RE: [SAtalk] Auto-learn SA after having trained it

2004-01-28 Thread Mark Squire
Great, just wanted to be sure. Thanks! Mark > -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Friday, January 23, 2004 9:38 AM > To: Mark Squire; [EMAIL PROTECTED] > Subject: Re: [SAtalk] Auto-learn SA after having trained it > > > At

RE: [SAtalk] stats

2004-01-27 Thread Mark Emerle
Hi- Sort of the same line of this subject, but has anyone written a script to pull stats for setups not using spamd. My setup consists of spamassassin, mime-defang and sendmail, I am not using spamc/spamd. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Beha

Re: [SAtalk] auto whitelist questions

2004-01-27 Thread Mark Merchant
from /var/log/messages Jan 26 09:40:46 deimos spamd: The -a option has been removed Jan 26 09:40:46 deimos spamd: spamd startup succeeded On Tue, 2004-01-27 at 11:41, Michael Parker wrote: > On Tue, Jan 27, 2004 at 10:55:17AM -0500, Mark Merchant wrote: > > i can get AWL working wit

Re: [SAtalk] auto whitelist questions

2004-01-27 Thread Mark Merchant
i can get AWL working with regular spamassassin, but NOT with spamc/d. is there tip/trick i'm missing ? > I've been using auto whitelist for a while now, but today while doing some > experimentation I'm wondering if the explicit (auto) white listing feature > is working at all (version 2.61)? I'

[SAtalk] Auto-learn SA after having trained it

2004-01-23 Thread Mark Squire
the whole company. I think that SA needs to "get out more" and learn from a broader range of emails (if that makes sense). I wanted to be sure that it is okay to put it into auto-learn mode, even after I have been manually teaching it for a while. What do you good folks think? Th

[SAtalk] Webmin and amavis

2004-01-19 Thread Mark Squire
Has anyone managed to get the amavisd webmin module to work? I could not, and just wondered if what other people's experience was. Hope this wasn't too far off topic. Thanks, Mark --- The SF.Net email is sponsored by EclipseCon 200

[SAtalk] Configuration question

2004-01-19 Thread Mark Squire
n one place, and and not the other. What is the point of specifying settings in the local.cf, if the amavisd.conf works just as well if not better? Or maybe it doesn't? What do you think? Thanks, Mark --- The SF.Net email is sponsored by

[SAtalk] Filtering per-recipient

2004-01-18 Thread Mark Squire
up to put a ***SPAM*** tag on every email that is suspicios to every email that passes through it. I am wondering if it is possible to make Postfix only call amavis, and SA for certain users, and just pass along the rest of the emails (for now while I am testing). Any ideas? Thanks! Mark

[SAtalk] (no subject)

2004-01-18 Thread Mark Squire
. I am wondering if it is possible to make Postfix only call amavis, and SA for certain users, and just pass along the rest of the emails (for now while I am testing). Any ideas? Thanks! Mark --- The SF.Net email is sponsored by EclipseCon

RE: [SAtalk] RE: New Ruleset Available!!! TRIPWIRE! You don't w ant to miss this o ne!

2004-01-15 Thread Mark Wendt (Contractor)
Just a quick note. Tripwire is a commercial IDS package, sold by Tripwire Inc. We might have to watch our for trademark infringement. Mark --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software

RE: [SAtalk] Which conf file?

2004-01-14 Thread Mark Squire
ings, and move on from there. Thanks again!   -Original Message-From: Richard Ozer [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 14, 2004 9:03 AMTo: Mark SquireCc: [EMAIL PROTECTED]Subject: Re: [SAtalk] Which conf file? Spamassassin is loaded by amavisd upon startu

[SAtalk] Which conf file?

