I am trying to upgrade to 2.42, not for any any good reason than putting
a smile on the face of my Japanese/Korean clients since 2.31 really hates
their encoding.
PROBLEM 1:
When I install 2.31, I have these files in /usr/bin
-r-xr-xr-x 1 root wheel 18751 Oct 8 17:30 /usr/bin/spamassassin
Perhaps this has been discussed before, but I was wondering if it might make
sense in many instances for SA not to invoke non-local agents if the local
spam score is already above the spam threshold? Thus, if this new
configuration
dependent mode was enabled, SA would only check RBL, razor, pyzo
May I request expert advise on this.
During the installation of SA via CPAN, the following errors stand out:
Manifying blib/man3/Mail::SpamAssassin::Conf.3
Manifying blib/man1/spamassassin.1
/usr/bin/make -DFORCE_PKG_REGISTER -- OK
Running make test
PERL_DL_NONLAZY=1 /usr/bin/perl -Iblib
So I wasn't the only one to see the Razor-related freeze-ups in spamd
tonight. I had 130 spamd's running on a server before I turned off the
MTA. After I brought things back under control, I decided figuring out
the problem could wait until tomorrow. I don't have the same version
of SpamAssassin r
autowhitelist is not supported by amavisd.
when i used autowhitelist out of pracmail on solaris, it would hang
fairly regularly with a few hundred processes queued up on the database
being locked.
i like the idea of autowhitelist for some applications, for example,
individual users with email ad
With all this talk of SA stalling, I decided to go ahead and post an idea
that a friend of mine posed to me a couple days ago. I don't think he is
interested in posting to the list, but he hates spam as much as I do.
The idea is to do something like the "CodeRed" tarpit (labrea, heh) did for
infe
Yep, you're right, it does work again. If spamd won't give up after
some number of attemtps to connect to razor, I guess I would say that
is a bug. Anyone know if that was fixed in later version?
Steve
On Fri, Oct 11, 2002 at 02:01:55PM +1000, Stuart Clark wrote:
> We had similar problems. Runn
After a careful re-reading of your previous message, I can
see the benefits of a third "desireable spam" category.
I've been thinking about creating a grey-logic for the
greymail, where site-wide whitelists are factored into the
spam score. This is analagous to a democratic vote ... if
enough use
We had similar problems. Running spamd with debugging on a different port showed that
it could get a list of machiens in the razor.vipul.net zone, but could not connect to
the closest machine. It sat there and continued to try again and again. This was
during the startup of spamd using versi
--On Thursday, October 10, 2002 9:47 PM -0400 Blaine <[EMAIL PROTECTED]> is
rumoured to have written:
> file and got this deferral: .mailfilter(40):_Missing_}
>
> Im stumped at this point.
Your mailfilter file is missing a closing-brace --> }
uncomment the closing-brace at the end of your fil
Hi:
We have been running SpamAssassin 2.31 for some time now without
problem. We have been using spamc/spamd in the following way:
/usr/bin/spamd -d -a -s local2
And in procmail:
:0fw
| /usr/bin/spamc
Suddenly today spamd seems to have gone bad. When a message is piped
to spamc nothing is re
Yeah, I just did that too. Wonder why the timeouts were not working. Oh
well, at least I now have better spam filtering than "-L". Thanks!
-Steve
-
Stephen Bader JORSM Internet, Regional Internet Services
Sy
I found that razor is the culprit. It's blocking for very long periods
of time trying to access 194.109.217.74 which appears to be razor
related. I disabled RAZOR with
score RAZOR_CHECK 0
and now things are flying along smoothly.
Ken
On Thu, 2002-10-10 at 21:46, Stephen Bader wrote:
>
I just ran spamd with the "-L" flag so it will do local checks only. I
know this isn't the best, but it has solved my problem for now. Maybe
someone has some answers to what is wrong, but for now, this will have to
do.
-Steve
--
I'm seeing this exact same thing! I've had to kill spamd because the
server is getting high load averages.
-Steve
-
Stephen Bader JORSM Internet, Regional Internet Services
Systems Administrator 7 A
I think it's something to do with razor. But it stalls for many many
minutes on connecting to this server and doesn't seem to be affected by
razor_timeout. Anybody have a clue? I've disabled RAZOR_CHECK
altogether for now. Time to check out pyzor I guess.
