[SAtalk] re: my two problems...

2002-05-14 Thread Ron Carter
Thanks for all the help; much appreciated. Yep, Theo, we're running spamd; will check the logs (/var/log/messages and /var/log/maillog?) soonest. Yep, I know doing the pipe to /dev/null might not be the best way to handle this, but we are 1) setting the score to relatively high number (18 right

Re: [SAtalk] Trouble getting spam_level_stars to work

2002-05-14 Thread Dave Strickler
I did it from the root account and got: debug: using "/usr/share/spamassassin" for default rules dirdebug: using "/etc/mail/spamassassin" for site rules dirdebug: using "/root/.spamassassin" for user state dirdebug: using "/root/.spamassassin/user_prefs" for user prefs file However, I am runn

Re: [SAtalk] First of two problems - implementing user "opt-out" from spamassassin...

2002-05-14 Thread Olivier Nicole
> :0 > * ! ? test -f $HOME/.nospamcheck > > :0fw > | spamassassin -P > > :0: > * ^X-Spam-Status: Yes > /dev/null Hummm, if I understand well procmail receips, what you do is: if $HOME/.nospamcheck exists, then empty here, do nothing for all messages, filter through SA if the message is fl

Re: [SAtalk] First of two problems - implementing user "opt-out" from spamassassin...

2002-05-14 Thread Sidney Markowitz
On Tue, 2002-05-14 at 18:28, Ron Carter wrote: > :0 > * ! ? test -f $HOME/.nospamcheck > > :0fw > | spamassassin -P > > :0: > * ^X-Spam-Status: Yes > /dev/null Theo gave you one workable answer, but you probably meant to do was: :0 * ! ? test -f $HOME/.nospamcheck { :0fw | spamassassin -P :0

[SAtalk] Sendmail configuration

2002-05-14 Thread Olivier Nicole
Hi, This is a completely unrelated topic, but is there a mailing list for sendmail? Olivier ___ Have big pipes? SourceForge.net is looking for download mirrors. We supply the hardware. You get the recognition. Email Us: [EMAIL PROTECT

Re: [SAtalk] First of two problems - implementing user "opt-out" from spamassassin...

2002-05-14 Thread Theo Van Dinter
On Tue, May 14, 2002 at 09:40:01PM -0400, Theo Van Dinter wrote: > > :0 > > * ! ? test -f $HOME/.nospamcheck > > > > :0fw > > | spamassassin -P > > of course, you don't do anything to check the output of the previous command. Try > > ":0fwe" instead. Actually, you're testing if the file _does

Re: [SAtalk] 2nd of 2 problems... using spamc vs. spamassassin direct...

2002-05-14 Thread Theo Van Dinter
On Tue, May 14, 2002 at 07:33:05PM -0600, Ron Carter wrote: > The process just doesn't run (no scoring, etc.) Are you running spamd? What do the logs say? -- Randomly Generated Tagline: Marketting Professional's Motto: "We're not screwing the customers, all we're doing is holding them down wh

Re: [SAtalk] Weird false negative...

2002-05-14 Thread Klaus Heinz
Hi Skip Montanaro, you wrote: > the hits. Unfortunately, I don't have any ebay.com addresses (or glob > patterns involving ebay.com) in my user_prefs file. I am running SA in the You don't have it in user_prefs, but in the global 60_whitelist.cf: whitelist_from *@ebay.com whitelist_from

Re: [SAtalk] First of two problems - implementing user "opt-out" from spamassassin...

2002-05-14 Thread Theo Van Dinter
On Tue, May 14, 2002 at 07:28:24PM -0600, Ron Carter wrote: > This is the first of two problems we are having in > the implementation of spamassassin system-wide. > > We want to give users the ability to "opt-out" of > the spamassassin processm but the following: > > :0 > * ! ? test -f $HOME/.no

[SAtalk] 2nd of 2 problems... using spamc vs. spamassassin direct...

2002-05-14 Thread Ron Carter
The 2nd of 2 problems; this works: :0fw | spamassassin -P :0: * ^X-Spam-Status: Yes /dev/null This doesn't: :0fw | /usr/bin/spamc :0: * ^X-Spam-Status: Yes /dev/null This (obviously?) doesn't either: :0fw | spamc ... The process just doesn't run (no scoring, etc.) Ron _

[SAtalk] First of two problems - implementing user "opt-out" from spamassassin...

