Re: FP on blacklist hostkarma

2009-12-15 Thread Kai Schaetzl
Mark, can you *please* stop sending HTML-only messages to the list? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

sa 3.3 problem with spec file?

2009-12-15 Thread Kai Schaetzl
I just built and make tested the beta of SA 3.3 with good success and wanted to build the rpm from it now. I get an error: error: line 38: Illegal char '-' in version: Version: 3.3.0-beta1 Seems that Version: %{version} doesn't like hyphens. What's the best way to overcome this? Change to _ for

Re: sa 3.3 problem with spec file?

2009-12-15 Thread Kai Schaetzl
Daniel J McDonald wrote on Tue, 15 Dec 2009 07:57:58 -0600: or alpha characters of any sort. Yeah, found this out a few minutes later. Removed that alltogether and built with %define real_version 3.3.0 which gives me an rpm with 1 as the release version. Upping this with --define 'release=n'

Re: Spam from compromised web mails

2009-12-15 Thread Kai Schaetzl
Yet Another Ninja wrote on Tue, 15 Dec 2009 16:37:35 +0100: even using site wide, autolearning will help your detection a LOT. Definitely. Been using site-wide for all my servers for years. No problems. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services:

Re: FP on blacklist hostkarma

2009-12-15 Thread Kai Schaetzl
Marc Perkel wrote on Tue, 15 Dec 2009 08:22:44 -0800: Get a modern email client. Please stop responding like an asshole. This is not a matter about my email client but about *you* configuring *your* email client incorrectly! Please configure your email client correctly! Thank you. Kai --

Re: [sa] Spam from compromised web mails

2009-12-15 Thread Kai Schaetzl
Charles Gregory wrote on Tue, 15 Dec 2009 12:12:41 -0500 (EST): I imagine this same thinking applies to any number of people using a 'basic' mail client and not bothering to 'sort' mail into alternate delivery folders which they must then 'remember' to read. If you don't sort away

Re: Reminder:: 3.3.0 pre-release cut: December 17th

2009-12-17 Thread Kai Schaetzl
Warren Togami wrote on Wed, 16 Dec 2009 18:12:05 -0500: All bugs targeted for 3.3.0. When reviewing this list and playing around I found that there are 22 bugs for milestone 3.2.6. Shouldn't these get reviewed and promoted to 3.3.0 if still valid? Kai -- Kai Schätzl, Berlin, Germany Get

Re: sa-update 403 forbidden

2009-12-17 Thread Kai Schaetzl
Daryl C. W. O'Shea wrote on Thu, 17 Dec 2009 13:28:48 -0500: early this morning. BTW, I was already getting this temporarily when trying to run the first sa-update for SA 3.3.0 beta1 a few days ago. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services:

Re: Sharing and merging bayes data?

2009-12-18 Thread Kai Schaetzl
Rajkumar S wrote on Fri, 18 Dec 2009 10:56:46 +0530: Is the file format of bayes db available some where? dbm, gdbm ... Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: ixHash / NixSpam downloadable lists

2009-12-18 Thread Kai Schaetzl
Marc Patermann wrote on Fri, 18 Dec 2009 12:21:21 +0100: When I try to test with an entry from a today's list, i get no result: (http://www.kloth.net/services/nslookup.php) That's a flaw in that service. I get 127.0.0.2. Isn't the OFD able to provide spam-free mail? Kai -- Kai Schätzl,

Re: ABORT PROPOSED: Apache SpamAssassin 3.3.0-rc1.proposed1

2009-12-20 Thread Kai Schaetzl
Warren, for the next releases until RTM, can we keep the spamassassin.spec at real_version 3.0.0 instead of adding the release type? I usually do a full make and make test run, but then build an rpm and install that. If the real_version contains non-digits other than a dot that fails, so each

Re: Recommended version of re2c?

2009-12-22 Thread Kai Schaetzl
Mark Martinec wrote on Tue, 22 Dec 2009 12:00:40 +0100: Just stick to the latest, when in doubt. The 0.13.5 works fine, it fixes some segfaults over previous versions. Runs here as well. With 3.2.5 and with 3.3.0. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet

Re: FH_DATE_PAST_20XX

2010-01-01 Thread Kai Schaetzl
I think this rule should just be put to rest. According to my stats it hits 100% spam, but there's only very very few of it. Thus it doesn't add any real value over other rules, especially when one takes into account that there are already other rules hitting on time in the (near) future.

