RE: [SAtalk] Popcorn, Backhair, and Weeds

I don't mind at all that you're scrutinizing the rules :) i would love it if someone wants to improve them. >> Each of the words use \w{#}? So if you have \w{5}? You would be saying either 0 or 5 occurrences of [a-zA-Z0-9_]. >From what I understand, placing a ? after {n} does not mean match 0 o

[SAtalk] razor

Well, I'm still seeing the bad file descriptor problem with Razor, even after applying the patch per the readme file. I found two instances of Razor, I patched them both. What am I forgetting? SA 2.60, FreeBSD 4.8-STABLE, sendmail 8.12.8 Thanks. -jav --

Re: [SAtalk] different version number ?

At 07:31 PM 10/10/03 +0300, Petre Bandac wrote: [EMAIL PROTECTED]:~/kits/Mail-SpamAssassin-2.60# spamassassin -V SpamAssassin version 2.43 I installed it from CPAN, that's why I have a smaller version than the latest ? if I use spamd/spamc, I get in the headers sa-version=2.60, but if I user spama

Re: [SAtalk] Using only one RBL

At 05:03 PM 10/10/03 -0700, Bill Shupp wrote: How do I setup SpamAssassin to query only bl.spamcop.net, and set a very high score for that? I'm using spamd with vpopmail support. Go to /usr/share/spamassassin. look through 20_dnsbl_tests.cf and look at all the rules. For each RBL rule name creat

RE: [SAtalk] Popcorn, Backhair, and Weeds

Stucki, Your explanation makes perfect sense. Thanks for the correction and for taking the time to explain this. --Larry > -Original Message- > From: Chr. von Stuckrad > Sent: Friday, October 10, 2003 5:31 PM > To: 'Spamassassin-Talk (E-mail)' > Subject: Re: [SAtalk] Popcorn, Backhair,

RE: [SAtalk] Using only one RBL

Bill Shupp Sent: Friday, October 10, 2003 8:03 PM > How do I setup SpamAssassin to query only bl.spamcop.net, and set a > very high score for that? I'm using spamd with vpopmail support. First you would need to disable all the RBL tests you don't want to use. You do that by setting the score of t

RE: [SAtalk] Popcorn, Backhair, and Weeds

Hey Chris, Thanks for the reply. It makes more sense now after reading Sutcki's explanation. I have since come across a great Regular Expression Wiki (http://www.wlug.org.nz/RegularExpression) which is hosted by Waikato LinuxUsersGroup (WLUG - http://www.wlug.org.nz/) in New Zealand. Check it o

[SAtalk] X-Transfer-number and X-Transfer-stamp ?

Hi, Just had a spam get through that had an absolute bucketload of headers all of type x-transfer-number and x-transfer-stamp all with random values. Never seen such headers before, would they make a good thing to make a rule on or do those headers have a valid use? Received: from mail.gotravel

[SAtalk] Using only one RBL

Hello, How do I setup SpamAssassin to query only bl.spamcop.net, and set a very high score for that? I'm using spamd with vpopmail support. Thanks, Bill Shupp --- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net

RE: [SAtalk] whitelist_from simply does not work for me

Hi Matt, Here is an example that I sent from my webmail account. I created a message that scored 7.1 out of 5: (I removed the expletives in the subject): Return-Path: <[EMAIL PROTECTED]> Received: from xmxpita.excite.com ([207.159.120.57]) by firewall.orourke.ca (Post.Office MTA v3.5.

Re: [SAtalk] explosion of spam not getting caught

You might want to omit: RCVD_IN_BSP_OTHER RCVD_IN_BSP_TRUSTED Those are not blacklists, they are to be used to help identify valid senders! Frederic Tarasevicius Internet Information Services, Inc. Louis LeBlanc wrote: > On 10/10/03 10:53 AM, Anne Ramey sat at the `puter and typed: >> I'm usin

RE: [SAtalk] [RD] Evil rules HUGE update!

