Re: RDJ 404's

2007-07-25 Thread Jan Doberstein
hi Leigh, Leigh Sharpe schrieb: I'm getting 404 errors on my RulesDuJour, for whatever rule I have listed first in the config. If I remove the offending rule from the config, I get a 404 on whatever rule is next in the list. All other rules are OK. Can anybody offer any explanation of why?

Re: Two errors with 3.2.2

2007-07-25 Thread Ed Kasky
At 10:29 PM Wednesday, 7/25/2007, you wrote -=> Matt Kettler wrote: > Ed Kasky wrote: > >> I upgraded today from 3.2.1 to 3.2.2 on a RH7.2 server using perl >> 5.8.1 and am having 2 issues. >> >> 1. Lint output gives 4 warnings: >> >> [27134] warn: rules: failed to run CG_DOUBLEDOT_GIF test, skip

RDJ 404's

2007-07-25 Thread Leigh Sharpe
Hi all, I'm getting 404 errors on my RulesDuJour, for whatever rule I have listed first in the config. If I remove the offending rule from the config, I get a 404 on whatever rule is next in the list. All other rules are OK. Can anybody offer any explanation of why? Regards, Leigh

Re: Two errors with 3.2.2

2007-07-25 Thread Matt Kettler
Matt Kettler wrote: > Ed Kasky wrote: > >> I upgraded today from 3.2.1 to 3.2.2 on a RH7.2 server using perl >> 5.8.1 and am having 2 issues. >> >> 1. Lint output gives 4 warnings: >> >> [27134] warn: rules: failed to run CG_DOUBLEDOT_GIF test, skipping: >> [27134] warn: (Can't locate object me

another bouncing list person

2007-07-25 Thread Jerry Durand
It also is trying to claim to come from me, I don't have a POST or OFFICE address here. Begin forwarded message: From: [EMAIL PROTECTED], [EMAIL PROTECTED] Date: July 25, 2007 9:54:43 PM PDT To: "Jerry Durand" <[EMAIL PROTECTED]> Subject: NDN: Re: Two errors with 3.2.2 Return-Path: <[EMAIL

Re: Two errors with 3.2.2

2007-07-25 Thread Matt Kettler
Ed Kasky wrote: > I upgraded today from 3.2.1 to 3.2.2 on a RH7.2 server using perl > 5.8.1 and am having 2 issues. > > 1. Lint output gives 4 warnings: > > [27134] warn: rules: failed to run CG_DOUBLEDOT_GIF test, skipping: > [27134] warn: (Can't locate object method "image_name_regex" via > pack

Re: Two errors with 3.2.2

2007-07-25 Thread Ed Kasky
At 09:29 PM Wednesday, 7/25/2007, Theo Van Dinter wrote -=> On Wed, Jul 25, 2007 at 09:21:37PM -0700, Ed Kasky wrote: > [27134] warn: rules: failed to run CG_DOUBLEDOT_GIF test, skipping: > [27134] warn: (Can't locate object method "image_name_regex" via > package "Mail::SpamAssassin::PerMsgStat

Re: Two errors with 3.2.2

2007-07-25 Thread Jerry Durand
On Jul 25, 2007, at 9:21 PM, Ed Kasky wrote: I upgraded today from 3.2.1 to 3.2.2 on a RH7.2 server using perl 5.8.1 and am having 2 issues. Any word on when 3.2.2 gets to CPAN? I checked a short while ago and CPAN (the web page, not mirrors) is still at 3.2.1. Been spending the evening g

Re: Two errors with 3.2.2

2007-07-25 Thread Theo Van Dinter
On Wed, Jul 25, 2007 at 09:21:37PM -0700, Ed Kasky wrote: > [27134] warn: rules: failed to run CG_DOUBLEDOT_GIF test, skipping: > [27134] warn: (Can't locate object method "image_name_regex" via > package "Mail::SpamAssassin::PerMsgStatus" at (eval 1231) line 305. > [27134] warn: ) It appears th

Two errors with 3.2.2

2007-07-25 Thread Ed Kasky
I upgraded today from 3.2.1 to 3.2.2 on a RH7.2 server using perl 5.8.1 and am having 2 issues. 1. Lint output gives 4 warnings: [27134] warn: rules: failed to run CG_DOUBLEDOT_GIF test, skipping: [27134] warn: (Can't locate object method "image_name_regex" via package "Mail::SpamAssassin::Pe

Re: Upgrading SA to 3.2.2

2007-07-25 Thread Matt Kettler
Dominic Caputo wrote: > > I have been running spamassassin for the past few months on my mail > server. I am in the process of upgrading my version to the latest > release and was wondering if someone can verify my procedure is > correct as I have not done this before. > > Is there a way to backup

Re: Update default settings?

