Matt Kettler wrote:
At 05:34 PM 10/26/2004, Chris Weiss wrote:
From looking at the debug, it appears that the SURBL is firing off,
but not finding suspect addresses, the Bayes list is loading, but not
being checked and none of the external rules are being evaluated.
There's some errors during i
At 05:34 PM 10/26/2004, Chris Weiss wrote:
From looking at the debug, it appears that the SURBL is firing off, but
not finding suspect addresses, the Bayes list is loading, but not being
checked and none of the external rules are being evaluated. There's some
errors during initialization where
For some reason, SpamAssassin has stopped scoring my spam as spam.
Here's a little background:
System: OpenBSD based on the FlakShack howto (SA being called from
AmavisD, w/ClamAV and Rules Du Jour in the mix). Recently upgraded to SA
3.0, then SA 3.01 via CPAN.
The majority of my email is cull
Hi
Earlier i had a customers bayes_* files look like they could not write but
this turned out to be quota's
Now i am getting same error on my test domain
Oct 26 22:11:14 proteus2a spamd[867]: connection from localhost.localdomain
[127.0.0.1] at port 46241
Oct 26 22:11:14 proteus2a spamd[3011]: in
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Smart,Dan writes:
> I compiled a 5.8.5 perl, since the 5.8.0 has the Unicode bugs, and the
> RedHat default is to enable threading.
>
> What about Shared Libperl? -Duseshrplib
doesn't particularly help either, in my experience. slows things
down th
I compiled a 5.8.5 perl, since the 5.8.0 has the Unicode bugs, and the
RedHat default is to enable threading.
What about Shared Libperl? -Duseshrplib
<>
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, October 26, 2004 2:26 PM
> To: Smart
On Tue, Oct 26, 2004 at 04:00:21PM -0400, Keith Hackworth wrote:
> Is there a Mail::SpamAssassin::PerMsgStatus method that will return just
> the body of the message (no attachments/multiparts)? I need a
> "non-pristine" message to speed things up in my plugins. I know there's
> get_message(), bu
Is there a Mail::SpamAssassin::PerMsgStatus method that will return just
the body of the message (no attachments/multiparts)? I need a
"non-pristine" message to speed things up in my plugins. I know there's
get_message(), but that seems to return the whole message, with the
attachments.
Thanks,
On Oct 26, 2004, at 12:14 PM, Luis Hernán Otegui wrote:
Well first of all, sorry for the lack of info. Here it is the (I
think) relevant info on the servers. These two are identical machines,
except for the RAM amount (the good one has 768 MB an the troubled one
has 438 MB)
I was having a problem o
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Smart,Dan writes:
> A little off topic, but how did you compile your perl? Did you turn on
> threading? Shared libperl?
> Does SA use threads?
nope -- perl threading is still very hairy.
> TIA
>
> <>
>
> > -Original Message-
> > From:
A little off topic, but how did you compile your perl? Did you turn on
threading? Shared libperl?
Does SA use threads?
TIA
<>
> -Original Message-
> From: Luis Hernán Otegui [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, October 26, 2004 12:50 PM
> To: Spamassassin talk list
> Subje
Well first of all, sorry for the lack of info. Here it is the (I
think) relevant info on the servers. These two are identical machines,
except for the RAM amount (the good one has 768 MB an the troubled one
has 438 MB)
OS: RedHat 8.0
Perl Version: 5.8.5, compiled from source in both cases.
Kernel:
On Tue, 26 Oct 2004 13:37:38 -0400 (EDT), "Ron Johnson"
<[EMAIL PROTECTED]> said:
> Seems to me that using some kind of Milter (I'd do it in Mimedefang,
> but that's because I'm already using it) you could do something like:
>
> Does user exist? Process normally
> Did user ever exist? Bounce.
> U
Does anyone here know how to manipulate the SA headers under cgpav? The
header definitions in local.cf seem to be ignored and I can't find the
section of the cgpav source that deals with this.
