RE: [SAtalk] Okay, this one makes me mad.. anybody see or stop this one yet? How did this get through!!!!! ?????

2003-11-12 Thread Bill Polhemus
I'll say. I have mine set at 4, which I have found (for my setup) is pretty near perfect, even though it is lower than the default setting of 5. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

RE: [SAtalk] Comments on CBL DNSBL (cbl.abuseat.org)

2003-11-12 Thread Bill Polhemus
I added this to my Sendmail configuration a couple of weeks back, and I have been amazed at how much SPAM has been rejected as a result. I prefer to have Sendmail reject it at the get-go, rather than have it come all the way through to SA. William L. Polhemus, Jr. P.E. Polhemus Engineering Compan

RE: [SAtalk] sa-learn --rebuild --force-expire stuck using huge memory?

2003-11-11 Thread Bill Polhemus
This sounds like my earlier problem trying to sa-learn "large" mailboxes. Others here commented that it "must be a hardware problem," but my box is fairly new with very decent components (built from scratch by me but with "good" MB and memory, etc.) and nothing else I do, including using X, gives

RE: [SAtalk] What on earth is this? FW: Undeliverable Mail: RE: [SAtalk] [RD] Open source is Naughty!!!

2003-10-29 Thread Bill Polhemus
Definitely SPAM, and of a particularly nasty sort. Somehow someone is snagging emails off the archive or some other way, and fabricating these replies. Bad business. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mai

[SAtalk] SA-LEARN Actually Crashes System!

2003-10-29 Thread Bill Polhemus
I am running SA 2.60 installed from the RPMs on Red Hat 9, on an AMD 2100+ based system with a half-gig of RAM.   This has now happened for the second time. Before when it happened, about two weeks ago, I figured it was just a coincidence. Now, I’m positive that it’s SA-LEARN that is the

RE: [SAtalk] How can I mark all mails with specific words in the subject as spam?

2003-10-29 Thread Bill Polhemus
It isn't SA you want, it's procmail. The formail tool in the procmail package will do anything like this that you want. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gerhard Hofm

RE: [SAtalk] Auto-Learn

2003-10-29 Thread Bill Polhemus
am. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Radford Sent: Tuesday, October 28, 2003 2:23 PM To: Bill Polhemus Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Auto-Learn At Tue

RE: [SAtalk] sendmail and spamassassin

2003-10-29 Thread Bill Polhemus
I use Sendmail with SA, but I do use procmail. Do you not have access to the ability to install packages on your server?   Otherwise, you’re going to have to use the Spamass milter, which means you’ve STILL got installation to do.   Without the ability to install stuff on your server,

RE: [SAtalk] Auto-Learn

2003-10-28 Thread Bill Polhemus
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Radford Sent: Tuesday, October 28, 2003 2:23 PM To: Bill Polhemus Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Auto-Learn "autolearn=no" indicates that this particular message was not learned fr

[SAtalk] Auto-Learn

2003-10-28 Thread Bill Polhemus
How can I know for sure if Auto-Learn is functioning correctly?   It does seem to be working for SOME messages but the headers in many of them say:   X-Spam-Status: … autolearn=no   William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA

RE: [SAtalk] Moving SPAM to a separate Mailbox

2003-10-27 Thread Bill Polhemus
Yes. In fact, I have a .procmailrc file that uses the ${HOME} variable among other "generics", and can be put in the HOME directory of any user. That way the user can also add their own recipes if they like. Oh, and I also have a /etc/procmail file that has some "site-wide" recipes (it adds stuff

RE: [SAtalk] help with sa-learn

2003-10-25 Thread Bill Polhemus
IIRC, it should be Sa-learn --spam --mbox kill William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joseph P. Wetstein Sent: Thursday, October 23, 2003 7:56 AM To: [EMAIL PROTECTED]

RE: [SAtalk] Looking for some interview subjects

2003-10-22 Thread Bill Polhemus
Let me guess: You're hiring hit men to track down and eliminate, not just the Spam, but the Spammers themselves! Then, you're going to invest in genetic research that will find the "Spammer gene" and provide an inoculation for all the children in the world, to eradicate any possibility that they w

RE: [SAtalk] Scoring of 5.0 means spam. ist possible to drop mails with a scoring of i.e. 15?

