Catch-22 unsubscribing from this list.

2009-07-26 Thread Michael W. Cocke
There doesn't seem to be a web interface to subscribe/unscribe from this list. The email address users-unsubscr...@spamassassin.apache.org complains that my IP address is dynamic (which is why I use dyndns.org, thank you very much.) And on that subject, am I the only person who thinks that

Re: flooded with jr* spam

2008-02-08 Thread Michael W Cocke
On Thu, 07 Feb 2008 12:51:51 +0100, you wrote: Michael W Cocke wrote: They use DHCP. Netops has to trace it, and I seem to be about 5Kth on the list. sigh Ironic as hell, considering the effort I put into avoiding MIT netops about 20 years ago. But you should be able to run tcpdump

Re: flooded with jr* spam

2008-02-05 Thread Michael W Cocke
I'll trade you - somewhere in MIT (20K+ computers) is hitting me twice per second with ICMP packets, and netops can't find who I had to degrade the logging on my snort-inline because the system was drowning. Mike- On Tue, 5 Feb 2008 13:58:30 -0500, you wrote: Has anyone else noticed a

Re: flooded with jr* spam

2008-02-05 Thread Michael W Cocke
They use DHCP. Netops has to trace it, and I seem to be about 5Kth on the list. sigh Ironic as hell, considering the effort I put into avoiding MIT netops about 20 years ago. Mike- On Tue, 05 Feb 2008 21:01:04 +0100, you wrote: Michael W Cocke wrote: I'll trade you - somewhere in MIT

Re: flooded with jr* spam

2008-02-05 Thread Michael W Cocke
, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED] - Michael W Cocke [EMAIL PROTECTED] wrote

A rule for empty body and pdf attachment??

2007-08-02 Thread Michael W Cocke
These blasted PDF spams are driving me mad! Any ideas for a rule that would trip if there's no text in the body, just a PDF attachment ? (I'm using the PDFinfo plugin now, but I don't really understand it) Thanks! Mike- -- If you're not confused, you're not trying hard enough. -- Please note -

Re: A rule for empty body and pdf attachment??

2007-08-02 Thread Michael W Cocke
Thanks, both of you. Looks like an update to pdfinfo snuck out while I wasn't looking. I've made the adjustments. Mike- On Thu, 2 Aug 2007 10:39:20 +0200, you wrote: Michael W Cocke [EMAIL PROTECTED] wrote in message news:[EMAIL PROTECTED] These blasted PDF spams are driving me mad! Any

announce: urlx utility for spamassassin

2007-07-14 Thread Michael W Cocke
Most systems that I'm familiar with nowadays have the users put spam emails that manage to get past the filters into a special folder (directory) so they can be examined, in order to make the spam filter system more effective. In pursuit of that Idea, I've written urlx. Urlx is designed to

Using SA code to extract URLs ?

2007-01-12 Thread Michael W. Cocke
I was told a while back that the best way to extract urls from emails was to use code from SpamAssassin. Ok - Now, I need to do just that. Any pointers? I've looked thru the code in SpamCopURI, but unless there are some docs hidden somewhere I can't even figure out the entry point. Are

Re: Why won't imageinfo.pm work with SA 3.17? - access

2006-11-27 Thread Michael W Cocke
On Mon, 27 Nov 2006 01:16:42 -0500, you wrote: loadplugin Mail::SpamAssassin::Plugin::ImageInfo ImageInfo.pm That was it, thanks! Mike- -- If you're not confused, you're not trying hard enough. -- Please note - Due to the intense volume of spam, we have installed site-wide spam filters at

Re: Newbie Question

2006-11-26 Thread Michael W Cocke
For what it's worth, on the system here I have a special directory on the server set up, and when the users get a spam message they do a 'save as ascii text file' to that directory. sa-learn runs thru that directory every half hour. Just a thought. Mike- On Fri, 24 Nov 2006 15:39:35 +,

