Increase in Image Spam

2014-02-11 Thread Andy Jezierski
I've been seeing a pretty big increase in image spam over the last month or so. I remember using FuzzyOCR years ago when image spam was a much bigger problem. Since FuzzyOCR hasn't been maintained in several years, is there an alternative that would work? Or is there another way to try and

Re: Help with a regex to catch spam with gibberish html tags

2014-01-30 Thread Andy Jezierski
Amir Caspi ceph...@3phase.com wrote on 01/29/2014 11:08:18 AM: From: Amir Caspi ceph...@3phase.com To: Andy Jezierski ajezier...@stepan.com, Cc: users@spamassassin.apache.org users@spamassassin.apache.org Date: 01/29/2014 11:08 AM Subject: Re: Help with a regex to catch spam with gibberish

Re: Help with a regex to catch spam with gibberish html tags

2014-01-30 Thread Andy Jezierski
Amir Caspi ceph...@3phase.com wrote on 01/30/2014 11:39:51 AM: From: Amir Caspi ceph...@3phase.com To: Kevin A. McGrail kmcgr...@pccc.com, Cc: Andy Jezierski ajezier...@stepan.com, users@spamassassin.apache.org users@spamassassin.apache.org Date: 01/30/2014 11:40 AM Subject: Re: Help

Help with a regex to catch spam with gibberish html tags

2014-01-29 Thread Andy Jezierski
I've been noticing a lot of spam getting through with the same traits, a bunch of random words within brackets. They all seem to come after the /body or the /html tag. Anyone much more knowledgeable than me care to assist with a rule to detect them? Thanks Andy Example: /html /body style

Re: Help with a regex to catch spam with gibberish html tags

2014-01-29 Thread Andy Jezierski
:53 AM, Andy Jezierski wrote: I've been noticing a lot of spam getting through with the same traits, a bunch of random words within brackets. They all seem to come after the /body or the /html tag. Anyone much more knowledgeable than me care to assist with a rule to detect them

Re: sa-learn error

2014-01-21 Thread Andy Jezierski
Mark Martinec mark.martinec...@ijs.si wrote on 01/20/2014 09:20:51 PM: From: Mark Martinec mark.martinec...@ijs.si To: users@spamassassin.apache.org, Date: 01/20/2014 09:21 PM Subject: Re: sa-learn error Andy Jezierski wrote: Tried doing an sa-learn on some spam messages that didn't get

Re: sa-learn error

2014-01-21 Thread Andy Jezierski
That contains the mailbox file with about 30 spam messages I'm trying to learn. Andy From: Mark Martinec mark.martinec...@ijs.si To: users@spamassassin.apache.org, Date: 01/21/2014 10:02 AM Subject:Re: sa-learn error Inkove it the same as I've done for years: sa-learn

Re: sa-learn error

2014-01-21 Thread Andy Jezierski
Must have had a brain fart, I could have sworn I've done it that way for years. Thanks Andy From: Mark Martinec mark.martinec...@ijs.si To: users@spamassassin.apache.org, Date: 01/21/2014 10:17 AM Subject:Re: sa-learn error $ sa-learn --help -f file Read list of

sa-learn error

2014-01-20 Thread Andy Jezierski
Tried doing an sa-learn on some spam messages that didn't get flagged as such and am receiving the following error: archive-iterator: no access to C3not salt.C3salt.higher extinction at the coast 9.62 1026 versus 6.53 1026 and, similar to the RJMCMC model for this character, a higher

SA 3.4.0rc5 Redis DB Help

2014-01-16 Thread Andy Jezierski
Are there any instructions in setting up the Bayes DB using a Redis server? I've installed the server, took the sample config options and added them to local.cf bayes_store_module Mail::SpamAssassin::BayesStore::Redis bayes_store_module_additional Mail::SpamAssassin::Util::TinyRedis

Re: SA 3.4.0rc5 Redis DB Help

2014-01-16 Thread Andy Jezierski
version 0.000 0 16481050 0 non-token data: nspam 0.000 05690858 0 non-token data: nham bayes_token_ttl 864000 bayes_seen_ttl 2d On 01/16/2014 05:58 PM, Andy Jezierski wrote: Are there any instructions in setting up the Bayes DB using

Re: HK_LOTTO hitting ham from the UK national lottery

2012-10-31 Thread Andy Jezierski
-- Best regards, Niamh mailto:ni...@fullbore.co.uk [attachment attyxplb.dat deleted by Andy Jezierski/Stepan/US] Your message scored a 7.1 on my system. All the same rules hit except I don't use AWL which subtracted 2.1 on your system. I also use the KAM ruleset which

syswrite() to parent failed:

2012-05-24 Thread Andy Jezierski
Just installed a new instance of spamassassin to offload some of the spam processing from our main server. Occaisionally the following message will appear and I'll have to restart spamd in order to get things going again. syswrite() to parent failed: Broken pipe at

Bayes R/W Lock problem

2012-04-12 Thread Andy Jezierski
Started happening a month or so ago. Every now and then out of the blue I'll get the following error: spamd[61494]: bayes: cannot open bayes databases /usr/local/spamd/bayes_* R/W: lock failed: Interrupted system call This causes scans to take 40-60 seconds to complete as they seem to wait

Re: sa users list down due to irene?

