Re: Question about a custom rule

2004-11-04 Thread Loren Wilton
rawbody LR_IMAGE_TAGGED_ASP =~ /\img width\=1 height\=1 src\=.*\.asp.*/i There are a couple of things to consider here. The first is that rawbody only gives the rule a single physical line of the message, so if the target you are looking for spans lines the rule will never hit. If your target

RE: Slightly OT: How to get Outlook To stop screwing messages up

2004-11-04 Thread Jason J. Ellingson
That's a new one for me. Cool. I tested it out. And sure enough... shut down Outlook 2003, made the registry hack for Outlook 2003 it suggested, started Outlook 2003, downloaded new emails and VOILA! When you view the headers, it now shows the complete original email source... looks like the

Re: Questions on Spamassassin deployment

2004-11-04 Thread Kevin W. Gagel
If you use amavis then you will not be able to use spamd/c. You will also loose the ability to FULLY manipulate the available headers in sa. If you write your own scripts then you can spamd/c. You will also be able to add any sa header you want. Amavis reads the spamassassin.pm and compiles it

Re: Memory issues have forced me back to 2.64

2004-11-04 Thread Rick Macdougall
jplesset wrote: SA 3.0.1, yes. So, because I see 11-12 processes, even with -m 3, what should I do about it? jay Hi, I'd check to make sure that you are actually running 3.x and that there are no old libraries around. I'm sure one of the devs will have better information. Regards, Rick

Re: Memory issues have forced me back to 2.64

2004-11-04 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 jplesset writes: Hopefully . . . I'm still hovering around 11 spamd processes. it goes up to 15, drops to 9, but seems to stay around 11 or so. Guys -- we've heard this occasionally. There should never be more than (--max-children) + 1 spamd

Re: Per-user capabilities

2004-11-04 Thread jdow
From: Loren Wilton [EMAIL PROTECTED] However you should examine what proportion of mail nowadays, arriving from the internet, *is* addressed to multiple users in the one SMTP transaction. This may appear to be a major failing, but in my experience it's just not, in real-world use. In

Re: Memory issues have forced me back to 2.64

2004-11-04 Thread Rick Macdougall
jplesset wrote: I'm very sure it's 3.0.1, yes. 2.xx didn't do this at all. I'm new to this forum, not sure what you mean by one of the devs. . . thank you jay Hi, Reply to the list as that is where the devs (the developers of SA) live. I'm just a user of SA, although I hope a cluefull user

Re: Does (Unix sockets) spamd still pipe the mail message?

2004-11-04 Thread Jason Haar
On Wed, Nov 03, 2004 at 11:43:30AM -0500, Theo Van Dinter wrote: On Wed, Nov 03, 2004 at 03:12:47PM +1300, Jason Haar wrote: It seems to me that could improve performance (a little bit) - a whole bunch of I/O could be skipped... It's the whole message. Most of the time spamc gets data

Should ALL_TRUSTED be doing this?

2004-11-04 Thread Jason Haar
Hi there I've been getting a fair amount of missed spam with SA-3.01 that looks like it would have been caught if it wasn't for ALL_TRUSTED. e.g. -2.8 ALL_TRUSTEDDid not pass through any untrusted hosts 0.2 RISK_FREE BODY: Risk free. Suuurr 0.8

Re: Memory issues have forced me back to 2.64

2004-11-04 Thread Gavin Cato
There should never be more than (--max-children) + 1 spamd processes running; if anyone can catch a server doing otherwise, and figure out *why*, we'd much appreciate it ;) This was a bit of a coincidence. Read this email this morning, and then 30mins ago my SA server slowed to a absolute

Re: Does (Unix sockets) spamd still pipe the mail message?