2007-07-25 Thread Matt Kettler
HDG wrote: > Well in WHM (WebHost Manager), there is a button to enable SpamAssassin. > Ahh, that's a Cpanel thing.. Disclaimer: I know nothing about cpanel at all. However is it the one under "server configuration" "Tweak settings"? If so, this manual page implies that's a global option, not

Upgrading SA to 3.2.2

2007-07-25 Thread Dominic Caputo
I have been running spamassassin for the past few months on my mail server. I am in the process of upgrading my version to the latest release and was wondering if someone can verify my procedure is correct as I have not done this before. Is there a way to backup my current running release incase I

Re: Update default settings?

2007-07-25 Thread HDG
Well in WHM (WebHost Manager), there is a button to enable SpamAssassin. Matt Kettler-3 wrote: > > HDG wrote: >> I see, thanks. I had actually already done that, but didn't know it would >> change all calls. >> >> Now if an account has SpamAssassin off, will it still be active because >> local.

Semi-OT perl question

2007-07-25 Thread John Rudd
So, this is really a perl question, but it happened as part of my installing SA 3.2.1 I was going to install HTTP::Date as an optional requirement for SA. It installed fine on my dev servers, but not on my test servers (for some unknown reason). So, now I want to _uninstall_ it from my dev

Re: Problem with clamav plugin

2007-07-25 Thread Mandy
On 7/24/07, OliverScott <[EMAIL PROTECTED]> wrote: You need to set a high priority for the meta rules as otherwise they are evaluated BEFORE the ClamAV plugin is used (I think?). I am not an expert in how SA works, but I eventually came up with the following solution (for using several differen

Re: Update default settings?

2007-07-25 Thread Matt Kettler
HDG wrote: > I see, thanks. I had actually already done that, but didn't know it would > change all calls. > > Now if an account has SpamAssassin off, will it still be active because > local.cf is being used? Or do I have to manually enable SpamAssassin on each > account? Define "enable SpamAssass

RE: score-0 problem: SpamAssassin (not cached, score=0, required 5, autolearn=)

2007-07-25 Thread SM
Hi Donald At 14:56 25-07-2007, [EMAIL PROTECTED] wrote: No rules triggered at all for that piece of spam. You should at least have hits for HELO_DYNAMIC_DHCP and RDNS_DYNAMIC. The Received headers in your sample are odd. The dsl85-102-24083.ttnet.net.tr should ahve been the topmost. I assu

Problem with SA 3.2.2 upgrade (dcc related?)

2007-07-25 Thread Henry Kwan
Hi, Am trying to upgrade to the new 3.2.2 and everything looked OK during make/test/install but during operation, I'm getting these errors: Jul 25 13:46:53 boxen spamd[25710]: dcc: check failed: util: setuid 0 to 501 failed! at /usr/lib/perl5/site_perl/5.8.5/Mail/SpamAssassin/Util.pm line 1343.

RE: score-0 problem: SpamAssassin (not cached, score=0, required 5, autolearn=)

2007-07-25 Thread donald.dawson
No rules triggered at all for that piece of spam. I'll check the MailScanner group to see if they have any experience with this issue. Thanks, Donald -Original Message- From: SM [mailto:[EMAIL PROTECTED] Sent: Wednesday, July 25, 2007 4:18 PM To: Dawson, Donald; users@spamassassin.apach

RE: score-0 problem: SpamAssassin (not cached, score=0, required 5, autolearn=)

2007-07-25 Thread SM
At 13:41 25-07-2007, [EMAIL PROTECTED] wrote: sm - We have the same configuration on all our MX servers. Here are all of the headers for an example spam email: The SpamAssassin scoring should be the same then. Note, it may be system/config-related - the /dev/shm directory is used by spamassa

simple rule idea

2007-07-25 Thread arni
I just had the following rule idea to prevent false positives (i have no problem scoring spam high enough, i rather want to find ways to lower the score on ham) I want to reward -2 points for people that know my very distinctive lastname and include it in the message or the To field - however

Re: measuring SA

2007-07-25 Thread Ralf Hildebrandt
* David Newman <[EMAIL PROTECTED]>: > SA 3.2.1 with Postfix > > What tools are available to measure how many messages SA classifies as > spam per hour/day/week? mailgraph? -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel.

