Title: Excessive CPU / RAM after upgrade to 2.55
We've been running Spamassassin for about 3 months now. Up till yesterday we used v2.50 which has worked flawlessly. The server is a P400 MHz/256 MB Ram. Load has been around 0.20-0.40. we receive about 8 mails a month.
However, after I di
Hi Tony,
>You should get the buggers (Windows Virus specialists like ...
Naah I can give you better than that:
> We, Cybersite, have detected the W32/[EMAIL PROTECTED] virus that appears
> to have come from your mail server. It was sent in
> an attachment your_details.zip, from [EMAIL PROTECT
On Fri, Jul 04, 2003 at 03:29:00AM +0300, Federico Voges wrote:
> Some fscking spammer is sending spam using random email addresses
> (@mydomain.com) for the sender & return addres:
>
> My mail server queue has always about 100 bounce msgs in the delivery
> queue.
>
> Any ideas about how to pro
I managed to locate the problem. After removing the following files from the filter's
~/.spamassassin/ catalog, the load and memory usage is back to normal.
-rw---1 filter filter225 Jul 4 09:34 bayes_msgcount
-rw---1 filter root 5251072 Jul 4 09:33 bayes_seen
-
- Original Message -
From: "Alan Leghart" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, July 04, 2003 3:02 AM
Subject: Re: [SAtalk] Re: Movie FILTER THIS VIRUS ALREADY!!!
> I'm outta here. Everyone have a great weekend. Try not to think about
> spam, spammers, virii, auto-
On Thu, Jul 03, 2003 at 09:29:16PM -0300, Federico Voges wrote:
> Some fscking spammer is sending spam using random email addresses
> (@mydomain.com) for the sender & return addres:
Yes, I've also been getting spam addressed from myself. It's usually caught
by SA, but can it cause problems eg. if
--On Friday, July 4, 2003 10:20 AM +0200 Ralf Guenthner <[EMAIL PROTECTED]>
wrote:
- Original Message -
From: "Alan Leghart" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, July 04, 2003 3:02 AM
Subject: Re: [SAtalk] Re: Movie FILTER THIS VIRUS ALREADY!!!
I'm outta here. Every
- Original Message -
From: "Thomas Nilsen" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Friday, July 04, 2003 10:01 AM
Subject: RE: [SAtalk] Excessive CPU / RAM after upgrade to 2.55
*snip*
>Is it safe to assume that some of the bayes files was corrupt in some way
after I did the
- Original Message -
From: "Alan Leghart" <[EMAIL PROTECTED]>
To: "Ralf Guenthner" <[EMAIL PROTECTED]>;
<[EMAIL PROTECTED]>
Sent: Friday, July 04, 2003 10:52 AM
Subject: Re: [SAtalk] Re: Movie FILTER THIS VIRUS ALREADY!!!
> I was reaching. Virii actually is not a Latin word. It implies
sa-learn --rebuild did not help. I still got a backup of the original files, but I
might as well let spamd rebuild the new database...
Thomas
>-Original Message-
>From: Ralf Guenthner [mailto:[EMAIL PROTECTED]
>Sent: Friday, July 04, 2003 10:53 AM
>To: Thomas Nilsen; [EMAIL PROTECTED]
>
On Fri, Jul 04, 2003 at 09:34:32AM +0100, Jim Ford wrote:
> Yes, I've also been getting spam addressed from myself. It's usually caught
> by SA, but can it cause problems eg. if others are getting spam with my
> address, can I get on a blacklist?
Looks like the answer's 'yes' 8^/
--
Spam poison
Hello Jason,
Thursday, July 3, 2003, 7:45:31 PM, you wrote:
JH> On Thu, Jul 03, 2003 at 10:29:47PM -0400, Shaun T. Erickson wrote:
>> So, no rant from me, but I *do* think the list admin (or the admin of
>> the system that hosts the list) should be making every attempt to block
>> virii from
JM> OK, I'm curious. How do you suggest this can be done using MailMan 2.0.9?
JM> as far as I can see, there's no way to filter out attachments.
I use Mailman 2.0.13, so it's possible that it has a
feature that 2.0.9 doesn't - in which case they really ought
to upgrade, given the fact that Mailm
BAS> Besides, comparing spam to viruses is a bit like apples and
BAS> fruitcakes. Only without the fruit or the cake.
Sobig.E. is a virus designed to create a backdoor trojan on
a system to send out SPAM. Get it? The particular virus that
this list is dissemminating 3 or 4 times a day to possibly
Hello Jim,
JF> Yes, I've also been getting spam addressed from myself.
