DCC

2008-03-11 Thread Tarak Ranjan
Hi All, I have installed dcc-1.3.85 , and my local.cf file is use_dcc 1 dcc_home /var/dcc dcc_path /usr/local/bin/dccproc but when i restart my SA it giving me this error [EMAIL PROTECTED] ~]# /etc/init.d/spamassassin start Starting spamd: [5345] info: config: failed to parse line, skipping, in

How to update 3.1.7 to new version

2008-03-11 Thread Sg
Hi I am using SA 3.1.7 in MS Exchange Server. Yesterday 80,000 spam messages cloggin the system. Can anyone tell me, why suddenly getting lot of spam mails. we need to update the SA or update the rules.. Please tell me how to update SA in windows? -- Sg

Re: SpamAssassin hogs the CPU

2008-03-11 Thread Rubin Bennett
On Wed, 2008-03-12 at 09:31 +0700, FC Mario Patty wrote: > Guys, > > I updated my spamassassin to SpamAssassin version 3.2.4 that running > on Perl version 5.8.5 in a hope that spamd wouldn't kill my CPU again. > Once in less-or-more an hour user cannot send email and have to wait > until the 99.9

SpamAssassin hogs the CPU

2008-03-11 Thread FC Mario Patty
Guys, I updated my spamassassin to SpamAssassin version 3.2.4 that running on Perl version 5.8.5 in a hope that spamd wouldn't kill my CPU again. Once in less-or-more an hour user cannot send email and have to wait until the 99.9%process finished. When I ran 'top' I got: PIDUSER PR NI

Re: Yet another spam blocker?

2008-03-11 Thread mouss
Fred T wrote: Hello Steve, Saturday, March 8, 2008, 11:56:46 PM, you wrote: Now, I'm no expert on spam-bots, but it strikes me that the 'bots might want to remove failed addresses from their lists to make them more efficient. A 550 error returned at the protocol level will immediately noti

Re: Whitelist Question

2008-03-11 Thread John Hardin
On Tue, 11 Mar 2008, [EMAIL PROTECTED] wrote: Content analysis details: (5.7 points, 10.0 required) Also: it didn't cross your spam threshold, so what are you complaining about? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #1117

Re: Whitelist Question

2008-03-11 Thread JDavila
Here is the full header. But also the local.cf has around 12000 entries, is that a problem. Received: from nyclns01.languageworks.com ([192.168.20.60]) by NYCDML02.languageworks.com (Lotus Domino Release 7.0.3) with ESMTP id 2008031109551545-44621 ; Tue, 11 Mar 2008

Re: Whitelist Question

2008-03-11 Thread Randy Ramsdell
[EMAIL PROTECTED] wrote: Here is the header info. What is the alternate solution to using whitelist_from ? I been also trying to setup AWL via MySQL.no luck on that. I use Exim for mail then , it relays to Lotus Domino.if that helps. Content analysis details: (5.7 points, 10.0 re

Re: Whitelist Question

2008-03-11 Thread John Hardin
On Tue, 11 Mar 2008, [EMAIL PROTECTED] wrote: Here is the header info. *screenshots*? During the day I use a text-only mail client, so I can't look at them for you until tonight unless you post the text version of the full message headers. I can't say whether anyone else will bother to look.

Re: Whitelist Question

2008-03-11 Thread JDavila
Here is the header info. What is the alternate solution to using whitelist_from ? I been also trying to setup AWL via MySQL.no luck on that. I use Exim for mail then , it relays to Lotus Domino.if that helps. Content analysis details: (5.7 points, 10.0 required) pt

Spamassassin hang on bayes

2008-03-11 Thread Paolo De Marco
Hi, I have a linux server with the latest version of amavisd and SpamAssassin. Sometimes some mail cause amavisd child to hang. After that the server stop delivering mail to recipient and increasing load of the server, and i must kill amavisd child. I have set the debug level of amavisd to 5, an

