Re: User Blacklist Spamassassin Behavior

2005-06-27 Thread Paul R. Ganci
Alan Premselaar wrote: perhaps all I am really asking is if there is a way to allow spamassassin to just stop processing a message that is in a blacklist to save the cycles? I am not asking for spamassassin to become an MTA/MDA. In that case it would be ultimately more efficient to add a rej

RE: Very few URIBL hits today. :(

2005-06-27 Thread Shachar Snapiri
Take a look at http://www.uribl.com/, use the "Usage" link on the left :o) -Original Message- From: Jonathan Nichols [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 28, 2005 7:46 AM To: Dallas L. Engelken Cc: SpamAssassin Subject: Re: Very few URIBL hits today. :( > Just curious.. Are yo

Re: User Blacklist Spamassassin Behavior

2005-06-27 Thread Alan Premselaar
Paul R. Ganci wrote: Alan Premselaar wrote: Philosophically, it makes more sense for SpamAssassin to focus on identifying SPAM, and let another application (MTA, procmail, etc) focus on what it was primarily designed for: processing (delivery,rejection,etc) of said email. It's certainly no m

Re: User Blacklist Spamassassin Behavior

2005-06-27 Thread Paul R. Ganci
Alan Premselaar wrote: Philosophically, it makes more sense for SpamAssassin to focus on identifying SPAM, and let another application (MTA, procmail, etc) focus on what it was primarily designed for: processing (delivery,rejection,etc) of said email. It's certainly no more of a hassle to ad

Re: Very few URIBL hits today. :(

2005-06-27 Thread Jonathan Nichols
Just curious.. Are you using multi.uribl.com? d hrm. You know, I'm not. heh. Where's the info on how to do so? I'm not sure if I got subscribed to the mailing list or not..

Re: User Blacklist Spamassassin Behavior

2005-06-27 Thread Alan Premselaar
Paul R. Ganci wrote: This is somewhat a philosophical question, but I will ask it anyways. Recent discussions have occurred on this list regarding what Spamassassin should do with Spam. The recent consensus seems to be that it is only Spamassassin's job to tag Spam and that some other program

RE: Very few URIBL hits today. :(

2005-06-27 Thread Dallas L. Engelken
> > > URIBL tests are still hitting good here. > > > > TOP SPAM RULES FIRED > > FROM 2005-06-27 03:47:11 TO 2005-06-27 21:28:42 > > Hrm. Interesting. I turned the debug level up a bit and saw this: > > Jun 27 20:59:18 mailgate amavis[11145]: (11145-01) SPAM-TAG, > <[EMAIL PROTECTED]> -> > <[E

Re: Very few URIBL hits today. :(

2005-06-27 Thread Jonathan Nichols
URIBL tests are still hitting good here. TOP SPAM RULES FIRED FROM 2005-06-27 03:47:11 TO 2005-06-27 21:28:42 Hrm. Interesting. I turned the debug level up a bit and saw this: Jun 27 20:59:18 mailgate amavis[11145]: (11145-01) SPAM-TAG, <[EMAIL PROTECTED]> -> <[EMAIL PROTECTED]>,<[EMAIL PR

Maybe OT: SA/amavisd-new not killing

2005-06-27 Thread Jonathan Nichols
The kill level is set to 12, this spam had 21.301 points, and made it through. Hrm. No matter what I set the kill level to (using the squirrelmail amavissql plugin) it doesn't kill it. I'm not exactly sure what to check.. Jun 27 20:35:11 mailgate amavis[14254]: (14254-02) Passed SPAM, <[EMAI

User Blacklist Spamassassin Behavior

2005-06-27 Thread Paul R. Ganci
This is somewhat a philosophical question, but I will ask it anyways. Recent discussions have occurred on this list regarding what Spamassassin should do with Spam. The recent consensus seems to be that it is only Spamassassin's job to tag Spam and that some other program should decide what to