2004-11-04 Thread Dave Goodrich
Jason Haar wrote: On Wed, Nov 03, 2004 at 11:43:30AM -0500, Theo Van Dinter wrote: On Wed, Nov 03, 2004 at 03:12:47PM +1300, Jason Haar wrote: It seems to me that could improve performance (a little bit) - a whole bunch of I/O could be skipped... It's the whole message. Most of the time spamc

Re: Automatic rejection

2004-11-04 Thread Gavin Cato
Hi, I noticed the other day that the latest version of spamass-milter (I don't know how long the feature has been there) has a cmd line option to block mail that exceeds a certain score so this might help you if you are running sendmail. What I'd really like to do is to be able to define a

Re: Does (Unix sockets) spamd still pipe the mail message?

2004-11-04 Thread Jason Haar
On Wed, Nov 03, 2004 at 11:10:04PM -0500, Dave Goodrich wrote: What about those of us using spamd on another host? I would have to then access a file on a shared (NFS) volume. I can't believe that the IO of NFS would perform better than piping the message. But, I am just getting my teeth

Problems with lint check rules_du_jour

2004-11-04 Thread Dougie Nisbet
About a week ago my rules_du_jour cron job starting failing on the lint check. I'm running SA 2.64 on a Debian sarge system kernel 2.4.25. Here's the end of the errors I get if I run rules_du_jour in foreground. Lint output: Failed to parse line in SpamAssassin configuration, skipping:

spam from subdomain

2004-11-04 Thread Khalid Waheed
I am receiving spam from subdomain (example given below) of a domain listed in URBL. How to block this kind of email? -- deduct the cost for rx now value magnifier on rx meds it's far from a do-it-yourself pharmacy and leave

Re: spam from subdomain

2004-11-04 Thread Jeff Chan
On Thursday, November 4, 2004, 2:57:14 AM, Khalid Waheed wrote: I am receiving spam from subdomain (example given below) of a domain listed in URBL. How to block this kind of email? If you mean SURBL and urirhssub, SpamAssassin and SURBLs will reduce these to the registrar domain

Sa-learn gives strange errors

2004-11-04 Thread Chris Denton
Hi there, I have SpamAssassin running on my email gateway servers. After upgrading to 3.0.0 the following errors started appearing every time I run sa-learn: Argument 4.O isn't numeric in addition (+) at /usr/local/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf.pm line 244. Argument 4.O isn't

BAYES HAM FOLDER

2004-11-04 Thread Ronan
just to check am i right in thinking that the ham folder is there to expliicity stop false positives coming through the filters? ie based on domain or list or email address content etc or is that just a superficial explanation...? ronan

spamc/spamd failure

2004-11-04 Thread Michel Vanbreugel
Hi, On a Redhat 7.3 ( 2.4.20-28) with SA 3.0.1 : installation and filtering is good, but from time to time, each 3 or 4 days no more message is filtered, despite the spamd deamon is still active. - I try to upgrade the number of child process of spamd from 5 to 10 but keep the same problem ;

Re: Automatic rejection

2004-11-04 Thread Moussa Fall
OK, now I have spamassassin, clamav, amavisd-new installed with my RH9 and postfix. They all seem to work fine together. Lots of spam are stopped now. But still some are remaining. What can I do to improve its performance, please?

RE: Automatic rejection

2004-11-04 Thread Ronald I. Nutter
You probably wont stop all of them. I too am new to spamassassin and learn more each day. Look at www.rulesemporium.com for additional rules you can put in place to help block additional spam. Ron Ron Nutter

Re: SA 3.01 scoring very low

2004-11-04 Thread Sean Doherty
On Wed, 2004-11-03 at 21:40, Dave Goodrich wrote: Good afternoon, I just finished testing an upgrade of SA to 3.01 and my scores fell through the floor. Read the docs, tried to use the Wiki, followed everyone else's upgrade on the list. Not sure just what went wrong.

Re: BAYES HAM FOLDER

2004-11-04 Thread Matt Kettler
At 12:14 PM 11/4/2004 +, you wrote: just to check am i right in thinking that the ham folder is there to expliicity stop false positives coming through the filters? ie based on domain or list or email address content etc or is that just a superficial explanation...? What do you mean by ham

Re: Should ALL_TRUSTED be doing this?