Thanks!
Scott
At 11:49 AM 10/26/2004, Andy Norris wrote:
Hi All,
If this is in a FAQ or in the history, please point me to it, ridicule me,
and go on about your day. :-)
We have a Linux server running Ensim. We had SpamAssassin 2.60. Upgraded
to 2.64. Then we tried to upgrade to 3.0.0. SpamAssassin would not
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Matt Kettler writes:
> At 01:49 PM 10/26/2004, Luis Hernán Otegui wrote:
> >What really pisses me off is the fact that in the rest of my servers,
> >when SA starts, only the parent process weights 22 MB, the children
> >weight approx. 5 MB each. But i
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
=?ISO-8859-1?Q?Luis_Hern=E1n_Otegui?= writes:
> Well, I've upgraded to SA 3.0.1 several of my servers, and since the
> bugfixes seemed so promising, I decided to give it a try on the server
> which had the memory issues (I've sent a couple of mails to
At 02:01 PM 10/26/2004, Ajay Sharma wrote:
> Did the message have an X-Mailer or User-agent header?
> Here's the rule:
> 20_head_tests.cf:meta
MSGID_DOLLARS (__OUTLOOK_DOLLARS_MSGID &&
!__HAS_OUTLOOK_IN_MAILER && !__UNUSABLE_MSGID)
> And the subtests:
> 20_head_tests.cf:header __HAS_O
Quoting Gary Manigault <[EMAIL PROTECTED]>:
> I have Postfix, spamassassin and procmail. My Postfix box is a mail
> gateway between the outside and my echange server. I am getting the
> following warning with spamassassin and don't know where to go to fix
> it.
>
> =
> warning: connect to t
At 01:49 PM 10/26/2004, Luis Hernán Otegui wrote:
What really pisses me off is the fact that in the rest of my servers,
when SA starts, only the parent process weights 22 MB, the children
weight approx. 5 MB each. But in this particular server, all of the
spamd processes start up as 22 MB processes
Matt Kettler wrote:
At 12:42 PM 10/26/2004, Ajay Sharma wrote:
I requested an RMA from Muskin and the email was flagged as spam.
Here's what it hit on:
0.2 NO_REAL_NAME From: does not include a real name
0.6 SUBJ_HAS_SPACESSubject contains lots of white space
1.1 SUBJ_HAS_
On Tue, Oct 26, 2004 at 02:49:46PM -0300, Luis Hernán Otegui wrote:
> when SA starts, only the parent process weights 22 MB, the children
> weight approx. 5 MB each. But in this particular server, all of the
I think that's pretty much impossible. The children are guaranteed to
be the same or larg
Well, I've upgraded to SA 3.0.1 several of my servers, and since the
bugfixes seemed so promising, I decided to give it a try on the server
which had the memory issues (I've sent a couple of mails to the list a
month ago, or so).
Good news is spamd doesn't chew up the memory as fast as with 3.0.0.
Christopher X. Candreva writes:
>
> On Tue, 26 Oct 2004, Dave Duffner - NWCWEB.com wrote:
>
> > The Con is we see tons of sludge when a dictionary
> > attack comes forth, if we had a method to simply reject that
> > with a 550 or other response that'd leave just the important
> > sludge so w
At 12:42 PM 10/26/2004, Ajay Sharma wrote:
I requested an RMA from Muskin and the email was flagged as spam. Here's
what it hit on:
0.2 NO_REAL_NAME From: does not include a real name
0.6 SUBJ_HAS_SPACESSubject contains lots of white space
1.1 SUBJ_HAS_UNIQ_ID Subjec
On Tue, 26 Oct 2004, Dave Duffner - NWCWEB.com wrote:
> The Con is we see tons of sludge when a dictionary
> attack comes forth, if we had a method to simply reject that
> with a 550 or other response that'd leave just the important
> sludge so we can continue to write the SA rules and keep
Chris,
Becomes a trade-off. It's easily possible to reject
on that basis, but the flavor of RH & Ensim Hosting OS on
each box allows for catch-all accounts. We've had to use
these for two reasons:
#1: Morons can't read and send e-mails just a few
hairs off and that mail is eate
I requested an RMA from Muskin and the email was flagged as spam.
