Re: Rule to check a specific language

2007-01-20 Thread Sander Holthaus
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sander Holthaus wrote: Theo Van Dinter wrote: On Thu, Jan 18, 2007 at 01:59:47AM +0100, Sander Holthaus wrote: But how do I do this for just one specific language? I use the TextCat ok_languages nl in _LANGUAGES_, so I want a rule that checks

Rule to check a specific language

2007-01-17 Thread Sander Holthaus
' (bit silly to use /^nl$/). But I can't seem to find anywhere how to put that in a rule, since they all check aganiast things like header, body, full, etc. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (MingW32

Re: Rule to check a specific language

2007-01-17 Thread Sander Holthaus
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Theo Van Dinter wrote: On Thu, Jan 18, 2007 at 01:59:47AM +0100, Sander Holthaus wrote: But how do I do this for just one specific language? I use the TextCat ok_languages nl in _LANGUAGES_, so I want a rule that checks if _LANGUAGES_ eq 'nl

Re: Bank Of A FP

2007-01-15 Thread Sander Holthaus
be a sign of more wider problems (poisoned Bayes database?) Where's the !all in that record.. I don't see it.. do you? I still find it odd that a bank does not have more stringent SPF-records. I expected to see -all in there. What does !all mean anyway? Kind Regards, Sander Holthaus -BEGIN PGP

Re: Instable Spamassassin

2007-01-09 Thread Sander Holthaus
as it will create a lot of about on a busy box) * making sure Perl and all Perl-modules are up-to-date * make sure you have enough RAM and running children For more detailed suggestions, you should post more about your setup (hardware, OS, versions, perl-thingy's, mail-volume, etc) Kind regards, Sander

Re: spamhaus' PBL is now *active* (in beta ... but still active). now what?

2007-01-07 Thread Sander Holthaus
directly to deliver mail (which is something most ISP's block btw) you shouldn't be in trouble. But you can always check your IP's against the ZEN-blocklist (something you should do or automate in any case) and optionally request an unblock. Kind regards, Sander Holthaus -BEGIN PGP SIGNATURE

Re: remove known-postmaster entries from AWL?

2007-01-06 Thread Sander Holthaus
of the original message). If you can't find any of your relays, it is almost certainly a false bounce. Using something like SPF for your domains might help too btw. And make sure to avoid catch-all addresses. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6

Re: localhost bypass?

2007-01-02 Thread Sander Holthaus
127.0.0.1 is neither trusted or internal, as it is the host running spamassassin or it refers to an external trusted host. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (MingW32) iD8DBQFFmjyTVf373DysOTURAs0zAKCsEg94xA6xSFsdXmLgpGOckoHe3wCbBtI5 H4fz32eweu9F2lMr78D9M1Q

Re: sa-update problem...

2007-01-02 Thread Sander Holthaus
/ does make more sense. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (MingW32) iD8DBQFFmpTEVf373DysOTURAnnWAJ97EsPW1Qao3YyYLdhGEgRdNDRl3wCgiPe6 Du2h1zxgRkilDbrcAZwS6cs= =fdS4 -END PGP SIGNATURE-

Re: RBLs

2006-12-29 Thread Sander Holthaus
it's actually catching before the stuff I was already using :-) zen != xbl-sbl. It is xbl-sbl-pbl. AFAIK, the PBL's aren't active, but will be in near future. You might want to change the scoring for PBL-entries. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6

Re: test of HELO addresses

2006-12-23 Thread Sander Holthaus
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Rudd wrote: Michael Scheidell wrote: -Original Message- From: John van Oppen [mailto:[EMAIL PROTECTED] Is there a test that already does this? SPF I sure hope the SPF module is NOT using the HELO string for checking. That would

(Anti) Spam headers of various scanners

2006-12-22 Thread Sander Holthaus
in the above list (SpamAssassin 3.1.7) Does anyone know of a good online resource of AntiSpam headers + examples or has anyone got a recent up-to-date list themselves? Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (MingW32

