RE: Bayes DB

2007-05-11 Thread Bowie Bailey
Daniel Aquino wrote: I setup Bayes and whitelist db paths in my local.cf The whitelist db created succesfully but the bayes_* db's did not... More information please... Just saying that it doesn't work isn't very helpful. Before we can help you, we need the two basic pieces of information:

RE: Bayes DB

2007-05-11 Thread Bowie Bailey
Daniel Aquino wrote: I really don't know if I can extract emails from Outlook 2003 into a standard mbox format... Maildir is the preferred format. You can extract emails from Outlook, but Outlook and Exchange tend to rewrite portions of the message which makes this less than ideal for SA's

RE: Bayes DB

2007-05-11 Thread Bowie Bailey
Daniel Aquino wrote: run these commands as the defang user. Would it be bad to use root because defang is not a real user.. spamd will not run as root. If you try it, it will switch to nobody. You can deal with this two ways: If your mail accounts are owned by real users on the system,

RE: Bayes DB

2007-05-11 Thread Bowie Bailey
Daniel Aquino wrote: 1) What (exactly) did you do? # local.cf config file at this url http://pastie.caboo.se/60756 What user is SA running as? What are the permissions on the bayes directory? drwx-- 2 defang defang 4096 2007-05-11 10:48 /var/spool/MD-Databases/ 2) What

RE: SA Rules Auto-Update ?

2007-05-11 Thread Bowie Bailey
Kevin W. Gagel wrote: sa-update Usage info is located where? Most common usage is: $ sa-update Or, if you want to see what it's doing: $ sa-update -D Unless you are adding extra channels or doing something strange with it, you shouldn't need more than that. -- Bowie

RE: Newbie Questions.

2007-04-24 Thread Bowie Bailey
Grant Peel wrote: I have not turned on bayes, is it critical (to catching spam)? Bayes is not critical, but it can be very useful. For best results, I suggest you do this: Manually train the Bayes db with hand-sorted ham and spam at least until you get to the 200-ham/200-spam limit. After

RE: Newbie Questions.

2007-04-24 Thread Bowie Bailey
Matthias Haegele wrote: Bowie Bailey schrieb: Grant Peel wrote: I have not turned on bayes, is it critical (to catching spam)? Bayes is not critical, but it can be very useful. For best results, I suggest you do this: ACK. It can kick the spam over the treshold which is maybe

RE: Testing Spamassassin with the mail command

2007-04-24 Thread Bowie Bailey
StarkRavingCalm wrote: Hello. I am new to SpamAssasin. I have configured my new Sendmail server to use Spamassassin and have tested with the usual commands: spamassassin -D /usr/share/doc/spamassassin-3.1.8/sample-spam.txt I want to test how the messages will look when delivered, so I can

RE: Testing Spamassassin with the mail command

2007-04-24 Thread Bowie Bailey
StarkRavingCalm wrote: Bowie, Thank you for the reply. What I would like to do is to test it by letting it pass thru so I can see how it would arrive in the user's inbox. Then configure the MTA to accept and deliver mail for a test user and send him some mail. You can send the mail either

RE: Newbie Questions.

2007-04-23 Thread Bowie Bailey
Grant Peel wrote: 1. sa-update. After wrestling with a number of required modules, I ran sa-update with the --checkonly option, but it did not return any messages. I then ran it using only the switch --updatedir. It created a couple of what appear to be accounting files, and a new

RE: Newbie Questions.

2007-04-23 Thread Bowie Bailey
Grant Peel wrote: From: Bowie Bailey [EMAIL PROTECTED] Grant Peel wrote: 1. sa-update. After wrestling with a number of required modules, I ran sa-update with the --checkonly option, but it did not return any messages. I then ran it using only the switch --updatedir

RE: Rules report

2007-04-19 Thread Bowie Bailey
Matt Kettler wrote: If you want a top x rules list, sa-stats can do that for you: http://www.rulesemporium.com/programs/sa-stats.txt It will parse a spamd logfile and report the most-frequently used spam and nonspam rules (and you can configure how many it will list for each) I was

RE: RDJ handling question

2007-04-18 Thread Bowie Bailey
NFN Smith wrote: Jake Vickers wrote: It's in your RDJ config file. My config is in /etc/rulesdujour/ and the file is called config. The line in question: SA_DIR=/etc/mail/spamassassin That's where it should save the files it downloads. I checked the code of rules_du_jour, and the

RE: How would i write this rule?