2004-01-14 Thread Mark Squire
Hi Group, Suppose I have SA set to be called from Amavisd, which is called from Postfix. If I wanted to tell it to tag spam, would I do that in the amavisd.conf file, the spamassassin.cf file, the main.cf file (for postfix) or somewhere else that I am missing? Currently it is defined in both the

RE: [SAtalk] DNS issues

2004-01-13 Thread Mark Squire
Looks to be my boo boo evidently. I thought I had set the /var/spool/postfix/etc/resolv.conf to the correct DNS server, but evidently I didn't. Too close to the problem I guess. > -Original Message- > From: Mark Squire > Sent: Tuesday, January 13, 2004 2:35 PM > To:

RE: [SAtalk] DNS issues

2004-01-13 Thread Mark Squire
4 2:25 PM > To: Mark Squire; SpamAssassin ML > Subject: Re: [SAtalk] DNS issues > > > You stated you setup the DNS server for the test network.. > but you didn't say what nameservers your prod servers are > using...and if there if you have xfer'd the zones or no

[SAtalk] DNS issues

2004-01-13 Thread Mark Squire
Hi all, Some of you were kind enough to give this new-B some advice before regarding this issue, but I am a little baffled by something. I set up a mail server as a test server, and put it on it's own network. I then set up a router so that it can route to and from our prod net. I set up a DNS s

Re: [SAtalk] Your threshold score

2004-01-12 Thread Mark H
Above 5 and it goes into the SPAM folder, but these are at least cursorily examined before trashing. Above 10 and it goes directly into the trash, never to be seen again. mh At 07:32 AM Monday1/12/2004, Carl Chipman wrote: What do most people who write new SA rules set their threshold too? I

[SAtalk] Mirror Out of Date

2004-01-12 Thread Mark Waterhouse - Mailing Lists
http://au2.spamassassin.org is out of date. It shows the latest version to be v2.55 Best Regards Mark Waterhouse --- This SF.net email is sponsored by: Perforce Software. Perforce is the Fast Software Configuration Management System offering

Re: [SAtalk] Web Front End

2004-01-10 Thread Mark Frank
On January 10, 2004, Waterfront Internet Service wrote: > Anyone have or know of a web front end so users can set their own scores, > whitelists & blacklists which is saved to their own user rules? Check out webmin/usermin. http://www.webmin.com/ http://www.usermin.com/ Mark -- &

Re: [SAtalk] Yahoo, etc

2004-01-09 Thread Mark Frank
NYONE ON EARTH the email address. It wasn't a common username either - a combination of street address and initials of the company, [EMAIL PROTECTED] (Go ahead and spam it - I don't work there anymore!) :-) Mark -- Mark Frank Director of Technical Services

RE: [SAtalk] SA name resolution

2004-01-08 Thread Mark Squire
I'll try creating one. Thanks Theo. C:\Mark > -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Thursday, January 08, 2004 2:48 PM > To: Mark Squire > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] SA name resolution > > > On

[SAtalk] SA name resolution

2004-01-08 Thread Mark Squire
loading postfix and amavis with the "reload" parameter. The resolv.conf file under /var/spool/postfix/etc/ matches the /etc/resolv.conf and both match /etc/sysconfig/networking/profiles/default/resolv.conf. TIA, C:\Mark --- This SF.

[SAtalk] Re: Subject contains username

2004-01-02 Thread Mark London
Theo Van Dinter wrote: On Thu, Jan 01, 2004 at 09:33:23PM -0500, Mark London wrote: >Hi - I see the rule USERNAME_IN_SUBJECT, but I've never seen that triggered at my site, and a test message sent to myself did not trigger it. We are using spamassassin with sendmail, mimedefang, cy

[SAtalk] Re: Subject contains username

2004-01-01 Thread Mark London
Hi - I see the rule USERNAME_IN_SUBJECT, but I've never seen that triggered at my site, and a test message sent to myself did not trigger it. We are using spamassassin with sendmail, mimedefang, cyrus, and redhat linux. Any idea why it's not working? Thanks. - Mark Received: fro

[SAtalk] Spamassassin rules suggestion, where to talk about?

2003-12-30 Thread Mark London
o it): body __HG_HORMONE /\b(?:human growth hormone|(?-i:HGH)|H\W*G\W*H)\b/i And phrases should be added to catch all that spam regarding savings on meds! Like searching subject lines for save savings + drugs meds prescription, etc. Mark

[SAtalk] Re: [AMaViS-user] amavisd-new + spamassassin question

2003-12-22 Thread Mark Martinec
expiry, or just a plain performance problem. Mark --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the ba

[SAtalk] Moving Exchange Spam to SA SMTP box to get it to learn

2003-12-22 Thread Mark Squire
2000 system. Is there some way to copy them off exchange into a mailbox on SpamAssassin and run sa-learn on it? Or is there a better way? Thanks, C:\Mark --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or