2011-08-29 Thread Andy Jezierski
Michael Scheidell michael.scheid...@secnap.com wrote on 08/29/2011 11:26:28 AM: From: Michael Scheidell michael.scheid...@secnap.com To: SpamAssassin Users List users@spamassassin.apache.org Date: 08/29/2011 11:27 AM Subject: sa users list down due to irene? is sa-users list down?

Re: Test port for SpamAssassin for Freebsd

2011-06-24 Thread Andy Jezierski
Michael Scheidell michael.scheid...@secnap.com wrote on 06/24/2011 07:21:09 AM: From: Michael Scheidell michael.scheid...@secnap.com To: SpamAssassin Users List users@spamassassin.apache.org, amavis-us...@amavis.org Date: 06/24/2011 07:21 AM Subject: Test port for SpamAssassin for Freebsd

Additional sa-update channels

2010-12-15 Thread Andy Jezierski
Sorry all, Been away from the list for quite some time. Just updated SA from 3.2.5 to 3.3.1. Have been trying to find a list of sa-update channels that are still relevant but not with much success. Does anyone know is such a list exists, or if you know of which additional channels can still

Re: Sneaky [EMAIL PROTECTED] slipped through

2007-08-17 Thread Andy Jezierski
Rick Zeman [EMAIL PROTECTED] wrote on 08/17/2007 12:09:34 PM: X-Spam-Status: No, hits=3.512 tagged_above=-25 required=4.75 tests=BAYES_50=0.001, FRT_OPPORTUN1=1, JM_TORA_XM=2.411, RDNS_NONE=0.1 X-Spam-Level: *** H.E*R*E WE GO AGAI.N! T H'E B_I+G O+N'E BEFO*RE T*H*E SE+PTEMBER.RALL.Y!

Re: what happened after 3.1.8?

2007-08-14 Thread Andy Jezierski
Matt Kettler [EMAIL PROTECTED] wrote on 08/13/2007 08:09:19 PM: Jean-Paul Natola wrote: Since its not in the ports tree yet- ( that's how I usually upgrade) FYI, 3.2.3 is now in the FreeBSD ports tree. Andy

OT: Which RBL to use for Dynamic Addresses

2007-07-16 Thread Andy Jezierski
Now that the SORBS DUL has been emptied out, what are you using as a replacement, if anything? That list used to block quite a number of spam emails from entering my system while it was active. Thanks Andy

Re: Greylisting

2006-11-21 Thread Andy Jezierski
Vahric MUHTARYAN [EMAIL PROTECTED] wrote on 11/20/2006 04:33:23 PM: Hello Everybody, I'm using SA for a long time without any problem, nowadays spammers are using too much graphical objects and they are tring to change it day by day. I'm tring to use fuzzyocr but it's taking too

Re: score=0.0 tests=none -- how can that be???

2006-10-26 Thread Andy Jezierski
news [EMAIL PROTECTED] wrote on 10/25/2006 08:36:11 AM: Thanks Chris I'll do that.. can someone please remind me where I set the max_child limit?? Like I said I could not find it last night I want to see what it is set to now and adjust accordingly. It's the -m parameter you specify

Re: [lessons come] Bug#63460: defining gender context.

2006-10-19 Thread Andy Jezierski
Jeroen Tebbens [EMAIL PROTECTED] wrote on 10/18/2006 04:27:54 PM: Theo Van Dinter wrote: On Wed, Oct 18, 2006 at 11:18:18PM +0200, Turbo Fredriksson wrote: These kind of spam have been getting through for quite some time now, but now they're really starting to bug me!

Re: breaking out: thinking abt the 'sa-update *VS* rdj' thread .. .

2006-08-16 Thread Andy Jezierski
from the misleading or otherwise incorrect information being presented which I'll try to respond to below. Andy Jezierski: I think SARE can put out a new rule for a specific spam problem a lot faster than the SA project, so I'll have to disagree with you here. Wow, there's so much wrapped

Re: breaking out: thinking abt the 'sa-update *VS* rdj' thread ...