OOOPS!! Any FP's in evilrules are my fault. I just found 2. 2 out of 1758 ain't bad :) So take these out. AR.ATWOLA.COM, NEWSWATCH.CNN.COM File updated. --Chris Santerre --- This SF.net email is sponsored by: SF.net Giveback Program. Sour

Re: [SAtalk] Popcorn, Backhair, and Weeds

On Fri, Oct 10, 2003 at 04:56:56PM -0400, Larry Gilson wrote: > As an > example, an exact count would be matched if I omit the comma. > /\w{5}/ will match exactly five word characters. Definitely yes. > Now if I modify that as /\w{5}?/, I believe that means zero or > one occurance of five word cha

RE: [SAtalk] Popcorn, Backhair, and Weeds

Yep, when those things hit you can see why she named them popcorn. ;) Has anyone been as delighted as I am by doing tail -f /var/log/maillog | grep MailScanner (or your appropriate scanner)? It brings a smile to my face every time. :) We've tagged several thousands of messages and 0 (!) hams with

RE: [SAtalk] Popcorn, Backhair, and Weeds

:) This is what Jen sent me, I'm not sure what Doc she got it out of: > > * > > By default, a quantified subpattern is greedy . In other words it > > matches as many times as possible without causing the rest of the > > pattern not to match. To change the quantifiers to match the mini

RE: [SAtalk] Popcorn, Backhair, and Weeds

Hi Chris, > -Original Message- > From: Chris Santerre > Sent: Friday, October 10, 2003 3:26 PM > To: 'Larry Gilson'; 'Spamassassin-Talk (E-mail)' > Subject: RE: [SAtalk] Popcorn, Backhair, and Weeds > > > LOL, I asked her the VERY same question when I first looked > at them!!! But I did

RE: [SAtalk] [RD] Evil rules HUGE update!

Thanks Brian! --Larry > -Original Message- > From: Brian Morrison > Sent: Friday, October 10, 2003 2:59 PM > To: [EMAIL PROTECTED] > Subject: Re: [SAtalk] [RD] Evil rules HUGE update! > > > On Fri, 10 Oct 2003 00:31:59 -0400 in > [EMAIL PROTECTED] Larry Gilson > <[EMAIL PROTECTED]> wro

Re: [SAtalk] PINE shortcut to spamassassin -d ?

Luis Hernán Otegui wrote: > Hi, does anyone have any ideas about how to create a shortcut in PINE > to remove spam headers from a message? Not sure about this part of your question... > Currently, I have a quarantine account for mail that scored between 5 > and 15 (I reject messages above that),

Re: [SAtalk] Re: [SAdev] New Rules

At 04:15 PM 10/10/2003, graf bluewin wrote: >header MS_PATCH_UPDATE Subject =~ /network security/i >describe MS_PATCH_UPDATE Subject: Fake email from MS >score MS_PATCH_UPDATE 10.0 That rule should work. Did you run a spamassassin --lint to check for typos? did you restart spamd (if you use spam

RE: [SAtalk] Need help with rule

Hey Chris, I don't think the '\-' is needed. --Larry > -Original Message- > From: Chris Santerre > Sent: Friday, October 10, 2003 3:37 PM > To: 'Matt Kettler'; Robert Leonard III > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] Need help with rule > > > > > > -Original Message---

Re: [SAtalk] Unable to report spam to Razor - SA2.60

Matt Kettler writes: > At 10:59 AM 10/10/03 -0400, System Administration wrote: > >OK, thanks for the explanation. In fact only razor support is installed here. > > > >I'll try flushing out "system"'s knowledge of razor and try to re-register > >it. > > If that doesn't work, I'd check to s

[SAtalk] Re: [SAdev] New Rules

look at this page: http://mywebpages.comcast.net/mkettler/sa/SA-rules-howto.txt I hope this will help you. Chris Graf Daniel Kaliel schrieb: I am a bit new to Spamassassin, so please don't hammer me! Where can I get an updated version of the rules, or, where is there information written on ho

Re: [SAtalk] PINE shortcut to spamassassin -d ?

