black list of words combos in subject

2009-02-25 Thread Tim Litwiller
Is there any rulesets or plugins that will let me make a word list that if there are 2 or more of the words in the list I can start to assign a score. I have several users that are getting a lot of porn spam and I have put in every ruleset that I have found to help with this. one of them

Re: is spamassassin using both processors?

2007-09-09 Thread Tim Litwiller
It is using both processors, after reading up on children and adjusting the startup script, it is doing much better. John Thompson wrote: Tim Litwiller wrote: We are running spamassassin on a Dual processor P4 Dell. How can I make sure that spamassassin is using both processors. Top

do I need to adjust something on AWL

2007-09-06 Thread Tim Litwiller
I just got a message back that I sent to a mailing list. It came back to me marked as Spam. So I looked at what caused it here is the headers X-Spam-ASN: AS1784 199.232.0.0/16 X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.2.0 (2007-05-01) on u15209210.onlinehome-server.com

is spamassassin using both processors?

2007-09-06 Thread Tim Litwiller
We are running spamassassin on a Dual processor P4 Dell. How can I make sure that spamassassin is using both processors. Top is showing spamd using between 39% and 89% of the processor constantly. there are times during the day when we are processing 1800+ email per hour after RBLs strip off

sa-compile ends with error

2007-05-09 Thread Tim Litwiller
is this a problem? Can't locate object method finish via package Mail::SpamAssassin::Timeout at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PluginHandler.pm line 234.

Re: sa-compile ends with error

2007-05-09 Thread Tim Litwiller
Daryl C. W. O'Shea wrote: Tim Litwiller wrote: is this a problem? Can't locate object method finish via package Mail::SpamAssassin::Timeout at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PluginHandler.pm line 234. Do you have the FuzzyOCR plugin installed? At least one version

Re: sa-compile ends with error

2007-05-09 Thread Tim Litwiller
Daryl C. W. O'Shea wrote: Tim Litwiller wrote: is this a problem? Can't locate object method finish via package Mail::SpamAssassin::Timeout at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PluginHandler.pm line 234. Do you have the FuzzyOCR plugin installed? At least one version

Re: sa-compile ends with error

2007-05-09 Thread Tim Litwiller
Daryl C. W. O'Shea wrote: Tim Litwiller wrote: Daryl C. W. O'Shea wrote: Tim Litwiller wrote: is this a problem? Can't locate object method finish via package Mail::SpamAssassin::Timeout at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/PluginHandler.pm line 234. Do you have

simple add address pattern to whitelist/blacklist script

2007-02-01 Thread Tim Litwiller
I'm not much of a coder but I needed something for a client so they didn't have to call me to add addresses to the whitelist or blacklist, I'm sure other here can improve on this but thought maybe someone else needs this also. ---code--- #!/bin/bash if [ ! $# == 2 ]; then echo Usage:%0

Re: sa-update versus rulesdujour questions

2006-10-18 Thread Tim Litwiller
I've never changed anything in local.cf when using RDJ - what did you have to change? Jo Rhett wrote: Hm. I'm surprised on no answers. Can I persist? This topic is of real interest to me... Jo Rhett wrote: Okay, there's no docs on this so I wanted to ask if someone has any insights

Re: sa-update versus rulesdujour questions

2006-10-18 Thread Tim Litwiller
... snip ... According to the home page for the script http://www.exit0.us/index.php?pagename=RulesDuJour Add a TRUSTED_RULESETS line to your config file that contains the names of the rulesets you chose. Example below: * TRUSTED_RULESETS=TRIPWIRE SARE_ADULT SARE_OBFU0 SARE_OBFU1

Re: FuzzyOCR Install - Issues processing ONLY Gif images.

2006-08-29 Thread Tim Litwiller
try changing your time out from 10 seconds to 15 or 20 and verify that giffix is installed and working correctly. libungif-utils rpm on fedora Michael Grey wrote: Installed FuzzyOCR and believe all the dependencies. Using the sample images I get a Pipe Error ONLY on gif images; resulting in

same name spams

2006-08-02 Thread Tim Litwiller
I am getting quite a few spams that even with most of the sare rules are sneaking in under 5 points. 4.7 - 4.9 one common thing I've noticed the last 2 days is 80% or so are addressed to more than one email address like this [EMAIL PROTECTED], [EMAIL PROTECTED] the part before the @ is

Re: GIF Spam -- Setting up the 'OCR scanner and image validator SA-plugin'

2006-08-02 Thread Tim Litwiller
results - are very good on my preliminary tests. these two spams look exactly the same in my email program except the subject line here is a spam before ---snip--- From - Wed Aug 02 22:29:15 2006 X-Mozilla-Status: 0001 X-Mozilla-Status2: X-Spam-Checker-Version: SpamAssassin 3.1.1

Re: AW: WebGUI for Spamassassin?

2006-05-12 Thread Tim Litwiller
That looks good - do you know of any distribution that installs it by default? Christian Reiter wrote: Hi Patrick! is there any WebGUI for training and managing Spamassassin like DSPAM uses one? May Maia Mailguard could help you: http://www.renaissoft.com/maia/ Kind Regards

Re: OT: anyone know how to do server-side MS-Exchange filters?

