Re: Unsubscribe

2017-04-05 Thread Bret Miller
On 4/5/2017 11:53 AM, Reindl Harald wrote: * when you subscribe you get a welcome message * that message explains it and says "keep me stored" * HOW did you subscribe? the same way you unsubscribe And if I subscribed 2 years ago, do you honestly think I remember how I subscribed? * every

RE: Unsubscribe

2017-04-05 Thread Bret Miller
True that, but it's not entirely obvious how to view the message headers in many of today's mail clients. Of course, if you're on this list, you'd think you'd understand where to find them... -Original Message- From: John Hardin [mailto:jhar...@impsec.org] Sent: Tuesday, April 4, 2017

Re: Ignore forwarding headers from specific sender

2015-07-30 Thread Bret Miller
Why not just add the blocked email address to the blocked sender list for your Hotmail account? On 7/30/2015 12:28 PM, RW wrote: On Thu, 30 Jul 2015 13:21:35 -0500 Al B wrote: I have 2 accounts: myaccount@gmail.commyacco...@hotmail.com I've been using Spamassassin with both accounts and all

Re: dns*.registrar-servers.com as a rogue registrar?

2013-05-07 Thread Bret Miller
I use NameCheap for my own domain registrations and recommend it to others, so I can guarantee that at least my family's email isn't spam... Bret Miller Manager, Information Technology Grace Communion International Email: bret.mil...@gci.org mailto:bret.mil...@gci.org Phone: (626) 650-2343

Re: How to get spam score by Windows command-line

2011-11-14 Thread Bret Miller
On 11/14/2011 12:23 PM, Bowie Bailey wrote: On 11/14/2011 3:07 PM, Mike Koleszar wrote: Hi all, I would like to put together a script that will show me the spam score of emails that come in. I was hoping that someone could help push me in the right direction to do this. I'm hoping there is a

Re: proper rule writing for N

2011-10-21 Thread Bret Miller
You could say header __LOCAL_MAILENGINE ALL =~ /mailengine.+\.com/i to match anything between mailengine and .com. Bret Miller Manager, Information Technology Grace Communion International On 10/21/2011 9:13 AM, R - elists wrote: There are a couple of ways to do it. If you know

Re: broken emails from techtarget/crn mag? omeda communications?

2011-07-22 Thread Bret Miller
Well, I don't actually subscribe to any active techtarget lists, but I do still get marketing garbage from them. Got one on the 19th that looked fine here. Bret On 7/22/2011 8:50 AM, Michael Scheidell wrote: any of you subscribed to techtarget or crm emails? seems on june 16th or 17th,

Re: Should Spamhaus default to disabled?

2010-06-11 Thread Bret Miller
(Sorry about the top post...) One of the big issues with RBL services like this is the rules that use them change over time. We quite nicely fit into free use, but I realize that there are many others who do not. It might be a good enhancement to SA to be able to make a way to disable all

Re: SORBS

2010-04-20 Thread Bret Miller
On 4/20/2010 8:10 AM, John Rudd wrote: Are you the ISP for the IP address, or the client/user? According to SORBS, requests for removal from the DUHL should come from the ISP that owns the IP space, not the end user that rents it. See: http://www.au.sorbs.net/faq/dul.shtml End users (non ISP

Re: SORBS

2010-04-20 Thread Bret Miller
On 4/20/2010 9:05 AM, Benny Pedersen wrote: On tir 20 apr 2010 18:00:23 CEST, Bret Miller wrote them as an organization. You need your email to be delivered reliably to everyone on the internet and that's the only way it's going to happen. not correct, hotmail gmail yahoo works without isp

Re: How to use the Spamhaus DBL

2010-04-20 Thread Bret Miller
On 4/20/2010 3:09 PM, Jack Knowlton wrote: Hi all. I noticed Spamhaus made available a new URIBL. I updated my SA package (debian testing) to the latest version and I wanted to implement check on the DBL list too. How do I configure spamassassin to do that? Thanks, -JK Get SA 3.3.1. Run

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-22 Thread Bret Miller
I didn't try to make spamc with mine. If you're doing that, it is possible that there could be a configuration situation that prevents it. I'm not sure why else it would fail. For the few items I had to manually compile and install I used Visual Studio 2008 Express. Bret On 3/22/2010 10:40