2004-11-04 Thread Matt Kettler
At 04:20 PM 11/4/2004 +1300, Jason Haar wrote: I've been getting a fair amount of missed spam with SA-3.01 that looks like it would have been caught if it wasn't for ALL_TRUSTED. No, it should not. You have one of two problems: 1) SA is confused about trust. This typically happens if your

RE: Sa-learn gives strange errors

2004-11-04 Thread Candee Vaglica
-Original Message- From: Chris Denton [mailto:[EMAIL PROTECTED] Sent: Thursday, November 04, 2004 8:46 AM To: users@spamassassin.apache.org Subject: RE: Sa-learn gives strange errors Thanks very much for your help, Candee. Most welcome; glad I could help. It was indeed 4.o

Re: SA 3.01 scoring very low

2004-11-04 Thread Dave Goodrich
Sean Doherty wrote: On Wed, 2004-11-03 at 21:40, Dave Goodrich wrote: Good afternoon, I just finished testing an upgrade of SA to 3.01 and my scores fell through the floor. Read the docs, tried to use the Wiki, followed everyone else's upgrade on the list. Not sure just what went wrong.

Re: {SPAM} SA 3.01 scoring very low

2004-11-04 Thread Sean Doherty
On Wed, 2004-11-03 at 21:52, Matt Kettler wrote: At 04:40 PM 11/3/2004, Dave Goodrich wrote: Good afternoon, I just finished testing an upgrade of SA to 3.01 and my scores fell through the floor. Read the docs, tried to use the Wiki, followed everyone else's upgrade on the list. Not sure

Re: SA 3.01 scoring very low

2004-11-04 Thread Sean Doherty
On Thu, 2004-11-04 at 14:14, Dave Goodrich wrote: Sean Doherty wrote: On Wed, 2004-11-03 at 21:40, Dave Goodrich wrote: Good afternoon, I just finished testing an upgrade of SA to 3.01 and my scores fell through the floor. Read the docs, tried to use the Wiki, followed everyone

Re: SA 3.01 scoring very low

2004-11-04 Thread Matt Kettler
At 02:19 PM 11/4/2004 +, Sean Doherty wrote: Matt, does this mean that even if trusted_networks is set in local.cf, SpamAssassin will fire the ALL_TRUSTED rule even if it can't parse the received headers? i.e. Since there are no parsable received headers, SA will assume that all must have been

Re: SA 3.01 scoring very low

2004-11-04 Thread Dave Goodrich
Matt Kettler wrote: At 02:19 PM 11/4/2004 +, Sean Doherty wrote: Matt, does this mean that even if trusted_networks is set in local.cf, SpamAssassin will fire the ALL_TRUSTED rule even if it can't parse the received headers? i.e. Since there are no parsable received headers, SA will assume

Re: SA 3.01 scoring very low

2004-11-04 Thread Matt Kettler
At 09:54 AM 11/4/2004 -0500, Dave Goodrich wrote: Yes I just submitted a bug on the matter.. Currently ALL_TRUSTED fires whenever there are no untrusted relays detected.. However, it fails to check that any trusted relays exist... I opened this bug to suggest a fix for ALL_TRUSTED:

Re: SA 3.01 scoring very low

2004-11-04 Thread Dave Goodrich
Sean Doherty wrote: On Thu, 2004-11-04 at 14:14, Dave Goodrich wrote: Sean Doherty wrote: I will look into that, I didn't set it as I want no network to be trusted. I'll reread what I can find on that. Just set trusted_network 127.0.0.1 Yes, this fixed it. Since you hit ALL_TRUSTED certain other