Why won't imageinfo.pm work with SA 3.17? - access

2006-11-26 Thread Michael W Cocke
I can't get the imgeinfo plugin to load with SA 3.17? I put this in v310.pre loadplugin Mail::SpamAssassin::Plugin::ImageInfo The Imageinfo.pm file is in the same directory as other PM files that are being correctly found, and When I try a spamassassin --lint, I get [5522] warn: plugin: failed

Re: blarsbl

2006-11-21 Thread Michael W Cocke
On Tue, 21 Nov 2006 10:29:15 -0600, you wrote: Has anyone had any dealings with this guy. I take my mail server very seriously. Further I take spamming very seriously in general. Even when I detect one of my customers sending spam I disable there internet until the problem is resolved The

amavisd-new or mailscanner?

2006-11-21 Thread Michael W Cocke
I started out using amavisd-new then switched to MailScanner as my mail tester 'framework' (SpamAssassin has been a constant) Looking thru the docs of Mailscanner, it doesn't come out and SAY that it just does the 'basic' spam test features, but reading between the lines it seems to - I have a

Re: [OT] Re: Fw: failure notice / spaassassin.apache.org

2006-10-02 Thread Michael W Cocke
On Mon, 2 Oct 2006 23:31:57 +0200 (CEST), you wrote: On Fri, September 29, 2006 19:59, Andreas Pettersson wrote: It looks like you are listed in spamcop and apparently Comcast is either using spamcop or they have their own list that is blocking you. Comcast themselves are using a spam

Please sanity check these ideas for rules.

2006-08-31 Thread Michael W Cocke
I've got every ruleset blacklist available and I'm still getting buried - the bayes poison in all of the recent spam has wrecked that. Does anyone see a reason why I can't assume messages with blank subjects are junk? Also, I've got an idea about maybe doing an nslookup on the envelope sender

Re: Please sanity check these ideas for rules.

2006-08-31 Thread Michael W Cocke
On 31 Aug 2006 20:39:47 -, you wrote: On Thu, 31 Aug 2006, Michael W Cocke wrote: I've got every ruleset blacklist available and I'm still getting buried - the bayes poison in all of the recent spam has wrecked that. Does anyone see a reason why I can't assume messages with blank

sa-stats ver 6256 w/SA 3.1

2006-03-16 Thread Michael W Cocke
I never looked in the tools directory before, but I just noticed sa-stats. (sa-stats version 6256, SA version 3.10). I tried running it, and got all zeros for every number. Is there an init step that's non-obvious (I set the config info up), or did this version not work? It's not a priority -

Re: AWL growing too large

2006-03-16 Thread Michael W Cocke
On Wed, 15 Mar 2006 18:24:41 -0500, you wrote: jdow wrote: OK, when the storage structure of the tarball based package you want changes how do you extirpate the old and insert the new without the rather depressingly familiar dual SpamAssassin install? (Not that the package systems like RPM

[OT] postfix and MailScanner?

2006-03-09 Thread Michael W Cocke
I just heard (on this list, which is why I'm following up here) that it is possible to use MailScanner with Postfix. Could someone who is please email me (my address is unmunged) a working main.cf master.cf? I tried all day, but I'm missing something. Thanks! Mike- -- If you're not confused,

Re: Amavisd replacement suggestion

2006-03-07 Thread Michael W Cocke
On Tue, 7 Mar 2006 14:10:26 -, you wrote: Shane Have a look at MailScanner as an alternative to amavisd - it's nice to have a choice isn't it.. My understanding is that mailscanner doesn't work safely with postfix. (IIRC someone on this list told me that when I first encountered mailscanner

Re: Amavisd replacement suggestion

2006-03-07 Thread Michael W Cocke
On Tue, 7 Mar 2006 15:04:11 -, you wrote: Works fine with postfix... http://wiki.mailscanner.info/doku.php?id=documentation:configuration:mta:pos tfix:politicss=politics Thanks Martin - very interesting! When I first heard of mailscanner I was very excited - I've been using Amavisd-new

Re: What do these messages with -D mean?

