Re: After moving mailserver to another box three rules dont work

ngetragen beim Amtsgericht Berlin-Charlottenburg, HRB 70507 Umsatzsteuer-ID: DE201038407 Sie wollen auch unterwegs im Bereich Telekommunikation informiert sein? http://mobil.teltarif.de bringt die gewohnten Informationen auf Ihr Handy. -- Anthony Peacock Head of Reasearch & Development, FBS Advanced IT Support Centre CHIME, Whittington Campus WWW:http://www.chime.ucl.ac.uk/~rmhiajp/

Re: Assistence needed with spamassasin under RedHat 5.2

Scanner? Check the "Spam List =" and "Spam Lists To Be Spam =" config settings. MailScanner will mark a message as spam if the number of RBLs configured in "Spam Lists To Be Spam =" are hit, regardless of the SpamAssassin score. -- Anthony Peacock CHIME, UCL Medi

Re: SORBS worth AU$1.2m

rich...@buzzhost.co.uk wrote: On Thu, 2009-07-02 at 14:40 +0100, Anthony Peacock wrote: http://www.australianit.news.com.au/story/0,27574,25708610-15306,00.html Is that to a Spam Cartel? It's overpriced :-) Well the article states "Ms Sullivan said the highest "legitimate&qu

SORBS worth AU$1.2m

http://www.australianit.news.com.au/story/0,27574,25708610-15306,00.html -- Anthony Peacock CHIME, UCL Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: A difficult one to weed out?

RIC_IXHASH BODY: iXhash found @ generic.ixhash.net 0.5 NIXSPAM_IXHASH BODY: iXhash found @ ix.dnsbl.manitu.net 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS -- Anthony Peacock

Re: new spam image with random body message

Paweł Tęcza wrote: Anthony Peacock pisze: Hi, Paweł Tęcza wrote: Hi Anthony, Please show us your addition tests, of course :D Unless you are a UK Higher Education organisation you won't be able to use RCVD_IN_JANET_DUL. What a pity. We are Polish university :) Yes, but this is ju

Re: new spam image with random body message

Hi, Paweł Tęcza wrote: Anthony Peacock pisze: Adam Cécile (Le_Vert) wrote: Hello, Could you give us the line from your local.cf to enable such tests ? Thanks in advance, Which tests? You quote the whole list, some are standard some are additions. Hi Anthony, Please show us your

Re: new spam image with random body message

Adam Cécile (Le_Vert) wrote: Anthony Peacock a écrit : [..] 0.9 RCVD_IN_PBLRBL: Received via a relay in Spamhaus PBL [62.57.252.74 listed in zen.spamhaus.org] 3.0 RCVD_IN_XBLRBL: Received via a relay in Spamhaus XBL 2.0 RCVD_IN_JANET_DUL

Re: Lots of 419/scam and investment spams getting through suddenly

J_ALL_CAPS Subject is all capitals 0.4 AWLAWL: From: address is in the auto white-list It looks like my Bayes is trained to be better at picking these up. -- Anthony Peacock CHIME, UCL Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health I

Re: new spam image with random body message

ms? Hello Ibrahim, Could you please show me the Content-* headers of image attachment? Did you send all headers of that spam in your previous post? I have some success with fighting that spam I called "BAD GOOD PENIS", but I can see that it evolves, so my rules should be improved too. My

Re: Some questions on sa-learn

canner mailing list. I do think that looks wrong to me. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: more habeas spam

hem into the FN range. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: How can I see all rules applied?

here any more... -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: How can I see all rules applied?

. But how can I delete this auto-whitelist? I found two of them in /root/.spamassassin/auto-whitelist and /var/amavis/.spamassassin/auto-whitelist. I even disabled it in /etc/mail/spamassassin/v310.pre No avail. :( Anthony Peacock wrote: Hi, I am not sure what you think the problem is. If you

Re: How can I see all rules applied?