Re: SA 3.01 scoring very low

2004-11-04 Thread Dave Goodrich
Thanks everyone, testing with several messages and comparing to 2.64 scores looks good now. Three issues, 1) My test message was munged and SA had problems parsing the headers. Used unmangled messages and SA parsed them fine. 2) Set trusted networks to 127.0.0.1, so no network is trusted. 3)

Re: SA 3.01 scoring very low

2004-11-04 Thread Sean Doherty
On Thu, 2004-11-04 at 15:04, Dave Goodrich wrote: Check out trusted_network section of Mail::SpamAssassin::Conf i.e no RBL tests on trusted networks. If you're running with DNS checks enabled, SpamAssassin includes code to infer your trusted networks on the fly, so this may not be

Bayesian Database Lock failure

2004-11-04 Thread Andrew Bates
I'm having a weird problem that shows up every day about 50 times in a burst. My logs show this: Nov 4 01:11:23 [EMAIL PROTECTED] spamd[12335]: Cannot open bayes databases /var/spool/filter/bayes/bayes_* R/W: lock failed: Interrupted system call Nov 4 01:11:23 [EMAIL PROTECTED] spamd[12335]:

RE: Should ALL_TRUSTED be doing this?

2004-11-04 Thread Matt Kettler
At 10:06 AM 11/4/2004, Mike Carlson wrote: Do you have to add private IP addresses to the trusted_networks list? I only added the public IP Addresses that are set up for our mail server but it does have a private IP and is being NAT'd. SA is going to see the IPs as the machine running SA sees

Re: SA 3.01 scoring very low

2004-11-04 Thread Matt Kettler
At 10:17 AM 11/4/2004, Sean Doherty wrote: JMHO, but shouldn't all networks be considered untrusted unless a user specifies otherwise? I got to agree with you there - especially given that the inference algorithm doesn't work in every environment. Unfortunately this only solves one aspect of the

PRocmail recipe problem and spamassassin not filtering correctly

2004-11-04 Thread hitete
Hi all, I use spamassassin 2.63 on fedora core 2. I have two problems : 1. Spamassassin does not flag all spam, although muy level is at 3. Sometimes he doesn't even have ONE hit on a spam message !!!. 2. I want to move the spam messages to a specific folder, how to do that ?. My

Spamassassin rules and qmail-scanner

2004-11-04 Thread max . ebert
Hi, i ve downloaded a lot of rules witch sounds to detectes the spam i got. I ve saved them in /etc/spamassassin. But now i still get all the spam like before. I really new sorry but should i activate them or is spamassassin looking by each mail in the /etc/spamassassin dir and check the mail

Re: PRocmail recipe problem and spamassassin not filtering correctly

2004-11-04 Thread Matt Kettler
At 10:53 AM 11/4/2004, [EMAIL PROTECTED] wrote: I use spamassassin 2.63 on fedora core 2. I have two problems : 1. Spamassassin does not flag all spam, although muy level is at 3. Sometimes he doesn't even have ONE hit on a spam message !!!. You're running a rather old version of SA, one which

Re: SA 3.01 scoring very low

2004-11-04 Thread Jim Maul
Matt Kettler wrote: At 10:17 AM 11/4/2004, Sean Doherty wrote: JMHO, but shouldn't all networks be considered untrusted unless a user specifies otherwise? I got to agree with you there - especially given that the inference algorithm doesn't work in every environment. Unfortunately this only

RE: URIDNSBL

2004-11-04 Thread Mike Carlson
I have attached a snippet of the output of spamd -D that talks about URIDNSBL debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8c75694) debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC

Re: Spamassassin rules and qmail-scanner

2004-11-04 Thread Martin Hepworth
Max local rules normally go in /etc/mail/spamassassin where you should also find a local.cf file. make sure the user that's calling spamassassin (or spamc etc) can read the files. No comment on the qmail side of things as it's not my thing. -- Martin Hepworth Snr Systems Administrator Solid