[SAtalk] unix dgram message

2003-12-17 Thread Mark Wendt (Contractor)
to be working. I start spamd with this: "spamd -a -d". I did some digging in the archives, and ddin't see much mention of the issue, or what it took to fix it. Is this really a problem on Solaris, or is it pretty much a non-

Re: [SAtalk] Domain DNS Blacklists

2003-12-16 Thread Mark Lowes
On Tue, 2003-12-16 at 15:36, Matt Kettler wrote: > >header RCVD_SECSAGE_RBL eval:check_rbl('SECSAGE', > >'blackhole.securitysage.com.') > Check out how check_rbl_from_host works in the RFCI_DSN rule (quoted in my > other post to this thread). Perfect, thanks all. -- The Flying Hamster <[EMAIL

[SAtalk] Domain DNS Blacklists

2003-12-16 Thread Mark Lowes
Afternoon all, I've had a dig through the archives and wiki for a definitive answer with no success. Is it currently possible to use DNS based domain blacklists at the moment in SA? (such as http://www.securitysage.com/guides/postfix_uce_rhsbl.html) thanks Mark -- Mark Lowes &l

[SAtalk] Re: [AMaViS-user] how to change config path of SA ?

2003-12-12 Thread Mark Martinec
=> '/etc/mail/spamassassin', Mark --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash s

Re: [AMaViS-user] Re: [SAtalk] Can't locate AAAA.pm

2003-12-12 Thread Mark Martinec
TXT ^^^ anywhere in this list above After chrooting takes place the Perl modules are no longer reachable at their expected paths, which is why Perl 'use' or 'require' fails if done too late. I'll add this module to the lis

RE: [SAtalk] Need a rule for IE Exploit

2003-12-12 Thread Mark Muller
Friend gave this to me this morning: uri CUSTOM_IE_URL_SPOOF /\x01\s*\@|&\#01\s*\@/ score CUSTOM_IE_URL_SPOOF (up to you, I set it to 5.0) describe CUSTOM_IE_URL_SPOOFCustom: URL tries to spoof its identity via an IE trick Anyone care to c

RE: [SAtalk] Need a rule for IE Exploit

2003-12-11 Thread Mark Muller
Updated regex from my friend: uri CUSTOM_IE_URL_SPOOF /\x01\s*\@|&\#01\s*\@|\%01\s*\@/ He missed the %01 encoding. -Original Message- From: Ivar Snaaijer [mailto:[EMAIL PROTECTED] Sent: Thursday, December 11, 2003 12:13 PM To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Need

[SAtalk] Razor and Spamassassin vs spamc

2003-12-09 Thread Mark Norton
g the spamc client. Any ideas??     Regards, Mark Norton  

[SAtalk] Re: [AMaViS-user] A "Out of memory" case

2003-12-09 Thread Mark Martinec
o wise to put a limit on mail size in your MTA and/or keep the $sa_mail_body_size_limit at a reasonable value. Mark --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for I

RE: [SAtalk] 2.61 scan time observation

2003-12-09 Thread Mark Muller
Appologies, I've solved my own problem. (I *always* forget to turn DCC back off) Adding score DCC_CHECK 0 to my local.cf right now. :) -Original Message- From: Mark Muller Sent: Tuesday, December 09, 2003 11:25 AM To: [EMAIL PROTECTED] Subject: [SAtalk] 2.61 scan time observation

[SAtalk] 2.61 scan time observation

2003-12-09 Thread Mark Muller
this happening with their upgrades. I've added -m 15 to my spamd and it's not helped reduce scan times at all so it's not the max-children change. Any thoughts? Regards, Mark --- This SF.net email is sponsored by: IBM Linux

[SAtalk] SA, Razor and unkempt perl

2003-12-06 Thread Mark Norton
:Agent" at /usr/lib/perl5/site_perl/5.6.0/Mail/SpamAssassin/Dns.pm line 392. debug: leaving helper-app run mode   After reading some of the other posts, I get the idea that this has to do with how the perl modules got installed. Can someone please point me in the right direction?   Thanks!   Mark Norton [EMAIL PROTECTED]    

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-04 Thread Mark Muller
ote: > On Thu, 4 Dec 2003, Mark Muller wrote: > >> promotion.entertainment.com (70) >> a1524.g.akmaitech.net (82) >> and service.bfast.com (150) >> >> Personally, I'll be whitelisting ticketmaster rather than removing >> akmaitech :P I hate those g

RE: [SAtalk] Re: BIG HUGE EVIL RULE NEWS!!!!