2003-10-21 Thread Bill Polhemus
I do it using a procmail recipe, such as: =BEGIN PROCMAIL RECIPE== :0 * ^X-Spam-Status: Yes { # Mails with a score of 15 or higher are almost certainly spam (with 0.05% # false positives according to rules/STATISTICS.txt). Let's delete them # completely. :0: * ^X-Spam-Level

RE: [SAtalk] custom rules >> local.cf

2003-10-21 Thread Bill Polhemus
Yes. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thomas Kinghorn Sent: Tuesday, October 21, 2003 6:50 AM To: Spamassassin-Talk (E-mail) Subject: [SAtalk] custom rules >> local.

RE: [SAtalk] Easy way to join two Bayes databases?

2003-10-19 Thread Bill Polhemus
I cannot speak as an expert on this score, but my understanding is that a "combination" of such Bayesian databases would likely do more harm than good because the residual spam corpus that would get through the general SA filtering would be very specific to the recipient. That is, combining databa

RE: [SAtalk] "Insecure dependency in sysopen"

2003-10-18 Thread Bill Polhemus
ick Morris Sent: Saturday, October 18, 2003 3:18 PM To: Bill Polhemus Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] "Insecure dependency in sysopen" Bill Polhemus wrote: > I realize this is a Perl problem, but can anyone help me diagnose > this? I know next to NOTHING about Per

[SAtalk] "Insecure dependency in sysopen"

2003-10-18 Thread Bill Polhemus
I realize this is a Perl problem, but can anyone help me diagnose this? I know next to NOTHING about Perl.   The following is an error message I get when attempting to run SA from an email alias under Sendmail:        - Transcript of session follows - Insecure dependency in sy

RE: [SAtalk] HELP: Can't Invoke SA From Sendmail Alias

2003-10-17 Thread Bill Polhemus
. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA   -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Bill Polhemus Sent: Friday, October 17, 2003 6:26 PM To: [EMAIL PROTECTED] Subject: [SAtalk] HELP: Can't Invoke SA From Sendmail

[SAtalk] HELP: Can't Invoke SA From Sendmail Alias

2003-10-17 Thread Bill Polhemus
I have wanted to set up a “spam trap” for some time. First, I created an account, called “spamtest,” on my system. Then, I went to Usenet and posted a ton of “test” messages to every newsgroup I could think of (mostly the pr0n ones) where the address would be harvested, and  tried using the

RE: [SAtalk] FAKE_HELO_AOL

2003-10-17 Thread Bill Polhemus
This one got through. Can we figure out how and why? Notice purposeful misspellings as obfuscations. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Begin Included Message- 16121g11n4m06a8a53594548b10126vx 291uqs7rz3xo63jl8w5ie14f3q3c3770The stoicism which she

RE: [SAtalk] Off Topic BUT packages vs source

2003-10-16 Thread Bill Polhemus
I always use the SRPMs when they are available. However, I have never attempted to build SRPMS myself. Is this difficult to do? William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Dav

RE: [SAtalk] OOPS! Razor2 Problem Still There!

2003-10-15 Thread Bill Polhemus
Well, a follow-up:   I figgered out that I probably had to “remake” and “remake install”, etc.   Which I then proceeded to do, and then *BOOM!* I get a “compile error” on Razor2.   Bear in mind that I had no problem installing it before. Further bear in mind that I even erased the who

[SAtalk] OOPS! Razor2 Problem Still There!