Re: SA 3.01 scoring very low

2004-11-04 Thread Dave Goodrich
Matt Kettler wrote: At 10:17 AM 11/4/2004, Sean Doherty wrote: JMHO, but shouldn't all networks be considered untrusted unless a user specifies otherwise? I got to agree with you there - especially given that the inference algorithm doesn't work in every environment. Unfortunately this only

Errors reading local.cf

2004-11-04 Thread Mike Carlson
Since I was in trying to figure out if URIDNSRBL was working I noticed a few more errors that were coming up: debug: config: SpamAssassin failed to parse line, skipping: rewrite_subject 1 debug: config: SpamAssassin failed to parse line, skipping: subject_tag (SPAM) _HITS_

Re: SA 3.01 scoring very low

2004-11-04 Thread Matt Kettler
At 11:14 AM 11/4/2004, Jim Maul wrote: While i agree that trusting no one doesnt really solve the problem, I dont believe it is just as bad as trusting everyone. Trusting everyone stops other rules from firing and adds atleast -2.something to every message. This seems far worse than trusting

Re: Errors reading local.cf

2004-11-04 Thread Matt Kettler
At 11:28 AM 11/4/2004, Mike Carlson wrote: Since I was in trying to figure out if URIDNSRBL was working I noticed a few more errors that were coming up: debug: config: SpamAssassin failed to parse line, skipping: rewrite_subject 1 debug: config: SpamAssassin failed to parse line,

SPAMASSASSIN ON RELAY HOST ???

2004-11-04 Thread hitete
If I want to install spamassassin on a SENDMAIL relay host that relays to an internal machine, how do I do ?. /hitete

RE: Errors reading local.cf

2004-11-04 Thread Mike Carlson
So I can remove those lines and change auto_learn to bayes_auto_learn? Speaking of bayes, I also noticed this error: debug: bayes: no dbs present, cannot tie DB R/O: /tmp/spamd-648-init/.spamassassin/bayes_toks I read a thread somewhere that said I really didnt have to worry about that

Re: SPAMASSASSIN ON RELAY HOST ???

2004-11-04 Thread Andrzej Adam Filip
[EMAIL PROTECTED] wrote: If I want to install spamassassin on a SENDMAIL relay host that relays to an internal machine, how do I do ?. You can use one of a few available milters.It will allow your sendmail to reject messages classified as spam in SMTP session. Rejecting in response to the final

Re: URIDNSBL

2004-11-04 Thread Bill Landry
- Original Message - From: Mike Carlson [EMAIL PROTECTED] I have attached a snippet of the output of spamd -D that talks about URIDNSBL debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8c75694)

Re: SPAMASSASSIN ON RELAY HOST ???

2004-11-04 Thread Andy Jezierski
[EMAIL PROTECTED] wrote on 11/04/2004 10:40:19 AM: If I want to install spamassassin on a SENDMAIL relay host that relays to an internal machine, how do I do ?. /hitete Fairly easy to do. Quite a few people on the list are doing this. Personally, I use milter-spamc available at

Re: spamd still burning CPU in 3.0.1

2004-11-04 Thread Ryan Pavely
We have a nice e-mail setup with 5 inbound mx boxes (Qmail + QmailScanner + ClamD), 4 spamd boxes, 2 outbound smtp, 1 imap/pop server, and a pq (problem queue) box that mx can re-route mail to if there is a customer issue. Every box is a Dual CPU: Intel(R) Xeon(TM) CPU 2.40GHz (2399.33-MHz

Re: SA 3.01 scoring very low

2004-11-04 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sean Doherty writes: On Thu, 2004-11-04 at 15:04, Dave Goodrich wrote: Check out trusted_network section of Mail::SpamAssassin::Conf i.e no RBL tests on trusted networks. If you're running with DNS checks enabled, SpamAssassin includes code

RBLs and Spamassassin for Webmin

2004-11-04 Thread hitete
Hi all, I've installed NET:DNS, but do I need to put an option in local.cf in order for SA to query RBLs ?. I've got many domains in my local.cf file... === I've got a webmin interface which is correctly configured. If I manage the SA level

ulimiting spamd?

