RE: spamc using different perl

2007-02-01 Thread Matthew Bickerton
Thanks, you were correct. It works I re built it in your order. Thanks every one for the help. Matthew _ From: maillist [mailto:[EMAIL PROTECTED] Sent: 31 January 2007 19:53 To: Matthew Bickerton Cc: 'Daryl C. W. O'Shea'; users@spamassassin.apache.org Subject: Re: spamc using

Re: about traing bayes method.

2007-02-01 Thread Chris St. Pierre
On Thu, 1 Feb 2007, Monty Ree wrote: So in order to train bayes this mail with sa-learn to ham, I forwarded this mail using outlook or outlook express to [EMAIL PROTECTED] and this mail would be saved at /var/spool/mail/ham. and if I execute like this, this would be meaningful or

SA 3.1.7 false positive on FORGED_MUA_OUTLOOK

2007-02-01 Thread Robert Fitzpatrick
I had a customer requesting a whitelist of an address this morning. I always look them up to see the SA score. This one seems to be a FP on the FORGED_MUA_OUTLOOK rule, see below. I say this due to finding numerous posting via a google search, sonmeone even suggested disabling this buggy rule.

Razor2 servers are down?

2007-02-01 Thread Jeff Moss
-Original Message- From: Roman Serbski [mailto:[EMAIL PROTECTED] Sent: Tuesday, January 30, 2007 11:52 PM To: users@spamassassin.apache.org Subject: Razor2 servers are down? Hi list, It looks like Razor2 servers are down? SA stopped checking messages for me this morning with the

RE: Razor2 servers are down?

2007-02-01 Thread Michael Scheidell
You need to 'rediscover ' razor razor-admin -discover -d Hi list, It looks like Razor2 servers are down? SA stopped checking messages for me this morning with the following in razor-agent.log: According to my logs, Razor went down sometime between: Jan 30 21:39:05 fl (last contact

Re: about traing bayes method.

2007-02-01 Thread Matt Kettler
Monty Ree wrote: Hello, list. I would like to ask some about bayes. If I have recevied ham mail which written ***SPAM***, So in order to train bayes this mail with sa-learn to ham, I forwarded this mail using outlook or outlook express to [EMAIL PROTECTED] and this mail would be saved at

Why is the token count so high?

2007-02-01 Thread Proctor, Scott
I am using MySQL as the bayes database and I am starting to run into problems when auto-expiry happens. I thought the ntokens was supposed to be under 15, why is mine 3 million? Any help would be greatly appreciated. 0.000 0 3 0 non-token data: bayes db version

Botnet FP

2007-02-01 Thread Bob McClure
I'm running SA v3.1.7, under Perl v5.8.5 on a RedHat ES4 box. I call spamc from each user's ~/.procmailrc. I recently started using Botnet (v0.7) on several servers, and find it's terrific. But today, I saw my first false positive. Here is the report and the mail header: Content analysis

Re: Botnet FP

2007-02-01 Thread Jonas Eckerman
[botnet0.7,ip=66.251.54.6,hostname=outbox2.onceanddone.com,maildomain=onceanddone.com,baddns] host 66.251.54.6 6.54.251.66.in-addr.arpa domain name pointer outbox2.onceanddone.com. host outbox2.onceanddone.com outbox2.onceanddone.com has address 66.251.51.6 host 66.251.51.6 Host

Re: Botnet FP

2007-02-01 Thread Bob McClure Jr
On Thu, Feb 01, 2007 at 05:21:08PM +0100, Jonas Eckerman wrote: [botnet0.7,ip=66.251.54.6,hostname=outbox2.onceanddone.com,maildomain=onceanddone.com,baddns] host 66.251.54.6 6.54.251.66.in-addr.arpa domain name pointer outbox2.onceanddone.com. host outbox2.onceanddone.com

Re: about traing bayes method.

