Re: Identifying headers for users@spamassassin.apache.org

2008-10-13 Thread Michelle Konzack
Hallo Karsten, Am 2008-10-08 16:23:15, schrieb Karsten Bräckelmann: Suffering from a backscatter wave, and haven't even got sufficient caffeine. Your email was quarantined due to an unauthorized Cyrillic Language Character Set. Yeah, right... You have gotten tonns of MAILER-DAEMON messages in

Re: URIBL_BLACK

2008-10-13 Thread Yet Another Ninja
On 10/11/2008 12:43 AM, Theo Van Dinter wrote: On Sat, Oct 11, 2008 at 12:15:00AM +0200, Yet Another Ninja wrote: 74.714 78.1593 1.11300.986 0.780.00 URIBL_BLACK Would you pls post those FP URIs so ppl can judge what your rating is based upon. (imperfect) command posted for my

Re: spam score not counted correctly

2008-10-13 Thread Benedict Verheyen
Benedict Verheyen wrote: snip Hi, thanks Mark and Guenther. I patched the score part as indicated in Mark's mail and when i run spamassassin in debug mode, i do see a message popping up with results to a NaN score: [6443] warn: rules: score 'nan' for rule 'AWL' in 'AWL: '

Re: spam score not counted correctly

2008-10-13 Thread Benedict Verheyen
Benedict Verheyen wrote: snip I got a message that again scored a nan for MSOE_MID_WRONG_CASE The mail is available here: http://paste-it.net/public/r3df8b2/ Weird thing is that the lines i added to PerMsgStatus.pm weren't showing up. Regards, Benedict My bad, i reinstalled

Re: URIBL_BLACK

2008-10-13 Thread Yet Another Ninja
On 10/13/2008 11:27 AM, Jeff Chan wrote: On Friday, October 10, 2008, 11:29:33 PM, Yet Ninja wrote: Something tells me your stats are either obsolete, biased, borked or your ham corpus would be quite a few other ppl's mainsleaze spam corpus. Imo, that 1.1% FP rating seems to have little

Re: German for the backscatter-plagued (was: an OT thread)

2008-10-13 Thread Michelle Konzack
Hi *; Am 2008-10-08 18:53:00, schrieb Karsten Bräckelmann: On Wed, 2008-10-08 at 17:39 +0200, mouss wrote: I am learning foreign languages. it would be nice if backscatterers change the bounce text so that I learn more :-{ DIES IST NUR EINE WARNUNG. I send such crap directly back if

Re: conditionally zero score of a rule

2008-10-13 Thread Henrik K
On Mon, Oct 13, 2008 at 03:29:57PM +0200, Matus UHLAR - fantomas wrote: Hello, so the spammers got it. my required_score is 3.5 (the same as for BAYES_99) Pretty low. But I guess it's ok if you only tag. and SPF_PASS is -0.001. So, even clear spam (I haven't seen FP for BAYES_99 for a LONG

util_rb_2tld proboards.com

2008-10-13 Thread Yet Another Ninja
util_rb_2tld proboards.com (does magic)

Re: URIBL_BLACK

2008-10-13 Thread Yet Another Ninja
On 10/10/2008 11:19 PM, Theo Van Dinter wrote: This has come up on the list before, but... Looking at my most recent network run: OVERALLSPAM% HAM% S/ORANK SCORE NAME 0 460740215640.955 0.000.00 (all messages) 0.0 95.5290 4.47100.955 0.00

ClamAVPlugin - Re-Writing Mail Subject with [***Virus***

2008-10-13 Thread kjf46
Hi, I have ClamAVPlugin/Spammassassin working just fine but need to alert mail admin that a mail has a potential virus (as I don't dump suspected mail .. all reviewed by a mail admin), the header has the 'X-Spam-Virus: Yes' field but I want to display [***Virus***] in the subject of the mail

is Pyzor worth it?

2008-10-13 Thread William Taylor
Is Pyzor worth running these days? Is it still effective? Can anyone using it comment on it? Thanks, William

Re: spam score not counted correctly

2008-10-13 Thread Mark Martinec
Benedict, Thing is, what is causing the nan? My guess is that a NaN somehow got into your AWL database. I have reopened bug 3364, and attached a richer patch: Deal with NaN in AutoWhitelist and PerMsgStatus which includes my previous patch and also instruments AutoWhitelist module to check

Re: spam score not counted correctly

2008-10-13 Thread Benedict Verheyen
Guenther wrote: Do you use customized headers? (Sorry, don't have the OP, but IIRC I spotted some.) What are the results of the snippets in comment 4, and what about comment 11? A question is for Benedict I suppose. Puzzling, how he gets NaN in the first place. Benedict, did you

Re: is Pyzor worth it?