2007-04-10 Thread Bowie Bailey
Adam Lanier wrote: Peter Russell wrote: Sorry last question - seems the parent company is doing spam checks and adds the spam score to the headers. How could i add/change the second condition for a spam score greater than 10.00 ? the header is X-Spam-Score: ***

RE: /etc/spamassassin or /var/lib/spamassassin?

2007-04-02 Thread Bowie Bailey
Mark Adams wrote: Ok, Fair enough.. I will change this listing to a whitelist_from_rcvd as I assume this list is farmed by spammers. (Should be using that always of course!) Header below. Envelope-to: [EMAIL PROTECTED] Received: from hopnet.hopkins.co.uk ([10.0.0.23]

RE: Anyone else seeing a large rise in spam?

2007-03-26 Thread Bowie Bailey
Nigel Frankcom wrote: Hi All, As per the title, I'm seeing a pretty big rise this last week. So far this week has seen the most spam I've ever had to deal with in over 10 years. RBLs and SA are catching more, as is greylisting. That said, yesterday saw double my 'usual' amount of spam.

RE: extract message-id's from logfile

2007-03-23 Thread Bowie Bailey
Starckjohann, Ove wrote: Hi! bit offtopic, but maybe it's easy and someone is able to drop me the *magic* snippet of code: My logile looks like: Mar 23 10:15:55 admin05 spamd[6084]: spamd: result: Y 5 - AWL,BAYES_00,DCC_CHECK,DIGEST_MULTIPLE,HTML_MESSAGE,LOGINHASH2,MIME_HTML

RE: /etc/spamassassin or /var/lib/spamassassin?

2007-03-22 Thread Bowie Bailey
Mark Adams wrote: On Fri, Mar 02, 2007 at 10:06:51AM -0500, Bowie Bailey wrote: Is it scoring the whitelist lower or is it just not hitting? Can you post your whitelist rule and the headers from an example message? Hi, Apologies for delay I did not see this message. I am still having

RE: Spamhaus Tests

2007-03-07 Thread Bowie Bailey
Daryl C. W. O'Shea wrote: Cliff Stanford wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Justin Mason wrote: Yes -- in SpamAssassin 3.2.0, it's picking up a more useful score: 0.509 in set 1 and 0.905 in set 3. (Not a huge score, but that's where the GA set it... its

RE: /etc/spamassassin or /var/lib/spamassassin?

2007-03-02 Thread Bowie Bailey
Mark Adams wrote: Thanks, It is using both directories. It appears that it isn't subtracting the 50 points that it is supposed to when it is whitelisted? Do you know if this setting is changeable? Is it scoring the whitelist lower or is it just not hitting? Can you post your whitelist rule

RE: /etc/spamassassin or /var/lib/spamassassin?

2007-03-01 Thread Bowie Bailey
Mark Adams wrote: Hi There, SA 3.1.7-1. I have setup openprotect http://saupdates.openprotect.com/ Ever since I set it up my whitelists have not worked, these are located in /etc/spamassassin I thought that spamassassin checked both of these directories for rules, Am I correct?

mysql errors after 3.1.8 upgrade

2007-02-22 Thread Bowie Bailey
I upgraded my SA from 3.1.7 to 3.1.8. I ran --lint with no problems and then restarted the daemon. SA is working, but I'm seeing the following errors in my log when SA starts up: spamd[16137]: Can't locate DBD/mysql.pm in @INC ... spamd[16137]: Can't locate Tie/Cache.pm in @INC ...

RE: mysql errors after 3.1.8 upgrade

2007-02-22 Thread Bowie Bailey
Theo Van Dinter wrote: On Thu, Feb 22, 2007 at 11:29:30AM -0500, Bowie Bailey wrote: spamd[16137]: Can't locate DBD/mysql.pm in @INC ... spamd[16137]: Can't locate Tie/Cache.pm in @INC ... spamd[16137]: Can't locate Tie/Cache.pm in @INC ... spamd[16137]: BEGIN failed--compilation aborted

RE: mysql errors after 3.1.8 upgrade

2007-02-22 Thread Bowie Bailey
René Berber wrote: Bowie Bailey wrote: [snip] The FuzzyOCR installation docs only list DBD::mysql as required if you are using it for the hash database and I've got that set to use digest_db. FuzzyOCR.cf: # 2 ... use digest_db w/digest_hash import (see requirements

RE: mysql errors after 3.1.8 upgrade

2007-02-22 Thread Bowie Bailey
René Berber wrote: Bowie Bailey wrote: [snip] No, I'm using the latest development build of 3.5.1 from http://fuzzyocr.own-hero.net/wiki/Downloads. I upgraded to 3.5.1 from 2.3b less than a month ago. Perhaps you didn't upgrade everything, the precise location of the error you

