Re: After moving mailserver to another box three rules dont work

Petzke, Martin Müller eingetragen beim Amtsgericht Berlin-Charlottenburg, HRB 70507 Umsatzsteuer-ID: DE201038407 Sie wollen auch unterwegs im Bereich Telekommunikation informiert sein? http://mobil.teltarif.de bringt die gewohnten Informationen auf Ihr Handy. -- Anthony Peacock Head of Reasearch

Re: Assistence needed with spamassasin under RedHat 5.2

the Spam List = and Spam Lists To Be Spam = config settings. MailScanner will mark a message as spam if the number of RBLs configured in Spam Lists To Be Spam = are hit, regardless of the SpamAssassin score. -- Anthony Peacock CHIME, UCL Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp

SORBS worth AU$1.2m

http://www.australianit.news.com.au/story/0,27574,25708610-15306,00.html -- Anthony Peacock CHIME, UCL Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: SORBS worth AU$1.2m

rich...@buzzhost.co.uk wrote: On Thu, 2009-07-02 at 14:40 +0100, Anthony Peacock wrote: http://www.australianit.news.com.au/story/0,27574,25708610-15306,00.html Is that to a Spam Cartel? It's overpriced :-) Well the article states Ms Sullivan said the highest legitimate offer was about

Re: A difficult one to weed out?

BODY: iXhash found @ generic.ixhash.net 0.5 NIXSPAM_IXHASH BODY: iXhash found @ ix.dnsbl.manitu.net 0.5 RAZOR2_CHECK Listed in Razor2 (http://razor.sf.net/) 0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS -- Anthony Peacock CHIME, UCL

Re: new spam image with random body message

Adam Cécile (Le_Vert) wrote: Anthony Peacock a écrit : [..] 0.9 RCVD_IN_PBLRBL: Received via a relay in Spamhaus PBL [62.57.252.74 listed in zen.spamhaus.org] 3.0 RCVD_IN_XBLRBL: Received via a relay in Spamhaus XBL 2.0 RCVD_IN_JANET_DUL

Re: new spam image with random body message

Hi, Paweł Tęcza wrote: Anthony Peacock pisze: Adam Cécile (Le_Vert) wrote: Hello, Could you give us the line from your local.cf to enable such tests ? Thanks in advance, Which tests? You quote the whole list, some are standard some are additions. Hi Anthony, Please show us your

Re: new spam image with random body message

Paweł Tęcza wrote: Anthony Peacock pisze: Hi, Paweł Tęcza wrote: Hi Anthony, Please show us your addition tests, of course :D Unless you are a UK Higher Education organisation you won't be able to use RCVD_IN_JANET_DUL. What a pity. We are Polish university :) Yes, but this is just

Re: Lots of 419/scam and investment spams getting through suddenly

SUBJ_ALL_CAPS Subject is all capitals 0.4 AWLAWL: From: address is in the auto white-list It looks like my Bayes is trained to be better at picking these up. -- Anthony Peacock CHIME, UCL Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics

Re: new spam image with random body message

you please show me the Content-* headers of image attachment? Did you send all headers of that spam in your previous post? I have some success with fighting that spam I called BAD GOOD PENIS, but I can see that it evolves, so my rules should be improved too. My best regards, Pawel -- Anthony

Re: Some questions on sa-learn

messages saying: Jan 19 06:31:30 eolo MailScanner[22125]: SpamAssassin temporary working directory is /var/spool/MailScanner/incoming/SpamAssassin-Temp is it something I should be worried about? You should ask this on the MailScanner mailing list. I do think that looks wrong to me. -- Anthony

Re: more habeas spam

. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: How can I see all rules applied?

: auto-whitelist: DB addr list: file locked, breaking lock [18824] dbg: locker: safe_unlock: unlink /root/.spamassassin/auto-whitelist.lock [18824] dbg: auto-whitelist: post auto-whitelist score: 2.393667 -- Anthony Peacock CHIME, Royal Free University College Medical School WWW

Re: How can I see all rules applied?

. But how can I delete this auto-whitelist? I found two of them in /root/.spamassassin/auto-whitelist and /var/amavis/.spamassassin/auto-whitelist. I even disabled it in /etc/mail/spamassassin/v310.pre No avail. :( Anthony Peacock wrote: Hi, I am not sure what you think the problem is. If you

Re: How can I see all rules applied?

... -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: problem with MSGID_MULTIPLE_AT

impact on the overall score. score MSGID_MULTIPLE_AT 0.1 -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: Rules in local.cf are not read?