Re: How to train SpamAssassin to catch this kind of spam

2006-06-05 Thread Sander Holthaus
tests (rbl's, surbl's, dcc, razor, pyzor). The SpamAssassin wiki and the mailling-list archives should point you in the right direction. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (MingW32) iD8DBQFEhBNlVf373DysOTURAr8eAJwI8MrGQot5LQ6uKTzKmWE8EjfhrgCeMuGa

[RESEND] Re: How to train SpamAssassin to catch this kind of spam

2006-06-05 Thread Sander Holthaus
Also, I even saw in the header that it Autolearned it as HAM - so this may be even worse, isn't it? Any help is highly appreciated. Thank you Christoph On 05.06.2006, at 13:24, Anthony Peacock wrote: Hi, Sander Holthaus wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Christoph

Re: How to train SpamAssassin to catch this kind of spam

2006-06-05 Thread Sander Holthaus
configuration performs well without Bayes. I would also suggest to keep an eye on what is auto-learned the first few days / weeks (depends on the traffic you receive) though that may or may not be possible due to the privacy of your customers. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE

Re: SpamAssassin Woes

2006-04-10 Thread Sander Holthaus
(or better, on a per account basis). SARE has some very good rules. The SpamAssassin Wiki should help you out further. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (MingW32) iD8DBQFEOnDiVf373DysOTURAgIFAJ47fscgLgPAWiCYHmQC3JkEHhMRgQCghOUU

Re: TAG a special message ?

2006-03-27 Thread Sander Holthaus
for your help, To mark it as ham or as spam??? Read the manual section on black- and whitelisting, it should get you pretty far. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (MingW32) iD8DBQFEKCgVVf373DysOTURAhQRAJ481mHBQLJdofnyOIqYTHolEAng9QCg02v1

Re: Training SA with Thunderbird Junk folder

2006-03-24 Thread Sander Holthaus
-based sollution is that the user is authenticated (provided you set it up correctly). Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (MingW32) iD8DBQFEJAP6Vf373DysOTURArOVAJ91dXwfG1puzqTP/qXhWk848Ca3JACggnea qA2JXSGsngZmr3rsNHMJ8WQ= =ZHDo -END PGP SIGNATURE-

Re: its not spam

2006-03-24 Thread Sander Holthaus
=) You should read the manual to set some specific options such as whitelisting. But, why are they tagged as SPAM? It usually has a reason :-) Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (MingW32) iD8DBQFEJEtOVf373DysOTURAnZCAJ4m3jaok9hVgUyqwC

Re: INVALID_DATE

2006-03-23 Thread Sander Holthaus
, be very familiar with RFC's and have no problem with changing the outgoing date format. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (MingW32) iD8DBQFEIriQVf373DysOTURAiXBAJ4l23VJjXov7yI1CpSfEJv1N2UR3gCcD4et HvuT/J7BLSzQqKDnxk/KnLY= =2SJa -END PGP SIGNATURE-

Re: Training SA with Thunderbird Junk folder

2006-03-22 Thread Sander Holthaus
back on the maillinglist, you should be able to find a discussion on using IMAP-folders to train SA. Might be helpfull as well. Kind Regards, Sander Holthaus -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2.2 (MingW32) iD8DBQFEIXFJVf373DysOTURAnX3AKCqCUoeQnBQLNBeKTJTWiq4qXY7OQCg63Rm

Re: SPF penetration

2006-03-21 Thread Sander Holthaus
to help against spam/phising/virusses, but that is it. It won't or can't stop them, and it wouldn't surprise me if actively rejecting SPF-fails has the similar effects as strict RFC-enforcement or double reverse DNS-lookup. Lots less spam and lots more false positives. Kind regards, Sander Holthaus

RE: Spamd dies after tcp timeout

2005-09-28 Thread Sander Holthaus - Orange XL
I did some more digging, and I also find the following entry several times in the maillog: prefork: select returned undef! recovering Spamd is currentlty die-ing twice a day :-| Never had any problem with any other version in this regard... Kind Regards, Sander Holthaus - Orange XL