2006-08-11 Thread Andy Jezierski
Richard [EMAIL PROTECTED] wrote on 08/11/2006 11:11:00 AM: -BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 hi, ... adjusting tin-foil hat and asbestos shorts ... Breaking out flamethrower. :-) a recent thread comment from SARE is the trigger here: RDJ and SAupdate are

Re: Newbie question

2006-07-21 Thread Andy Jezierski
Golden, James [EMAIL PROTECTED] wrote on 07/21/2006 10:07:33 AM: Hi all, I just took over the administration of spamassassin, since my coworker moved on. I'm not really familiar with a lot of this. The problem I am having is this: A user has a legitimatly high AWL score (because of

Re: Stock/image-only spam still getting through

2006-07-18 Thread Andy Jezierski
Owen Mehegan [EMAIL PROTECTED] wrote on 07/17/2006 05:20:44 PM: I've been inundated with maddening image-only stock spam lately. I've just today sat down to try and tweak my rules up to weed this out. I added sare_stocks and sare_obfu, updated my version of rules du jour for good measure,

Re: Why is there so much hype behind Image spam

2006-07-17 Thread Andy Jezierski
Shane Williams [EMAIL PROTECTED] wrote on 07/17/2006 09:39:47 AM: On Sun, 16 Jul 2006, John Andersen wrote: On Sunday 16 July 2006 06:35 am, Shane Williams wrote: I never realized SpamAssassin was started back in 1994. What version number was that? I'd say it was definitely ahead of its

Re: Can SA be used to implement greylisting?

2006-06-19 Thread Andy Jezierski
[snip] And this is my point. SA *DOESN'T* work on messages after they have been received. Since I use spamass-milter, SA sees the messages before reception is completed. (You're free to do otherwise.) Then when SA decides that the message doesn't conform to its high standards, the report

Here's a considerate spammer....

2006-06-16 Thread Andy Jezierski
He sent a paypal phish to me, but was nice enough to use a relay that had mailscanner clamav running on it so it's stripped the phish before it sent the message... :-D How would those Guinness guys put it... Use a mail relay that scans for phishing attempts to send out a phish

Re: Latest sa-stats from last week

2006-05-09 Thread Andy Jezierski
[EMAIL PROTECTED] wrote on 05/09/2006 10:27:27 AM: | Holy spoo! Bayes can do MUCH better than that! | {O.O} | | I'm sure it can, but I've got per-user Bayes and most of my users | don't bother to train it. | I'm in a similar situation as Bowie. I had to turn of Bayes as mail

RE: upgrade to 3.1.1

2006-04-07 Thread Andy Jezierski
Robert Fitzpatrick [EMAIL PROTECTED] wrote on 04/07/2006 11:33:25 AM: [snip] Thanks, I am running Postfix 2.2.8 with amavisd-new 2.3.3. I took a message in my inbox, viewed source and copied to a file on the server, but when I run 'spamassassin -D testfile', it just sits there and hangs. The

RE: upgrade to 3.1.1 - solved, but?

2006-04-07 Thread Andy Jezierski
Robert Fitzpatrick [EMAIL PROTECTED] wrote on 04/07/2006 01:11:44 PM: On Fri, 2006-04-07 at 13:58 -0400, Bowie Bailey wrote: That's normal. RDJ keeps an extra copy of all of the rules in that subdirectory. SpamAssassin should ignore them. You need to leave the rules in

Re: Which Operating Systems Do You Use and Why?

2006-04-06 Thread Andy Jezierski
Ask List [EMAIL PROTECTED] wrote on 04/06/2006 02:12:25 PM: We can not seem to come to an agreement on the best operating system to run spam assassin. So we have decided to post this question to the mailing list so we can have other opinions. I realize everyone will have a different

sa-learn Lotus Notes

2006-04-04 Thread Andy Jezierski
There have been numerous threads on how to have end users drop misclassified mail to spam/ham folders in Exchange, but I don't recall seeing any mention of a way of doing this with Notes. Is anyone doing this with Notes that would care to share the secret? Thanks Andy

Re: Generate stats

2006-02-06 Thread Andy Jezierski
Benjamin Adams [EMAIL PROTECTED] wrote on 02/06/2006 12:58:20 PM: I'm running this on Mac OS X, sa-stats is not located on the machine. I tried installing through perl -MCPAN but it doesn't know what it is I tried downloading it from spam assassin and running but missing perl additions.

Re: Post your top 10 from sa-stats

2006-02-02 Thread Andy Jezierski
Jeff Chan [EMAIL PROTECTED] wrote on 02/01/2006 08:53:22 PM: [snip] I'd recommend adding a rule for jp.surbl.org if you don't already have one. It's generally our best performing list currently. A sample rule is mentioned under jp - jwSpamSpy + Prolocation data source on our Quick Start

Size of bayes DB

2006-02-02 Thread Andy Jezierski
I have a sitewide bayes DB that I'm using and am wondering if having too large of a Bayes DB reduces it's efficiency? I normally don't look at SA too much unless users start complaining about misclassified mail. But as Joanne pointed out in a different thread, my Bayes DB seems to be trained

Re: Post your top 10 from sa-stats

2006-02-01 Thread Andy Jezierski
Here's mine after making it through the RBL lists Greylisting: TOP SPAM RULES FIRED RANKRULE NAME COUNT %OFRULES %OFMAIL %OFSPAM %OFHAM

Re: how effective is your spamassassin setup ?