Here's what it hit on:
0.2 NO_REAL_NAME From: does not include a real name
0.6 SUBJ_HAS_SPACESSubject contains lots of white space
1.1 SUBJ_HAS_UNIQ_ID Subject contains a unique ID
0.0 HTML_MESSAGE
Dave,
Use the following sendmail options with /etc/mail/mailhost containing
your valid user email accounts. I create mailhost from an export of an
LDAP database, if available.
LDAPROUTE_DOMAIN_FILE(`/etc/mail/ldap_domains')dnl
FEATURE(`ldap_routing', `hash /etc/mail/mailhost', `null', `bounce')d
On Fri, Oct 08, 2004 at 03:49:08PM -0700, Justin Mason wrote:
> I've been considering possible improvements to how we figure out what
> rules are effective.
>
> Currently we use the S/O ratio and hit-rate of each individual rule, in
> other words, if a rule hits a lot of spam, and little nonspam,
On Tue, 26 Oct 2004, Dave Duffner - NWCWEB.com wrote:
> Is there a way, possibly with SpamAssassin, to
> simply reject anything not going to a valid user account?
I think the question is, why are you accepting mail that isn't going to a
valid user account in the first place ? This should
At 03:25 PM 10/23/2004, Justin Mason wrote:
> > In the longer term, here's some suggestions I use on my own MailScanner
> > server: (I use all of these together)
>
> Matt
>
> I wanted to personally say thanks! We too had time out issues with the new
> 3.0 and MS. Certain spams happened to sneak in
Ralf,
We don't greylist to reduce resource usage. It is just an extra layer to catch
spammers that are "on the line." This has proven to be very effective. We
don't want to delay email that is very likely not to be spam (less than 3
points) so we don't greylist all email. However, we still
On Tue, Oct 26, 2004 at 11:51:27AM -0400, Keith Hackworth wrote:
> I finally got my code to work perfectly after quite a bit of trial and
> error, but one problem - it's not reporting back to sa whether it's spam
> or not. I'm doing a "return 1" (spam) or "return 0" (ham) at the end of
> my subrou
We've had these, especially from some of the sources
listed below, for quite some time. But we've also
seen that same spike lately and a couple of worthless
attempts to hack into our servers and gain more ID's.
When that doesn't work, it's dictionary time and
they spew tons at u
I'm tired of rewriting my custom-built EvalTest.pm tests every time a new
SA comes out, so I'm converting them to Mail::SpamAssassin::Plugin(s)
(Chris - this is the BAD_TAGS invalid html tag identifier and the [EMAIL
PROTECTED]
[EMAIL PROTECTED] filters I posted about 6 months ago).
I finally go
Hi All,
If this is in a FAQ or in the history, please point me to it, ridicule me,
and go on about your day. :-)
We have a Linux server running Ensim. We had SpamAssassin 2.60. Upgraded to
2.64. Then we tried to upgrade to 3.0.0. SpamAssassin would not start. (I
did the Bayes sa-learn stuff in
From: Pierre Thomson [mailto:[EMAIL PROTECTED]
>
> One of our relays got 8500 name-guessing spams yesterday, up from
> an average of 2500 per day last week. So far today we have seen
> 6600, and the day isn't half over. If our MTA weren't checking
> recipients against our userlist, SA would be s
On Tue, Oct 26, 2004 at 04:03:02PM +0100, Ronan wrote:
> i also saw it in a couple of other peoples' posts recently. It appears
> like you say when i run
> spamassassin --lint -D
>
> anyone??