2003-10-15 Thread Bill Polhemus
Okay, so I applied the patch as shown at:   http://spamassassin.taint.org/faq/index.cgi?req=show&file=faq02.006.htp   But I get the following message, STILL:   razor2 check skipped: No such file or directory Insecure dependency in open while running with -T switch at /usr/lib/perl5/s

RE: [SAtalk] SA-LEARN (SA 2.60) "Segmentation Fault"

2003-10-15 Thread Bill Polhemus
] SA-LEARN (SA 2.60) "Segmentation Fault"   --> Maybe you can make the spam corpus available on a web page so other people can test if it segfaults on their machine too ?   JS -Message d'origine- De : [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] De la part de Bill Po

[SAtalk] "Razor2 Check Skipped" - Anyone seen this?

2003-10-15 Thread Bill Polhemus
Running SA 2.60, I am seeing the following in my procmail logs:   razor2 check skipped: No such file or directory Insecure dependency in open while running with -T switch at /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi/Razor2/Client/Config.pm line 414, line 1.     Can any

[SAtalk] SA-LEARN (SA 2.60) "Segmentation Fault"

2003-10-15 Thread Bill Polhemus
I noticed that if I try to feed SA-LEARN a mailbox full of SPAM, it now “craps out” claiming “segmentation fault.” Anyone have any ideas?   William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA     <>

RE: [SAtalk] CPAN or RPM's?

2003-10-15 Thread Bill Polhemus
I think this thing about RH "dropping" their boxed sets is really, really overblown. They will continue to make updates available, and they will release new distributions. You just won't be buying them in stores. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Orig

[SAtalk] What Does This Error Message Mean (Custom Rules)

2003-10-14 Thread Bill Polhemus
I implemented some of the rules others have posted on this list regarding “obfuscating text”. Now that I am running SA 2.60, I note that I’m getting the following error message.   Failed to compile body SpamAssassin tests, skipping:     (Bareword "i" not allowed while "strict subs" i

RE: [SAtalk] More HTML Obfuscation: This One Made It Through

2003-10-13 Thread Bill Polhemus
Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Keith C. Ivey Sent: Monday, October 13, 2003 9:27 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] More HTML Obfuscation: This One Made It Through Bill Polhemus <[EMAIL PROTECTED]> wrote: > They use the > spu

[SAtalk] Any Idea When RH RPMs are coming out?

2003-10-13 Thread Bill Polhemus
I really would prefer to implement something as complex as SA through the RPMs on my Red Hat 9 system. So far, they are only up to SA 2.55. That has worked fine up until recently, when the HTML obfuscation has begun cropping up. Perhaps 2.60 can fix that. Any idea when those will be available? Wi

[SAtalk] More HTML Obfuscation: This One Made It Through

2003-10-13 Thread Bill Polhemus
Here's another one from a batch of several that have gotten through SA 2.55 over the last several days. They use the spurious HTML tags to break up the text and get it through the Bayesian filter. I'm running these through every time I get one--and luckily, there've only been about one or two per

[SAtalk] Another example of obfuscating text

2003-10-10 Thread Bill Polhemus
-- Message Text - Here's one that I got today, that slipped through (the first in over a week). Not sure why SA 2.55 didn't get it: -- Forwarded message -- Date: Fri, 10 Oct 2003 11:23:22 -0400 From: Thomas <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: )US D-oct

RE: [SAtalk] Today a bad day for spam?

2003-10-06 Thread Bill Polhemus
I only have a couple of mailboxes here in my home office, but today was the first day in WEEKS--since I got SA optimized--that SPAM got through. We had three all from ostensibly the same source. Penis enlargement. Hey, if I buy some, will they leave me alone? William L. Polhemus, Jr. P.E. Polhem

RE: [SAtalk] Spam: The Screwfly Solution

2003-10-06 Thread Bill Polhemus
"The Screwfly Solution" A really good short story by SF writer Raccoona Sheldon/James Tiptree Jr./ (the late) Alice B. Sheldon as well. Bet you didn't think anyone else would notice. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMA

RE: [SAtalk] spamd grabbing LOOOOOOTs of memory

2003-10-06 Thread Bill Polhemus
Sheesh, how much for a Gig of RAM now, about 200 Euros or so? What's the problem? William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kai Schaetzl Sent: Monday, October 06, 2003 9:12

