Re: mass check tips and tricks - need advice

2013-02-18 Thread Nigel Frankcom
Damn, I thought I had you in my junk list - play nice spammer and keep one address? On Sun, 17 Feb 2013 08:34:15 -0800, Marc Perkel supp...@junkemailfilter.com wrote: OK - I'm getting mass checking set up and working. I'm still in the testing phase. Right now the process of selecting spam and

Re: Bayes database in mysql on multiple servers

2011-11-30 Thread Nigel Frankcom
On Wed, 30 Nov 2011 15:14:33 + (UTC), Walter Hurry walterhu...@lavabit.com wrote: On Wed, 30 Nov 2011 09:11:49 +0100, Robert Schetterer wrote: Am 30.11.2011 09:06, schrieb Matus UHLAR - fantomas: On 30.11.11 00:17, Alex wrote: I have two fedora15 boxes that process mail for a few domains,

Re: Not sure if this is old or new

2011-09-22 Thread Nigel Frankcom
On Wed, 21 Sep 2011 17:08:42 +0200, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On 20.09.11 18:57, Nigel Frankcom wrote: I moved SA to a newer box and have the following output in my logs: http://pastebin.com/VvZfXwAC Apologies if I'm being dense, but is there a way to trace what may

Re: RCVD_IN_SORBS_DUL on my own emails to self

2011-04-10 Thread Nigel Frankcom
On Sun, 10 Apr 2011 00:59:29 +0200, Michelle Konzack linux4miche...@tamay-dogan.net wrote: Hello rstarkov, Am 2011-04-09 15:50:36, hacktest Du folgendes herunter: Does your header definitely include an ESMTP marker as per the RFC? Mine didn't; that was the real issue. We didn't find a bug in

Re: Performance on Spear Phishing?

2011-03-18 Thread Nigel Frankcom
On Fri, 18 Mar 2011 04:22:40 +0100, Karsten Bräckelmann guent...@rudersport.de wrote: On Thu, 2011-03-17 at 12:58 +, Nigel Frankcom wrote: Unrelated but reminded me I hadn't posted a thanks to all those that responded about the sa-update rules. That's partly because I'm awaiting permission

Re: Performance on Spear Phishing?

2011-03-17 Thread Nigel Frankcom
Unrelated but reminded me I hadn't posted a thanks to all those that responded about the sa-update rules. That's partly because I'm awaiting permission from clients to add their mails to the corpus. So, thanks all. Apologies for forgetting my manners. Have no clue about Spear Phishing other than

sa-updates

2011-03-10 Thread Nigel Frankcom
Hi All, Apologies if this has been covered, an admittedly fairly cursory Google showed nothing new. My local sa-update hasn't updated in the better part of a month. Is it that there have been no updates or do I need to dig into my systems to see what I broke, how and when? Regards to all Nigel

Re: [Asrg] draft-levine-iprangepub-01

2010-12-29 Thread Nigel Frankcom
On Wed, 29 Dec 2010 15:26:07 -0500, David F. Skoll d...@roaringpenguin.com wrote: On Wed, 29 Dec 2010 21:09:42 +0100 Matthias Leisi matth...@leisi.net wrote: I'm not sure whether that would be more appropriate for the dev list, but I guess this is relevant/of interest to the SpamAssassin

Re: Comment - GFI/SORBS

2010-12-15 Thread Nigel Frankcom
This is a long and somewhat complex story. I've been running my own mail for 15+ years or so, always on a fixed IP. A few years ago business picked up so I got some additional IP's from my supplier (BT); it turned out that they were decommissioned DUL's renewed as statics. Initially we jumped the

Re: Comment - GFI/SORBS

2010-12-15 Thread Nigel Frankcom
On Wed, 15 Dec 2010 07:04:18 +, corpus.defero corpus.def...@idnet.com wrote: Ultimately, this seems to be more of a witch hunt against SORBS than a SA issue. Although I'm not opposed to a SORBS witch hunt, I don't think it belongs here. Indeed, and it's Lynford and his money grabbing

Comment - GFI/SORBS

2010-12-14 Thread Nigel Frankcom
Hi All, Is sorbs going to be continued as a scoring option in SA? Having hit yet more problems with them I've zeroed their scoring. I found this a couple of days ago, maybe it can add weight. http://blog.wordtothewise.com/2010/12/gfi-sorbs-considered-harmful/ Best to all Nigel

Re: SpamAssassin service file missing after installation

2010-10-27 Thread Nigel Frankcom
Those are not optional modules. You can either install them from CPAN or from yum (depending on the repo you use) As a rule if it says REQUIRED, it probably is :-) Apologies if this is teaching you to suck eggs: In CPAN type: install Digest::SHA Or in yum, do yum list available and look in

ot/possibly

2010-07-06 Thread Nigel Frankcom
I've not been paying much attention to the list, silly season and work/home preassures. Of late I've had some truly horrific backscatter issues, enough to pretty much drop my primary mail. I suspect it's an artifact of the server, which is being swapped out, since it only happens on the rdns

