_FROM_RFC_ABUSE

2006-05-25 Thread Matthew.van.Eerde
something.de > Status: connect > > Connection closed by foreign host. > > The WHOIS server for .de is not RFC compliant I agree > Whether some whois clients decide to cater to whatever broken syntax .de has decided to > use is immaterial. I agree here too -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Help with rule for geocities spam

2006-05-22 Thread Matthew.van.Eerde
Bowie Bailey wrote: > Kenneth Porter wrote: >> Alternatively, is there regex syntax to match all patterns *except* >> the one given? Can I somehow express "all geocities.com subdomains >> except www and uk" as a regex? > > That is a bit trickier because Perl does not currently support > variable l

RE: Comment Crashes

2006-05-15 Thread Matthew.van.Eerde
reaks this. To paraphrase Animal Farm: .{0,50}?> and [^>]{0,50}> are functionally equivalent... except when a non-backtracking quantifier is in effect. > So either that non-backtracking qualifier is the fly in the whole > ointment or I'm misunderstanding what it means.

RE: Comment Crashes

2006-05-15 Thread Matthew.van.Eerde
. .{0,50}?> and [^>]{0,50}> are functionally equivalent. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Comment Crashes

2006-05-15 Thread Matthew.van.Eerde
Matthew.van.Eerde wrote: > a{m,n} matches any string of at least m and at most n copies of "a". > a{m} is a shortcut for a{m,m} > a{m,} has no upper bound on the length > a{,n} is a typo, sorry. Should be a{0,n}. > a+ is a shortcut for a{1,} > a* is a shortcut for a{0

RE: Comment Crashes

2006-05-15 Thread Matthew.van.Eerde
rtcut for a{0,} All of these are greedy by default. Putting the ? after them means they match the shortest possible string, rather than the longest. So .{0,50} means "zero to fifty characters of any kind" -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispani

RE: Comment Crashes

2006-05-15 Thread Matthew.van.Eerde
How about this: full FloatingTags3 /(?>>\s?[\$%A-Z0-9]\s?<.{,50}?){90}/is This caps the . at 50, and stops looking after it finds 90 of the groups. I'm a little confused as to why you're using (?>>...) instead of (?:...) -- Matthew.van.Eerde (at) hbinc.com

RE: Comment Crashes

2006-05-15 Thread Matthew.van.Eerde
f repeats at a reasonable level. .* # DON'T USE .+ # DON'T USE .{1,17} # for some value of 17 .{n,n+17} # for some values of n and 17 This really helps performance. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Big Idiot Needs Instructions

2006-05-10 Thread Matthew.van.Eerde
Chris Edwards wrote: > > /usr/local/bin/spamd -d -u nobody > > I get these errors... > > [24001] warn: unix dgram connect: Socket operation on non-socket at > /usr/perl5/site_perl/5.8.4/Mail/SpamAssassin/Logger/Syslog.pm line 79 > [24001] error: no connection to syslog available at > /usr/perl5/

RE: Bayes not working

2006-05-10 Thread Matthew.van.Eerde
Steven Stern wrote: > Everything's tweaked to use "root" as the user. ... you've got to ask yourself a question: Do I feel lucky? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Big Idiot Needs Instructions

2006-05-10 Thread Matthew.van.Eerde
own, > but you'd have to Google for the SA one Alternately you could install MIMEDefang, which is a milter that calls ClamAV and SpamAssassin directly. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: whitelist_from_spf is not working

2006-05-03 Thread Matthew.van.Eerde
Roger Taranto wrote: > The reason I ask is that my dad's SPF record is listed as ~all for his > externally-visible static IP address, but when machines internal to > his network connect to send mail, they look forged since they have a > 192.168 address. Suggestions? Bypass SPF checking on * mail

