Re: These are getting through SA...

2007-06-08 Thread Luis Hernán Otegui
What I copied and pasted into my message was the original spammy message (the source of it) as IMP showed it. The posterior ALL_TRUSTED occured because it has already been scanned and tagged by my servers. But the main difference between the live run and the ones I did with SA by itself (both as r

Re: These are getting through SA...

2007-06-08 Thread guenther
On Fri, 2007-06-08 at 18:46 -0300, Luis Hernán Otegui wrote: > OK, i?ve been googlin' around, and it seems like an issue between > Amavis (or MailScanner, for waht I've found) and some unsupported > versions of Net::DNS, because when I run the message through SA by > itself, this comes out: Whatev

Re: These are getting through SA...

2007-06-08 Thread Bill Landry
Daryl C. W. O'Shea wrote the following on 6/8/2007 2:41 PM -0800: If you've got the current update from updates.spamassassin.org you've got a working set of rules for URIBL_BLACK and URIBL_GREY. It turns out that they didn't hit for Raymond either, so you won't see them in this case. Daryl

Re: These are getting through SA...

2007-06-08 Thread Luis Hernán Otegui
OK, i?ve been googlin' around, and it seems like an issue between Amavis (or MailScanner, for waht I've found) and some unsupported versions of Net::DNS, because when I run the message through SA by itself, this comes out: Content analysis details: (9.7 points, 5.0 required) pts rule name

Re: These are getting through SA...

2007-06-08 Thread Daryl C. W. O'Shea
If you've got the current update from updates.spamassassin.org you've got a working set of rules for URIBL_BLACK and URIBL_GREY. It turns out that they didn't hit for Raymond either, so you won't see them in this case. Daryl Luis Hernán Otegui wrote: Well, right now I'm running these comman

Re: These are getting through SA...

2007-06-08 Thread ian douglas
> X-Spam-Status: No, score=3.964 tagged_above=-100 required=5 > tests=[BAYES_99=3.5, HTML_30_40=0.463, HTML_MESSAGE=0.001] To me, it looks like enough tokens were seen to flag it as BAYES_99, but that the host and IP it came from didn't trigger any RBL hits, which left your point score well

Re: These are getting through SA...

2007-06-08 Thread Luis Hernán Otegui
Well, right now I'm running these commands to get updates: sa-update --gpgkey --channel saupdates.openprotect.com sa-update --gpgkey --channel updates.spamassassin.org sa-update doesn't download URIBL_BLACK and URIBL_GREY What am I doing wrong? Luis 2007/6/8, Daryl C. W. O'Shea <[EMAIL PR

Re: These are getting through SA...

2007-06-08 Thread Raymond Dijkxhoorn
Hi! Hi, Raymond, I don't have any URIBL rules firing up (SA 3.2.0 from source here, most of the other relevant info is in the header of the mail I sent before to test). Where did you get them? X-Prolocation-MailScanner-SpamCheck: spam, SpamAssassin (not cached, score=14.999, required 5,

Re: These are getting through SA...

2007-06-08 Thread Daryl C. W. O'Shea
Luis Hernán Otegui wrote: Hi, Raymond, I don't have any URIBL rules firing up (SA 3.2.0 from source here, most of the other relevant info is in the header of the mail I sent before to test). Where did you get them? Run sa-update to get URIBL_BLACK and URIBL_GREY. Daryl

Re: These are getting through SA...

2007-06-08 Thread Luis Hernán Otegui
Hi, Raymond, I don't have any URIBL rules firing up (SA 3.2.0 from source here, most of the other relevant info is in the header of the mail I sent before to test). Where did you get them? Thanks, Luis 2007/6/8, Raymond Dijkxhoorn <[EMAIL PROTECTED]>: Hi! > They aren't scoring very much here

Re: These are getting through SA...

2007-06-08 Thread arni
Luis Hernán Otegui schrieb: Hi, could somebody run this mail trough SA and give me the scores? They aren't scoring very much here... Hi, your mailing probably broke half of the email so these scores are only an estimate - if you want me to try again attach the mail as a raw text (or .eml as ma

Re: These are getting through SA...