2004-11-04 Thread Kai Schaetzl
I want to limit ressource usage of spamd with ulimit, but I'm unsure about what the ulimit options mean and how they translate to the spamd situation. I think mostly of the memory limit options. F.i. with a spamd process of about 95 MB (size 96540 RSS 94M Share 2308) using these memory limits

Re: SPAMASSASSIN ON RELAY HOST ???

2004-11-04 Thread Matt Kettler
At 11:40 AM 11/4/2004, [EMAIL PROTECTED] wrote: If I want to install spamassassin on a SENDMAIL relay host that relays to an internal machine, how do I do ?. Generaly you need a MTA layer integration like mimedefang, MailScanner, etc. Check the wiki.

spamd and spamd child

2004-11-04 Thread Greg Ennis
I just installed 3.0.1 to replace 2.63 and have noticed a tremendous improvement in speed. I am using a RH 8.0 system with spamc being executed by /etc/procmailrc. I have limited the child processes to 3, and noticed that the child processes do not appear to die although their time and dates do

Re: RBLs and Spamassassin for Webmin

2004-11-04 Thread Matt Kettler
At 12:30 PM 11/4/2004, [EMAIL PROTECTED] wrote: I've installed NET:DNS, but do I need to put an option in local.cf in order for SA to query RBLs ?. No. By default, SA will use RBLS provided that Net::DNS is installed and appears to be working (it tests with a quick DNS lookup of a major domain)

Re: SPAMASSASSIN ON RELAY HOST ???

2004-11-04 Thread Ron Johnson
[EMAIL PROTECTED] writes: If I want to install spamassassin on a SENDMAIL relay host that relays to an internal machine, how do I do ?. As others have said, easy enough. I'd suggest you start without SA -- simply ensure that the relay host can deliver to your internal host(s). We

Re: PRocmail recipe problem and spamassassin not filtering correctly

2004-11-04 Thread Greg Ennis
On Thu, 2004-11-04 at 09:53, [EMAIL PROTECTED] wrote: Hi all, I use spamassassin 2.63 on fedora core 2. I have two problems : 1. Spamassassin does not flag all spam, although muy level is at 3. Sometimes he doesn't even have ONE hit on a spam message !!!. 2. I want to move the spam

PROCMAILRC problem

2004-11-04 Thread hitete
Here is my procmailrc : == LOGFILE=/var/log/procmail.log DROPPRIVS=yes :0fw: * 256000 | /usr/bin/spamc -f :0: * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\* HERE I'D LIKE TO DELETE THE MESSAGE THAT HAVE THAT MUCH TAGS HOW IS IT

Re: Memory issues have forced me back to 2.64

2004-11-04 Thread Oban Lambie
Ok, this seems to be a *lot* more stable from a memory standpoint: spamd -m 3 --max-conn-per-child=3 But now I'm seeing this in my mail logs every few seconds: Nov 3 15:46:58 mail spamd[18881]: server hit by SIGCHLD Nov 3 15:46:58

Re: PROCMAILRC problem

2004-11-04 Thread Pete Conkin
- Original Message - From: [EMAIL PROTECTED] :0: * ^X-Spam-Level: \*\*\*\*\*\*\*\*\*\* HERE I'D LIKE TO DELETE THE MESSAGE THAT HAVE THAT MUCH TAGS HOW IS IT POSSIBLE You could send it to /dev/null using something like: { :0 /dev/null } Pete

webuserprefs-0.5.x

2004-11-04 Thread Roger Wolvington
Can anyone point me to a site where I can download webuserprefs-0.5? I've tried the author's site for a couple of weeks now but I can't get a response and it is not available on freshmeat.net now. Thanks, Roger -- Roger Wolvington