2003-12-04 Thread Mark Muller
than removing akmaitech :P I hate those guys. But obviously Chris wanted *zero* false positives, and this is one. -Original Message- From: Mark Muller Sent: Thursday, December 04, 2003 2:51 PM To: '[EMAIL PROTECTED]'; [EMAIL PROTECTED] Subject: RE: [SAtalk] Re: BIG HUGE

RE: [SAtalk] Re: BIG HUGE EVIL RULE NEWS!!!!

2003-12-04 Thread Mark Muller
Bigevil just took a poke at a legit ticketmaster confirmation email, hit on 3 rules: 70, 82 and 150. I'm tracking down the specific URLS, one is entertainment.com :( -Original Message- From: Chris Thielen [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2003 2:38 PM To: [EMAIL PROTE

RE: [SAtalk] Messages full of white text

2003-12-04 Thread Mark Muller
There certainly is a rule, and it caught this mail: HTML_FONT_INVISIBLE The score on it is just really low. I've been pondering bumping it up. -Original Message- From: Rubin Bennett [mailto:[EMAIL PROTECTED] Sent: Thursday, December 04, 2003 10:40 AM To: [EMAIL PROTECTED] Subject: [SAtal

RE: [SAtalk] BIG HUGE EVIL RULE NEWS!!!!

2003-12-03 Thread Mark Muller
Watch for hits? It shouldn't take long, those rules hit about 1 in 5 for me. -Original Message- From: Vee Persaud [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 03, 2003 10:48 AM To: Spamassassin-Talk (E-mail) Subject: RE: [SAtalk] BIG HUGE EVIL RULE NEWS How can I tell that S

Re: [SAtalk] Re: How to config Spam Assassin to reject spam > x.xx

2003-12-01 Thread Mark
is can be done with SpamAssassin. But you need a different implementation of SpamAssassin for that, integrated into a Milter. Have a look at this list: http://mail.nongnu.org/mailman/listinfo/spamass-milt-list Perhaps they have what you are looking for. Kind regards, - Mark

RE: [SAtalk] Disable a User who does not want SA

2003-12-01 Thread Mark Muller
search but not found an answer to disable on a per user basis. Mark --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE, and help

Re: [SAtalk] Cache poisoning on relays.osirusoft.com??

2003-11-29 Thread Mark
- Original Message - From: "Matt Kettler" <[EMAIL PROTECTED]> To: "Mark" <[EMAIL PROTECTED]>; <[EMAIL PROTECTED]> Sent: Saturday, November 29, 2003 7:01 PM Subject: Re: [SAtalk] Cache poisoning on relays.osirusoft.com?? > > WTF?? So, I ran ov

[SAtalk] Cache poisoning on relays.osirusoft.com??

2003-11-29 Thread Mark
checks altogether; something sure is fishy! - Mark System Administrator Asarian-host.org --- "If you were supposed to understand it, we wouldn't call it code." - FedEx --- This SF.net email is sponsored by: SF.net G

Re: [SAtalk] bayes database size

2003-11-26 Thread Mark
:58 bayes_toks It also seems excessively world readable/writeable. :) - Mark --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE

Re: [SAtalk] bayes database size

2003-11-26 Thread Mark
:58 bayes_toks It also seems excessively world readable/writeable. :) - Mark --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it help you create better code? SHARE THE LOVE

Re: [SAtalk] Re: An Open Letter to the SA-talk forum

2003-11-25 Thread Mark
re we? I agree, though, that Logan, being attacked here as he was, handled himself with class, in the lion's den. That is rare; probably as rare as the mistake he made. - Mark --- This SF.net email is sponsored by: SF.net Giveback Pro

RE: [SAtalk] Ideas

2003-11-25 Thread Mark Muller
I was running a whitelist on our local domain for a long time but overcoming whitelisted spam became too much of a chore. So I removed the whitelist entry and replaced with a header check on Received to verify it came from our internal machines, then assigned it -50. Then I slap a 5.1 on anything