Ken
---
>
> I've got another way (not necessarily more elegant, though) at
> http://users.2z.net/rpuhek/scripts_public/spamd/
>
> My approach currently relies on grepping the syslog file, which may
> eventually be a bit cumbersome... I've also got things set up to be
> able to monitor spamd runn
>edit /etc/mail/spamassassin/local.cf
>
>add the following line:
>
>score RAZOR2_CHECK 0
>
>
>any rule with score 0 is never run.
Is this true for individual rbl checks as well, meaning that spamassassin
won't waste time trying to check rbl's that I don't want to use? It is
not
I am actually having problems with maildrop reading my mailfilter file.
I have set up maildrop to work with vpopmail as described in
http://msgs.securepoint.com/cgi-bin/get/qmail0208/350/1/1/1/1.html
At first I had the following in my
/home/vpopmail/domains/xyz.com/.qmail-default file
#| preli
spamassassin is very SLOW tonight, so slow I can't get any response to
figure out what is making it slow. In my config I have:
rbl_timeout 5
razor_timeout 2
timelog_path/tmp/salogs
I'm not using pyzor and I don't see any other timeouts to mess with that
would make a significant differ
On Thu, 10 Oct 2002 19:05:42 -0400, you wrote:
>Someone at 207.44.141.140 is sending out spam via the Windows messaging
>service. Is it time for SA for Firewalls. ;-)
No, it's just (*way* past) time to stop using Windows Messaging Service. :-)
--
Someone at 207.44.141.140 is sending out spam via the Windows messaging
service. Is it time for SA for Firewalls. ;-)
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
- Original Message -
From: "Chris Fortune" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, October 10, 2002 3:49 PM
Subject: Re: [SAtalk] anyone like the idea of a graylist?
> I send all mail with a spam score between 5-10 to the
user's
> inbox, marked up with spam headers,
Matt's method works perfectly.
Thanks again!
...Chris
At 03:04 PM 10/10/2002, you wrote:
>edit /etc/mail/spamassassin/local.cf
>
>add the following line:
>
>score RAZOR2_CHECK 0
>
>
>any rule with score 0 is never run.
>
>At 02:43 PM 10/10/2002 -0700, you wrote:
>>I'm looking
On Thursday 10 October 2002 02:43 pm, Chris Kurtz wrote:
> I'm looking for a way to disable razor2, until I can find out what is
> causing it to fail.
>
> I can't find anything in the docs...
>
> Ideas?
Put this in your local.cf file:
score RAZOR2_CHECK 0.0
--
Give a man a match, and he'll be
I would venture to say that until such time as the folks at
Razor/Cloudmark actually answer the posed question, or say "We're charging
for the service" that it be left alone, and people do not jump to
conclusions.
On Thu, 10 Oct 2002, rODbegbie wrote:
> http://sourceforge.net/mailarchive/foru
edit /etc/mail/spamassassin/local.cf
add the following line:
score RAZOR2_CHECK 0
any rule with score 0 is never run.
At 02:43 PM 10/10/2002 -0700, you wrote:
>I'm looking for a way to disable razor2, until I can find out what is
>causing it to fail.
>
>I can't find anything
I'm looking for a way to disable razor2, until I can find out what is
causing it to fail.
I can't find anything in the docs...
Ideas?
...Chris
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
On Thursday 10 October 2002 12:21, Theo Van Dinter wrote:
> On Thu, Oct 10, 2002 at 12:03:48PM -0700, Robin Lynn Frank wrote:
> > These, I know of:
> > dcc_add_header 1
> > pyzor_add_header 1
> >
> > I don't see anything in the docs about razor.
>
> Well, dcc and pyzor are externally run programs
At 01:43 PM 10/10/02 -0700, Karsten M. Self wrote:
>I'm curious as to whether or not there's an 'include' syntax which can
>be used on Spamassassin rulesets, particularly whitelist rules.
Spamassassin seems to read all files in /etc/mail/spamassassin (or whatever
your local equivalent is).
Simo
Daniel Quinlan said:
> spam/0101.6a2f4ea2f70c6644dbd9d6c4c7311654
>
> Fewer bits would probably work if you find that too cumbersome, but
> the second version should be easy enough: ..
might as well! that's now in there.
--j.
---
This s
Current versions (MD 2.21 and SA 2.42) do work together without the zombie
problem.
