RE: Error after upgrading to 3.0.1

2004-11-01 Thread marti
|-Original Message- |From: Theo Van Dinter [mailto:[EMAIL PROTECTED] |Sent: 01 November 2004 23:17 |To: Spamassassin |Subject: Re: Error after upgrading to 3.0.1 | |On Mon, Nov 01, 2004 at 11:17:02PM -, marti wrote: |> ERROR! spamassassin script is v3.00, but using modules |v3.00

since 3.0.0 I've been getting these

2004-11-01 Thread Tim Litwiller
Nov 1 17:38:42 mailhost spamd[15700]: Use of uninitialized value in numeric lt (<) at /usr/lib/perl5/site_perl/5.6.1/Mail/SpamAssassin/Plugin/SPF.pm line 204, line 52. Nov 1 17:38:42 mailhost spamd[15700]: Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/site_perl

Re: Error after upgrading to 3.0.1

2004-11-01 Thread Theo Van Dinter
On Mon, Nov 01, 2004 at 11:17:02PM -, marti wrote: > ERROR! spamassassin script is v3.00, but using modules v3.01! > > Any idea what scrip its refering to, spamassassin --lint -D worked just > fine, but cant fire up spamd. It's a fail-safe. It means you are trying to use the spamass

Error after upgrading to 3.0.1

2004-11-01 Thread marti
After upgrading from 3.0.0 to the latest version I get the following error:- ERROR! spamassassin script is v3.00, but using modules v3.01! Any idea what scrip its refering to, spamassassin --lint -D worked just fine, but cant fire up spamd. Martin

Re: CFLAGS

2004-11-01 Thread David Brodbeck
On Mon, 01 Nov 2004 11:54:50 -0800, Justin Mason wrote > BTW the default CFLAGS are coming from whatever perl was built with; > so I'd be worried about bugs in your perl accordingly ;) That's not where spamc is getting them. They're hard-coded in the configure script: ringbill# grep 'O2' -B1 sp

Re: interesting paper on SoBig's authorship

2004-11-01 Thread Jeff Chan
On Monday, November 1, 2004, 2:57:02 PM, Dan Barker wrote: > Must be interesting, it's over quota and won't render. > Dan It's up on the tripod site Justin mentioned: http://authortravis.tripod.com/ > > http://www.geocities.com/author_travis/ > very interesting! > --j. Jeff C. --

Re: interesting paper on SoBig's authorship

2004-11-01 Thread Tom Collins
Mirror of PDF (from Slashdot): http://wetsexygirl.com/WhoWroteSobig.pdf Seriously. On Nov 1, 2004, at 2:57 PM, Dan Barker wrote: Must be interesting, it's over quota and won't render. Dan http://www.geocities.com/author_travis/ very interesting! --j. -- Tom Collins - [EMAIL PROTECTED] QmailA

RE: interesting paper on SoBig's authorship

2004-11-01 Thread Dan Barker
Must be interesting, it's over quota and won't render. Dan http://www.geocities.com/author_travis/ very interesting! --j.

Re: interesting paper on SoBig's authorship

2004-11-01 Thread Jeff Chan
On Monday, November 1, 2004, 2:28:42 PM, Justin Mason wrote: > http://authortravis.tripod.com/ > http://www.geocities.com/author_travis/ > very interesting! > --j. Nice work, whoever the mystery authors are... Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/

interesting paper on SoBig's authorship

2004-11-01 Thread Justin Mason
http://authortravis.tripod.com/ http://www.geocities.com/author_travis/ very interesting! --j.