: auto-whitelist: DB addr list: file locked, breaking lock [18824] dbg: locker: safe_unlock: unlink /root/.spamassassin/auto-whitelist.lock [18824] dbg: auto-whitelist: post auto-whitelist score: 2.393667 -- Anthony Peacock CHIME, Royal Free & University College Medical School

Re: problem with MSGID_MULTIPLE_AT

t least see when it is firing, but it won't have a large impact on the overall score. score MSGID_MULTIPLE_AT 0.1 -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: Rules in local.cf are not read?

e body SHOPPING_B /\b(?:luxury|handbag|rolex|gucci|armani|prada|dsquared|burberry|hermes|fashion|discount|replica|watches|\bdior\b|bikkember)/i describe SHOPPING_B Non adoro sperperare Thanks for any help, Simone. -- Anthony Peacock CHIME, Royal Free & University Coll

Re: SA experts needed here - SPAM examples

learn 200 spam _AND_ 200 HAM messages before Bayes will start scoring. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: HABEAS_ACCREDITED_COI

change to stops those messages, by disabling all of the habeas.com tests. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study at CHIME in 2008. http://www.chime.ucl.ac.uk/study-health-informatics/

Re: HABEAS_ACCREDITED_COI

Hi, ram wrote: On Tue, 2008-02-26 at 08:49 +, Anthony Peacock wrote: Hi, I have just received a number of spam emails which got through the filtering system because they hit the HABEAS_ACCREDITED_COI rule, which give them -8. They all came to role based addresses that are never used

Re: HABEAS_ACCREDITED_COI

Hi, Following up to myself... Anthony Peacock wrote: Hi Justin, Justin Mason wrote: Jason Haar writes: Anthony Peacock wrote: I have had a look around the http://www.habeas.com/ website and can't really see how to check the company in question, or make a complaint. There is a for

Re: HABEAS_ACCREDITED_COI

Hi Justin, Justin Mason wrote: Jason Haar writes: Anthony Peacock wrote: I have had a look around the http://www.habeas.com/ website and can't really see how to check the company in question, or make a complaint. There is a form for asking them to ask the company to remove these addr

HABEAS_ACCREDITED_COI

I want to complain about the company. Does anyone know anything about this. At this stage I am planning on changing the score for all HABEAS_ACCREDITED_??? rules to 0, to make them neutral to the score. -- Anthony Peacock CHIME, Royal Free & University College Medical Schoo

Re: mails not being received

ve you run spamassassin --lint and spamassassin --debug? Was MailScanner working fine before this, or is this a new install of MailScanner? -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study at CHIME in 2008. http://www.chime.ucl.ac.uk/study-health-informatics/

Re: Safe "Phishing"

have absolutely nothing to do with SPAM detection. They are used in MailScanner's Phishing detection feature. I really do not think they can be used without modification in SA as SPAM signs. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://ww

Re: Safe "Phishing"

pose and use it in a another situation without understanding what it is there for. These are white and blacklists for the Phising detection feature, they have nothing to do with spam detection. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://

Re: Safe "Phishing"

le to use MailScanner directly so I'm using spamd. My question is about lowering chances for false positives by having safe list from MailScanner. But since I just started to use SpamAssassing I'm asking is it wise and needed. Regards, Giga Anthony Peacock wrote: Hi, Those files are eff

Re: Safe "Phishing"

e URI RBLs are better. I just started using SpamAssassin and I would like to see some opinion from more expirienced users. Regards, Giga -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "A CAT scan should take less t

Re: Increase on Spambots?

icence for updates runs out after 30 days? -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET sca

Re: Feeding SA-learn

). (Note that if you only want to perform statistical learning, and do not want to report mail to third-parties, you should use the sa-learn command directly instead.)" This option teaches the Bayesian system, but also submits to third party systems like DCC and SpamCop. -- Anthon

Re: Feeding SA-learn

John Thompson wrote: On 2008-01-23, Anthony Peacock <[EMAIL PROTECTED]> wrote: My intention was to manually feed the few spam messages that slip thru undetected. By the time I get a hold of those, they are in the recipient's mail client inbox, not in the server. I was thinking, if

