Catch-22 unsubscribing from this list.

2009-07-26 Thread Michael W. Cocke
There doesn't seem to be a web interface to subscribe/unscribe from this list. The email address "users-unsubscr...@spamassassin.apache.org" complains that my IP address is dynamic (which is why I use dyndns.org, thank you very much.) And on that subject, am I the only person who thinks that b

Re: flooded with jr* spam

2008-02-08 Thread Michael W Cocke
On Thu, 07 Feb 2008 12:51:51 +0100, you wrote: >Michael W Cocke wrote: > >> >> They use DHCP. Netops has to trace it, and I seem to be about 5Kth on >> the list.Ironic as hell, considering the effort I put into >> avoiding MIT netops about 20 years ago. &g

Re: flooded with jr* spam

2008-02-05 Thread Michael W Cocke
ur routers and switches ? > >Regards, > >-- >--[ UxBoD ]-- >// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" >// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 >// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 >// Phone

Re: flooded with jr* spam

2008-02-05 Thread Michael W Cocke
They use DHCP. Netops has to trace it, and I seem to be about 5Kth on the list.Ironic as hell, considering the effort I put into avoiding MIT netops about 20 years ago. Mike- On Tue, 05 Feb 2008 21:01:04 +0100, you wrote: >Michael W Cocke wrote: > >> I'll trade you -

Re: flooded with jr* spam

2008-02-05 Thread Michael W Cocke
I'll trade you - somewhere in MIT (20K+ computers) is hitting me twice per second with ICMP packets, and netops can't find who I had to degrade the logging on my snort-inline because the system was drowning. Mike- On Tue, 5 Feb 2008 13:58:30 -0500, you wrote: >Has anyone else noticed a sim

Re: A rule for empty body and pdf attachment??

2007-08-02 Thread Michael W Cocke
Thanks, both of you. Looks like an update to pdfinfo snuck out while I wasn't looking. I've made the adjustments. Mike- On Thu, 2 Aug 2007 10:39:20 +0200, you wrote: >"Michael W Cocke" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] >> These b

A rule for empty body and pdf attachment??

2007-08-02 Thread Michael W Cocke
These blasted PDF spams are driving me mad! Any ideas for a rule that would trip if there's no text in the body, just a PDF attachment ? (I'm using the PDFinfo plugin now, but I don't really understand it) Thanks! Mike- -- If you're not confused, you're not trying hard enough. -- Please note -

announce: urlx utility for spamassassin

2007-07-14 Thread Michael W Cocke
Most systems that I'm familiar with nowadays have the users put spam emails that manage to get past the filters into a special folder (directory) so they can be examined, in order to make the spam filter system more effective. In pursuit of that Idea, I've written urlx. Urlx is designed to extract

Using SA code to extract URLs ?

2007-01-12 Thread Michael W. Cocke
I was told a while back that the best way to extract urls from emails was to use code from SpamAssassin. Ok - Now, I need to do just that. Any pointers? I've looked thru the code in SpamCopURI, but unless there are some docs hidden somewhere I can't even figure out the entry point. Are there

Re: Why won't imageinfo.pm work with SA 3.17? - access

2006-11-27 Thread Michael W Cocke
On Mon, 27 Nov 2006 01:16:42 -0500, you wrote: >loadplugin Mail::SpamAssassin::Plugin::ImageInfo ImageInfo.pm That was it, thanks! Mike- -- If you're not confused, you're not trying hard enough. -- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at cath

Why won't imageinfo.pm work with SA 3.17? - access

2006-11-26 Thread Michael W Cocke
I can't get the imgeinfo plugin to load with SA 3.17? I put this in v310.pre loadplugin Mail::SpamAssassin::Plugin::ImageInfo The Imageinfo.pm file is in the same directory as other PM files that are being correctly found, and When I try a spamassassin --lint, I get [5522] warn: plugin: failed

Re: Newbie Question

2006-11-26 Thread Michael W Cocke
For what it's worth, on the system here I have a special directory on the server set up, and when the users get a spam message they do a 'save as ascii text file' to that directory. sa-learn runs thru that directory every half hour. Just a thought. Mike- On Fri, 24 Nov 2006 15:39:35 +, you

amavisd-new or mailscanner?