RE: OR NOT Logic

2006-05-02 Thread Matthew.van.Eerde
Dan wrote: > Wow, > > I must be confusing this with any/all is/isn't. In various software > (mail scripts, iTunes smart playlists, etc): > > any IS IS IS IS > > equals > > all NOT NOT NOT NOT Exactly backwards. any(@criteria) = not all(not @criteria) Consider Lifeboat1-ha

RE: why is that the same sendin server is seen differently by spam assassin

2006-05-02 Thread Matthew.van.Eerde
David Flanigan wrote: > Do most people run SA or something similar on there secondary MX > servers? Speaking for myself, my two MX servers are configured identically and have equal MX weight. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Busine

RE: Tinurl being abused by spammers.. (leo/badcow)

2006-05-02 Thread Matthew.van.Eerde
> Geocities! All I've been doing is submitting damn redirect web pages. One thing Geocities isn't doing is adding a "report abuse" link to their javascript widget that appears on every page. That would turn every visitor into a potential spamfighter. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: why is that the same sendin server is seen differently by spam assassin

2006-05-02 Thread Matthew.van.Eerde
David Flanigan wrote: > On Tue, 2 May 2006 10:04:47 -0700, Matthew.van.Eerde wrote >> David Flanigan wrote: >>> Since a inordinate % of spam seems to go through my secondary MX, I >>> have been treating it as being outside of my trusted_network >> >> "T

RE: why is that the same sendin server is seen differently by spam assassin

2006-05-02 Thread Matthew.van.Eerde
David Flanigan wrote: > Since a inordinate % of spam seems to go through my secondary MX, I have been > treating it as being outside of my trusted_network "Trusted" means you trust it to tell the truth. Your secondary MX should be part of your trusted network. -- Matth

RE: Way OT: What do you use for anti-virus (Linux)

2006-05-02 Thread Matthew.van.Eerde
an encrypted archive to come up with possible passwords. That's when you start getting viruses in emails that say "The password is Mickey Mouse's girlfriend's name." -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Way OT: What do you use for anti-virus (Linux)

2006-05-01 Thread Matthew.van.Eerde
wrote: > Is BitDefender stable? I haven't had any troubles with it. It's free, but not open source... and most importantly the virus definitions are updated regularly. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./Hire

RE: Way OT: What do you use for anti-virus (Linux)

2006-05-01 Thread Matthew.van.Eerde
wrote: > I can say that the best, and most affordable, anti-virus package I > have ever used was RAV. Until is was bought out by Microsoft. I > have since been using ClamAV but it sure uses allot of RAM. I use both ClamAV and BitDefender's free Linux product http://www.bitdefender.com/bd/s

RE: How do you score your own domain(s)?

2006-04-18 Thread Matthew.van.Eerde
bers of our organization to use these sites to send links to each other. On our MX gateways, we check SPF and reject any that fall into -all. Roaming users connect via SMTP AUTH to a non-MX mail server. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business

RE: Spamassassin is too slow

2006-04-14 Thread Matthew.van.Eerde
Christophe Journel wrote: > I use spamassassin 3.0.3.. but my pb is : it's sloww :( Disable network tests. If that helps install a caching name server. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: New bayes poison

2006-04-13 Thread Matthew.van.Eerde
com/inquiry/gmail_security2 DK and SPF are very useful in proving accountability for email sent. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: How was this missed?

2006-04-13 Thread Matthew.van.Eerde
\D?0\D?6\D?9\D?8\D?4\D?0\D?1\D?0\D?6|3\D?3\D?8\D?3\D?5\D?7\D?9|2\D ?0\D?6\D?3\D?3\D?8\D?6\D?0\D?6\D?1|2\D?0\D?6\D?2\D?0\D?2\D?2\D?0\D?3\D?3 / -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: TEXTAREA style="visibility: hidden"

2006-04-13 Thread Matthew.van.Eerde
easonable, though: http://www.meyerweb.com/eric/css/edge/menus/demo.html (doesn't work in IE 6, but works fine in Firefox, Safari, IE 7b2pr...) -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: relay distance and spam [was xxxl spam]

2006-04-11 Thread Matthew.van.Eerde
that makes much more sense :) -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: greetpause was Re: xxxl spam

2006-04-11 Thread Matthew.van.Eerde
rewards CPU and bandwidth spent* is playing into the hands of the spammers. * Email stamps, "factor this product of large primes" challanges, greetpause.... -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: relay distance and spam [was xxxl spam]

2006-04-11 Thread Matthew.van.Eerde
mouss wrote: > I would conjecture that most legitimate mail has two "real" hops (the > sending MTA and the receiving MTA). That would be one hop.