Re: [SAtalk] An Open Letter to the SA-talk forum

2003-11-24 Thread Mark
ind that you cannot change anything at all. Is, conversely, such an unalterable program then a pre? I think not. I eagerly await your new article. - Mark System Administrator Asarian-host.org --- "If you were supposed t

RE: [SAtalk] Really bad Infoworld article

2003-11-24 Thread Mark Spieth
to poor Docs, things that don't work, and things that work but not as they are supposed to. However time and time again, the end result is that MOST open source software is more cost effective in the end than most commercial software if you look at the true cost of ownership. Just my 2 cents

[SAtalk] Running rbldnsd

2003-11-23 Thread Mark
It manages load load the whole dynablock zone in less than 8MB (!), so it is worth trying to get to work, I'd say. Thanks, - Mark --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more producti

Re: [SAtalk] perl question

2003-11-22 Thread Mark
g character > can be a space or a carriage return (newline?) ? / badtext\s+goodtext / Takes care of a TAB too. :) - Mark --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does

Re: [SAtalk] *.easynet.nl DNSBL's ceasing on Dec 1, 2003

2003-11-21 Thread Mark
course. Well, I better be real quick and do a huge rsync today, and grab me the whole dynalist before it is too late. Good thing I run my own DNS. Others may not be so fortunate. - Mark --- This SF.net email is sponsored by: SF.net Giveback

Re: [SAtalk] Re: Comments on CBL DNSBL (cbl.abuseat.org)

2003-11-20 Thread Mark
only got 1 (!) hit on it. Seems a bit lame. Unless the former two cover pretty much everything the latter does too. - Mark --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more productive? Does it he

[SAtalk] Pyzor trouble

2003-11-19 Thread Mark
Has anyone else problems with Pyzor? I am getting these, all throughout the day, Pyzor: couldn't grok response "66.250.40.33:24441 TimeoutError: " I did a "/usr/local/bin/pyzor discover", but to no avail. And I do not have them blocked on the firewall

[SAtalk]

2003-11-14 Thread Mose&#x27;, Mark
  Folks:   Anybody have any experience in flagging this type of obscuration: with a rule? Did it generate lots of false positives (for SPAM)?   Mark M.  

Re: [SAtalk] SMTP gateway/filter

2003-11-12 Thread Mark Hepler
server sheltering the Exchange server from Dictionary spam attacks. then plug in SpamAssassin some sort of MIME defang, an AV solution or whatever other tools suit you, and you will be good to go. Mark Hepler Paul Hutchings wrote: Robban, I've never used sendmail (too daunting for a n

[SAtalk] Replicating Bayes DB to other SA Boxes

2003-11-12 Thread Puchalski, Mark
e bayes to work on the remote boxes?   Thanks.   -- Mark A. Puchalski Network Engineer Honigman Miller Schwartz and Cohn LLP   Tel  313.465.7167 Fax 31

Re: [SAtalk] What Dynamic IPs rbl list?

2003-11-11 Thread Mark
DNSBL has been so effective in blocking spam as this dynamic block list. I kid you not when I say spam has been reduced by 90% and up! I'm loving it so much even, that this morning I added the entire dynablock zone to my DNS. BIND rose to a whopping

DynaBlock strategy (was: Re: [SAtalk] Looking for Rules)

2003-11-11 Thread Mark
the same policy. Is there anyone here who has some answers on this matter? Thanks! - Mark --- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest development

[SAtalk] Is bl.spamcop.net gone?

2003-11-08 Thread Mark
Is it just me, or is bl.spamcop.net gone? I am no longer able to get a DNS resolution for it. - Mark --- This SF.Net email sponsored by: ApacheCon 2003, 16-19 November in Las Vegas. Learn firsthand the latest developments in Apache, PHP

[SAtalk] Could not complete sender verify callout

2003-11-05 Thread Mark
accidentally blocked something. But it makes no difference. Can anyone please tell me why this occurs? Much obliged, - Mark P.S. I had to subscribe with a different address, just to get this post out. --- This SF.net email is sponsored by: SF.net

Re: [SAtalk] Anti-SA article: "ISP Assassin"

