<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=US-ASCII">
<TITLE>Message</TITLE>
<META content="MSHTML 6.00.2800.1400" name=GENERATOR>
<STYLE></STYLE>
</HEAD>
<BODY bgColor=#ffffff>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
color=#0000ff size=2><FONT color=#000000> /etc/init.d/MailScanner
reload</FONT></FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>will do it.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>Do a </FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2> spamassassin -D --lint -p
/etc/MailScanner/spam.assassin.prefs.conf</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>first to make sure the rules lint OK.</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>Cheers,</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
size=2>Phil</FONT></SPAN></DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004><FONT face=Arial
color=#0000ff size=2></FONT></SPAN> </DIV>
<DIV dir=ltr align=left><SPAN class=363045214-27052004></SPAN><FONT
size=2>----<BR>Phil Randal<BR>Network Engineer<BR>Herefordshire
Council<BR>Hereford, UK </FONT></DIV>
<DIV> </DIV><BR>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left>
<HR tabIndex=-1>
<FONT face=Tahoma size=2><B>From:</B> MailScanner mailing list
[mailto:MAILSCANNER@JISCMAIL.AC.UK] <B>On Behalf Of </B>Rob<BR><B>Sent:</B> 27
May 2004 15:41<BR><B>To:</B> MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B> Re:
SPam getting through....<BR></FONT><BR></DIV>
<DIV></DIV>
<DIV><FONT face=Arial size=2>So I downloaded and added to
/etc/mail/spamassisain a few custom cf files I got from a site mentioned
here... do I have to do anything to make SA see them? Just restart MS
/etc/init.d/Mailscanner restart ?</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks for everyone's help!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT><BR>Rob....</DIV>
<DIV> </DIV>
<DIV><BR> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=rob@THEHOSTMASTERS.COM href="mailto:rob@THEHOSTMASTERS.COM">Rob</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Thursday, May 27, 2004 9:02
AM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: SPam getting
through....</DIV>
<DIV><BR></DIV>
<DIV><FONT face=Arial size=2>It has 100's of the token.expire files. I can
delete these right? I mean up to a recent date? But funny enough this
morning I had about 300 of them that filled up my root partition and all
were dated May 25th & 26th</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>And I am running 2.63</FONT></DIV>
<DIV><BR>Rob....</DIV>
<DIV> </DIV>
<DIV><BR> </DIV>
<BLOCKQUOTE
style="PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style="FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV
style="BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: black"><B>From:</B>
<A title=jburzenski@AMERICANHM.COM
href="mailto:jburzenski@AMERICANHM.COM">Jason Burzenski</A> </DIV>
<DIV style="FONT: 10pt arial"><B>To:</B> <A
title=MAILSCANNER@JISCMAIL.AC.UK
href="mailto:MAILSCANNER@JISCMAIL.AC.UK">MAILSCANNER@JISCMAIL.AC.UK</A>
</DIV>
<DIV style="FONT: 10pt arial"><B>Sent:</B> Tuesday, May 25, 2004 4:01
PM</DIV>
<DIV style="FONT: 10pt arial"><B>Subject:</B> Re: SPam getting
through....</DIV>
<DIV><BR></DIV>
<DIV><SPAN class=210560320-25052004><FONT face=Arial color=#0000ff
size=2>I had a similar problem a few weeks back. It turns out it was
due to the large size of my bayes database (~150MB). The fix for me
was to upgrade to SA 2.63 and recreate the bayes set.
</FONT></SPAN></DIV>
<DIV><SPAN class=210560320-25052004><FONT face=Arial color=#0000ff
size=2></FONT></SPAN> </DIV>
<DIV><SPAN class=210560320-25052004><FONT face=Arial color=#0000ff
size=2>What does your /root/.spamassassin directory look like?