2007-06-08 Thread Raymond Dijkxhoorn
Hi! They aren't scoring very much here... Return-Path: <[EMAIL PROTECTED]> X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED]@domain.com Received: from localhost (localhost [127.0.0.1]) by nahuel.biol.unlp.edu.ar (Postfix) with ESMTP id 660BE7B1FE; Fri, 8 Jun 2007

RE: Need webfrontend for quarantine based on spamassassin

2007-06-08 Thread admin
What about MailZu as an add-on to Amavisd-New or Maia Mailguard. We use MM for several virtual domains and about 100 users and works very well. > I am trying to do something very similar. I have chosen to incorporate > MailScanner and MailWatch with my SpamAssassin solution to offer users a > l

RE: sa-compile and SARE

2007-06-08 Thread Rosenbaum, Larry M.
> From: Doc Schneider [mailto:[EMAIL PROTECTED] > > Rosenbaum, Larry M. wrote: > > > > Does this fix the performance problems I was having, or does it just > fix > > the UTF errors showing in the logs with Perl < 5.8.8 ? > > You might try it and see if it helps with the performance. Since it > do

RE: Need webfrontend for quarantine based on spamassassin

2007-06-08 Thread Jason Holbrook
I am trying to do something very similar. I have chosen to incorporate MailScanner and MailWatch with my SpamAssassin solution to offer users a login interface in order to manage their own spam. I have yet to successfully complete the setup, we are actually doing as I write this. I use Ubuntu (Fie

Need webfrontend for quarantine based on spamassassin

2007-06-08 Thread Patrick von der Hagen
Hi all, I might soon be able to replace a proprietary antispam-appliance with a normal spamassassin-setup. However, the current solution quarantines messages considered suspicious and offers a webinterface for the endusers to access the special quarantine-store. While I don't like such a setup at

Re: 404 while getting RDJ updates?

2007-06-08 Thread Gene Heskett
On Friday 08 June 2007, jdow wrote: >From: "Jonathan Nichols" <[EMAIL PROTECTED]> > Sic the RIAA lawyers on them. {^_^} >>> >>> What? And give them a chance to show they may have some redeeming >>> quality? Not to those sharks, Joanne, ever. >> >> I think that they'd encounter the

Re: Botnet Plugin

2007-06-08 Thread John Rudd
Claude Frantz wrote: However, one thing to recognize is that botnet does not parse the Received headers themselves. Spam Assassin does, and puts them into psuedoheaders. Those pseudoheaders are what botnet processes. What exactly contain the pseudoheaders ? You could look at the code or

Re: 404 while getting RDJ updates?

2007-06-08 Thread jdow
From: "Jonathan Nichols" <[EMAIL PROTECTED]> Sic the RIAA lawyers on them. {^_^} What? And give them a chance to show they may have some redeeming quality? Not to those sharks, Joanne, ever. I think that they'd encounter the spammers and a really bizarre "good or evil" loop would for

Re: Botnet Plugin

2007-06-08 Thread arni
Daniel J McDonald schrieb: On Fri, 2007-06-08 at 14:53 +0200, arni wrote: Can you tell me what you thin i'm doing wrong? [EMAIL PROTECTED] Desktop]$ host 87.118.96.151 151.96.118.87.in-addr.arpa domain name pointer ns.rds27912.i4e-server.de. [EMAIL PROTECTED] Desktop]$ host ns.rds27912

Re: Botnet Plugin

2007-06-08 Thread Jim Knuth
Heute (08.06.2007/14:34 Uhr) schrieb arni, > Where do i find this botnet plugin? > arni http://people.ucsc.edu/~jrudd/spamassassin/ -- Viele Gruesse, Kind regards, Jim Knuth [EMAIL PROTECTED] ICQ #277289867 -- Zufalls-Zitat -- Schwerere als Luft? Flugmaschinen sind unmögli

Re: Botnet Plugin

2007-06-08 Thread arni
Claude Frantz schrieb: Hi. This is the qmail-send program at rds27912.i4e-server.de. I'm afraid I wasn't able to deliver your message to the following addresses. This is a permanent error; I've given up. Sorry it didn't work out. <[EMAIL PROTECTED]>: 137.193.10.37 does not like recipient. Remote

Re: Botnet Plugin

2007-06-08 Thread arni
Where do i find this botnet plugin? arni

Re: Spamassassin is very slow...