2003-11-05 Thread Mark
ers of SpamAssassin, since it violates these laws." Yeah, you know what? Let us sue the Sendmail Consortium too; because, after all, sendmail "examines" private email too, and not just the headers. :) And all without a Court order! :) What a loser. - Mark -

Re: [SAtalk] Using MRTG to display highest connection counts

2003-10-31 Thread Mark
- Original Message - From: "Kelsey Cummings" <[EMAIL PROTECTED]> To: "Mark" <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Friday, October 31, 2003 2:00 AM Subject: Re: [SAtalk] Using MRTG to display highest connection counts > On Thu, Oct

[SAtalk] Postfix Spamtrap Configuration

2003-10-31 Thread Mark Hepler
to automate the process so users can submit messages would make my life easier. does anyone know of a website that has an example of setting up a spamtrap like this with postfix ? thanks for your assistance. -- Mark Hepler [EMAIL PROTECTED]

RE: [SAtalk] stats script

2003-10-30 Thread Mark Emerle
Please post, I wrote my own but would like to see if you included something in yours that could be useful -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of mikea Sent: Thursday, October 30, 2003 2:13 PM To: SA Mailing list Subject: [SAtalk] stats script I hav

RE: [SAtalk] SA Upgrade 2.41->2.60 Stops Adding Headers

2003-10-30 Thread Mark Schoonover
Theo Van Dinter wrote: > On Wed, Oct 29, 2003 at 03:10:53PM -0800, Mark Schoonover wrote: >> provided, and it adds the headers just fine. Running spamd with -D, >> and I can see it detecting spam just fine, it just won't add the >> default headers. > > hrm. if p

re: [SAtalk] How do I filter something like this?

2003-10-30 Thread Mark Muller
Funny you should ask, as 2.60 filtered the forward just fine on my side with pbw installed. Even without Backhair this would have been filtered. -Mark -Original Message- From: Howard Brazee [mailto:[EMAIL PROTECTED] Sent: Thursday, October 30, 2003 7:45 AM To: Spamassassin-Talk (E-mail

[SAtalk] Using MRTG to display highest connection counts

2003-10-30 Thread Mark
Hello, Is there someone who has used MRTG to display highest connection counts? Though not necessarily spam, I would like to get an overview of who has been trying to connect an inordinate amount of times during the day. Thanks, - Mark

RE: [SAtalk] SA Upgrade 2.41->2.60 Stops Adding Headers

2003-10-29 Thread Mark Schoonover
Theo Van Dinter wrote: > On Tue, Oct 28, 2003 at 12:20:19PM -0800, Mark Schoonover wrote: >> that didn't work. I can see in my logs that ifspamh is detecting >> spam just fine, what's not happening is the headers being added to >> every spam email. > >

RE: [SAtalk] Exessive HTML Code

2003-10-29 Thread Mark Ritchie
Do you really think it would be a problem if we found more than 3 instances of in each email to mark it as spam? Maybe I could just score it lower per instance, say .2 There were 58 instances of in this email and 63 instances of . -Original Message- From: Larry Gilson [mailto

[SAtalk] Exessive HTML Code

2003-10-29 Thread Mark Ritchie
en and I'd have to say anyone sending messages like this is obviously a spammer.   Mark

[SAtalk] SA Upgrade 2.41->2.60 Stops Adding Headers

2003-10-28 Thread Mark Schoonover
e should I be looking for?? Thanks again! .mark "The United States is putting together a Constitution now for Iraq. Why don't we just give them ours? It's served us well for 200 years, and we don't appear to be using it anymore, so what the hell?" -- Jay Leno --

Re: [SAtalk] 0 messages

2003-10-28 Thread Mark Beckwith
Thanks guys, I ran with -D and got this line: debug: bayes: DB_File module not installed, cannot use Bayes Problem solved! Mark On Tue, Oct 28, 2003 at 08:23:20AM -0500, Chris wrote: > I had the same problem for a while. > > > No matter what I do, I get something like: > > &g

[SAtalk] 0 messages

2003-10-27 Thread Mark Beckwith
Hello, I've done my due diligence but can't figure this out: No matter what I do, I get something like: ~/Mail >sa-learn --spam --mbox spam Learned from 0 message(s) (1927 message(s) examined). ~/Mail >sa-learn --ham --mbox /var/spool/mail/mark Learned from 0 message(s) (111 mes

[SAtalk] Spamd (2.60) continuously dying

2003-10-27 Thread Mark T. Valites
ften work just fine. I've since disabled the nmap scans, and spamd hasn't crashed on any of the satellites. Has anyone else seen similar problems? or care to confirm my suspicions that the nmap scans could be causing sp

Re: [AMaViS-user] [SAtalk] RE: Amavisd-new and logging untrusted relays... was: RE: [SAtalk] [OT ] What is next step?

