Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Per Jessen
Matt Kettler wrote: For some reason one of my domains has all of a sudden been listed in the above listed db. Which is rather ironic since there are only 3 active accounts at this domain. 1 used for a couple of mailing lists, 1 - postmaster (inbound email only) and 1 domain contact address

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Jeff Chan
Quoting Per Jessen [EMAIL PROTECTED]: Matt Kettler wrote: For some reason one of my domains has all of a sudden been listed in the above listed db. Which is rather ironic since there are only 3 active accounts at this domain. 1 used for a couple of mailing lists, 1 - postmaster (inbound email

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Jeff Chan
Also, the sa-blacklist inclusion policy is at: http://www.stearns.org/sa-blacklist/README.policy Jeff C.

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Per Jessen
Jeff Chan wrote: Quoting Per Jessen [EMAIL PROTECTED]: I don't use it, but it could very easily be turned into an rbldnsd format list - I'm surprised nobody's done that yet. (assuming there's some actual use for the list). sa-blacklist is the basis of ws.surbl.org:

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread mouss
Matt Kettler wrote: Dale's Stuff wrote: Hello, Trying to figure out what the criteria is for getting a domain listed in sa-blacklist.current, and more importantly how to be de-listed. List: AFAIK, you only need to be the From: address on spam sent to one of Will Stern's spamtrap. isn't

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Matt Kettler
Jeff Chan wrote: Quoting Per Jessen [EMAIL PROTECTED]: Matt Kettler wrote: For some reason one of my domains has all of a sudden been listed in the above listed db. Which is rather ironic since there are only 3 active accounts at this domain. 1 used for a couple of mailing lists, 1 -

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Matt Kettler
mouss wrote: Matt Kettler wrote: Dale's Stuff wrote: Hello, Trying to figure out what the criteria is for getting a domain listed in sa-blacklist.current, and more importantly how to be de-listed. List: AFAIK, you only need to be the From: address on spam sent to one of Will Stern's

sa-update errors

2008-02-14 Thread Arthur Dent
Hello all, I run a bog-standard out-of-the-box (Fedora 8) SA (v.3.2.4) installation. Every night I run: sa-update --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --gpgkey 856AA88A /sbin/service spamassassin restart as a cron job. Never been a problem before. But this morning I

RE: False positive with scoring I don't understand

2008-02-14 Thread Bowie Bailey
Jari Fredriksson wrote: AWL should be renamed ABL, if it can produce such scores. Must be pain. It is not well named, but think of it as a score balancer. It attempts to adjust the score towards the average score seen previously for a sender. If someone who has sent good mail in the past

Re: what are the criteria for being listed in sa-blacklist.current?

2008-02-14 Thread Matt Kettler
Jeff Chan wrote: Also, the sa-blacklist inclusion policy is at: http://www.stearns.org/sa-blacklist/README.policy Yes. It's unfortunate that many that use sa-blacklist fail to read this policy carefully. Many folks seem to mis-read: --- In short, I want this list to

Re: ok_languages doesn't seem to work

2008-02-14 Thread Matus UHLAR - fantomas
100% of the non-English email we're getting is spam, so I added this to my local.cf file: ok_languages en However, I can't see that it's having any effect at all. I'm still getting tons of Russian and asian spams that don't seem to even be triggering any SA rules at all. Am

Rule for Russian character sets

2008-02-14 Thread up
We're suddenly getting a ton of spam with koi8-r encoding...I tried to do a custom rule for it like this: header SUBJ_RUSS_CHAR Subject =~/koi8-r/i describe SUBJ_RUSS_CHAR has Russian char encoding score SUBJ_RUSS_CHAR3.5 The short headers for these spams look like

Re: Rule for Russian character sets

2008-02-14 Thread Per Jessen
[EMAIL PROTECTED] wrote: We're suddenly getting a ton of spam with koi8-r encoding...I tried to do a custom rule for it like this: header SUBJ_RUSS_CHAR Subject =~/koi8-r/i describe SUBJ_RUSS_CHAR has Russian char encoding score SUBJ_RUSS_CHAR3.5 The

Re: Rule for Russian character sets

2008-02-14 Thread Karsten Bräckelmann
On Thu, 2008-02-14 at 10:17 -0500, [EMAIL PROTECTED] wrote: We're suddenly getting a ton of spam with koi8-r encoding...I tried to do a custom rule for it like this: header SUBJ_RUSS_CHAR Subject =~/koi8-r/i describe SUBJ_RUSS_CHAR has Russian char encoding score

