Re: Understanding SpamAssassin

2009-09-22 Thread LuKreme
On 21-Sep-2009, at 13:05, poifgh wrote: Mails which have very high or very low score are fed to bayesian learning. Since we are confident about them being HAM or SPAM what do we want to learn from them - The regex filters have identified that the mail is a spam (say), what additional does

Re: Re-running SA on an mbox

2009-09-22 Thread Mark Martinec
On Tuesday September 22 2009 06:32:12 Benny Pedersen wrote: On man 21 sep 2009 20:33:57 CEST, MySQL Student wrote but this will invalidtate dkim headers if this headers is signed, are spamassassin aware of this problem ? (in general) Are you saying there is a bug? partly yes, its not a

Re: About reporting

2009-09-22 Thread Matus UHLAR - fantomas
Hello, please configure your mailer to wrap lines below 80 characters per line. 72 to 75 is usually OK. Thank you. On 19.09.09 22:45, João Eiras wrote: I still haven't got the answer to my last question, so here it goes again: Can I report a full mbs file with many mails in one go ? Or

partial (lazy) scoring?

2009-09-22 Thread ArtemGr
I would like to configure Spamassassin to only do certain tests when the required_score is not yet reached. For example, do the usual rule-based and bayesian tests first, and if the score is lower than the required_score, then do the DCC and RAZOR2 tests. Is it possible?

Re: Understanding SpamAssassin

2009-09-22 Thread Benny Pedersen
On tir 22 sep 2009 09:43:23 CEST, LuKreme wrote bayes learning from ham helps score messages as ham that might otherwise be tagged as ham. ups :) -- xpoint

Re: partial (lazy) scoring? (shortcircuit features)

2009-09-22 Thread Matt Kettler
ArtemGr wrote: I would like to configure Spamassassin to only do certain tests when the required_score is not yet reached. For example, do the usual rule-based and bayesian tests first, and if the score is lower than the required_score, then do the DCC and RAZOR2 tests. Is it possible?

Re: partial (lazy) scoring? (shortcircuit features)

2009-09-22 Thread ArtemGr
Matt Kettler mkettler_sa at verizon.net writes: In theory, a feature could be added to let you do something like this (SA doesn't have this feature, but I'm proposing it could be added): That would be a nice optimization: most of the spam we receive have a 10 score. It seems a real waste of

Re: Re-running SA on an mbox

2009-09-22 Thread Martin Gregorie
On Mon, 2009-09-21 at 23:18 -0400, MySQL Student wrote: How can I tell when another process is using the database and when it is free for my script to use? Is there a faster way to run spamassassin just to strip the SA headers? Try using a local SA setup for stripping the headers. By local,

Re: partial (lazy) scoring? - run a second time?

2009-09-22 Thread ArtemGr
ArtemGr artemciy at gmail.com writes: I would like to configure Spamassassin to only do certain tests when the required_score is not yet reached. For example, do the usual rule-based and bayesian tests first, and if the score is lower than the required_score, then do the DCC and RAZOR2 tests.

RBL error with SA

2009-09-22 Thread Luis campo
hi, I set to work with RBL Spamassasin by skip_rbl_checks option 0. But in my statistics were not reporting any RBL test Run spamassassin-D-lint And these messages came out [5563] dbg: dns: no ipv6 [5563] dbg: dns: is Net::DNS::Resolver available? yes [5563] dbg: dns: Net::DNS

Re: RBL error with SA

2009-09-22 Thread Bowie Bailey
Luis campo wrote: hi, I set to work with RBL Spamassasin by skip_rbl_checks option 0. But in my statistics were not reporting any RBL test Run spamassassin-D-lint http://imagine-msn.com/messenger/launch80/default.aspx?locale=en-ussource=wlmailtagline One of the side-effects of

Re: partial (lazy) scoring? (shortcircuit features)

2009-09-22 Thread Matus UHLAR - fantomas
Matt Kettler mkettler_sa at verizon.net writes: In theory, a feature could be added to let you do something like this (SA doesn't have this feature, but I'm proposing it could be added): On 22.09.09 11:46, ArtemGr wrote: That would be a nice optimization: most of the spam we receive have a

Re: partial (lazy) scoring? - run a second time?

2009-09-22 Thread Matus UHLAR - fantomas
ArtemGr artemciy at gmail.com writes: I would like to configure Spamassassin to only do certain tests when the required_score is not yet reached. For example, do the usual rule-based and bayesian tests first, and if the score is lower than the required_score, then do the DCC and RAZOR2

Re: Eliminating russian spam

2009-09-22 Thread Makoev Alan
Thank you, John! Both how-to (http://sa-russian.narod.ru/no_russian.html) and the ruleset (http://sa-russian.narod.ru/files/20090916/99_no_russian_mail.cf) are updated.