/\b(?:luxury|handbag|rolex|gucci|armani|prada|dsquared|burberry|hermes|fashion|discount|replica|watches|\bdior\b|bikkember)/i describe SHOPPING_B Non adoro sperperare Thanks for any help, Simone. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW

Re: SA experts needed here - SPAM examples

to learn 200 spam _AND_ 200 HAM messages before Bayes will start scoring. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study Health Informatics - Modular Postgraduate Degree http://www.chime.ucl.ac.uk/study-health-informatics/

Re: HABEAS_ACCREDITED_COI

Hi, ram wrote: On Tue, 2008-02-26 at 08:49 +, Anthony Peacock wrote: Hi, I have just received a number of spam emails which got through the filtering system because they hit the HABEAS_ACCREDITED_COI rule, which give them -8. They all came to role based addresses that are never used

Re: HABEAS_ACCREDITED_COI

change to stops those messages, by disabling all of the habeas.com tests. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study at CHIME in 2008. http://www.chime.ucl.ac.uk/study-health-informatics/

HABEAS_ACCREDITED_COI

to complain about the company. Does anyone know anything about this. At this stage I am planning on changing the score for all HABEAS_ACCREDITED_??? rules to 0, to make them neutral to the score. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http

Re: HABEAS_ACCREDITED_COI

Hi Justin, Justin Mason wrote: Jason Haar writes: Anthony Peacock wrote: I have had a look around the http://www.habeas.com/ website and can't really see how to check the company in question, or make a complaint. There is a form for asking them to ask the company to remove these addresses

Re: HABEAS_ACCREDITED_COI

Hi, Following up to myself... Anthony Peacock wrote: Hi Justin, Justin Mason wrote: Jason Haar writes: Anthony Peacock wrote: I have had a look around the http://www.habeas.com/ website and can't really see how to check the company in question, or make a complaint. There is a form

Re: mails not being received

? Was MailScanner working fine before this, or is this a new install of MailScanner? -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ Study at CHIME in 2008. http://www.chime.ucl.ac.uk/study-health-informatics/

Re: Safe Phishing

with SPAM detection. They are used in MailScanner's Phishing detection feature. I really do not think they can be used without modification in SA as SPAM signs. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ A CAT scan should

Re: Safe Phishing

it in a another situation without understanding what it is there for. These are white and blacklists for the Phising detection feature, they have nothing to do with spam detection. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp

Re: Safe Phishing

are better. I just started using SpamAssassin and I would like to see some opinion from more expirienced users. Regards, Giga -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ A CAT scan should take less time than a PET scan

Re: Safe Phishing

to use MailScanner directly so I'm using spamd. My question is about lowering chances for false positives by having safe list from MailScanner. But since I just started to use SpamAssassing I'm asking is it wise and needed. Regards, Giga Anthony Peacock wrote: Hi, Those files are effectively, white

Re: Increase on Spambots?

for updates runs out after 30 days? -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET scan could result in a lot

Re: Feeding SA-learn

John Thompson wrote: On 2008-01-23, Anthony Peacock [EMAIL PROTECTED] wrote: My intention was to manually feed the few spam messages that slip thru undetected. By the time I get a hold of those, they are in the recipient's mail client inbox, not in the server. I was thinking, if I save

Re: Feeding SA-learn

to report mail to third-parties, you should use the sa-learn command directly instead.) This option teaches the Bayesian system, but also submits to third party systems like DCC and SpamCop. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk

Re: Feeding SA-learn

Diego Pomatta wrote: Anthony Peacock escribió: Can I feed a plain text file representing just the body of a message to sa-learn? /Diego Yes you can, who to stop it? I just sent your message body as --ham, and it told it learned one message. I meant without the headers, just

Re: Feeding SA-learn

Diego Pomatta wrote: Anthony Peacock escribió: Well the short answer is, yes you can. The slightly longer answer is that you won't get as good results doing this, as the Bayes system uses tokens found in the complete message. By only learning on the body you will not gain any advantage

Re: Feeding SA-learn

hard disk. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET scan could result in a lot of things.- Carl

Re: Feeding SA-learn

in headers. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET scan could result in a lot of things.- Carl Princi

Re: New credit card scams .. how to catch these

Rick Zeman wrote: What could it trigger on?If you take it outside of the context of the info that you provided that's NOT apparent from that email, it's a perfectly legitimate email message from a perfectly legit MTA (well, as legit as hotmail is). Feed it into Bayes? -- Anthony

Re: Is it possible to detect/undo report_safe?