RE: Odd score

2007-02-20 Thread Bowie Bailey
Scott Lockwood wrote: Is that per user? So, if I nuke the whitelist, this should go away? On Tue, 2007-02-20 at 17:37 +0100, Raymond Dijkxhoorn wrote: USER_IN_WHITELIST ! Keep in mind that this is not referring to the auto whitelist. This is a hit from one of the whitelist_from or

RE: just add header to spam mail

2007-02-19 Thread Bowie Bailey
Jon Armitage wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] I was wondering if its possiable to make it just add the headers to the email and not change the email in any other way. Look at the options for report_safe in your local.cf. I think this

RE: Spam filtering on SA list?

2007-02-09 Thread Bowie Bailey
John D. Hardin wrote: WTF, over? On Thu, 8 Feb 2007, Mail Delivery Subsystem wrote: Date: Thu, 8 Feb 2007 12:55:22 -0800 From: Mail Delivery Subsystem [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Returned mail: see transcript for details The original message was received at

RE: Spam filtering on SA list?

2007-02-09 Thread Bowie Bailey
John D. Hardin wrote: On Fri, 9 Feb 2007, Bowie Bailey wrote: This has been discussed a few times. The short version is that this list is hosted by apache.org. They spam scan posts to their mailling lists and they aren't interested in making changes to accomodate a single list

RE: Spam Scam - childsafenetwork.org

2007-02-09 Thread Bowie Bailey
David Cary Hart wrote: As a violent crime victims advocate, I might be overreacting to this issue. OTOH, I can write, with absolute certainty, that anyone using any of the services from childsafenetwork.org is opting in for a considerable volume of commercial spam (from hoodia to credit

RE: Senders with single quote in email address

2007-02-08 Thread Bowie Bailey
Theo Van Dinter wrote: On Wed, Feb 07, 2007 at 10:49:25AM -0600, Larry Starr wrote: Not having run sa-update before, I copied my /etc/spamassassin directory to /tmp, to play it safe and ran sa-update using the /tmp/spamassassin directory as the updatedir (Nothing happened!): [17203]

RE: Spamassassin does block some email

2007-02-07 Thread Bowie Bailey
Rocco Scappatura wrote: Hello, SA doesn't succeed in blocking some email (lately are many!) expecially that email with pharmaceutical contents, where the name is disguised and the link are changed adding then a comment for obtaining the right link to digit in the address bar of the browser

RE: SA-gen'd message report headers appear differently (with/with out linebreaks) in different mail clients

2007-02-06 Thread Bowie Bailey
Jim Maul wrote: Andy Figueroa wrote: As an occasional, long-term Thunderbird user, and using a reasonably current version, 1.5.0.9, TB doesn't even have a built-in show header feature. It can be added with a buggy extension called View Headers Toggle Button, which doesn't show long

RE: TVD_SILLY_URI_OBFU

2007-02-05 Thread Bowie Bailey
Nigel Frankcom wrote: On Sat, 03 Feb 2007 07:15:39 +, Nigel Frankcom [EMAIL PROTECTED] wrote: body Test_01 /remove \\*|\%|\!\/i score Test_01 4.0 describe Test_01 Test remove asterisk for URL spams and oops #2 the | doesn't work as expected :-/ This does tho...

RE: Which Rule - Follow Up

2007-02-02 Thread Bowie Bailey
Clay Davis wrote: At the moment, I am looking for a rule to score this type of spam. As I understand it... which is limited... the Bayes check has minimal success on this... true? Thanks, If you manually train your Bayes DB, you can have a fair amount of success with these types of Spam.

RE: Which Rule - Follow Up

2007-02-02 Thread Bowie Bailey
Clay Davis wrote: Bowie, sorry for my lack of knowledge... is this a rule or other technique? re, Clay On 2/2/2007 at 9:12 AM, in message [EMAIL PROTECTED], Bowie Bailey [EMAIL PROTECTED] wrote: Clay Davis wrote: At the moment, I am looking for a rule to score this type

RE: Made my first rule but is not checking anything? Do I need to enable that?

2007-02-02 Thread Bowie Bailey
Add the following line to your user_prefs so that it adds the report to the email regardless of spam status. add_header all Report _REPORT_ By default, only spam messages have the report. Bowie z3r0 wrote: I did but didn't see any of that in message header pressing ctrl F3 in OE...

RE: To create a cf file: notepad and youfile.cf enough?