Spamd dies after tcp timeout

2005-09-27 Thread Sander Holthaus - Orange XL
of such problems with SpamAssassin 3.0.x or 2.xx I'm using SpamAssassin on FreeBSD 4.10 with Perl 5.8.5 installed. Kind Regards, Sander Holthaus

Empty/trusted href's in spam

2005-09-01 Thread Sander Holthaus - Orange XL
installed with the option follow-url's). Kind Regards, Sander Holthaus

RE: phish/bayes

2005-08-28 Thread Sander Holthaus - Orange XL
to recognize this site. Kind Regards, Sander Holthaus From: Greg Allen [mailto:[EMAIL PROTECTED] Sent: Sunday, August 28, 2005 12:19 PMTo: satalk; users@spamassassin.apache.orgSubject: RE: phish/bayes I wouldn't worry about it. You can whitelist the real ebayservers

RE: spurious __alarm__ messages in spamd log

2005-08-20 Thread Sander Holthaus - Orange XL
bits, meaning they can time out even though the called app ran succesfull (but took long, but still less than the specified timeout by the user). Kind Regards, Sander Holthaus

RE: How to reenable DCC and Razor (was RE: ANNOUNCE: SpamAssassin 3.1.0-rc1 release candidate available!)

2005-08-14 Thread Sander Holthaus - Orange XL
Dan Kohn wrote: Justin said: - - Razor: disable Razor2 support by default per our policy, since the service is not free for non-personal use. It's trivial to reenable. But is that correct? As far as I can know, it is free to use for non-personal use. Kind Regards, Sander Holthaus

RE: DCC vs Razor2

2005-08-10 Thread Sander Holthaus - Orange XL
%) -- URIBL_SBL ( 54%) URIBL_SC2_SURBL ( 51%) URIBL_OB_SURBL ( 51%) URIBL_XS_SURBL ( 47%) Kind Regards, Sander Holthaus

RE: [sa-list] Re: spamd children run as root (again)

2005-08-09 Thread Sander Holthaus - Orange XL
sometimes), it will change the owner of one of the bayes_ files or bayes.mutex to root. :-? Sander Holthaus Dan Mahoney, System Admin wrote: On Tue, 9 Aug 2005, Craig McLean wrote: I applied the patch, and it fixed things on my end. I noted in my PR that it was also odd to me that before

RE: Install Issue

2005-08-01 Thread Sander Holthaus - Orange XL
and better than this maillinglist btw ;-) Kind regards, Sander Holthaus PS: Sorry for the short answer, but answering it completely would be somewhat offtopic and long. More important, you will learn much more by finding the answer yourself (including learning how to find answers :-) ).

RE: Please test sc2.surbl.org (and xs.surbl.org)

2005-07-29 Thread Sander Holthaus - Orange XL
%) RCVD_IN_NJABL_DUL ( 30%) Kind Regards, Sander Holthaus

RE: RBL lookup failures

2005-07-26 Thread Sander Holthaus - Orange XL
-detection ratio, much better than rbl's/uribl's. Kind Regards, Sander Holthaus

RE: How can I correct this FalsePositive?

2005-07-15 Thread Sander Holthaus - Orange XL
the sender. But with a 2.0 point-level for spam, you'll always gonna have some FP's. Kind Regards, Sander Holthaus

RE: sa-learn user

2005-07-14 Thread Sander Holthaus - Orange XL
, etc. Mastering the basic *nix commands can make your live a lot easier and save you a lot of time googling or scouring/posting mailinglists ;-) If your are serious about spamassassin and/or system administration, some reference books (O'Reilly) can also be of great help. Kind Regards, Sander

RE: How to shut down

2005-07-12 Thread Sander Holthaus - Orange XL
stop them, your best option is to use them. Where they live depends on your platform and distribution, use the supplied documentation, the man command and google to find out exactly where. If you don't want it to run at all at bootup, disable the script (various ways of doing that). Kind Regar

