rules_du_jour question

2006-10-28 Thread Shaun T. Erickson
I've just downloaded this and set it up. I see there are MANY rulesets I can choose from, but I have no idea if they are all 'safe' (not even sure what I mean by that). Is there a subset of all these rulesets, that "everybody" uses, or does everyone use all of them? How do you decide which to use

Re: High CPU running SA in a VMware VM

2006-10-28 Thread Sammy Anderson
Rick Macdougall <[EMAIL PROTECTED]> wrote: Sammy Anderson wrote:> And there is one of these for each user, this is just for one user. Sounds like we may have to abandon Bayes or possibly use mysql. Not sure we are ready to invest in setting that all up...> Bayes in MySQL is a snap to setup and

Re: Confused about getting plugins to work.

2006-10-28 Thread Shaun T. Erickson
On 10/28/06, Shaun T. Erickson <[EMAIL PROTECTED]> wrote: The current problem is that Pyzor times out trying to contact it's remote server: Because this server (66.250.40.33:24441) - which I got from multiple tries at running 'pyzor discover' - isn't responding. This one (82.94.255.100:24441)

Re: Confused about getting plugins to work.

2006-10-28 Thread Shaun T. Erickson
On 10/28/06, Clifton Royston <[EMAIL PROTECTED]> wrote: Did you run the "discover" mode on Razor yet? You need to manually run that (as the user and with the home directory Razor will be running as, in your case amavis) for it to latch onto some servers to use. Yes, and Razor2 is working fi

Re: Confused about getting plugins to work.

2006-10-28 Thread Clifton Royston
On Sat, Oct 28, 2006 at 05:42:09PM -0400, Shaun T. Erickson wrote: > On 10/28/06, Theo Van Dinter <[EMAIL PROTECTED]> wrote: > > > >If you want to see Razor debug output, run a > >message through in the way I mentioned before, ala: > > > >spamassassin -D razor2 < message_file > /dev/null > > > >wil

Re: Confused about getting plugins to work.

2006-10-28 Thread Shaun T. Erickson
On 10/28/06, Theo Van Dinter <[EMAIL PROTECTED]> wrote: If you want to see Razor debug output, run a message through in the way I mentioned before, ala: spamassassin -D razor2 < message_file > /dev/null will show you only razor2 debug output (most of which will look like output from "razor-che

Re: Confused about getting plugins to work.

2006-10-28 Thread Theo Van Dinter
On Sat, Oct 28, 2006 at 04:15:56PM -0400, Shaun T. Erickson wrote: > loaded in init.pre. When I run the lint command, I see that it says: > [22571] dbg: razor2: local tests only, skipping Razor Yeah, that's new in 3.1.6. --lint no longer runs network checks. > I tried setting "local_tests_only 0

Re: Confused about getting plugins to work.

2006-10-28 Thread Shaun T. Erickson
On 10/28/06, Theo Van Dinter <[EMAIL PROTECTED]> wrote: On Sat, Oct 28, 2006 at 03:12:16PM -0400, Shaun T. Erickson wrote: > Yes, I've gone to the SA site, and read what I can find on these three > plugins, but it's still not clear to me how to enable them and see > that they are actually being u

Re: Confused about getting plugins to work.

2006-10-28 Thread Theo Van Dinter
On Sat, Oct 28, 2006 at 03:12:16PM -0400, Shaun T. Erickson wrote: > Yes, I've gone to the SA site, and read what I can find on these three > plugins, but it's still not clear to me how to enable them and see > that they are actually being used. The short version is to uncomment the loadplugin lin

Confused about getting plugins to work.

2006-10-28 Thread Shaun T. Erickson
I am setting up a new server to replace an old one. The old server ran a version of spamassassin prior to it's use of plugins. I've got my new server up and running (CentOS 4.4) nicely, with amavisd-new (v2.4.3) calling spamassassin (v3.1.7), and SA's default settings are tagging most spam as suc

Re: Webmin Ate My Rules

2006-10-28 Thread David Baron
On Saturday 28 October 2006 19:46, David Baron wrote: > Regular expression body rules that I made in webmin-spamassassin were duely > devoured after I edited one of the scores. All the scorings are there but > none of the rules. Any way to get the back or must I start from scratch (or > simply trus

ID or UID?

2006-10-28 Thread Tuc at T-B-O-H.NET
Hi, I'm running 3.1.5 on FreeBSD from ports. I have a unique situation and I wondered if I was doing something to confuse SA. My server has a series of users : server:*:1004:1004:TBOH Listproc:/usr/local/etc/server:/usr/local/bin/zsh stcomp:*:1004:1004:TBOH Listproc:/usr/local/e

Webmin Ate My Rules

2006-10-28 Thread David Baron
Regular expression body rules that I made in webmin-spamassassin were duely devoured after I edited one of the scores. All the scorings are there but none of the rules. Any way to get the back or must I start from scratch (or simply trust in Bayes)?