2008-10-13 Thread Bill Landry
Here are some stats for this past weekend comparing Pyzor to other hash tests: 36 CTYME_IXHASH 38 HOSTEUROPE_IXHASH 92 GENERIC_IXHASH 129 NIXSPAM_IXHASH 218 RAZOR2_CF_RANGE_E4_51_100 256 PYZOR_CHECK 388 RAZOR2_CF_RANGE_E8_51_100 411 RAZOR2_CF_RANGE_51_100

Re: is Pyzor worth it?

2008-10-13 Thread Bill Landry
Forgot to include Karmasphere: 160 KARMA_CONTENT_NEGATIVE 210 KARMA_CONNECT_NEGATIVE Bill Bill Landry wrote: Here are some stats for this past weekend comparing Pyzor to other hash tests: 36 CTYME_IXHASH 38 HOSTEUROPE_IXHASH 92 GENERIC_IXHASH 129

conditionally zero score of a rule

2008-10-13 Thread Matus UHLAR - fantomas
Hello, so the spammers got it. my required_score is 3.5 (the same as for BAYES_99) and SPF_PASS is -0.001. So, even clear spam (I haven't seen FP for BAYES_99 for a LONG LONG time) is passed because of SPF (which teoretically should not happen. Now I have a question: Should I zero score of

Re: is Pyzor worth it?

2008-10-13 Thread William Taylor
On Mon, Oct 13, 2008 at 08:44:08AM -0700, Bill Landry wrote: Here are some stats for this past weekend comparing Pyzor to other hash tests: 36 CTYME_IXHASH 38 HOSTEUROPE_IXHASH 92 GENERIC_IXHASH 129 NIXSPAM_IXHASH 218 RAZOR2_CF_RANGE_E4_51_100 256 PYZOR_CHECK

Re: URIBL_BLACK

2008-10-13 Thread Jeff Chan
On Friday, October 10, 2008, 11:29:33 PM, Yet Ninja wrote: Something tells me your stats are either obsolete, biased, borked or your ham corpus would be quite a few other ppl's mainsleaze spam corpus. Imo, that 1.1% FP rating seems to have little value in a global context. thx for the

Re: is Pyzor worth it?

2008-10-13 Thread Jake Maul
On Mon, Oct 13, 2008 at 8:44 AM, Bill Landry [EMAIL PROTECTED] wrote: Here are some stats for this past weekend comparing Pyzor to other hash tests: 36 CTYME_IXHASH 38 HOSTEUROPE_IXHASH 92 GENERIC_IXHASH 129 NIXSPAM_IXHASH 218 RAZOR2_CF_RANGE_E4_51_100 256 PYZOR_CHECK

Re: German for the backscatter-plagued

2008-10-13 Thread mouss
Michelle Konzack a écrit : Hi *; Am 2008-10-08 18:53:00, schrieb Karsten Bräckelmann: On Wed, 2008-10-08 at 17:39 +0200, mouss wrote: I am learning foreign languages. it would be nice if backscatterers change the bounce text so that I learn more :-{ DIES IST NUR EINE WARNUNG.

Re: conditionally zero score of a rule

2008-10-13 Thread Benny Pedersen
On Mon, October 13, 2008 16:39, Henrik K wrote: meta SPF_PASS (SPF_PASS !BAYES_99) Obviously you can't redefine SPF_PASS on the fly. olso that SPF_PASS was newer meant to let any msg throught it was just a pointer that SPF is not fail recipient still need to add sender into local.cf /

Re: is Pyzor worth it?

2008-10-13 Thread Benny Pedersen
On Mon, October 13, 2008 17:25, William Taylor wrote: Is Pyzor worth running these days? Is it still effective? Can anyone using it comment on it? its still working here, my own problem is to have it autolearn in good way, but it newer hits wroung on ham / spam here, running my own pyzord :)

Re: is Pyzor worth it?

2008-10-13 Thread Benny Pedersen
On Mon, October 13, 2008 17:44, Bill Landry wrote: The only downside to Pyzor is that it requires python rather than perl. Otherwise, it certainly helps here. it gets the job done :) http://bugs.gentoo.org/show_bug.cgi?id=216374 any helpers welcome -- Benny Pedersen Need more webspace ?

Re: spam score not counted correctly

2008-10-13 Thread Karsten Bräckelmann
On Mon, 2008-10-13 at 17:39 +0200, Mark Martinec wrote: Thing is, what is causing the nan? My guess is that a NaN somehow got into your AWL database. Things are much more complicated, or rather weird, than that. According to Benedict's reports and pasted snippets, he got an NaN score for

Re: spam score not counted correctly

2008-10-13 Thread Mark Martinec
Guenther, Benedict, My guess is that a NaN somehow got into your AWL database. Things are much more complicated, or rather weird, than that. According to Benedict's reports and pasted snippets, he got an NaN score for at least 3 rules: FROM_ILLEGAL_CHARS, AWL, MSOE_MID_WRONG_CASE You are