RE: score-0 problem: SpamAssassin (not cached, score=0, required 5, autolearn=)

2007-07-25 Thread donald.dawson
sm - We have the same configuration on all our MX servers. Here are all of the headers for an example spam email: Note, it may be system/config-related - the /dev/shm directory is used by spamassassin, but it is not getting cleaned out consistently. Microsoft Mail Internet Headers Version 2.0

measuring SA

2007-07-25 Thread David Newman
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 SA 3.2.1 with Postfix What tools are available to measure how many messages SA classifies as spam per hour/day/week? many thanks dn -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.3 (Darwin) iD8DBQFGp7KzyPxGVjntI4IRAn2nAKCWi0ifvhg4EIi2ZXI2K8ndbL

Re: Bored girls spams

2007-07-25 Thread SM
At 11:18 25-07-2007, Igor Chudov wrote: I am receiving a lot of spams from "bored girls", that ask me to email It may be your lucky day. Did you reply to them? :-) to some .info email addresses. Just curious what these spams are promoting, what is the scam behind them? It's a good way to bu

Re: how to turn off spamassassin entirely on a per-user basis

2007-07-25 Thread Jari Fredriksson
SpamAssassin can't do it, it has to be done where SA is called in the first place. It's in easy in some systems (procmail, maildrop), but maybe hard in some others (spamass-milter). Alex Aminoff wrote: > I have searched and searched and cannot find a configuration directive > that you can p

Re: score-0 problem: SpamAssassin (not cached, score=0, required 5, autolearn=)

2007-07-25 Thread SM
At 11:01 25-07-2007, [EMAIL PROTECTED] wrote: I have noticed that some spam has been creeping in. We have 4 inbound MX servers, but only has is experiencing this problem. Are you using the same configuration on all MX servers? Here is an example of the headers from a spam message: From: "E

RE: score-0 problem: SpamAssassin (not cached, score=0, required 5, autolearn=)

2007-07-25 Thread donald.dawson
There are files in /dev/shm/ (.spamassassin*) that are being created, and some are being left in that directory. Here is an example of a file that has been left on this ramdisk fs: # grep l6PJ1iYV029369 /var/log/maillog Jul 25 14:01:51 houmx05 milter-greylist: l6PJ1iYV029369: skipping greylist b

how to turn off spamassassin entirely on a per-user basis

2007-07-25 Thread Alex Aminoff
I have searched and searched and cannot find a configuration directive that you can put in .spamassassin/user_prefs that simply turns off spamassassin entirely for that user - meaning that SA will immediately return with exit code 0. In the FAQ it says to whitelist the user, but I would prefe

Re: Bored girls spams

2007-07-25 Thread Anders Norrbring
arni skrev: Anders Norrbring schrieb: arni skrev: Igor Chudov schrieb: I am receiving a lot of spams from "bored girls", that ask me to email to some .info email addresses. Just curious what these spams are promoting, what is the scam behind them? i probably to verify the addresses they t

Re: Bored girls spams

2007-07-25 Thread arni
Anders Norrbring schrieb: arni skrev: Igor Chudov schrieb: I am receiving a lot of spams from "bored girls", that ask me to email to some .info email addresses. Just curious what these spams are promoting, what is the scam behind them? i probably to verify the addresses they tried because

Re: Scantime on messages

2007-07-25 Thread Jan Doberstein
Per Jessen schrieb: It could be caused by DNS lookups taking longer. That would be my guess for anything taking more than 5 seconds. try to use a local dns cache ... helps here to fasten up mail scanning! \jd

Re: Bored girls spams

2007-07-25 Thread Anders Norrbring
arni skrev: Igor Chudov schrieb: I am receiving a lot of spams from "bored girls", that ask me to email to some .info email addresses. Just curious what these spams are promoting, what is the scam behind them? i probably to verify the addresses they tried because then they gain a lot of va

Re: Bored girls spams

2007-07-25 Thread arni
Igor Chudov schrieb: I am receiving a lot of spams from "bored girls", that ask me to email to some .info email addresses. Just curious what these spams are promoting, what is the scam behind them? i probably to verify the addresses they tried because then they gain a lot of value and can b

Bored girls spams

2007-07-25 Thread Igor Chudov
I am receiving a lot of spams from "bored girls", that ask me to email to some .info email addresses. Just curious what these spams are promoting, what is the scam behind them? i

Re: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Justin Mason
ok -- confirmed :( Bug 5574. Chris Blaise writes: > > Running without the daemon option makes it clear: > > $ /usr/bin/spamd -x --max-conn-per-child=20 --socketpath=/dev/spamd > --socketgroup=mail -m3 --min-spare=3 -u mail > > ... > [4463] info: spamd: server started on UNIX domain soc

score-0 problem: SpamAssassin (not cached, score=0, required 5, autolearn=)