Re: [OT] was SORBS

2010-04-30 Thread Nigel Frankcom
On Fri, 30 Apr 2010 14:22:16 +0100, Martin Gregorie mar...@gregorie.org wrote: On Fri, 2010-04-30 at 08:43 -0400, Lee Dilkie wrote: First, I'd like to point out that not everyone has the option of changing ISP's. Believe it or not, there are many folks who have only one choice for high-speed

Re: [OT] was SORBS

2010-04-30 Thread Nigel Frankcom
On Fri, 30 Apr 2010 16:59:57 +0100, corpus.defero corpus.def...@idnet.com wrote: On Fri, 2010-04-30 at 16:50 +0100, Nigel Frankcom wrote: We're on a BT only exchange here so it's them or nothing, well not quite, I could go CoLo... hmmm maybe not, or satellite, I was involved in setting

Re: [OT] was SORBS

2010-04-30 Thread Nigel Frankcom
On Fri, 30 Apr 2010 17:48:49 +0100, corpus.defero corpus.def...@idnet.com wrote: On Fri, 2010-04-30 at 17:19 +0100, Nigel Frankcom wrote: On Fri, 30 Apr 2010 16:59:57 +0100, corpus.defero corpus.def...@idnet.com wrote: On Fri, 2010-04-30 at 16:50 +0100, Nigel Frankcom wrote: We're

SORBS

2010-04-20 Thread Nigel Frankcom
Hi All, Am I the only one incabale of figuring out the SORBS interface? I'm told by various mailserver that sorbs is blocking me (including this list hence mailing from my gmail account). When I log on to sorbs, give my details I get a nice email back saying: $Id: Act.pm,v 1.16 2006/11/27

Re: SORBS

2010-04-20 Thread Nigel Frankcom
On 20 April 2010 14:13, corpus.defero corpus.def...@idnet.com wrote: On Tue, 2010-04-20 at 14:04 +0100, Nigel Frankcom wrote: Hi All, Am I the only one incabale of figuring out the SORBS interface? I'm told by various mailserver that sorbs is blocking me (including this list hence mailing

Re: SORBS

2010-04-20 Thread Nigel Frankcom
My IP has full rDNS supplied by my ISP - please feel free to ping -a 217.36.54.209 and tell me what exactly is wrong wit that? On 20 April 2010 16:08, Benny Pedersen m...@junc.org wrote: On tir 20 apr 2010 15:04:53 CEST, Nigel Frankcom wrote If anyone has any ideas - please let me know

Re: SORBS

2010-04-20 Thread Nigel Frankcom
On 20 April 2010 18:07, Benny Pedersen m...@junc.org wrote: On tir 20 apr 2010 18:56:37 CEST, John Hardin wrote not correct, hotmail gmail yahoo works without isp dependice, why care ? You're kidding, right, Benny? does it looks so ? Why care that the ISP providing my IP addresses can't

Re: SORBS

2010-04-20 Thread Nigel Frankcom
On 20 April 2010 18:29, Benny Pedersen m...@junc.org wrote: On tir 20 apr 2010 19:17:10 CEST, Nigel Frankcom wrote My IP has full rDNS supplied by my ISP - please feel free to ping -a 217.36.54.209 and tell me what exactly is wrong wit that? http://www.db.ripe.net/whois?form_type

Any known issues with Razor2?

2010-03-23 Thread Nigel Frankcom
Hi All, Apologies if this has already been asked. A hunt through Google didn't help much nor did any digging around the SA site. That's not to say it's not there, just that I can't find it :-/ I have Razor2 installed via CPAN, though without a version number. When I try and install the new SA I

Re: Any known issues with Razor2?

2010-03-23 Thread Nigel Frankcom
On Tue, 23 Mar 2010 09:12:16 +, Nigel Frankcom ni...@blue-canoe.com wrote: Hi All, Apologies if this has already been asked. A hunt through Google didn't help much nor did any digging around the SA site. That's not to say it's not there, just that I can't find it :-/ I have Razor2 installed

Re: Bayes help

2010-03-14 Thread Nigel Frankcom
On Sun, 14 Mar 2010 12:08:17 -0400, Alex mysqlstud...@gmail.com wrote: Hi, I'm concerned that my bayes database may contain incorrect information. I performed a search on all of the messages in the quarantine, and pulled out the ones that contained BAYES_00 in their score. There weren't all that

Re: Bayes help

2010-03-14 Thread Nigel Frankcom
On Sun, 14 Mar 2010 12:08:17 -0400, Alex mysqlstud...@gmail.com wrote: Hi, I'm concerned that my bayes database may contain incorrect information. I performed a search on all of the messages in the quarantine, and pulled out the ones that contained BAYES_00 in their score. There weren't all that