2005-12-14 Thread Andy Jezierski
[EMAIL PROTECTED] wrote on 12/14/2005 04:01:43 AM: BTW, we have other (older I guess) rules as well in our rules directory, this is the current list: 10_misc.cf 25_textcat.cf 70_sare_uri1.cf 20_advance_fee.cf 25_uribl.cf 70_sare_whitelist.cf 20_anti_ratware.cf

Re: Better way to whitelist a host ?

2005-11-15 Thread Andy Jezierski
Christopher X. Candreva [EMAIL PROTECTED] wrote on 11/15/2005 01:03:22 PM: I have one user that needs to whitelist a particular host. It is a web site that is doing something silly, forwarding leads from forms people fill out, but with an envelope sender set to the e-mail address of the

Re: Outsource my mail?

2005-11-03 Thread Andy Jezierski
Pat Traynor [EMAIL PROTECTED] wrote on 11/03/2005 11:53:28 AM: Are there any companies that offer mail storage services with Spamassassin? What I'd like is that if I'm hosting xyzzy.com, I'd like to have mail.xyzzy.com point to this 3rd party provider and have them handle everything. Yes

Re: OK guys - why did this one get through.

2005-11-01 Thread Andy Jezierski
Fred [EMAIL PROTECTED] wrote on 11/01/2005 09:21:28 AM: jdow wrote: Well, you sort of got it. But the from IS paypal.com, it claims. And there is no appropriate paypal received from. The Spoof rules look specifically for paypaL.com in the from line, this guy used paypaI notice I not

Re: Spam being delivered

2005-10-31 Thread Andy Jezierski
Robert Bartlett [EMAIL PROTECTED] wrote on 10/31/2005 02:20:43 PM: Running SA 3.01 on Fedora Core 2 with Qmail. The problem is recently Im showing emails getting delivered to mailbox with the ***SPAM*** in the title, yet the rules state if the email is spam it shouldn't be delivered to the

Re: [SARE] rules update

2005-09-26 Thread Andy Jezierski
Rolf [EMAIL PROTECTED] wrote on 09/26/2005 09:17:49 AM: On 26/09/2005, at 3:07 PM, Robert Menschel wrote: SARE's General Subject rules files and the Whitelist rules files have been updated. I get from --lint: Failed to run header SpamAssassin tests, skipping some: Global symbol

Re: Spamc, spamassassin, different scores

2005-09-06 Thread Andy Jezierski
Miguel Angel Rasero Peral (TCOR) [EMAIL PROTECTED] wrote on 09/06/2005 10:19:29 AM: Hello, my system is a redhat 7.3 with this spamassassin versions and i am using qmail in it. machine:/etc/mail/spamassassin# spamassassin -V SpamAssassin version 3.0.1 running on Perl version 5.6.1

Re: Re: How to discard spam mails

2005-08-23 Thread Andy Jezierski
jdow [EMAIL PROTECTED] wrote on 08/23/2005 08:55:26 AM: Basically, sir, it is time to break down and read that fed manual. {^_^} Potty mouth! Potty mouth! Surely you meant that FINE manual. :-D Andy

Re: spurious __alarm__ messages in spamd log

2005-08-22 Thread Andy Jezierski
Steve Martin [EMAIL PROTECTED] wrote on 08/20/2005 12:42:44 AM: Sat Aug 20 00:28:36 2005 [16014] info: spamd: processing message [EMAIL PROTECTED] for filter:88 Sat Aug 20 00:28:42 2005 [16014] error: __alarm__ Sat Aug 20 00:28:42 2005 [16014] error: __alarm__ Sat Aug 20 00:28:49 2005

Re: Trying to id spam

2005-07-29 Thread Andy Jezierski
Dr Robert Young [EMAIL PROTECTED] wrote on 07/28/2005 07:06:35 PM: Have a virus scanner that correctly identified the email as having a virus attachment, but it still passed along the cleaned (ie the attachment was removed) email. I was asked if there was a way to trash the resulting

Re: Trying to id spam

2005-07-28 Thread Andy Jezierski
Dr Robert Young [EMAIL PROTECTED] wrote on 07/28/2005 03:09:48 PM: We had a very short spam come in (actually it had a virus attachment named updated-password.zip). There is not much to grab onto [snip] Don't use SA for trapping viruses, get a virus scanner. ClamAV comes to mind. Andy

Re: SARE Whitelist candidate

2005-07-27 Thread Andy Jezierski
jdow [EMAIL PROTECTED] wrote on 07/26/2005 05:03:23 PM: whitelist_from_rcvd [EMAIL PROTECTED] fidelity2.m0.net Fidelity Investment's Newsletters {^_^} Didn't know there was a SARE whitelist. Here's another Fidelity E-Mail address we whitelist: [EMAIL PROTECTED] Andy

RE: generating rule stats from spamd logs

2005-07-27 Thread Andy Jezierski
Another Dallas miracle! Oh? Er, how does it determine if a message was ham or spam? It looks like it is rather random based on the reports. BAYES_99 may well hit on 84.33% of spam. But I doubt, given it's score, it hits on 44.53% of ham. The code should be