(whitelisted), X-TUD-IAP-MailScanner: Found to be clean X-TUD-IAP-MailScanner-SpamCheck: spam, SpamAssassin (not cached, That markup is added by MailScanner not SpamAssassin. SpamAssasin can't automatically remove that markup, it only removes markup it has added 'natively'. -- Anthony Peacock

Re: Bayesian filtering not kicking in, but it's trained.

as the same user that SA runs as normally? -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET scan could result

Re: Which rules are used

Burman Argentina -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET scan could result in a lot of things

Re: spamd keeps running at 99% CPU until i kill the process

whether deleting both of those files is a good way to go. No. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET

Re: spamd keeps running at 99% CPU until i kill the process

to go. No. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ A CAT scan should take less time than a PET scan. For a CAT scan, they're only looking for one thing, whereas a PET scan could result in a lot of things.- Carl

Re: Problem with sa-update and ImageInfo

and SA was loading the copy included with SA 3.2 via v320.pre. So... not a bug. Regards, Daryl -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ I'm in shape. - ROUND is a shape

Re: Problem with sa-update and ImageInfo

) in the 3.1.8 channels by mistake... But I guess if that was happening more people would have piped up by now :-) Luix 2007/6/5, Anthony Peacock [EMAIL PROTECTED]: Anthony Peacock wrote: Hi, Luis Hernán Otegui wrote: You're probably loading the plugin twice, one from your local.cf or a v3

Re: Problem with sa-update and ImageInfo

Daryl C. W. O'Shea wrote: Anthony Peacock wrote: And as I noted above, by the time I see the error from the cron output, running sa-update by hand does not show the problem. It is almost as if it only happen if there really is an update to download. rm -f /var/lib/spamassassin/3.001008

Re: Problem with sa-update and ImageInfo

if there really is an update to download. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ I'm in shape. - ROUND is a shape

Re: Problem with sa-update and ImageInfo

Free University Collge Medical School E-Mail: [EMAIL PROTECTED] -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ I'm in shape. - ROUND is a shape

Re: Problem with sa-update and ImageInfo

Anthony Peacock wrote: Hi, Luis Hernán Otegui wrote: You're probably loading the plugin twice, one from your local.cf or a v3**.pre file, and the other from the ImageInfo.cf. Take out one of the LoadPlugin directives (preferably the one from local.cf or the *.pre files), and everything

Re: Problem with sa-update and ImageInfo

Daryl C. W. O'Shea wrote: Anthony Peacock wrote: And as I noted above, by the time I see the error from the cron output, running sa-update by hand does not show the problem. It is almost as if it only happen if there really is an update to download. rm -f /var/lib/spamassassin/3.001008

Re: How to use SpamAssassin from PHP?

to achieve what we really want. Or lower the spam threshold... Or raise the scores of the rules that are hitting... -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples

Re: Insecure Dependency

; return $tmp; }, }, The commented out my $tmp line is the original lime. PS your colourful background makes your email very hard to read. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk

Re: RDJ handling question

to its TMPDIR and runs some sanity checks, then copies the files into the SA directory. Try running RDJ manually with debugging switched on. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have

Re: spamd as root

. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an idea and we exchange these ideas

Re: How are cllassified this?

requirements for these spams, and someone might be able to suggest a rule that meets your needs. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I

Re: How are cllassified this?

of others it does the trick. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have

Re: Big trouble

which adds 3.5 points, and your Bayes system scored it as BAYES_40 which subtracted 0.2 points. I did get a few of those emails come through at the start, but by feeding them into my Bayes system they now get caught. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW

Re: /etc/spamassassin or /var/lib/spamassassin?