2007-02-01 Thread Bowie Bailey
Maciej Friedel wrote: On 02/01/07 z3r0 wrote: Depending on the level of access you have to your Linux box I'd suggest writing them in joe or vi from the command line. linux can get very picky about line breaks in files created in windows. I can't lint anything, I just have a CPanel

RE: Which Rules?

2007-02-01 Thread Bowie Bailey
Clay Davis wrote: I am looking for some advise on which rules to apply: Where are the guidelines for (not) applying rules like antidrug.cf? I see the header stipulates that it is not intended for v3.0 and higher. If these stipulations exist, are they always found in the comments of each

RE: Training Bayesian Filter

2007-01-05 Thread Bowie Bailey
[EMAIL PROTECTED] wrote: Darn. I thought that might be the problem. Well, back to square one. You are right, this is not the right list for amavisd questions, but where do you draw the line? If the question is about rules, scoring or plugins, ask it here. If the question is about markup and

RE: Training Bayesian Filter

2007-01-05 Thread Bowie Bailey
[EMAIL PROTECTED] wrote: Amavis uses SA's config file for rules, scores, and plugins. Just keep in mind that it may be looking in a non-standard place for the config depending on your setup. Amavis adds some extra scoring on top of the SA score and does it's own markup. These

RE: how filter messages by subject

2007-01-04 Thread Bowie Bailey
Kelson wrote: Bowie Bailey wrote: If you are going to try this, you will definately want to check word boundaries like this: header BAD_WORDS Subject =~ /\bbadword\b/i The \b on either side will ensure that you don't match the string as part of another word. (Anyone been

RE: how filter messages by subject

2007-01-03 Thread Bowie Bailey
Chris Santerre wrote: From: sergio [mailto:[EMAIL PROTECTED] Hello spamassasin_list, I want filter messages with some bad words. How can configure yhe SA to do that? Thanks. Its not really meant to do it, but you can. You first right a rule to match bad words in the subject

RE: White Listing

2007-01-03 Thread Bowie Bailey
Alexander Veit wrote: Nigel Frankcom wrote: Forwarding is not a good idea, it adds and or changes the headers in the mail. Forward as attachment(s) could be a solution since original mail headers are kept intact. I've asked a similar question on this list some days ago, but nobody could

RE: White Listing

2007-01-03 Thread Bowie Bailey
Alexander Veit wrote: Bowie Bailey wrote: [...] Not really. It's actually a fairly good system if you have an IMAP server. You create IMAP folders for spam and ham. These can be shared or individual for each user. The users then copy any mis-categorized mail to these folders

RE: Help! rewrite_header subject not working for me

2006-12-21 Thread Bowie Bailey
Tony Guadagno wrote: I guess i don't understand, you say that Rewriting the subject is ultimately the responsibility of the MTA., but SA has this option, so that means that it is SA's responsibility...right? It depends on how you call it. If you call SA directly, then yes, it does the

RE: Help! rewrite_header subject not working for me

2006-12-21 Thread Bowie Bailey
Tony Guadagno wrote: I see, yes, I am calling SA directly, no Amavis etc involved.. Bowie Bailey [EMAIL PROTECTED] 12/21/2006 9:37 am Tony Guadagno wrote: I guess i don't understand, you say that Rewriting the subject is ultimately the responsibility of the MTA., but SA has

RE: FP on SARE_MLB_Stock6 rule from 70_sare_stocks.cf

2006-12-21 Thread Bowie Bailey
Vivek Khera wrote: On Dec 21, 2006, at 2:56 PM, Chris Santerre wrote: How about you just post the section that it FP'd on. Then we can all enjoy the party. Not sure which section it is, but here's the whole shebang. Oddly enough, it seems to match on the word ALUMNI. -- Bowie

RE: autolearn and getting better SMTP header output

2006-12-20 Thread Bowie Bailey
Noah wrote: SA 3.1.7 FreeBSD 4.11 Hi there, I am trying to get better understanding as to why spamassassin is behaving the way it is. So I see that autolearn=no. I thought by default autolearn is turned on. I dont have this turned off in the system-wide configuration nor the user

RE: Name in Subject CF RuleSet

2006-12-19 Thread Bowie Bailey
Jess Mooers wrote: Theo Van Dinter [EMAIL PROTECTED] wrote on Monday, December 18, 2006: On Mon, Dec 18, 2006 at 12:23:31PM -0600, Jess Mooers wrote: Does anyone know of a cf ruleset that will address this, or another way to stop it. Chasing the subject of the day is futile.