2006-02-13 Thread Michael W Cocke
On Sun, 12 Feb 2006 15:11:12 -0800, you wrote: I ran spamassassin -D and got the following in the debug output. Is this a problem? If so what should I do? [27299] dbg: bayes: no dbs present, cannot tie DB R/O: /var/spool/MIMEDefang/mimedefang-bayes_toks [27299] dbg: bayes: not scoring message,

Re: Xtracting urls from saved spams making SA rules - xurl001.p l

2006-02-11 Thread Michael W Cocke
*Apologies if you've already seen this - I can't find any indication that it sent when I hit send and I'm fooling with a new mail client* On Fri, 10 Feb 2006 11:21:25 -0500, you wrote: I think I know a bit about extracting URLs from spam ;) A bit. massive understatement It is pretty damn

Xtracting urls from saved spams making SA rules - xurl001.pl

2006-02-10 Thread Michael W Cocke
It's absolutely not finished, but attached is a quick perl hack I'm using to read thru a directory of saved spam (text files), extract urls and automatically build SA rules for them. It's not debugged throughly and I have a few more things to add, but I know I'm not the only person who can use

Re: spam still isn't being caught much.

2006-02-07 Thread Michael W Cocke
On Tue, 07 Feb 2006 18:58:08 +0100, you wrote: I know that SuSE had -L as default at one point in time. Just remove the '-L' part. It still does as of 10.0, Bog knows why. And as of 9.3 it was a an incredibly poor idea to allow YaST to update SpamAssassin. Mike- (Amavisd-new, f-prot, clam,

Re: Is this really eBay?

2005-10-08 Thread Michael W Cocke
On Sat, 8 Oct 2005 12:45:14 +0200, you wrote: Hi, is this an eBay e-mail? All the links are going to mediaplex.com, that's what makes me ask. I've put the e-mail here: http://zmi.at/x/ebay.txt small part of e-mail Sammeln und Seltenes:

Rule: envelope to header to - help?

2005-07-10 Thread Michael W Cocke
Does anyone have a rule to chech the envelope To: against the header to: ? I'm sure that there's a reason why it's allowed to be different, but it doesn't apply here, and almost half of the spam that gets thru everything else would get stopped by that. Thanks! Mike- -- Mornings: Evolution in

Re: MSExec plugin?

2005-04-27 Thread Michael W Cocke
On Tue, 26 Apr 2005 15:53:42 -0400, you wrote: On Tue, Apr 26, 2005 at 03:36:46PM -0400, Michael W Cocke wrote: I'm in the middle of rebuilding my mail server from scratch, and I just came across a reference to an SA plugin that doesn't seem to be available anymore - MSExec. More out

MSExec plugin?

2005-04-26 Thread Michael W Cocke
I'm in the middle of rebuilding my mail server from scratch, and I just came across a reference to an SA plugin that doesn't seem to be available anymore - MSExec. More out of curiousity than anything else, what happened to it/the author? Mike- -- Mornings: Evolution in action. Only the

[OT] Replacement for amavisd-new?

2005-01-31 Thread Michael W Cocke
A serious bug seems to have crept into amavis somewhere, or maybe BerkeleyDB - stability has gone to hell. In any case, I'm starting to think about replacing Amavisd. I can't afford to futz around with my email server - it needs to work. Currently I run postfix, amavisd, spamassassin, clam

Re: [OT] Replacement for amavisd-new?

2005-01-31 Thread Michael W Cocke
On Mon, 31 Jan 2005 00:08:32 +, you wrote: Michael W Cocke wrote: A serious bug seems to have crept into amavis somewhere, or maybe BerkeleyDB - stability has gone to hell. In any case, I'm starting to think about replacing Amavisd. I can't afford to futz around with my email server

Re: [OT] Replacement for amavisd-new?