On Fri, 10 Oct 2003, Luis Hernán Otegui wrote: > Hi, does anyone have any ideas about how to create a shortcut in PINE AFAIK there's no such thing as a shortcut in Pine. > to remove spam headers from a message? Also, it would be great if this > shortcut could pipe the results to sa-learn, so the

RE: [SAtalk] Need help with rule

> -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Friday, October 10, 2003 3:16 PM > To: Robert Leonard III > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] Need help with rule > > > At 01:45 PM 10/10/2003, Robert Leonard III wrote: > >I take it there is no "Eas

Re: [SAtalk] whitelist_from simply does not work for me

At 02:47 PM 10/10/2003, Dan Tappin wrote: and on each occasion the mail is not whitelisted. Am I missing something here??? Yes, the message headers.. Is there a Resent-From header in the message headers? what exactly does the From: line look like? etc. -

RE: [SAtalk] Popcorn, Backhair, and Weeds

LOL, I asked her the VERY same question when I first looked at them!!! But I didn't realise that {#}? meant "exactly that many". So 2 things: 1) You won't get a 0 word - tag - 0 word situation 2) Great minds think alike! ;) The upper limits are arguably not needed. But I think it is good to have

[SAtalk] PINE shortcut to spamassassin -d ?

Hi, does anyone have any ideas about how to create a shortcut in PINE to remove spam headers from a message? Also, it would be great if this shortcut could pipe the results to sa-learn, so the message could be learned either as ham or spam. Currently, I have a quarantine account for mail that sc

Re: [SAtalk] Need help with rule

At 01:45 PM 10/10/2003, Robert Leonard III wrote: I take it there is no "Easy" way to whitelist a subject.. so I was hoping somebody could help me make a custom rule. I want to allow all mail that contains the following in the subject line: [stc-single-sourcing-l] I'll just give it a negative sco

Re: [SAtalk] [RD] Evil rules HUGE update!

On Fri, 10 Oct 2003 00:31:59 -0400 in [EMAIL PROTECTED] Larry Gilson <[EMAIL PROTECTED]> wrote: > Which directory is preferred in choosing a location for custom cf > files,/etc/mail/spamassassin or /usr/share/spamassassin? I would like > to understand the answer from both a technical and personal

[SAtalk] whitelist_from simply does not work for me

I am running SA 2.55 and have been adding e-mail addresses and domains to a whitelist config file in /etc/mail/spamassassin/. I have run spamassassin -D --lint and have found no error reports. My /etc/mail/spamassassin/ files are being loaded because I created a /etc/mail/spamassassin/local.cf fi

RE: [SAtalk] SA users implementing DCC

Thanks for the message Mark! > -Original Message- > From: Rice, MA Mark (6750) @ IS > Sent: Friday, October 10, 2003 9:54 AM > To: '[EMAIL PROTECTED]' > Subject: [SAtalk] SA users implementing DCC > > > SA users that implement DCC need this info... > [Forwarded from the DCC mailing list.

RE: [SAtalk] Popcorn, Backhair, and Weeds

Hi again Jennifer! I have another question. Both the BACKCHAIR and POPCORN rules have the following format: word - tag - word /(\>|\s)\w{5}?\<\/?\s?[\w\s]{6,150}\/?\s?\>\w{5}?(\s|\W|\<)/ Each of the words use \w{#}? So if you have \w{5}? You would be saying either 0 or 5 occurrences of [a-zA-Z0

Re: [SAtalk] different version number ?

I did build it from source and now the version is ok (and I even have sa-learn, which wasn't available in 2.43) pere On Friday 10 October 2003 20:03 Anno Domini, Petre Bandac wrote using one of his keyboards: > no, I surely don't > > should I build it from source ? > > > > On Friday 10 October

Re: [SAtalk] Re: documenting DCC

Malte S. Stretz writes: > On Thursday 09 October 2003 20:29 CET Rice, MA Mark (6750) @ IS wrote: > > I'm just forwarding this note from the dcc-mailing list because it has > > relevance to the SpamAssassin list. > > Could you please open a bug in bugzilla.spamassassin.org? We're currently a > bi

Re: [SAtalk] RE: blacklist_to

On Wed, 1 Oct 2003 16:21:52 -0400 in [EMAIL PROTECTED] "Colin A. Bartlett" <[EMAIL PROTECTED]> wrote: > Thanks for the info, folks. As an aside... I never was able to find a > changelog on the SA website. Is there one and if so, can someone point > me to it? Sorry for the ignorance. It's in the t