RE: local.cf being ignored

2006-12-19 Thread Bowie Bailey
itdelany wrote: Hi all :) My Setup is Postfix - Amavis - SpamAssassin running on ubuntu linux 6.06, I have this entries on my /etc/mail/spamassasin/local.cf # Set the threshold at which a message is considered spam (default: 5.0) # required_score 7.0 But this is ignored, and I think

RE: Tagging for spam mails

2006-12-14 Thread Bowie Bailey
Brad Baker wrote: We would like to add a spam report to the body of emails identified as spam to make troubleshooting false positives easier. For instance: To: [EMAIL PROTECTED] From: [EMAIL PROTECTED] Date: November 26, 2006 3:57PM Subject: [spam] Buy ED Pills Now

RE: Tagging for spam mails

2006-12-14 Thread Bowie Bailey
Bowie Bailey wrote: For documentation of the configuration options, try this page instead: http://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Conf.ht ml The URL wrapped... Try this one: http://tinyurl.com/3r4xa -- Bowie

RE: Tagging for spam mails

2006-12-14 Thread Bowie Bailey
Theo Van Dinter wrote: On Thu, Dec 14, 2006 at 12:19:54PM -0500, Bowie Bailey wrote: For documentation of the configuration options, try this page instead: The URL wrapped... Try this one: http://tinyurl.com/3r4xa Also acceptable: perldoc Mail::SpamAssassin::Conf That works too

RE: SMTP rejection based on SA Scores etc

2006-12-13 Thread Bowie Bailey
R Lists06 wrote: The numbers you need to look at are the false positives on your own incoming mail. Look at the FP rate at each score level (i.e. how many legit messages get mistagged with that score or higher, whether in absolute terms or in percentages) and decide whether it's

RE: Dealing with forwarded email

2006-12-12 Thread Bowie Bailey
JJ Johnson wrote: Can Spamassassin be configured to do host testing on forwarded messages? I have an email account hosted on a server running Spamassasin. I also forward email from another host that doesn't run any spam filtering software to the same email address. I can receive a

RE: How do I know if DCC is running and working?

2006-12-11 Thread Bowie Bailey
LuKreme wrote: On 8-Dec-2006, at 13:35, Robert S wrote: spamassassin --debug --lint 21 | less I went with # spamassassin -D --lint 21| grep -i dcc [85448] dbg: config: read file /usr/local/share/spamassassin/25_dcc.cf [85448] dbg: plugin: registered

RE: efax spam being marked as -212 ???

2006-12-11 Thread Bowie Bailey
David Morton wrote: Daryl C. W. O'Shea wrote: Additionally, this channel's bundle includes a pre file that loads a bunch of plugins, some of which that there's a good chance you don't really care to have running, like HashCash (and for many Pyzor)... all these are loaded: Actually,

RE: New advice spam

2006-12-11 Thread Bowie Bailey
Karl Auer wrote: It might be a bad idea, but I've set the score for BAYES_00 to zero. It seemed to me that the only emails (other than VERY short ones) that ever got a zero Bayes rating were spams :-) and the -4.9 that BAYES_00 gives by default seemed more than excessive. Anyway, my

RE: Breaking up the Bot army - we need a plan

2006-12-11 Thread Bowie Bailey
Robert LeBlanc wrote: My mistake, then; thanks for the clarification. I suppose what we need, then, is something like a TX record for helping to identify outbound mail servers. That already exists. It's called SPF. -- Bowie

RE: Breaking up the Bot army - we need a plan

2006-12-11 Thread Bowie Bailey
John Rudd wrote: JamesDR wrote: SPF already does this poorly. We need something that actually works. And what would you do differently? An SPF record is basically just a list of valid mail servers for a domain plus a bit of information about how strict the domain wants to be

RE: How can I learn a mail which how many score it got from each my rules?

2006-12-08 Thread Bowie Bailey
Larry Rosenman wrote: Halid Faith wrote: I use spamassassin3.1.7 I go through some mails. I see a mail in /var/log/spamd.log as below Wed Dec 6 13:33:49 2006 [4484] info: spamd: result: Y 15 - EXTRA_MPART_TYPE,FRONTPAGE,HTML_MESSAGE,INVALID_DATE,MIME_BOUND_NEXTPART,

RE: No Nework tests?!

2006-12-07 Thread Bowie Bailey
leemansvg wrote: I'm running spamassasint --lint and it comes up saying that its only doing local tests. I've enabled dns and I am connected to the internet. I've also enabled razor, dcc, and pyzor in the spam.assassin.perfs files. Does anyone have an idea where I might have a

RE: Confused about white/black lists.