RE: Very few URIBL hits today. :(

2005-06-27 Thread Dallas L. Engelken
> > Man, I've been getting a *lot* of spam hitting the Inbox > today. Only been able to find 1 spam today with any URIBL > hits at all, but almost all of the have had RAZOR2_CHECK points added. > URIBL tests are still hitting good here. TOP SPAM RULES FIRED FROM 2005-06-27 03:47:11 TO 2005-06

Re: How 2 know if *.cf files are being loaded and used

2005-06-27 Thread List Mail User
Not using any URI tests? % nslookup -type=any gravesides.com.multi.surbl.org b.surbl.org Server: b.surbl.org Address:207.166.203.146#53 Name: gravesides.com.multi.surbl.org Address: 127.0.0.118 gravesides.com.multi.surbl.org text = "Blocked, gravesides.com on lists [sc

Very few URIBL hits today. :(

2005-06-27 Thread Jonathan Nichols
Man, I've been getting a *lot* of spam hitting the Inbox today. Only been able to find 1 spam today with any URIBL hits at all, but almost all of the have had RAZOR2_CHECK points added. ALso noticing a LOT of spam with Squirrelmail headers.. ie: User-Agent: SquirrelMail/1.4.3a X-Mailer: Squirre

Re: Rule for "Message is Local Only"

2005-06-27 Thread Matt Kettler
John Rudd wrote: > > Forgive me if the newer versions of SA have this built in (I know > there's something about defining your local IP addresses), but I had a > user ask me today if I could set up our system to flag messages which > have only been circulated around our campus. If your trusted_ne

Rule for "Message is Local Only"

2005-06-27 Thread John Rudd
Forgive me if the newer versions of SA have this built in (I know there's something about defining your local IP addresses), but I had a user ask me today if I could set up our system to flag messages which have only been circulated around our campus. It seems easy enough for to me hand-craf

Re: How 2 knoow if *.cf files are being loaded and used

2005-06-27 Thread Matt Kettler
Helio Nunes wrote: > Thanks > I still have another point. Our mailboxes are still receiving mail with > those > forbiden drugs as per 20_drugs.cf, lets say c..i..a..l..i..s goes through. > Thanks again > Helio > Well, based on your description alone it should arrive. Just hitting one rule alo

Re: How 2 knoow if *.cf files are being loaded and used

2005-06-27 Thread Helio Nunes
Thanks I still have another point. Our mailboxes are still receiving mail with those forbiden drugs as per 20_drugs.cf, lets say c..i..a..l..i..s goes through. Thanks again Helio On Monday 27 June 2005 18:17, Matt Kettler wrote: > Helio Nunes wrote: > > I have qmail toaster (Bill Supp's last

RE: pid error

2005-06-27 Thread Kern, Tom
yeah it exists. sorry for the post. i just thought i'd get more eyes to look at the error because the amavis list can't figure it out. thanks -Original Message- From: MC [mailto:[EMAIL PROTECTED] Sent: Mon 6/27/2005 6:18 PM To: Cc: Users (E-mail

Re: pid error

2005-06-27 Thread MC
Kern, Tom wrote: I'm running Amavis-new-2.3.1 with Postfix(not chrooted) on redhat ES 3 When I try to reload or stop amavis, I get- No PID file /var/amavis/amavisd.pid, can't reload the process Amavisd debug produces this- Jun 27 13:49:18 mta1.charmer.com /usr/local/sbin/amavisd[7870]: startin

Re: How 2 knoow if *.cf files are being loaded and used

2005-06-27 Thread Matt Kettler
Helio Nunes wrote: > I have qmail toaster (Bill Supp's last version)with clamav and simscan and OS > is Suse 9.2. > Default locations are: /etc/mail/spamassassin for .spamassassion, init.pre, > local.cf > /usr/share/spamassassin for the additional (or I think are additional.. ) > > How can I s

How 2 knoow if *.cf files are being loaded and used

2005-06-27 Thread Helio Nunes
I have qmail toaster (Bill Supp's last version)with clamav and simscan and OS is Suse 9.2. Default locations are: /etc/mail/spamassassin for .spamassassion, init.pre, local.cf /usr/share/spamassassin for the additional (or I think are additional.. ) How can I say spamassassin is really using s

[SOLVED] Re: how 2 load multiple ruleset locations during --lint testing?