Re: Memory Usage

2004-11-01 Thread Matt Kettler
At 03:51 PM 11/1/2004, Scott Palmer wrote: Is there a reason why the memory usage jumped with 3.0.x? I have two servers running it and I am thinking I might have to upgrade the RAM because of it. One thing that springs to mind is the AWL is on by default, unlike 2.6x.. if you don't want it, try us

Re: Bayes sometimes not used

2004-11-01 Thread Juliano Simões
- Original Message - > From: "Matt Kettler" <[EMAIL PROTECTED]> > To: "Juliano Simões" <[EMAIL PROTECTED]>; > Sent: Monday, November 01, 2004 12:58 PM > Subject: Re: Bayes sometimes not used > > At 06:38 PM 10/31/2004, Juliano Simões wrote: > >See below sample outputs from subsequent exe

Memory Usage

2004-11-01 Thread Scott Palmer
Is there a reason why the memory usage jumped with 3.0.x? I have two servers running it and I am thinking I might have to upgrade the RAM because of it. Is there anything that can be done to reduce the usage. I thought that perhaps it was because of Bayes being in SQL. But, one server has it in SQ

Re: AWL and ABL (use of score AWL statements)

2004-11-01 Thread Matt Kettler
At 03:37 PM 11/1/2004, George Georgalis wrote: Thanks, I've added that: skip_rbl_checks 1 use_bayes 0 noautolearn 1 use_auto_whitelist 0 score AWL 0.001 I've seen lots of people using the score statement on AWL. However, I myself have serious doubts about the validity of doing that. The AWL doesn

Re: AWL and ABL Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread George Georgalis
On Mon, Nov 01, 2004 at 03:13:50PM -0500, Matt Kettler wrote: >At 02:11 PM 11/1/2004, George Georgalis wrote: >>those false negatives are also growing an AWL, which I also don't want. >> >>-1.4 AWLAWL: From: address is in the auto white-list >> >>how do I disable and purge any A

Re: SPF

2004-11-01 Thread Matt Kettler
At 08:41 AM 11/1/2004, Sauer, Peter wrote: has anybody a working config for spamassassin whit spf...i got spf aktive (plugin in init.pre) but i haven't seen any mails spamassassin does mark whit spf-rules...i am using spamassassin through amvisd-new... spelling lesson of the day... repeat after me:

Re: AWL and ABL Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread Matt Kettler
At 02:11 PM 11/1/2004, George Georgalis wrote: those false negatives are also growing an AWL, which I also don't want. -1.4 AWLAWL: From: address is in the auto white-list how do I disable and purge any AWL and ABL generation, too? Well, there is no "ABL" just one system called

Re: CFLAGS

2004-11-01 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Barnes writes: > On Mon, Nov 01, 2004 at 12:24:27PM -0500, David Brodbeck wrote: > > On Wed, 22 Sep 2004 09:15:48 -0700, Justin Mason wrote > > > -BEGIN PGP SIGNED MESSAGE- > > > Hash: SHA1 > > > > > > David Brodbeck writes: > > > > I

Whitelist and Blacklist

2004-11-01 Thread Ron Shuck
Hi, I am running 2.63 on Red Hat 9. I am invoking with a modified version of an Advosys script, but it is using spamc. The issue with whitelists and blacklists. They are working fine. The problem is that I have blacklisted [EMAIL PROTECTED] and have whitelisted [EMAIL PROTECTED] The purpose was

Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jim Maul writes: > This is exactly how i have my system setup. I have a 192.168 IP > assigned to my server. It has no public IP assigned to it. However, i > have a router/firewall in front of it which has a public ip assigned to > its wan interf

Re: CFLAGS

2004-11-01 Thread Michael Barnes
On Mon, Nov 01, 2004 at 12:24:27PM -0500, David Brodbeck wrote: > On Wed, 22 Sep 2004 09:15:48 -0700, Justin Mason wrote > > -BEGIN PGP SIGNED MESSAGE- > > Hash: SHA1 > > > > David Brodbeck writes: > > > Is there a way to get the SpamAssassin build process to use > > > -O instead of -O2 wh

Re: sql config problem with position-dependent config params

2004-11-01 Thread Michael Barnes
On Mon, Nov 01, 2004 at 02:22:39PM -, [EMAIL PROTECTED] wrote: > I am trying to use sql config, but it seems quite troublesome to > receive sql data in the correct order. > > Assuming the default config is > - just tag headers but do not modify message (report_safe 0) > - no test report in the

