[SAtalk] error message: sh: /tmp/sa.5249.BhnbyN: Permission denied

2002-11-14 Thread Jon Gabrielson
Procmail gives the following error message when spamassassin is run. What is this error, and how do I fix it? /tmp is already writable by all, so it shouldn't be having trouble writing to that location. Jon. sh: /tmp/sa.5036.BhnbyN: Permission denied sh: /tmp/sa.5036.BhnbyN: Permission denied

[SAtalk] installing DCC and pyzor breaks spamc but not spamassassin

2002-11-14 Thread Jon Gabrielson
Last night I installed DCC and pyzor, and now spamc is hanging. I have restarted spamd several times, but spamc still hangs. spamassassin still works, with the same command line options, and spamassassin --lint is clean. Any ideas why this is happening, or how I can diagnose the problem? Before

Re: [SAtalk] spamassassin and razor.

2002-11-14 Thread Theo Van Dinter
On Thu, Nov 14, 2002 at 02:18:56PM -0600, Jon Gabrielson wrote: > Does spamassassin give higher scores to items > in the razor database with a higher confidence > level? If not, is this something that is even possible? At the moment, all that is checked is the spam status of the message. It woul

[SAtalk] Re: A patent on Bayesian (and other methods) ?

2002-11-14 Thread Jeremy Howard
Matt Sergeant wrote: Rick Macdougall said the following on 09/11/02 14:51: Hi All, Saw this on one of the grc newsgroups... Does this Microsoft patent cause trouble? Here's the link to the document. http://makeashorterlink.com/?V27615462 Most of the claims in the patent relate to client s

[SAtalk] Razor being attacked?

2002-11-14 Thread Dave Slusher
Is there someone out there attacking the razor trust system? I'm seeing more and more righteous e-mails that have been reported to Razor2, including the Slashdot daily mailings and the Ambrosia Software and Winamp announce newsletters. I've been revoking them as they come through, but it is becomin

[SAtalk] qmail-scanner patch for per-user SA prefs

2002-11-14 Thread Robert Fleming
This patch allows per-user configuration rules for spamassassin. It supports real as well as virtual domains (via vpopmail). .qmail aliases can also be aliased to the real account so that only one set of rules needs to be maintained. grabs the username to pass to spamc from the RCPTTO: note t

[SAtalk] New, rather good variation on Nigerian spam

2002-11-14 Thread Joe Berry
Thought you might all be interested in seeing a rather good Nigerian spam email. It's even "customized" with my name in it (except the "Mr." is missing). The spelling errors though spoiled it a bit. I can't imagine a British barrister having such poor English :-). Joe Berry This is a forwarded m

[SAtalk] How to use spamassassin headers in emacs rmail

2002-11-14 Thread Don Saklad
In emacs rmail, how do you use the spamassassin headers to get through your email with the hundreds of spam commercial messages many now with the additional lines of labelling from spamassassin?... --- This sf.net email is sponsored by: To learn

Re: [SAtalk] MakeMaker problem on RH7.2

2002-11-14 Thread Kenneth Porter
--On Thursday, November 14, 2002 11:09 AM -0800 Kenneth Porter <[EMAIL PROTECTED]> wrote: > All the references in the Makefiles that should point to > /usr/lib/perl5/5.6.1 point instead at /usr/lib/5.6.1. I'm trying to trace > through MakeMaker to figure out why this is happening. No solution yet

Re: [SAtalk] Razor problem ?

2002-11-14 Thread Mike Loiterman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Date: Thu, 14 Nov 2002 13:43:40 -0500 From: Theo Van Dinter <[EMAIL PROTECTED]> To: Stephen Bader <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Razor problem ? - --AQYPrgrEUc/1pSX1 Content-Type: text/plain; charset=us-ascii Conten

Re: [SAtalk] Really bad false positive\

2002-11-14 Thread Ross Vandegrift
On Thu, Nov 14, 2002 at 10:14:17AM -0500, Theo Van Dinter wrote: > On Thu, Nov 14, 2002 at 03:51:02PM +0100, Jan Korger wrote: > > > Funny thing is, there nothing in all caps, and there's absolutely no > > > URL. This is clearly a legitimite mail. > > > > Just guessing: a signature not included w