RE: Ok, I'm stumped...

2006-04-05 Thread Matthew.van.Eerde
string and NOT at internal newlines. You can get the behavior you want by using the /m modifier: header L_INCOMPETENT4ALL =~ /\\r\\n\s?$/m or by specifying [\s\n] as a class: header L_INCOMPETENT5ALL =~ /\\r\\n[\s\n]?/ $ perl -e 'print "a\nb" =~ /a$/

RE: Ok, I'm stumped...

2006-04-05 Thread Matthew.van.Eerde
er, which can be used to add headers at the top... it calls libmilter's smfi_insheader function, which allows specifying a position to insert the header. I've tried to convince clamav-milter to add a similar option, without success. -- Matthew.van.Eerde (at) hbinc.com

RE: Filtering based on the recipients

2006-04-05 Thread Matthew.van.Eerde
(acknowledge & reject message) > or >bogus_user DISCARD (drops message) I do To:[EMAIL PROTECTED]RELAY To:[EMAIL PROTECTED]RELAY ... To:[EMAIL PROTECTED]RELAY To:example.tld ERROR:5.1.1:"550 User unknown" (Enumerate Goodness) -- Matthew.van.Ee

RE: Filtering based on the recipients

2006-04-05 Thread Matthew.van.Eerde
Assassin returns, the original may have headers appended to it (X-Spam-Status, etc.) -- or the mail might be discarded, tempfailed, or rejected. It might, in theory, be possible for a clever user to be able to infer that someone was BCC'd under certain circumstances... for example, i

RE: Filtering based on the recipients

2006-04-05 Thread Matthew.van.Eerde
s stores the list of recipients) Caveat... this only adds the recipients the MTA knows about. If something is BCC'd to an ungodly number of recipients, the MSA will usually send it in several MAIL FROM commands. The MTA will only know about the recipients for the current MAIL FROM command.

RE: Filtering based on the recipients

2006-04-05 Thread Matthew.van.Eerde
le you can set to 1 in mimedefang-filter for this. I assume SpamAssassin uses this header? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Re: Stopping recent stock pumping spam

2006-04-04 Thread Matthew.van.Eerde
Tristan Miller wrote: > debug: is DNS available? 0 What is the output of $ cat /etc/resolv.conf ? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Delirium...

2006-04-03 Thread Matthew.van.Eerde
abeas.com/ Spam Fighter Habeas Wins One http://www.clickz.com/news/article.php/3336631 -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: socket SA is not fast enough, help

2006-03-29 Thread Matthew.van.Eerde
the >> same overhead as any other TCP socket. > > ...named pipes? Ooh, good one. UNIX has named pipes too... but Windows named pipes are closer to UNIX domain sockets than they are to UNIX named pipes. http://en.wikipedia.org/wiki/Named_Pipes -- Matthew.van.Eerde (at) hbinc.com

RE: socket SA is not fast enough, help

2006-03-29 Thread Matthew.van.Eerde
s rule name description > -- > -- > -1.4 ALL_TRUSTEDPassed through trusted hosts only via SMTP > 1.3 MISSING_SUBJECTMissing Subject: header You can probably set that up in local.cf with clear_report_template report _TESTS

RE: socket SA is not fast enough, help

2006-03-29 Thread Matthew.van.Eerde
Matthew.van.Eerde wrote: > mouss wrote: >> unix sockets can't be used if the client and the server are in >> disjoint jails > > Really? Not even with symlinks (can you symlink a socket) or mount > --bind? /me comes to his senses Of course you can

