Re: Sharing and merging bayes data?

2009-12-17 Thread Rajkumar S
On Thu, Dec 17, 2009 at 7:44 PM, Michael Scheidell list-s...@secnap.com wrote: or, as one posted suggested, use one single mysql database.  its faster and more stable. Thanks every one, mysql is the way to go. raj

Re: Sharing and merging bayes data?

2009-12-17 Thread Rajkumar S
On Fri, Dec 18, 2009 at 9:29 AM, Matt Kettler mkettler...@verizon.net wrote:  As you mentioned, you'd need a custom script  (not wildly complicated for a good perl scripter, but beyond the bounds of someone with only crude scripting skills.) as well as historical copies of each database from

Re: Spam from compromised web mails

2009-12-16 Thread Rajkumar S
On Wed, Dec 16, 2009 at 1:07 PM, Yet Another Ninja sa-l...@alexb.ch wrote: I don't do any manual training, ever. SA's butler, autolearn, does it for me. bayes_auto_learn  1 In this case if a new spam comes and it does not score on any other rules, Would't this be classified as a ham? Also I

Re: Museum piece...

2009-12-16 Thread Rajkumar S
On Thu, Dec 17, 2009 at 10:05 AM, McDonald, Dan dan.mcdon...@austinenergy.com wrote: I miss my Ohio Scientific C3. I had a Tektrinix 4027 terminal with more ram than the computer. Just wondering if any one here started off with BBC Micro? I had couple of them in my school and they were truly

Sharing and merging bayes data?

2009-12-16 Thread Rajkumar S
Hello, I have 2 SA servers running for a single domain. Both were primed with a set of 200 spam and ham messages are are now auto learning. After about a day both have auto learned different numbers of ham and spam mails. Is it possible to merge the bayes data every night and update both servers

Re: Spam from compromised web mails

2009-12-15 Thread Rajkumar S
On Tue, Dec 15, 2009 at 3:51 PM, Mike Cardwell spamassassin-us...@lists.grepular.com wrote: That particular email was sent from a host in Nigeria connecting to a host in Brazil. The Nigerian host is listed on Barracuda, the SBL and the XBL. Is there a way to write a rule to tag mails which are

Re: Spam from compromised web mails

2009-12-15 Thread Rajkumar S
On Tue, Dec 15, 2009 at 8:29 PM, Matt Garretson ma...@assembly.state.ny.us wrote: Do you use Bayes?  Bogofilter (another bayesian filter) catches those here.  The one you posted scored 0.94 here and would have been dropped. I am not using bayes as of now, SA is site wide and so proper training

Re: Spam from compromised web mails

2009-12-15 Thread Rajkumar S
On Tue, Dec 15, 2009 at 9:07 PM, Yet Another Ninja sa-l...@alexb.ch wrote: even using site wide, autolearning will help your detection a LOT. Don't underestimate it... When running site wide, how do you get ham to train bayes? I can manage spam by spam reporting and such, but getting ham

Spam from compromised web mails

2009-12-14 Thread Rajkumar S
Hi, Occasionally I receive mail from compromised web mails asking user name and password from my users. The source IPs are usually clean (as they are legitimate mail servers) and do not catch any ip based rules. Usually one or two mail accounts are used to pump mails via web mail after

Best practices for getting HAM for bayes training

2009-02-02 Thread Rajkumar S
Hi, I am running SA in a hosted environment where SA is the MX and it scans the mails and forwards to real mail server. We have report spam facility where users report spam that went through SA. I am not using bayes as of now but want to start using. To train bayes we have enough spam (via user's

SA rules stats (Was: SARE false positives on MY_CID_* rules)

2009-01-29 Thread Rajkumar S
2009/1/30 Stefan Jakobs stefan.jak...@rus.uni-stuttgart.de After activating the rule I haven't seen any more FP. But that doesn't mean much. Here are my stats from yesterday: Rank Hits% Msgs % Spam% Ham Score Rule -- --- -

Multiple per user?