Re: [sa] FH_DATE_PAST_20XX

2010-01-01 Thread Kai Schaetzl
Thomas Harold wrote on Fri, 01 Jan 2010 10:04:42 -0500: score FH_DATE_PAST_20XX 0.001 set to 0, there's no reason to have this evaluated at all. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: [sa] FH_DATE_PAST_20XX

2010-01-01 Thread Kai Schaetzl
Charles Gregory wrote on Fri, 1 Jan 2010 09:50:24 -0500 (EST): I speak for the unguessable number of people who have installed a 'standard' 3.2.x install with their linux variant, and don't monitor closely, or watch this list. Some of them, we can hope, will have 'sa-update' running in

Re: [sa] FH_DATE_PAST_20XX

2010-01-04 Thread Kai Schaetzl
you may get this error from time to time, which is not a problem per se. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: False positive for LOCAL_BODY_CIALIS

2010-01-05 Thread Kai Schaetzl
Cmvhk wrote on Tue, 5 Jan 2010 07:19:15 -0800 (PST): 2.0 LOCAL_BODY_CIALIS BODY: Mentions viagra clone 'cialis' Sure, that this rule is part of standard SA? I can't find it in 3.2.5 or 3.3.0. Apart from this, if that message came out as spam with these additional 2 points it must have

Re: About upgrading

2010-01-05 Thread Kai Schaetzl
There's always a document about updating from the various old versions, read it and you will be prepared for most problems. But your SA is *really* old, expect some minor config problems. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: spamassassin or spamd with amavisd-new?

2010-01-06 Thread Kai Schaetzl
Terry Carmen wrote on Wed, 06 Jan 2010 13:23:28 -0500: How/where is this turned on in amavisd-new-2.6.4? I'd be happy to get rid of useless instances of spamd This has nothing to do with amavis. spamd is a separate daemon that *you* enabled. As you don't seem to know this: are you sure that

Re: semi-legit senders in DNSWL and habeas - a hard problem

2010-01-06 Thread Kai Schaetzl
Jdow wrote on Wed, 6 Jan 2010 10:37:49 -0800: I've never received any and I am a member. Every invite has been from somebody with a solid connection to me. Well, they seem to provide an option to upload your whole addressbook. And some email applications have an option to add every incoming

Re: semi-legit senders in DNSWL and habeas - a hard problem

2010-01-06 Thread Kai Schaetzl
Charles Gregory wrote on Wed, 6 Jan 2010 12:20:33 -0500 (EST): Because I was getting several M$ Outhouse correspondents complaining that my messages (using the 'standard' '') were 'difficult to read'. I could never get them to explain exactly how/why they were difficult to read. It was like

Re: semi-legit senders in DNSWL and habeas - a hard problem

2010-01-06 Thread Kai Schaetzl
Jdow wrote on Wed, 6 Jan 2010 10:40:14 -0800: Actually, Charles, this is a VERY good reason I'd use to justify changing my quote character to something goofy like % or # or even ; just to annoy the anal retentive types. First, to clarify, it was Charles who sent this to the list, not me.

Re: problem with a date rule

2010-01-07 Thread Kai Schaetzl
rp wrote on Thu, 07 Jan 2010 09:07:17 -0800: Anyone else having this problem? You should have read the list or googled first. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: About upgrading

2010-01-09 Thread Kai Schaetzl
Matus UHLAR - fantomas wrote on Sat, 9 Jan 2010 12:31:26 +0100: you have changed WHAT??? He means he uses procmail and used to send all spam to /dev/null. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: hostkarma false positive

2010-01-11 Thread Kai Schaetzl
Folks, can you please report this to these lists. This mailing list is *not* for reporting FPs on RBLs! Thanks. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: pill image spam learns to walk

2010-01-11 Thread Kai Schaetzl
scores these new tests on 3.3.0 * 1.0 FORGED_TBIRD_IMG_SIZE Likely forged Thunderbird image spam * 1.0 FORGED_TBIRD_IMG_ARROW Likely forged Thunderbird image spam and you could add, say 4.0, for each mail coming thru your SF.net alias and not coming from SF. Kai -- Get your