2006-12-06 Thread Bowie Bailey
Steven W. Orr wrote: On Monday, Dec 4th 2006 at 23:34 -0500, quoth Theo Van Dinter: On Mon, Dec 04, 2006 at 10:12:26PM -0500, Steven W. Orr wrote: I have some spam getting through that has USER_IN_WHITELIST. I go and look and sher nuff, the From address is there in the email column of

RE: rules_du_jour not working confusion?

2006-12-05 Thread Bowie Bailey
Bazooka Joe wrote: rules_du_jour seems to fail on lint. I am trying to figure that out now but I have a different question. Has channels replaced rules_du_jour? Should I be using something else to update my sare rules? thx -bazooka ps I am using SpamAssassin 3.1.4 pps below are

RE: rules_du_jour not working confusion?

2006-12-05 Thread Bowie Bailey
Bazooka Joe wrote: Thx Bowie That fixed rdj. But what about channels? Is that to replace rdj? Yes, you can replace RDJ with the sa-update channels. I am still using RDJ for rule updates, so I can't help you with the channel configuration. -- Bowie

RE: Need regexp tip

2006-12-05 Thread Bowie Bailey
NFN Smith wrote: I'm working on a series of rules to find obfuscated words in subject lines that have been misspelled by adding an extra character (often a repeated letter) to a word. For certain words, it seems to be appropriate to assume that if they're misspelled in that way, it's

RE: rules_du_jour not working confusion?

2006-12-05 Thread Bowie Bailey
René Berber wrote: Bowie Bailey wrote: Bazooka Joe wrote: Thx Bowie That fixed rdj. But what about channels? Is that to replace rdj? Yes, you can replace RDJ with the sa-update channels. I am still using RDJ for rule updates, so I can't help you with the channel

RE: optional score in local.cf is not working

2006-11-29 Thread Bowie Bailey
Leon Kolchinsky wrote: So, let me get this straight: - This is how I see the work of amavis+spamd+clamd: 1. As I see it amavis talk to spamd (spamassassin) and clamd (ClamAV) via appropriate sockets or TCP ports. In my case - To clamd via

RE: sa-update installation

2006-11-29 Thread Bowie Bailey
Jason Frisvold wrote: On 11/29/06, Steven Stern [EMAIL PROTECTED] wrote: after sa-update runs, restart spamassassin and it will use the new rules in /var/lib/spamassassin. I have this as a cron job: 30 3 * * * sa-update spamassassin --lint /etc/init.d/spamassassin restart

RE: Cronjob with sa-learn

2006-11-29 Thread Bowie Bailey
Markus Braun wrote: Hello, i tried to create a cron job to add spam messages as spamemails. The following command : 0 1 * * * vmail sa-learn --spam /var/opt/vmail/.info/oliver/Maildir/.spam/cur *.* But i get this retourn: archive-iterator: readdir found no mail in

RE: Loads of 'xxx wrote:' Spam

2006-11-28 Thread Bowie Bailey
[EMAIL PROTECTED] wrote: Quoting Jason Little [EMAIL PROTECTED]: I just wrote my own rule Called it wrotesub.cf header LR_WROTE_SUBSubject =~ /\bwrote\b\:/i describeLR_WROTE_SUB Wrote in Subject score LR_WROTE_SUB

RE: Loads of 'xxx wrote:' Spam

2006-11-27 Thread Bowie Bailey
[EMAIL PROTECTED] wrote: Theo Van Dinter writes: On Mon, Nov 27, 2006 at 01:27:47PM -0800, Steve Berg wrote: I have started to receive a LARGE amount of spam with the subject line of someone's name wrote:. Inside the email is a stock tip with different stocks... Yep. Has

RE: Is my Bayes DB borked?

2006-11-22 Thread Bowie Bailey
Kurt Buff wrote: Nope - it's not that. Looking through my syslog more closely reveals that I'm getting 'SA TIMED OUT' messages all over the place, and referring to rules as well as Bayes. So, I'm just as confused as ever, and don't know what's going on. More analysis needed, I suppose,

RE: different threshold for one address

2006-11-16 Thread Bowie Bailey
Jean-Paul Natola wrote: Jean-Paul Natola wrote: header TO_BOUNCES To =~ /bounces\@/i description TO_BOUNCES Whitelist mail to bounces mailbox score TO_BOUNCES-6 I really hate to be a pain, but how would a add a criteria for the subject line as well, so that ONLY messages