2005-06-27 Thread OpenMacNews
% spamassassin --lint \ --lint \ --siteconfigpath=/var/Data/SpamAssassin \ --configpath=/var/Settings/SpamAssassin \ --config-file=local.cf \ --nocreate-prefs dumb me ... --- --config-file=local.cf \ +++ --prefs-file=local.cf \ sorry, richard

RES: {Spam?} Re: Block messages with "null" sender

2005-06-27 Thread Joao Gazzoni
I am using Sendmail 8.13.1. Joao. -Mensagem original- De: Craig Jackson [mailto:[EMAIL PROTECTED] Enviada em: segunda-feira, 27 de junho de 2005 16:20 Para: Joao Gazzoni Cc: users@spamassassin.apache.org Assunto: {Spam?} Re: Block messages with "null" sender Joao Gazzoni wrote: > Hello

Re: spamd/spamc does not add headers

2005-06-27 Thread Matt Kettler
Dr. Aharon Friedman wrote: > Additional data: > > > > I looked in the maillog after running spamc and found the following line: > > > > Jun 27 15:34:18 mail2 spamd[49795]: unauthorized connection from > mail2.friedman.net [10.40.45.30] at port 64636 > > > > How do I resolve this? That

RE: spamd/spamc does not add headers

2005-06-27 Thread Matthew.van.Eerde
http://spamassassin.apache.org/full/3.0.x/dist/doc/spamd.html look at documentation for --allowed-ips By default only localhost is allowed to connect You probably want at least to add     --allowed-ips=10.40.45.30 and possibly even as much as     --allowed-ips=10.*.*.* to your spamd flags

Re: spamd/spamc does not add headers

2005-06-27 Thread Dr. Aharon Friedman
Additional data:   I looked in the maillog after running spamc and found the following line:   Jun 27 15:34:18 mail2 spamd[49795]: unauthorized connection from mail2.friedman.net [10.40.45.30] at port 64636   How do I resolve this?   Aharon   -Original Message- From: Dr. A

Re: Block messages with "null" sender

2005-06-27 Thread Matt Kettler
Joao Gazzoni wrote: > Hello, > > Does anyone know how to block messages that come with a blank > sender address in the "from" field, like "from=<>" ? > > We are using SA with MailScanner. > > Thanks for any suggestion. > I'd suggest reading some of the RFC's referenced at: http://www.rfc-igno

how 2 load multiple ruleset locations during --lint testing?

2005-06-27 Thread OpenMacNews
hi all, i've built SA (SpamAssassin (2005-06-22) 3.1.0-pre2-r192980) on OSX 10.4.1 with: ... PREFIX=/usr/local/spamassassin \ DATADIR=/var/Data/SpamAssassin \ CONFDIR=/var/Settings/SpamAssassin ... so that: the binaries ... % ls /usr/local/spamassassin/bin

Re: Block messages with "null" sender

2005-06-27 Thread jplesset
Yeah, the reason not to block such is that DSN (Delivery Status Notifications) are supposed to come in this way. If you block such, your users will not be happy ... . jay Craig Jackson wrote: Joao Gazzoni wrote: Hello, Does anyone know how to block messages that come with a blank sender

Re: Block messages with "null" sender

2005-06-27 Thread Craig Jackson
Joao Gazzoni wrote: Hello, Does anyone know how to block messages that come with a blank sender address in the "from" field, like "from=<>" ? We are using SA with MailScanner. Thanks for any suggestion. That's funny. There was just recently a big flame war on the Exim list about this topic.