Re: sa-learn --ham ground rules

2008-02-14 Thread Michelle Konzack
Am 2008-02-13 05:14:38, schrieb Karsten Bräckelmann: On Sun, 2008-02-10 at 21:34 +0100, Michelle Konzack wrote: Am 2008-02-08 20:13:10, schrieb Karsten Bräckelmann: So what is the maximum number of files in a directory that one can feed to sa-learn --ham and expect it to achieve

Re: sa-learn --ham ground rules

2008-02-14 Thread Michelle Konzack
Am 2008-02-13 10:04:36, schrieb Matus UHLAR - fantomas: you can just provide te directory name. sa-learn will then scan the directory w/o args limit Sory, but I use --dir since ages and if I have over 1200-1400 messages sa-learn exit with an error message that I have exceed the limits...

RE: sa-compile format the standard now?

2008-02-14 Thread Rosenbaum, Larry M.
From: Bowie Bailey [mailto:[EMAIL PROTECTED] I would say that sa-compile is the preferred method due to its performance benefits. There aren't many (any?) drawbacks to using it. I don't use it here because it takes too long (over 20 minutes) to compile. (This is with SA v3.2.4, which is a

Re: Rule for Russian character sets

2008-02-14 Thread up
On Thu, 14 Feb 2008, Per Jessen wrote: [EMAIL PROTECTED] wrote: We're suddenly getting a ton of spam with koi8-r encoding...I tried to do a custom rule for it like this: header SUBJ_RUSS_CHAR Subject =~/koi8-r/i describe SUBJ_RUSS_CHAR has Russian char encoding

RE: sa-compile format the standard now?

2008-02-14 Thread Bowie Bailey
Rosenbaum, Larry M. wrote: From: Bowie Bailey [mailto:[EMAIL PROTECTED] I would say that sa-compile is the preferred method due to its performance benefits. There aren't many (any?) drawbacks to using it. I don't use it here because it takes too long (over 20 minutes) to compile.

RE: sa-compile format the standard now?

2008-02-14 Thread Robert - elists
I don't use it here because it takes too long (over 20 minutes) to compile. (This is with SA v3.2.4, which is a big improvement over v3.2.3) L Why would how long it takes to compile matter as long as you get some return on investment? Is the machine heavily loaded or just a small useful

Rule for Images that show up anyway

2008-02-14 Thread Paul Douglas Franklin
I have Thunderbird set up not to show images by default. But some spammers have discovered a way to encode their images so that they show despite my settings. The latest example was exceptionally rude. Is there some rule that I could add to my local.cf to catch any e-mail that tries this

RE: sa-compile format the standard now?

2008-02-14 Thread Rosenbaum, Larry M.
From: Bowie Bailey [mailto:[EMAIL PROTECTED] Rosenbaum, Larry M. wrote: From: Bowie Bailey [mailto:[EMAIL PROTECTED] I would say that sa-compile is the preferred method due to its performance benefits. There aren't many (any?) drawbacks to using it. I don't use it here

Re: ok_languages doesn't seem to work

2008-02-14 Thread Jari Fredriksson
100% of the non-English email we're getting is spam, so I added this to my local.cf file: ok_languages en However, I can't see that it's having any effect at all. I'm still getting tons of Russian and asian spams that don't seem to even be triggering any SA rules at all. Am I using

Re: Rule for Images that show up anyway

2008-02-14 Thread John Hardin
On Thu, 14 Feb 2008, Paul Douglas Franklin wrote: I have Thunderbird set up not to show images by default. But some spammers have discovered a way to encode their images so that they show despite my settings. The latest example was exceptionally rude. Is there some rule that I could add to

RE: sa-compile format the standard now?