Re: spamassassin bug

2010-01-11 Thread Kai Schaetzl
Rich Shepard wrote on Mon, 11 Jan 2010 08:07:40 -0800 (PST): In /etc/mail/spamassassin/rules/ I have init.pre, v310.pre, and v312.pre files. which would be a non-default location. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Fake mailing list spam

2010-01-11 Thread Kai Schaetzl
LuKreme wrote on Mon, 11 Jan 2010 13:14:06 -0700: I never subscribed to the list in question. I am, in fact, not subscribed to any googlelists on this account. Report the abuse to Google and reject any mail from @listserv.bounces.google.com So, Google allows non-opt-in mailing lists like

Re: pill image spam learns to walk

2010-01-11 Thread Kai Schaetzl
Terry Carmen wrote on Mon, 11 Jan 2010 12:08:16 -0500: Unless you changed the headers, it looks like it came from an IP with no reverse DNS entry. Yeah, his own delivery chain. Not really a candidate for blocking ;-) Kai -- Get your web at Conactive Internet Services:

Re: pill image spam learns to walk

2010-01-11 Thread Kai Schaetzl
Ted Mittelstaedt wrote on Mon, 11 Jan 2010 09:42:25 -0800: This is the WRONG way to do this It's the right way. The FP rate is almost zero and it encourages the few offending ones to quickly add rDNS, really quick. * The reason this is NOT mandated anywhere is because if it was then sites

Re: spamassassin bug -- RESOLVED!

2010-01-11 Thread Kai Schaetzl
How come that you messed this up with regards to that arbitrary rules directory? Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: pill image spam learns to walk

2010-01-11 Thread Kai Schaetzl
Alex wrote on Mon, 11 Jan 2010 12:38:29 -0500: Just to clarify, you're referring to this, right: Received: from mx.sourceforge.net by mailsrv1.trimble.co.nz (envelope-from f...@ef- How would add the rule you are suggesting? It would be specific to sourceforge.net, and have a table where

Re: pill image spam learns to walk

2010-01-11 Thread Kai Schaetzl
Ted Mittelstaedt wrote on Mon, 11 Jan 2010 15:27:07 -0800: It simply means that sites WITHOUT a PTR are still fully compliant mailers. This has nothing to do with RFC-compliance, but with policy, well accepted policy. If you can't understand that I can't help. No need to shoot this out. Kai

Re: pill image spam learns to walk

2010-01-12 Thread Kai Schaetzl
Ted, sorry, but your case is lost (since long, look around) and I won't bite in such an off-topic discussion here. Please stop telling others that refusing to accept mail from non-rDNS machines is incorrect. If you *prefer* to handle this at SA level, that's your choice and you can tell that.

Re: Faked _From_ field using our domain - how to filter/score?

2010-01-12 Thread Kai Schaetzl
Callum Millard wrote on Tue, 12 Jan 2010 18:17:44 +: Postfix Postfix? Easy. smtpd_sender_restrictions = permit_mynetworks, permit_sasl_authenticated, check_recipient_access hash:/etc/mail/allow_recipients, reject_non_fqdn_sender, reject_unknown_sender_domain, check_sender_access

Re: [OT] spamalyser, was pill image spam learns to walk

2010-01-12 Thread Kai Schaetzl
Mike Cardwell wrote on Tue, 12 Jan 2010 20:22:44 +: It handles remote content like images and CSS fine tip: I would not handle remote content at all as this may lead to account verification. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: [sa] Faked _From_ field using our domain - how to filter/score?

2010-01-13 Thread Kai Schaetzl
In the latter case, you can use the suggested check for domains, It doesn't matter which other mail servers the clients use. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: SA not picking up rules from /var/lib/spamassassin/

2010-01-13 Thread Kai Schaetzl
geoff.spamassass...@alphaworks.co.uk wrote on Wed, 13 Jan 2010 11:59:11 +: I'm using SA 3.2.5 and sa-update but SA doesn't seem to be picking rules up from /var/lib/spamassassin/ Well, you listed a lot, but not any proof for what you think it *seems* not to do. Kai -- Get your web at

Re: Faked _From_ field using our domain - how to filter/score?