Re: Feature Request: envelope scanning

2006-10-28 Thread Theo Van Dinter
On Sat, Oct 28, 2006 at 11:41:48AM -0400, Joe Flowers wrote: > I'm not sure what you are talking about Theo. Sorry. I was talking about SMTP. > Below is an envelope example from a Spam email, at least an envelope > from my mail system. > --- > D1161764311 > [EMAIL PROTECT

R: R: finish() method on the status objects

2006-10-28 Thread Giampaolo Tomassoni
> Thanks Giampaolo! Does this mean that "whatever character you like" > cannot show up anywhere else in the string (except the very end)? Right. 'q' is meant exactly to use, in example, " and ' characters in strings with no escaping mechanism. There are few exceptions to this trick (i.e.: you

Re: R: finish() method on the status objects

2006-10-28 Thread Joe Flowers
Giampaolo Tomassoni wrote: You can use any quoting mechanism you like: ...("This is a programmer's ...") ...([EMAIL PROTECTED] is a programmer's ...@) etc. Sorry for the Perl question. Is the "q" in "([EMAIL PROTECTED] is a programmer's ...@)" a typo? No, it isn't. It means "QUOTE

R: finish() method on the status objects

2006-10-28 Thread Giampaolo Tomassoni
> > You can use any quoting mechanism you like: > > > > ...("This is a programmer's ...") > > ...([EMAIL PROTECTED] is a programmer's ...@) > > etc. > > Sorry for the Perl question. > Is the "q" in "([EMAIL PROTECTED] is a programmer's ...@)" a typo? No, it isn't. It means "QUOTE" and allows you

Can spamd be made to be multi-threaded all the way through?

2006-10-28 Thread Joe Flowers
Even if spamd is process forking and not spawning worker threads, is it possible with the latest production versions of Perl and SA to make it muli-threaded all the way through? When I say "all the way through", I'm wanting to know if, even in a threaded implementation, would mutex/semaphore/e

Re: finish() method on the status objects

2006-10-28 Thread Joe Flowers
Theo Van Dinter wrote: On Wed, Oct 25, 2006 at 12:57:52PM -0400, Joe Flowers wrote: I'd prefer to use M::SA->check_message_text(), but if I do a M::SA->check_message_text('This is a programmer's nightmare.'), then M::SA->check_message_text() will choke because of the (') in the middle of th

Re: finish() method on the status objects

2006-10-28 Thread Joe Flowers
FYI, *My tests show that this is causing a memory leak. Joe my $spamtest = Mail::SpamAssassin->new(); my $status = $spamtest->check($spamtest->parse($message)); if ($status->

Re: Feature Request: envelope scanning

2006-10-28 Thread Joe Flowers
I'm not sure what you are talking about Theo. Sorry. Below is an envelope example from a Spam email, at least an envelope from my mail system. I assume the "[EMAIL PROTECTED]" is useful to SA. Is there a better form I can put this in before pre-pending to the message body? Also, currently, the

more spam and question about dcc

2006-10-28 Thread Valery V.Bobrov
Hi! I use SA version 3.1.7. There are many many spam messages. I notice that field "dccresult" is empty. How can I check if dcc works propely? Thank you Valeray X-Spam-Status: No, score=2.9 required=4.0 tests=BAYES_50,FROM_LOCAL_NOVOWEL, UPPERCASE_25_50 autolearn=no version=3.1.7 date=Sat, 28

Re: R: R: AWL and whitelists

2006-10-28 Thread Roman Sozinov
Giampaolo Tomassoni wrote: > >> >> In awl row: email|62.234|1|1.109 (e-mail|ip|count|score) >> >> Something strange: count is 1 still and score has become 1.109 :( >> > >> > What happened to the email|none row? Is it still there? >> > >> Yes it still there: >> email|62.234|1|1.109 (e-mail|ip

Re: Per Domain Whitelisting

2006-10-28 Thread Roman Sozinov
Daryl C. W. O wrote: > > Of course it does. It supports per user preferences, so if you pass > nothing but domain names it thus supports per domain preferences. > What about dynamic whitelists (i suppose don't use .cf files)? Is it possible to add/delete some value to whitelist/black in wor

R: R: AWL and whitelists

2006-10-28 Thread Giampaolo Tomassoni
> >> In awl row: email|62.234|1|1.109 (e-mail|ip|count|score) > >> Something strange: count is 1 still and score has become 1.109 :( > > > > What happened to the email|none row? Is it still there? > > > Yes it still there: > email|62.234|1|1.109 (e-mail|ip|count|score) You mean you don't have a

R: Further on DNS_FROM_RFC_*

2006-10-28 Thread Giampaolo Tomassoni
> I just received some email from Spamcop, and thought to check the > spamassassin scores on it: > > No, hits=-0.8 required=5.0 tests=BAYES_00=-2.599, > DK_POLICY_SIGNSOME=0.001,DNS_FROM_RFC_ABUSE=0.2, > FORGED_MUA_MOZILLA=1.593,SPF_PASS=-0.001 autolearn=no version=3.1.7 > > I was qu

RE: Further on FORGED_MUA_MOSILLA, was: Further on DNS_FROM_RFC_*

2006-10-28 Thread Michael Scheidell
> -Original Message- > From: Kurt Fitzner [mailto:[EMAIL PROTECTED] > Sent: Saturday, October 28, 2006 5:57 AM > To: users@spamassassin.apache.org > Subject: Further on DNS_FROM_RFC_* > > > I just received some email from Spamcop, and thought to check > the spamassassin scores on it:

Further on DNS_FROM_RFC_*

2006-10-28 Thread Kurt Fitzner
I just received some email from Spamcop, and thought to check the spamassassin scores on it: No, hits=-0.8 required=5.0 tests=BAYES_00=-2.599, DK_POLICY_SIGNSOME=0.001,DNS_FROM_RFC_ABUSE=0.2, FORGED_MUA_MOZILLA=1.593,SPF_PASS=-0.001 autolearn=no version=3.1.7 I was quite amused t