2007-06-08 Thread Matt Kettler
Devilish Entity wrote: > Well, before all, here is my config : > > nowhere:~# linuxinfo > Linux nowhere 2.6.18-4-k7 #1 SMP Wed May 9 23:42:01 UTC 2007 > One AMD Unknown 1300MHz processor, 2601.92 total bogomips, 95M RAM > System library 2.3.6 > OS : Debian Etch > > > I use qmail + jms patch (lastes

Re: Spamassassin is very slow...

2007-06-08 Thread Raymond Dijkxhoorn
Hi! Get more RAM. :)Seriously, 95M is not really enough for anything these days, let alone resource intensive apps such as SA. Well i assume that it is really few but it never was as slow... Plus it's only about a little server i get at max 20 mails per day... So... before it tooks about

Re: sa-compile error

2007-06-08 Thread diptanjan
diptanjan wrote: > Hi Friends, > > I am getting an error when ever I am usinf sa-compile. can you please > checkout and tell me the reason behind it? > > # sa-compile > [4846] info: generic: base extraction starting. this can take a while... > [4846] info: generic: extracting from rules of type

Re: Spamassassin is very slow...

2007-06-08 Thread Sven Schuster
On Fri, Jun 08, 2007 at 05:58:27AM -0500, Dallas Engelken told us: > >do you have network tests enabled, especially URIBL?? If so it might > >be due to the recent DDOS on uribl.com, which causes the scans to > >take longer due to DNS timeout?? > > There should be no dns timeouts for URIBL currentl

Re: sa-compile error

2007-06-08 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 diptanjan wrote: > Hi Friends, > > I am getting an error when ever I am usinf sa-compile. can you please > checkout and tell me the reason behind it? > > # sa-compile > [4846] info: generic: base extraction starting. this can take a while... > [4846]

sa-compile error

2007-06-08 Thread diptanjan
Hi Friends, I am getting an error when ever I am usinf sa-compile. can you please checkout and tell me the reason behind it? # sa-compile [4846] info: generic: base extraction starting. this can take a while... [4846] info: generic: extracting from rules of type body_0 100% [

Re: Where does plugins disappear in 3.1.8?

2007-06-08 Thread Loren Wilton
As u can see lots of plugins are absent. Bayes.pm for example. Can somebody explain this? Sure. Lots of those things like Bayes weren't plugins before 3.2.0. Others might have been plugins supplied by 3rd parties and not at that point accepred into the main development stream. Others are si

Re: Spamassassin is very slow...

2007-06-08 Thread Dallas Engelken
Sven Schuster wrote: Hi, On Fri, Jun 08, 2007 at 12:26:38PM +0200, Devilish Entity told us: On 6/8/07, Theo Van Dinter <[EMAIL PROTECTED]> wrote: On Thu, Jun 07, 2007 at 03:15:35PM -0700, geist_ wrote: One AMD Unknown 1300MHz processor, 2601.92 total bogomips, 95M RAM

Re: Spamassassin is very slow...

2007-06-08 Thread Sven Schuster
Hi, On Fri, Jun 08, 2007 at 12:26:38PM +0200, Devilish Entity told us: > On 6/8/07, Theo Van Dinter <[EMAIL PROTECTED]> wrote: > >On Thu, Jun 07, 2007 at 03:15:35PM -0700, geist_ wrote: > >> One AMD Unknown 1300MHz processor, 2601.92 total bogomips, 95M RAM > >[...] > >> Any help should be useful

Re: Spamassassin is very slow...

2007-06-08 Thread Devilish Entity
On 6/8/07, Theo Van Dinter <[EMAIL PROTECTED]> wrote: On Thu, Jun 07, 2007 at 03:15:35PM -0700, geist_ wrote: > One AMD Unknown 1300MHz processor, 2601.92 total bogomips, 95M RAM [...] > Any help should be usefull... Get more RAM. :)Seriously, 95M is not really enough for anything these days

Where does plugins disappear in 3.1.8?

2007-06-08 Thread Andreev Nikita
Hi. There is an interesting difference between 3.1.8 and 3.2.0 releases. Here is the ./Mail-SpamAssassin-3.2.0/lib/Mail/SpamAssassin/Plugin directory of 3.2.0 ASN.pm AWL.pm AccessDB.pm AntiVirus.pm AutoLearnThreshold.pm Bayes.pm BodyEval.pm BodyRuleBaseExtractor.pm Check.pm DCC.pm DKIM.pm DNSEv