PROTECTED] -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an idea and we

Re: /etc/spamassassin or /var/lib/spamassassin?

is the header I posted below. It seems as if it is not reading the whitelist_from entries at all. Or whitelisting is somehow disabled, is that possible? On Thu, Mar 29, 2007 at 02:19:06PM +0100, Anthony Peacock wrote: Hi, I would think we need to see the FULL headers of this example email before

Re: /etc/spamassassin or /var/lib/spamassassin?

message in MIME format. On Thu, Mar 29, 2007 at 03:03:10PM +0100, Anthony Peacock wrote: Hi, Because, more often than not, the reason that whitelisting is not matching is that the headers you think are matching are not. Or there is a type in the whitelist.cf file. By not allowing us

Re: Big trouble

are. Same form as before, save the message (with full headers) and place it somewhere where we can download it. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples

Re: Big trouble

RBL: Relay in JANET MAPS RBL+ RBL [102.176.29.76 listed in rbl-plus.mail-abuse.ja.net] 0.0 MSGID_FROM_MTA_HEADER Message-Id was added by a relay -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp

Re: Is Bayes Dead? Have the spammers won?

on? -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an idea and we exchange

Re: Another false negative

also need to train it with a few similar messages for it to significantly change its scoring. You're saying right. Now I understand. Thank you, rocsca -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple

Re: Another false negative

change its scoring. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an idea

Re: Another false negative

Then the biggest difference is that my Bayesian scoring gives it a BAYES_99 score and your's gives it a BAYES_50 score. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples

Re: Another false negative

scoring gives it a BAYES_99 score and your's gives it a BAYES_50 score. So you are saying that I have to train SA? That would be how you would improve your Bayes accuracy, yes. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp

Re: what does the 'new' --allowupdates option to sa-update do?

occasion where you decide to allow a channel to update a plugin automatically. This is something you would do only after reviewing that channel. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have

Re: spamassassin beginner question

a configuration setting to be correctly set before it would find the rules downloaded by sa-update. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I

Re: ANTIDRUG rulesets

Hi, Jon Armitage wrote: -Original Message- From: Anthony Peacock [mailto:[EMAIL PROTECTED] Sent: 13 February 2007 15:56 To: SpamAssassin Users sa-update updates the stock rules that are distributed with SA. Rules Du Jour is used to update add-on rulesets like the SARE rules

Re: ANTIDRUG rulesets

If you want a lot more information you can use the debug switch spamassassin -D -t email.txt -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I

Re: ANTIDRUG rulesets

like you are running any network tests, you are certainly not running any Bayes tests. Can you remind us what OS this is on, what version of spamasssassin, how you installed SA, how you call SA? -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http

Re: ANTIDRUG rulesets

-learn utility to teach the Bayes system about Spam. sa-learn --ham email.txt http://spamassassin.apache.org/full/3.1.x/doc/sa-learn.html Your network tests are still not working. Run spamassassin -D again to make sure the Net::DNS installation is being used by SA. -- Anthony Peacock CHIME

Re: ANTIDRUG rulesets

need to continue to feed messages into the system. If you can train your Bayes system to correctly mark these at 99% probability that will give you another 3.5 marks. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have

Re: ANTIDRUG rulesets

and after instruct bayes db.. The other thing to do is to run sa-update to make sure you are running the latest versions of the standard SA rules. http://spamassassin.apache.org/full/3.1.x/doc/sa-update.html -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http

Re: ANTIDRUG rulesets

? sa-update updates the stock rules that are distributed with SA. Rules Du Jour is used to update add-on rulesets like the SARE rules. If you are not running sa-update you are only updating a small section of your rules. -- Anthony Peacock CHIME, Royal Free University College Medical

Re: ANTIDRUG rulesets

to make available an example of the messages that aren't being stopped. Preferably with full headers. That way people here can run them through their systems and tell you which rules hit them. Put a full email (including all headers) on a web page somewhere. -- Anthony Peacock CHIME, Royal

Re: ANTIDRUG rulesets

RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net [Blocked - see http://www.spamcop.net/bl.shtml?60.215.113.19] Looking at this my Bayes scores it highly, but so does a rules from the SARE_STOCKS rule set. There are also a number of network tests which get this. -- Anthony

Re: ANTIDRUG rulesets

I miss? 1. You need to download and install the SARE_STOCKS ruleset from http://www.rulesemporium.com/ 2. You should enable network tests Can you so us which tests these emails hit on your system? -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http

Re: Bayes resolution gettin weaker

something as ham that it shouldn't, sa-learn was smart enough to undo it. Change the thresholds for auto learning. Mine are: bayes_auto_learn_threshold_nonspam -0.1 bayes_auto_learn_threshold_spam 12.0 -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http

Re: Bayes

. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an idea and we exchange

Re: Bayes

Hi Dan, Dan Barker wrote: -Original Message- From: Anthony Peacock [mailto:[EMAIL PROTECTED] Sent: Friday, January 26, 2007 7:22 AM To: users@spamassassin.apache.org Subject: Re: Bayes snip I also manually learn by mistake. All FNs FPs are fed back to the system. And I occasionally