Actually, I think the spam-from-yourself routine is a trick
that is created by the sending software, so that everyone is
getting spam from themselves -- so for those particular
spams, others are probably not getting that. S
Hello,
is it possible to delete message if spamscore is bigger then required_hits, or
move it to specified folder ? What variables i have set in local.cf file ?
Thanks for reply's
Have a good day.
Egidijus
---
This SF.Net email sponsored
Procmail is your friend.
--
Thomas Cameron, RHCE, CNE, MCSE, MCT
Cameron Technical Services, Inc.
(512) 454-3200 Main
http://www.camerontech.com
- Original Message -
From: "Patrick Murphy" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, July 03, 2003 7:06 PM
Subject: [SAtalk]
IIRC spamass-milter checks all mail, relayed or local delivery.
--
Thomas Cameron, RHCE, CNE, MCSE, MCT
Cameron Technical Services, Inc.
(512) 454-3200 Main
http://www.camerontech.com
- Original Message -
From: "Gary Lopez" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, July
> -Original Message-
> From: Justin Mason [mailto:[EMAIL PROTECTED]
> Sent: 04 July 2003 05:03
> To: [EMAIL PROTECTED]
> Subject: Re: Re[2]: [SAtalk] Re: Movie FILTER THIS VIRUS ALREADY!!!
>
> OK, I'm curious. How do you suggest this can be done using
> MailMan 2.0.9? as far as I ca
On Fri, Jul 04, 2003 at 05:15:00PM +0300, Egidijus wrote:
> is it possible to delete message if spamscore is bigger then
> required_hits, or move it to specified folder ? What variables
> i have set in local.cf file ?
Yes, but SpamAssassin has no control over that. It depends on
how you call Spam
On Fri, Jul 04, 2003 at 04:15:31AM -0700, Abigail Marshall wrote:
> Actually, I think the spam-from-yourself routine is a trick
> that is created by the sending software, so that everyone is
> getting spam from themselves -- so for those particular
> spams, others are probably not getting that. S
On Friday 04 July 2003 02:19 CET Abigail Marshall wrote:
> > In all the cases where someone complained, however, there was no
> > mention of penis in the email message.[...]
>
> Growing breasts instead? The PENIS_ENLARGE test is as
> follows (version 2.54):
>
> /\b(?:enlarge|increase|grow|lengthen
Wonderful, now the idiots are harvesting email addresses from bugzilla:
From: "Darla Langston" <[EMAIL PROTECTED]>
Reply-To: "Darla Langston" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: <[EMAIL PROTECTED]>
Date: Thu, 03 Jul 03 19:41:02 GMT
X-Mailer: Microsoft Outlook Express 5.00.2615.200
MIME-V
Not unless the spammer also forges headers to make the email
look like it's coming from the IP that corresponds with the
email address. RBL blacklisting is done based on the IP info in
the headers, not on domain names in the email.
Thanks for the reassurance! If it becomes a problem I'll filter
Malte S. Stretz wrote:
It might have hit on the PP-part (first of the third line). That would catch
eg. "In that wood there are larger trees etc. pp.". That phrase is gone in
2.60-PR2 (the current beta) though and won't be in the next release
anymore. On the other hand "The increase of breast c
| I hate to spoil your day, but it is possible. I had such an experience
| about a year ago. We were using an old version of the popular form mail
| script formail.pl. The version in question had a security issue that
| allowed a spammer to turn my webserver into a mail relay. Because the
|
Mike Vanecek wrote:
Wonderful, now the idiots are harvesting email addresses from bugzilla:
They harvest them from everywhere, dude.
Including my web site, and this list, and the 40+ others I contribute
to. So what? I have SpamAssassin 2.60-CVS and my people never see
nothing-no-spam.
The lear
Hello. We have successfully installed postfix/amavisd-new/spamassassin and
everything is working great. We are currently not killing the spam but just
rewriting the subject. I noticed in the sa docs that you can add the hit
level to the subject using _HITS_ but when I add this to amavisd it just
Hello Jim,
Friday, July 4, 2003, 5:38:36 AM, you wrote:
JF> On Fri, Jul 04, 2003 at 04:15:31AM -0700, Abigail Marshall wrote:
>> Actually, I think the spam-from-yourself routine is a trick
>> that is created by the sending software, so that everyone is
>> getting spam from themselves --
JF> T
>>
>> OK, I'm curious. How do you suggest this can be done using
>> MailMan 2.0.9? as far as I can see, there's no way to filter
>> out attachments.