>Date: Thu, 10 Oct 2002 13:49:11 -0500
>From: Steve Hanson <[EMAIL PROTECTED]>
>To: [EMAIL PROTECTED]
>Subject: [SAtalk] Spamassassin,mimedefang,zombies, network tests
>
>I note that Spamassassin bug report 486 i
I'm curious as to whether or not there's an 'include' syntax which can
be used on Spamassassin rulesets, particularly whitelist rules.
In our situation, it would be useful to programmatically generate a set
of whitelisted domains periodically. This would be a relatively large
list, and might be
http://sourceforge.net/mailarchive/forum.php?thread_id=1166564&forum_id=4258
Looks like Razor2 should be given a 0 score in the same manner as the
SpamCop blacklist.
rOD.
--
"I'm as mad as hell and I'm not going to take this anymore!"
>> Doing the blogging thang again at http://www.groovymothe
On Thu, Oct 10, 2002 at 12:03:48PM -0700, Robin Lynn Frank wrote:
> These, I know of:
> dcc_add_header 1
> pyzor_add_header 1
>
> I don't see anything in the docs about razor.
Well, dcc and pyzor are externally run programs that return text.
Razor is called via perl module, so there really is no
On Thursday 10 October 2002 09:42, Smart, Dan wrote:
> My SA is taking 10 seconds each run now with 2.42. How do I figure out
> where the delay is?
>
> Also, is there a way to add headers from Razor and Pyzor to messages the
> same way you can for DCC?
>
These, I know of:
dcc_add_header 1
pyzor_a
what do people think of the concept of a graylist?
i am managing the spam filtering for a sizeable enterprise of
knowledge workers many of whom bill by the hour. for such workers
there's a good time-management argument for email filtering.
i'm trying to avoid supporting individual preferences a
I note that Spamassassin bug report 486 is still open. I am
running Mimedefang 2.16 and spamassassin 2.31. I'd like to be
able to run Mimedefang and Spamassassin with open relay testing
for Spamassassin. When I do so with my configuration I have the
zombie process problem. My question is if
Well, the particular bug is marked "WONTFIX" because it's not really a bug,
it's an intentional behavior.
Someone was making the argument that SA should only examine the from: line
for whitelists, and that's not practical.
In your case it sounds like you've checked to make sure that both the
| I haven't found it yet. I'm pretty sure the discussion against it was in
| O'Reilly's "TCP/IP Network Administration". I've browsed through it in my
I've got that one and their DNS/BIND book at home - I'll glance through them
tonight.
| I had this problem at a place I consult for. They adv
On Wed, Oct 09, 2002 at 02:27:18PM +0200, Jost Krieger wrote:
>
> On Wed, Oct 09, 2002 at 03:01:43AM -0700, Quinn Vallance wrote:
> >
> > I maintain two relatively high volume mail servers both of which
> > have been using Spamassassin for some time mow. Everything has
> > always worked fine and I
On Thu, Oct 10, 2002 at 01:11:05PM -0400, Blaine wrote:
> I had originally installed SA from spamassassin-2.42-3.src.rpm so I
> decided to use the tarball Mail-SpamAssassin-2.42.tar.gz to reinstall.
Did you rebuild the RPMs, then install spamassassin and
perl-Mail-SpamAssassin? Or did you just
Resolved!
I had originally installed SA from spamassassin-2.42-3.src.rpm so I
decided to use the tarball Mail-SpamAssassin-2.42.tar.gz to reinstall.
After reinstalling SA I also reinstalled Qmail-scanner.
SA is properly tagging messages now.
Now all I need to do is get Maildrop to keep the spam
| get though. I have tried to add a line to my user_prefs, but did not
| manage to get it right. Is there a proper way to do this?
You didn't say what the line that you added was. If you're the only one
using the system, creating a rule in local.cf would be a better option. I
don't recommend doin
My SA is taking 10 seconds each run now with 2.42. How do I figure out
where the delay is?
Also, is there a way to add headers from Razor and Pyzor to messages the
same way you can for DCC?
<>
Dan Smart
Vulcan Materials
Daniel J Smart (E-mail).vcf
Description: Binary data
From: Arie Slob
> Sent: Thursday, October 10, 2002 6:29 AM
> To: Riley; Justin Mason
> Cc: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] Spam not tagged, and USER_IN_WHITELIST?
>
> Well, I thought I had a similar problem. Got 2 emails in the last 24 hours
> listing
>
> USER_IN_WHITELIST
> This was tr
Justin Mason <[EMAIL PROTECTED]> writes:
> OK; maybe rewriting the message-ids will help here, that should allow
> us to pick them out. I'll do that.