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-19 Thread Bret Miller
On 3/19/2010 5:25 AM, weirdbeardmt wrote: I'm trying to install SA 3.30 on W2k8 64-bit. I have ActivePerl 5.10.1 with dmake 4.12 (since nmake won't run on 64-bit). I am quite new to this so sorry if I'm asking something stupidly obvious. I've installed Net-DNS, IP-Country, Mail-SPF, Error,

Re: Installing under windows

2009-02-17 Thread Bret Miller
You might try running ppm insteractively. Perhaps Win32-Registry-File is already installed, or ppm is unable to load the package database from ActiveState? I know both those packages exist because I have them installed on ActivePerl 5.8.8.820. Bret On 2/15/2009 5:42 AM, Jim wrote: I'm

Re: Temporary 'Replacements' for SaneSecurity

2009-01-15 Thread Bret Miller
On 1/15/2009 1:36 AM, Rasmus Haslund wrote: SM wrote: "Botnet Plugin" sounds like a plugin that detect botnets ... If Rasmus is finding that many false ositives, then he's using the wrong tools. Well I am not using the botnet plugin because i am not sure how to implement

Re: Razor2 and Windoze

2008-11-12 Thread Bret Miller
No... I'd say if it's working for you, then no worries. I'll have to try installing it again when I have a chance. Perhaps it matters what kind of compiler you use for installing too... Bret On 11/10/2008 6:04 AM, Dan Barker wrote: I read it on the internet (so it has to be trueg) that

RE: SA Windows Version stable?

2008-03-25 Thread Bret Miller
What are your experiences with SA on Windows Platform, since i am not using it for now. Would you recommended it or are there too many caveats? I have run SA on Windows for several years. Most built-in stuff works just fine. With a couple small modifications, you can even store your bayes and

RE: Apache SpamAssassin 3.2.4

2008-01-11 Thread Bret Miller
New upgrade is running GREAT here :) Running fine here on Windows Server 2003 with CommuniGate Pro. :) smime.p7s Description: S/MIME cryptographic signature

Timeout issues with recent updates

2007-10-12 Thread Bret Miller
Yesterday (at least that's when it was noticed), we started having timeout issues with SpamAssassin again. My average scan time went from 8.5 seconds last week and the week before to 20.5 seconds yesterday with many messages (primarily ham) running near the 120 second range. What happened in

RE: Parsing Received Headers

2007-09-04 Thread Bret Miller
I'm trying to get received headers to parse correctly because the ones from CommuniGate Pro don't always. And, since I'm already modifying the headers in my connector due to the MTA not being able to do RDNS without rejecting based on it, I'm not aware that certain types of headers

Parsing Received Headers

2007-08-31 Thread Bret Miller
I'm trying to get received headers to parse correctly because the ones from CommuniGate Pro don't always. And, since I'm already modifying the headers in my connector due to the MTA not being able to do RDNS without rejecting based on it, I'm not aware that certain types of headers don't parse

RE: Need a plugin written relating to black/white/yellow lists

2007-08-28 Thread Bret Miller
From: Marc Perkel [mailto:[EMAIL PROTECTED] Bret Miller wrote: From: Marc Perkel [mailto:[EMAIL PROTECTED] Bret Miller wrote: Bret Miller wrote: * 127.0.0.1 - whilelist - trusted nonspam * 127.0.0.2 - blacklist - block spam

RE: SA Updating

2007-08-28 Thread Bret Miller
Is there a way of updating spamassassin automatically to adapt to new ways of spamming. For instance, when picture spam came I had to install fuzzOCR, now with PDF and RTF, new modules are required. I also heard about rules-du-jour or something, do I always have to manually compile, add and

RE: YAGI: Yet Another Great Idea

2007-08-28 Thread Bret Miller
I'm going to propose you another great idea which will probably radically change the spam-detection technics. No, come one: I'm just kitting. :) I think this idea could eventually help in better detecting the kind of spam in which some words are garbled in order to deceive their

RE: Need a plugin written relating to black/white/yellow lists

2007-08-28 Thread Bret Miller
From: Marc Perkel [mailto:[EMAIL PROTECTED] Bret Miller wrote: Bret Miller wrote: * 127.0.0.1 - whilelist - trusted nonspam * 127.0.0.2 - blacklist - block spam * 127.0.0.3 - yellowlist - mix of spam and nonspam