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Chris Petersen
> Why do we need to authenticate the user of spamc at all? Are we > worried about a remote user running spamc on their box and forging mail > through ours? A local user forging something through our box? I think this was mentioned in an earlier thread, but as I understand it, the worry is that

[SAtalk] Re: Mail::SpamTest::Bayesian

2002-11-14 Thread Jeremy Howard
Matt Sergeant wrote: Tom Allison said the following on 12/11/02 23:04: I was looking for Bayesian filters and found this in CPAN. Not sure how well it works or if it is event going to play nice with Mail::Audit objects. Does anyone have any experience or suggestions with the use of Bayesian

RE: [SAtalk] Tweaks/Config

2002-11-14 Thread Quentin Krengel
Have you looked at the man page? Ie, man Mail::SpamAssassin:Conf Quentin Krengel \ \ ! / / ( @@ ) ___o000--000o ___][__][___][___ ___][__][__][___][ ___][__][__][ Stop peeping over the

RE: [SAtalk] RedHat 8.0 bundled Spam Assassin

2002-11-14 Thread Kenneth Porter
--On Thursday, November 14, 2002 11:39 AM -0800 Steve Thomas <[EMAIL PROTECTED]> wrote: > First, you'll want to upgrade SA to 2.43. Do this by running (as root): > > perl -MCPAN -e 'install Mail::SpamAssassin' As this is Red Hat, you probably want to keep things under RPM database control. Grab

[SAtalk] Tweaks/Config

2002-11-14 Thread Link, Pete
Does anyone have a comprehensive how-to on tweaks, configuration, etc??? Your help is greatly appreciated. --- This sf.net email is sponsored by: To learn the basics of securing your web site with SSL, click here to get a FREE TRIAL of a Thawt

Re: [SAtalk] spamd dying issue

2002-11-14 Thread Tomki
Today's build has the same problem. A new zombie for each message processed. 'ps -auxw |grep perl |sort |cat -n' currently shows 95 zombies for different users. --Tomki At 12:00 11/14/2002 -0800, Tomki wrote: The spamd perl process from spamassassin 2.50 CVS I got yesterday (11-13) seems to sp

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Bart Schaefer
On Thu, 14 Nov 2002, Michael Stenner wrote: > On Thu, Nov 14, 2002 at 10:41:27AM -0800, Bart Schaefer wrote: > > Nope. Spamc specifically MUST NOT be a setuid executable. Rather, at > > run time it must be able to execute the setuid() [or seteuid()] system > > call, which means it must be runnin

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Jan Schreckenbach
Theo, Theo Van Dinter wrote: On Wed, Oct 30, 2002 at 02:16:28PM -0500, Michael Stenner wrote: 1) use ident: spamc connects, spamd asks ident if spamc is who it says it is, then proceeds. BAD: This is slowish (although probably not compared to the spam-checking itself). yes

[SAtalk] spamassassin and razor.

2002-11-14 Thread Jon Gabrielson
Does spamassassin give higher scores to items in the razor database with a higher confidence level? If not, is this something that is even possible? Jon. --- This sf.net email is sponsored by: To learn the basics of securing your web site wi

Re: [SAtalk] spamd dying issue

2002-11-14 Thread Tomki
The spamd perl process from spamassassin 2.50 CVS I got yesterday (11-13) seems to spawn lots of zombie processes. I'll try today's build. At 13:02 11/14/2002 +, Justin Mason wrote: Tomki said: > I'll give it a shot right away, thanks! BTW -- the people who are using this -- does it solve

Re: [SAtalk] RedHat 8.0 bundled Spam Assassin

2002-11-14 Thread Matt Kettler
I believe the RedHat SA package is pretty much just the same as installing SA.. it still doesn't integrate it into your sendmail, so you'll need some kind of milter, or procmail configuration to make sendmail use SA. It makes sense for them to not automatically plug SA into sendmail, since ther

RE: [SAtalk] RedHat 8.0 bundled Spam Assassin

2002-11-14 Thread Steve Thomas
First, you'll want to upgrade SA to 2.43. Do this by running (as root): perl -MCPAN -e 'install Mail::SpamAssassin' If you haven't already initialized CPAN on your system, it'll ask you a bunch of questions before it upgrades SA. Once that's done, take a look at /root/.cpan/build/Mail-SpamAssass