Re: Bayes help

2010-03-14 Thread Nigel Frankcom
On Sun, 14 Mar 2010 12:20:14 -0400, Alex mysqlstud...@gmail.com wrote: Hi, Do you have Autolearn On? Yes. Here is the bayes config from my local.cf: use_bayes 1 bayes_auto_learn 1 bayes_auto_learn_threshold_nonspam -0.9 bayes_auto_learn_threshold_spam 16.0 bayes_expiry_max_db_size 100

Re: Parallelizing Spam Assassin

2009-07-31 Thread Nigel Frankcom
I'm assuming you run a tad more messages than I, but on a quad with a failover I have never seen the failover kick in 4 years. This is not disputing your observations, just noting mine. I claim absolutely no knowledge about the core processing/stacking though I would assume (perhaps incorrectly)

Re: Parallelizing Spam Assassin

2009-07-31 Thread Nigel Frankcom
was not altered in any fashion - just the usual size of incoming spam/mails There are no AV [you mean Anti Virus right?] running on the machine Would be back with results -- Nigel Frankcom-2 wrote: I'm assuming you run a tad more messages than I, but on a quad with a failover I have never seen

Re: sa-update error

2009-06-08 Thread Nigel Frankcom
On Mon, 8 Jun 2009 03:30:59 -0700 (PDT), snowweb pe...@snowweb.co.uk wrote: I've just heard about sa-update and tried to run it. I was thinking of setting up a cron to do it daily, however, I got the following error message when I ran it manually: [r...@s1 spamassassin]# sa-update service

Custome rule problem.

2009-02-19 Thread Nigel Frankcom
Hi All, I've written the following rule to deal with spam a particular set of users are getting hit by that very few of my rules are hitting. Using --lint the rule come back clean but on testing it appears to be ignored. It's in the spamassassin directory. Am I missing something stupid?

Re: Custome rule problem.

2009-02-19 Thread Nigel Frankcom
On Thu, 19 Feb 2009 16:16:48 +0100, Karsten Bräckelmann guent...@rudersport.de wrote: On Thu, 2009-02-19 at 14:50 +, Nigel Frankcom wrote: Using --lint the rule come back clean but on testing it appears to be ignored. It's in the spamassassin directory. Am I missing something stupid

Re: Custome rule problem. Resolved

2009-02-19 Thread Nigel Frankcom
On Thu, 19 Feb 2009 08:01:48 -0800 (PST), John Hardin jhar...@impsec.org wrote: On Thu, 19 Feb 2009, Nigel Frankcom wrote: Testing was done through spamassassin --lint and with debug. I used a mail that *should* have hit the rules. --lint is not for testing rule performance, as it uses

Re: html experts: empty style tags.

2009-01-30 Thread Nigel Frankcom
On Thu, 29 Jan 2009 18:00:47 -0800, Kelson kel...@speed.net wrote: On the subject of style vs style type=text/css *Technically* the TYPE attribute is required in HTML 4, but in practice, no one really uses anything other than CSS, and most browsers will assume it. The current draft of HTML 5

Re: Central and common rules

2009-01-29 Thread Nigel Frankcom
On Tue, 27 Jan 2009 21:51:13 +, Nigel Frankcom ni...@blue-canoe.com wrote: Hi All, Is there are central point for links or dissemination of 'best practice' rules? I freely admit this is my 1st port of call. I'm wondering if there is a simple (i.e works for a muppet like me) page that lists

Central and common rules

2009-01-27 Thread Nigel Frankcom
Hi All, Is there are central point for links or dissemination of 'best practice' rules? I freely admit this is my 1st port of call. I'm wondering if there is a simple (i.e works for a muppet like me) page that lists details of how to synch non sa-update rules. The question is based on the sad

Re: custom post-processing. Howto?

2009-01-08 Thread Nigel Frankcom
On Thu, 8 Jan 2009 21:05:52 +0300, JVlad d...@yandex.ru wrote: Hi, Spamassassin 3.2 works very good for me. Now I want to write a plugin in Perl that will be executed by spamassassin after each email is processed. This script would have to know sender address, sender ip, and score assigned by

Re: custom post-processing. Howto?

2009-01-08 Thread Nigel Frankcom
On Thu, 8 Jan 2009 23:12:47 +0300, JVlad d...@yandex.ru wrote: sendmail + spamassassin milter (written by Georg C. F. et al) everything works great so far, except I need to save the spamassassin results (score+sender) and do this synchronously, right after the score is calculated. How

Re: From: and To: Spamers

2008-12-29 Thread Nigel Frankcom
aside Does DynDNS allow SPF records? On Mon, 29 Dec 2008 15:08:38 +0100, Matthias Haegele mhaeg...@linuxrocks.dyndns.org wrote: Michelle Konzack schrieb: Hello *, since arrount 5 days I am hit by several 10.000 very small (~2 kByte) messages which use my email addresse in From: and

Re: Preconfigured Spamassassin image/setup ?

2008-12-22 Thread Nigel Frankcom
A box is trained for a particular network need. For example a bank would need aver different ruleset/bayes than a 'normal' user. it's easy enough to create an image, however, that image will only apply to the network is was trained for. You can't shortcut training. It's an integral part of SA.