Re: [SAtalk] question about the number of tokens analyzed in Bayes

=?iso-8859-1?Q?Jean-S=E9bastien_Guay-Leroux?= writes: > What is the reason for Bayes in spamassassin to use the 150 most significant > tokens in a email if Paul Graham mentions that you only should use the > fifteen most significant ? It got better results in empirical testing. Check back throug

RE: [SAtalk] Webuserprefs

We're using it, but I haven't done much to customize it past authentication. -- Benjamin Story Dot Foods, Inc. -Original Message- From: Frank Pineau [mailto:[EMAIL PROTECTED] Sent: Friday, October 10, 2003 12:55 PM To: sa Subject: [SAtalk] Webuserprefs Only slightly off-topic: Anybo

RE: [SAtalk] correlation between message ID and spam

Hi Chris, > -Original Message- > From: Covington, Chris > Is there any spam correlation between a message using a > Message-ID from my own domain vs. its own Message-ID? I've > noticed some in my corpus uses my MX's Message-IDs vs. their own. > > I also saw this rule on Chris Santerre

[SAtalk] Need help with rule

I take it there is no "Easy" way to whitelist a subject.. so I was hoping somebody could help me make a custom rule. I want to allow all mail that contains the following in the subject line: [stc-single-sourcing-l] I'll just give it a negative score (-1.0) to offset it enough to let it clear ou

[SAtalk] System crashing with spamd

Hi, I just installed spamassassin 2.60 (via qmailtoaster.org RPM) on a brand new RH9 system. Sys config: 2.8Ghz 512M RAM. I have spamd running as a daemon with calls to spamc via .qmail-default files from a vpopmail domains subdir. The contents of the .qmail-default files is like: | /var/qmail

RE: [SAtalk] funky subject

> > > By itself it is dangerous. But I would try to get a little > more specific > with it. How about multiple instances in a word? like: > > header funky subject =~ > /[EMAIL PROTECTED],2}[A-Za-z]{1,[EMAIL PROTECTED],2}[A-Za-z]/ *EDIT* Sorry, drop the \b in the begining. /[EMAIL PROTECTED

[SAtalk] Webuserprefs

Only slightly off-topic: Anybody using WebUserPrefs (http://webuserprefs.pipegrep.net/)? I'm trying to make a panel that will let me display/add/remove scores from the user prefs table in my mysql db. I've been horribly unsuccessful, so I thought I'd check to see if I'm re-inventing the wheel...

[SAtalk] sa-learn with sendmail milter configuration

Hi, All the ways to use sa-learn I've seen only appear to be relevant when mail is scanned as the user who is receiving it, ie. with procmail. I'm using a milter (mail filter) in sendmail for site wide scanning, which works very well. I would like for each users "Not_Recognised" mbox to be run th

RE: [SAtalk] Catching Lots of Remarks in HTML Messages

-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Wagner Sent: Thursday, October 09, 2003 9:15 AM To: Spamassassin-Talk (E-mail) Subject: [SAtalk] Catching Lots of Remarks in HTML Messages We seem to be getting more messages like: GIRLS THAT RE

Re: [SAtalk] explosion of spam not getting caught

On 10/10/03 10:53 AM, Anne Ramey sat at the `puter and typed: > I'm using spamassassing through amavisd-new. Where would I put a rule > like the one below? In amavisd.conf or in local.cf? I'm getting close > to 100 mails per day per user get through. I'd imagine it should go in local.cf. ama

RE: [SAtalk] [RD] Evil rules HUGE update!

Hi Matt, > -Original Message- > From: Matt Kettler > At 12:31 AM 10/10/03 -0400, Larry Gilson wrote: > >Matt, > > > >Which directory is preferred in choosing a location for custom cf > >files, /etc/mail/spamassassin or /usr/share/spamassassin? I > >would like to understand the answer f

RE: [SAtalk] Question about my setup: Feedback please

I have the same setup, only with sendmail. The best way to do this is using procmail, which you already use! :) Basically when you get a high scoring spam, you not only forward it to the internal spam account, but a local spam account as well. This is what I do. You can do the same for low scoring

[SAtalk] Re: spamd and user configuration files

Also, README.spamd says "When run as root, spamd will change uid's to the user invoking spamc in order to read and write to their configurations." This again contradicts the statement elsewhere that it doesn't use this info. --- This SF.net e

Re: [SAtalk] using sa-learn...