[SAtalk] SpamAssassin AWL

2002-11-14 Thread Tom Allison
Is there anything which can age the list of names present? Or do they just not get that large over time? -- Mencken and Nathan's Second Law of The Average American: All the postmasters in small towns read all the postcards. --- This sf.net ema

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Justin Mason
Michael Stenner said: > I hope this helps. I want to reiterate: Most people probably aren't > interested in this ability. In our case, we want user configs, user > AWL, and to allow users to invoke spamc directly. That means that > without some sort of authentication, they can do bad things to

[SAtalk] RedHat 8.0 bundled Spam Assassin

2002-11-14 Thread Greg Jamison
Title: Message What is required to get Spamassassin working with Sendmail when both were installed during the initial Redhat 8.0 installation? I have configured sendmail for local delivery, and that is working fine. When I send "test spam", everything comes thorough. Any help is appreciated.

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Michael Stenner
On Thu, Nov 14, 2002 at 10:41:27AM -0800, Bart Schaefer wrote: > Nope. Spamc specifically MUST NOT be a setuid executable. Rather, at > run time it must be able to execute the setuid() [or seteuid()] system > call, which means it must be running as root (which it is, if started > from /etc/procma

[SAtalk] MakeMaker problem on RH7.2

2002-11-14 Thread Kenneth Porter
I decided to upgrade from 2.41 to 2.43 and am trying to rebuild the tarball into an RPM on Red Hat 7.2. The process fails when MakeMaker generates the Makefiles. (The actual error message comes much later at packaging time, but I've traced it back to bad MakeMaker output.) All the references in th

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Bart Schaefer
On Thu, 14 Nov 2002, Michael Stenner wrote: > On Thu, Nov 14, 2002 at 08:19:56AM -0800, Bart Schaefer wrote: > > (1) Require the existence of a special pseudo-user to which spamc must > > setuid before it will pass the -u username to spamd. (-U option?) > > > > (2) Have spamc read a password fro

Re: [SAtalk] Razor problem ?

2002-11-14 Thread Theo Van Dinter
On Thu, Nov 14, 2002 at 12:17:15PM -0600, Stephen Bader wrote: > around 2:30 AM, my pager start going nuts because the server had spawned > hundreds of spamd processes, all trying to connect to the razor server. Is this because you received hundreds of emails at that time? If you're running Razor

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Michael Stenner
On Thu, Nov 14, 2002 at 12:04:00PM -0600, Michael Weber wrote: > Um... Am I missing something here? > > I have spamc and spamd running on the same box. Spamd only listens to > 127.0.0.1. > > Why do we need to authenticate the user of spamc at all? You may not need to. Many people do not. If

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Michael Stenner
On Thu, Nov 14, 2002 at 01:03:59PM -0500, Theo Van Dinter wrote: > On Thu, Nov 14, 2002 at 12:47:03PM -0500, Michael Stenner wrote: > > (My favorite method is still the UNIX sockets, but that will take more > > work and I'm still looking into it.) > > Well, an issue with all of this of course is t

Re: [SAtalk] Razor problem ?

2002-11-14 Thread Stephen Bader
I experienced the same problem last night, only mine was much worse. At around 2:30 AM, my pager start going nuts because the server had spawned hundreds of spamd processes, all trying to connect to the razor server. Thhis has happened once before in the past too. I can't run spamd with the -m flag

[SAtalk] newbie: spam.actions.conf not working (spam assasin version 2.3.1with Mailscanner)

2002-11-14 Thread Donna Johnson
Hi all, I've just started testing Spam Assasin with Mailscanner. It's working great, except that it ignores the rules in spam.actions.conf. I've tried rules with wildcards, no wildcards, etc.-it just delivers the mail regardless. The "high scoring spam" action does work if I set that in mailscanne

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Michael Weber
Um... Am I missing something here? I have spamc and spamd running on the same box. Spamd only listens to 127.0.0.1. Why do we need to authenticate the user of spamc at all? Are we worried about a remote user running spamc on their box and forging mail through ours? A local user forging someth

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Theo Van Dinter
On Thu, Nov 14, 2002 at 12:47:03PM -0500, Michael Stenner wrote: > (My favorite method is still the UNIX sockets, but that will take more > work and I'm still looking into it.) Well, an issue with all of this of course is that SpamAssassin can run on platforms other than 'UNIX'. So if we're going