Re: Scan Messages according to arrival

. As the docs say, if this happens regularly you can raise this value to keep the FIFO behaviour. But if your incoming queue is regularly backing up that much you probably should look at why. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http

Re: Thoughts on using DCC

Hi, Magnus Holmgren wrote: On Thursday 16 November 2006 12:59, Anthony Peacock wrote: I realise that DCC is not a direct indicator of spamminess but an indicator of bulkiness. And I also realise that the correct answer to my question is 'it depends on your local needs'... Given that what

Thoughts on using DCC

to tip these over. I know I could adjust the DCC score, but was wondering what other people do? -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I

Re: ALL_TRUSTED creating a problem

organisation. But even without that I have never had ALL_TRUSTED misfire on me. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have

Re: ALL_TRUSTED creating a problem

Anthony Peacock wrote: Kevin Golding wrote: In article [EMAIL PROTECTED], Jo Rhett [EMAIL PROTECTED] writes These arguments are getting sillier and sillier. I'm asking why it doesn't work in a plain-jane do-nothing normal public box not behind a NAT. And every argument so far has been

Re: subscribing to the users list documentation

- - - -- - Anthony Peacock My fault, that blah at blahblahblah stuff just doesn't jump out at me and even though it is bold and large, the stuff below it gets my attention more because they are www links... Can anyone relate? Agreed! Even though I knew it was there I had to read very carefully

Re: subscribing to the users list documentation

-- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an idea and we exchange these ideas

Re: Low spam score but marqued as spam

got an idea ? -- F a b i e n G a r z i a n o -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you

Re: Spamassassin from CPAN and sa-update location.

as sa-update?) Bookworm -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have

Re: commerce Antispam Products

.) Thanks, --Jeff -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have

Re: Discourage broken content

around this issue at the moment. There is some concern about removing the limit completely, so the current discussion is about a scheme that checks ahead for a Mime boundary within a fixed window after the max size value is reached. -- Anthony Peacock CHIME, Royal Free University College Medical

Re: Discourage broken content

Justin Mason wrote: Anthony Peacock writes: Rick Cooper wrote: From: decoder [mailto:[EMAIL PROTECTED] Sent: Friday, August 25, 2006 4:23 PM To: Rick Cooper Cc: users@spamassassin.apache.org Subject: Re: Discourage broken content -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rick Cooper

Re: AWL confusion..

just mess my mind up? http://wiki.apache.org/spamassassin/AwlWrongWay -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple

Re: False positives and Bayes

that the spammy looking maling lists messages are ham I add those lists to one of the whitelists. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you and I will still

Re: Scoring Issue

are. If they are using SpamAssassin and they can provide you with the list of rules that hit your emails, then this list might be able to give you advice on how to stop this happening in the future. Without that we are just guessing. -- Anthony Peacock CHIME, Royal Free University College Medical School

Re: bayes_auto_learn_threshold failed

itself. Check the lines either side of these lines. Make sure that the line endings are correct eg you have copied a file that was edited on a Windows PC onto a *nix computer and the line endings are still in DOS format. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW

Re: bayes_auto_learn_threshold failed

Hi, Beast wrote: Anthony Peacock wrote: Hi, Beast wrote: Any reason why this config failed? According to Mail::SpamAssassin::Plugin::AutoLearnThreshold it is a valid config. # spamassassin --lint [11919] warn: config: failed to parse line, skipping: bayes_auto_learn_threshold_nonspam 0.1

Re: Help for beginner

version numbers combined with the fact that this is the SA list led me to belive he was refering to SA. -- Anthony Peacock CHIME, Royal Free University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ If you have an apple and I have an apple and we exchange apples then you

Re: Myway.com and RFC-ignorant.org

John D. Hardin wrote: On Wed, 5 Jul 2006, Anthony Peacock wrote: John D. Hardin wrote: On Tue, 4 Jul 2006, Anthony Peacock wrote: Myway.com seem to publish a proper SPF record. The default score for SPF_PASS is -0.0. Would anyone recommend lowering that slightly to help balance

Re: Myway.com and RFC-ignorant.org

Hi, Michael Scheidell wrote: -Original Message- From: Anthony Peacock [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 04, 2006 5:06 AM To: SpamAssassin Users Subject: Myway.com and RFC-ignorant.org balance these scores out? I understand that SPF is not a sign of hammy/spammyness

  1   2   >