RE: Need a plugin written relating to black/white/yellow lists

2007-08-27 Thread Bret Miller
Before you look at this as just another blacklist - the real power is in the white and yellow lists. First - an overview. My list returns these codes: * 127.0.0.1 - whilelist - trusted nonspam * 127.0.0.2 - blacklist - block spam * 127.0.0.3 - yellowlist - mix of spam

RE: Need a plugin written relating to black/white/yellow lists

2007-08-27 Thread Bret Miller
* 127.0.0.1 - whilelist - trusted nonspam * 127.0.0.2 - blacklist - block spam * 127.0.0.3 - yellowlist - mix of spam and nonspam * 127.0.0.4 - brownlist - all spam - but not yet enough to

RE: Need a plugin written relating to black/white/yellow lists

2007-08-27 Thread Bret Miller
Bret Miller wrote: * 127.0.0.1 - whilelist - trusted nonspam * 127.0.0.2 - blacklist - block spam * 127.0.0.3 - yellowlist - mix of spam and nonspam * 127.0.0.4 - brownlist - all spam - but not yet

BOTNET Exceptions for Today

2007-08-21 Thread Bret Miller
I keep saying that I have false positives with botnet, but haven't substantiated that to date. So, today I'm spending a little time making exceptions since I would like this to work. Here are todays: Americanpayroll.org, sent from IP 67.106.104.135, resolves to 67.106.106.135.ptr.us.xo.net #OK,

RE: BOTNET Exceptions for Today

2007-08-21 Thread Bret Miller
Bret Miller wrote: Enews.webbuyersguide.com (part of Ziff-Davis Media), sent from IP 204.92.135.90, resolves to smtp22.enews.webbuyersguide.com #not sure why this got a BOTNET=1 flag, but it did. Also find hosts 92, 75, 70, 74, 93, 86, and others. All similarly resolve

RE: BOTNET Exceptions for Today

2007-08-21 Thread Bret Miller
At 12:36 21-08-2007, John Rudd wrote: # nslookup www2mail.wordreference.com Non-authoritative answer: Name: www2mail.wordreference.com Address: 75.126.29.11 baddns. There's an authoritative answer for www2mail.wordreference.com. # nslookup server.nch.com.au Non-authoritative

FW: Question - How many of you run ALL your email through SA?

2007-08-17 Thread Bret Miller
Apparently I must be a spammer since I can't send e-mail to perkel.com... At least this response has been delayed since 9:16 a.m. pacific time yesterday. Oh well... Here's the response. Bret -Original Message- From: Bret Miller [mailto:[EMAIL PROTECTED] Sent: Thursday, August 16, 2007 9

RE: how to stop the spam assassin

2007-08-16 Thread Bret Miller
I am running SA 3.1.7. I need to upgrade it. I have to stop the current running SA. how to stop the service? That really depends on how you are calling SA. I know you run it on Windows, but what mail server, and how is it called. I use CommuniGate Pro with CGPSA. To stop SA, I have to kill the

RE: Plugin Install

2007-07-19 Thread Bret Miller
Hi, I have tried to install plugin in this mode: - I have put .cf file in /etc/mail/spamassassin - I have put .pm file in /usr/lib/perl5/5.8.8 Put it in /etc/mail/spamassassin. - I have edit v310.pre and I have add the line: loadplugin Mail::SpamAssassin::Plugin::PDFInfo Then try:

RE: Parsing attachments

2007-07-19 Thread Bret Miller
I ran across the script (pasted below, and watch wrapping) on this list about a year ago or so. I use it to parse attachments forwarded as attachments from MS Outlook. It worked very well until I upgraded to SpamAssassin 3.2.1 I imagine they changed something in the way that the find_parts

RE: FORGED_AOL_TAGS hitting on real AOL mail

2007-07-06 Thread Bret Miller
I'm starting to see a lot of AOL mail getting pushed into the review folder (above 4.0 score) with the FORGED_AOL_TAGS rule hitting, and apparently on real AOL e-mail. At least the e-mails were SPF_PASS and received from an AOL server... Add this to local.cf, all fixed: score

FORGED_AOL_TAGS hitting on real AOL mail

2007-07-05 Thread Bret Miller
I'm starting to see a lot of AOL mail getting pushed into the review folder (above 4.0 score) with the FORGED_AOL_TAGS rule hitting, and apparently on real AOL e-mail. At least the e-mails were SPF_PASS and received from an AOL server... Here are two examples:

RE: SaneSecurity

2007-06-27 Thread Bret Miller
Perhaps more a clamav question, but does anyone use the additional definitions for clam from SaneSecurity and are they helpful in the Spam Wars? You're in luck! I just installed them yesterday. Had been meaning to for a while, but things have been too busy to get the script written to update

RE: SaneSecurity

2007-06-27 Thread Bret Miller
Bret Miller wrote: Perhaps more a clamav question, but does anyone use the additional definitions for clam from SaneSecurity and are they helpful in the Spam Wars? You're in luck! I just installed them yesterday. Had been meaning to for a while, but things have been too busy to get

RE: Setup SA to use mysql DB

2007-06-26 Thread Bret Miller
OK, I don't use MySQL, but I do use SQL for Bayes and AWL. Here are my settings (which are working currently in 3.2.1): # auto_whitelist settings auto_whitelist_factory Mail::SpamAssassin::SQLBasedAddrList user_awl_dsn DBI:ODBC:Driver={SQL Server};Server=MAIL;Database=sql-database

RE: Update directory

2007-06-19 Thread Bret Miller
On Tue, 2007-06-19 at 18:03 +, Duane Hill wrote: On Tue, 19 Jun 2007, Robert Fitzpatrick wrote: Can someone tell me for sure which way this needs to be and how to get sa-update to look at /usr/local/share/spamassassin again if that is what I need to do? I'm using FreeBSD here

SA 3.2.1 Running Fine on Windows

2007-06-15 Thread Bret Miller
The subject says it. I installed 3.2.1 on Windows Server 2003 with ActivePerl 5.8.8.820 yesterday. No problems since installing. Good job as usual. Bret

RE: Status of Spamassassin

2007-06-14 Thread Bret Miller
On Wed, Jun 13, 2007 at 07:30:10AM -0500, Dallas Engelken wrote: The Doctor wrote: Cans rules_du_jour work? Still getting a no update state. SARE is back up (knock on wood). Delete your .cf files and re-run RDJ... -- Dallas Engelken [EMAIL PROTECTED]

RE: how to configure spamassassin in MS Exchange 2003 server

2007-06-14 Thread Bret Miller
sg wrote: hi We are using MS Exchange 2003 server on windows 2003 server. We have registered with domain service and using 50 mail users. We are getting lot of spam mails. I want to know the configuring details of Mail-spamassassin-3.1.7 and how to control the spam mails.. I'd

RE: DKIM / Domainkey feature ins spamassassin

2007-06-07 Thread Bret Miller
i got a question , Domainkey is now unsupportet, Dkim is supportet, and Domainkey compat. when i use this plugins with spamassassin, what are the main differents between using this plugin for checking sign on incoming mails, and checking it via a MTA (and domainkeys). Normaly the Mta,

RE: sa-update

2007-06-06 Thread Bret Miller
Hi! Below the debug output of my sa-update - what about this ('require' failed) lines - do I have to install Perl modules to get this Spamassassin modules? I don't see anything in the debut output that indicates that it failed. The missing requires are all optional modules AFAIK, so it all

RE: sa-compile and SARE

2007-05-23 Thread Bret Miller
Does this fix the performance problems I was having, or does it just fix the UTF errors showing in the logs with Perl 5.8.8 ? You might try it and see if it helps with the performance. Since it does fix the UTF-8 issue it won't be doing as much logging and grinding. let us know if it

RE: perl version

2007-05-15 Thread Bret Miller
Is there a standard perl version that the SA team aspires to and uses as a baseline or some sort? If so, is it the 5.8.8 or newer or ??? For running on Windows, 5.8.8 is highly recommended. 5.6.1 can work, but it is rather unstable. Can't really comment on what runs best for other

RE: /etc/mail/spamassassin files

2007-05-15 Thread Bret Miller
Someone mentioned issues with config files in /etc/mail/spamassassin in regards to the newer 3.2.0 I understand what you mentioned about what should be in .pre files and .cf files Did you find any other issues with just general alternatively named .cf files or problems with them? It's

RE: SPF custom rule

2007-05-09 Thread Bret Miller
Thanks for the info Bret. What I've come up with is this: header _FROM_DOMAIN From ~= /example\.com/i header _SPF_TRUE /\bSPF_FAIL\b/ meta DOMAIN_SPF_TRUE (_FROM_DOMAIN_SPF_TRUE) score DOMAIN_SPF_TRUE 10.0 Will this work? Kinda, with few changes:

RE: SPF custom rule

2007-05-08 Thread Bret Miller
I need to look at setting up a custom rule based on a SPF result. If mail is sent from domain xyz.com and the SPF record matches, let it pass as per normal. If on the other hand the SPF record fails for xyz.com, add +5 to the score. This has to happen ONLY for domain xyz.com. All others will

RE: notice diff between using 3.1.8 and 3.2.0 ?