2003-10-25 Thread Mark Lawrence
Is anyone else also getting some emails lately two or three times? As far as I know I am only subscribed to one of these lists... Perhaps one list is actually subscribed to the other? cheers. -- Mark Lawrence ([EMAIL PROTECTED]) --- This

[SAtalk] Re: [AMaViS-user] Amavisd-new and logging untrusted relays...

2003-10-25 Thread Mark Martinec
n't use 'average' on datasets that are not uniform or gaussian in their nature, but can easily be skewed (e.g. a single whitelisted score of -100 will bump the average way out). Much better measure is the median value (the middle element in the sorted list, you don't need

[SAtalk] spamass-milter

2003-10-23 Thread Mark Merchant
not sure if this is a spamassassin or milter issue, but here goes. i've been running spammassassin 2.54 & spamass-milter for 6 months or so. yesterday i decided to upgrade to 2.6 ( via cpan ). now, the spamass-milter daemon seems to stop running every few minutes. is spamassassin 2.60 not comapati

RE: [SAtalk] SA users implementing DCC

2003-10-13 Thread Rice, MA Mark (6750) @ IS
Yes, Larry, it's a firewall configuration issue. If you receive responses from a few public DCC servers, your firewall is likely allowing DCC to do its job. - Mark Rice > -- > From: Larry Gilson[SMTP:[EMAIL PROTECTED] > > > > According to reports

RE: [SAtalk] Re: documenting DCC

2003-10-10 Thread Rice, MA Mark (6750) @ IS
Bug submitted as > http://bugzilla.spamassassin.org/show_bug.cgi?id=2579 > Thanks Malte, and sorry that I made a double post of the issue. Mark Rice > -- > From: Malte S. Stretz[SMTP:[EMAIL PROTECTED] > Sent: Friday, October 10, 2003 9:48 AM > To:

[SAtalk] SA users implementing DCC

2003-10-10 Thread Rice, MA Mark (6750) @ IS
SA users that implement DCC need this info... [Forwarded from the DCC mailing list.] - Mark Rice > -- > From: [EMAIL PROTECTED]:[EMAIL PROTECTED] > Reply To: [EMAIL PROTECTED] > Sent: Thursday, October 09, 2003 1:01 PM > To: [EMAIL PROTECTED] >

[SAtalk] documenting DCC

2003-10-10 Thread Rice, MA Mark (6750) @ IS
I'm just forwarding this note from the dcc-mailing list because it has relevance to the SpamAssassin list. - Mark Rice > -- ... > According to reports from other people, the SpamAssassin documentation > does mention using `cdcc info` to see if the DCC client is working, >

Re: [SAtalk] Problem starting 2.6 with sudo

2003-10-06 Thread Mark Edwards
Scott Griffith, ISES-LLC wrote: On Oct 6, Mark Edwards wrote: I'm having a problem starting spamd via sudo. This is using the current FreeBSD port, and the behavior started with SA 2.6. I can start it successfully if I su to root, but if I try to use sudo, I get: sudo

[SAtalk] Today a bad day for spam?

2003-10-06 Thread Mark Ritchie
have to do to tighten my net around spam! Thanks Much! Mark --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___ Spamassassin-talk mailing lis

[SAtalk] Problem starting 2.6 with sudo

2003-10-06 Thread Mark Edwards
I'm having a problem starting spamd via sudo. This is using the current FreeBSD port, and the behavior started with SA 2.6. I can start it successfully if I su to root, but if I try to use sudo, I get: sudo /usr/local/etc/rc.d/spamd.sh start Insecure directory in $ENV{PATH} while running with