2007-02-01 Thread maillist
Matt Kettler wrote: Monty Ree wrote: Hello, list. I would like to ask some about bayes. If I have recevied ham mail which written ***SPAM***, So in order to train bayes this mail with sa-learn to ham, I forwarded this mail using outlook or outlook express to [EMAIL PROTECTED] and this

I'm getting bounce-backs

2007-02-01 Thread maillist
Not every time I respond, but sometimes, when I reply to this maillist, I get a bounce-back that starts off like this: Hi. This is the qmail-send program at apache.org. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry

Re: botnet 7 perl error

2007-02-01 Thread Oliver Schulze L.
R Lists06 wrote: I have disabled botnet for now You can still use BotNet 0.6, it works fine HTH Oliver -- Oliver Schulze L. | Get my e-mail after a captcha in: Asuncion - Paraguay | http://tinymailto.com/oliver

Re: Why is the token count so high?

2007-02-01 Thread Theo Van Dinter
On Thu, Feb 01, 2007 at 10:09:57AM -0500, Proctor, Scott wrote: I am using MySQL as the bayes database and I am starting to run into problems when auto-expiry happens. I thought the ntokens was supposed to be under 15, why is mine 3 million? Any help would be greatly appreciated. If an

Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread z3r0
I'm a common user, just have a hosting account and spamassassin 3.1.7 enabled. The only directory in all my ftp folder that contains something related to SA is in root .spamassassin, where lives just 4 files, one of these is user_prefs. In same folder added a new rule I made (a .cf file) and

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread Nigel Frankcom
On Thu, 1 Feb 2007 11:59:30 -0800 (PST), z3r0 [EMAIL PROTECTED] wrote: I'm a common user, just have a hosting account and spamassassin 3.1.7 enabled. The only directory in all my ftp folder that contains something related to SA is in root .spamassassin, where lives just 4 files, one of these is

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread Theo Van Dinter
On Thu, Feb 01, 2007 at 11:59:30AM -0800, z3r0 wrote: I'm a common user, just have a hosting account and spamassassin 3.1.7 enabled. The only directory in all my ftp folder that contains something related to SA is in root .spamassassin, where lives just 4 files, one of these is user_prefs.

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread John D. Hardin
On Thu, 1 Feb 2007, z3r0 wrote: header PALABRAS_MALAS_SUBJECT Subject =~ /\belefantes|ilegales|africanos\b describe PALABRAS_MALAS_SUBJECT Contiene palabras malas en el asunto score PALABRAS_MALAS_SUBJECT 1.1 My questions: 1) Is the rule ok? You probably want it to end with /i 4)

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread Nigel Frankcom
On Thu, 1 Feb 2007 11:59:30 -0800 (PST), z3r0 [EMAIL PROTECTED] wrote: I'm a common user, just have a hosting account and spamassassin 3.1.7 enabled. The only directory in all my ftp folder that contains something related to SA is in root .spamassassin, where lives just 4 files, one of these is

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread Theo Van Dinter
On Thu, Feb 01, 2007 at 08:05:12PM +, Nigel Frankcom wrote: ..and don't forget to restart spamassassin (also make sure you run --lint) To note, one doesn't need to restart spamd when there's changes to the user_prefs file. His issue is that unless spamd's specifically configured to allow

To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread z3r0
Is it enough to create a cf file using notepad and save the file like yourfile.cf (with quotes) I notice that files that I make that way have the wordpad icon, but the original cf files I have in my ftp, has no icon. So perhaps that's not the way... -- View this message in context:

Re: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Nigel Frankcom
On Thu, 1 Feb 2007 12:10:14 -0800 (PST), z3r0 [EMAIL PROTECTED] wrote: Is it enough to create a cf file using notepad and save the file like yourfile.cf (with quotes) I notice that files that I make that way have the wordpad icon, but the original cf files I have in my ftp, has no icon. So

Re: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Dimitri Yioulos
On Thursday 01 February 2007 3:10 pm, z3r0 wrote: Is it enough to create a cf file using notepad and save the file like yourfile.cf (with quotes) I notice that files that I make that way have the wordpad icon, but the original cf files I have in my ftp, has no icon. So perhaps that's not

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread z3r0
z3r0 wrote: I'm a common user, just have a hosting account and spamassassin 3.1.7 enabled. The only directory in all my ftp folder that contains something related to SA is in root .spamassassin, where lives just 4 files, one of these is user_prefs. In same folder added a new rule I