RE: generating rule stats from spamd logs

2005-07-27 Thread Andy Jezierski
Dallas L. Engelken [EMAIL PROTECTED] wrote on 07/27/2005 11:26:54 AM: -Original Message- From: Chris Thielen [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 27, 2005 11:02 AM To: Dallas L. Engelken Cc: users@spamassassin.apache.org Subject: Re: generating rule stats from

Re: [FW: spam control

2005-07-27 Thread Andy Jezierski
The Doctor [EMAIL PROTECTED] wrote on 07/27/2005 02:34:42 PM: - Forwarded message from Angry and Concerned Customer - X-Scanned-By: milter-spamc/0.25.321 (localhost.nl2k.ab.ca [0.0.0. 0]); Wed, 27 Jul 2005 13:11:47 -0600 [snip] All right, the short and simple is that

Re: [FW: spam control

2005-07-27 Thread Andy Jezierski
The Doctor [EMAIL PROTECTED] wrote on 07/27/2005 03:51:13 PM: [snip] X-Spam-Status: NO, hits=2.20 required=5.00 X-Spam-Level: xx X-Mark-SPAM: YES, score=5.40/5.00, processed for 2.536s on doctor.nl2k.ab.ca [...] What looks odd to me is that X-Spam-Status says NO (I'm

Re: [FW: spam control

2005-07-27 Thread Andy Jezierski
The Doctor [EMAIL PROTECTED] wrote on 07/27/2005 03:42:41 PM: [snip] In my /etc/rc for spam assassin I have, echo -n ' Spam Assassin'; /usr/contrib/bin/spamd -d -i -D -u defang --user-config --siteconfigpath=/etc/mail/spamassassin -- syslog=/var/log/spamd.log

Re: SA report fails with Razor2 ?

2005-07-20 Thread Andy Jezierski
Brian Ipsen [EMAIL PROTECTED] wrote on 07/19/2005 04:53:29 PM: Hi, When trying to report spam manually using # spamassassin -r (mailfile) I get an error like: razor2 report failed: No such file or directory Died at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Reporter.pm line

Re: HOWTO build milter-spamc on Mac/X Tiger

2005-07-18 Thread Andy Jezierski
Dr Robert Young [EMAIL PROTECTED] wrote on 07/17/2005 01:23:37 PM: Just as an update to those who have an interest, gcc 4.0 and higher will cause problems with milter-spamc release 0.25. The configure script puts in params that changed between gcc 3.x and 4.x (specifically the -fvolatile

Re: Long Scanning Delays

2005-07-14 Thread Andy Jezierski
List Mail User [EMAIL PROTECTED] wrote on 07/14/2005 11:50:19 AM: Remove evilnumbers.cf - check the archives for previous threads and postings by its author (i.e. it should be delete and not used) according to Chris Santerra. Paul Shupak [EMAIL PROTECTED] Bigevil is the bad one, not

Re: very low scoring (ie large negative numbers) spam

2005-07-13 Thread Andy Jezierski
Dr Robert Young [EMAIL PROTECTED] wrote on 07/13/2005 11:11:17 AM: I have several spam that scored very low on SA 3.0.4 w/ milter-spamc 0.25 X-Spam-Status: NO, hits=-145.70 required=5.00 X-Spam-Status: NO, hits=-153.70 required=5.00 X-Spam-Status: NO, hits=-146.00 required=5.00

New 419 Variation?

2005-07-13 Thread Andy Jezierski
|September 26, 2003) at 07/13/2005 02:54:21 PM,MIME-CD by Notes Client on Andy Jezierski/Stepan/US(Release 6.0.4|June 01, 2004) at 07/13/2005 02:57:50 PM,MIME-CD complete at 07/13/2005 02:57:51 PM SMTPOriginator: [EMAIL PROTECTED] RoutingState: $UpdatedBy: CN=NF_NT2/O=Stepan/C=US $Orig

RE: What is WOMR?

2005-07-12 Thread Andy Jezierski
[EMAIL PROTECTED] wrote on 07/12/2005 04:28:33 PM: Ah I see. The subject of the message is SHARE User Events in Boston: Early Registration Deadline July 15. Would the best thing to do is whitelist these guys? It's not the subject, it's who the message is from. share.org Probably easiest

Re: How can I correctly detect these spams?