RE: trusted_networks and ALL_TRUSTED

2004-11-01 Thread Dallas L. Engelken
> > >>> Yep, that's right -- and trusted_networks will fix it. > >> > >>Yes trusted_networks does indeed fix the issue, but I'm > still not so > >>sure that the algorithm to deduce trusted_networks is > correct (if not > >>specified). > > In any event, how is it disabled? I'm getting false ne

AWL and ABL Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread George Georgalis
On Mon, Nov 01, 2004 at 02:03:36PM -0500, George Georgalis wrote: >In any event, how is it disabled? I'm getting false negatives... > >-2.8 ALL_TRUSTEDDid not pass through any untrusted hosts > >In my setup SA doesn't get _any_ trusted network connections, those >connections are routed

Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread George Georgalis
>>> Yep, that's right -- and trusted_networks will fix it. >> >>Yes trusted_networks does indeed fix the issue, but I'm still >>not so sure that the algorithm to deduce trusted_networks is >>correct (if not specified). In any event, how is it disabled? I'm getting false negatives... -2.8 ALL_TRU

Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread Jim Maul
Sean Doherty wrote: Justin, - if any addresses of the 'by' host is in a reserved network range, then it's trusted However, I would have thought that this would imply that the 10.0.0.53 host is trusted and not any servers connecting to it. The problem is that 10.x is a private net, therefore Sp

Re: Bayes sometimes not used

2004-11-01 Thread Juliano Simões
- Original Message - From: "Theo Van Dinter" <[EMAIL PROTECTED]> To: Sent: Sunday, October 31, 2004 9:42 PM Subject: Re: Bayes sometimes not used > On Sun, Oct 31, 2004 at 09:38:09PM -0200, Juliano Simões wrote: > > I have noticed a strange behavior of SA, after upgrading from > > versio

Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread Matt Kettler
At 01:07 PM 11/1/2004, Sean Doherty wrote: > The problem is that 10.x is a private net, therefore SpamAssassin infers > it cannot possibly be the external MX sitting out there on the internet. > (for a host to be sitting on the public internet accepting SMTP > connections, it'd obviously need a pub

Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sean Doherty writes: > Justin, > > > > - if any addresses of the 'by' host is in a reserved network range, > > > then it's trusted > > > > > > However, I would have thought that this would imply that the 10.0.0.53 > > > host is trusted and not an

Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread Sean Doherty
Justin, > > - if any addresses of the 'by' host is in a reserved network range, > > then it's trusted > > > > However, I would have thought that this would imply that the 10.0.0.53 > > host is trusted and not any servers connecting to it. > > The problem is that 10.x is a private net, there

Re: trusted_networks and ALL_TRUSTED

2004-11-01 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sean Doherty writes: > I'm looking for some clarification on trusted_networks, the > ALL_TRUSTED rule, and in particular how trusted_networks are > inferred if not specified in local.cf. > > Since upgrading to 3.0.1 I have seen an increase in false

Re: CFLAGS

2004-11-01 Thread David Brodbeck
On Wed, 22 Sep 2004 09:15:48 -0700, Justin Mason wrote > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 > > David Brodbeck writes: > > Is there a way to get the SpamAssassin build process to use -O instead of > > -O2 > > while building spamc? I run FreeBSD on a DEC Alpha, and -O2 triggers > > o

Re: sa-learn after autolearn=no

2004-11-01 Thread Theo Van Dinter
On Mon, Nov 01, 2004 at 07:36:35AM -0500, Dan Barker wrote: > 1) When I get a spam with autolearn=no in the headers, that means it's > already been learned. "no" means autolearning didn't occur, there is no way to know why it didn't do so unless you check the debug output. > 2) There is no need t