2002-05-14 Thread Ron Carter
Howdy all... This is the first of two problems we are having in the implementation of spamassassin system-wide. We want to give users the ability to "opt-out" of the spamassassin processm but the following: :0 * ! ? test -f $HOME/.nospamcheck :0fw | spamassassin -P :0: * ^X-Spam-Status: Yes /

Re: [SAtalk] spamd 2.20 bad protocol

2002-05-14 Thread Daniel Rogers
On Wed, May 15, 2002 at 06:22:03AM +0700, Olivier Nicole wrote: > >Soem very huge Mails (about 2 MB) coming in, will be investigated by spamc > >(2.20), which is breaking after a few seconds because mail is too big (> > >25k). But then, the spamass-milter timout in sendmail works after 12 > >minut

Re: [SAtalk] Anyone seem SA skip messages?

2002-05-14 Thread Sean Rima
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tue, 14 May 2002, Craig R. Hughes uttered the following: > There have been reports of this happening when DCC checking is turned > on by some users. It could be that when DCC times out, spamd dies and > spamc just passes through the message. I t

[SAtalk] Re: spamc/d still dying

2002-05-14 Thread Daniel Rogers
On Tue, May 14, 2002 at 07:56:59PM -0400, Ross Vandegrift wrote: > While this state doesn't seem to usually impair SA's ability to process > mail, it will overflow the process table eventually. I've been unable > to figure out what makes them multiply like this. Is this > spamass-milter flakines

[SAtalk] spamc/d still dying

2002-05-14 Thread Ross Vandegrift
Hello everyone, Daniel Rogers posted a patch a week or so back to spamc that helped with the problem of spamc dying while reading in messages from spamass- milter. I'd thought the patch worked perfectly, when three days later I had no hung spamc/d processes. I haven't checked in perhaps

Re: [SAtalk] spamd 2.20 bad protocol

2002-05-14 Thread Olivier Nicole
>Soem very huge Mails (about 2 MB) coming in, will be investigated by spamc >(2.20), which is breaking after a few seconds because mail is too big (> >25k). But then, the spamass-milter timout in sendmail works after 12 >minutes (!) and the mail seems not be be delivered, so the sender tries it >a

Re: [SAtalk] Trouble getting spam_level_stars to work

2002-05-14 Thread Craig R Hughes
Yes, it can go into the local.cf file, and should work there. Can you run spamassassin -D -t < msg > msg.out That should dump some diagnostic info to stderr -- could you do that and see if you notice anything odd like it's reading config files from the wrong place or something? C Dave Strickle

RE: [SAtalk] RAV Support

2002-05-14 Thread Dallas Engelken
> -Original Message- > From: Andrew Kohlsmith [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, May 14, 2002 3:52 PM > To: Dallas Engelken; [EMAIL PROTECTED] > Subject: Re: [SAtalk] RAV Support > > > > Yes, I know how RAV with qmail works. But I'm trying to > avoid this as I > > need qmail-s

Re: [SAtalk] RAV Support

2002-05-14 Thread Andrew Kohlsmith
> Yes, I know how RAV with qmail works. But I'm trying to avoid this as I > need qmail-scanner for what I am trying to do here (ie SpamAssassin > globally). I also run spamassassin globally via procmail. I've never played with qmail-scanner but procmail may be an option in case there's somethi

RE: [SAtalk] RAV Support

2002-05-14 Thread Dallas Engelken
> -Original Message- > From: Andrew Kohlsmith [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, May 14, 2002 3:40 PM > To: Dallas Engelken; [EMAIL PROTECTED] > Subject: Re: [SAtalk] RAV Support > > > > some debugging problems where viruses that are found do not > get logged to > > quarantine.

Re: [SAtalk] RAV Support

2002-05-14 Thread Andrew Kohlsmith
> some debugging problems where viruses that are found do not get logged to > quarantine.log. this is just what I've found from testing for the last > hour. i'd really like to give RAV a try.. has anyone else tried it? I'm using rav-qmail with spamassassin without issue. SA and RAV don't know

[SAtalk] Weird false negative...