On Friday 10 October 2003 09:55, Terry Shows wrote: > I am relatively new to the SAtalk list, so forgive this "stupid" > question: > > Just what is HAM? Ham is "real meat"; the stuff you want. As opposed to spam, which is "phony meat"; the stuff you don't want. Disclaimer: None of this has anyt

Re: [SAtalk] different version number ?

no, I surely don't should I build it from source ? On Friday 10 October 2003 19:44 Anno Domini, Patrick Morris wrote using one of his keyboards: > You probably have two versions installed on that system. Remove the old > one. > > Petre Bandac wrote: > >[EMAIL PROTECTED]:~/kits/Mail-SpamAssas

RE: [SAtalk] SA newbie question...

Are you sure _THIS_ local.cf file is the one that is being read? Are you using spamd? IF yes you need to restart it. Descriptions are not needed in rules. --CHirs > -Original Message- > From: Brad [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 09, 2003 5:50 PM > To: Sauser > Subject

RE: [SAtalk] using sa-learn...

I am relatively new to the SAtalk list, so forgive this "stupid" question: Just what is HAM? Terry Shows -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Scott Blomquist Sent: Friday, October 10, 2003 11:42 AM Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] usi

Re: [SAtalk] different version number ?

You probably have two versions installed on that system. Remove the old one. Petre Bandac wrote: [EMAIL PROTECTED]:~/kits/Mail-SpamAssassin-2.60# spamassassin -V SpamAssassin version 2.43 if I use spamd/spamc, I get in the headers sa-version=2.60, but if I user spamassassin I get version=2.43

[SAtalk] different version number ?

[EMAIL PROTECTED]:~/kits/Mail-SpamAssassin-2.60# spamassassin -V SpamAssassin version 2.43 I installed it from CPAN, that's why I have a smaller version than the latest ? if I use spamd/spamc, I get in the headers sa-version=2.60, but if I user spamassassin I get version=2.43 where is the prob

RE: [SAtalk] funky subject

> -Original Message- > From: Eric [mailto:[EMAIL PROTECTED] > Sent: Thursday, October 09, 2003 10:48 AM > To: [EMAIL PROTECTED] > Subject: [SAtalk] funky subject > > > anyone see a problem with this rule > header funky subject =~ /[A-Za-z][0-9][A-Za-z] > for catching subjects like g00d

Re: [SAtalk] using sa-learn...

Jeff Lasman wrote: > > I'm still not sure if I should run through "ham" as well as "spam" or > not. Is there a specific answer for this? > > Thanks. > > Jeff Hi Jeff, Bayes won't kick in until it has >200 ham/spam in the database. You should sa-learn --ham against as wide a range of your normal

Re: [SAtalk] using sa-learn...

> I'm still not sure if I should run through "ham" as well as "spam" or > not. Is there a specific answer for this? Yes you should run ham as well, because the Bayes algorithm needs to compare againt both "spammy" and "hammy" words to determine how to classify new mail. You cannot train it with

[SAtalk] question about the number of tokens analyzed in Bayes

What is the reason for Bayes in spamassassin to use the 150 most significant tokens in a email if Paul Graham mentions that you only should use the fifteen most significant ?   Quote from Paul Graham : “Fourth, they calculated probabilities differently. They used all the tokens, whereas

RE: [SAtalk] correlation between message ID and spam

Message-ID is a tricky booger :) I've never read anything on it, I've only made assumptions from looking at 1000's of them. There are some blatant fake ones. I've written some rules on these, and they will be in the next update. I may have already posted them to this list. I believe this one rule

RE: [SAtalk] Re: documenting DCC

Bug submitted as > http://bugzilla.spamassassin.org/show_bug.cgi?id=2579 > Thanks Malte, and sorry that I made a double post of the issue. Mark Rice > -- > From: Malte S. Stretz[SMTP:[EMAIL PROTECTED] > Sent: Friday, October 10, 2003 9:48 AM > To: [EMAIL PROTECTED] > Su

Re: [SAtalk] using sa-learn...