99_sare_fraud and SA 3.0.x

2004-11-01 Thread Christopher X. Candreva
The announcement for SA 3 mentioned that anti-fraud rules from Matt Yackley had been added, so when I upgraded I removed the 9_sare_fraud ruleset. However, I've noticed that some lotto scams were getting through. Just testing with on that didn't trigger any standard fraud rules, it did trigge

Re: Bayes sometimes not used

2004-11-01 Thread Matt Kettler
At 06:38 PM 10/31/2004, Juliano Simões wrote: See below sample outputs from subsequent executions of "/usr/bin/spamassassin -tLD < spam_msg_file": since you're using -D for debug output, is there anything in the debug that might give some clues? Do both use the same score set? Any complaints abou

sql config problem with position-dependent config params

2004-11-01 Thread hamann . w
Hi, I am trying to use sql config, but it seems quite troublesome to receive sql data in the correct order. Assuming the default config is - just tag headers but do not modify message (report_safe 0) - no test report in the header (remove_header Report) and a user wants to turn the reports on, t

Re: sa-learn after autolearn=no

2004-11-01 Thread Matt Kettler
At 07:36 AM 11/1/2004 -0500, Dan Barker wrote: 1) When I get a spam with autolearn=no in the headers, that means it's already been learned. Not entirely true... It could mean it was already learned, but autolearn=no could also mean the score wasn't high enough. in 2.6x it could also mean t

SPF

2004-11-01 Thread Sauer, Peter
hi has anybody a working config for spamassassin whit spf...i got spf aktive (plugin in init.pre) but i haven't seen any mails spamassassin does mark whit spf-rules...i am using spamassassin through amvisd-new...

trusted_networks and ALL_TRUSTED

2004-11-01 Thread Sean Doherty
Hi, I'm looking for some clarification on trusted_networks, the ALL_TRUSTED rule, and in particular how trusted_networks are inferred if not specified in local.cf. Since upgrading to 3.0.1 I have seen an increase in false negatives, which would have otherwise been caught if not for the ALL_TRU

sa-learn after autolearn=no

2004-11-01 Thread Dan Barker
Group, please comment on or correct these two statements. 1) When I get a spam with autolearn=no in the headers, that means it's already been learned. 2) There is no need to sa-learn --spam that message, it's already learned but simply didn't meet the threshold. Dan

Re: FW: Lint fails on latest bogus0virus-warnings.cf

2004-11-01 Thread Raymond Dijkxhoorn
Hi! Lint output: Relative score without previous setting in SpamAssassin configuration, skipping: score VIRUS_WARNING412 Unhelpful 'virus warning' (412) Just for clarification, after this update: Lint fails on 3.0.1 here Lint does not fail for 2.6.3 here. Noticed the same here. Bye, Raymond.

Re: FW: Lint fails on latest bogus0virus-warnings.cf

2004-11-01 Thread Mike Zanker
Alan Munday wrote: Just for clarification, after this update: Lint fails on 3.0.1 here Lint does not fail for 2.6.3 here. Yes, sorry - mine's 3.01 too. Mike.

FW: Lint fails on latest bogus0virus-warnings.cf

2004-11-01 Thread Alan Munday
> -Original Message- > From: Mike Zanker [mailto:[EMAIL PROTECTED] > Sent: Monday, November 01, 2004 6:43 AM > To: users@spamassassin.apache.org > Subject: Lint fails on latest bogus0virus-warnings.cf > > > From RulesDuJour last night: > > Lint output: Relative score without previous s

Re: less header information

2004-11-01 Thread Bill Landry
- Original Message - From: "Roel Bindels" <[EMAIL PROTECTED]> > I just want the X-spam-flag to be present in the header but not the report. > what am I doing wrong. > See my local.cf below > > greetings Roel Bindels > > rewrite_subject 0 > report_safe 0 > report_header 0 > use_terse_repo

Re: [SURBL-Discuss] Nice URIDNSBL functionality

2004-11-01 Thread Bill Landry
- Original Message - From: "Jeff Chan" <[EMAIL PROTECTED]> > >> > Folks, with some of the nice functionality that the SA devs built into > > the > >> > URIDNSBL plug-in (see > >> > > > http://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Plugin_URIDNSBL.html), > >> > you c

