Re: sa-update claims it's up to date

On 6/13/07, Theo Van Dinter <[EMAIL PROTECTED]> wrote: On Wed, Jun 13, 2007 at 01:44:43PM +1000, Hans Holt wrote: > I've been running sa-update daily ever since, sa-update claims that no > newer updates are available. The version sa-update downloaded the There haven't been 3.1 updates in a while

Re: Problems with Received: header checks and ALL_TRUSTED rule...

Anthony Kamau wrote: Thanks Daryl. I've done a little bit of reading on msa_netowrks and it appears I need to upgrade to SA 3.2.x to get this added benefit - correct? Yeah, I missed that you were using 3.1.7 in my first reply. If you can't upgrade I think that the 3.1 patch for msa_networks

RE: Problems with Received: header checks and ALL_TRUSTED rule...

Thanks Daryl. I've done a little bit of reading on msa_netowrks and it appears I need to upgrade to SA 3.2.x to get this added benefit - correct? Cheers, AK. -Original Message- From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] Sent: Wednesday, 13 June 2007 4:07 PM To: Anthony Kamau Cc

Re: Problems with Received: header checks and ALL_TRUSTED rule...

Daryl C. W. O'Shea wrote: Anthony Kamau wrote: How then can I tell spamassassin to fire the ALL_TRUSTED rule if the connecting host is on the trusted list and ignore further Received: header checks? I have read Mail::SpamAssassin::Conf help file but cannot find the solution yet. I thought the

Re: Problems with Received: header checks and ALL_TRUSTED rule...

Anthony Kamau wrote: How then can I tell spamassassin to fire the ALL_TRUSTED rule if the connecting host is on the trusted list and ignore further Received: header checks? I have read Mail::SpamAssassin::Conf help file but cannot find the solution yet. I thought the whitelist_allows_relays wo

Problems with Received: header checks and ALL_TRUSTED rule...

All, I have several remote users in a country well known to inject spam mail. These users are connected via dialup links to our backend Exchange Server and they are able to send email. The Exchange Server relays all email to the front end mail server running Red Hat Enterprise Linux AS 4 and Spam

SARE -- rulesemporium.com

Hi, I been using a script to pull updates from SARE, but it seem to be stuck every night for a night now I am see wget process stuck on www.rulesemporium.com. Are they just down? Or gone for the count? www.britishscifiexchange.com www.magi

Re: sa-update claims it's up to date

On Wed, Jun 13, 2007 at 01:44:43PM +1000, Hans Holt wrote: > I've been running sa-update daily ever since, sa-update claims that no > newer updates are available. The version sa-update downloaded the There haven't been 3.1 updates in a while, fwiw. > first time was 507739 but on > http://buildbot

Re: Rejecting spam during SMTP session

Hi arni, once you are reading the .qmail file, the mail message has been accepted and queued. You can use qmail-scanner (which runs before queuing the message) to reject Wolfgang Hamann >> >> Hi, >> >> for a while i've been watching my spamassassin perform great on almost >> all spam - i've

sa-update claims it's up to date

I've installed spamassassin 3.1.8 as distributed with opensuse linux 10.2. Following the installation, I used sa-update to download what I thought were the latest updates available in the default updates.spamassassin.org channel. These were downloaded to /var/lib/spamassassin/3.001008. The spamass

Re: Embarq/Synacor's SA Setup

Chris wrote: > Before I put my foot in my mouth to my ISP, I'd like to make sure I'm right. > From the headers below, what does Embarq/Synacor consider to be ALL_TRUSTED? > The default trust-path auto-guesser assumes that your MX has a public IP address, not a private address. It *WILL* break i

Freebsd Port of SA 3.2.1

If anyone wants a 'pre release' of the Freebsd sa 3.2.1 portfile, you can download it here: http://www.secnap.com/downloads/sa321.tgz Instructions: rm everything in /usr/ports/mail/p5-Mail-SpamAssassin, untar above there, make or portupgrade it. Some dependencies that have not been committed to

Embarq/Synacor's SA Setup

Before I put my foot in my mouth to my ISP, I'd like to make sure I'm right. From the headers below, what does Embarq/Synacor consider to be ALL_TRUSTED? Received: from localhost (localhost.localdomain [127.0.0.1]) by smtp.embarq.synacor.com (Postfix) with ESMTP id 3ECA115F5EC fo

Re: Rejecting spam during SMTP session

arni wrote: > Hi, > > for a while i've been watching my spamassassin perform great on almost > all spam - i've never had any false positives and also a very low count > of false negatives. > So I thought about rejecting sure spam during the SMTP session and came > up with a few bits of shellscript

Re: No buffer space available

That wouldn't be TCP buffers. It's doing file I/O not network I/O. Since it's file buffers, which on nearly every OS are dynamic, it implies Mike's machine is out-of-memory. --[ UxBoD ]-- wrote: > What O/S ? What kernel release ? Have you tuned any system parameters for > TCP buffers ? Is there h

Re: These are getting through SA...