I did install SA-2.60 and I can't locate sa-learn, except for a file sa-learn.raw in the sources directory? what did I do wrong ? thanks, petre On Friday 10 October 2003 17:56 Anno Domini, Jeff Lasman wrote using one of his keyboards: > On Friday 10 October 2003 07:32, Martin Schroeder wrote:

Re: [SAtalk] [RD] Evil rules HUGE update!

--On Thursday, October 09, 2003 11:07 PM -0400 Matt Kettler <[EMAIL PROTECTED]> wrote: Yep, putting add-on rules in /etc/mail/spamassassin is a great place.. SA will automatically read every config file in that directory, not just local.cf. If you use spamd, restart it, just as you would if you e

[SAtalk] Spam-Fighter Humor: The Don't-Pay-For-Placement Search Engine

--- This SF.net email is sponsored by: SF.net Giveback Program. SourceForge.net hosts over 70,000 Open Source Projects. See the people who have HELPED US provide better ser

[SAtalk] Feeding the Bayesian - AWL getting in the way

Hello All, I'm trying to have a select group of users feed the Bayesian db using the same technique outlined in the SpamAssassin FAQ. (http://spamassassin.taint.org/faq/index.cgi?req=show&file=faq05.001.htp). Problem I'm having is that everyone bouncing these emails to the spam mailbox is in the

[SAtalk] Another example of obfuscating text

-- Message Text - Here's one that I got today, that slipped through (the first in over a week). Not sure why SA 2.55 didn't get it: -- Forwarded message -- Date: Fri, 10 Oct 2003 11:23:22 -0400 From: Thomas <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: )US D-oct

Re: [SAtalk] Unable to report spam to Razor - SA2.60

At 10:59 AM 10/10/03 -0400, System Administration wrote: OK, thanks for the explanation. In fact only razor support is installed here. I'll try flushing out "system"'s knowledge of razor and try to re-register it. If that doesn't work, I'd check to see if system's ~/.razor directory any differen

[SAtalk] correlation between message ID and spam

Is there any spam correlation between a message using a Message-ID from my own domain vs. its own Message-ID? I've noticed some in my corpus uses my MX's Message-IDs vs. their own. I also saw this rule on Chris Santerre's website: header MY_MSGID_MX01 Message-ID =~ /\.mx01\.com/i score MY_MSGID_

RE: [SAtalk] Migrating bayes db version 0 to version 2

Theo Van Dinter wrote: [...] > >> Why does "bayes: no dbs present, cannot scan: >> /root/.spamassassin/_toks" appear? Sure, there is no file called >> _toks! But now, look at this: > > A bad bayes_path in your config? Hi Theo You are right, it really was a bad bayes_path in my user_prefs file.

[SAtalk] ran sa-learn... but

I ran sa-learn, but I got the following: [EMAIL PROTECTED] jlasman]# sa-learn --spam --dir SpamUncaught Failed to create default user preference file /root/.spamassassin/user_prefs Learned from 210 messages. Did it learn? Or not? Why did it tell me it failed to create the user_prefs file? Is

Re: [SAtalk] Not identifying spam

On Fri, Oct 10, 2003 at 03:54:42PM +0200, [EMAIL PROTECTED] wrote: > I have some mail in my mailbox that I think is SPAM but spamassassin > does not. > All mail look almost the same, there is some text and two urls and > some junk at the bottom and all mail ends with Thanks, bye > Is there a way t

Re: [SAtalk] SpamAssassin not scanning...