RE: socket SA is not fast enough, help

2006-03-29 Thread Matthew.van.Eerde
mouss wrote: > unix sockets can't be used if the client and the server are in disjoint jails Really? Not even with symlinks (can you symlink a socket) or mount --bind? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com

RE: socket SA is not fast enough, help

2006-03-29 Thread Matthew.van.Eerde
ain sockets. The closest thing to it would be a TCP server listening on 127.0.0.1 and only accepting connections from 127.0.0.1 - but that has the same overhead as any other TCP socket. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SA just stopped working

2006-03-27 Thread Matthew.van.Eerde
Liam-PrintingAutomation wrote: > Is spamd running? > > A most excellent question! =) > How do I find out? ps -ax | grep spamd (ignore any lines that contain "grep spamd") > [EMAIL PROTECTED] log]# /etc/rc.d/init.d/spamassassin status > spamd is stopped That works to

RE: Training Bayesian filter

2006-03-24 Thread Matthew.van.Eerde
uldn't think you should train the filter with the markup in it > that it can key off of. Is that right SpamAssassin will ignore its own markup when training Bayes. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: trusted networks help

2006-03-24 Thread Matthew.van.Eerde
Daryl C. W. O'Shea wrote: > When automatically set, yes. When you manually define your > trusted/internal networks, no -- you really get to define them. OK, that makes sense. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDi

RE: trusted networks help

2006-03-24 Thread Matthew.van.Eerde
Daryl C. W. O'Shea wrote: > You might as well through in trusted_networks 127.0.0.1 ... that's not hardcoded? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SPF and Domain Keys

2006-03-23 Thread Matthew.van.Eerde
assin/attachment.cgi?id=3312 Oops. That's what I get for linking to the attachment rather than the bug. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SPF and Domain Keys

2006-03-23 Thread Matthew.van.Eerde
i?id=3210 -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: INVALID_DATE

2006-03-22 Thread Matthew.van.Eerde
, I should probably note C:\custom-path>ls /b alias.bat cat.bat cp.bat less.bat ls.bat man.bat mv.bat rm.bat xargs.bat C:\custom-path>type man.bat @echo off help %* -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SPF and Domain Keys

2006-03-22 Thread Matthew.van.Eerde
:SpamAssassin::Plugin::DomainKeys in your init.pre or v310.pre Also make sure you have Mail::DomainKeys installed There is also a patch you need to make it work with 3.1.0 -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SPF penetration

2006-03-22 Thread Matthew.van.Eerde
7;s fine. That just means we can't distinguish legitimate mail from that business vs. spoofed mail from that business based on the sending relay. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SPF penetration

2006-03-22 Thread Matthew.van.Eerde
Matthew.van.Eerde wrote: > pass: 467 > none: 3297 > softfail: 139 > fail: 106 > error: 2 Oops, forgot "neutral" none: 3357 pass: 486 neutral: 91 softfail: 140 fail: 110 error: 2 -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Busine

RE: SPF penetration

2006-03-22 Thread Matthew.van.Eerde
my domain publishes a "-all" record, and the most-frequently-spoofed domain for mail I receive is my own. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: "news spam"

2006-03-21 Thread Matthew.van.Eerde
se backtracking shouldn't be possible, the > meta should actually be a little slower than the single regex. Exactly. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Re: "news spam"

2006-03-21 Thread Matthew.van.Eerde
Jeremy Fairbrass wrote: > What's the difference? Your meta rule is fundamentally identical to > Loren's rule, is it not?! They are identical, yes. Loren brought up .* as a potential red flag, and I suggested a way to avoid it. -- Matthew.van.Eerde (at) hbinc.com

RE: "news spam"

2006-03-21 Thread Matthew.van.Eerde
Subject =~ /^Re:\s/i header _SUBJECT_ENDSWITH_NEWS Subject =~ /\bnews$/i meta SUBJECT_IS_RE_NEWS (_SUBJECT_STARTSWITH_RE && _SUBJECT_ENDSWITH_NEWS) -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Legit Base64 Encoding of text?