> >plugin:mail::spamassassin::plugin::uridnsbl=hash(0x1d82310) inhibited
> >further callbacks
it's 100%
We got slammed with a whole series of dictionary attacks in June (as
many as 500k per day against a variety of domains). And, yes, it
brought SA to it's knees. Prior to the flood, we had always configured
our customer's domains such that [EMAIL PROTECTED] was
delivered to the customer's defau
Sorry for being a bit quick with my last mail. I got it to work now, was
just an erroneously newline that got into the rules files when I cut & pasted.
-Frank.
One of our relays got 8500 name-guessing spams yesterday, up from an average of
2500 per day last week. So far today we have seen 6600, and the day isn't half
over. If our MTA weren't checking recipients against our userlist, SA would be
struggling to process these sudden "blasts" of spam.
Th
Thanks. I did the changes you illustrated below (into
spamassassin/spamcop_uri.cf). The "make test" errors went away, so I went
ahead and did "make install" of SpamAssassin 2.64, as well as a reinstall
of SpamCopURI-0.22 (just in case). I also removed the old override in
local.cf and skip_rb
i get this all the time in my current 3.0.0 version.
i also saw it in a couple of other peoples' posts recently. It appears
like you say when i run
spamassassin --lint -D
anyone??
Grant Baxter wrote:
I don't know if this is a problem or not. I don't remember seeing it
on 3.0.0. When running spama
At 03:14 PM 10/26/2004 +0100, Ronan wrote:
does spamd read all sitewide config files in /etc/mail/spamassassin when
it starts and keeps them in memory so that whenever a spamc connects to it
its there for quicker / more efficenet processing...?
Yes. Spamd only reads user_prefs files at message-de
I don't know if this is a problem or not. I don't remember seeing it
on 3.0.0. When running spamassassin or spamd in debug mode, I see the
following:
plugin:mail::spamassassin::plugin::uridnsbl=hash(0x1d82310) inhibited
further callbacks
This happens about a dozen times, then SA goes on.
Any tho
- Original Message -
From: "Matt Kettler" <[EMAIL PROTECTED]>
To: "Troy Bull" <[EMAIL PROTECTED]>;
Sent: Tuesday, October 26, 2004 9:17 AM
Subject: Re: Problems With 3.01 detecting spam
1) your trusted_networks needs to be manually set..ALL_TRUSTED should only
fire for mail that has neve
Title: Message
I have Postfix,
spamassassin and procmail. My Postfix box is a mail gateway between the
outside and my echange server. I am getting the following warning with
spamassassin and don't know where to go to fix it.
=
warning:
connect to transport spamassassin: Connection
At 08:25 AM 10/26/2004 -0500, Troy Bull wrote:
required_score 6.0
This seems to work ok, but I am wondering why do I need the "score" lines.
Without these lines much spam makes it to my inbox, and it is obviously
spam. Does anyone have any ideas or should i just stick with this setup?
Wait.. O
At 08:25 AM 10/26/2004 -0500, Troy Bull wrote:
# Try this for a while see how it works.
score ALL_TRUSTED 0
score BAYES_99 8.0
score BAYES_95 6.0
score BAYES_80 4.0
score BAYES_60 2.0
score BAYES_50 1.5
score BAYES_40 1.0
score BAYES_20 0.5
--
This seems to
does spamd read all sitewide config files in /etc/mail/spamassassin when
it starts and keeps them in memory so that whenever a spamc connects to
it its there for quicker / more efficenet processing...?
im asking becuase i cant run the full rules and suribls on my primary
mailhub because it keep
Mathieu Nantel wrote:
Good day,
I'm sorry if that question has been answered before, but I could not find an
answer.
Is there a command / way that will show how many spams and hams have been
learned by the Bayesian filter?
sa-learn --dump magic
--
Adam Lanier
Bernard L. Madoff Investment Securi
Hi Martin
(i have posted reply to list).
I tried this and on next email the same message is seen + bayes_tok created
with 0B
Further investigation shows users quota is at limit!