RE: change spamhaus.org's score

2006-11-14 Thread Bowie Bailey
Payal Rathod wrote: On Mon, Nov 13, 2006 at 11:29:16PM -0500, Matt Kettler wrote: I cannot find the score in default rule folder i.e /usr/share/spamassassin/ No scores are given for those rules. Should be something like this in 50_scores.cf: score RCVD_IN_BL_SPAMCOP_NET 0

RE: First time sa-update gotcha questions

2006-11-13 Thread Bowie Bailey
James Lay wrote: Hello All! SoI'm thinking about trying sa-update. My rules are in /etc/mail/spamassassin. Are there any gotchas or things I need to be wary of before I plunge ahead? Just curious as I see a lot of traffic on this topic in here. Thanks. There was a problem with

RE: First time sa-update gotcha questions

2006-11-13 Thread Bowie Bailey
James Lay wrote: On Mon, 13 Nov 2006 09:54:11 -0700 James Lay [EMAIL PROTECTED] wrote: On Mon, 13 Nov 2006 11:07:32 -0500 Bowie Bailey [EMAIL PROTECTED] wrote: James Lay wrote: Hello All! SoI'm thinking about trying sa-update. My rules are in /etc/mail

RE: razor and dcc : high cpu load

2006-11-09 Thread Bowie Bailey
Rejaine Monteiro wrote: my system had a high cpu load with spamassassin with network tests , dcc + razor and fuzzy_ocr because off this, we are considering disable razor or dcc from tests... but we have doubt about which is better: disable razor or dcc? any recomendations?? If the

RE: spam filter working, but not well

2006-11-07 Thread Bowie Bailey
Brian S. Meehan wrote: Spamassassin is invoked from Courier-MTA. (OS is SUSE Pro 9.3) The /usr/lib/courier/etc/courierd file has the following line: DEFAULTDELIVERY=| /usr/bin/spamassassin | /usr/lib/courier/bin/maildrop FYI, a cleaner way to do this is: DEFAULTDELIVERY=|

RE: spam filter working, but not well

2006-11-07 Thread Bowie Bailey
Brian S. Meehan wrote: Bowie, I implemented your changes and now I'm seeing BAYES scores on all messages, whether it is 00 or 99. 1) changed courierd defaultdelivery to be cleaner 2) added the xfilter line to the top of maildroprc above the sorting rules 3) added the exception to the bottom

RE: where rule resides/ and scored-Clarification

2006-11-07 Thread Bowie Bailey
Jean-Paul Natola wrote: Ok I found the rule, Now I just got a little more confused Does SA read and score from /var/lib/spamassassin/3.001007/updates_spamassassin_org As well as from /usr/local/etc/mail/spamassassin ?- this is where I have added custom rules in the past. And I

RE: Reg - Spamassassin --lint

2006-11-06 Thread Bowie Bailey
Evan Platt wrote: At 11:45 AM 11/6/2006, you wrote: when i run spamassassin --lint i get this error messages.. C:\testspamassassin --lint Failed to parse line in SpamAssassin configuration, skipping: !DOCTYPE HTML PUB LIC -//W3C//DTD HTML 4.0 Transitional//EN Failed to parse line

RE: sa-learn training question(s)

2006-11-03 Thread Bowie Bailey
Matt Kettler wrote: Jason Wellman wrote: ... I have all incoming mail that is tagged as Spam delivered to a CaughtSpam IMAP box for each user. ... Should I also have sa-learn from the CaughtSpam folder? I have read some places that say yes, and some that say no. YES. Those

RE: sa-learn training question(s)

2006-11-03 Thread Bowie Bailey
Jason Wellman wrote: Thanks for the feedback. One last question that I am currently tossing around. Sitewide vs individual learning... I have a small domain, less then 50 users. Should I be looking at setting up a sitewide bayes database instead of individual ones? Again I find

RE: increase score of rules

2006-10-31 Thread Bowie Bailey
Pablo Allietti wrote: Hi all i want to increase the score of a images rules how can i do that ? for example HTML_IMAGE_ONLY_28 HTML_IMAGE_RATIO_02 i want to modify the score about this rules for example 4.0 which file i need to modify? how? Just drop the new score rules into your

RE: Script question.

2006-10-31 Thread Bowie Bailey
Kyle Quillen wrote: Hello all, I have a bit of a problem. I am trying to come up with a solution that I think will help a lot of people who use the qmail toaster mail server. I have my toaster setup to drop mail tagged as spam into spam directories in each users mailbox. I am planning on

RE: No DNS resolution for URIDNSBL

2006-10-20 Thread Bowie Bailey
David Berten wrote: I am trying to use URIDNSBL but can not get DNS resolution SpamAssassin 3.1.7 Output::: Net-DNS-0.59]# spamassassin -D dns --lint [22770] dbg: dns: is Net::DNS::Resolver available? yes [22770] dbg: dns: Net::DNS version: 0.59 [22770] dbg: dns: is DNS available? 0

RE: Custom scores -- how to..