RE: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Bret Miller
Is it enough to create a cf file using notepad and save the file like yourfile.cf (with quotes) Yes. I notice that files that I make that way have the wordpad icon, but the original cf files I have in my ftp, has no icon. I generally have to use Wordpad with cf files supplied by others

Re: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread z3r0
Nigel Frankcom wrote: On Thu, 1 Feb 2007 12:10:14 -0800 (PST), z3r0 [EMAIL PROTECTED] wrote: Is it enough to create a cf file using notepad and save the file like yourfile.cf (with quotes) I notice that files that I make that way have the wordpad icon, but the original cf files I have

Re: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Maciej Friedel
On 02/01/07 z3r0 wrote: Depending on the level of access you have to your Linux box I'd suggest writing them in joe or vi from the command line. linux can get very picky about line breaks in files created in windows. I can't lint anything, I just have a CPanel access and my wordpad. This

Re: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Nigel Frankcom
On Thu, 1 Feb 2007 12:52:02 -0800 (PST), z3r0 [EMAIL PROTECTED] wrote: Nigel Frankcom wrote: On Thu, 1 Feb 2007 12:10:14 -0800 (PST), z3r0 [EMAIL PROTECTED] wrote: Is it enough to create a cf file using notepad and save the file like yourfile.cf (with quotes) I notice that files that I

Re: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Fred T
Hello z3r0, Thursday, February 1, 2007, 3:10:14 PM, you wrote: Is it enough to create a cf file using notepad and save the file like yourfile.cf (with quotes) I notice that files that I make that way have the wordpad icon, but the original cf files I have in my ftp, has no icon. So

RE: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Bowie Bailey
Maciej Friedel wrote: On 02/01/07 z3r0 wrote: Depending on the level of access you have to your Linux box I'd suggest writing them in joe or vi from the command line. linux can get very picky about line breaks in files created in windows. I can't lint anything, I just have a CPanel

Which Rules?

2007-02-01 Thread Clay Davis
I am looking for some advise on which rules to apply: Where are the guidelines for (not) applying rules like antidrug.cf? I see the header stipulates that it is not intended for v3.0 and higher. If these stipulations exist, are they always found in the comments of each cf or can I find this

Re: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Steve Lindemann
Fred T wrote: Hello z3r0, Thursday, February 1, 2007, 3:10:14 PM, you wrote: Is it enough to create a cf file using notepad and save the file like yourfile.cf (with quotes) I notice that files that I make that way have the wordpad icon, but the original cf files I have in my ftp, has no

Re: Which Rules?

2007-02-01 Thread Fred T
Hello Clay, Thursday, February 1, 2007, 4:48:42 PM, you wrote: I am looking for some advise on which rules to apply: Where are the guidelines for (not) applying rules like antidrug.cf? I see the header stipulates that it is not intended for v3.0 and higher. If these stipulations

Re: huge cpu usage

2007-02-01 Thread deepak
Jan Doberstein wrote: deepak schrieb: Suddenly, i notice huge cpu usage by SA on 3 different servers. nothing was changed in custom rules or configuration recently. kindly suggest, what might have been casing this. awl enable ? No, awl is not enabled. also custom rules are less

RE: Which Rules?

2007-02-01 Thread Bowie Bailey
Clay Davis wrote: I am looking for some advise on which rules to apply: Where are the guidelines for (not) applying rules like antidrug.cf? I see the header stipulates that it is not intended for v3.0 and higher. If these stipulations exist, are they always found in the comments of each

Re: huge cpu usage

2007-02-01 Thread Nigel Frankcom
On Fri, 02 Feb 2007 03:19:53 +0530, deepak [EMAIL PROTECTED] wrote: Jan Doberstein wrote: deepak schrieb: Suddenly, i notice huge cpu usage by SA on 3 different servers. nothing was changed in custom rules or configuration recently. kindly suggest, what might have been casing this.