On Thu, Oct 09, 2003 at 08:17:00PM -0400, Jean-Sébastien Guay wrote: > X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=no > version=2.60 > > Why is SpamAssassin running no tests on the mail? It probably ran all the tests on the mail but none of them matched the mail. > And why is

Re: [SAtalk] explosion of spam not getting caught

I'm using spamassassing through amavisd-new. Where would I put a rule like the one below? In amavisd.conf or in local.cf? I'm getting close to 100 mails per day per user get through. Thanks, Anne On Wednesday, October 8, 2003, at 12:22 PM, Louis LeBlanc wrote: On 10/08/03 10:21 AM, Anne Ramey

[SAtalk] Migrating bayes db version 0 to version 2

Hi, I've got a problem regarding migration of my bayes-db. Before migrating, the files in the .spamassassin directory look like this: [EMAIL PROTECTED] .spamassassin]# ls -al total 707 drwx--2 root root 1024 Oct 10 16:45 . drwxr-x---8 root root 1024 Oct 10 13:22

Re: [SAtalk] Migrating bayes db version 0 to version 2

On Fri, Oct 10, 2003 at 04:56:11PM +0200, Marco Schn?riger wrote: > -rw-r--r--1 root root49152 Oct 10 16:33 bayes_seen > -rw-r--r--1 root root 663552 Oct 10 16:33 bayes_toks > > debug: bayes: no dbs present, cannot scan: /root/.spamassassin/_toks The file it's lookin

[SAtalk] Not Convinced Bayes is working for me..

I am using SA as a proxy device for my corporate Exchange server, and as such it has no 'local' mailboxes. I'd like to let SA autolearn using the Bayes system to help boost scores of what appears to be spam. I realize this isn't the ideal way to implement Bayes, but it will help us in any event.

[SAtalk] 2.60 and spam

I've been seeing a lot of spam coming in since the switch to 2.6 where the subject line has gibberish. Did this check get broken or something? Has anyone else see it? -=B --- This SF.net email is sponsored by: SF.net Giveback Program. SourceFo

Re: [SAtalk] using sa-learn...

On Friday 10 October 2003 07:32, Martin Schroeder wrote: > On 2003-10-10 07:14:56 -0700, Jeff Lasman wrote: > > And one more thing... though I don't see it mentioned, I'm > > presuming from the sa-learn manpage that I don't have to remove the > > already existing SpamAssassin headers from either t

Re: [SAtalk] Unable to report spam to Razor - SA2.60

Matt Kettler writes: > At 11:36 PM 10/9/03 -0400, System Administration wrote: [snip] > >For some reason I can't get spam reporting to work from this account. Razor > >is installed and the Razor2 patch is install in perl but still no luck. I > >tried Googling on the main error messages and on

Re: [SAtalk] using sa-learn...

Jeff Lasman wrote: If I should, then I'll probably uses messages sent to this list, as I know there's no spam hidden in them; I can't guarantee that about any of my other folders. Is that a reasonable assumption? Should I try to put through the same number of messages? Or doesn't it matter?

Re: [SAtalk] Not identifying spam

On Fri, Oct 10, 2003 at 03:54:42PM +0200, [EMAIL PROTECTED] wrote: > Hi > I have some mail in my mailbox that I think is SPAM but spamassassin does > not. > All mail look almost the same, there is some text and two urls and some > junk at the bottom and all mail ends with Thanks, bye > Is there a w

Re: [SAtalk] using sa-learn...

On 2003-10-10 07:14:56 -0700, Jeff Lasman wrote: > And one more thing... though I don't see it mentioned, I'm presuming > from the sa-learn manpage that I don't have to remove the already > existing SpamAssassin headers from either the spam or the ham; that > sa-learn will ignore them. Is that

[SAtalk] Re: documenting DCC

On Thursday 09 October 2003 20:29 CET Rice, MA Mark (6750) @ IS wrote: > I'm just forwarding this note from the dcc-mailing list because it has > relevance to the SpamAssassin list. Could you please open a bug in bugzilla.spamassassin.org? We're currently a bit busy with the ASF move and might fo

[SAtalk] SA users implementing DCC

SA users that implement DCC need this info... [Forwarded from the DCC mailing list.] - Mark Rice > -- > From: [EMAIL PROTECTED]:[EMAIL PROTECTED] > Reply To: [EMAIL PROTECTED] > Sent: Thursday, October 09, 2003 1:01 PM > To: [EMAIL PROTECTED] > Subject: DCC dige

Re: [SAtalk] Unable to report spam to Razor - SA2.60

At 11:36 PM 10/9/03 -0400, System Administration wrote: [The following was greeted with a roaring silence so I'll try again... RBE] For some reason I can't get spam reporting to work from this account. Razor is installed and the Razor2 patch is install in perl but still no luck. I tried Googling

[SAtalk] using sa-learn...