2006-11-21 Thread Michael W Cocke
I started out using amavisd-new then switched to MailScanner as my mail tester 'framework' (SpamAssassin has been a constant) Looking thru the docs of Mailscanner, it doesn't come out and SAY that it just does the 'basic' spam test features, but reading between the lines it seems to - I have a fe

Re: blarsbl

2006-11-21 Thread Michael W Cocke
On Tue, 21 Nov 2006 10:29:15 -0600, you wrote: >Has anyone had any dealings with this guy. > >I take my mail server very seriously. Further I take spamming very >seriously in general. > >Even when I detect one of my customers sending spam I disable there internet >until the problem is resolved

Re: [OT] Re: Fw: failure notice / spaassassin.apache.org

2006-10-02 Thread Michael W Cocke
On Mon, 2 Oct 2006 23:31:57 +0200 (CEST), you wrote: > >On Fri, September 29, 2006 19:59, Andreas Pettersson wrote: >>> It looks like you are listed in spamcop and apparently Comcast is >>> either using spamcop or they have their own list that is blocking you. >> >> Comcast themselves are using a

Re: Please sanity check these ideas for rules.

2006-08-31 Thread Michael W Cocke
On 31 Aug 2006 20:39:47 -, you wrote: >On Thu, 31 Aug 2006, Michael W Cocke wrote: > >> I've got every ruleset & blacklist available and I'm still getting >> buried - the bayes poison in all of the recent spam has wrecked that. >> Does anyone see a r

Please sanity check these ideas for rules.

2006-08-31 Thread Michael W Cocke
I've got every ruleset & blacklist available and I'm still getting buried - the bayes poison in all of the recent spam has wrecked that. Does anyone see a reason why I can't assume messages with blank subjects are junk? Also, I've got an idea about maybe doing an nslookup on the envelope sender do

Re: AWL growing too large

2006-03-16 Thread Michael W Cocke
On Wed, 15 Mar 2006 18:24:41 -0500, you wrote: >jdow wrote: > >> >> OK, when the storage structure of the tarball based package you want >> changes how do you extirpate the old and insert the new without the >> rather depressingly familiar dual SpamAssassin install? (Not that the >> package syste

sa-stats ver 6256 w/SA 3.1

2006-03-16 Thread Michael W Cocke
I never looked in the tools directory before, but I just noticed sa-stats. (sa-stats version 6256, SA version 3.10). I tried running it, and got all zeros for every number. Is there an init step that's non-obvious (I set the config info up), or did this version not work? It's not a priority - SA

[OT] postfix and MailScanner?

2006-03-09 Thread Michael W Cocke
I just heard (on this list, which is why I'm following up here) that it is possible to use MailScanner with Postfix. Could someone who is please email me (my address is unmunged) a working main.cf & master.cf? I tried all day, but I'm missing something. Thanks! Mike- -- If you're not confused, y

Re: Amavisd replacement suggestion

2006-03-07 Thread Michael W Cocke
On Tue, 7 Mar 2006 15:04:11 -, you wrote: >Works fine with postfix... > >http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:pos >tfix:politics&s=politics Thanks Martin - very interesting! When I first heard of mailscanner I was very excited - I've been using Amavisd-ne

Re: Amavisd replacement suggestion

2006-03-07 Thread Michael W Cocke
On Tue, 7 Mar 2006 14:10:26 -, you wrote: >Shane > >Have a look at MailScanner as an alternative to amavisd - it's nice to have >a choice isn't it.. My understanding is that mailscanner doesn't work safely with postfix. (IIRC someone on this list told me that when I first encountered mailscan

Re: What do these messages with -D mean?

2006-02-13 Thread Michael W Cocke
On Sun, 12 Feb 2006 15:11:12 -0800, you wrote: >I ran spamassassin -D and got the following in the debug output. Is this >a problem? If so what should I do? > >[27299] dbg: bayes: no dbs present, cannot tie DB R/O: >/var/spool/MIMEDefang/mimedefang-bayes_toks >[27299] dbg: bayes: not scoring mes

Re: Xtracting urls from saved spams & making SA rules - xurl001.p l

2006-02-11 Thread Michael W Cocke
*Apologies if you've already seen this - I can't find any indication that it sent when I hit send and I'm fooling with a new mail client* On Fri, 10 Feb 2006 11:21:25 -0500, you wrote: >I think I know a bit about extracting URLs from spam ;) A bit. >It is pretty damn complicated. A lot of

Xtracting urls from saved spams & making SA rules - xurl001.pl

2006-02-10 Thread Michael W Cocke
It's absolutely not finished, but attached is a quick perl hack I'm using to read thru a directory of saved spam (text files), extract urls and automatically build SA rules for them. It's not debugged throughly and I have a few more things to add, but I know I'm not the only person who can use thi

Re: spam still isn't being caught much.