</FONT></SPAN></DIV>
<BLOCKQUOTE
style="PADDING-LEFT: 5px; MARGIN-LEFT: 5px; BORDER-LEFT: #0000ff 2px solid; MARGIN-RIGHT: 0px">
<DIV></DIV>
<DIV class=OutlookMessageHeader lang=en-us dir=ltr align=left><FONT
face=Tahoma size=2>-----Original Message-----<BR><B>From:</B> Rob
[mailto:rob@THEHOSTMASTERS.COM] <BR><B>Sent:</B> Tuesday, May 25, 2004
11:56 AM<BR><B>To:</B> MAILSCANNER@JISCMAIL.AC.UK<BR><B>Subject:</B>
SPam getting through....<BR><BR></FONT></DIV>
<DIV><FONT face=Arial size=2>I seem to be getting allot of spam in the
last 2 weeks, here is an example of headers from a popular one... it
seems like it was not even scanned for spam or that mailscanner did not
see it as spam at all??</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>I am using SA 2.63 and MS
4.28.6-1</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Any help appreciated....</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Thanks...</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>Return-Path: <<A
href="mailto:unoalia@clickforadate.com">unoalia@clickforadate.com</A>><BR>Received:
from clickforadate.com ([222.65.41.83])<BR> by
localhost.localdomain (8.12.11/8.12.5) with SMTP id
i4P8klDQ013184;<BR> Tue, 25 May 2004 04:46:59 -0400<BR>Message-ID:
<<A
href="mailto:883e01c44248$5c25dbc0$38c986cf@unoalia">883e01c44248$5c25dbc0$38c986cf@unoalia</A>><BR>From:
"garrett lovato" <<A
href="mailto:unoalia@clickforadate.com">unoalia@clickforadate.com</A>><BR>To:
"adrian hurl" <<A
href="mailto:candi@stupidguytalk.org">candi@stupidguytalk.org</A>><BR>Cc:
"quinn alston" <<A
href="mailto:rob@stupidguytalk.org">rob@stupidguytalk.org</A>>,<BR>
"victor jacoby" <<A
href="mailto:adult-jokes@stupidguytalk.org">adult-jokes@stupidguytalk.org</A>><BR>Subject:
Ppbykdbg your prescripti0n source<BR>Date: Tue, 25 May 2004 01:06:42
-1000<BR>MIME-Version: 1.0<BR>Content-Type:
text/plain;<BR> charset="us-ascii"<BR>Content-Transfer-Encoding:
7bit<BR>X-MSMail-Priority: Normal<BR>X-Mailer: Microsoft Outlook Express
5.00.2919.6700<BR>X-MimeOLE: Produced By Microsoft MimeOLE
V5.00.2919.6700<BR>X-MailScanner-Information: Please contact <A
href="mailto:info@thehostmasters.com">info@thehostmasters.com</A> for
more info<BR>X-MailScanner: Found to be clean<BR>X-MailScanner-From: <A
href="mailto:unoalia@clickforadate.com">unoalia@clickforadate.com</A><BR>X-UIDL:
#,A"!RS)#!53("!>S+"!</FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV>
<DIV><FONT face=Arial size=2>hexdigtoint nrl-mag
nesheiwa </FONT></DIV>
<DIV><FONT face=Arial size=2></FONT> </DIV><FONT face=Arial size=2>
<DIV><BR>We are your your convenient, safe and private online source for
FDA<BR>a`p`p`roved pharmacy prescriptions. <BR></DIV>
<DIV> </DIV>
<DIV>---------------------------------------------------------------------------</DIV>
<DIV>the rest was cut, no need to see crude...</DIV></FONT><FONT
face=Arial size=2>
<DIV> </DIV>
<DIV><BR></FONT> </DIV>-------------------------- MailScanner list
----------------------<BR>To leave, send leave mailscanner to <A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A>
and the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE>--------------------------
MailScanner list ----------------------<BR>To leave, send leave
mailscanner to <A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A>
and the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE>--------------------------
MailScanner list ----------------------<BR>To leave, send leave mailscanner
to <A
href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A>
and the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE>--------------------------
MailScanner list ----------------------<BR>To leave, send leave mailscanner to
<A href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</A><BR>Before
posting, please see the Most Asked Questions at<BR><A
href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</A> and
the archives at<BR><A
href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</A><BR></BLOCKQUOTE></BODY></HTML>
-------------------------- MailScanner list ----------------------<br>
To leave, send leave mailscanner to <a href="mailto:jiscmail@jiscmail.ac.uk">jiscmail@jiscmail.ac.uk</a><br>
Before posting, please see the Most Asked Questions at<br>
<a href="http://www.mailscanner.biz/maq/">http://www.mailscanner.biz/maq/</a> and the archives at<br>
<a href="http://www.jiscmail.ac.uk/lists/mailscanner.html">http://www.jiscmail.ac.uk/lists/mailscanner.html</a><br>