Re: sought rules updates

2008-12-09 Thread Nigel Frankcom
I haven't seen an update from sa-update in months. What version is current? I have dbg: dns: 5.2.3.updates.spamassassin.org = 709395, parsed as 709395 showing here. This even after a dns crash and replace. Nigel On Tue, 9 Dec 2008 09:39:11 +0100, Leveau Stanislas [EMAIL PROTECTED] wrote: Hi

Re: skew the AWL on spam report

2008-12-03 Thread Nigel Frankcom
On Wed, 3 Dec 2008 09:56:58 -0500, Jeff Mincy [EMAIL PROTECTED] wrote: From: Matt Kettler [EMAIL PROTECTED] Date: Tue, 02 Dec 2008 23:48:57 -0500 Brian J. Murrell wrote: If I get a spam and I need to have SA learn that it's spam with sa-learn, wouldn't it be useful to also

Re: [admin] new SpamAssassin PMC chair

2008-08-21 Thread Nigel Frankcom
Ahh the joys of administration (paperwork)... lovely meetings, comfy chairs, free coffee... some people just don't know when they are well off! ;-D Welcome back to the land of the living Justin. On Thu, 21 Aug 2008 11:40:11 +, [EMAIL PROTECTED] (Justin Mason) wrote: Hi all -- just a quick

Re: Being Buried In Returned Email - Need To Mark Certain IPs

2008-06-29 Thread Nigel Frankcom
On Sun, 29 Jun 2008 07:07:58 -0700 (PDT), thadcoco [EMAIL PROTECTED] wrote: Hi All, My server CentOS 4, Sendmail, MailScanner (SA ClamAV) is being buried by spoofed emails that are bounced back to my domain by the recipient's servers. Virtually all these emails are being sent from a zombie at

Re: trusted_networks set in local.cf, but not according to sa-update

2008-06-21 Thread Nigel Frankcom
On Sat, 21 Jun 2008 01:10:53 -0400, Sahil Tandon [EMAIL PROTECTED] wrote: I see the following when running sa-update with debug flags: [20528] dbg: conf: trusted_networks are not configured; it is recommended that you configure trusted_networks manually However: # grep trusted

Re: whitelisting webmail application

2008-05-03 Thread Nigel Frankcom
On Sat, 03 May 2008 12:51:32 -0300, Leonardo Rodrigues Magalhães [EMAIL PROTECTED] wrote: Hello Guys, im running SA 3.2.4 and, on the same machine, horde/imp as webmail application. Sometimes, mails sent through imp are getting flagged as SPAM because of RBL checks, for example:

Re: [OT] ClamAV

2008-04-30 Thread Nigel Frankcom
On Wed, 30 Apr 2008 12:29:34 +0100, jpff [EMAIL PROTECTED] wrote: Has something happened to msrbl.com ? I have been using the Image database with success for some time, but it seems to have vanished. ==John ffitch Hi John, seems OK from here. Checking for .ndb files Updated: phish.ndb Wed

Re: how to unsubscribe to this group

2008-04-02 Thread Nigel Frankcom
From the headers of all list emails list-help: mailto:[EMAIL PROTECTED] list-unsubscribe: mailto:[EMAIL PROTECTED] List-Post: mailto:users@spamassassin.apache.org List-Id: users.spamassassin.apache.org Delivered-To: mailing list users@spamassassin.apache.org oh and for VBounce look at the

Scoring unexpectedly low

2008-03-30 Thread Nigel Frankcom
Hi All, A user received the spam below. The scoring on it seems very low. Does it score consistently for others? If not, what rules is it tagging? Any help gratefully received. Received: by blue-canoe.org.uk (MTSPro MTSAgent 1.60.20) ; Fri, 28 Mar 2008 07:06:43 - for redacted

Re: Your Industry profile

2008-03-20 Thread Nigel Frankcom
On Thu, 20 Mar 2008 17:18:03 +0530, Agnello George [EMAIL PROTECTED] wrote: On 3/20/08, Arvid Ephraim Picciani [EMAIL PROTECTED] wrote: nice. spam on the spamassassin ml. anyone got a rule for those already? :D On Thursday 20 March 2008 11:13:09 agnello george wrote: Hi, I started your

Re: URIBL

2008-02-20 Thread Nigel Frankcom
On Wed, 20 Feb 2008 16:40:33 +0100, Rocco Scappatura [EMAIL PROTECTED] wrote: During last days I have noticed an increasing of 'rejected' messages. I'm currently using 'zen.spamhaus.org' and 'list.dsbl.org' as reputation servers. At the same time, the number of false negative is growth. I

Re: Time to make multi.uribl.org optional rather than default?