2006-02-07 Thread Michael W Cocke
On Tue, 07 Feb 2006 18:58:08 +0100, you wrote: >I know that SuSE had -L as default at one point in time. Just remove the >'-L' part. It still does as of 10.0, Bog knows why. And as of 9.3 it was a an incredibly poor idea to allow YaST to update SpamAssassin. Mike- (Amavisd-new, f-prot, clam

Re: Is this really eBay?

2005-10-08 Thread Michael W Cocke
On Sat, 8 Oct 2005 12:45:14 +0200, you wrote: >Hi, is this an eBay e-mail? All the links are going to mediaplex.com, >that's what makes me ask. I've put the e-mail here: > >http://zmi.at/x/ebay.txt > > small part of e-mail >Sammeln und Seltenes: >http://ebay.de.mediaplex.com/ad/ck/1066-24214-

Rule: envelope to <> header to - help?

2005-07-10 Thread Michael W Cocke
Does anyone have a rule to chech the envelope To: against the header to: ? I'm sure that there's a reason why it's allowed to be different, but it doesn't apply here, and almost half of the spam that gets thru everything else would get stopped by that. Thanks! Mike- -- Mornings: Evolution in ac

Stupid rule question

2005-05-09 Thread Michael W Cocke
This is really getting on my nerves... Using Spamassassin 3.03, could someone please tell me why this message - Dear Customer, We have all the rx you may need. http://americaspharma.com/ >From hard to find pain killers to diet solutions. Thank you, Supply. -

Re: MSExec plugin?

2005-04-27 Thread Michael W Cocke
On Tue, 26 Apr 2005 15:53:42 -0400, you wrote: >On Tue, Apr 26, 2005 at 03:36:46PM -0400, Michael W Cocke wrote: >> I'm in the middle of rebuilding my mail server from scratch, and I >> just came across a reference to an SA plugin that doesn't seem to be >> availa

MSExec plugin?

2005-04-26 Thread Michael W Cocke
I'm in the middle of rebuilding my mail server from scratch, and I just came across a reference to an SA plugin that doesn't seem to be available anymore - MSExec. More out of curiousity than anything else, what happened to it/the author? Mike- -- Mornings: Evolution in action. Only the grumpy

Re: [OT] Replacement for amavisd-new?

2005-01-31 Thread Michael W Cocke
Just for the record and FYI - I found the cause of at least one major problem, and possibly more. SuSE 9.1 ships with the BerkeleyDB built incorrectly! As shipped, It will only support DB_PRIVATE operations, which causes problems with amavisd and possibly nmdb and postfix. You need to recompile

Re: [OT] Replacement for amavisd-new?

2005-01-31 Thread Michael W Cocke
On Mon, 31 Jan 2005 00:08:32 +, you wrote: >Michael W Cocke wrote: > >>A serious bug seems to have crept into amavis somewhere, or maybe >>BerkeleyDB - stability has gone to hell. In any case, I'm starting to >>think about replacing Amavisd. I can't aff

[OT] Replacement for amavisd-new?

2005-01-31 Thread Michael W Cocke
A serious bug seems to have crept into amavis somewhere, or maybe BerkeleyDB - stability has gone to hell. In any case, I'm starting to think about replacing Amavisd. I can't afford to futz around with my email server - it needs to work. Currently I run postfix, amavisd, spamassassin, clam & fpro

Re: What to do with my spam?

2005-01-25 Thread Michael W Cocke
On Mon, 24 Jan 2005 22:11:48 -0500, you wrote: >On Mon, Jan 24, 2005 at 09:07:27PM -0600, Thomas Cameron wrote: >> Does anyone know if there is a way to automagically report messages via >> spamd, maybe if they score over a certain level? > >No way. It does checks only. Well, it depends... I h

Re: OT: Crippled Verizon phones

2005-01-23 Thread Michael W Cocke
On Sat, 22 Jan 2005 20:47:05 -0800, you wrote: >> months I had them. Verizon may be annoying, but at least I can use >> their system. > >Note that Verizon and Verizon Wireless seem to be separate companies. I got >my cel phone from Verizon Wireless before Verizon itself was selling cell >phones.