Re: Feeding SA-learn

folders that are saved on the local hard disk. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas

Re: Feeding SA-learn

Diego Pomatta wrote: Anthony Peacock escribió: Well the short answer is, yes you can. The slightly longer answer is that you won't get as good results doing this, as the Bayes system uses tokens found in the complete message. By only learning on the body you will not gain any advantag

Re: Feeding SA-learn

Diego Pomatta wrote: Anthony Peacock escribió: Can I feed a plain text file representing just the body of a message to sa-learn? /Diego Yes you can, who to stop it? I just sent your message body as --ham, and it told it learned one message. I meant without the headers, just the

Re: Feeding SA-learn

nd in headers. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET scan could result in a lot of

Re: New credit card scams .. how to catch these

Rick Zeman wrote: What could it trigger on?If you take it outside of the context of the info that you provided that's NOT apparent from that email, it's a perfectly legitimate email message from a perfectly legit MTA (well, as legit as hotmail is). Feed it into Bayes?

Re: Is it possible to detect/undo report_safe?

HRZ-MailScanner-SpamCheck: not spam (whitelisted), X-TUD-IAP-MailScanner: Found to be clean X-TUD-IAP-MailScanner-SpamCheck: spam, SpamAssassin (not cached, That markup is added by MailScanner not SpamAssassin. SpamAssasin can't automatically remove that markup, it only removes markup

Re: Bayesian filtering not kicking in, but it's trained.

ng the checks on the Bayes database as the same user that SA runs as normally? -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "A CAT scan should take less time than a PET scan. For a CAT scan, they're onl

Re: Which rules are used

.. Thanks Claudia Burman Argentina -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET scan could r

Re: spamd keeps running at 99% CPU until i kill the process

your thoughts, and also let me know whether deleting both of those files is a good way to go. No. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "A CAT scan should take less time than a PET scan. For a CAT scan, t

Re: spamd keeps running at 99% CPU until i kill the process

ur thoughts, and also let me know whether deleting both of those files is a good way to go. No. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "A CAT scan should take less time than a PET scan. For a CAT scan, the

Re: Problem with sa-update and ImageInfo

"v312.pre" and SA was loading the copy included with SA 3.2 via "v320.pre". So... not a bug. Regards, Daryl -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "I'm in shape. - ROUND is a shape"

Re: Problem with sa-update and ImageInfo

Daryl C. W. O'Shea wrote: Anthony Peacock wrote: And as I noted above, by the time I see the error from the cron output, running sa-update by hand does not show the problem. It is almost as if it only happen if there really is an update to download. rm -f /var/lib/spamassassin/3.0010

Re: Problem with sa-update and ImageInfo

o by default) in the 3.1.8 channels by mistake... But I guess if that was happening more people would have piped up by now :-) Luix 2007/6/5, Anthony Peacock <[EMAIL PROTECTED]>: Anthony Peacock wrote: > Hi, > > Luis Hernán Otegui wrote: > >> You're probably

Re: Problem with sa-update and ImageInfo

Daryl C. W. O'Shea wrote: Anthony Peacock wrote: And as I noted above, by the time I see the error from the cron output, running sa-update by hand does not show the problem. It is almost as if it only happen if there really is an update to download. rm -f /var/lib/spamassassin/3.0

Re: Problem with sa-update and ImageInfo

Anthony Peacock wrote: Hi, Luis Hernán Otegui wrote: You're probably loading the plugin twice, one from your local.cf or a v3**.pre file, and the other from the ImageInfo.cf. Take out one of the LoadPlugin directives (preferably the one from local.cf or the *.pre files), and everything

Re: Problem with sa-update and ImageInfo

? -- System Admin CHIME, Royal Free & University Collge Medical School E-Mail: [EMAIL PROTECTED] -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "I'm in shape. - ROUND is a shape"