2006-03-21 Thread Matthew.van.Eerde
Rob McEwen (PowerView Systems) wrote: > Is there ever a legit reason to Base64 encode plain text? Microsoft Outlook Web Access for Exchange Server 2000 base64-encodes plain text. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.

RE: SQL Bayes

2006-03-21 Thread Matthew.van.Eerde
Duane Hill wrote: > Matthew.van.Eerde wrote: >> delete from bayes_(token|seen|expire) where id in >> (select id from bayes_vars where username = '[EMAIL PROTECTED]'); > > Cool! I haven't gotten too deep yet into MySQL. I knew there was a > shorter way of

RE: SQL Bayes

2006-03-21 Thread Matthew.van.Eerde
seen|expire) where id in (select id from bayes_vars where username = '[EMAIL PROTECTED]'); The awl deletion can be simplified too: delete from awl where username = '[EMAIL PROTECTED]'; -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SA rule question / suggestion

2006-03-16 Thread Matthew.van.Eerde
is > allowed to > relay mail through the mailserver. (either via an entry in the access > database, or because the IP or machine name matches a line in > /etc/mail/relay_domains. Couldn't you just copy the access/relay_domains hosts over to your trusted_networks config? --

RE: Importance of SMTP gateway reverse lookup domain?

2006-03-16 Thread Matthew.van.Eerde
ed' to source mail for "artesyncp.com". > > Aye; thanks. Unfortunately, our current external DNS server doesn't > yet support SPF records. =( Your DNS server doesn't support TXT records?? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Received-SPF header.

2006-03-14 Thread Matthew.van.Eerde
Xavier Sudre wrote: > I read that an SPF aware smtp server should introduce the Received-SPF > header in the email headers. There are patches for Postfix to support SPF... for example: http://www.ipnet6.org/postfix/spf/ -- Matthew.van.Eerde (at) hbinc.com 805.964.455

RE: Received-SPF header.

2006-03-14 Thread Matthew.van.Eerde
Xavier Sudre wrote: > Is there a way to get spamassassin record a Recevied-SPF header in the > email headers? Only MTAs can add headers.

RE: cannot get Envelope-From, cannot use SPF

2006-03-13 Thread Matthew.van.Eerde
Xavier Sudre wrote: > [EMAIL PROTECTED] wrote: >> See http://wiki.apache.org/spamassassin/EnvelopeSenderInHeaders > > My postfix version is compatible. Is there a Return-Path header on the file that spamc is told to scan? -- Matthew.van.Eerde (at) hbinc.com 80

RE: cannot get Envelope-From, cannot use SPF

2006-03-13 Thread Matthew.van.Eerde
f postfix? See http://wiki.apache.org/spamassassin/EnvelopeSenderInHeaders -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Config files

2006-03-06 Thread Matthew.van.Eerde
cf andlocate >> user_prefs this will tell you all of the files and you can check them > > Tried that ... > Any other ideas? grep the source of VHCS for spamassassin or required_score? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Config files

2006-03-03 Thread Matthew.van.Eerde
Matthew.van.Eerde wrote: > James Smith wrote: >> On running 'spamassassin -D --lint' it claims to use those config >> files, and does indeed (as shown by the TEST_E at the end of the >> output) but it must be using diferent configs when invoked from the >> mai

RE: Config files

2006-03-03 Thread Matthew.van.Eerde
in this list, and only > requires a score of 4 wheras this output is requiring 5 as it > should... It must be that VHCS is invoking SpamAssassin in some fashion that ignores local.cf. How does VHCS invoke SpamAssassin? -- Matthew.van.Eerde (at) hbinc.com 805.964.455

RE: Re: Automatically Updating Rules on Windows

2006-03-02 Thread Matthew.van.Eerde
if there are new > versions available for download - complete with logging and optional > email reports. Works very well for me - I'd be happy to make it > available if anyone was interested... Sounds like good wikifood. -- Matthew.van.Eerde (at) hbinc.com 805.964.