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Michael Stenner
On Thu, Nov 14, 2002 at 08:19:56AM -0800, Bart Schaefer wrote: > On Thu, 14 Nov 2002, Theo Van Dinter wrote: > > > I still don't see the purpose of authentication in spamd. Unless you > > enable user rules, the only things I can think of that could happen > > maliciously is tainting the AWL and g

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Bart Schaefer
On Wed, 30 Oct 2002, Michael Stenner wrote: > This is all great, but we're a little concerned about the fact that a > modified spamc can be used to do mildly nasty things to other people > by telling spamd it's someone else. On Thu, 14 Nov 2002, Theo Van Dinter wrote: > I still don't see the pur

RE: [SAtalk] Really bad false positive

2002-11-14 Thread McClung, Darren W.
> X-Spam-Checker-Version: SpamAssassin 2.31 (devel $Id: SpamAssassin.pm,v > There's your trouble. Consider upgrading to 2.4x. Darren --- This sf.net email is sponsored by: To learn the basics of securing your web site with SSL, click here

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Michael Stenner
On Thu, Nov 14, 2002 at 10:03:49AM -0500, Theo Van Dinter wrote: > On Wed, Oct 30, 2002 at 02:16:28PM -0500, Michael Stenner wrote: > > 1) use ident: spamc connects, spamd asks ident if spamc is who it > > says it is, then proceeds. > > > > BAD: This is slowish (although probably no

Re: [SAtalk] Really bad false positive

2002-11-14 Thread Theo Van Dinter
On Thu, Nov 14, 2002 at 03:51:02PM +0100, Jan Korger wrote: > > Funny thing is, there nothing in all caps, and there's absolutely no > > URL. This is clearly a legitimite mail. > > Just guessing: a signature not included when forwarding. Was there an HTML attachment that got stripped out somewhe

RE: [SAtalk] spamassassin+sendmail+mail filter

2002-11-14 Thread Steve Thomas
Sendmail is complaining about one of the directories in the path /var/opt/rav/run being group-writable. It's a security feature. Make sure that each directory in the path is not group writable. Start with /var/opt/rav/run, then /var/opt/rav, then /var/opt, then /var. If any of them are group-writ

Re: [SAtalk] spamd authenticating spamc's uid

2002-11-14 Thread Theo Van Dinter
On Wed, Oct 30, 2002 at 02:16:28PM -0500, Michael Stenner wrote: > 1) use ident: spamc connects, spamd asks ident if spamc is who it > says it is, then proceeds. > > BAD: This is slowish (although probably not compared to the > spam-checking itself). > > BAD: Not por

Re: [SAtalk] Really bad false positive

2002-11-14 Thread Jan Korger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thu, 14 Nov 2002, Ross Vandegrift wrote: > Check this message my boss forwarded to me. It came from his lawyer and > was tagged by SA via the CAPS rules and some URL rules. > > Funny thing is, there nothing in all caps, and there's absolutely no >

Re: [SAtalk] MailDir and spam

2002-11-14 Thread Keith Olmstead
Thanks for the insight. This is what I think I am looking for. Thanks for everybodys help. --Keith On Thu, 14 Nov 2002, Robin Whittle wrote: > A full documentation of how to do this, with Courier Maildrop, is at: > > http://www.firstpr.com.au/web-mail/Postfix-SA-Anomy-Maildrop/ > > This in

Re: [SAtalk] Really bad false positive

2002-11-14 Thread Ian MacDougall
On Thu, 2002-11-14 at 14:02, Ross Vandegrift wrote: > Check this message my boss forwarded to me. It came from his lawyer and > was tagged by SA via the CAPS rules and some URL rules. > X-Spam-Status: Yes, hits=7.0 required=5.0 I seet the body of the email through my system and got: X-Spam-Stat

Re: [SAtalk] Razor problem ?

2002-11-14 Thread spamassassin-for-chris
> Looks like we are having a razor problem? > Servers seem to have not been responding, for about 2 hours now. > > Anyone else noticed that? Yup, I got way more spam than usual this morning... When I looked through the headers of the messages I noticed that SpamAssassin hadn't even touched them.