2010-01-13 Thread Kai Schaetzl
Skaz wrote on Wed, 13 Jan 2010 08:54:58 -0800 (PST): However I will need to drop that restriction once I set up external mail access what is external mail access ? Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Faked _From_ field using our domain - how to filter/score?

2010-01-13 Thread Kai Schaetzl
Please. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: newbie: configure SA to reject spam

2010-01-13 Thread Kai Schaetzl
Tonjg wrote on Wed, 13 Jan 2010 11:22:00 -0800 (PST): Note: I don't want to delete them or divert them to another folder, I'd like to reject them in the same way the dnsbl lists do. SA does not do this for you. You would need to use some milter or so. Kai -- Get your web at Conactive

Re: newbie: configure SA to reject spam

2010-01-13 Thread Kai Schaetzl
Tonjg wrote on Wed, 13 Jan 2010 13:57:53 -0800 (PST): yes thanks bowie I've managed to integrate SA into sendmail as per the link you gave but that page has no instructions for how to get sendmail to reject the spam. Then look in the documentation for that unknown tool that you used to

Re: Faked _From_ field using our domain - how to filter/score?

2010-01-13 Thread Kai Schaetzl
Mike Wallace wrote on Wed, 13 Jan 2010 14:39:13 -0500: I do this but it only works for rejecting a forged envelope. It doesn't work if it's only a forged From header which the example shows. Yes, it doesn't work if only the From is forged. You could compare To and From in SA and disallow if

Re: Faked _From_ field using our domain - how to filter/score?

2010-01-14 Thread Kai Schaetzl
Indeed, and that is why I asked what he means with this. This scenario is already taken care of in that config line. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Faked _From_ field using our domain - how to filter/score?

2010-01-14 Thread Kai Schaetzl
Skaz wrote on Thu, 14 Jan 2010 04:49:55 -0800 (PST): 1) Kai, yes external mail as in mail (sending or receiving) originating external to our network in terms of IP, not physically. When I think on it though, I'll just insist we use RDP or VPN for access when I set it up. Still not clear

Re: newbie: configure SA to reject spam

2010-01-14 Thread Kai Schaetzl
LuKreme wrote on Thu, 14 Jan 2010 06:31:48 -0700: I've always been hesitant to try running SA during the transaction because I was afraid it would take too long. Indeed, that's why I would not consider it. And I assume if you do it this way that also means you have to scan *every* message

Re: Bayes stopped working

2010-01-17 Thread Kai Schaetzl
Thomas Casartello wrote on Sun, 17 Jan 2010 12:47:44 -0500: spamassassin-3.3.0-0.26.rc1 That seems to be coming from Fedora/Rawhide? If so, I'd inquire there as well. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: is bayes enabled by default?

2010-01-17 Thread Kai Schaetzl
Tonjg wrote on Sun, 17 Jan 2010 11:57:45 -0800 (PST): thanks but in what file would it show this instruction? I looked in procmailrc, local.cf and 23_bayes.cf - couldn't find anything which told me whether bayes was enabled or disabled. local.cf, if you don't put it in, it won't be there, of

Re: Bayes stopped working

2010-01-17 Thread Kai Schaetzl
Thomas Casartello wrote on Sun, 17 Jan 2010 14:33:35 -0500: Yes it happened immediately after upgrading to Fedora 12. I just inquired there about this. Yeah. Nobody really knows when this rpm was done, it may contain a bug that's already fixed. It's also possible there's some issue with the

Re: is bayes enabled by default?

2010-01-17 Thread Kai Schaetzl
Tonjg wrote on Sun, 17 Jan 2010 13:01:14 -0800 (PST): use_bayes ( 0 | 1 ) (default: 1) which I think means that even if it's not present in local.cf it's enabled, correct me if I'm wrong. correct. So, this link gave you the answer, right? But, as I wrote, if you don't add it it won't be

Re: Bayes stopped working

2010-01-17 Thread Kai Schaetzl
Thomas Casartello wrote on Sun, 17 Jan 2010 15:53:38 -0500: Tried the rC3 unofficial version. Same issue. I think you should then file a bug report at https://issues.apache.org/SpamAssassin/ Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: REMINDER: 3.3.0 final cut January 15th, 2010

2010-01-17 Thread Kai Schaetzl
Warren Togami wrote on Mon, 11 Jan 2010 10:32:15 -0500: This is a reminder that the 3.3.0 final cut is scheduled for Friday, January 15th. It seems you forgot to announce RC3, or did I overlook it here? Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: is bayes enabled by default?