Re: OT: Crippled Verizon phones

2005-01-22 Thread Michael W Cocke
On Sat, 22 Jan 2005 14:11:26 -0500, you wrote: >Chris Santerre wrote: >> LOL FWIW, the site mentioned in my original post is still UP!! >> >> After reading what verizon wireless did with the bluetooth cell phones(1), >> I've pretty much given up hope that ANYONE in upper managment of any verizon

Heads up! SuSE YOU update broke SA 3.01

2004-12-07 Thread Michael W Cocke
Just passing this along so you don't have to kill 2 days trying to figure out why SA suddenly stopped doing anything - I foolishly allowed SuSE auto-update (YOU) to update my Spamassassin. It (in theory) installed version 3.01 (which was already installed and working perfectly). Shortly after,

Heads up! SuSE YOU update broke SA 3.01

2004-12-07 Thread Michael W Cocke
Just passing this along so you don't have to kill 2 days trying to figure out why SA suddenly stopped doing anything - I foolishly allowed SuSE auto-update (YOU) to update my Spamassassin. It (in theory) installed version 3.01 (which was already installed and working perfectly). Shortly after,

Re: wich is the best milter interface for spamassassin?

2004-12-01 Thread Michael W Cocke
On Wed, 01 Dec 2004 11:12:27 -0800, you wrote: >Matias Lopez Bergero wrote: >> I'm also running clamav with clamav-milter, and I would like to hit the >> best performance, that's why I was asking for comments :) The absolute top performance improvement that you can do to your mail server is to g

Re: After upgrade

2004-11-20 Thread Michael W Cocke
On Sat, 20 Nov 2004 16:58:48 +, you wrote: >Hi all, > I have just upgraded my SA from 2.63 to 3.0.1, this all running on SuSE 9.1 >Pro. > >But I must have cocked something up, but as to what I have no clue. This is >where the community can offer some insight, Please.. > >Upon restarting

Re: [OT] Amavisd memory usage

2004-11-17 Thread Michael W Cocke
Thanks! Mike- On Wed, 17 Nov 2004 12:19:27 -0800, you wrote: >-BEGIN PGP SIGNED MESSAGE- >Hash: SHA1 > > >yep, it's normal; big/complex messages result in bigger allocations, >and those allocs don't get returned to the OS until the process >exits. >

[OT] Amavisd memory usage

2004-11-17 Thread Michael W Cocke
This is off topic and I apologize, but I really couldn't think of a better place to ask. I'm using Postfix 2.1.5/Amavisd 2.1.2/SA 3.01, and I just noticed something odd. Looking at top, the 5 copies of amavisd (I pre-spawn 4) have different memory usage numbers, with the oldest amavis using the mo

Re: spamc sanity check failures on Suse 9.1

2004-10-06 Thread Michael W Cocke
On Tue, 05 Oct 2004 19:26:54 +0100, you wrote: >John Beranek wrote: > >> >> I've not got a spamassassin RPM installed at. I just installed > ^all > >Note to self: Proofread a sentence after rewording it. :) > >John. I'm a past master at the obscure t

Re: spamc sanity check failures on Suse 9.1

2004-10-05 Thread Michael W Cocke
On Tue, 05 Oct 2004 12:00:26 +0100, you wrote: >I've just upgraded to SpamAssassin 3.0 and Suse 9.1, and have now >started noticing errors in my mail logs. I'm not sure if it's the OS >upgrade or the SpamAssassin upgrade. You've probably already checked this, but for the record - the /etc/sysco

Re: Catching Windows executables as attachments

2004-09-09 Thread Michael W Cocke
On Wed, 8 Sep 2004 22:07:53 -0700, you wrote: >I have currently tuned my SARE spam filters, and am humming right along, I get >one or 2 uncaught spams a day which is no big deal. But I would like to catch >the virus emails that have Win exe, scr, bat, and the like for attachments, >but I can't

Re: SpamAssassin 3.0.0-rc3 RELEASE CANDIDATE available!

2004-09-04 Thread Michael W Cocke
On Fri, 3 Sep 2004 23:49:30 -0800, you wrote: >On Friday 03 September 2004 09:17 pm, Theo Van Dinter wrote: > >>  - SpamAssassin now includes support for SPF (the Sender Policy Framework, >>    http://spf.pobox.com/). > >Why bother with this? > >http://www.infoworld.com/article/04/08/31/HNspammers