SpamAssassin FuzzyOcr question

2007-02-01 Thread [EMAIL PROTECTED]
HI all, I have been running sendmail dual mta+amavis+spamassassin+milter-spiff, also on every stmp there is a access-list that permit only working address to be accepted. This setup as been working fine on 5 servers for a while now each servers blocking a average of 300K connections per

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread z3r0
Asked my hosting about the issue. The response was: We do not allow clients to install custom SpamAssassin rules. That's terrible. Why can't users decide what rules to use. I want a life spam free... Nigel Frankcom wrote: On Thu, 1 Feb 2007 11:59:30 -0800 (PST), z3r0 [EMAIL PROTECTED]

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread John D. Hardin
On Thu, 1 Feb 2007, z3r0 wrote: Asked my hosting about the issue. The response was: We do not allow clients to install custom SpamAssassin rules. That's terrible. Why can't users decide what rules to use. I want a life spam free... A user could easily define a set of rules that would

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread Daryl C. W. O'Shea
z3r0 wrote: Asked my hosting about the issue. The response was: We do not allow clients to install custom SpamAssassin rules. That's terrible. Why can't users decide what rules to use. I want a life spam free... Myself, I'd be afraid of a provider who did allow user rules. It's trivial to

Simple hosting user: can I install my own SA?

2007-02-01 Thread z3r0
As commented in other post my hosting doesn't allow custom rules. I don't know if they don't like happy people, or what. Is there some kind of installation I can perform with my limitations in order to use custom rules? Is that a common policy of hosting providers? All I have access to is to

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread z3r0
rules that would kill system performance I suppoused rules were nice and good, no time-bombs. So any chances for me or I must forget SA? Daryl C. W. O wrote: z3r0 wrote: Asked my hosting about the issue. The response was: We do not allow clients to install custom SpamAssassin rules.

Spam with image and tons of nonsense words, works fantastic for spammers

2007-02-01 Thread z3r0
I'm seeing all my spam and those with images and lot of nonsense words only scores 1.5. Great for spammers awfull for all the rest of the world. Since I can't use custom rules because I'm a normal hosting user. I have to receive those uglly spams daily. Any other way? I'm really sick of spam.

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread Daryl C. W. O'Shea
z3r0 wrote: rules that would kill system performance I suppoused rules were nice and good, no time-bombs. I'm not sure what you're saying there. So any chances for me or I must forget SA? That, of course, is up to you. If you've got a shell account that you can run whatever you want on,

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread Nigel Frankcom
On Thu, 01 Feb 2007 18:34:09 -0500, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: z3r0 wrote: rules that would kill system performance I suppoused rules were nice and good, no time-bombs. I'm not sure what you're saying there. So any chances for me or I must forget SA? That, of course, is up

Re: Spam with image and tons of nonsense words, works fantastic for spammers

2007-02-01 Thread Theo Van Dinter
On Thu, Feb 01, 2007 at 03:29:13PM -0800, z3r0 wrote: Since I can't use custom rules because I'm a normal hosting user. I have to receive those uglly spams daily. Any other way? I'm really sick of spam. It sounds like your main issue is that you're unhappy with the service from your current

Re: Spam with image and tons of nonsense words, works fantastic for spammers

2007-02-01 Thread z3r0
My hosting is cool, but I'm spammed. Never thought custom rules where something beyond common users, but seems like it is. Perhaps living with pharmaceutical messages in inbox is not so bad when you get used to. Theo Van Dinter-2 wrote: On Thu, Feb 01, 2007 at 03:29:13PM -0800, z3r0 wrote:

Re: Spam with image and tons of nonsense words, works fantastic for spammers

2007-02-01 Thread Nigel Frankcom
On Thu, 1 Feb 2007 15:29:13 -0800 (PST), z3r0 [EMAIL PROTECTED] wrote: I'm seeing all my spam and those with images and lot of nonsense words only scores 1.5. Great for spammers awfull for all the rest of the world. Since I can't use custom rules because I'm a normal hosting user. I have to

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread John D. Hardin
On Thu, 1 Feb 2007, z3r0 wrote: rules that would kill system performance I suppoused rules were nice and good, no time-bombs. A hosting provider can't make the assumption that all their customers will play nice (or, for that matter, are competent). So any chances for me or I must forget SA?