2010-01-17 Thread Kai Schaetzl
Maybe you should then try something that is easier? Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Wrong functionality of SUBJ_ALL_CAPS in mixed English and Greek subject

2010-01-18 Thread Kai Schaetzl
Mamalos wrote on Mon, 18 Jan 2010 10:01:53 -0800 (PST): and at least one of the Greek words is not capitalized, Greek? In a subject? Encoded, unencoded? I assume that through this list, someone who is an editor of these rulesets may be informed and correct this misbehavior. You can submit

Re: Wrong functionality of SUBJ_ALL_CAPS in mixed English and Greek subject

2010-01-19 Thread Kai Schaetzl
Mamalos wrote on Tue, 19 Jan 2010 01:11:49 -0800 (PST): The mail is encoded as well as the subject. Here is an example: Yeah, and they are lower-case, I see. So, where should I report this bug? I think the problem here is determination of capital/non-capital letters in other scripts than

Re: Wrong functionality of SUBJ_ALL_CAPS in mixed English and Greek subject

2010-01-19 Thread Kai Schaetzl
Mamalos wrote on Tue, 19 Jan 2010 05:19:30 -0800 (PST): $subject =~ s/[^a-zA-Z]//g; # only look at letters The relevant part seems to be this. It removes all other characters (i9ncluding the Greek ones). As I said, it's hard to determine capitals for each and every language. So,

Re: problem with a date rule

2010-01-19 Thread Kai Schaetzl
I suggest you read the homepage: http://spamassassin.apache.org/ If this didn't help you, then please give more details about how you use SA and what you did to correct the problem. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: That Future Bug

2010-01-19 Thread Kai Schaetzl
Robert Ober wrote on Tue, 19 Jan 2010 09:19:57 -0600: score FH-DATE-PAST-20XX 0.0 which is wrong, the rule has underscores. Read the article on http://spamassassin.apache.org/ Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: [sa] Wrong functionality of SUBJ_ALL_CAPS in mixed English and Greek subject

2010-01-22 Thread Kai Schaetzl
Charles Gregory wrote on Fri, 22 Jan 2010 09:55:56 -0500 (EST): Yup. Lazy. Fixed now. Thanks. Thank you, Charles. This makes really a difference for those of us who use a client that can apply different appearance to quoted text. Thanks, again! Kai -- Get your web at Conactive Internet

Re: SpamAssassin, One Baye for a lot of SpamAssassin server

2010-01-22 Thread Kai Schaetzl
LuKreme wrote on Fri, 22 Jan 2010 09:30:28 -0700: Where do you specify the name of the database to use? bayes_sql_dsn why not check documentation? Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: painting everybody in Taiwan with the same brush

2010-01-26 Thread Kai Schaetzl
This is an SARE rule, I suggest you ask there. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: [Sare-users] painting everybody in Taiwan with the same brush

2010-01-26 Thread Kai Schaetzl
Ned Slider wrote on Tue, 26 Jan 2010 08:16:47 +: Indeed. If your domain (jidanni.org) is in fact on a static IP then you need to get your ISP to update the PTR record to reflect this. Well, on closer look it appears that he's using a smarthost. So, there's no need for another rDNS for

Re: painting everybody in Taiwan with the same brush

2010-01-26 Thread Kai Schaetzl
Warren Togami wrote on Tue, 26 Jan 2010 06:15:23 -0500: Huh? Aren't we supposed to be telling people to stop using SARE? Isn't that a given? The point was that I don't see a reason to ask here about this. It's deprecated and it's not part of SA. Kai -- Get your web at Conactive Internet

Re: [Sare-users] painting everybody in Taiwan with the same brush

2010-01-26 Thread Kai Schaetzl
Michael Scheidell wrote on Tue, 26 Jan 2010 06:56:04 -0500: if you don't follow the RFC's, you have no reason to complain if people who DO follow the RFC's block your email. There is no RFC requiring back and forward resolution to match. I think there's not even a requirement for an rDNS,