RE: SA-LEARN HANGING when database over 2000 SPAM messages

2006-03-01 Thread Matthew.van.Eerde
Marc Dufresne wrote: > I think it was Steve that said his database is in SQL format. How do I > convert the spamassassin database on FreeBSD 5.4 to SQL? http://wiki.apache.org/spamassassin/BetterDocumentation/SqlReadmeBayes -- Matthew.van.Eerde (at) hbinc.com 805.964.455

RE: SORBS unreasonable

2006-02-28 Thread Matthew.van.Eerde
ss. The worst they could be accused of is slander. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Rules using envelope info?

2006-02-28 Thread Matthew.van.Eerde
y $object = spam_assassin_init(@_); return undef unless $object; } return $SASpamTester->parse([EMAIL PROTECTED]); } else { return Mail::SpamAssassin::NoMailAudit->new(data=>[EMAIL PROTECTED]); } -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SA-LEARN HANGING when database over 2000 SPAM messages

2006-02-28 Thread Matthew.van.Eerde
where... ;) BerkeleyDB uses sparse files. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: (OT, but relevant) Playing with AOL?

2006-02-24 Thread Matthew.van.Eerde
ject of Subject: Left-Handed Elvis Impersonator Conference ([EMAIL PROTECTED]) -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: (OT, but relevant) Playing with AOL?

2006-02-23 Thread Matthew.van.Eerde
marked as spam. Well... I suppose you could require AOL users to put down a deposit every time they subscribe to a list... -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: (OT, but relevant) Playing with AOL?

2006-02-23 Thread Matthew.van.Eerde
as to send to, and the other embedded in the link sent in the reply. The tokens are not connected in any predictable fashion. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: (OT, but relevant) Playing with AOL?

2006-02-23 Thread Matthew.van.Eerde
res off a reply: "One final step remaining. Please click this link to verify your registration." If AOL complains about that reply, you pull up your logs and ask them "how could it be spam when THEY emailed ME first??" -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: (OT, but relevant) Playing with AOL?

2006-02-23 Thread Matthew.van.Eerde
hen you can rely on being able to extract the AOL address from any TOS reports in response to mail you forward. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: (OT, but relevant) Playing with AOL?

2006-02-23 Thread Matthew.van.Eerde
ry instance of the AOL members mail > address from the attach message with [EMAIL PROTECTED] > ? Not true. The TOS notices include the AOL member's email address unobfuscated. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SpamAssassin large-scale users willing to comment?

2006-02-22 Thread Matthew.van.Eerde
Matthew.van.Eerde wrote: > FWIW, the new Windows Live Mail Beta service uses SpamAssassin. Er, wait, no it doesn't. Never mind. I was misreading the headers. Clickability uses SpamAssassin. They power CNN's "Email this story" tool. I had sent myself a CNN story to a

RE: SpamAssassin large-scale users willing to comment?

2006-02-22 Thread Matthew.van.Eerde
e new Windows Live Mail Beta service uses SpamAssassin. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Pling pling, many exclamations, and Yahoo!

2006-02-22 Thread Matthew.van.Eerde
7;s Clickability send-to-friend tool still uses the visitor's email as MAIL FROM:, which breaks SPF. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Over-scoring of SURBL lists...

2006-02-17 Thread Matthew.van.Eerde
then your point is accurate, and the rules should be re-scored. Otherwise the rules are fine. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SpamD won't connect to MySQL if started via init.d

2006-02-16 Thread Matthew.van.Eerde
-q -m 2 Try adding a -D to the init.d spamd call and see if it gives you any more info on why it's failing. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: DO NOT Filter this list!!!