>>
TH> Main menu, select 'content filtering',
TH> This mailman 2.1.(something) though.. Not sure if it's the same in 2.0.9.
Tony, that menu i
I recently received the following message which gets a score of 0. It also
says tests=none. Does that mean it spoofed spamassassin?
D
Return-Path: <[EMAIL PROTECTED]>
Received: from mail178.coolonlineactivity.net
(mail178.coolonlineactivity.net [65.61.140.57])
by localhost.localdomain
I bet you guys didn't know you can read this list on
http://news.gmane.org/thread.php?group=gmane.mail.spam.spamassassin.general
and even better thru their NNTP server.
http://spamassassin.org/lists.html should make a note of it.
One would subscribe but with delivery turned off,
and read via NNTP
Q> Rules with scores of 0 are *not* run.
0.0 probably not too, eh.
OK, let's say we want them all to run anyway.
What can one do in user_prefs to get them to run too?
Any one line solutions? Or must one resort to
awk '/^score/&&!$3{print $1,$2,0.001}' \
/usr/share/spamassassin/50_scores.cf >> user_
On 05.06.2003 16:48 Uhr, Chris Balay <[EMAIL PROTECTED]> wrote:
AARGHH! I am in spam hell!
Well when I run spamassassin from the terminal I get the following error:
razor2 check skipped: Can't locate object method "new" via package
"Razor2::Client::Agent" at /Library/Perl/Mail/SpamAssassin/Dns.
Since I just upgraded the OS on one machine from Mandrake 9.0 to 9.1, I
figured I'd haul down the mandrake rpm for 2.55 from rpmfind.net. It told me
I had a bucket of perl modules I'd need to install. I then did a rpm -tb on
the 2.55 tarball. It also said I was missing a couple (much less tha
Hi,
I'm using sendmail + spamass-milter. I found the milter is adding heaps of
this kind of log into the maillog, which makes my log file and log report
very long, and I don't actually need to know that. How to stop it logging
this information into the log file?
Leo
Milter add: header: X-Spam-St
I there every user of this mailling list, you are all so kind, so im here to
say thanks to all those people out there that gave me a very good
helpnone what so ever...so thanks very much..
Cumprimentos
Bruno Pereira
DSI
218452059
[EMAIL PROTECTED]
-Original Message-
From: [EMAIL
Hi,
I have a question.
It's working here as well, but my server is receiving spam vs. normal
emails at the ratio about 20:1. I activated the bayes auto_learn option,
do you think it would be a problem?
Leo
> Hi,
>
> We implemented it for 10K+ users at our ISP with a default required_hits
> of 1
In your sendmail.mc, add the line:
define(`confMILTER_LOG_LEVEL',`0')dnl
and rebuild sendmail.cf using m4.
--
Thomas Cameron, RHCE, CNE, MCSE, MCT
Cameron Technical Services, Inc.
(512) 454-3200 Main
http://www.camerontech.com
- Original Message -
From: "Leo Huang" <[EMAIL PROTECTED]>
T
Hi,
Not sure what you mean by a problem. You can see some of our stats at
the following locations (Just added the chkusr patch - thanks tonix! -
to qmail this morning for vpopmail so that explains the drop in spam on
newmail)
http://newmail.axess.com/qmailmrtg/ Last three graphs
http://mail.
On Fri, Jul 04, 2003 at 08:04:21PM -0700, Robin Lynn Frank wrote:
> Can I assume that there is a combination of Mandrake's packagers are a bit
> extreme and that I have some perl modules that were not installed via rpm and
> are therefor not in the rpm database? Or is there sonmething else I am
Bruno Pereira <[EMAIL PROTECTED]> wrote:
>
> I put the procmailrc in the /etc/, I think that would make the changes
> for all mail.
/etc/procmailrc runs with root privileges. You should be careful what
you run there. You might wish to put "DROPPRIVS=yes" before any of
this.
> :0fw: spamassassin
I'm using SA with Anomy Sanitizer and Postfix. I sent the test which
showed up in my maillog as being sent, yet I chave not seen the
message. Does anyone using this combination of products have it
working?
Thanks
--
Jon Miller <[EMAIL PROTECTED]>
MMT Networks Pty Ltd
-
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hello.
I'm trying to set this up, and I'm just not quite getting it...
Here's what I have:
I am running qmail as an MTA, with spamassassin (qmail-spamc and spamd,
sitewide) This is a scanning only relay box (no local accounts).
I want to write a wra
44 matches
Mail list logo