Re: ANNOUNCE: Apache SpamAssassin 3.3.0 available

2010-01-26 Thread Kai Schaetzl
That seems to be identical with the rc4 version that Justin offered for last testing on Jan 21, right? I've been running it since then with no problems. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: spamassassin-3.3.0 for Fedora/RHEL

2010-01-26 Thread Kai Schaetzl
Charles Gregory wrote on Tue, 26 Jan 2010 14:10:51 -0500 (EST): Anyone know where to find a RHEL(CentOS) 4 rpm? Or will it appear in the CentOS 4 official update channels in due time? Just do yourself. Follow the instructions on the download page, it's a *one liner* ! Kai -- Get your web

Re: painting everybody in Taiwan with the same brush

2010-01-27 Thread Kai Schaetzl
Jdow wrote on Tue, 26 Jan 2010 19:07:14 -0800: And it has this disgraceful habit. It works. You are special, anyway. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: [Sare-users] painting everybody in Taiwan with the same brush

2010-01-27 Thread Kai Schaetzl
jida...@jidanni.org wrote on Wed, 27 Jan 2010 14:12:11 +0800: So what should a Taiwan user (Taiwan~=Hinet) HINET: Control of approx 8,476,149 IP addresses http://www.fixedorbit.com/AS/3/AS3462.htm user do. Buy a SMTP account with a US Company? I told you what you can do. Apart from

Re: Fuzzyocr and rule errors after upgrade to 3.3.0

2010-01-27 Thread Kai Schaetzl
Ed Kasky wrote on Tue, 26 Jan 2010 22:30:23 -0800: FuzzyOcr is it mentioned in the release notes? check back with the author of this plugin if it is compatible with 3.3.0 Also - is anyone else getting a lot of warning: score set for non-existent rule errors? I ran sa-update after teand

Re: Size of Bayes data and possible mysql storage?

2010-01-27 Thread Kai Schaetzl
Kārlis Repsons wrote on Wed, 27 Jan 2010 14:02:40 +: The question, which bothers me is about Bayes data size. How much is a typical size of those data depends. and what mechanisms are there to limit growing of it? it's all documented Can mysql be used for storage that is also

Re: [Sare-users] painting everybody in Taiwan with the same brush

2010-01-27 Thread Kai Schaetzl
Matus UHLAR - fantomas wrote on Wed, 27 Jan 2010 15:10:48 +0100: because his mail can be tagged as spam? Not largely a problem. Did you look at the mailing list conversation he linked to? It seems he's actively telling the mailing list owner how to tune SA and reduce the required score to 2

Re: Fuzzyocr and rule errors after upgrade to 3.3.0

2010-01-27 Thread Kai Schaetzl
John Wilcock wrote on Wed, 27 Jan 2010 15:27:17 +0100: Me too... 463 of them, to be exact. Do you want to say that you changed the score of 463 rules? However, these two files don't seem to exist in /var/lib/spamassassin/3.003000/updates_spamassassin_org/ Indeed, that's why you are getting

Re: [Sare-users] painting everybody in Taiwan with the same brush

2010-01-27 Thread Kai Schaetzl
so what? Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Fuzzyocr and rule errors after upgrade to 3.3.0

2010-01-27 Thread Kai Schaetzl
John Wilcock wrote on Wed, 27 Jan 2010 17:43:56 +0100: someone forgot to include 72_active.cf and 80_additional.cf in the sa-update files. Now I understand. However, why am I not getting these warnings with a spamassassin --lint? Kai -- Get your web at Conactive Internet Services:

Re: spamassassin-3.3.0 for Fedora/RHEL

2010-01-28 Thread Kai Schaetzl
Spamassassin List wrote on Thu, 28 Jan 2010 16:24:27 +0800: So how do I stop using sare or openprotect? remove the rules? remove the channels? I suppose you know if you use them or not, do you? Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Fuzzyocr and rule errors after upgrade to 3.3.0