Re: Problem with sa-update and ImageInfo

. It is almost as if it only happen if there really is an update to download. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "I'm in shape. - ROUND is a shape"

Re: How to use SpamAssassin from PHP?

e to write a lot more custom rules to achieve what we really want. Or lower the spam threshold... Or raise the scores of the rules that are hitting... -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have

Re: Insecure Dependency

$tmpd = `domainname`; my $tmp = "$tmph.$tmpd"; $tmp =~ tr/\0\r\n//d; return $tmp; }, }, The commented out "my $tmp line is the original lime. PS your colourful backgr

Re: spamd as root

r your question. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an id

Re: RDJ handling question

n I was using RDJ, I am sure that the script downloads to its TMPDIR and runs some sanity checks, then copies the files into the SA directory. Try running RDJ manually with debugging switched on. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www

Re: How are cllassified this?

your requirements for these spams, and someone might be able to suggest a rule that meets your needs. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then

Re: How are cllassified this?

d a couple of others it does the trick. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have

Re: Whitelist scoring question

BODY: Bayesian spam probability is 0 to 1% [score: 0.0000] -=Aubrey=- -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples

Re: /etc/spamassassin or /var/lib/spamassassin?

henson" <[EMAIL PROTECTED]> X-Spam-Score: 40 X-Spam-Report: hits=4.0 required=5.0 test=NO_RDNS,VOWEL_ X-Original-Recipient: [EMAIL PROTECTED] This is a multi-part message in MIME format. On Thu, Mar 29, 2007 at 03:03:10PM +0100, Anthony Peacock wrote: Hi, Because, more

Re: /etc/spamassassin or /var/lib/spamassassin?

hat matches is "From:" which is the header I posted below. It seems as if it is not reading the whitelist_from entries at all. Or whitelisting is somehow disabled, is that possible? On Thu, Mar 29, 2007 at 02:19:06PM +0100, Anthony Peacock wrote: Hi, I would think we need to see the FULL

Re: /etc/spamassassin or /var/lib/spamassassin?

iginal-Recipient: [EMAIL PROTECTED] -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have a

Re: Big trouble

s BAYES_99 which adds 3.5 points, and your Bayes system scored it as BAYES_40 which subtracted 0.2 points. I did get a few of those emails come through at the start, but by feeding them into my Bayes system they now get caught. -- Anthony Peacock CHIME, Royal Free & University College Medi

Re: Big trouble

RBL: Relay in JANET MAPS RBL+ RBL [102.176.29.76 listed in rbl-plus.mail-abuse.ja.net] 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmh

Re: Big trouble

to block the messages, we would need to see what the messages are. Same form as before, save the message (with full headers) and place it somewhere where we can download it. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ &

Re: Is Bayes Dead? Have the spammers won?

27;m missing out on? -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I

Re: Another false negative

ut you may also need to train it with a few similar messages for it to significantly change its scoring. You're saying right. Now I understand. Thank you, rocsca -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ &q

Re: Another false negative

o significantly change its scoring. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an

Re: Another false negative

e is that my Bayesian scoring gives it a BAYES_99 score and your's gives it a BAYES_50 score. So you are saying that I have to train SA? That would be how you would improve your Bayes accuracy, yes. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http:

Re: Another false negative

=no version=3.1.8 Then the biggest difference is that my Bayesian scoring gives it a BAYES_99 score and your's gives it a BAYES_50 score. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I

Re: Another false negative

3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% [score: 1.] 0.0 MIME_HTML_ONLY BODY: Message only has text/html MIME parts -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.

Re: Bayes not functioning?

ssassin, without any updated rules, the newer sorts of spam are less likely to be caught. Using the latest version of SA with sa-update to keep the rules up to date should help a lot. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.uc

Re: spamassassin beginner question

ed by the command line and not MailScanner. What user do you run the command line checks as, and what user does MailScanner run as? Do you run sa-update? Some versions of MailScanner required a configuration setting to be correctly set before it would find the rules downloaded by sa-update.