Bill, > Mark, I patched Dns.pm but this didn't resolve the issue for me. > You can test with the sample messages I posted to bugzilla: > http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5506 Yes, it is the same problem as I describe in http://issues.apache.org/SpamAssassin/show_bug.cgi?i

Rejecting spam during SMTP session

Hi, for a while i've been watching my spamassassin perform great on almost all spam - i've never had any false positives and also a very low count of false negatives. So I thought about rejecting sure spam during the SMTP session and came up with a few bits of shellscript code thats rejecting spa

Re: Spamasssassin 3.2.1 not yet on CPAN

On Tue, 12 Jun 2007, Jerry Durand wrote: > This it? We going back in versions? > > Spam detector and markup engine > Mail-SpamAssassin-3.1.9 Nope. Bugfix release for 3.1.x series. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174

Re: These are getting through SA...

Mark Martinec wrote the following on 6/12/2007 3:05 PM -0800: Bill, Mark, just curious if you are running Botnet? I found that some messages cause the Botnet RDNS test to timeout after hanging for about 30 seconds, and then network test randomly fail (primarily URIBL tests). I found that i

Re: Spamasssassin 3.2.1 not yet on CPAN

At 11:04 AM 6/12/2007, Justin Mason wrote: Marc Perkel writes: > Just wondering how long it's going to take to get SA 3.2.1 into CPAN? oops. forgot to upload it. ;) --j. This it? We going back in versions?

RE: These are getting through SA...

Bill, I was getting this sort of symptom without using Botnet. It's almost as if something's deadlocking somewhere in SA (until the timeout kicks in). Phil -Original Message- From: Bill Landry [mailto:[EMAIL PROTECTED] Sent: 12 June 2007 22:47 To: users@spamassassin.apache.org Subject:

Re: These are getting through SA...

Bill, > Mark, just curious if you are running Botnet? I found that some > messages cause the Botnet RDNS test to timeout after hanging for about > 30 seconds, and then network test randomly fail (primarily URIBL > tests). I found that if I disable Botnet, then all network tests will > run fine o

RE: These are getting through SA...

Well caught, Mark! I'd come to similar conclusions even without digging into the code when I saw DNS-related strangeness when I was testing SA 3.2.0 a few weeks back. I'll second your request that SA process all results it has collected on timeout, instead of discarding them. Cheers, Phil

Re: These are getting through SA...

Mark Martinec wrote the following on 6/12/2007 3:53 AM -0800: Luis, I don't have any URIBL rules firing up (SA 3.2.0 from source here, most of the other relevant info is in the header of the mail I sent before to test). Where did you get them? [...] But the main difference between the live r

RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available

On Tue, 2007-06-12 at 16:07 -0400, Rosenbaum, Larry M. wrote: > > From: Duncan Hill [mailto:[EMAIL PROTECTED] > > > > On Tue, June 12, 2007 13:33, Justin Mason wrote: > > > Daniel J McDonald writes: > > >> So, you can't build the RPM as root. > > >> > > >> > Very interesting, but I ran into this

RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available

> From: Duncan Hill [mailto:[EMAIL PROTECTED] > > On Tue, June 12, 2007 13:33, Justin Mason wrote: > > Daniel J McDonald writes: > >> So, you can't build the RPM as root. > >> > >> > >> I just added all of the various groups to my user, set up a user > build > >> directory tree, compiled it under

RE: HELP!!! SA timing out after 3.2 upgrade-NOT

Sorry all I just panicked - I didn't know that upgrading would replace my startup script - So I just added the arguments back into the startup script. -Original Message- Now that I added the arguments back to my startup script for SA my CPU usage is getting nailed 43 processes

Errors in logs after upgrade from debian sarge to etch

Hello, After upgrading SA from 3.0 to 3.1, I get the attached logs when I restart spamd. This seems to be a configuration error. In fact, the local.cf file has been wrote for the 3.0 version. Can someone help me with it ? Thanks. -- Emmanuel Lesouef DSI | CRBN t : 0231069671 m : [EMAIL PROTE