Re: Spam with image and tons of nonsense words, works fantastic for spammers

2007-02-01 Thread John D. Hardin
On Thu, 1 Feb 2007, z3r0 wrote: I'm seeing all my spam and those with images and lot of nonsense words only scores 1.5. You may want to see whether your hosting provider is using any of the SARE rules, the image info plugin or the fuzzyOCR plugin. They may be willing to implement those if

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread z3r0
From my hosting admin: We do not allow custom rules for customers because those custom rules would apply server-wide and not to that particular user. Your custom rulesets could actually end up blocking legit mail for other customers and this in turn would make some people very mad. You can add

Re: Spam with image and tons of nonsense words, works fantastic for spammers

2007-02-01 Thread Rich Shepard
On Thu, 1 Feb 2007, z3r0 wrote: My hosting is cool, but I'm spammed. Never thought custom rules where something beyond common users, but seems like it is. Perhaps living with pharmaceutical messages in inbox is not so bad when you get used to. Er, ... pardon me for jumping into this thread.

Re: Spam with image and tons of nonsense words, works fantastic for spammers

2007-02-01 Thread Derek Harding
On Thu, 2007-02-01 at 16:02 -0800, Rich Shepard wrote: On Thu, 1 Feb 2007, z3r0 wrote: My hosting is cool, but I'm spammed. Never thought custom rules where something beyond common users, but seems like it is. Perhaps living with pharmaceutical messages in inbox is not so bad when you get

Re: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-01 Thread John D. Hardin
On Thu, 1 Feb 2007, z3r0 wrote: From my hosting admin: You can add custom test rules to your user_prefs file in your home directory if you wish. Good... In case I want to add 3 rules just paste all that text in there and that's enough? Just to confirm that works, try putting this into

Did that fix bar me as well?

2007-02-01 Thread Nigel Frankcom
Hi Theo, Did the fix we discussed drop me off the list as well? Kind regards Nigel

simple add address pattern to whitelist/blacklist script

2007-02-01 Thread Tim Litwiller
I'm not much of a coder but I needed something for a client so they didn't have to call me to add addresses to the whitelist or blacklist, I'm sure other here can improve on this but thought maybe someone else needs this also. ---code--- #!/bin/bash if [ ! $# == 2 ]; then echo Usage:%0

Re: Botnet FP

2007-02-01 Thread David B Funk
On Thu, 1 Feb 2007, Bob McClure Jr wrote: host 66.251.54.6 6.54.251.66.in-addr.arpa domain name pointer outbox2.onceanddone.com. host outbox2.onceanddone.com outbox2.onceanddone.com has address 66.251.51.6 host 66.251.51.6 Host 6.51.251.66.in-addr.arpa not found: 3(NXDOMAIN)

Re: I'm getting bounce-backs - billmerriam.com

2007-02-01 Thread Matt Kettler
Yep, I get them too. If you trace back through the headers quoted in one it looks like the admin of billmerriam.com screwed up and the server is looping mail back to the list. (ie: it's delivering mail based on the To: header instead of the envelope.) maillist wrote: Not every time I respond,

Re: Simple hosting user: can I install my own SA?

2007-02-01 Thread hamann . w
As commented in other post my hosting doesn't allow custom rules. I don't know if they don't like happy people, or what. Is there some kind of installation I can perform with my limitations in order to use custom rules? Is that a common policy of hosting providers? All I have

useful SA on Suse 9.0

2007-02-01 Thread Sebastian Ries
Hi there I have an old machine running Suse 9.0 with SA version 2.55 . For certain reasons I am not able to update the whole system but as there is too much undetected Spam I need to update SA. Does anyone have suggestion how to install an up-to date SpamAssassin on this system? Any hints are

recurrent error with ripole and amavisd-new-2.4.5

2007-02-01 Thread Claude Frantz
Here is a typical error report in the log file: Feb 1 11:31:47 yellowsrv amavis[11701]: (11701-03) (!)collect_results from [] (/usr/bin/ripole): exit 30 ripOLE: decoding of /var/spool/amavisd/tmp/amavis-20070201T113001-11701/parts/p002 resulted in error 30\n I'm using Name: ripole