Re: what does the 'new' --allowupdates option to sa-update do?

ide open security hole, which could get compromised in the future. This switch is there for the rare occasion where you decide to allow a channel to update a plugin automatically. This is something you would do only after reviewing that channel. -- Anthony Peacock CHIME, Royal Free & Univ

Re: ANTIDRUG rulesets

Hi, Jon Armitage wrote: -Original Message- From: Anthony Peacock [mailto:[EMAIL PROTECTED] Sent: 13 February 2007 15:56 To: SpamAssassin Users sa-update updates the stock rules that are distributed with SA. Rules Du Jour is used to update add-on rulesets like the SARE rules. If

Re: ANTIDRUG rulesets

pdate? sa-update updates the stock rules that are distributed with SA. Rules Du Jour is used to update add-on rulesets like the SARE rules. If you are not running sa-update you are only updating a small section of your rules. -- Anthony Peacock CHIME, Royal Free & University Colleg

Re: ANTIDRUG rulesets

e and after instruct bayes db.. The other thing to do is to run sa-update to make sure you are running the latest versions of the standard SA rules. http://spamassassin.apache.org/full/3.1.x/doc/sa-update.html -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW

Re: ANTIDRUG rulesets

o you need to continue to feed messages into the system. If you can train your Bayes system to correctly mark these at 99% probability that will give you another 3.5 marks. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ &qu

Re: ANTIDRUG rulesets

working, although you now need to train it that these messages are SPAM. You can use the sa-learn utility to teach the Bayes system about Spam. sa-learn --ham < email.txt http://spamassassin.apache.org/full/3.1.x/doc/sa-learn.html Your network tests are still not working. Run spamassassin

Re: ANTIDRUG rulesets

aking any changes to SA rules or configuration. # /usr/bin/spamassassin --version SpamAssassin version 3.1.7 running on Perl version 5.8.8 OS: SLES 10 Linux av5 2.6.16.21-0.8-bigsmp #1 SMP Mon Jul 3 18:25:39 UTC 2006 i686 i686 i386 GNU/Linux rocsca -- Anthony Peacock CHIME, Royal Free & Unive

Re: ANTIDRUG rulesets

D switch. It doesn't look like you are running any network tests, you are certainly not running any Bayes tests. Can you remind us what OS this is on, what version of spamasssassin, how you installed SA, how you call SA? -- Anthony Peacock CHIME, Royal Free & University Colle

Re: ANTIDRUG rulesets

txt If you want a lot more information you can use the debug switch spamassassin -D -t < email.txt -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples

Re: ANTIDRUG rulesets

ustify this? What I miss? 1. You need to download and install the SARE_STOCKS ruleset from http://www.rulesemporium.com/ 2. You should enable network tests Can you so us which tests these emails hit on your system? -- Anthony Peacock CHIME, Royal Free & University College Medical Scho

Re: ANTIDRUG rulesets

1.6 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see <http://www.spamcop.net/bl.shtml?60.215.113.19>] Looking at this my Bayes scores it highly, but so does a rules from the SARE_STOCKS rule set. There are also a number of network tests which get this.

Re: ANTIDRUG rulesets

omatic update with rdj?) I think you need to make available an example of the messages that aren't being stopped. Preferably with full headers. That way people here can run them through their systems and tell you which rules hit them. Put a full email (including all headers) on a web

Re: Bayes resolution gettin weaker

that if the Bayes learned something as ham that it shouldn't, sa-learn was smart enough to undo it. Change the thresholds for auto learning. Mine are: bayes_auto_learn_threshold_nonspam -0.1 bayes_auto_learn_threshold_spam 12.0 -- Anthony Peacock CHIME, Royal Free & University C

Re: Bayes

Hi Dan, Dan Barker wrote: -Original Message- From: Anthony Peacock [mailto:[EMAIL PROTECTED] Sent: Friday, January 26, 2007 7:22 AM To: users@spamassassin.apache.org Subject: Re: Bayes I also manually learn by mistake. All FNs & FPs are fed back to the system. And I occasion