Re: HELP!!! SA timing out after 3.2 upgrade-FIXED

Jean-Paul Natola wrote: I didn't know that upgrading would replace my startup script - So I just added the arguments back into the startup script. Most distro packages include a place for you to put startup options that override the default ones, and don't get overwritten on upgrades. This i

RE: HELP!!! SA timing out after 3.2 upgrade-FIXED

Sorry all I just panicked - I didn't know that upgrading would replace my startup script - So I just added the arguments back into the startup script. -Original Message- From: Jean-Paul Natola [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 12, 2007 2:41 PM To: users@spamassassin.apach

HELP!!! SA timing out after 3.2 upgrade

Hi all I just upgraded to 3.2 Now every message is timing out- If anyone has any ideas can you CC me at [EMAIL PROTECTED] As no messages are coming in THANKS Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 100

Re: Spamasssassin 3.2.1 not yet on CPAN

Marc Perkel writes: > Just wondering how long it's going to take to get SA 3.2.1 into CPAN? oops. forgot to upload it. ;) --j.

Re: DUL Lists? - OT

Dan Barker schrieb: Definitions: "right": follow the CNAME to get a PTR "wrong": return the CNAME as an answer. Yes thats what I meant, the script on the other side seems to be to stupid to realise that the first lookup isnt the final answer, in this wrong answer it finds the own ip and co

RE: DUL Lists? - OT

Thanks for yet _more_ confirmation. However, if botnet is depending on DNS pulling the "right" stuff, and someone's DNS is pulling the "wrong" stuff, then it still could be botnet; just not directly. Definitions: "right": follow the CNAME to get a PTR "wrong": return the CNAME as an answer. I'm

Spamasssassin 3.2.1 not yet on CPAN

Just wondering how long it's going to take to get SA 3.2.1 into CPAN?

Re: DUL Lists? - OT

Dan Barker wrote: I'm receiving a lot of 421 rejects with: Unexpected connection response from server: 421 mails from 74.254.46.133 refused: local dynamic IP address 74.254.46.133" In case there's any doubt about whether or not the Botnet plugin tripped up on the PTR record situation (and so

Re: emails to non existent recipients -- forward to spam honey pot.

* mbano <[EMAIL PROTECTED]>: > > Hallo all, > > is there a way to higher score the email sent to non-existent local > recipient (detected via ldap) > and > even so collect them to honex pot, smamaccount for re-feed the bayes. > especially if the sender is the same .. Depends on your MTA, with p

emails to non existent recipients -- forward to spam honey pot.

Hallo all, is there a way to higher score the email sent to non-existent local recipient (detected via ldap) and even so collect them to honex pot, smamaccount for re-feed the bayes. especially if the sender is the same .. thanks for ideas... cheers Marco -- View this message in context: h

Re: These are getting through SA...

Luis, > > Namely with 22 RBL results coming back, the last one > > (which was the crucial URIBL test) had a timeout of 0 > > and was ignored even though dns result did arrive. > > > > Moreover, there is a bug in Mail::SpamAssassin::Dns, where > > a late-spawned URIBL queries (which only start afte

Re: DUL Lists? - OT

At 07:42 12-06-2007, Dan Barker wrote: I'm receiving a lot of 421 rejects with: Unexpected connection response from server: 421 mails from 74.254.46.133 refused: local dynamic IP address 74.254.46.133" That IP address is not dynamic. The reverse DNS is correct. Does anybody recognize the te

Use of uninitialized value in hash element at Received.pm line 357

Hi there, I get the following error when trying to use sa-learn. SA Learn: Use of uninitialized value in hash element at /usr/share/perl5/Mail/SpamAssassin/Message/Metadata/Received.pm line 357., Use of uninitialized value in hash element at /usr/share/perl5/Mail/SpamAssassin/Message/Metadat

RE: Overriding Scores

susan barnes wrote: > Theo Van Dinter wrote: > > > Susan Barnes wrote: > > > > The site rules should be in /etc/mail/spamassassin/ > > > > with a file updates_spamassassin_org.cf including the sets in > > > > /etc/mail/spamassassin/updates_spamassassin_org > > > > Also, updates don't live there, a