Re: Memory issues have forced me back to 2.64

2004-11-04 Thread Rick Macdougall
Oban Lambie wrote: I've now gone over 24 hours without a lock up and am thinking that I've got the correct servers and --max-conn-per-child configured. However, I am seeing a lot of these entries in the error logs (about 1 every 30 seconds)... Nov 4 11:26:31 mail spamd[14372]: server hit by

Re: Memory issues have forced me back to 2.64

2004-11-04 Thread jplesset
Oban, the log entry you see does not appear to be an error, but confirmation of what you set. Child processes are killed off after processing 3 messages. Then a new one is started. That's what you're seeing. jay Oban Lambie wrote: Ok, this seems to be a *lot* more stable from a memory

Re: Frustration...

2004-11-04 Thread Greg Ennis
On Thu, 2004-11-04 at 13:15, Lisa Casey wrote: Hi Folks, . . There has to be a easy way to learn to use this and get it to do what I want but I can't really figure it out. Surely there are some other ISP's on these lists who might be willing to tell me how they use it. Thanks, Lisa

Re: [OT] Frustration...

2004-11-04 Thread Kelson
Rick Macdougall wrote: How ever, a quick look at the mimedefang page tells me you want to do something like if($hits 15) return action_discard(); or something similar after calling the spamassassin check routine. Yes, that's the way to do it. Alternatively you can use action_bounce(),

Re: Frustration...

2004-11-04 Thread Yang Xiao
Hi, As a fellow newbie, I have struggled to get everything working for the past two weeks as well, and I can see you are having some of the same problem I had(still having), so here's my $0.02, hope it helps, and for the experts out there, please correct me if I'm wrong with any of my assumptions!

Re: Frustration...

2004-11-04 Thread Sandy S
Lisa wrote: Also, I'm not sure how I'm supposed to feed it spam. I have Sendmail/Qpopper and most of my users pick up their mail using Outlook Express. I understand I can't just forward spam to a spam mailbox and run sa-learn on that as the forwarding will not get the original headers. We've

Re: Frustration...

2004-11-04 Thread Jeff Koch
Hi Lisa: Hi Lisa: Spamassassin basically justs tags emails as spam. You need other programs like procmail to actually dispose of it. We run email for about 5000 domains and around 20,000 users. We use qmail with qmail-scanner for virus scanning and then vpopmail with qmailadmin, maildrop and

Re: spamd still burning CPU in 3.0.1

2004-11-04 Thread Rick Beebe
Spamd1 - 4 handle an average of 1.5 million messages per day, 810 per minute. Each box is configured to a max child of 128, and usually hover around 70% cpu idle, and 500 megs of ram free. Very impressive. I have a single spamd box, running 3.0.1, with four 3gHz Xeons and 4-gigs of memory. It's

Directory Confusion

2004-11-04 Thread J Thomas Hancock
I'm a little confused between the difference between the contents of the /usr/share/spamassassin folder and /etc/mail/spamassassin folder. It is my understanding that /usr/share/spamassassin should only contain the default filters that come with SA and /etc/mail/spamassassin should only contain

Re: Frustration...

2004-11-04 Thread Fred
Kris Deugau wrote: I'ld also like to drop, bounce, whatever mail that has certain words in the subject, such as rolex, penis, viagra, etc. *VERY*, **VERY** dangerous in an ISP environment!! I would STRONGLY recommend AGAINST this. It has far too much potential to backfire on you. We use

RE: Memory issues have forced me back to 2.64

2004-11-04 Thread David B Funk
On Thu, 4 Nov 2004, Kang, Joseph S. wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Thursday, November 04, 2004 1:10 PM To: Oban Lambie Cc: users@spamassassin.apache.org Subject: Re: Memory issues have forced me back to 2.64 BTW could you

RE: PROCMAILRC problem

2004-11-04 Thread marti
|-Original Message- |From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] |Sent: 04 November 2004 18:31 |To: users@spamassassin.apache.org |Subject: PROCMAILRC problem | |Here is my procmailrc : | |=== |===

Re: PROCMAILRC problem

2004-11-04 Thread Theo Van Dinter
On Thu, Nov 04, 2004 at 09:53:03PM -, marti wrote: || /usr/bin/spamc -f Not sure what the -f suffix is for, I see no such suffix in the man pages It's a deprecated option. It's accepted but doesn't do anything these days. fyi. -- Randomly Generated Tagline: I find this a nice feature but

Re: Frustration...