2008-02-20 Thread Nigel Frankcom
On Wed, 20 Feb 2008 10:59:58 -0500, Chris Santerre [EMAIL PROTECTED] wrote: -Original Message- From: Jeff Chan [mailto:[EMAIL PROTECTED] Sent: 2008-02-20 07:59 To: users@spamassassin.apache.org Subject: Re: Time to make multi.uribl.org optional rather than default? If you

Re: blacklist.cf needs to die (was Re: Help figuring our why SA is taking like 1.5 minutes to filter...)

2007-10-26 Thread Nigel Frankcom
On Fri, 26 Oct 2007 09:43:37 -0700 (PPT), John D. Hardin [EMAIL PROTECTED] wrote: On Fri, 26 Oct 2007, Duane Hill wrote: But people don't read logs, or they would know... I'd suggest die-ing instead. Why not make it a configurable option in local.cf defaulting to die. That way for those

Re: Top spam hosters, how to decline email mentioning them

2007-10-22 Thread Nigel Frankcom
On Sat, 20 Oct 2007 23:27:41 -0500, Igor Chudov [EMAIL PROTECTED] wrote: I was looking at this article http://en.wikipedia.org/wiki/E-mail_spam It claims that only five countries are hosting 99.68% of the global spammer websites, of which the foremost is China, hosting 73.58% of all web sites

Re: Top spam hosters, how to decline email mentioning them

2007-10-22 Thread Nigel Frankcom
On Mon, 22 Oct 2007 00:07:17 -0700, Bill Landry [EMAIL PROTECTED] wrote: I don't how one could determine the IP address associated with a URL in the body of a message at the MTA level without accepting the message first for further processing. The best you could do at the MTA level is block

Re: Top spam hosters, how to decline email mentioning them

2007-10-20 Thread Nigel Frankcom
On Sat, 20 Oct 2007 23:27:41 -0500, Igor Chudov [EMAIL PROTECTED] wrote: I was looking at this article http://en.wikipedia.org/wiki/E-mail_spam It claims that only five countries are hosting 99.68% of the global spammer websites, of which the foremost is China, hosting 73.58% of all web sites

Re: unsubscribed

2007-10-17 Thread Nigel Frankcom
On Thu, 18 Oct 2007 00:16:06 +0200, mouss [EMAIL PROTECTED] wrote: Rob Sterenborg wrote: Steve Ingraham wrote: I cannot help but comment on this post. Neither can I. I am one of those ignorant people that is subscribed to this list (along with several others) for the purpose

Re: unsubscribed

2007-10-12 Thread Nigel Frankcom
I am amazed at the number of list users that unsubscribe from an anti spam list and yet they fail to look at the headers of the mails they receive list-unsubscribe: mailto:[EMAIL PROTECTED] Not sure what the message says though, I don't speak German :-) On Fri, 12 Oct 2007 12:15:31 +0200,

Re: unsubscribed

2007-10-12 Thread Nigel Frankcom
freundlichen Grüßen means yours sincerely. At 04:33 AM 10/12/2007, Nigel Frankcom wrote: I am amazed at the number of list users that unsubscribe from an anti spam list and yet they fail to look at the headers of the mails they receive list-unsubscribe: mailto:[EMAIL PROTECTED] Not sure what

Re: [users] Clash of 2 SPF packages

2007-10-04 Thread Nigel Frankcom
On Thu, 4 Oct 2007 19:43:00 +0200 (CEST), Dag Wieers [EMAIL PROTECTED] wrote: On Thu, 4 Oct 2007, Hugo van der Kooij wrote: On Thu, 4 Oct 2007, Dag Wieers wrote: That said, I wouldn't mind removing spfquery from one of the packages in order to allow both packages to be co-installed. I

Re: Bayes innodb problems

2007-09-29 Thread Nigel Frankcom
On Sat, 29 Sep 2007 03:24:17 +0200, Alex Woick [EMAIL PROTECTED] wrote: processing has ground down to really slow. I'm seeing some incredibly long queries now in my slow-query log, such as: Try an optimize table tabname for each of the sa tables. You just filled the database from scratch,

Re: unsubscribe

2007-09-27 Thread Nigel Frankcom
On Thu, 27 Sep 2007 11:59:26 +0400, Livitin Sergey [EMAIL PROTECTED] wrote: unsubscribe list-unsubscribe: mailto:[EMAIL PROTECTED]

Re: FW: List of 700,000 IP addresses of virus infected computers

2007-09-14 Thread Nigel Frankcom
On Fri, 14 Sep 2007 09:07:32 -0700, Jeff Shepherd [EMAIL PROTECTED] wrote: My my - I criticize one of the noise makers by pointing out the meta-troll's silliness so Marc responds by blacklisting me. This is getting interesting in a psychological sense. {^_-}I'm still giggling over

Re: List of 700,000 IP addresses of virus infected computers

2007-09-13 Thread Nigel Frankcom
Don't feed the animals ? I must have been dreaming when I saw the post about this and OT posts (said he joining in an OT post)

Re: required module out of date (revised, sorry)

2007-09-09 Thread Nigel Frankcom
On Sun, 9 Sep 2007 08:32:29 -0700 (PDT), Geno [EMAIL PROTECTED] wrote: I sent the email too soon. My apologies. I'm not the owner of the server. My host uses Redhat Linux Enterprise 3 and I'm trying to install Spamassassin 3.2.3. I don't know much about linux and I'm trying to install this for

Re: Listowner?