RE: simultaneous sa-learn processes

2005-07-11 Thread Sander Holthaus - Orange XL
JamesDR wrote: Chavdar Videff wrote: Hi List, Our mailserver server serves about 100 users. Our config: Sendmail+Procmail+SpamAssassin. The question is: If I got it right, we should run sa-learn for each user in order to benefit from bayes. We intend to run a cron job for each user and do

RE: Scoring - Display none

2005-07-08 Thread Sander Holthaus - Orange XL
. They will disappear. Persnally, I don't use that port, though I do use some of it's rulesets. Best way is to install a script that updates your custom rules-sets on a more regular basis (though only a few actually need that). Kind Regards, Sander Holthaus

RE: spamassassin --lint ....how long does it take?

2005-07-07 Thread Sander Holthaus - Orange XL
I downloaded many of the SARE rulesets (not bigevil however), and I am running spamassassin -D --lint. It seems like it is taking a very long time to run. Is this typical or am I hosed? I am running it on a test system (non-production) so it is not currently a serious problem, but I

RE: ALL_TRUSTED and Razor, DCC and Pyzor

2005-07-07 Thread Sander Holthaus - Orange XL
to which doesn't require filtering nor anything like AWL(learning or Bayes(learning)). Kind Regards, Sander Holthaus -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Friday, July 08, 2005 12:33 AM To: Theo Van Dinter Cc: users@spamassassin.apache.org Subject: Re

RE: Autolearn problem

2005-07-06 Thread Sander Holthaus - Orange XL
Hi, These are the lines in my local.cf: bayes_path /home/sharedspam/.spamassassin/bayes auto_whitelist_path /home/sharedspam/.spamassassin/auto-whitelist bayes_file_mode 777 auto_whitelist_file_mode 777 lock_method flock 777 is rather insecure... What's the output of ls -al on your

RE: dcc / razor

2005-07-05 Thread Sander Holthaus - Orange XL
, Sander Holthaus -Original Message- From: Ronan McGlue [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 05, 2005 6:48 PM To: SPAMASSASSIN Subject: dcc / razor what is the official stance on using razor/dcc for not personal use. I've looked at the 3.1 docs and its off by default. I

RE: autolearn=failed

2005-07-05 Thread Sander Holthaus - Orange XL
File-permission issue? From: Michael [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 05, 2005 6:21 PMTo: users@spamassassin.apache.orgSubject: autolearn=failed When I receive spam msgs I have this line in headers autolearn=failed .I tried to look it on wiki but I

RE: dcc / razor

2005-07-05 Thread Sander Holthaus - Orange XL
that anyone not paying license fee's has absolutely no guarentee that the service will remain reliable. Kind Regards, Sander Holthaus

RE: Domain of the sender does not resolve

2005-02-25 Thread Sander Holthaus - Orange XL
had a similar problem recently and it turned out the DNS-server was bricked. Kind Regards, Sander Holthaus PS: This message doesn't really belong on the SpamAssassin mailinglist...

RE: spamd hanging or looping

2005-02-15 Thread Sander Holthaus - Orange XL
submitting a bugreport, upgrade perl and related modules to their latest versions. Also save your db-files and the related messages (which can be handy if it is indeed an unresolved bug). Kind Regards, Sander Holthaus PS: What OS and which Perl-version are you using?

RE: Less spam blocked with 3.02 - AWL-related?

2005-02-14 Thread Sander Holthaus - Orange XL
On Fri, Feb 11, 2005 at 10:37:06AM -0500, Chris Santerre wrote: 4) Can you share the output from a --lint with us? $ spamassassin --lint [EMAIL PROTECTED]:~$ What about spamassassin -D --lint? Kind Regards, Sander Holthaus LOL, yeah I need to start typing exactly

RE: Less spam blocked with 3.02 - AWL-related?