Re: DUL Lists? - OT

Dan Barker schrieb: Dan Barker follows up: I "think" you confirmed that my delegated rDNS is proper and that the 421 message is in error. But I'm not certain. Can you please confirm your assessment? My ISP provides me a /26 subnet out of the 74.254.46.0 class C, so the rDNS delegation is done wit

RE: DUL Lists? - OT

Dan Barker schrieb: > > I'm receiving a lot of 421 rejects with: > > > > Unexpected connection response from server: > > 421 mails from 74.254.46.133 refused: local dynamic IP address > > 74.254.46.133" > > > > Does anybody recognize the text of the message? I'd like to confirm > > that there are n

Re: Selectively disabling RBL services in SpamAssassin

On Mon, Jun 11, 2007 at 09:25:32PM -0500, Lindsay Haisley wrote: > The Mail::SpamAssassin::Conf is silent on this issue. Is there a way to > do this? Set the scores for all rules querying the RBLs you want to disable to 0. -- Randomly Selected Tagline: "He was like Tigger on 'ludes." - Carol He

Re: Spamasssassin 3.2.1 fun

On Tue, Jun 12, 2007 at 03:45:25AM +0200, Raymond Dijkxhoorn wrote: > If you want to use SARE rules, just take it easy with the frequency you > are getting the files with. Or use sa-update instead of RDJ. :) -- Randomly Selected Tagline: Advice is a dangerous commodity. pgp7JBmuFyEWS.pgp Desc

Re: How to decrease the bayes database size

On Tue, Jun 12, 2007 at 10:07:15AM +0200, Stéphane LEPREVOST wrote: > Thanks for this tip but what about the efficiency of the Bayes Database > after this operation ? The _seen database just tracks which mails have been learned from, and has no effect on the ratings coming out of the Bayes system.

Re: No buffer space available

What O/S ? What kernel release ? Have you tuned any system parameters for TCP buffers ? Is there high traffic on the server ? Somebody isn't trying to DDoS your server are they ? On Tue, 12 Jun 2007 10:26:40 -0400, Mike Fahey <[EMAIL PROTECTED]> wrote: > I am seeing this error. Any Idea how to fix

Re: DUL Lists? - OT

Dan Barker schrieb: I'm receiving a lot of 421 rejects with: Unexpected connection response from server: 421 mails from 74.254.46.133 refused: local dynamic IP address 74.254.46.133" Does anybody recognize the text of the message? I'd like to confirm that there are no popular DUL lists showing

Re: These are getting through SA...

Well, I dint't have rbl_timeout set, but after your mail, I did. The DNSs I have set in resolv.conf are mine, they both cache and work as internal and external resolvers. But the UNLP NOC got screwed in the last days, so setting the timeout a little higher wont't hurt. Thanks for the suggestion. H

DUL Lists? - OT

I'm receiving a lot of 421 rejects with: Unexpected connection response from server: 421 mails from 74.254.46.133 refused: local dynamic IP address 74.254.46.133" Does anybody recognize the text of the message? I'd like to confirm that there are no popular DUL lists showing 74.254.46.133 as dynam

No buffer space available

I am seeing this error. Any Idea how to fix this? Freebsd 6.2 SpamAssassin-3.2.0 spamd[46771]: bayes: cannot open bayes databases /usr/local/share/spamassassin/bayes_* R/W: lock failed: No buffer space available Thanks. -- With best regards, Mike Fahey - Systems Administration ***

AW: how to configure spamassassin in MS Exchange 2003 server

i would also agree with Matt, to add a dedicated server running SpamAssassin and tunnel all incoming mail through it, OR: we're are using a proxy-Server: NoSpamProxy (NSP) (http://www.nospamproxy.com/) to check all incoming and outgoing mails. Incoming mails are also send to a dedicated SpamAss

Re: how to configure spamassassin in MS Exchange 2003 server

sg wrote: > hi > > We are using MS Exchange 2003 server on windows 2003 server. We have > registered with domain service and using 50 mail users. We are getting lot > of spam mails. I want to know the configuring details of > Mail-spamassassin-3.1.7 and how to control the spam mails.. > I'd of

Re: Sa-

Emre BALCI wrote: > Hi All > I have to make something after sa-update ? > like copy files to anywhere ? > If you use spamd, it needs to be restarted, but you don't need to copy the files.