2007-05-04 Thread Bret Miller
Is anyone noticing small, medium, or large improvements in how well 3.2.0 does it's job compared to 3.1.8 ??? I'm seeing less spam slipping through in 3.2.0 rc3 than with 3.1.8. Of course, that could be coincidental, but I'd rather attribute it to the SA upgrade. Bret

RE: Catching and stopping 419 spam

2007-04-30 Thread Bret Miller
On Sun, Apr 29, 2007 at 09:52:39PM -0700, Marc Perkel wrote: OK - I did this with Exim rules but the same trick could be used in SA. I figured out a trick that catches 419 spam with amazing accuracy. ... So - who uses one freemail address with a reply-to of another? 419 spammers. So

whitelist_from_rcvd problem

2007-04-26 Thread Bret Miller
One of my users is supposed to get messages from this person, but they often get marked as spam. So I want to whitelist, and I can use whitelist_from, but I want to use whitelist_from_rcvd. BUT, it doesn't work for me. I said: whitelist_from_rcvd [EMAIL PROTECTED] sbc.com Which I think means

RE: whitelist_from_rcvd problem

2007-04-26 Thread Bret Miller
One of my users is supposed to get messages from this person, but they often get marked as spam. So I want to whitelist, and I can use whitelist_from, but I want to use whitelist_from_rcvd. BUT, it doesn't work for me. I said: whitelist_from_rcvd [EMAIL PROTECTED] sbc.com Which I think

RE: RBL tests on MTA vs. RBL rules on SA

2007-04-25 Thread Bret Miller
Hi, list, I know this is one of those egg and chicken kind of questions, but having now the possibility of checking the impact of various setups, I was wondering if it is more convenient to let the MTA perform the RBL checks, or disable them and let SA do this job. Currently I am using

RE: RBL tests on MTA vs. RBL rules on SA

2007-04-25 Thread Bret Miller
the actual server it's receiving from. SA, in many cases, checks farther back, so you may hit RBLs in SA that you wouldn't on your MTA. I use zen.spamhaus.org and list.dsbl.org on the MTA. Bret Thanks Bret Miller wrote: Hi, list, I know this is one of those egg and chicken kind

RE: which sa-update channels (was RBL tests on MTA vs. RBL rules on SA)

2007-04-25 Thread Bret Miller
snip Regarding sa-update, which channels are you using? I'm currently running on saupdates.openproect.com. Any suggestions on this subject? I Use: updates.spamassassin.org 00_FVGT_File001.cf.sare.sa-update.dostech.net 99_FVGT_meta.cf.sare.sa-update.dostech.net

RE: 3.2.0-rc2?

2007-04-17 Thread Bret Miller
How's this working out? Any good/bad reports? Just installed, tested and deployed this today on CommuniGate Pro on Windows 2003. So far, seems to be running well. Only time will tell if it's better or worse than 3.1.8. I actually managed to get DKIM support installed on Windows this time

RE: sa-update too quiet

2007-03-29 Thread Bret Miller
Could future versions of sa-update please be a little more vocal? Like maybe no new updates found | loaded xxx new updates | error xxx Exit codes are not evident when simply typing sa-update on the command line... I created my own simple batch file for windows. It runs sa-update. Checks the

Why doesn't whitelist_from_rcvd work on this?