2005-02-11 Thread Sander Holthaus - Orange XL
4) Can you share the output from a --lint with us? $ spamassassin --lint [EMAIL PROTECTED]:~$ What about spamassassin -D --lint? Kind Regards, Sander Holthaus

RE: Humor: The Ultimate Spam Email

2005-02-11 Thread Sander Holthaus - Orange XL
-add SARE_FRAUD as a extra ruleset to SpamAssassin? Kind Regards, Sander Holthaus

RE: Less spam blocked with 3.02 - AWL-related?

2005-02-10 Thread Sander Holthaus - Orange XL
for both ham and spam. Otherwise, it may backfire. Without any extra rule-sets and or various net-lookups (SPF, SURBL, etc), I can't indeed imagine that it will work... Also, the AWL-factor may need some tuning, in order to have a possitive effect. --Chris Kind Regards, Sander Holthaus

broken line in maillog

2005-02-04 Thread Sander Holthaus - Orange XL
Regards, Sander Holthaus

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Sander Holthaus - Orange XL
not sure that learning spam-assassin using forwarded messages that may or may not be in the original format as SpamAssassin received them the first time is a good idea. But I don't have enough knowledge of SpamAssassin's internal workings and it's bayes-filter to be sure... Kind Regards, Sander

RE: Relay Country

2005-02-04 Thread Sander Holthaus - Orange XL
is as to why you are not seeing any evidence, it is used in the bayes-filter. The only thing you could observe is a slight improvement in bayes-scores. Kind regards, Sander Holthaus

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Sander Holthaus - Orange XL
--On 02/04/05 16:08:53 +0100 Sander Holthaus - Orange XL wrote: Basically, I've got two option. All mail that is received is backupped on the mailserver before adding any headers. I could match those with mail received in the spam-learn and ham-learn accounts. However, mail

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Sander Holthaus - Orange XL
: --On 02/03/05 01:59:21 +0100 Sander Holthaus - Orange XL wrote: I've been interested in offering customers to train manually train the SpamAssassin Bayes filter for ham and spam (to reduce false positives and negatives). However, I can only find documentation to this for local

RE: Manually training SpamAssassin by forwarding mail

2005-02-04 Thread Sander Holthaus - Orange XL
wrote: Kevin Sullivan wrote: --On 02/03/05 01:59:21 +0100 Sander Holthaus - Orange XL wrote: I've been interested in offering customers to train manually train the SpamAssassin Bayes filter for ham and spam (to reduce false positives and negatives). However, I can only find

Attempt to free unreferenced scalar: SV 0xbb91874.

2005-02-03 Thread Sander Holthaus - Orange XL
Yesterday, I saw the following message in my logs after shutting down spamd: Attempt to free unreferenced scalar: SV 0xbb91874. I have no clue as to what is means. Can anyone enlighten me? I'm using SpamAssassin 3.02, Perl 5.8.5 and FreeBSD 4.10 Kind Regards, Sander Holthaus

RE: Manually training SpamAssassin by forwarding mail

2005-02-03 Thread Sander Holthaus - Orange XL
At 07:59 PM 2/2/2005, Sander Holthaus - Orange XL wrote: I've been interested in offering customers to train manually train the SpamAssassin Bayes filter for ham and spam (to reduce false positives and negatives). However, I can only find documentation to this for local mailboxes

SpamAssassin 3 memory usage

2005-02-03 Thread Sander Holthaus - Orange XL
of that 50MB per child actually shared? Kind Regards, Sander Holthaus

RE: bayes: bayes db version 2 is not able to be used, aborting!

2005-02-03 Thread Sander Holthaus - Orange XL
(such as bayes) whereas 3.02 started using root's homedir. Kind Regards, Sander Holthaus -Original Message- From: Kevin Blackwell [mailto:[EMAIL PROTECTED] Sent: Thursday, February 03, 2005 8:48 AM To: users@spamassassin.apache.org Subject: bayes: bayes db version 2 is not able to be used

RE: Odd subject line spam

2005-02-03 Thread Sander Holthaus - Orange XL
for the body. Mangled, Chickpox and SARE_adult all hit on that line. Kind Regards, Sander Holthaus