RE: [SAtalk] options for spamassassin

2003-10-05 Thread Bill Polhemus
Yes, and the answer is... PROCMAIL! (I sound like a, er, "scratched CD.") Since SpamAssassin only tags the email, something else has to make the decisions on what should be done with it afterward. PROCMAIL can examine the headers, look at the X-Spam-Score field, do a test against it, and redirec

RE: [SAtalk] Razor Patch

2003-10-02 Thread Bill Polhemus
Best to do this as "root". Or try "/usr/bin/patch". William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Krüger Sent: Thursday, October 02, 2003 4:58 PM To: [EMAIL PROTECTED] Su

RE: [SAtalk] possible to forward messages marked as spam to seperate account?

2003-10-02 Thread Bill Polhemus
Again, this is a job... FOR PROCMAIL! (Admitting surprise that most don't use PROCMAIL along with SA...) William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Oliver Neubauer Sent: Thu

RE: [SAtalk] Silly question about whitelist to a certain mailbox

2003-10-01 Thread Bill Polhemus
Well, I use procmail to send mail to SA. So how about a recipe, checking to see if mail is to that certain mailbox, and putting that recipe before the recipe that sends "everything else" to SA? I find that procmail solves a whole host of my email problems, btw. William L. Polhemus, Jr. P.E. Polh

RE: [SAtalk] Re: Virus checkers v.s. spam filters

2003-09-22 Thread Bill Polhemus
If you are using Procmail (a good idea to use in tandem with SA anyway), then see: http://www.spamless.us/pub/procmail/virussnag For a venerable, tried and true recipe for "snagging" viral emails. Even though the recipe(s) has/have been around awhile, they still seem to work even on the latest ge

RE: [SAtalk] Getting Some Bayesian Statistics

2003-09-13 Thread Bill Polhemus
Sorry, doesn't seem to work. I'm using SA 2.55, if that makes a difference. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jim Sent: Saturday, September 13, 2003 12:41 PM To: [EM

RE: [SAtalk] Getting Some Bayesian Statistics

2003-09-13 Thread Bill Polhemus
eadable report) than that? William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Saturday, September 13, 2003 12:08 PM To: Bill Polhemus Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Getting Some Bayesia

[SAtalk] Getting Some Bayesian Statistics

2003-09-13 Thread Bill Polhemus
Is there a script available to tell me simply how many emails I have processed through "SA-LEARN?" I would just like to know how many SPAM and HAM messages have passed through the database. --- This sf.net email is sponsored by:ThinkGeek Welc

RE: [SAtalk] Re: [SA-Announce] SpamAssassin 2.60 rc4 released

2003-09-13 Thread Bill Polhemus
I'm curious. Can you not just use "rpmbuild --rebuild" on the .src.rpm alone, and not worry about the .spec file? That's what I do, and it seems to work okay. William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EM

RE: [SAtalk] I want SA to handle mailinglists. Need some creativity here.

2003-09-06 Thread Bill Polhemus
What's the problem with just putting *: In your ALIASES file? William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Steven W. Orr Sent: Saturday, September 06, 2003 9:39 PM To: s

RE: [SAtalk] redhat 8 rpm packages missing some files?

2003-09-06 Thread Bill Polhemus
IIRC, sa-learn doesn't appear til 2.5x. Do what I did: Compile from the tarball sources. It's not that tough (can't be if even I can do it). William L. Polhemus, Jr. P.E. Polhemus Engineering Company Katy, Texas USA -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: [SAtalk] RH 9.0 issues

2003-09-06 Thread Bill Polhemus
I also run RH 9.0. FWIW, I simply went and got (and compiled) Version 2.55 from the tarballs. The RPMs are good, but sometimes I just don't have the patience to wait till someone comes out with them (and I don't the inclination to learn how to make SRPMs myself). I like compiling from Source. W

RE: [SAtalk] FW: Feedback on how identified spam is being handled

2003-09-06 Thread Bill Polhemus
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Menschel Sent: Friday, September 05, 2003 8:25 PM To: Phil N Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] FW: Feedback on how identified spam is being handled > All spam is then kept to be used as part