2006-02-15 Thread Matthew.van.Eerde
Matt Kettler wrote: > Unfortunately, that's not likely to change, as there's more than just > this list hosted on the apache list server. The other lists benefit > greatly from the filter. There's no way to bypass spam-checking based on the envelope-recipient? -

RE: DO NOT Filter this list!!!

2006-02-15 Thread Matthew.van.Eerde
> Not entirely. The list has a higher than default threshold. I too had missed that the bounce was from the list server. GTUBE idea withdrawn. 10.0, as I see from the X-ASF-Spam-Status header. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: DO NOT Filter this list!!!

2006-02-15 Thread Matthew.van.Eerde
Evan Platt wrote: > IIRC, the list runs spamassassin and would block your message before > it would make it to the list members. ... which kind of defeats Chris's point. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com

RE: DO NOT Filter this list!!!

2006-02-15 Thread Matthew.van.Eerde
Chris Santerre wrote: > Come on guys. You can't spam filter a list that talks about spam. > Expect to see examples posted. Either stop filtering this list, or > unsubscribe. (must fight back evil ideas of sending a GTUBE to the list...) -- Matthew.van.Eerde

RE: General assistance

2006-02-10 Thread Matthew.van.Eerde
Ed Russell wrote: > 1.Does anyone have an opinion as to what RBL to contact? I know > there are quite a few. openrbl.org has a reasonably comprehensive list. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: SA frequently skipping rules

2006-02-09 Thread Matthew.van.Eerde
eceived: headers are by trustworthy servers. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: spamd and SQL

2006-02-09 Thread Matthew.van.Eerde
Randy Smith wrote: > Then I run spamc like so: > > spamc -s 512000 -u $RECIPIENT > > $RECIPIENT is set by my MTA and is replaced with the user's account > name. > > [snip] What do you do for mail with multiple recipients? -- Matthew.van.Eerde (at) hbinc.c

RE: SPF check wrong in SA?

2006-02-08 Thread Matthew.van.Eerde
figure your server to skip SpamAssassin checks on email received by trusted sources (SMTP AUTH, POP-before-SMTP, internal networks, what-have-you) -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Mail::DomainKeys 0.80: Known bad with SA 3.1.0?

2006-02-07 Thread Matthew.van.Eerde
s.apache.org/SpamAssassin/show_bug.cgi?id=4623 (bug, patch attached) -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: spamassissin filter very broken

2006-02-03 Thread Matthew.van.Eerde
.2 and review your configuration -- a lot changed between 2.* and 3.* -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Help with a rule

2006-02-02 Thread Matthew.van.Eerde
Matthew.van.Eerde wrote: > Yusuf Ahmed wrote: >> SCENARIO: I am the owner of "sample.com.au". I have email accounts >> named "info" and "joeblow", therefore their email addresses would be >> [EMAIL PROTECTED] and [EMAIL PROTECTED] >> PROB

RE: Help with a rule

2006-02-02 Thread Matthew.van.Eerde
uld probably REJECT mail to invalid addresses at RCPT TO time. This will allow people who are legitimately trying to send you mail at a mistyped address to receive an undeliverable report, rather than assuming the message went through. -- Matthew.van.Eerde (at) hbinc.com 805.964.45

RE: Post your top 10 from sa-stats

2006-02-01 Thread Matthew.van.Eerde
etation is that 22.74% of mail is "HTML spam", and 22.34% of mail is "HTML ham". Adding the two together, 45.08% of mail matches HTML_MESSAGE (for this sample data.) -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Post your top 10 from sa-stats

2006-01-31 Thread Matthew.van.Eerde
result in a DATA so there's nothing to spam-scan. If these are counted in %ofmail, but not in %ofspam or %ofham, that would explain the apparent discrepancy. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

RE: Post your top 10 from sa-stats

2006-01-31 Thread Matthew.van.Eerde
70% of spam is HTML, and 55% of ham is HTML? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

  1   2   3   4   >