[SAtalk] Mimedefang/spamassassin/base64 encoded text

2003-10-06 Thread Mark London
problem was present if you were running less than 2.5x, but that's not the case here. Will upgrading my mimedefang help? Is this a spamassassin configuration problem? Any other suggestions? Thanks. - Mark X-Spam-Level: 4.6 () BASE64_ENC_TEXT,HTML_10_20,HTML_MESSAGE,NO_REAL_NAME X-Sca

RE: [SAtalk] spam test

2003-10-02 Thread Mark Spieth
Look at /usr/share/doc/spamassassin-2.60/sample-spam.txt -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eduardo Gargiulo Sent: Thursday, October 02, 2003 4:46 PM To: [EMAIL PROTECTED] Subject: [SAtalk] spam test Hi all This is my first message to the

[SAtalk] Suggestion for new rule for spam getting through.

2003-10-02 Thread mark london
I got the following spam message, which has a low rating. The construction of the To: line is "To: user <[EMAIL PROTECTED]>"I've seen this in a lot of spam, and can't imagine how a real message sent to me would have this form, so I would like to create a test for this situation. Has anyon

[SAtalk] Re: Restart Spamd

2003-09-30 Thread Mark Edwards
Date: Tue, 30 Sep 2003 15:58:44 -0400 From: Scott Rothgaber <[EMAIL PROTECTED]> Organization: Palmetto Network Solutions, Ltd To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Re: Restart Spamd Malte S. Stretz wrote: > kill -HUP should work with SpamAssassin 2.60 under Perl 5.6.1 and up

RE: [SAtalk] Spamassassin and qmail relay

2003-09-29 Thread Mark Spieth
Qmail-scanner does work well as long as your qmail is patched. Remember that if you use qmail-scanner, it runs as the user qsand so your .user_prefs will end up there and not in /etc/mail/spamassassin/ unless you call it some other way. -Original Message- From: [EMAIL PROTECTED] [mailto:[E

RE: [SAtalk] 2.6 RPM's for Redhat

2003-09-29 Thread Mark Spieth
You could build them from the source RPM. If you are not up to that, here they are... http://www.neod.net/sa/ -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ed Young Sent: Monday, September 29, 2003 3:37 PM To: [EMAIL PROTECTED] Subject: [SAtalk] 2.6

RE: [SAtalk] missed a spam

2003-09-29 Thread Roedel, Mark
27;s skipping it. Or is there some reason to believe that's not the case? -- Mark Roedel Web Programmer / Analyst LeTourneau University --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. http://thinkgeek.com/sf ___

Re: [SAtalk] SIGHUP crashing spamd in 2.60

2003-09-29 Thread Mark Edwards
From: "Hannu Liljemark" <[EMAIL PROTECTED]> Date: Sun, 28 Sep 2003 10:18:48 +0300 To: [EMAIL PROTECTED] Subject: Re: [SAtalk] SIGHUP crashing spamd in 2.60 On Sat, Sep 27, 2003 at 03:21:32PM -0700, Mark Edwards wrote: > Anyone else not able to SIGHUP

[SAtalk] SIGHUP crashing spamd in 2.60

2003-09-27 Thread Mark Edwards
I was excited to see the addition of SIGHUP functionality in 2.60. Unfortunately, while spamd seems to receive and obey the signal: Sep 27 15:15:50 lilbuddy spamd[47851]: server hit by SIGHUP, restarting spamd dies shortly thereafter. I'm running the port on FreeBSD 4.8p10. I do have the razo

[SAtalk] Possible error w/ whitelist score in 2.6.0

2003-09-23 Thread Mark R. Cervarich
sassin/user-prefs - whitelist_from [EMAIL PROTECTED] -Stop Exerpt from ~/.spamassassin/user-prefs - Is this a bug in the newest version of SA 2.6.0? Is this a problem w/ me doing whitelists wrong? Is there some way to prevent this in future? thanks, mark -

[SAtalk] 2.6.0 on CPAN -- when will it get there?

2003-09-23 Thread Mark R. Cervarich
/Mail-Box-2.048.tar.gz) Module Mail::SpamAssassin (J/JM/JMASON/Mail-SpamAssassin-2.55.tar.gz) In case I get tired of waiting, I've got a follow-up question: Is downloading the tarball and installing it myself fundamentally different than just doing the install from

  1   2   3   >