SB_NEW_BULK & SB_NSP_VOLUME_SPIKE

2004-11-01 Thread Bill Landry
I noticed that the devs included the above experimental SenderBase tests with SA 3.0.x, so I enabled them a few weeks ago and have found them to work quite nicely. The SB_NEW_BULK test has a much higher hit ratio, and provides more accurate results than the SB_NSP_VOLUME_SPIKE test does, but both

less header information

2004-11-01 Thread Roel Bindels
Dear Listers, I just want the X-spam-flag to be present in the header but not the report. what am I doing wrong. See my local.cf below greetings Roel Bindels rewrite_subject 0 report_safe 0 report_header 0 use_terse_report required_hits 5.0 use_bayes 1 auto_learn

Re: [SURBL-Discuss] Nice URIDNSBL functionality

2004-11-01 Thread Jeff Chan
On Sunday, October 31, 2004, 11:24:33 PM, Bill Landry wrote: > - Original Message - > From: "Alex Broens" <[EMAIL PROTECTED]> >> > Folks, with some of the nice functionality that the SA devs built into > the >> > URIDNSBL plug-in (see >> > > http://spamassassin.apache.org/full/3.0.x/dist/

Re: [SURBL-Discuss] Nice URIDNSBL functionality

2004-11-01 Thread Bill Landry
- Original Message - From: "Alex Broens" <[EMAIL PROTECTED]> > > Folks, with some of the nice functionality that the SA devs built into the > > URIDNSBL plug-in (see > > http://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Plugin_URIDNSBL.html), > > you can do cool things

Lint fails on latest bogus0virus-warnings.cf

2004-11-01 Thread Mike Zanker
From RulesDuJour last night: Lint output: Relative score without previous setting in SpamAssassin configuration, skipping: score VIRUS_WARNING412 Unhelpful 'virus warning' (412) Thanks, Mike.

Nice URIDNSBL functionality

2004-11-01 Thread Bill Landry
Folks, with some of the nice functionality that the SA devs built into the URIDNSBL plug-in (see http://spamassassin.apache.org/full/3.0.x/dist/doc/Mail_SpamAssassin_Plugin_URIDNSBL.html), you can do cool things like: = # URIDNSBL (queries URIs against standard DNSBLs) uridnsbl URIBL_AH_DNSB

Re: Bayes sometimes not used

2004-11-01 Thread Theo Van Dinter
On Sun, Oct 31, 2004 at 09:38:09PM -0200, Juliano Simões wrote: > I have noticed a strange behavior of SA, after upgrading from > version 2.64 to 3.0.1. Sometimes, the same message is scored > with bayes, sometimes not. Yes, Bayes can't always give an answer. You can run with -D and see what's go

Re: Load Average Problems

2004-11-01 Thread jdow
From: "Duncan Findlay" <[EMAIL PROTECTED]> > Sorry, Mandrake not Debian. Anyways, change options in > /etc/sysconfig/spamassassin, I think. Yeah, in theory that's the best way. But do copy the "SPAMDOPTIONS" line and then place IT into the /etc/sysconfig/spamassassin. I get naughty and cheat on t

Re: SOLVED Re: Load Average Problems

2004-11-01 Thread jdow
From: "John Fleming" <[EMAIL PROTECTED]> > > > What am I missing? - John > > > > OK, from the "spamd --help" output: > > -m num, --max-children num Allow maximum num children > > > > So that option is positively "a spamd thing." So how does one get that > > option into spamd? On the M

Bayes sometimes not used

2004-11-01 Thread Juliano Simões
Hi Guys, I have noticed a strange behavior of SA, after upgrading from version 2.64 to 3.0.1. Sometimes, the same message is scored with bayes, sometimes not. See below sample outputs from subsequent executions of "/usr/bin/spamassassin -tLD < spam_msg_file": ***