2007-08-13 Thread Nigel Frankcom
On Mon, 13 Aug 2007 06:33:04 -0700, Evan Platt [EMAIL PROTECTED] wrote: I didn't see a header for a listowner contact.. I did see a 'help', but not sure if that goes to a human or not. I'm getting a OOO e-mail for every post to the list (yes, 3 so far, this will make 4) from Tom Stockton. I

Re: MS outlook can't read parsed email... HELP!!

2007-08-12 Thread Nigel Frankcom
On Sun, 12 Aug 2007 21:52:28 -0700, Evan Platt [EMAIL PROTECTED] wrote: At 08:19 PM 8/12/2007, lynk wrote: I'm totally confused re this spamassassin thingy... i can't seem to get MS outlook to read the email i received (spam/ham) after spamassassin(3.1.9) scanned the message. You posted this 2

Re: lottery spam as .doc files

2007-08-08 Thread Nigel Frankcom
On Wed, 08 Aug 2007 17:59:41 +0100, Martin.Hepworth [EMAIL PROTECTED] wrote: It's huge 660KB for the attachments... I'll dig out a place to drop it to.. I did wonder when the size trump card was gonna get played with SA. I guess it's now. Here's hoping the folk at SANE can help - they've done

Problem with 3.2.2 and mail headers in the email

2007-07-30 Thread Nigel Frankcom
Hi All, This morning I upgraded to 3.2.2 on CentOS 64 via yum. I'm now getting a copy of all email headers inside the body of the email. Everything --lint's clean and apart from this it's working fine. As an example I've copied in a list post below I received since the upgrade. Any help or

Re: Problem with 3.2.2 and mail headers in the email

2007-07-30 Thread Nigel Frankcom
in need of some advice. If you look at the stuff below this bit you'll see pretty clearly the problem I've got. If the dev's need to see raw messages (before SA gets them, let me know) TIA Nigel On Mon, 30 Jul 2007 11:56:53 +0100, Nigel Frankcom [EMAIL PROTECTED] wrote: Hi All, This morning I

Re: Problem with 3.2.2 and mail headers in the email

2007-07-30 Thread Nigel Frankcom
, it goes like this: wget http://.../Mail-SpamAssassin-3.2.2.tar.gz tar xvfz Mail-SpamAssassin-3.2.2.tar.gz cd Mail-SpamAssassin-3.2.2 [that patch command] perl Makefile.PL PREFIX=/usr make sudo make install --j. Nigel Frankcom writes: Ahh - so I'm guessing I need to pull

Re: graphic spam

2007-07-24 Thread Nigel Frankcom
On Tue, 24 Jul 2007 11:04:23 +0800, Spamassassin List [EMAIL PROTECTED] wrote: Hi, Other than FuzzyOCR, is there other way to filter graphic spams? I had ImageInfo but seem like it is not working. regards LC ClamD with http://www.sanesecurity.co.uk/ work pretty well here. Be sure and read

Re: graphic spam

2007-07-24 Thread Nigel Frankcom
On Tue, 24 Jul 2007 11:04:23 +0800, Spamassassin List [EMAIL PROTECTED] wrote: Hi, Other than FuzzyOCR, is there other way to filter graphic spams? I had ImageInfo but seem like it is not working. regards LC PS... also check out ImageInfo.pm http://www.rulesemporium.com/plugins.htm Nigel

Re: migrating from clamav before mta to SA ClamAV plugin experiences

2007-07-23 Thread Nigel Frankcom
On Mon, 23 Jul 2007 11:08:47 +0200, Matus UHLAR - fantomas [EMAIL PROTECTED] wrote: which MTA are you using? The clamav plugin should reject the e-mail the same way SA plugin does that (with much less CPU time spent) On 22.07.07 15:32, Robert - eLists wrote: Uhlar ... and I thought that

Re: migrating from clamav before mta to SA ClamAV plugin experiences

2007-07-23 Thread Nigel Frankcom
be imediately rejected, the same way it's rejected when SA tells so. On 23.07.07 10:19, Nigel Frankcom wrote: Umm, I may be missing the point here, you seem to be :-) but SA doesn't bounce mail, it just scores it. however according to his informations, his qmail queue scanner rejects the mail

Re: Iron Port experiences

2007-07-16 Thread Nigel Frankcom
On Sun, 15 Jul 2007 20:03:23 -0400, Patrick Sherrill [EMAIL PROTECTED] wrote: Has anyone any Iron Port experiences they could share? We appear to be losing a larger account to Iron Port and am curious regarding their No FP claims. Pat... I'd personally be very dubious of anyone claiming no