2008-01-17 Thread Rajkumar S
Hi, I am using SA from amavis-new, with postfix, in before-queue configuration, with per user scores (provided by amavis) I also want to implement per user bayes. But since SA takes only a single user name, amavis-new is not able to implement per-user bayes. Is it a good idea for SA to take

Re: Purpose for SpamAssassin using MySQL

2007-10-03 Thread Rajkumar S
On 10/3/07, Rob Mangiafico [EMAIL PROTECTED] wrote: Picking up on the point of one Bayes DB in MySQL vs. individual ones for each user, is it more effective in an ISP/host environment where you have diverse users to have them all share one Bayes DB with autolearn, or is it better if they each

Re: update from 3.1.7

2007-09-18 Thread Rajkumar S
On 9/18/07, infolistas listas [EMAIL PROTECTED] wrote: HI users could anyone give me a help updating sa 3.1.7 - 3.2.3? I'm not sure how I'll do that I'm using ubuntu feisty, mailscanner, postfix, ldap, courier-imap are there .deb for sa 3.2.3? A Sub question, How does people in the list

Authenticated SMTP and RBLs

2007-09-12 Thread Rajkumar S
Hi, I manage 2 smtp servers, one for outgoing and uses smtp authentication. Other incoming and scans mail using SA. Our users some times send mails from dialup ips which are black listed, but the mails always come via our authenticated smtp server. Now when one of the customers send a mail to

[OT] Seeing increase in smtp concurrency ?

2007-09-06 Thread Rajkumar S
Hi, Does any one seeing increasing smtp concurrency for the past couple of weeks? I run couple of (qmail/simscan/spamassassin) mail servers and all experience the same problem. The spam does not increase, but this is hogging my mail servers. Probably a new crop of spamming tools? I am attaching

Re: [OT] Seeing increase in smtp concurrency ?

2007-09-06 Thread Rajkumar S
On 9/6/07, Rick Macdougall [EMAIL PROTECTED] wrote: For qmail I added the file timeoutsmtpd in /var/qmail/control with a value of 180 inside it (default is 7200) and it seems to have fixed the problem without causing any new problems. Thanks, I have changed timeoutsmtpd to 60 and the server is

Re: Newbie Questions.

2007-04-23 Thread Rajkumar S
On 4/23/07, Grant Peel [EMAIL PROTECTED] wrote: 5. Dare I ask if some wants to summerize the Razor installation process? http://wiki.apache.org/spamassassin/RazorSiteWide This works for me. raj

Re: Is Bayes Dead? Have the spammers won?

2007-03-22 Thread Rajkumar S
On 3/22/07, Kris Deugau [EMAIL PROTECTED] wrote: Anyone using SA in an ISP environment will run into this problem; I agree here, I am using SA in an ISP and I have disabled Bayes. There is no way I can get regular good supply of ham from our customers. No one want's to forward their good mails

phone number spam

2006-12-15 Thread Rajkumar S
Hi, for last 2 days I am getting lot's of spam with phone numbers rather than website or email address to contact spammer. Unfortunately the only rules that are matching for these spam are the rbl ones. Any one else seeing this type of new spam? Any one with some rule ideas? A sample is at

Re: phone number spam

2006-12-15 Thread Rajkumar S
On 12/15/06, Dennis Davis [EMAIL PROTECTED] wrote: The sample indicates you're running SpamAssassin-3.0.3. That's *old*. Seriously consider upgrading to SpamAssassin-3.1.7. Then run sa-update. Install the Botnet plugin. That should score on the sample you've given. Also look at installing

What is this spam trying to do ??

2006-12-04 Thread Rajkumar S
Hi, I got a new spam, and it just have a single number as content, and worryingly the sender ip is not listed in any blacklists. Some spammer trying to clean his address lists? raj -- Return-Path: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: (qmail 27195 invoked from network); 5

CNHC - stock spam

2006-11-25 Thread Rajkumar S
Hi, I am using the latest SARE stocks rules, and my spamassassin catches most of the stock spam, but today I received a couple of spam peddling stocks of CNHC. This spam is so perfect that it's getting negative scores and not matchign any of the SARE rules. Any one with same experience? raj