2007-03-16 Thread Bret Miller
I'm having trouble figuring out why my whitelist_from_rcvd statement doesn't work on this message. whitelist_from_rcvd [EMAIL PROTECTED] *.cems.wamu.com #Washington Mutual Statements Message Headers: X-Spam-Tests: tests=AWL=0.427,BAYES_00=-2.599,DBL_12_LETTER_PGIMG=0.2,

RE: SA on SBS

2007-03-01 Thread Bret Miller
Any issues installing SA on a Microsoft Small Business Server with their Exchange version? I can't think of any. Any recommendations pros/cons will be appreciated. Get the latest ActivePerl (5.8.8.820) and perl modules. See http://wiki.apache.org/spamassassin/InstallingOnWindows See

RE: MTA for Windows

2007-02-23 Thread Bret Miller
Kenneth Porter wrote: I'm looking for an MTA I can install in an all-Windows SOHO. Open source and free preferable. Ideally with hooks for SpamAssassin. (At home I have a Linux box with sendmail, but a friend has no Linux on his LAN.) Free for a small number of user accounts (5 I

RE: MTA for Windows

2007-02-23 Thread Bret Miller
Bret Miller wrote: [snip] CommuniGate Pro is not open source, but offers a free community edition license (i.e., no key required) for 5 or less users. It runs fine on Windows (I use it at the office), has free 3rd-party add-ons for SpamAssassin (http://www.tffenterprises.com/cgpsa

RE: Odd mail makes SA fall over

2007-02-22 Thread Bret Miller
I received an odd email that makes spamd fall over. I'm using the SAWin32 port, and was wondering whether other users could also see the same problem with this message or whether the problem is peculiar to the Windows port. The glaring weirdness with this email is obviously the RSET in the

RE: updating 3.1.1 to 3.1.7

2007-02-09 Thread Bret Miller
using the DAG site and rpm -U, I updated spamassassin and spamassissin-tools to 3.1.7-1 Things don't look so good. Here is what happened when I restarted spamd spamd[26917]: spamd: server killed by SIGTERM, shutting down spamd[27082]: persistent_udp: no such method at

RE: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Bret Miller
Is it enough to create a cf file using notepad and save the file like yourfile.cf (with quotes) Yes. I notice that files that I make that way have the wordpad icon, but the original cf files I have in my ftp, has no icon. I generally have to use Wordpad with cf files supplied by others

RE: Newbie upgrade

2007-01-29 Thread Bret Miller
Please give me some simple advice - I've upgraded 3.0.3 to 3.1.7 from backports.org for my Debian Sarge (stable) installation. I'm still using my former local.cf. I've noticed that my ham is no longer being tagged with X-Spam headers, but the spam is getting these headers - at the top of

RE: White Listing

2007-01-03 Thread Bret Miller
I am looking for an easy way for my spamassassin to relearn messages marked as spam that users would like to get. Would it be safe and avoid bayesian poisoning if I were to setup an email box such as [EMAIL PROTECTED] and have users forward nonspam emails to this email address and then

RE: White Listing

2007-01-03 Thread Bret Miller
Forwarding is not a good idea, it adds and or changes the headers in the mail. Forward as attachment(s) could be a solution since original mail headers are kept intact. I've asked a similar question on this list some days ago, but nobody could say if there's a common practice how

RE: errors with spamassain in windows

2007-01-02 Thread Bret Miller
Answer n when it asks about building spamc. Or try this port: http://physics.ucsd.edu/~epivovar/anti-spam.htm Bret Im trying to install SpamAssasin under Windows,I installed perl and nmake. But I'm getting these errors: --- C:\Perl\bin\perl.exe version.h.pl version.h.pl: creating

RE: SPF detection making mistakes

2006-12-18 Thread Bret Miller
i'm getting some problems with the spamassassin spf modul (Mail::SpamAssassin::Plugin::SPF) maybe i can resolve this problem by asking the list. Please take a look at this header: --- start cut --- Return-path: [EMAIL PROTECTED] Delivery-date: Sun, 17 Dec 2006 10:45:20

RE: Botnet 0.6 plugin for Spam Assassin availabile

2006-12-18 Thread Bret Miller
Chris Lear wrote: * Oliver Schulze L. wrote (18/12/06 15:42): Nice stats! How do you generate them in SA 3.1.7 ? I use this: http://www.rulesemporium.com/programs/sa-stats-1.0.txt Chris Does this require using spamd instead of invoking

RE: MSRBL

2006-12-15 Thread Bret Miller
On Wednesday 13 December 2006 11:35 am, Bret Miller wrote: Has anyone here tried MSRBL (http://www.msrbl.com/site/)? I'm running it in trial now, but thought I'd ask to see if anyone here had an opinion before doing anything serious with it. TIA, Bret Bret, on my home

