Re: commerce Antispam Products

Have a look at MPP. Excellent software, nice people, great support. http://www.messagepartners.com And you can use SpamAssassin with it. Patrick Sneyers Op 14-sep-06, om 15:37 heeft Jeff het volgende geschreven: hello,lists, We're looking for a commerce antispam product.It should be high

RE: Can i use MySQL pref when i call spam from amavisd ?

Hello, After a good night, i'm come back.. I have read my previous mail and, many doc on internet.. And now, i'm not sure if i'm using Spamassassin, or if amavisd call spamd ? My ogjectif was to use sql pref for spam, because some mail was detected like a spam, but they don't. Some one can

import/export bayes database ?

Hi i want change my mail server, actually, i use SpamAssassin 3.0.4 I want put the latest version Can i export from old server the bayes database and import it into the new ? Thanks bye

Re: import/export bayes database ?

On Fri, 15 Sep 2006 10:11:58 +0200, Noc Phibee [EMAIL PROTECTED] wrote: Hi i want change my mail server, actually, i use SpamAssassin 3.0.4 I want put the latest version Can i export from old server the bayes database and import it into the new ? Thanks bye You should be able to do a MySQL

RE: import/export bayes database ?

In my experience, you can just reuse the database. I upgraded SA several times and never came across issues with the bayes DB. I'm am not using SQL however.But as long as the DB format, tables etc. do not change, you should be able to just reuse it, without hte need for export / import.

More clueless spammers

In the body: http://www. {GEN_DOM}/gall/ms/ (space added after the . so my rule doesn't trigger). Trivial rule body GEN_DOM /www\.\{GEN_DOM\}/ describe GEN_DOM General domain spam scoreGEN_DOM 15 Cheers, Phil -- Phil Randal Network Engineer Herefordshire Council

spamd dies for no apparent reason

Having an issue with spamd terminating abnormally. The server is running FreeBSD 6.0-Release, Perl 5.8.8, and SA 3.1.5. spamd is started with the following: -d -r ${pidfile} -m 15 -i 127.0.0.1 -p 783 -s /var/log/spamd.log The ${pidfile} is set from within

RE: spamd dies for no apparent reason

I was having similar problems and I finally setup a rule to limit message sizes that were sent to SA which seems to have resolved it. Perhaps it's some sort of spammer DoS? -- Benjamin Story, CCNA CCDA CQS-CFWS Network Administrator Dot Foods, Inc www.dotfoods.com IT Helpdesk x2312 or [EMAIL

Sa-learn / mbx?

Is there a problem with 3.1.5 (FreeBSD port) and sa-learn --mbx? I get the following: /usr/local/bin/sa-learn --spam --mbx --showdots /home/ler/Mail/SA/FN archive-iterator: unable to open /home/ler/Mail/SA/FN./home/ler/Mail/SA/FN: No such file or directory archive-iterator: unable to open

bayes training

I installed spamassassin last night and I see emails in the spam folder. Since I have report_safe set to 1, it has a message in the body of the email stating that the message was caught by the spam filter and more details on the scores. Now what happens when I do sa-learn on this message? Will

RE: More clueless spammers

And another! This time the obligatory random bayes poisoning text at the end of the spam included the f word. *chuckles* Phil -- Phil Randal Network Engineer Herefordshire Council Hereford, UK -Original Message- From: Randal, Phil Sent: 15 September 2006 12:29 To:

rbl checks not working

I have skip_rbl_checks0 and the following rules in the local.cf file RCVD_IN_SORBS_DUL 2.0 RCVD_IN_XBL 1.0 RCVD_IN_SBL 1.0 I see spam in my Inbox with the following in the hearders X-Spam-Status: No, score=-2.3 required=5.0 tests=ALL_TRUSTED,BAYES_50, From the looks fo it, it does not

Re: rbl checks not working

On Fri, Sep 15, 2006 at 05:35:03PM -, Dhaval Patel wrote: From the looks fo it, it does not seem that any of the rbl checks are working. Can anybody suggest what to try next. I have read about some people doing debug but I am not sure how to do that. If I should debug can somebody give