Re: Bayes

m. And, voila!, I'm now running under one percent. Has anyone else seen this? Are there any suggestions as to how to deal with this? Should I regularly rebuild the bayes files? Appreciate any advice. Jack -- This message has been scanned for viruses and dangerous content by MailScanner, an

Re: Scan Messages according to arrival

as "in emergency only"." This defaults to 800. As the docs say, if this happens regularly you can raise this value to keep the FIFO behaviour. But if your incoming queue is regularly backing up that much you probably should look at why. -- Anthony Peacock CHIME, Roya

Re: Thoughts on using DCC

Hi, Magnus Holmgren wrote: On Thursday 16 November 2006 12:59, Anthony Peacock wrote: I realise that DCC is not a direct indicator of spamminess but an indicator of bulkiness. And I also realise that the correct answer to my question is 'it depends on your local needs'... Given tha

Thoughts on using DCC

score is enough to tip these over. I know I could adjust the DCC score, but was wondering what other people do? -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchan

Re: ALL_TRUSTED creating a problem

Anthony Peacock wrote: Kevin Golding wrote: In article <[EMAIL PROTECTED]>, Jo Rhett <[EMAIL PROTECTED]> writes These arguments are getting sillier and sillier. I'm asking why it doesn't work in a plain-jane do-nothing normal public box not behind a NAT. And every ar

Re: ALL_TRUSTED creating a problem

nce manually configured the trusted networks to allow for some down-stream hosts that are part of our organisation. But even without that I have never had ALL_TRUSTED misfire on me. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~

Re: subscribing to the users list documentation

t- spamassassin.apache.org" -> -> -> -- -> Anthony Peacock My fault, that blah at blahblahblah stuff just doesn't jump out at me and even though it is bold and large, the stuff below it gets my attention more because they are www "links... Can anyone relate? Agreed

Re: subscribing to the users list documentation

e.org" -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an idea and we e

Re: Spamassassin from CPAN and sa-update location.

ctory as sa-update?) Bookworm -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an i

Re: Low spam score but marqued as spam

can't find anything in the previous mails in here. And google give nothing. Anyone got an idea ? -- F a b i e n G a r z i a n o -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have

Re: commerce Antispam Products

t's fairly good,but it's too > expensive for us.) > > Thanks, > --Jeff > > > -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exc

Re: AWL confusion..

? Or did I just mess my mind up? http://wiki.apache.org/spamassassin/AwlWrongWay -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will s

Re: Discourage broken content

Justin Mason wrote: Anthony Peacock writes: Rick Cooper wrote: From: decoder [mailto:[EMAIL PROTECTED] Sent: Friday, August 25, 2006 4:23 PM To: Rick Cooper Cc: users@spamassassin.apache.org Subject: Re: Discourage broken content -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Cooper

Re: Discourage broken content

he size limit or disable it to get around this issue at the moment. There is some concern about removing the limit completely, so the current discussion is about a scheme that checks ahead for a Mime boundary within a fixed window after the max size value is reached. -- Anthony Peacock CHI

Re: False positives and Bayes

nve Bayes that the spammy looking maling lists messages are ham I add those lists to one of the whitelists. -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange

Re: Scoring Issue

who can tell you what the reasons are. If they are using SpamAssassin and they can provide you with the list of rules that hit your emails, then this list might be able to give you advice on how to stop this happening in the future. Without that we are just guessing. -- Anthony Peacock C

Re: bayes_auto_learn_threshold failed

Hi, Beast wrote: Anthony Peacock wrote: Hi, Beast wrote: Any reason why this config failed? According to Mail::SpamAssassin::Plugin::AutoLearnThreshold it is a valid config. # spamassassin --lint [11919] warn: config: failed to parse line, skipping: bayes_auto_learn_threshold_nonspam 0.1

  1   2   >