Re: RBL error with SA

2009-09-22 Thread Benny Pedersen
On tir 22 sep 2009 17:24:30 CEST, Luis campo wrote [4315] dbg: rules: local tests only, ignoring RBL eval --lint will disable rbl testing so: spamassassin 21 -D | less any errors ? -- xpoint

RE: Problems with high spam

2009-09-22 Thread Jose Luis Marin Perez
Dear friends, I appreciate your support. Yesterday at approximately 15:00 make some changes: - Add to SA skip_rbl_checks RBL 0 - Increase required_score from 3.5 to 5.0 Spam Statistics from yesterday were: Total messages:Ham: Spam: % Spam:

RE: Problems with high spam

2009-09-22 Thread John Hardin
On Tue, 22 Sep 2009, Jose Luis Marin Perez wrote: Additionally I noticed that there are emails that should detect as SPAM (for example those of 100 points - Advertising) but not filtered. What more could add or remove the configuration of the SA? First we need to see why they aren't being

RE: Problems with high spam

2009-09-22 Thread Jose Luis Marin Perez
Dear Sirs. Thank you for your answers I'll gather some examples of emails that my users are considered as SPAM (Latest I could configure SA to display the report in the headers) Regarding the questions: 1. Yes I have set up qmail-smtpd to use rblsmtpd and definitively blocks a lot of

RE: Problems with high spam

2009-09-22 Thread John Hardin
On Tue, 22 Sep 2009, Jose Luis Marin Perez wrote: I'll gather some examples of emails that my users are considered as SPAM (Latest I could configure SA to display the report in the headers) Regarding the questions: 1. Yes I have set up qmail-smtpd to use rblsmtpd and definitively blocks a

Re: Re-running SA on an mbox

2009-09-22 Thread MySQL Student
Hi, Try using a local SA setup for stripping the headers. By local, I mean don't use your main production SA - run a separate copy with its own (cut down) configuration and all data base accesses and UBL calls etc turned off. Much better idea, thanks. Thanks for the script, too. Best, Alex

RE: Problems with high spam

2009-09-22 Thread Jose Luis Marin Perez
Dear Sirs. Thank you for your answers Qmail-Smtpd have the following RBL configured: bl.spamcop.net cbl.abuseat.org combined.njabl.org These are the SARE rules which adds to SA: echo 70_sare_adult.cf.sare.sa-update.dostech.net /etc/mail/spamassassin/sare-sa-update-channels.txt

Re: About reporting

2009-09-22 Thread João Eiras
spamassassin -r and spamassassin -k do other things - report to network services like razor/pyzor/dcc and SpamCop. Hum, then how do the default spam filters that come with a clean spam assassin installation know what's spam and what's not ? Is there service we can report spam to ?

Re: Problems with high spam

2009-09-22 Thread Bowie Bailey
Jose Luis Marin Perez wrote: Dear Sirs. Thank you for your answers Qmail-Smtpd have the following RBL configured: * bl.spamcop.net cbl.abuseat.org combined.njabl.org * You might want to try zen.spamhaus.org. That is the only one I trust enough to block mail on my MTA. These are the

RE: Problems with high spam

2009-09-22 Thread John Hardin
On Tue, 22 Sep 2009, Jose Luis Marin Perez wrote: echo 70_sare_highrisk.cf.sare.sa-update.dostech.net /etc/mail/spamassassin/sare-sa-update-channels.txt Did you read the ruleset descriptions before choosing which ones to use? Inquire about rules SOUGHT

Re: Problems with high spam

2009-09-22 Thread Aaron Wolfe
On Tue, Sep 22, 2009 at 4:02 PM, Jose Luis Marin Perez jolumape...@hotmail.com wrote: Dear Sirs. Thank you for your answers Qmail-Smtpd have the following RBL configured: bl.spamcop.net cbl.abuseat.org combined.njabl.org Consider zen. It is excellent. Spamcop and NJABL have caused too

Re: Re-running SA on an mbox

2009-09-22 Thread RW
On Tue, 22 Sep 2009 13:03:16 +0100 Martin Gregorie mar...@gregorie.org wrote: gawk ' BEGIN { act = copy } /^X-Spam/ { act = skip } /^[A-WYZ]/ { act = copy } {

Re: Re-running SA on an mbox

2009-09-22 Thread Jeff Mincy
From: MySQL Student mysqlstud...@gmail.com Date: Tue, 22 Sep 2009 15:38:47 -0400 Try using a local SA setup for stripping the headers. By local, I mean don't use your main production SA - run a separate copy with its own (cut down) configuration and all data base accesses and

Re: Re-running SA on an mbox

2009-09-22 Thread John Hardin
On Tue, 22 Sep 2009, Jeff Mincy wrote: From: MySQL Student mysqlstud...@gmail.com Date: Tue, 22 Sep 2009 15:38:47 -0400 Try using a local SA setup for stripping the headers. By local, I mean don't use your main production SA - run a separate copy with its own (cut down)

Fwd: Episode 17 of the Who and Why Show: SpamAssassin

2009-09-22 Thread Justin Mason
Hi all -- FYI, I had a chat with Steve Santorelli a while back for Team Cymru's 'Who and Why Show' podcast -- an occasional series designed to directly assist network administrators, looking at various Open Source Tools that can be used to check and secure systems. It's now up: Today we talk

Re: Problems with high spam

2009-09-22 Thread LuKreme
On 22-Sep-2009, at 14:42, Aaron Wolfe wrote: Also consider the invalument block lists, see http://dnsbl.invaluement.com/ A very, very good list that is usable for blocking. Not free, but very affordable. I don't like how involvement does their pricing structure, actually. Firstly, I don't

Re: Problems with high spam

2009-09-22 Thread Aaron Wolfe
On Tue, Sep 22, 2009 at 10:21 PM, LuKreme krem...@kreme.com wrote: On 22-Sep-2009, at 14:42, Aaron Wolfe wrote: Also consider the invalument block lists, see http://dnsbl.invaluement.com/ A very, very good list that is usable for blocking. Not free, but very affordable. I don't like how

Do I need to do anything to maintain MySQL?

2009-09-22 Thread Steven W. Orr
Every so often, I see some large MySQL accesses taking place from SA. Is there any regular maintenance needed or should I just leave it alone? -- Time flies like the wind. Fruit flies like a banana. Stranger things have .0. happened but none stranger than this. Does your driver's license say