As someone else noted, that might mess with Message-ID tests. If not
the current ones, then future ones.
I was suggesting that you use MH folde
On Thu, Oct 10, 2002 at 04:13:30PM +0300, Odhiambo Washington wrote:
> I am running SA 2.31 (hope to move to 2.42 soon..) ands I have the following
> seetings in my local.cf:
>
> ..but still have e-mails from Korea/Japan and such like countries being
> tagged as spam.
>
>
> Why is this so?
I'd
Is it possible to have the spamd/spamc combo check an alternate
directory for the user_prefs?
Our home directories are currently scattered over several NFS servers,
and I would like the users to have some control, but I do not want the
mail server constantly making NFS queries. I have postfix
YAY, I have actually made a useful contribution, well, a suggestion at
least.
Now to get that perl author to fix the .msg to mbox script.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, October 09, 2002 6:58 PM
To: Robert Strickler
Cc: [EMAIL PROTEC
In my opinion its best to leave virus scanning in the hands
of a anti-virus software package and spam scanning in the
hands of SA...
- Original Message Follows -
> Dear all - I have been receiving a lot of mail that seems
> to originate from the 'Bugbear' virus. This all has a 'To:
> undi
Hi,
I'm using SA and MIMEdefang. I'm trying to tweak my configuration to get
the most out of all the options without causing problems. I believe I have
everything installed to do the RBL checks, Razor and DCC but I can't seem to
verify any of these are being used. I have SA being started
On Thu, Oct 10, 2002 at 10:13:03AM -0500, Kip Turk wrote:
> I seem to remember something on the list regarding critical failures on
> upgrades from 2.20 to 2.4x, but couldn't google it out of the archives.
> If I remember correctly, I need to install 2.3x, then upgrade to 2.42.
No, that's no
Bart Schaefer said:
> > OK; maybe rewriting the message-ids will help here, that should allow
> > us to pick them out. I'll do that.
>
> Don't some of the SA tests examine the format of the message-id? Is it
> even possible to change them to be both recognizable and also to still
> trigger th
I recently attempted to upgrade on of my systems using the CPAN install
feature. Since I was running 2.20 and CPAN pulled down 2.42, I ran into
some very bad things. As soon as 2.42 was installed, the system locked
up. No errors, just complete system lock up. At the console, I came up
wit
On Wed, 2002-10-09 at 20:52, Kelsey Cummings wrote:
> Yet another method, using cricket which IMHO is far better than MRTG.
>
> http://www.sonic.net/~kgc/cricket/
>
Cricket can be tough to setup though.
---
This sf.net email is sponsored by
This goes back to the original discussion about why the mails where
being directed to the domain A record, but at the ISP's request we have
put dummy MX records of mail. in the zones and then assigned
those hosts the ip of 127.0.0.1, appears to be working quite well the
spammers can send mail to t
The same way you subscribed.
Go to the link at the very bottom of the messages that travel through the
list, and follow the subscription management directions.
On Thu, 10 Oct 2002, viviane.correge wrote:
> How can I unsubscribe ?
>
> Viviane Correge
> Centre InterUniversitaire de Calcul de T
I suggest adding this tip to the INSTALL doc. Also should make a note that
on RedHat, the Python 2.2 RPM creates the executable as python2 due to
dependencies. The python setup.py build should be python2 setup.py build on
RedHat.
<>
|-Original Message-
|From: Theo Van Dinter [mailto:[E
In your message regarding Re: [SAtalk] "Good" email clients dated
Thu, 10 Oct 2002 10:03:24 -0400, Theo Van Dinter said that ...
>TVD-
>TVD- You're talking about rules with negative scores, thereby likely to make a
>TVD- message "not spam". A "positive score" or "positive rule" makes somethi
First, there's no DNS RFC (yes, I've read them) that states that
putting an A record on a domain.tld is wrong. So, you're most welcome
to do so, if you so desire. However, be warned that doing so as regular
practice is like swimming with piranas. You can do it, but it isn't
necessarily wise.
On Thu, 10 Oct 2002, Theo Van Dinter wrote:
> On Thu, Oct 10, 2002 at 08:53:15AM -0500, [EMAIL PROTECTED] wrote:
> > increase in spam. Positive scores are flawed IMHO.