2010-01-28 Thread Kai Schaetzl
John Wilcock wrote on Thu, 28 Jan 2010 08:31:07 +0100: Presumably because you didn't run sa-update while the ruleset was missing from the update... Hm, it *is* missing. But maybe not from the compiled rules, well. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: [Sare-users] painting everybody in Taiwan with the same brush

2010-01-28 Thread Kai Schaetzl
jida...@jidanni.org wrote on Thu, 28 Jan 2010 09:34:46 +0800: thanks to you guys and no one else. Boy, *you* have a problem, and this is not with SA, get some help, good bye. Please stop further spamming this list with your garbage. Kai -- Get your web at Conactive Internet Services:

Re: spamassassin-3.3.0 for Fedora/RHEL

2010-01-28 Thread Kai Schaetzl
Spamassassin List wrote on Thu, 28 Jan 2010 18:38:21 +0800: I had remove the sa-update from my crontab. You have to keep using sa-update! Just not these channels! Do I need to remove all those dostech_net.cf files? Of course. You have to remove everything from

Re: painting everybody in Taiwan with the same brush

2010-01-28 Thread Kai Schaetzl
Charles Gregory wrote on Thu, 28 Jan 2010 11:08:24 -0500 (EST): Firstly, let's all acknowledge that the OP cross-posted to/from the SARE mailing list, and continues to do so. He should not have done this and most of us probably didn't notice it. He should just stop doing so and stay on the

Re: spamassassin-3.3.0 for Fedora/RHEL

2010-01-28 Thread Kai Schaetzl
R-Elists wrote on Thu, 28 Jan 2010 07:41:23 -0800: by this website are you saying that we should only stop using SARE and OpenProtect on 3.3.0 and later... or are you saying that some of the SARE rules were put into 3.2.5 ??? Just try it out. You will find that the detection rate without

Re: [Sare-users] painting everybody in Taiwan with the same brush

2010-01-29 Thread Kai Schaetzl
please stop spamming this list with this explitive deleted any longer, thanks. If you have grieve take it up with the folks how are responsible, that is the folks *using* the rules and *making* the rules. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: repair bayes db ?

2010-01-31 Thread Kai Schaetzl
Ralph Bornefeld-Ettmann wrote on Sat, 30 Jan 2010 02:56:34 +0100: it should be enough to rebuild table bayes_global_vars. He isn't using SQL it seems. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: spamassassin-3.3.0 for Fedora/RHEL

2010-01-31 Thread Kai Schaetzl
R-Elists wrote on Fri, 29 Jan 2010 11:56:22 -0800: i appreciate your input, yet i really wanted Warren to answer for his blog post on it in specific terms related to SA i can handle absolutes pretty easy... if we shouldnt use SARE with 3.3.x, no prob. How long have you been following

Re: Summary Tokens

2010-02-01 Thread Kai Schaetzl
Reading at least a few of the latest messages helps reduce postings about duplicate issues. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Sought Rules Back?

2010-02-01 Thread Kai Schaetzl
Thanks for this info and good idea about this meta rule! Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: howto stop scanning

2010-02-04 Thread Kai Schaetzl
Christoph Lehmann wrote on Thu, 04 Feb 2010 22:57:09 +0100: is there a simple way to stop further checks after achieving a specified number of points? search the documentation for shortcircuit. However, be aware that this may lead to more false positives. SA is not a spam detector, it is a

Re: Newest spammer trick - non-blank subject lines?

2010-02-09 Thread Kai Schaetzl
Ted Mittelstaedt wrote on Tue, 09 Feb 2010 12:58:01 -0800: Our SA installation is correctly tagging this as spam and sending it forward to the user. Well, the usual procedure (*) is to add headers that identify the message as spam and maybe even show the score, so users can have the mail

Re: Newest spammer trick - non-blank subject lines?