pid error

2005-06-27 Thread Kern, Tom
I'm running Amavis-new-2.3.1 with Postfix(not chrooted) on redhat ES 3 When I try to reload or stop amavis, I get- No PID file /var/amavis/amavisd.pid, can't reload the process Amavisd debug produces this- Jun 27 13:49:18 mta1.charmer.com /usr/local/sbin/amavisd[7870]: starting. /usr/local/sbi

Block messages with "null" sender

2005-06-27 Thread Joao Gazzoni
Hello, Does anyone know how to block messages that come with a blank sender address in the "from" field, like "from=<>" ? We are using SA with MailScanner. Thanks for any suggestion.

Re: RDJ from cron - is it safe?

2005-06-27 Thread Bob McClure Jr
On Mon, Jun 27, 2005 at 08:48:25AM -0400, Ben Hanson wrote: > QUOTE___ > /etc/init.d/spamassassin restart > Shutting down spamd: [ OK ] > Starting spamd: Could not create INET socket on 127.0.0.1:783: Address > already in use (IO::Socket::INET

Re: spamd/spamc does not add headers

2005-06-27 Thread JamesDR
Dr. Aharon Friedman wrote: Command: spamd –c –d –r /var/run/spamd/spamd.pid Version: 3.0.4 Platform: FreeBSD 5.4 When I run the command: Cat spam.msg | spamassassin | grep –I spam I get: with SpamAssassin (version 3.0.4); Subject: *SPAM* =?utf-8?B?T2ZmaWNlI

Re: Problem with deleting messages.

2005-06-27 Thread Martyn Drake
Jeff wrote: I have setup spamassassin to delete messages if they are spam and it seems to work. However, I am still getting some that are being marked. How do I get them all to be deleted? What mechanism are you using to do this - is it tied in within your MTA or are you doing via Procmail

Re: Problem with deleting messages.

2005-06-27 Thread Jim Knuth
Hallo und guten Tag Jeff, Heute (am 27.06.2005 - 16:41 Uhr) schriebst Du: > I have setup spamassassin to delete messages if they are > spam and it seems to work. However, I am still getting some > that are being marked. How do I get them all to be deleted? SA cannot self delete SPAM. This

Re: Problem with deleting messages.

2005-06-27 Thread Duncan Hill
On Monday 27 June 2005 15:41, Jeff typed: > I have setup spamassassin to delete messages if they are spam and it seems > to work. However, I am still getting some that are being marked. How do I > get them all to be deleted? SA doesn't delete mails, so you'd have to check the application that do

Problem with deleting messages.

2005-06-27 Thread Jeff
I have setup spamassassin to delete messages if they are spam and it seems to work.  However, I am still getting some that are being marked.  How do I get them all to be deleted?

Re: RDJ from cron - is it safe?

2005-06-27 Thread Ben Hanson
QUOTE___ /etc/init.d/spamassassin restart Shutting down spamd: [ OK ] Starting spamd: Could not create INET socket on 127.0.0.1:783: Address already in use (IO::Socket::INET: Address already in use) [FAILED] __ I got ex

RE: RDJ from cron - is it safe?

2005-06-27 Thread John Horne
On Fri, 2005-06-24 at 15:53 -0400, Chris Santerre wrote: > > I'm completely guessing out of the blue here, but is it a timing issue? Is > it trying to restart before the final child is able to quit? > Yes, sort of... Chris Thielen wrote: > > Maybe try changing your SA_RESTART to "killall -HUP spa

SpamAssassin bayes problem

2005-06-27 Thread Jesús Arnáiz
Hello. I use SA 3.0.3 on my FreeBSD box with qmail and simscan. I run SA like this: -- # /usr/local/bin/spamd -d -D -u nobody -- I see the next problem with bayes: -- >> Jun 27 10:01:07 XX spamd[42070]: debug: auto-learning failed: lock: >> 42070 cannot create tmp lockfile >> /var/spool/s