>
> I'm going to stay out of the discussion (for now at least), but I just
> want to inform people that they're using incorrect
How can I unsubscribe ?
Viviane Correge
Centre InterUniversitaire de Calcul de Toulouse email: [EMAIL PROTECTED]
118, route de Narbonne tel: 05-61-36-60-40
31062 Toulouse cedexfax: 05-61-52-14-58
On Thu, Oct 10, 2002 at 08:53:15AM -0500, [EMAIL PROTECTED] wrote:
> increase in spam. Positive scores are flawed IMHO.
I'm going to stay out of the discussion (for now at least), but I just
want to inform people that they're using incorrect terminology:
You're talking about rules with negative
I'm not the Justin you're trying to talk to but I have an opinion on this
anyhow. :) I'mm strongly against giving a postive score to ANY mail
client. I'm against positive scores in general really. They just open
more doors for spammers to abuse. Everytime one of them finds a new
little trick l
I haven't found it yet. I'm pretty sure the discussion against it was in
O'Reilly's "TCP/IP Network Administration". I've browsed through it in my
spare time and didn't find it. The worst problem with this is when users
don't know you, say FTP server's address and give domain.tld a whirl. It
m
Justin
I notice that some clients have a positive score since they are
unlikely to be used by spammers.
How do I go about recommending mine (see the header) to have a
default positive score as I am pretty sure spammers won't use it and
the developer would probably roast any spammer over a very s
"Riley" said:
> Could some explain this to me? Maybe I'm missing something obvious?
> I can't find any reference to this in my whitelists, but the Status
> is No.
Well, I thought I had a similar problem. Got 2 emails in the last 24 hours
listing
USER_IN_WHITELIST
I found out that:
I had our
My spamd stops logging to the syslog after so long, I am not sure why
this is happening. Everything else is still logging fine, so the syslog
daemon is fine. Anyone else experience anything similar?
--
Chadwick L. Sorrell
Internet Technician
Hancock Internet
[EMAIL PROTECTED]
--
I have asked this question before but got no reply, so I'll try again.
I am running SA 2.31 (hope to move to 2.42 soon..) ands I have the following
seetings in my local.cf:
ok_languagesall
ok_locales all
..but still have e-mails from Korea/Japan and such like countries being
tagged as
(trimmed cc list)
Daniel Quinlan said:
> 1. These messages could end up being falsely (or incorrectly) reported
>to Razor, DCC, Pyzor, etc. Certain RBLs too. I don't think the
>results for these distributed tests can be trusted in any way,
>shape, or form when running over a publi
"Riley" said:
> Could some explain this to me? Maybe I'm missing something obvious? I
> can't find any reference to this in my whitelists, but the Status is No.
we'd need full headers to be able to diagnose it. those mails are
incomplete... no Received hdrs or Return-Path.
--j.
---
and the Spammers have caught up to me again. 15 mails today, sigh.
My personal analysis of the Spam that went through indicates an
easy fix for me personally. Since all my English-language Spam is
in HTML, and since all my legitimate HTML corresponders use a
charset, setting MIME_HTML_NO_CHARSET
waaay back Malte said:
> | | Subject: Re: [SAtalk] "offers" in header a good rule for trapping
> | | spam
> | |
> | | AFAIK did we have such a rule in 70_cvs_rules_under_test.cf and the
> | | GA sorted it out (there's too much valid commerical mail send from
> | | offers@*).
Actually, we did
On 9 Oct 2002, Daniel Quinlan wrote:
> Simon Lyall <[EMAIL PROTECTED]> writes:
>
> > I'm getting a few false positives and noticed that a common factor seems
> > to be that the first component is "rtn" . The lists appear to be legit but
> > they are getting picked up for NO_MX_FOR_FROM,
>
> What v
Dear all - I have been receiving a lot of mail that seems to originate
from the 'Bugbear' virus. This all has a 'To: undisclosed receipients'
header, which gets scored by spamassassin. Unfortunately the scoring is
not high enough to always pass the threshold, and most of these mails
get though. I
On Wed, 09 Oct 2002 22:50:54 -0700, Daniel Quinlan wrote:
>"Ralf G. R. Bergs" <[EMAIL PROTECTED]> writes:
>
>> You should be able to use the "testing" version of that package without any
>> problems. This is what I'm doing.
>
>Well, not without upgrading other packages. I just built Duncan's
>s
77 matches
Mail list logo