2002-05-14 Thread Skip Montanaro
I've been using SA for a few weeks and like it pretty well. It gives me some occasional false +ives, but not a huge number. I got a false -ive today that has me scratching my head though. Here are the headers: Return-Path: <[EMAIL PROTECTED]> Received: from cali-2.pobox.com (cali-2.pob

Re: [SAtalk] Trouble getting spam_level_stars to work

2002-05-14 Thread Dave Strickler
Actually, we aren't using any user_pref files - just the system local.cf mentioned below. Can the spam_level_stars be put into that local.cf file? If not, is there a system-wide file that it needs to go into?   Thanks for the tips,   - Dave   Dave Strickler CEODWS - "The GroupWise Integration

[SAtalk] RAV Support

2002-05-14 Thread Dallas Engelken
has anyone tested this in 1.12? it seems very very buggy to me. global variable name doesnt not match what is in rav_scanner function. scanner array name is rav, while function name is rav_scanner (hence it is not called). some debugging problems where viruses that are found do not get logge

Re: [SAtalk] Trouble getting spam_level_stars to work

2002-05-14 Thread Craig R Hughes
Dave Strickler wrote: DS> Perhaps I don't understand the precedent of the setup files. If the only DS> file I altered from the distribution was /etc/mail/spamassassin/local.cf DS> , wouldn't that take precedent over other default files? Yes, except for user_prefs, since spam_level_stars is a use

Re: [SAtalk] Anyone seem SA skip messages?

2002-05-14 Thread Craig R Hughes
There have been reports of this happening when DCC checking is turned on by some users. It could be that when DCC times out, spamd dies and spamc just passes through the message. I think I saw a bugzilla ticket about it. I'll take a look and see if I can figure it out. C Dave Strickler wro

Re: [SAtalk] [Fwd: Who's We.... Information through stimulation]

2002-05-14 Thread Craig R Hughes
5. Who is iMAS?

[SAtalk] spamd 2.20 bad protocol

2002-05-14 Thread Andreas Vogt
Hi, beside of the problem, I already mentioned here (without getting any help), I encountered today a real big problem: Soem very huge Mails (about 2 MB) coming in, will be investigated by spamc (2.20), which is breaking after a few seconds because mail is too big (> 25k). But then, the sp

Re: [SAtalk] Trouble getting spam_level_stars to work

2002-05-14 Thread Dave Strickler
Perhaps I don't understand the precedent of the setup files. If the only file I altered from the distribution was /etc/mail/spamassassin/local.cf , wouldn't that take precedent over other default files?   It certainly worked for changing other params in SA...   - Dave   Dave Strickler CEODWS

[SAtalk] Anyone seem SA skip messages?

2002-05-14 Thread Dave Strickler
We are running a few thousand emails through SA each day, and find 1-5 per day are being 'skipped'. While they run though the SendMail box, SA doesn't touch the headers.   Before I go digging through the logs, etc, has anyone seen this before?   Thanks,   Dave

[SAtalk] Re: (Fwd) Interesting Offers from Bali (fwd)

2002-05-14 Thread Bart Schaefer
On Tue, 14 May 2002, Bart Schaefer wrote: > I was going to mutter about how I get all these weird travel spams because > brasslantern.com is a bed-and-breakfast It's been pointed out to me that I forgot to mention that I own the domain brasslantern.com -- I was not implying that I got any spam

[SAtalk] Slow scans

2002-05-14 Thread Kip Turk
I'm trying to run SA on my e-mail gateway for 8500 users. Running the spamd/spamc combo, it works great for 75 users. However, trying to turn it on for all the users, the scan times climb up to 20 - 40 seconds, even for messages smaller than 1k. Spamd was started with 'spamd -dS'. I'm calling

Re: [SAtalk] I viewed your web site-http://www.resuba.com/bucks/index.html (fwd)

2002-05-14 Thread rODbegbie
Doug Crompton <[EMAIL PROTECTED]> wrote: > What is this nonsense? They added headers to track abuse? This is abuse! > > X-AntiAbuse: This header was added to track abuse, > please include it with any abuse report > X-AntiAbuse: Original Domain - crompton.com Nah. My guess is that since Spa

[SAtalk] I viewed your web site-http://www.resuba.com/bucks/index.html (fwd)

2002-05-14 Thread Doug Crompton
What is this nonsense? They added headers to track abuse? This is abuse! Doug -- Forwarded message -- Received: from host5-server.com ([66.78.20.220]) by marconi.crompton.com (8.10.0/8.10.0) with ESMTP id g4EAoXG12000 for <[EMAIL PROTECTED]>; Tue, 14 May 2002 06:

[SAtalk] (Fwd) Interesting Offers from Bali (fwd)

2002-05-14 Thread Bart Schaefer
I was going to mutter about how I get all these weird travel spams because brasslantern.com is a bed-and-breakfast [*], and then I noticed that this message came through the zsh mailing list. Misc. interesting things about it: X-Mailer: Perl Powered Socket Mailer "The following message is a p

[SAtalk] [Fwd: Who's We.... Information through stimulation]

2002-05-14 Thread Ken Causey
I'm getting a lot of similar messages slipping through SAs fingers lately that are similar to this one and I would like to figure out something to do about them sooner than later. Primarily what I'm wondering is what is IMAS Messaging Application Server IMAS? I've not previously noticed messa

Re: [SAtalk] updating GA scores

2002-05-14 Thread Matt Sergeant
Andrew Kohlsmith wrote: > > BTW: My Yahoo Groups and MSN groups are now up to a score of -7. I'm sure > that's letting some spam through but with over 5000 users I can't be sure > that they are NOT subscribing to some of these racier web/mail groups. :-/ > body GROUPS_YAHOO_1 /Y

[SAtalk] Exchanger^H^H^H^H^H^H^H^H^HSpamAssassin

2002-05-14 Thread Jose Celestino
Hi, the idea behind spam assassin is indeed great, the problem is that after about 3 minutes the server load goes to: mail:/var/log/qmail# uptime 18:15:06 up 6 days, 21:40, 3 users, load average: 15.22, 8.96, 7.77 I have an exchange with paying for one, from that point of view is fine. So,

Re: [SAtalk] Exchanger^H^H^H^H^H^H^H^H^HSpamAssassin

2002-05-14 Thread Jose Celestino
Words by Andrew Kohlsmith [Mon, May 13, 2002 at 02:11:40PM -0400]: > > 18:15:06 up 6 days, 21:40, 3 users, load average: 15.22, 8.96, 7.77 > > The server in question is a dual Pentium III 500 Mhz, 512 Mb Ram, > > /var/qmail/queue is a UW SCSIII and the storage is a Mylex, raid 5. > > How much

Re: [SAtalk] Exchanger^H^H^H^H^H^H^H^H^HSpamAssassin

2002-05-14 Thread Jose Celestino
Words by rODbegbie [Mon, May 13, 2002 at 03:42:01PM -0400]: > Jose Celestino <[EMAIL PROTECTED]> wrote: > > the idea behind spam assassin is indeed great, the problem is that after > > about 3 minutes the server load goes to: > > > > mail:/var/log/qmail# uptime > > 18:15:06 up 6 days, 21:40, 3

Re: [SAtalk] updating GA scores

2002-05-14 Thread Andrew Kohlsmith
> Any chance of you contributing these rules? This is something I've got > on my todo list, which you could really help me shorten ;-) Of course. I'm not particularly happy with the LOCAL_ISP rule since it's far too specific, but whitelisting them is far too "risky." Same with INCIID and M&M.

Re: [SAtalk] New Announcements Mailing List

2002-05-14 Thread Derek Broughton
> On Mon, May 13, 2002 at 08:32:48AM -0300, Derek Broughton wrote: > > The one available from the sourceforge.net/projects/spamassassin page? It > > asks me for a userid & password. I don't mind helping you out with a > > survey, but I'm not going through the rigmarole of creating yet another > >

[SAtalk] procmailrc spamc vs spamassassin

2002-05-14 Thread Mike Black
If I use spamc instead of spamassassin I get this: spamd[6030]: bad protocol: header error: (closed before headers) :0fw | /usr/local/bin/spamassassin /usr/local/bin/spamd -u smmsp -a -d -x This doesn't work :0fw | /usr/local/bin/spamc -s 10 So it looks like spamc isn't getting the me

Re: [SAtalk] updating GA scores

2002-05-14 Thread Matt Sergeant
Andrew Kohlsmith wrote: > > My modified scores for SA2.20 right now are as follows: > score INCIID_MSG-10 > score M_AND_M_MEATS -10 > score FROM_AND_TO_SAME 0.00 > score SUBJ_ALL_CAPS 0.90 > score LOCAL_ISP