I'm very new to SpamAssassin. I've read 'man sa-learn' but I have a few questions about it... I've been running it for a few days now and I have a folder I call 'spamuncaught', every email put into it by hand, that contains 210 messages. If I run these through sa-learn as spam, won't I be mar

[SAtalk] Not identifying spam

Hi I have some mail in my mailbox that I think is SPAM but spamassassin does not. All mail look almost the same, there is some text and two urls and some junk at the bottom and all mail ends with Thanks, bye Is there a way to stop this? some mail get SA points as low as below 3. This sample gets X

[SAtalk] documenting DCC

I'm just forwarding this note from the dcc-mailing list because it has relevance to the SpamAssassin list. - Mark Rice > -- ... > According to reports from other people, the SpamAssassin documentation > does mention using `cdcc info` to see if the DCC client is working, > but doesn't say

RE: [SAtalk] [RD] Evil rules HUGE update!

At 12:31 AM 10/10/03 -0400, Larry Gilson wrote: Matt, Which directory is preferred in choosing a location for custom cf files, /etc/mail/spamassassin or /usr/share/spamassassin? I would like to understand the answer from both a technical and personal point-of-view. Thanks, Larry It is definitely

Re: [SAtalk] funky subject

On Thu, Oct 09, 2003 at 08:47:50AM -0600, Eric wrote: > anyone see a problem with this rule > header funky subject =~ /[A-Za-z][0-9][A-Za-z] > for catching subjects like g00d dTbt c0ns0lidati0n pr0graAm > > so far its caught only spam but I noticed one spam had an ID number that > could possibly b

[SAtalk] Re: WinSpamC + howto use SpamD on cygwin with Windows

On Wednesday 08 October 2003 18:18 CET Fred I-IS.COM wrote: > Hello List! > I just wanted to let those interested people know that we have a working > port of spamC for windows named WinSpamC, also a document explaining > howto run SpamD on windows with cygwin. > > http://sourceforge.net/projects/w

[SAtalk] SpamAssassin not scanning...

Hello, This has to be a real newbie question, but I can't seem to find the answer... In all e-mails that go through SpamAssassin on my Debian-Alpha machine, there is, among other SA related headers, this one: X-Spam-Status: No, hits=0.0 required=5.0 tests=none autolearn=no version=2.60 Why is S

[SAtalk] funky subject

anyone see a problem with this rule header funky subject =~ /[A-Za-z][0-9][A-Za-z] for catching subjects like g00d dTbt c0ns0lidati0n pr0graAm so far its caught only spam but I noticed one spam had an ID number that could possibly be an issue if a company uses mixed alphanumerics in its quotes or

Re: [SAtalk] Is there a way to reject a message before it arrives?

I use RBL checks along with a bunch of rules in sendmail.mc to reject mail. In addition to all of that, I also use a couple of services that automatically updates the access database (/etc/mail/access.db), plus I have a bunch of entries in /etc/mail/access that I've added myself. What I did w

RE: [SAtalk] How does a message like this get through?

I don't think there is a test that specifically looks for those words with the parentheses. You might have to write your own test. Of course, if your running Bayes, these kinds of words are picked up as spamish by Bayes over time. cheers, Colin Colin A. Bartlett Kinetic Web Solutions www.kineticw

Re: [SAtalk] score for messages with empty bodies?

Dan Jacobson <[EMAIL PROTECTED]> writes: > How can I add points for messages with empty bodies? > Assume the Lines: header is unreliable. > Please CC me if you reply. Hmmm... this should work. rawbody __SOMETHING /\S/ meta BODY_EMPTY !__SOMETHING score BODY_EMPTY0.5 Daniel

[SAtalk] Unable to report spam to Razor - SA2.60

[The following was greeted with a roaring silence so I'll try again... RBE] For some reason I can't get spam reporting to work from this account. Razor is installed and the Razor2 patch is install in perl but still no luck. I tried Googling on the main error messages and only found someone else