Re: Iron Port experiences

2007-07-16 Thread Nigel Frankcom
On Mon, 16 Jul 2007 02:22:40 -0500, Jeff Chan [EMAIL PROTECTED] wrote: Quoting Nigel Frankcom [EMAIL PROTECTED]: Quite apart from that, if Iron Port were so perfect, there wouldn't be a SpamAssassin list? Not quite sure I understand your comments. IronPort is one of many companies that use

Re: AWL disabled... maybe not

2007-07-08 Thread Nigel Frankcom
On Sun, 08 Jul 2007 19:30:29 +0200, Oenus Tech Services [EMAIL PROTECTED] wrote: Hi there! I've always had AWL disabled in my v310.pre file since sa 3.1.7. We recently moved from 3.1.8 to 3.2.1. It still is commented out in the cf file, but I'm getting AWL scores in messages. spamassassin -D

bayes bayes_sql_override_username

2007-07-07 Thread Nigel Frankcom
Hi All, Apologies if this has been mentioned and I've missed it, but I noted today that since upgrading from 3.2.0 to 3.2.1 bayes stopped working, or rather, bayes started ignoring the username etc passed from the local.cf. Using bayes_sql_override_username has resolved the issue. My worry

Re: Patch for rules_du_jour

2007-06-29 Thread Nigel Frankcom
On Fri, 29 Jun 2007 10:13:24 -0500, Lindsay Haisley [EMAIL PROTECTED] wrote: On Fri, 2007-06-29 at 06:46 -0700, jdow wrote: You will have to wait for up to a day for the Prolexic block to go away. I got blocked for checking out their anti-DDoS measures. The block went away in about 15

Re: Rulesemporium

2007-06-29 Thread Nigel Frankcom
On Fri, 29 Jun 2007 16:30:25 +0100, --[ UxBoD ]-- [EMAIL PROTECTED] wrote: Same here :( On Fri, 29 Jun 2007 11:28:51 -0400, Joe Zitnik [EMAIL PROTECTED] wrote: Is it having troubles again? I'm having problems reaching the site. -- This message has been scanned for viruses and dangerous

Re: Rulesemporium

2007-06-29 Thread Nigel Frankcom
On Fri, 29 Jun 2007 08:38:48 -0700, Jerry Durand [EMAIL PROTECTED] wrote: On Jun 29, 2007, at 8:30 AM, -- [ UxBoD ] -- wrote: Same here :( He announces a new, super dandy spam killing plugin and you think he wouldn't get a DoS attack? That's what happens when you do good work. :( True

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-28 Thread Nigel Frankcom
On Wed, 27 Jun 2007 16:42:39 -0400, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Nigel Frankcom wrote: On Wed, 27 Jun 2007 08:48:02 -0400, David Boltz [EMAIL PROTECTED] wrote: I?ve been getting the lint failures found below on my Rules Du Jour updates for a few weeks now. Yes this would

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-28 Thread Nigel Frankcom
Daryl is right, there is no fix due in 3.2.2 - I got the RDJ and the sa-update errors confused. I guess maybe I should dye my hair blonde. Apologies for any confusion I've caused. Geez - blonde it is - it's sa-compile not sa-update! I wonder if McDonalds have any jobs going :-/ Kind regards

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-27 Thread Nigel Frankcom
On Wed, 27 Jun 2007 08:48:02 -0400, David Boltz [EMAIL PROTECTED] wrote: I?ve been getting the lint failures found below on my Rules Du Jour updates for a few weeks now. Yes this would be since the DDoS attacks on rulesemporium. It looks like the same problem people have been having with the

Re: RulesDuJour lint failed. Updates rolled back.

2007-06-27 Thread Nigel Frankcom
On Wed, 27 Jun 2007 16:18:28 +0200, Matthias Haegele [EMAIL PROTECTED] wrote: Nigel Frankcom schrieb: On Wed, 27 Jun 2007 08:48:02 -0400, David Boltz [EMAIL PROTECTED] wrote: I?ve been getting the lint failures found below on my Rules Du Jour updates for a few weeks now. Yes this would

Re: no headers in email despite add_headers option

2007-06-26 Thread Nigel Frankcom
On Tue, 26 Jun 2007 08:01:46 +0200 (CEST), zbigniew szalbot [EMAIL PROTECTED] wrote: Hello, I am new to SA but hope you will be able to guide me. I have in my local.cf the following line: add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_

Re: training SA

2007-06-26 Thread Nigel Frankcom
On Wed, 27 Jun 2007 07:35:01 +0200 (CEST), zigniew szalbot [EMAIL PROTECTED] wrote: Hello, I tried to learn SA and used the following syntax: sa-learn --spam -f /usr/home/zbyszek/june.txt archive-iterator: unable to open Dear Valued Customer,: No such file or directory june.txt is a spam

Re: Setup SA to use mysql DB

2007-06-22 Thread Nigel Frankcom
S'cuse the top post but If you're going to the trouble of tarball -- RPM, why not just do yum install spamassassin? KR Nigel On Fri, 22 Jun 2007 10:11:14 -0500, Jonn R Taylor [EMAIL PROTECTED] wrote: What version of SA? When you built SA from a tarball you did rpmbuild -tb