2006-05-10 Thread Tim Litwiller
When you create filters in outlook connected to exchange you can chose if the filter is server or client side. disclaimer - I don't know what versions of outlook or exchange are required to make it work. at my previous job where we had exchange I had outlook 2000 and I don't know what version

Re: OT: Thunderbird 1.5 integratgion

2005-09-25 Thread Tim Litwiller
Ajay Sharma wrote: Steven Stern wrote: The release notes for Thunderbird 1.5 (beta) say Integration with server side spam filtering. Does anyone know what this means or how it might work with SpamAssassin? You can configure Thunderbird to check for the SpamAssassin headers and

Re: Spamc, spamassassin, different scores

2005-09-06 Thread Tim Litwiller
Miguel Angel Rasero Peral (TCOR) wrote: Hello, my system is a redhat 7.3 with this spamassassin versions and i am using qmail in it. The problem that i have is that i only want to launch spamassassin in my account so i am using my .qmail-file to do it. | spamassassin | preline procmail -t -m -p

Re: Please test sc2.surbl.org (and xs.surbl.org)

2005-07-25 Thread Tim Litwiller
jdow wrote: From: "Jeff Chan" [EMAIL PROTECTED] Here are SpamAssassin 3.0.1 and later configs for using these two lists: urirhsbl URIBL_SC2_SURBL sc2.surbl.org. body URIBL_SC2_SURBL eval:check_uridnsbl('URIBL_SC2_SURBL') describe URIBL_SC2_SURBL Has URI in SC2 at

Re: Please test sc2.surbl.org (and xs.surbl.org)

2005-07-25 Thread Tim Litwiller
Jeff Chan wrote: On Monday, July 25, 2005, 3:11:40 PM, Tim Litwiller wrote: this is what it took to make it work for me _urirhssub_ URIBL_SC2_SURBL sc2.surbl.org. A127.0.0.2 body URIBL_SC2_SURBL eval:check_uridnsbl('URIBL_SC2_SURBL') describe URIBL_SC2_SURBL Has

Re: Distinguishing between mail that is almost certainly or probably spam

2005-07-12 Thread Tim Litwiller
ay Lee wrote: Richard Duran wrote: Hello, I'm not sure if this belongs in the dev-list or not, but we have made some minor changes to SA in order for us to allow our users to create separate filters for mail that we consider to be almost certainly spam, versus mail that is probably spam.

Re: Distinguishing between mail that is almost certainly or probably spam

2005-07-12 Thread Tim Litwiller
My users can find the 14 and change it easier than counting *'s and if I want to I can template the file and expand the correct score to each user easier with a number than with a bunch of *'s Jay Lee wrote: Tim Litwiller wrote: this is the way I've been doing it in procmail - then I

Re: special chars in subject + .procmailrc

2005-06-28 Thread Tim Litwiller
Chris Thielen wrote: Pál László (Sq.) wrote: I also would like to remove spams over a certain level, so I'v created the following .procmailrc entry :0 * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\* /dev/null It seems not working. What is the problem? Looks fine to me. Is that recipe in your

sa-learn from imap

2005-05-27 Thread Tim Litwiller
I needed to get this working this week and found the RemoteImapFolder wiki page. I decided to use that method here are the steps I did to make this work for me. I use qmail instead of cyrus so needed to change the redelivery method also. I don't have a username on the wiki and thought I see if

Re: How to block rolex spam

2004-12-03 Thread Tim Litwiller
Same as I am - hmm. ok, check the /etc/mail/spamassassin.init.pre file for this list loadplugin Mail::SpamAssassin::Plugin::URIDNSBL Andrew Xiang wrote: 3.01 - Original Message - From: Tim Litwiller [EMAIL PROTECTED] To: Andrew Xiang [EMAIL PROTECTED] Sent: Thursday, December 02, 2004 7

Re: How to block rolex spam

2004-12-02 Thread Tim Litwiller
Ronald I. Nutter wrote: I have been getting bombarded by spam trying to sell me Rolex watches of X-Spam-Status: No, hits=5.562 tagged_above=2 required=6.31 tests=BAYES_50, RAZOR2_CF_RANGE_51_100, RAZOR2_CHECK, RCVD_IN_BL_SPAMCOP_NET, RCVD_IN_DSBL, RCVD_IN_SORBS_HTTP, RCVD_IN_SORBS_MISC

Re: since 3.0.0 I've been getting these

2004-11-02 Thread Tim Litwiller
Theo Van Dinter wrote: On Mon, Nov 01, 2004 at 05:17:34PM -0600, Tim Litwiller wrote: Nov 1 17:38:42 mailhost spamd[15700]: Use of uninitialized value in numeric lt () at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 204, GEN362 line 52. Nov 1 17:38:42 mailhost spamd

spamassassin stats from the new log file format

2004-10-01 Thread Tim Litwiller
I've been admiring the new logging that SA 3.* does and wondered if anyone has rewritten thier stats packages to take advantage of this yet. Especially the logging of the tests that hit. Also I haven't found yet where it details what each section of the log file line is - most parts are