2010-02-09 Thread Kai Schaetzl
Ted Mittelstaedt wrote on Tue, 09 Feb 2010 14:56:49 -0800: MISSING_SUBJECT, Now, why the message that SA is creating is getting TWO Subject: lines is a different question. because SA thinks it's got no subject, so it adds one as it is instructed to tag the subject. Obviously, it wants to

Re: sa-update channel problem

2010-02-14 Thread Kai Schaetzl
Mbeis wrote on Sun, 14 Feb 2010 13:19:44 -0800 (PST): It seems that I have to run sa-update first in order for SA to work. But sa-update exits with an error too, sa-update -D gives: I think I have seen a few messages over this weekend about update problems. There must have been/be some server

Re: RES: SA 3.3 w/MailScanner

2010-02-15 Thread Kai Schaetzl
Noel Butler wrote on Mon, 15 Feb 2010 07:33:38 +1000: Replacing the old /var/lib setting (which has worked for best part of a decade) with /var/lib/spamassassin resolved this (and it seems other) issues. Well, compare default settings on

Re: _mtx MTX plugin functionally complete?

2010-02-15 Thread Kai Schaetzl
dar...@chaosreigns.com wrote on Sun, 14 Feb 2010 20:06:56 -0500: Please let me know if there is some evidence I'm missing that it's reasonable to use an underscore in this context. Underscores are explicitly forbidden in internet hostnames. Kai -- Get your web at Conactive Internet

Re: bayes learning '0 messages found'

2010-02-15 Thread Kai Schaetzl
Smfabac wrote on Mon, 15 Feb 2010 00:20:06 -0800 (PST): So, does the documentation on sa-learn indicate that there is a size limit on the message to be processed? Why not check yourself? Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Spam Scored zero ?

2008-01-11 Thread Kai Schaetzl
Maybe just timed out? Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

not enough usable tokens for Bayes?

2008-07-13 Thread Kai Schaetzl
I get a weird Bayes result on one of my machines. It tells me there are too few tokens, although it should have much more than enough. SA 3.2.4, Bayes on local db. [29963] dbg: bayes: DB journal sync: last sync: 1215920690 [29963] dbg: bayes: corpus size: nspam = 62748, nham = 42637 [29963]

Re: not enough usable tokens for Bayes?

2008-07-13 Thread Kai Schaetzl
Theo Van Dinter wrote on Sun, 13 Jul 2008 12:24:29 -0400: This means there weren't enough tokens in the message. Thanks, Theo, for the quick answer. Ok, false alarm? I used a real message and now I get Bayes and a score. BUT: I ran the lint under 3.2.4 on two different machines. The first

Re: SPAM: Re[2]: Hiring for Spam Assassin Troubleshooting

2006-06-04 Thread Kai Schaetzl
WFGB Team wrote on Sat, 3 Jun 2006 23:22:07 -0400 (Eastern Daylight Time): PLEASE STOP SENDING PICTURES AND HTML TO THE LIST. 0.8 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry 0.1 HTML_TAG_EXIST_TBODY BODY: HTML has tbody tag 1.0 HTML_IMAGE_ONLY_28 BODY:

Re: Isssues after upgrading / updating SA

2006-06-05 Thread Kai Schaetzl
Yossim wrote on Mon, 5 Jun 2006 03:12:33 -0700 (PDT): Where i disable the dns testing? i did not find any setting in the local.cf Only disable it after you verified that your first ns is working! If it is not, then remove it from your resolv.conf - maybe it's just plain wrong! For SA you use

Re: ANNOUNCE: Apache SpamAssassin 3.1.3 available!

2006-06-05 Thread Kai Schaetzl
Theo Van Dinter wrote on Mon, 5 Jun 2006 12:13:09 -0400: Downloads are available from: http://spamassassin.apache.org/downloads.cgi?update=200606050750 still lists 3.1.2. btw, there's also no mention of 3.0.x versions on that page Kai -- Kai Schätzl, Berlin, Germany Get your web at

Re: ANNOUNCE: Apache SpamAssassin 3.1.3 available!

2006-06-05 Thread Kai Schaetzl
Theo Van Dinter wrote on Mon, 5 Jun 2006 12:33:52 -0400: Yeah, the page is taking a little bit to mirror out. Ok, I see. I guessed you send it out only once it's up everywhere. BTW, it seems a simple http://spamassassin.apache.org/downloads.cgi results in the same output than using the

Re: URIDNSBL does not work

2006-06-05 Thread Kai Schaetzl
Theo Van Dinter wrote on Mon, 5 Jun 2006 12:42:13 -0400: btw, spamassassin --lint -D uridnsbl will just output the uridnsbl stuff. :) Thanks for the info, Theo! Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

  1   2   3   4   5   6   7   8   >