Re: spamd dies for no apparent reason

Duane Hill wrote: Having an issue with spamd terminating abnormally. The server is running FreeBSD 6.0-Release, Perl 5.8.8, and SA 3.1.5. All the spamd processes actually terminate? Not end up like zombies or stop responding? spamd is started with the following: -d -r

Re: bayes training

Dhaval Patel wrote: I installed spamassassin last night and I see emails in the spam folder. Since I have report_safe set to 1, it has a message in the body of the email stating that the message was caught by the spam filter and more details on the scores. Now what happens when I do sa-learn

RE: rbl checks not working

Dhaval Patel wrote: I have skip_rbl_checks0 and the following rules in the local.cf file RCVD_IN_SORBS_DUL 2.0 RCVD_IN_XBL 1.0 RCVD_IN_SBL 1.0 I see spam in my Inbox with the following in the hearders X-Spam-Status:No, score=-2.3 required=5.0 tests=ALL_TRUSTED,BAYES_50,

Re: spamd dies for no apparent reason

On Friday, September 15, 2006 at 6:36:01 PM, Daryl confabulated: Duane Hill wrote: Having an issue with spamd terminating abnormally. The server is running FreeBSD 6.0-Release, Perl 5.8.8, and SA 3.1.5. All the spamd processes actually terminate? Not end up like zombies or stop

Re: rbl checks not working

I copied the mbox message to /tmp/spam and did spamassassin -t -D /tmp/spam and saw that it was missing the NET/DNS module from perl. I did an apt-get install libnet-dns-perl and everything works fine. Perhaps its not a requirement for spamassassin to run so it was not a required package. After

Re: Sa-learn / mbx?

Larry Rosenman wrote: Is there a problem with 3.1.5 (FreeBSD port) and sa-learn --mbx? I get the following: /usr/local/bin/sa-learn --spam --mbx --showdots /home/ler/Mail/SA/FN did you try /usr/local/bin/sa-learn --spam --mbx --showdots /home/ler/Mail/SA/FN

ie / oe 0day rule?

There's a 0day exploit circulating.. Unless you block activeX objects via some other means, your Outlook* users are vulnerable to this. http://downloads.securityfocus.com/vulnerabilities/exploits/19738.html Seems like testing for DirectAnimation.PathControl would be a good idea.. Any thoughts

Forum mail identified as spam

I just signed up for the UltraVNC support forum and its activation email got bounced by SA 3.1.4 with a pretty high spam score. I added a whitelist entry to my config and re-applied under a second email address and filed a report in the forum: http://forum.ultravnc.info/viewtopic.php?t=7736

Re: ie / oe 0day rule?

On Fri, Sep 15, 2006 at 01:21:47PM -0700, Ken A wrote: Unless you block activeX objects via some other means, your Outlook* users are vulnerable to this. http://downloads.securityfocus.com/vulnerabilities/exploits/19738.html Seems like testing for DirectAnimation.PathControl would be a good

Re: ie / oe 0day rule?

On Fri, 15 Sep 2006, Ken A wrote: Seems like testing for DirectAnimation.PathControl would be a good idea.. Any thoughts on this? full LOCAL_09152006_0_DAY/DirectAnimation.PathControl/i describe LOCAL_09152006_0_DAY DirectAnimation.PathControl object code score LOCAL_09152006_0_DAY

Re: Forum mail identified as spam

On Fri, Sep 15, 2006 at 01:29:26PM -0700, Kenneth Porter wrote: It looks like just changing the MTA HELO greeting would go a long ways towards getting the score down. Any other suggestions? Without seeing the rules that hit it's hard to tell you what's up. I just ran the mail through on my

Re: Forum mail identified as spam

At 01:29 PM 9/15/2006, you wrote: I just signed up for the UltraVNC support forum and its activation email got bounced by SA 3.1.4 with a pretty high spam score. I added a whitelist entry to my config and re-applied under a second email address and filed a report in the forum: SpamAssassin

Re: Forum mail identified as spam

On Friday, September 15, 2006 1:39 PM -0700 Evan Platt [EMAIL PROTECTED] wrote: At 01:29 PM 9/15/2006, you wrote: I just signed up for the UltraVNC support forum and its activation email got bounced by SA 3.1.4 with a pretty high spam score. I added a whitelist entry to my config and

Re: Forum mail identified as spam

On Friday, September 15, 2006 4:38 PM -0400 Theo Van Dinter [EMAIL PROTECTED] wrote: Without seeing the rules that hit it's hard to tell you what's up. Sorry about that. I'd pasted them into the linked forum thread so the forum operator could see the hits. Content analysis details: (8.0

Re: ie / oe 0day rule?