2005-01-31 Thread Michael W Cocke
Just for the record and FYI - I found the cause of at least one major problem, and possibly more. SuSE 9.1 ships with the BerkeleyDB built incorrectly! As shipped, It will only support DB_PRIVATE operations, which causes problems with amavisd and possibly nmdb and postfix. You need to

Re: What to do with my spam?

2005-01-25 Thread Michael W Cocke
On Mon, 24 Jan 2005 22:11:48 -0500, you wrote: On Mon, Jan 24, 2005 at 09:07:27PM -0600, Thomas Cameron wrote: Does anyone know if there is a way to automagically report messages via spamd, maybe if they score over a certain level? No way. It does checks only. Well, it depends... I have a

Re: OT: Crippled Verizon phones

2005-01-23 Thread Michael W Cocke
On Sat, 22 Jan 2005 20:47:05 -0800, you wrote: months I had them. Verizon may be annoying, but at least I can use their system. Note that Verizon and Verizon Wireless seem to be separate companies. I got my cel phone from Verizon Wireless before Verizon itself was selling cell phones. I

Re: OT: Crippled Verizon phones

2005-01-22 Thread Michael W Cocke
On Sat, 22 Jan 2005 14:11:26 -0500, you wrote: Chris Santerre wrote: LOL FWIW, the site mentioned in my original post is still UP!! After reading what verizon wireless did with the bluetooth cell phones(1), I've pretty much given up hope that ANYONE in upper managment of any verizon

Heads up! SuSE YOU update broke SA 3.01

2004-12-07 Thread Michael W Cocke
Just passing this along so you don't have to kill 2 days trying to figure out why SA suddenly stopped doing anything - I foolishly allowed SuSE auto-update (YOU) to update my Spamassassin. It (in theory) installed version 3.01 (which was already installed and working perfectly). Shortly

Heads up! SuSE YOU update broke SA 3.01

2004-12-07 Thread Michael W Cocke
Just passing this along so you don't have to kill 2 days trying to figure out why SA suddenly stopped doing anything - I foolishly allowed SuSE auto-update (YOU) to update my Spamassassin. It (in theory) installed version 3.01 (which was already installed and working perfectly). Shortly

Re: wich is the best milter interface for spamassassin?

2004-12-01 Thread Michael W Cocke
On Wed, 01 Dec 2004 11:12:27 -0800, you wrote: Matias Lopez Bergero wrote: I'm also running clamav with clamav-milter, and I would like to hit the best performance, that's why I was asking for comments :) The absolute top performance improvement that you can do to your mail server is to get

Re: After upgrade

2004-11-20 Thread Michael W Cocke
On Sat, 20 Nov 2004 16:58:48 +, you wrote: Hi all, I have just upgraded my SA from 2.63 to 3.0.1, this all running on SuSE 9.1 Pro. But I must have cocked something up, but as to what I have no clue. This is where the community can offer some insight, Please.. Upon restarting the

[OT] Amavisd memory usage

2004-11-17 Thread Michael W Cocke
This is off topic and I apologize, but I really couldn't think of a better place to ask. I'm using Postfix 2.1.5/Amavisd 2.1.2/SA 3.01, and I just noticed something odd. Looking at top, the 5 copies of amavisd (I pre-spawn 4) have different memory usage numbers, with the oldest amavis using the

Re: [OT] Amavisd memory usage

2004-11-17 Thread Michael W Cocke
Thanks! Mike- On Wed, 17 Nov 2004 12:19:27 -0800, you wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 yep, it's normal; big/complex messages result in bigger allocations, and those allocs don't get returned to the OS until the process exits. - --j. Michael W Cocke writes

Re: spamc sanity check failures on Suse 9.1

2004-10-06 Thread Michael W Cocke
On Tue, 05 Oct 2004 19:26:54 +0100, you wrote: John Beranek wrote: I've not got a spamassassin RPM installed at. I just installed ^all Note to self: Proofread a sentence after rewording it. :) John. I'm a past master at the obscure typo late