MS % rate of catch

[Derek Winkler]

Is /usr/local/bin in your PATH? "echo $PATH" to check.

When you did ./rules_du_jour, was your current directory /usr/local/bin?

The restart command should be "/etc/init.d/MailScanner reload" not
"/etc/init.d/MailScanner restart", my mistake.

> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> Behalf Of Billy A. Pumphrey
> Sent: Tuesday, April 06, 2004 11:20 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: MS % rate of catch
>
>
> Ok, almost there I think:
> - I changed it to just "rules_du_jour".
> - I put it under /usr/local/bin.
> - I changed the command to restart SA to MS as you said.
> - I changed the "rules_du_jour" to an executable using "chmod +x
> rules_du_jour"
> - I tried running "rules_du_jour" using "./rules_du_jour" and just
> "rules_du_jour".
>         I get these errors:
>         rules_du_jour = No such file or directorysh
>         ./rules_du_jour = No such file or directory
>
> Any ideas please?
>
> billy
>
> -----Original Message-----
> From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> Behalf Of Derek Winkler
> Sent: Tuesday, April 06, 2004 9:43 AM
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: MS % rate of catch
>
> If it's called rules_du_jour.txt that's most likely because you
> downloaded
> it with Windows.
>
> It should be just "rules_du_jour".
>
> I good location to put it is /usr/local/bin.
>
> You don't use spamd when using MailScannner.
>
> Change this command to the command used to restart
> MailScanner, possibly
> /etc/init.d/MailScanner restart. I just set mine to "true" and just do
> the
> regular MailScanner restart, by default every 4 hours I believe,
> configurable in MailScanner.conf.
>
> > -----Original Message-----
> > From: MailScanner mailing list [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > Behalf Of Billy A. Pumphrey
> > Sent: Tuesday, April 06, 2004 10:39 AM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: MS % rate of catch
> >
> >
> > Awesome,
> > I am configuring it now having a little trouble.  A lot of
> my newbness
> > is again because I don't use Linux that often, and will
> hopefully soon
> > be familiar with it.
> >
> > Will you tell me this:
> >
> > It doesn't state where to put the rules_du_jour.txt file.  I could
> > assume the spamassassin rules directory or possibly this line "The
> > crontab line above runs /root/bin/rules_du_jour"
> >
> > Also on the spamd restart process.  I can't get the command
> > to work.  I
> > think it would be ="/etc/rc.d/init.d/spamassassin restart" but it
> > doesn't work when I type it out, and the direcoties exists in
> > that path
> > except for the spamassassin directory.
> >
> > Thank you
> > Billy Pumphrey
> > -----Original Message-----
> > From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> > Behalf Of Derek Winkler
> > Sent: Tuesday, April 06, 2004 9:21 AM
> > To: MAILSCANNER at JISCMAIL.AC.UK
> > Subject: Re: MS % rate of catch
> >
> > It does some other ones but for some reason doesn't mention
> > them up top.
> >
> > Look at the arrays for further rules.
> >
> > I get a lot of hits on BLACKLIST_URI. I also use RANDOMVAL and
> > BOGUSVIRUS.
> >
> > We only use BOGUSVIRUS because the support calls from
> users, "I got an
> > email
> > that says I have a virus. What should I do?", get very tiresome.
> >
> > Keep in mind that the use of more and more custom rulesets increases
> > memory
> > usage of each MailScanner process.
> >
> > > -----Original Message-----
> > > From: MailScanner mailing list
> [mailto:MAILSCANNER at JISCMAIL.AC.UK]On
> > > Behalf Of Billy A. Pumphrey
> > > Sent: Tuesday, April 06, 2004 10:19 AM
> > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > Subject: Re: MS % rate of catch
> > >
> > >
> > > Good information.  On the rulesdujour script, I see that it
> > > only updates
> > > "BIGEVIL TRIPWIRE ANTIDRUG EVILNUMBERS" <-- those.  What
> > > about the rest?
> > >
> > > -----Original Message-----
> > > From: MailScanner mailing list
> > [mailto:MAILSCANNER at JISCMAIL.AC.UK] On
> > > Behalf Of Martin Hepworth
> > > Sent: Tuesday, April 06, 2004 3:05 AM
> > > To: MAILSCANNER at JISCMAIL.AC.UK
> > > Subject: Re: MS % rate of catch
> > >
> > > Billy
> > > check out the rules emporiam (www.rulesemporiam.com) and
> the Custom
> > > Rules sets
> > (http://wiki.apache.org/spamassassin/CustomRulesets). This
> > > will increase your hit rate quite a bit.
> > >
> > > You'll need to add these rules into
> /etc/mail/spamassassin and then
> > > restart MailScanner. Make sure the rule files are world readable.
> > >
> > > It's also very worthwhile training the bayes DB - there's
> > > plenty on the
> > > spamassassin web site about this.
> > >
> > > Also worth watching the SA users email list for new/updates
> > > to the rules
> > > and possibly using the rulesdujour script to
> automatically pull down
> > > updates. The spammers are constantly finding new ways of
> > > getting around
> > > SA so it's almost a requirement to keep up to date on these.
> > >
> > > --
> > > Martin Hepworth
> > > Snr Systems Administrator
> > > Solid State Logic
> > > Tel: +44 (0)1865 842300
> > >
> > >
> > > Billy A. Pumphrey wrote:
> > > > Does this seem a little off or about right?
> > > >
> > > > Out of 110 spam messages, this is what MS did:
> > > >
> > > > 38 passed through as NOT spam
> > > > 72 passed through as spam
> > > >
> > > > That is about a 65% rate.
> > > >
> > > > Here are my spamassassin score levels:
> > > > Required SpamAssassin Score = 6
> > > > High SpamAssassin Score = 7.2
> > > >
> > > > Or is that about right?  I did have the required score on
> > > 5, but I put
> > > > it on 6.
> > > >
> > > > Thank you
> > > > Billy Pumphrey
> > >
> > >
> >
> **********************************************************************
> > >
> > > This email and any files transmitted with it are confidential and
> > > intended solely for the use of the individual or entity
> to whom they
> > > are addressed. If you have received this email in error
> > please notify
> > > the system manager.
> > >
> > > This footnote confirms that this email message has been swept
> > > for the presence of computer viruses and is believed to be clean.
> > >
> > >
> >
> **********************************************************************
> > >
> >
>