2006-10-20 Thread Bowie Bailey
Debbie D wrote: Can someone please remind me how to create custom scores for existing rules?? I do not want to manually go in and change any particular score, any update will over ride that.. I want to manually change them to hit on a higher [or lower as the case might be] score. If memory

RE: Fix for RDJ update issue

2006-10-20 Thread Bowie Bailey
files. Because of this, the if-modified-since checks all returned false and the real rulesets didn't clobber the broken ones. Chris Bowie Bailey wrote: The fix was to simply delete the contents of the directory and try again. rm /etc/mail/spamassassin/RulesDuJour

RE: sa-update versus rulesdujour questions

2006-10-20 Thread Bowie Bailey
Bret Miller wrote: Theo Van Dinter wrote: FWIW, it happens to be the official tool since no one ever submitted RDJ to be the official tool, so we had to write our own. I would have offered, had I known there was any interest. Chris T. I'm glad it isn't the official tool

RE: scoring spam

2006-10-20 Thread Bowie Bailey
R Lists06 wrote: I am sorry if I am asking this question and it is answered in the archives. I will try to go back and read those past posts but is there a site where I can download the SARE stock rules and the plugins? I am aware of Rules Du Jour but whenever I have attempted to

RE: DCC worth it?

2006-10-19 Thread Bowie Bailey
Leander Koornneef wrote: On 19-okt-2006, at 10:15, Jo Rhett wrote: John Andersen wrote: Contemplating adding DCC to my SA config. I already do the SURBL tests and Razor2. Will I likely gain any thing via this? Does DCC catch what other tests miss? DCC and Razor are very similar

RE: Spamassassin detailed log entries

2006-10-19 Thread Bowie Bailey
Fabien GARZIANO wrote: De : Bowie Bailey Envoyé : mercredi 18 octobre 2006 18:17 What I do is this: add_header all Report _REPORT_ This gives me the detailed X-Spam-Report header listing the scores, rule names, and rule descriptions. Thanks for the answer. I've tried most

Fix for RDJ update issue

2006-10-19 Thread Bowie Bailey
After the domain went back to normal, I continued to have a problem with RDJ. It still reported lint errors. The problem was that the RulesDuJour directory had become corrupted with the temporary page that had been downloaded during the outage. The fix was to simply delete the contents of the

RE: I'm getting killed with spammers

2006-10-18 Thread Bowie Bailey
Debbie D wrote: On Mon, October 16, 2006 2:28 pm, Debbie D said: this high amount of spam, (BTW scoring at 20-well over 1000) is killing the loads and I have screaming clients.. Just this afternoon (again around 12.30) it loaded up again with 312 mails.. the web based control

RE: Spamassassin detailed log entries

2006-10-18 Thread Bowie Bailey
What I do is this: add_header all Report _REPORT_ This gives me the detailed X-Spam-Report header listing the scores, rule names, and rule descriptions. Bowie Fabien GARZIANO wrote: Thanks for the answer Theo. I think I was not clear enough in my first message. What I'm looking for

RE: This image is turning frequent..

2006-10-18 Thread Bowie Bailey
Matt Florido wrote: * Jo Rhett [EMAIL PROTECTED] [10-17-2006 10:25]: score SARE_GIF_STOX 2.5 2.5 2.5 2.5 Can you tell me what each corresponding 2.5 represents? man Mail::SpamAssassin::Conf score SYMBOLIC_TEST_NAME n.nn [ n.nn n.nn n.nn ] Assign scores (the number of points for

RE: sa-update versus rulesdujour questions

2006-10-18 Thread Bowie Bailey
Jo Rhett wrote: Hm. I'm surprised on no answers. Can I persist? This topic is of real interest to me... Jo Rhett wrote: Okay, there's no docs on this so I wanted to ask if someone has any insights different than what I have observed. SA-Update seems to require less configuration

RE: sa-update versus rulesdujour questions

2006-10-18 Thread Bowie Bailey
listing advantages and disadvantages as I see it. I use RDJ mainly due to inertia. If it works, don't touch it. Bowie Bailey wrote: I don't know that there is much difference in the configuration required. For sa-update, you create a file with a list of rulefiles. For RDJ, you create

<    4   5   6   7   8   9   10   11   12   13   >