2005-07-07 Thread Andy Jezierski
Chris Thielen [EMAIL PROTECTED] wrote on 07/07/2005 01:15:24 AM: Hi Thomas, Your email scored nearly 25 on my system. Chickenpox contributed 4.2, uribls contributed tons. HTH :) As has been pointed out, make sure your network tests are turned on. I am surprised that I only got two

Re: Still need to work on Mail SpamAssassin 3.1.0

2005-07-06 Thread Andy Jezierski
The Doctor [EMAIL PROTECTED] wrote on 07/05/2005 07:41:30 PM: Spam Assassin 3.0.4 works with milter-spamc 0.25, smf-spamd and MailScanner Current. Spam Assassin 3.1.0 only works MailScanner Current less than 10% . How can I help to determine where the source of the problem is? Don't

Question on 3.1.0 mass-checks

2005-07-06 Thread Andy Jezierski
I'm running the mass-checks on my corpus and am noticing that I'm getting the same errors I reported in bug 4115. Will the results be valid? Or should I not bother? Thanks Andy

Re: Question on 3.1.0 mass-checks

2005-07-06 Thread Andy Jezierski
[EMAIL PROTECTED] wrote on 07/06/2005 04:02:34 PM: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Andy Jezierski writes: I'm running the mass-checks on my corpus and am noticing that I'm getting the same errors I reported in bug 4115. Will the results be valid? Or should I

Re: How can I filter this kind of spam?

2005-07-05 Thread Andy Jezierski
Thomas Booms [EMAIL PROTECTED] wrote on 07/05/2005 09:23:50 AM: Hi all, I have the following text of a spam not marked as spam. BAYES_40 I have set to 5. After I got it, I've increased the value of RCVD_BY_IP to 5 in the hope, that it works. Which other solutions are there to mark these

Re: How can I filter this kind of spam?

2005-07-05 Thread Andy Jezierski
Michael Moyse [EMAIL PROTECTED] wrote on 07/05/2005 11:10:07 AM: Kai Schaetzl wrote: Michael Moyse wrote on Tue, 05 Jul 2005 15:54:27 +0100: Why even bother processing it at all? Because the next mail will come from another host? Blacklisting a single Mexican mail provider

Re: Spamassassin not assigning scores?

2005-07-05 Thread Andy Jezierski
Mike Keller [EMAIL PROTECTED] wrote on 07/05/2005 11:29:41 AM: [snip] Sendmail Milter Config: INPUT_MAIL_FILTER(`smtp-vilter', `S=unix:/var/smtp-vilter/smtp- vilter.sock, F=T, T=C:15m;S:10m;R:10ms;E:15m')dnl I have all timeouts for smtp-vilter backends (clamd, spamd) set at 900

Re: sendmail.mc entry for spamc milter

2005-07-05 Thread Andy Jezierski
Dr Robert Young [EMAIL PROTECTED] wrote on 07/05/2005 02:13:01 PM: My error...I meant to say the milter-spamc v 0.25 On Jul 5, 2005, at 11:24 AM, Andy Jezierski wrote: Dr Robert Young [EMAIL PROTECTED] wrote on 07/05/2005 10:22:45 AM: In my initial foray into Spamassassin

RE: Spamassassin not assigning scores?

2005-07-05 Thread Andy Jezierski
Mike Keller [EMAIL PROTECTED] wrote on 07/05/2005 02:32:29 PM: After rebuilding my sendmail.cf with the following: INPUT_MAIL_FILTER(`smtp-vilter', `S=unix:/var/smtp-vilter/smtp- vilter.sock, F=T, T=C:15m;S:10m;R:10m;E:15m') I am still getting some messages in that have a 0.0

Re: trying to get the spamassassin to work properly

2005-07-01 Thread Andy Jezierski
jdow [EMAIL PROTECTED] wrote on 07/01/2005 11:56:35 AM: mumble I wonder why the UPGRADE notes were ever written. Nobody reads them, do they. I bet he failed to --rebuild then --sync his bayes database, too. {O.O} Reading?!?!? That implies doing research, we'll have none of that around

RE: Hello -- question about the Rules

2005-07-01 Thread Andy Jezierski
Pierre Thomson [EMAIL PROTECTED] wrote on 07/01/2005 03:23:22 PM: I would simply zero the score for that rule in your local.cf file to disable it: score BUGGY_CGI 0 FWIW, I don't think that rules exists anymore in 3.x, I couldn't find it on my system. Andy

Re: how do train SpamAssassin

2005-06-30 Thread Andy Jezierski
any errors? Andy On 6/29/05, Andy Jezierski [EMAIL PROTECTED] wrote: liyas_m m [EMAIL PROTECTED] wrote on 06/29/2005 09:19:50 AM: I just installed SpamAssassin, but it does not catcht any spam.. Does SA need to be trained? If it does, how do u do that? How are you invoking

RE: e-mail size limits

2005-06-30 Thread Andy Jezierski
Matthew Thomas [EMAIL PROTECTED] wrote on 06/30/2005 11:19:13 AM: From: Robert Swan [mailto:[EMAIL PROTECTED] I have recently taken over administration of a Spamassassin server that is running RedHat 9, and Spamassassin 3.04, spamd, spamc, postfix.