I would like to find a way to have files under ./spamassassin to be say
nobody.nobody or some other user.group that doe
-Original Message-
From: Mathieu Nantel [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 26, 2004 9:29 AM
To: users@spamassassin.apache.org
Subject: List number of ham and spam in Bayes
Good day,
I'm sorry if that question has been answered before, but I could not
find an answer.
Is
Good day,
I'm sorry if that question has been answered before, but I could not find an
answer.
Is there a command / way that will show how many spams and hams have been
learned by the Bayesian filter?
--
Mathieu Nantel, RHCE - Systems Manager
Ecopia BioSciences Inc.
(514) 336-2724 x434
Greetings:
I have my own little mail server where I have global bayes and I use spamd.
It used to work almost perfectly now I have many problems. I have
implemented the following rules in local.cf:
--
#this is my local site wide config
required_score 6.0
report_safe 1
lock_method
Hi
I have 1 user who during the last day or so has this error in the maillog
Oct 26 09:13:50 proteus2a spamd[13379]: Cannot open bayes databases
/home/domain/domain32/.spamassassin/bayes_* R/O: tie failed: Inappropriate
ioctl for device
Oct 26 09:13:53 proteus2a spamd[13379]: Cannot open bayes da
On Tuesday, October 26, 2004, 1:40:05 AM, Frank Johansen wrote:
> Hi, I'm in the progress of upgrading SA from 2.63 to 2.64 and SpamCopURI
> from 0.19 to 0.22.
The syntax for the SpamCopURI 0.22 rules is new to reflect use of
the combined list multi.surbl.org, so please update them to look
like th
Hi, I'm in the progress of upgrading SA from 2.63 to 2.64 and SpamCopURI
from 0.19 to 0.22.
During make test of SA I get these during each t/rule_tests:
t/rule_testsok 61/62Failed to compile URI SpamAssassin
tests, skipping:
(syntax error at /etc/mail/spamassassin/local.c
> Not sure where to take this hopefully you all can point me in the correct
> direction .
DOH!!!
My apolgies I meant to post this to the Squirrelmail List Not the
SpamAssassin list.
Gotta quit drinkin' and emailin'
JP
Not sure where to take this hopefully you all can point me in the correct
direction I am trying to use the latest version of the Got_Hotmail plugin
with SQML 1.4.2 on a Suse 9.1 box with the latest version of Curl
installed and gotmail version 0.8.2 I have a hotmail account with new mail
but I cann
On Mon, Oct 25, 2004 at 02:27:38PM -0700, Max Kanat-Alexander wrote:
> Is there any way to find out exactly what the standard perl deps of SA
> are? Right now we bundle perl inside one of our products in order to
> include SpamAssassin on Windows, but it accounts for 1/2 the size of the
> ent
At 09:31 PM 10/25/2004, Tremaine wrote:
Running 2.6.4 currrently, although it looks like I'll have to jump
ahead of the distro package to fix this one. Just hope 3.x does the
trick ;)
If you're using ok_locales, it should.
On Mon, 25 Oct 2004 14:42:37 -0400, Matt Kettler <[EMAIL PROTECTED]> wrote:
> At 08:55 PM 10/24/2004, Tremaine wrote:
> >We recently implemented spamassassin on our server to mitigate spam
> >volumes, and it does it quite well... except for one thing. For
> >reasons I can't determine, it will sudd
Just a reminder that since Qmail-Scanner supports SpamAssassin,
it also supports using SURBLs with the Qmail mail server.
http://qmail-scanner.sourceforge.net/
Also supports anti-virus, etc.
Jeff C.
--
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/
At 07:43 PM 10/25/2004, Kurt Buff wrote:
I ran a bare email through it, with just the text of the GTUBE string in it,
and it doesn't seem to trip the system at all. I note in 20_body_tests.cf
the following:
body GTUBE /"elided, to keep everyone's email from going
bonkers..."/
describe
66 matches
Mail list logo