RE: Newbie needs help with Spam/Spam Assassin

2006-12-15 Thread Bret Miller
- why doesn't Spam Assassin recognize all these with the same subject/body as spam? Did you train your bayes database on one or more of these messages to tell it they were spam? It scored bayes_00 meaning it thinks it's not spam. - any suggestions/advice? www.rulesemporium.com. Get the

RE: How to tell why BAYES_00 is hit

2006-12-15 Thread Bret Miller
I have a bayes question I am hoping someone may be able to answer for me. Since implementing bayes it has been doing a very good job except for one thing. One particular spam email is not getting tagged as spam. My rules are scoring the email high enough to be tagged as spam, but it is

MSRBL

2006-12-13 Thread Bret Miller
Has anyone here tried MSRBL (http://www.msrbl.com/site/)? I'm running it in trial now, but thought I'd ask to see if anyone here had an opinion before doing anything serious with it. TIA, Bret

RE: MSRBL

2006-12-13 Thread Bret Miller
Has anyone here tried MSRBL (http://www.msrbl.com/site/)? I'm running it in trial now, but thought I'd ask to see if anyone here had an opinion before doing anything serious with it. I ran it here for a few hours with rblsmtpd and it got 0 hits, which also means 0 FP's on a very busy

RE: Breaking up the Bot army - we need a plan

2006-12-11 Thread Bret Miller
In my above example, SPF did nothing useful. And, my example shows exactly why SPF does not help at all with the spambot problem. If I'm a spambot wrangler, I create a group of throw-away domains, put in SPF records for them that say +all, and then send out my storm of spam. Then I

DomainKeys and DKIM for Windows?

2006-12-08 Thread Bret Miller
Has anyone managed to build DomainKeys or DKIM modules for Windows. I managed to build the OpenSSL libraries OK, but can't get Crypt::OpenSSL:RSA to install, so DomainKeys won't either... Any ideas? Bret

SPF not working with these headers, why?

2006-12-08 Thread Bret Miller
I should probably submit this to bz, but I thought I'd ask here first in case it's obvious... Why is SFP_PASS not firing on this? X-Spam-Tests: tests=AWL=-1.710,BAYES_50=0.001,BOTNET=0.5,BOTNET_BADDNS=0.01, BOTNET_NOSPF=3.5,DNS_FROM_RFC_ABUSE=0.2,DNS_FROM_RFC_POST=1.708,

RE: SPF not working with these headers, why?

2006-12-08 Thread Bret Miller
Bret Miller wrote: I should probably submit this to bz, but I thought I'd ask here first in case it's obvious... Why is SFP_PASS not firing on this? Run the message through spamassassin -Dspf and find out. Daryl OK. It says: [2840] dbg: spf: checking HELO (helo=, ip=65.17.198.50

RE: SPF not working with these headers, why?

2006-12-08 Thread Bret Miller
Bret Miller wrote: I should probably submit this to bz, but I thought I'd ask here first in case it's obvious... Why is SFP_PASS not firing on this? Run the message through spamassassin -Dspf and find out. Daryl OK. It says: [2840] dbg: spf: checking HELO (helo=, ip

RE: new Botnet plugin version soon

2006-11-30 Thread Bret Miller
Question 2: someone asked why my module is Botnet instead of Mail::SpamAssassin::Plugin::Botnet. The answer is: when I first started this (and this is/was my first SA Plugin authoring attempt), I tried that and it didn't work. If someone wants to look at it, and figure out how to make

RE: HTML Source Rule

2006-11-29 Thread Bret Miller
Hello, I was wondering if there is a way to write a rule for HTML source code contained in an email. I am getting many of these Buy This Stock emails and I am finding that the pictures contained in them all have a portion of a line of source that says... src=cid: Thanks in advance for any

RE: How to extract the Reverse DNS hostname by script means?

2006-11-16 Thread Bret Miller
, RCVD_IN_NJABL_PROXY, RCVD_IN_SORBS_HTTP, RCVD_IN_XBL X-Spam-Level: Best Regards, Leon Kolchinsky -Original Message- From: Bret Miller [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 15, 2006 10:04 PM To: users@spamassassin.apache.org Subject: RE: How to extract

RE: How to extract the Reverse DNS hostname by script means?