Re: Auto learn function

2005-06-30 Thread Andy Jezierski
Michael [EMAIL PROTECTED] wrote on 06/30/2005 02:18:14 PM: Is there any way to check if the autolearn function is on besides the line bayes_auto_learn 1 in local.cf ? I`m asking because i have the option bayes_auto_learn set to 1 and i dont think its working. Check your maillog, you should

Re: how do train SpamAssassin

2005-06-29 Thread Andy Jezierski
liyas_m m [EMAIL PROTECTED] wrote on 06/29/2005 09:19:50 AM: I just installed SpamAssassin, but it does not catcht any spam.. Does SA need to be trained? If it does, how do u do that? How are you invoking SA? Are you seeing any X_Spam_ headers in any of your messages? More info is required to

Re: On the subject of training ( ie frequency)...

2005-06-29 Thread Andy Jezierski
Dr Robert Young [EMAIL PROTECTED] wrote on 06/29/2005 11:39:48 AM: [snip] I have a system where the previous person trained the Bayes stats once about 1-2 yrs ago, has used only the default rules, and has auto learn on. Reports are it has been losing its effectiveness slowly over this

Re: SA v3.0.4 install error

2005-06-23 Thread Andy Jezierski
Dirk the Daring [EMAIL PROTECTED] wrote on 06/23/2005 11:54:49 AM: On Thu, 23 Jun 2005, Kevin W. Gagel wrote: Run this and report back to the list: spamassassin -D --lint /opt/sa 4 % ./spamassassin --lint Cannot open /usr/share/spamassassin/user_prefs.template: No such file or

Re: SA v3.0.4 install error

2005-06-23 Thread Andy Jezierski
Dirk the Daring [EMAIL PROTECTED] wrote on 06/23/2005 02:36:21 PM: I don't want SA to create things in home directories. This is a mail relay. There are no local user accounts, mail is not delivered locally. SA should only use system-wide preferences and rules. Start spamd with the -x flag

Re: spamassassin smtp domino exchange passthru

2005-06-21 Thread Andy Jezierski
SSK1 [EMAIL PROTECTED] wrote on 06/20/2005 08:31:01 PM: Our inbound/outbound SMTP mail is traversing via MessageLabs.. Cut a long story stort - I want to bypass messagelabs (costs) and implement an (in-house) Antispam solution. (domain1.com) I have 12 (W2K/Linux) Domino Servers including

RE: SpamAssassin 3.1.0pre1 PRERELEASE available!

2005-06-20 Thread Andy Jezierski
Larry Rosenman ler@lerctr.org wrote on 06/19/2005 01:46:41 PM: Another one you might want to add to that list: Crypt::OpenSSL::Bignum The pre-req chain for Mail::DomainKeys doesn't req it, but apparently SA 3.1.0pre1 does. LER Yep, ditto here. This was with the last SVN build

Re: Spamassassin milter-spamc ...interdependencies?

2005-06-20 Thread Andy Jezierski
Dr Robert Young [EMAIL PROTECTED] wrote on 06/20/2005 12:48:21 PM: We are looking at upgrading from V2 to V3 of Spamassassin. The previous system person installed milter-spamc to link into sendmail with the v2 product (v2.6'ish I think). Since we are looking at the Spamassassin upgrade,

Re: sare lists

2005-06-17 Thread Andy Jezierski
Ron McKeating [EMAIL PROTECTED] wrote on 06/17/2005 06:31:01 AM: Hi all, we have started using several of the sare lists with rules_du_jour. We have the onfu oem fraud antidrug adult lists. However when manually running spam through SA I am not seeing any of these lists appear in the

spamd 3.1 error messages

2005-06-16 Thread Andy Jezierski
In the process of setting up a new server, so I thought I'd give SA 3.1 a try. Install went fine, but in looking at my maillog, I'm seeing the following errors about every 5 minutes. Anyone have an idea what the cause might be? Running FreeBSD 5.4, Sendmail 8.13.3, SA3.1 SVN snapshot from

re: spamd 3.1 error messages

2005-06-16 Thread Andy Jezierski
[EMAIL PROTECTED] wrote on 06/16/2005 02:10:27 PM: Andy, can you open a bug at bugzilla, run with debugs on for a while and collect 1 or 2 of those cases, and attach the debug log to the bug? sounds like it warrants checking out. --j. Done. Bug 4407. Andy

Re: Advice for a weekend spam assassin?