On Fri, September 15, 2006 4:34 pm, John D. Hardin said: On Fri, 15 Sep 2006, Ken A wrote: Seems like testing for DirectAnimation.PathControl would be a good idea.. Any thoughts on this? full LOCAL_09152006_0_DAY/DirectAnimation.PathControl/i describe LOCAL_09152006_0_DAY

Re: Message containing bitmaps with random lines not being blocked

Which version of gocr should I be using with FuzzyOcrPlugin? I see that my distro (gentoo) does not have the latest version (0.41) available and its supposed to be buggy. Some of the tests don't give the expected result eg when I do: /etc/spamassassin/FuzzyOcr-2.3b/samples $ spamassassin -t

RE: Sa-learn / mbx?

I hadn't needed to in previous releases, and MBOX format seems(!) to work I'll re-verify. LER -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 512-248-2683 E-Mail: ler@lerctr.org US Mail: 430 Valona Loop, Round Rock, TX 78681-3893 -Original

Re: ie / oe 0day rule?

Daniel T. Staal wrote: On Fri, September 15, 2006 4:34 pm, John D. Hardin said: On Fri, 15 Sep 2006, Ken A wrote: Seems like testing for DirectAnimation.PathControl would be a good idea.. Any thoughts on this? fullLOCAL_09152006_0_DAY/DirectAnimation.PathControl/i describe

Re: Message containing bitmaps with random lines not being blocked

On Fri, September 15, 2006 23:31, Robert S wrote: If I run this with the --debug option it does not report any errors. http://bugs.gentoo.org/show_bug.cgi?id=145939 for giflib http://bugs.gentoo.org/show_bug.cgi?id=145624 for gocr i will test the unstable soon -- This message was sent using

Re: Message containing bitmaps with random lines not being blocked

http://bugs.gentoo.org/show_bug.cgi?id=145939 for giflib http://bugs.gentoo.org/show_bug.cgi?id=145624 for gocr I'll wait for these. FuzzyOcrPlugin has already blocked a few spams after only a day of use so its definitely useable at the moment. No sense in reinventing the wheel.

RE: Sa-learn / mbx?

Neither way works: $ sa-learn --mbx --showdots --spam /home/ler/Mail/SA/FN archive-iterator: unable to open /home/ler/Mail/SA/FN./home/ler/Mail/SA/FN: No such file or directory archive-iterator: unable to open /home/ler/Mail/SA/FN./home/ler/Mail/SA/FN: No such file or directory archive-iterator:

Re: Sa-learn / mbx?

I think you're going to have to give us more information... On Fri, Sep 15, 2006 at 05:11:50PM -0500, Larry Rosenman wrote: $ sa-learn --mbx --showdots --spam /home/ler/Mail/SA/FN Is FN a directory or a file? archive-iterator: unable to open /home/ler/Mail/SA/FN./home/ler/Mail/SA/FN: No such

RE: Sa-learn / mbx?

It's a file. Where's the BZ, and I'll create a bug. It did seem to break when I put 3.1.5 on. (This is in a nightly update script, that's been running for months). I'll attach the MBX to the BZ ticket. -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1

RE: Sa-learn / mbx?

I found the BZ. Bug 5101 Thanks... PS: I'm willing to test patch(es). LER -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 512-248-2683 E-Mail: ler@lerctr.org US Mail: 430 Valona Loop, Round Rock, TX 78681-3893 -Original Message- From: Larry

Re: Forum mail identified as spam

From: Kenneth Porter [EMAIL PROTECTED] On Friday, September 15, 2006 4:38 PM -0400 Theo Van Dinter [EMAIL PROTECTED] wrote: Without seeing the rules that hit it's hard to tell you what's up. Sorry about that. I'd pasted them into the linked forum thread so the forum operator could see the