Re: [SAtalk] SA/Razor effectiveness

2002-11-14 Thread Theo Van Dinter
On Tue, Oct 29, 2002 at 02:32:08PM -0600, Mike Loiterman wrote: > How'd you do this? I though the sql database was only for user > prefs? I'm interested in using an sql database to track my spam > effectiveness as well. Sorry for the late reply, I just found a bunch of mails way back in my SA ma

[SAtalk] spamassassin keeps sendmail crashing

2002-11-14 Thread Steven Glogger
hi there my sendmail crashes about once a day. when i got so annoing log entries like belog, sendmail doesn't receive or send any email. Nov 14 15:12:26 idefix sendmail[9001]: gAEE9xnM009001: Milter (spamassassin): to error state Nov 14 15:12:26 idefix sendmail[8997]: gAEE9nnM008997: Milter (spam

Re: [SAtalk] Problem with HTML::Parser in SA

2002-11-14 Thread GeckoX
Thanks. That helped. The problem was that my non-root users didn't have permission to execute the auto/ directory to access Parser/Parser.*. Once I chmoded 755 auto/ auto/HTML/ auto/HTML/Parser, it worked. Thank you. :GeckoX ++ 14/11/02 08:35 +0100 - Jan Schreckenbach: >Hi, > >these are the f

[SAtalk] Really bad false positive

2002-11-14 Thread Ross Vandegrift
Check this message my boss forwarded to me. It came from his lawyer and was tagged by SA via the CAPS rules and some URL rules. Funny thing is, there nothing in all caps, and there's absolutely no URL. This is clearly a legitimite mail. BTW - my boss's MUA wraps headers when it shouldn't - I've

[SAtalk] false negatives with fake email address in From: header

2002-11-14 Thread Jan Korger
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I got some false negatives here which contain a fake email address as real name. As many MUAs display real names instead of addresses if real name is present, most people will think the From: address is what's in the real name part if this looks like a

Re: [SAtalk] spamd dying issue

2002-11-14 Thread Justin Mason
Tomki said: > I'll give it a shot right away, thanks! BTW -- the people who are using this -- does it solve the spamd-dying issue for you? and did 2.43 die? I need votes to figure out if we should backport it and do a 2.44. --j. > >Tomki said: > > > > > Although there has been no talk of a

Re: [SAtalk] Problem with HTML::Parser in SA

2002-11-14 Thread Jan Schreckenbach
Hi, these are the files for perl-HTML-Parser (installed via RPM) at my system: rpm -ql perl-HTML-Parser|grep lib /usr/lib/perl5/site_perl/5.6.1/i586-linux/HTML/Entities.pm /usr/lib/perl5/site_perl/5.6.1/i586-linux/HTML/Filter.pm /usr/lib/perl5/site_perl/5.6.1/i586-linux/HTML/HeadParser.pm /usr/li

[SAtalk] RE: during Draining Input??

2002-11-14 Thread Mike Loiterman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Setting score RAZOR_CHECK to 0 ion local.cf fixes the problem. Is Razor working correctly? I've had this setup for months without any problems. ... Randomly Generated Quote: I feed on the flesh of the living

[SAtalk] spamassassin+sendmail+mail filter

2002-11-14 Thread Vasco Macaringue
I'm sorry for insisting in this question , the reason is that I have not other way to solve this problem I hope you understand: I installed sendmail 8.12.6 and everything was going well, but when I moved to spamassassin I begin to get problems . I'd like to get you help When I try to send a

[SAtalk] during Draining Input??

2002-11-14 Thread Mike Loiterman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I'm getting the following error in my maillogs when running messages through spamc: timeout waiting for input from local during Draining Input Things work fine when I test with spamassassin -tD < sample-spam.txt > test.out PLEASE HELP! Spam is fi

[SAtalk] Split emails caused by SpamAss - example attached

2002-11-14 Thread Mike Shkolnik
Ok, here is an example of the split email problem caused by SpamAss. Check out the header of the untitled, apparently blank email - it contains the remainder of the first email! This happens in the same place on every Monster Agent email I get. If SpamAss is disabled, the problem goes away. --- Be

[SAtalk] Razor problem ?

2002-11-14 Thread DEFFONTAINES Vincent
Looks like we are having a razor problem? Servers seem to have not been responding, for about 2 hours now. Anyone else noticed that? Vincent --- This sf.net email is sponsored by: To learn the basics of securing your web site with SSL, click