Re: Whitelist Question

2008-03-11 Thread John Hardin
On Tue, 11 Mar 2008, [EMAIL PROTECTED] wrote: I add users to whitelist in the local.cf file "whitelist_from [EMAIL PROTECTED]" but they still get tagged as Spam, is there a altnerative solution. (1) Don't use whitelist_from, it is too easy for spammers to spoof. Use one of the other whitelist

Re: Whitelist Question

2008-03-11 Thread Evan Platt
Sure - a procmail recipe would work. Or, provide an example header and an example entry from your local.cf so maybe someone here can see if there's something incorrect. At 09:39 AM 3/11/2008, [EMAIL PROTECTED] wrote: I add users to whitelist in the local.cf file "whitelist_from [EMAIL PROTEC

Whitelist Question

2008-03-11 Thread JDavila
I add users to whitelist in the local.cf file "whitelist_from [EMAIL PROTECTED]" but they still get tagged as Spam, is there a altnerative solution. - Jeremy

Re: Milter (spamassassin): timeout before data read

2008-03-11 Thread David B Funk
On Tue, 11 Mar 2008, Sebastian Hoffmann wrote: This was why I postet the settings from the sendmail-milter: "INPUT_MAIL_FILTER(`spamassassin', S=local:/var/spamd/spamass-milter.sock, F=,T=C:15m;S:4m;R:4m;E:10m') INPUT_MAIL_FILTER(`clmilter', S=local:/var/run/clamav/clmilter.socket, F=,T=S:4m;R:

Re: --force-expire with negative number in reduction goal

2008-03-11 Thread Theo Van Dinter
On Tue, Mar 11, 2008 at 07:11:51AM -0700, theevilpharoh wrote: > we currently run spamassassin 3.2.1 on gentoo with vpopmail and qmail. when > I try to do an sa-learn -D -u [EMAIL PROTECTED] --force-expire. I get: > > [11279] dbg: bayes: expiry starting > [11279] dbg: bayes: expiry check keep s

Re: Cannot upgrade spamassassin-3.1.8-1.i386 to spamassassin-3.2.4-1.i386 in RHEL 4

2008-03-11 Thread Kris Deugau
FC Mario Patty wrote: Thank-you for the advice. I downloaded those 3 packages from http://dag.wieers.com, rebuilt, and installed them for my distro. Now I can upgrade my spamassassin-3.2.4-1. Many thanx to all of you guys. GBU. FWIW you might also consider adding RPMForge/DAG as a yum or apt s

--force-expire with negative number in reduction goal

2008-03-11 Thread theevilpharoh
Hi all, we currently run spamassassin 3.2.1 on gentoo with vpopmail and qmail. when I try to do an sa-learn -D -u [EMAIL PROTECTED] --force-expire. I get: [11279] dbg: bayes: using username: [EMAIL PROTECTED] [11279] dbg: bayes: database connection established [11279] dbg: bayes: found bayes

Re: Question on focus of Bayes

2008-03-11 Thread Kris Deugau
Alex Woick wrote: If you feed third-party backscatter as spam, you let the Bayes filter know that the standard bounce texts like "...unable to deliver..." is a spam indicator. ... but if you feed in a few legitimate bounces as ham, the bounce text itself tends towards a neutral rating over ti

Re: How to report 120,000 spams a day

2008-03-11 Thread Joseph Brennan
So then they tell me to push the virtusertable out to the MX's. So I've asked multiple people multiple times how using sendmail on an MX thats not a final delivery server how to use the virtusertable to accept the mail, process against the virtusertable, and then when the final delivery server i

SpamAssassin GUI

2008-03-11 Thread Peter Kingsbury
Hello, Since installing SpamAssassin on my company's Exchange server, I wanted to make kludging through potential spam/ham messages faster than using the slow remote desktop interface that is in place. I wrote a program which allows an admin to quickly scan SA-filtered messages, and move t

Re: Milter (spamassassin): timeout before data read

2008-03-11 Thread Sebastian Hoffmann
To be sure I made a new .cf file from the .mc yesterday and this "phenom" still occurs. The readme for libmilter says that the default values for the s: and r: are set to 10sec if they are not set in the config. But they are definitely set in the .mc/.cf :-( am 11.03.2008 14:22 schrieb SM: At