2004-11-04 Thread Kris Deugau
Please, don't CC me. I subscribe to the list. Fred wrote: We use action_bounce to stop mail from coming in for 5,000+ accounts and all of our customers love it. You will always have 1 person who doesn't want their mail scanned no matter what. It is doable in an ISP environment but it takes

RE: PROCMAILRC problem

2004-11-04 Thread Kang, Joseph S.
-Original Message- From: marti [mailto:[EMAIL PROTECTED] Sent: Thursday, November 04, 2004 3:53 PM To: [EMAIL PROTECTED]; Spamassassin Subject: RE: PROCMAILRC problem |-Original Message- |From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] |Sent: 04 November 2004

Ah, the irony. [Fwd: ScanMail Message: To Sender, sensitive content found and action taken.]

2004-11-04 Thread Kris Deugau
System Attendant wrote: Trend SMEX Content Filter has detected sensitive content. Place = ; mimedefang@lists.roaringpenguin.com; users@spamassassin.apache.org; ; mimedefang@lists.roaringpenguin.com Sender = Kris Deugau Subject = [Mimedefang] Re: Frustration... Delivery Time = November

Re: Directory Confusion

2004-11-04 Thread Kai Schaetzl
J Thomas Hancock wrote on Thu, 4 Nov 2004 15:21:15 -0600: It is my understanding that /usr/share/spamassassin should only contain the default filters that come with SA and /etc/mail/spamassassin should only contain custom filters. correct. They are not really filters, though, but rules.

Re: Frustration...

2004-11-04 Thread Rick Macdougall
Kai Schaetzl wrote: Lisa Casey wrote on Thu, 4 Nov 2004 14:15:20 -0500: I'ld also like to drop, bounce, whatever mail that has certain words in the subject, such as rolex, penis, viagra, etc. Please, do NOT bounce. You just bounce to other spam victims. If you don't bounce, what do you do ?

RE: Frustration...

2004-11-04 Thread Matthew.van.Eerde
Kai Schaetzl wrote: Lisa Casey wrote on Thu, 4 Nov 2004 14:15:20 -0500: I'ld also like to drop, bounce, whatever mail that has certain words in the subject, such as rolex, penis, viagra, etc. Please, do NOT bounce. You just bounce to other spam victims. Depends how you do it. If you

Re: Frustration...

2004-11-04 Thread Kevin W. Gagel
- Original Message Follows - To: users@spamassassin.apache.org Subject: Re: Frustration... Date: Thu, 04 Nov 2004 17:39:43 -0500 I'ld also like to drop, bounce, whatever mail that has certain words in the subject, such as rolex, penis, viagra, etc. Please, do NOT bounce. You just

Re: Frustration...

2004-11-04 Thread snowjack
On Thu, 04 Nov 2004 17:39:43 -0500, Rick Macdougall [EMAIL PROTECTED] said: If you don't bounce, what do you do ? /dev/nulling the message is not a real option since mail should never just vanish, and in the case of false positives, the sender would never get the rejection message. Some

Re: Frustration...

2004-11-04 Thread Rick Macdougall
Kevin W. Gagel wrote: - Original Message Follows - To: users@spamassassin.apache.org Subject: Re: Frustration... Date: Thu, 04 Nov 2004 17:39:43 -0500 I'ld also like to drop, bounce, whatever mail that has certain words in the subject, such as rolex, penis, viagra, etc. Please, do NOT