2007-07-25 Thread donald.dawson
I have noticed that some spam has been creeping in. We have 4 inbound MX servers, but only has is experiencing this problem. SpamAssassin version 3.2.0 running on Perl version 5.8.3 This is MailScanner version 4.59.4 Here are the counts of 'is not spam' and 'is spam' with 'score=0,': fgrep "sco

Re: Writing a rule to access SA ClamAV Plugin Header

2007-07-25 Thread Jan Doberstein
Hi there, OliverScott schrieb: > There is a SpamAssassin plugin which checks messages with ClamAV, which adds > the following header to emails it processes: > > X-Spam-Virus: Yes ($VirusName) > > http://wiki.apache.org/spamassassin/ClamAVPlugin the plugin is running here too, but it doesn't add

Re: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Christian Kuehn
Test failed under * SunOS dioptase 5.9 Generic_118559-35 i86pc i386 i86pc * perl, v5.8.0 built for i86pc-solaris t/spamd.ok t/spamd_allow_user_rulesok 1/5 ^Cmake: *** [test_dynamic] Error 130 I stop this test after 4 minutes, the truss (strace under Solaris) told

rpmbuild -tb error ---- WAS --- RE: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Robert - eLists
> > RHEL3, perl 5.8.8, sendmail 8.13, SA 3.1.9 > > rpmbuild -tb Mail-SpamAssassin-3.2.2.tar.gz throws the error > > Thanks. > > - Skip Skip, When I do this rpm -qa | grep arser I get this perl-XML-Parser-2.34-5 perl-HTML-Parser-3.55-1.el4.rf you might go to http://dag.wieers.com/rpm/pa

Re: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Marc Perkel
For what it's worth you should make it available and then announce it. :)

RE: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Skip Brott
>> >> Just as in 3.2.1, I still get this error when trying to build: >> >> REQUIRED module out of date: HTML::Parser >> >> But I already installed HTML::Parser 3.56 with no errors. >> >> I can't be the only one who has received this error, but nothing is >> indicating that I am missing any oth

RE: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Chris Blaise
Running without the daemon option makes it clear: $ /usr/bin/spamd -x --max-conn-per-child=20 --socketpath=/dev/spamd --socketgroup=mail -m3 --min-spare=3 -u mail ... [4463] info: spamd: server started on UNIX domain socket /dev/spamd (running version 3.2.2) [4463] info: spamd: server pi

Re: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Justin Mason
try using "strace -fp {PID}" to see what is causing those deaths... Chris Blaise writes: > > Can you verify that it's not in the "child create/due" loop? > Tailing my log, I see the following: > > 2007 Jul 25 08:41:01 ThreatWall spamd[4553]: spamd: server started on UNIX > domai > n socket

RE: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Chris Blaise
Can you verify that it's not in the "child create/due" loop? Tailing my log, I see the following: 2007 Jul 25 08:41:01 ThreatWall spamd[4553]: spamd: server started on UNIX domai n socket /dev/spamd (running version 3.2.2) 2007 Jul 25 08:41:01 ThreatWall spamd[4553]: spamd: server pid: 45

Re: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Justin Mason
Chris Blaise writes: > When starting up on a Perl 5.6.1 system under x86 Linux, spamd goes > into a child spawn/die loop because of the fix for bug 5518 which replaces > the previous set uid/gid routines fails and causes the newly spawned child > to immediately die. > > Is Perl 5.6.1

RE: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Robert - eLists
> > Just as in 3.2.1, I still get this error when trying to build: > > REQUIRED module out of date: HTML::Parser > > But I already installed HTML::Parser 3.56 with no errors. > > I can't be the only one who has received this error, but nothing is > indicating that I am missing any other depende

Re: Update default settings?

2007-07-25 Thread HDG
I see, thanks. I had actually already done that, but didn't know it would change all calls. Now if an account has SpamAssassin off, will it still be active because local.cf is being used? Or do I have to manually enable SpamAssassin on each account? Matt Kettler-3 wrote: > > HDG wrote: >> We a

RE: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Chris Blaise
When starting up on a Perl 5.6.1 system under x86 Linux, spamd goes into a child spawn/die loop because of the fix for bug 5518 which replaces the previous set uid/gid routines fails and causes the newly spawned child to immediately die. Is Perl 5.6.1 no longer the lowest support

Re: Update default settings?

2007-07-25 Thread Matt Kettler
HDG wrote: > We are a webhost (using WHM) and each time a new account is created, > required_hits is set to 5 and SpamAssassin is turned off. How can I change > it so SpamAssassin is set on by default and required_hits to 10? > You really don't want to change the default, you want to make a site

Update default settings?