2008-02-14 Thread Bowie Bailey
Rosenbaum, Larry M. wrote: From: Bowie Bailey [mailto:[EMAIL PROTECTED] Rosenbaum, Larry M. wrote: From: Bowie Bailey [mailto:[EMAIL PROTECTED] I would say that sa-compile is the preferred method due to its performance benefits. There aren't many (any?) drawbacks to

Re: ok_languages doesn't seem to work

2008-02-14 Thread Duane Hill
On Thu, 14 Feb 2008 19:52:01 +0200 Jari Fredriksson [EMAIL PROTECTED] wrote: 100% of the non-English email we're getting is spam, so I added this to my local.cf file: ok_languages en However, I can't see that it's having any effect at all. I'm still getting tons of Russian

Re: Rule for Images that show up anyway

2008-02-14 Thread SM
At 09:21 14-02-2008, Paul Douglas Franklin wrote: I have Thunderbird set up not to show images by default. But some spammers have This is to block remote images. discovered a way to encode their images so that they show despite my settings. The latest example was exceptionally rude. Is

Re: Rule for Images that show up anyway

2008-02-14 Thread Paul Douglas Franklin
I had deleted the message yesterday--thoroughly--and didn't think to ask this until today. Concerning ImageInfo, which sounds like a likely candidate, it's not installed on my system. I have Kolab installed; it uses an earlier version of Spamassassin, I'm not sure exactly which one, somewhere

Re: Rule for Images that show up anyway

2008-02-14 Thread John Hardin
On Thu, 14 Feb 2008, Paul Douglas Franklin wrote: I had deleted the message yesterday--thoroughly--and didn't think to ask this until today. Concerning ImageInfo, which sounds like a likely candidate, it's not installed on my system. I have Kolab installed; it uses an earlier version of

RE: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
-Original Message- We're suddenly getting a ton of spam with koi8-r encoding...I tried to do a custom rule for it like this: header SUBJ_RUSS_CHAR Subject =~/koi8-r/i describe SUBJ_RUSS_CHAR has Russian char encoding score SUBJ_RUSS_CHAR3.5

RE: Rule for Russian character sets

2008-02-14 Thread John Hardin
On Fri, 15 Feb 2008, Michael Hutchinson wrote: Are we not meant to delimit characters like a minus sign? Ex: header SUBJ_RUSS_CHAR Subject:raw =~ /koi8\-r/i Only where they have special meaning, and a dash is only special in a character set, e.g. [A-Z]. I have found the

RE: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
-Original Message- From: John Hardin [mailto:[EMAIL PROTECTED] Sent: Friday, 15 February 2008 2:19 p.m. To: Michael Hutchinson Cc: users@spamassassin.apache.org Subject: RE: Rule for Russian character sets On Fri, 15 Feb 2008, Michael Hutchinson wrote: Are we not meant to

FW: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
-Original Message- From: John Hardin [mailto:[EMAIL PROTECTED] Sent: Friday, 15 February 2008 3:07 p.m. To: Michael Hutchinson Subject: RE: Rule for Russian character sets On Fri, 15 Feb 2008, Michael Hutchinson wrote: Now what about matching a question mark and an equals sign? An

RE: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
-Original Message- From: John Hardin [mailto:[EMAIL PROTECTED] Sent: Friday, 15 February 2008 3:07 p.m. To: Michael Hutchinson Subject: RE: Rule for Russian character sets On Fri, 15 Feb 2008, Michael Hutchinson wrote: Now what about matching a question mark and an equals sign?

RE: Rule for Russian character sets

2008-02-14 Thread Karsten Bräckelmann
On Fri, 2008-02-15 at 12:19 +1300, Michael Hutchinson wrote: [...] Does anyone have suggestions for matching question marks and equals signs in one line? I would like to match everything exactly between the double quotes: Apart from neither equal nor minus being any special in an RE (outside a

RE: Rule for Russian character sets

2008-02-14 Thread Michael Hutchinson
-Original Message- From: Karsten Bräckelmann [mailto:[EMAIL PROTECTED] Sent: Friday, 15 February 2008 3:43 p.m. To: users@spamassassin.apache.org Subject: RE: Rule for Russian character sets On Fri, 2008-02-15 at 12:19 +1300, Michael Hutchinson wrote: [...] Does anyone have

Re: Rule for Russian character sets

2008-02-14 Thread Loren Wilton
Ok fair enough. I've noticed that having the \ doesn't hurt for a dash. Now what about matching a question mark and an equals sign? If you read perlre closely you will find it says that it never hurts to put a backslash before a special character that you want to match as a character. So

Html font invisible or low contrast - no score?

2008-02-14 Thread Enrique Perez-Terron
I am trying to figure out why almost all spam continues to get through. I use Fedora 8, Evolution 2.12.3, and spamassassin 3.2.4 I have marked as junk, respectively as non-junk, more than 100 mails of each kind. Probably more than 200 by now. I have saved to a file the source of one