2005-06-10 Thread Andy Jezierski
Dimitri Yioulos [EMAIL PROTECTED] wrote on 06/10/2005 01:00:51 PM: I hope you don't mind my breaking into this thread, but I have a question regarding SA helpers. My mail setup is sendmail with spamassassin, and I'm using SARE rules and bayes. Ours is a small shop (mail vol. about 1000

Re: Lower detection rates

2005-06-09 Thread Andy Jezierski
Carnegie, Martin [EMAIL PROTECTED] wrote on 06/09/2005 12:09:20 PM: Hi All, In the past 3 weeks or so, we have really noticed a decrease in the detection rate for spam. We have not changed our system other than upgrading to 3.0.3 to see if it would help. We have turned on URIBL and

Rules Q: chickenpox weeds

2005-06-08 Thread Andy Jezierski
I'm getting ready to upgrade to a new server and have been looking through the rules that I use. I know that the chickenpox and weeds rules haven't been updated in a very long time. But have they or a variation of them been incorporated into the new SA releases or new SARE rules? Should I still

RE: Rules Q: chickenpox weeds

2005-06-08 Thread Andy Jezierski
Bowie Bailey [EMAIL PROTECTED] wrote on 06/08/2005 02:03:08 PM: According to the wiki, Backhair is unnecessary with SA 3.0.0 (and presumably the newer versions as well). http://wiki.apache.org/spamassassin/CustomRulesets Bowie Ah, that's right. I couldn't remember why I wasn't running

Re: procmailrc being bypassed - again

2005-06-03 Thread Andy Jezierski
Jake Colman [EMAIL PROTECTED] wrote on 06/03/2005 02:47:15 PM: DBF If the loadave does -not- go up (due to waiting for things like DNS DBF queries) then you'll have to manually trigger the queuing behavior. DBF Edit your sendmail.cf (or .mc) file to add the 'Expensive' flag (e) DBF to

Re: Move spam to another user account

2005-06-01 Thread Andy Jezierski
Tim Macrina [EMAIL PROTECTED] wrote on 06/01/2005 09:21:54 AM: On 6/1/05, Duncan Hill [EMAIL PROTECTED] wrote: On Wednesday 01 June 2005 15:12, Tim Macrina typed: I wish to move all spam scored 15 or more to one specific mail account. I want to do this no matter what account the message

Re: Move spam to another user account

2005-06-01 Thread Andy Jezierski
Tim Macrina [EMAIL PROTECTED] wrote on 06/01/2005 09:35:46 AM: From my procmailrc file :0fw | /usr/bin/spamassassin :0 * ^X-Spam-Status: Yes On 6/1/05, Andy Jezierski [EMAIL PROTECTED] wrote: Tim Macrina [EMAIL PROTECTED] wrote on 06/01/2005 09:21:54 AM: On 6/1/05

Re: Procmail Recipe Problem

2005-05-26 Thread Andy Jezierski
Jake Colman [EMAIL PROTECTED] wrote on 05/25/2005 10:12:08 PM: [snip] How can I limit the number of sendmails anyway? My server gets very overloaded in those circumstances. In general, what happens if there are more sendmails than there are spamd processes? You can try

Re: dynamic IP range and good RBL?

2005-05-25 Thread Andy Jezierski
Ryan L. Sun [EMAIL PROTECTED] wrote on 05/25/2005 01:33:19 PM: Hi, all I am using spamhaus sbl+xbl RBL and dsbl RBL. It seems they got too much false positive, especially dynamic IPs. Do you guys know how can I get all the dynamic IP range on internet, or is that possible? Any other RBL

Re: spamc and spamd in different servers

2005-05-18 Thread Andy Jezierski
Paco Yepes [EMAIL PROTECTED] wrote on 05/18/2005 08:16:09 AM: I want to connect spamc in IP 172.19.3.1 to spamd in IP 172.19.2.1 spamd is running in 2.1 with the following options: # ps -ef | grep spamd root 11192 1 0 14:20 ? 00:00:00 /usr/sbin/spamd -m 10 -A 172.19.3.1 -A

Re: Header rewrite rule doesn't work

2005-05-17 Thread Andy Jezierski
news [EMAIL PROTECTED] wrote on 05/16/2005 02:07:55 PM: Hi, I'm having problems with SpamAssassin-3.0.3 on a Fedora Core 2 machine along with Sendmail. SpamAssassin is able to identify mail as spam, and adds its headers to the mail. However, it does not rewrite the subject header with

RE: AWL whaaat

2005-05-04 Thread Andy Jezierski
Chris Santerre [EMAIL PROTECTED] wrote on 05/04/2005 02:20:01 PM: -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Wednesday, May 04, 2005 1:11 PM To: users@spamassassin.apache.org Subject: Re: AWL whaaat Kelson wrote: Matt Kettler wrote: Or

Re: Web based helpdesk tool for SA?

2005-05-02 Thread Andy Jezierski
Kevin Peuhkurinen [EMAIL PROTECTED] wrote on 05/02/2005 06:59:01 AM: Lately I've been thinking that something that would really be useful for SA is a web based helpdesk tool. The idea is to help out companies that use SA as a proxy in front of their Notes/Exchange/Groupwise servers (such

Re: autolearn=ham

2005-05-02 Thread Andy Jezierski
Robert Swan [EMAIL PROTECTED] wrote on 05/02/2005 02:15:45 PM: How do I clear, or unlearn the bayes filter it seems that it is picking up wrong. E-mail that is SPAM has autolearn=ham in the header and this is wrong. I am Running SPAMASSASSIN 3.0.3 on a Linux Red Hat 9 server. (just

  1   2   >