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Nigel Frankcom
On Thu, 21 Jun 2007 03:07:52 -0400, Phil Barnett [EMAIL PROTECTED] wrote: Is anyone else getting these failed messages on their tripwire.cf updates? I've been getting this message for several days now. It looks to me like the new tripwire.cf is very broken. -- Forwarded Message

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Nigel Frankcom
On Thu, 21 Jun 2007 03:30:00 -0400, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Nigel Frankcom wrote: I've been getting the same for weeks. I ended up manually updating rules; especially the stock one since more and more seem to be slipping through. The problems seemed to start after

Re: Fwd: RulesDuJour Run Summary on taz5.fiberhosting.net

2007-06-21 Thread Nigel Frankcom
On Thu, 21 Jun 2007 09:38:03 +0200, Matthias Keller [EMAIL PROTECTED] wrote: Nigel Frankcom wrote: On Thu, 21 Jun 2007 03:07:52 -0400, Phil Barnett [EMAIL PROTECTED] wrote: Is anyone else getting these failed messages on their tripwire.cf updates? I've been getting this message

Question about sa-compile

2007-06-21 Thread Nigel Frankcom
Hi All, Whenever I run sa-compile I get the following... body_0.xs: In function `XS_Mail__SpamAssassin__CompiledRegexps__body_0_scan': body_0.xs:43: warning: ISO C90 forbids mixed declarations and code body_0.xs:51: warning: ISO C90 forbids mixed declarations and code body_0.xs:59: warning: ISO

RDJ Continued

2007-06-10 Thread Nigel Frankcom
Hi All, Apologies if this has been posted under another thread. If so can someone point me to it? As per recent instructions I'm running RDJ manually and getting this: Lint output: [27805] warn: config: failed to parse line, skipping, in /etc/mail/spamassassin/70_sare_adult.cf: html [27805]

Re: www.uribl.com

2007-06-07 Thread Nigel Frankcom
On Thu, 7 Jun 2007 10:33:15 +0100, Randal, Phil [EMAIL PROTECTED] wrote: www.rulesemporium.com isn't happy either :-( Cheers, Phil Yeah - I got this earlier The following rules had errors: TripWire had an unknown error: curl exit code: 7 curl: (7) couldn't connect 000 SARE Adult Content

Re: Difficulty trying to create a rule

2007-06-07 Thread Nigel Frankcom
On Thu, 7 Jun 2007 12:11:11 -0400, D.J. [EMAIL PROTECTED] wrote: Hello all! I've tried and tried, and can't get a rule I've handwritten to work. Hopefully you all can help. I've got a user using Alltel's picture messaging that keeps getting whacked every time he sends a message. It consistently

Re: A bit off topic for spamassassin but whats up with rulesemporium.com?

2007-06-07 Thread Nigel Frankcom
On Thu, 07 Jun 2007 19:26:59 +0200, arni [EMAIL PROTECTED] wrote: Kevin W. Gagel schrieb: I'm not able to get to www.rulesemporium.com, what's up there? Any one know? Do you read also or just write? rulesemporium is under suspected DDOD. They have requested that all users suspend

Re: A bit off topic for spamassassin but whats up with rulesemporium.com?

2007-06-07 Thread Nigel Frankcom
On Thu, 07 Jun 2007 18:41:49 +0100, Nigel Frankcom [EMAIL PROTECTED] wrote: On Thu, 07 Jun 2007 19:26:59 +0200, arni [EMAIL PROTECTED] wrote: Kevin W. Gagel schrieb: I'm not able to get to www.rulesemporium.com, what's up there? Any one know? Do you read also or just write? rulesemporium

Re: www.uribl.com

2007-06-06 Thread Nigel Frankcom
On Wed, 6 Jun 2007 20:07:20 +0200 (CEST), Raymond Dijkxhoorn [EMAIL PROTECTED] wrote: Hi! Anyone else having trouble getting to uribl ? www not coming up. I hope we aren't seeing another anti-spam casualty. :-( I unplugged the server so I could play Forza 2 on the 360 at work. I'll plug it

sa-compile

2007-05-30 Thread Nigel Frankcom
Hi All, This may well have been covered before, if so my apologies and can someone point me to the relevant thread. Is there anything to be concerned about with this lot? In particular the body_0.xs:43: warning: ISO C90 forbids mixed declarations and code lines [EMAIL PROTECTED] ~]#

Re: sa-compile

2007-05-30 Thread Nigel Frankcom
Thanks Justin. Been a tad manic here and I've not kept up with the lists lately. Kind regards Nigel On Wed, 30 May 2007 19:02:58 +0100, [EMAIL PROTECTED] (Justin Mason) wrote: Nigel Frankcom writes: Hi All, This may well have been covered before, if so my apologies and can someone

  1   2   3   4   >