2007-07-25 Thread HDG
We are a webhost (using WHM) and each time a new account is created, required_hits is set to 5 and SpamAssassin is turned off. How can I change it so SpamAssassin is set on by default and required_hits to 10? Also, how can I update every account's required_hits to 10? -- View this message in con

Routing mail with SA and Qmail-Scanner

2007-07-25 Thread Matthew S. Goodman
I'm trying to get mail that hits the spam threshold to route automagically to the user's spam folder. All my users are fine with what this means, that they would have to check their Spam periodically. I am not familiar however, with what qmail-scanner option enables this. I see -sa-quarantine i

RE: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Skip Brott
Just as in 3.2.1, I still get this error when trying to build: REQUIRED module out of date: HTML::Parser But I already installed HTML::Parser 3.56 with no errors. I can't be the only one who has received this error, but nothing is indicating that I am missing any other dependencies. - Skip

Re: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread François Rousseau
try http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.2.2.tar.gz 2007/7/25, Randal, Phil <[EMAIL PROTECTED]>: Hmmm, Can't find a mirror carrying it, not even apache.org! Phil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Justin Mas

Re: Scantime on messages

2007-07-25 Thread Per Jessen
Jean-Paul Natola wrote: > Hi everyone, > > I'm looking over my logs and it *seems* to me that its taking > exceessivley long for these messages to scan, granted I don't have the > latest and greatest hardware, but I rarely if ever use swap - so I > don't *think* that it should take so long- > I

RE: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Randal, Phil
Hmmm, Can't find a mirror carrying it, not even apache.org! Phil -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Justin Mason Sent: 25 July 2007 14:10 To: users@spamassassin.apache.org; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: ANNOUNCE: Apache SpamA

Scantime on messages

2007-07-25 Thread Jean-Paul Natola
Hi everyone, I'm looking over my logs and it *seems* to me that its taking exceessivley long for these messages to scan, granted I don't have the latest and greatest hardware, but I rarely if ever use swap - so I don't *think* that it should take so long- Here's my top stats 28 processes: 1 run

Re: How do you stop others from sending emails from your emailaddresses ?

2007-07-25 Thread Matus UHLAR - fantomas
> On Wed, 2007-07-25 at 14:10 +0200, Magnus Holmgren wrote: > > Within SA, you can create a rule that matches if your mail address is found > > in > > one of the sender headers, and use whitelist_from_rcvd, whitelist_from_spf > > etc. to whitelist it. On 25.07.07 07:25, McDonald, Dan wrote: > I

ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread Justin Mason
Apache SpamAssassin 3.2.2 is now available! This is a maintenance release of the 3.2.x branch. Downloads are available from: http://spamassassin.apache.org/downloads.cgi The release file will also be available via CPAN in the near future. md5sum of archive files: 7423a1bca96b932d321882fc6

Re: Now its zip attachments ^^

2007-07-25 Thread Matus UHLAR - fantomas
On 24.07.07 08:57, Kelson wrote: > Over here we use MIMEDefang as the glue to tie SpamAssassin, Clamd, etc. > together. MD filters are very customizable (if you can write it in > Perl, you can put it in a MD filter). After our filter calls clamd, we > check the name of the matching signature ag

Re: How do you stop others from sending emails from your emailaddresses ?

2007-07-25 Thread McDonald, Dan
On Wed, 2007-07-25 at 14:10 +0200, Magnus Holmgren wrote: > Within SA, you can create a rule that matches if your mail address is found > in > one of the sender headers, and use whitelist_from_rcvd, whitelist_from_spf > etc. to whitelist it. I know I could write meta rules to do it, but is the

Re: How do you stop others from sending emails from your email addresses ?

2007-07-25 Thread Magnus Holmgren
Please start a new thread instead of using the "Reply" function when you have a new issue. On Wednesday 25 July 2007 13:46, Chris wrote: > I constantly, (about 15-20 times a day), receive s**m > emails from other people, but addressed from my email > address. Is there any way of using SA to help

Re: How do you stop others from sending emails from your email addresses ?

2007-07-25 Thread François Rousseau
Hi Chris, You can't stop other from using your email address. You can help reducing the usage of your email address by implementing SPF on your domain. I will let other specify more detail or I will let you search on SPF because I don't have experience with SPF. François Rousseau 2007/7/25, C

Re: sa-update error

2007-07-25 Thread Matt Kettler
Sg wrote: > Hi > > I am using SA 3.1.7. I want to update it. > > I tried this command > > sa-update --nogpg --channel updates.spamassassin.org > --channel saupdates.openprotect.com > > > But i got this error ""Argument "1.26_01"