2006-11-15 Thread Bret Miller
Is there any automatic way (using a script), to extract the Reverse DNS hostname for the host that delivered the message to my network? The top Received header should contain the server you received the message from. That's the one that needs to go in the whitelist_from_rcvd line. Bret

RE: BIG increase in spam today

2006-11-03 Thread Bret Miller
Am Donnerstag, 2. November 2006 16:04 schrieb Amos: (...) Actually, it's getting to the extent that some at work are raising questions as to whether our SA setup will be able to maintain adequate protection from this growing onslaught. Amos Only AFTER adequate initial RBL filtering.

RE: CGPSA

2006-10-23 Thread Bret Miller
am using CGPro as mail server, and i need some help and advice I am planning to implement CGPSA on our ingate servers and am not quite sure if it is a good idea we recieve almost 7000 email per hour and i don't know if spamassassin is going to miss anything another question for the amount

RE: sa-update versus rulesdujour questions

2006-10-20 Thread Bret Miller
Theo Van Dinter wrote: FWIW, it happens to be the official tool since no one ever submitted RDJ to be the official tool, so we had to write our own. I would have offered, had I known there was any interest. Chris T. I'm glad it isn't the official tool since it doesn't run natively on

RE: Change rule score

2006-10-06 Thread Bret Miller
I would like to change the scores on the following. Could you tell me what file they are located in or how to modify the score? Thank you HOST_EQ_DSL HOST_EQ_DSL_ HOST_EQ_D_D_D_D HOST_EQ_PACBELL_DSL HOST_MISMATCH_NET I am running Redhat enterprise 4 with SpamAssassin 3.1.4 with

RE: double letter porn

2006-10-04 Thread Bret Miller
I've been getting lots of porn site spam containing words with doubled letters, like this one: Orrgy pornn parrties! Lotts of sttupid bitchees gangbangged by queue of guyss. annal_nailing and cum__swallowing orgiees. archiive of group_ssex

RE: Stock spam in images

2006-10-02 Thread Bret Miller
...omissis... How about the FuzzyOCR plugin? That has been discussed quite a bit here recently. http://wiki.apache.org/spamassassin/FuzzyOcrPlugin -- Bowie And, by the way, it seems to work! Actually, the only limit I see is the own-made FuzzyOcr.words (and, maybe, the fact

RE: update rules

2006-09-28 Thread Bret Miller
I just install a new version of spamassassin. What do I need to do, so it learns everything? You may wish to run sa-update: Or install additional add-on rules: http://wiki.apache.org/spamassassin/CustomRulesets Or run sa-learn against a recent set of ham (non-spam) and spam messages. The

RE: no tokens ? How can that be ?

2006-09-28 Thread Bret Miller
I came across a situation that seems non-intuitive; Two emails this am were spam, but hit BAYES_00. So they were (presumably) learned as Ham somewhere along the way. Not a valid presumption. The tokens may have been learned as ham from other messages, but there is no implication that this

RE: bayes sync is hogging cpu

2006-09-25 Thread Bret Miller
Me again. Since I'm not getting any responses I better keep posting more information as I've made some more investigating today. Sometimes when I run sa-learn --force-expire I get this response almost immediately: Bus error (core dumped) When I run again the process just hogs until I break

RE: bayes sync is hogging cpu

2006-09-25 Thread Bret Miller
I used to have problems with bayes locking and journaling. When it finally corrupted the database, I decided it was time to put it into a real SQL database instead of using DB_File. Haven't had a single problem with bayes CPU or locking since. Maybe it's time you consider using MySQL?

RE: Installation Errors

2006-09-20 Thread Bret Miller
I have SA 3.1.5 installed on Windows Server 2003, but I'm running ActivePerl 5.8.8.817. Guess it's time to check for 819... May I have the "perl makefile.pl" output, please? Bret [EMAIL PROTECTED] From: Thomas Meier [mailto:[EMAIL PROTECTED] Having trouble installing Spam

RE: Getting Spamassasin to work.

2006-08-29 Thread Bret Miller
First, thanks all that sent me help to get a test message to work. I was able to successfully get SA to trigger. It appears that SA is only currently working on my local mail accounts and not the alias/forward emails. So what I have is an Hosting provider which hosts my domain, that I

RE: gs as a plugin requirement?

2006-08-28 Thread Bret Miller
A poll for the list: do you consider it reasonable for a plugin to require ghostscript? (Assume for the sake of argument that rendering postscript is necessary to the analysis the plugin is performing.) I don't see how it's any more of a problem than requiring gocr... Actually, probably

  1   2   3   >