Re: Sa-

On Tue, 2007-06-12 at 02:17 -0700, Emre BALCI wrote: > Hi All > I have to make something after sa-update ? only if you used sa-compile, then you would have to run sa-compile again. > like copy files to anywhere ? Nope. sa-update puts them in the correct place. If you are using a daemonized Spa

Re: How to decrease the bayes database size

Richard Smits wrote: > Hello, > > We realy need some help here. It has come to our attention that our > bayes database is 2.4 GB big. It is really slowing down our servers > and they have a big cpu load. > > Now we have tried the trick with the sa-learn --force-expire , and it > deletes a lot of en

Re: ANNOUNCE: Apache SpamAssassin 3.2.1 available

On Tue, June 12, 2007 13:33, Justin Mason wrote: > Daniel J McDonald writes: >> So, you can't build the RPM as root. >> >> >> I just added all of the various groups to my user, set up a user build >> directory tree, compiled it under my username and it tested fine, at least >> to the point >> that

Re: ANNOUNCE: Apache SpamAssassin 3.2.1 available

Daniel J McDonald writes: > On Tue, 2007-06-12 at 12:45 +0100, Justin Mason wrote: > > Daniel J McDonald writes: > > > On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: > > > > I'm seeing the same kind of messages mentioned after compiling from > > > > source on Redhat ES4 and running make tes

Re: ANNOUNCE: Apache SpamAssassin 3.2.1 available

On Tue, 2007-06-12 at 12:45 +0100, Justin Mason wrote: > Daniel J McDonald writes: > > On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: > > > I'm seeing the same kind of messages mentioned after compiling from > > > source on Redhat ES4 and running make test. > > > > I'm wondering if this is

RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available

-Original Message- From: Daniel J McDonald [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 12, 2007 7:29 AM To: users@spamassassin.apache.org Subject: RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: > I'm seeing the same kind of mess

Re: ANNOUNCE: Apache SpamAssassin 3.2.1 available

Daniel J McDonald writes: > On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: > > I'm seeing the same kind of messages mentioned after compiling from > > source on Redhat ES4 and running make test. > > I'm wondering if this is the reason: > + make FULLPERL=/usr/bin/perl test > /usr/bin/perl5.

RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available

On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: > I'm seeing the same kind of messages mentioned after compiling from > source on Redhat ES4 and running make test. I'm wondering if this is the reason: + make FULLPERL=/usr/bin/perl test /usr/bin/perl5.8.7 build/mkrules --exit_on_no_src --src

Re: These are getting through SA...

Luis, > I don't have any URIBL rules firing up (SA 3.2.0 from source here, > most of the other relevant info is in the header of the mail I sent > before to test). Where did you get them? >[...] > But the main difference between the live run and the ones I did with > SA by itself (both as root and

how to configure spamassassin in MS Exchange 2003 server

hi We are using MS Exchange 2003 server on windows 2003 server. We have registered with domain service and using 50 mail users. We are getting lot of spam mails. I want to know the configuring details of Mail-spamassassin-3.1.7 and how to control the spam mails.. -- View this message in context

Sa-

Hi All I have to make something after sa-update ? like copy files to anywhere ? Bored stiff? Loosen up... Download and play hundreds of games for free on Yahoo! Games. http://games.yahoo.com/games/front

RE: How to decrease the bayes database size

Hi Phil, Thanks for this tip but what about the efficiency of the Bayes Database after this operation ? I was thinking that the most this file can "remember", the most the bayes filtering is efficient... In the limit of a reasonable file size of course ! As Richard said, "with the sa-learn --for

RE: How to decrease the bayes database size

bayes_seen just grows like topsy. All you need to do is delete it and let SA recreate it. Stop spamd / MailScanner / whatever. check permissions on bayes_seen rm bayes_seen restart do an sa-learn to make sure it still works (if it doesn't, reset permissions on the newly created bayes_seen). C

RE: How to decrease the bayes database size

Hi, Same problem here with a 1.3G bayes_seen file. No CPU load linked to this but a too big file is never good... Can someone help to deal with this ? As long as I remember this problem were discussed a lot of time here but I never saw a trick for this -Message d'origine- De : Richard

How to decrease the bayes database size

Hello, We realy need some help here. It has come to our attention that our bayes database is 2.4 GB big. It is really slowing down our servers and they have a big cpu load. Now we have tried the trick with the sa-learn --force-expire , and it deletes a lot of entrys, but the file is not gett

Re: Spamasssassin 3.2.1 fun

Hi! My question was: Where to listen for the announcements? Here on this list? Some other channel? I've been getting RDJ updates via cron once a week for a while now. I don't see how that can be construed as abusive, but I'm game to unhook it while they figure out what to do. I'm not wanting t