Re: Milter (spamassassin): timeout before data read

2008-03-11 Thread SM
At 02:38 11-03-2008, Sebastian Hoffmann wrote: This was why I postet the settings from the sendmail-milter: I missed that when I replied. "INPUT_MAIL_FILTER(`spamassassin', S=local:/var/spamd/spamass-milter.sock, F=,T=C:15m;S:4m;R:4m;E:10m') INPUT_MAIL_FILTER(`clmilter', S=local:/var/run/clam

Re: AOL Spam

2008-03-11 Thread SM
Hi. At 00:49 11-03-2008, Tarak Ranjan wrote: i'm getting lots of AOL spam, im attaching the mail , here is my SA log.. Mar 11 12:47:17 mail qmail-scanner[10609]: Clear:RC:0(64.12.137.4):SA:0(-0.6/4.0): 0.982348 859 [EMAIL PROTECTED] [EMAIL PROTECTED] Changing_careers_but_lack_the_right_Degree? <

Re: Question on focus of Bayes

2008-03-11 Thread Alex Woick
The proper usage of the Bayes filter is very simple: feed spam as spam and ham as ham. All of your mail. Don't care for content that might be mis-learned in your eyes: it will not be mis-learned. Don't try be smarter than the filter. The only exception is bounce-messages: don't feed them at all

Re: SPF with spamassassin

2008-03-11 Thread Matt Kettler
Tarak Ranjan wrote: Hi, I need to understand how to implement and test spf with spamassassin. I have not found much information on the internet. Can anybody please help with directions and/or practical tips. 1) install the perl module Mail::SPF, or Mail::SPF::Query 2) make sure this line

Re: Milter (spamassassin): timeout before data read

2008-03-11 Thread Sebastian Hoffmann
This was why I postet the settings from the sendmail-milter: "INPUT_MAIL_FILTER(`spamassassin', S=local:/var/spamd/spamass-milter.sock, F=,T=C:15m;S:4m;R:4m;E:10m') INPUT_MAIL_FILTER(`clmilter', S=local:/var/run/clamav/clmilter.socket, F=,T=S:4m;R:4m´) dnl define(`confINPUT_MAIL_FILTERS', `clmilt

Re: AOL Spam

2008-03-11 Thread Robert Schetterer
Tarak Ranjan schrieb: On Tue, 2008-03-11 at 09:20 +0100, Robert Schetterer wrote: Tarak Ranjan schrieb: Hi List, i'm getting lots of AOL spam, im attaching the mail , here is my SA log.. Mar 11 12:47:17 mail qmail-scanner[10609]: Clear:RC:0(64.12.137.4):SA:0(-0.6/4.0): 0.982348 859 [EMAIL PROT

Re: AOL Spam

2008-03-11 Thread Tarak Ranjan
On Tue, 2008-03-11 at 09:20 +0100, Robert Schetterer wrote: > Tarak Ranjan schrieb: > > Hi List, > > i'm getting lots of AOL spam, im attaching the mail , > > here is my SA log.. > > > > Mar 11 12:47:17 mail qmail-scanner[10609]: > > Clear:RC:0(64.12.137.4):SA:0(-0.6/4.0): 0.982348 859 [EMAIL PRO

SPF with spamassassin

2008-03-11 Thread Tarak Ranjan
Hi, I need to understand how to implement and test spf with spamassassin. I have not found much information on the internet. Can anybody please help with directions and/or practical tips. Thanks, / Tarak

RE: Spamassassin slow - how to enable logging of times

2008-03-11 Thread Paul J. Smith
Hi, Thanks. I can see these times in the log, but what I really want is a breakdown of the times for each individual text, i.e. mx check takes x seconds, test1 takes x seconds etc. This is so I can indentify the tests that take the most time, and perhaps disable them to improve throughput. -

Re: imeout-problem - additional information

2008-03-11 Thread Daryl C. W. O'Shea
On 11/03/2008 4:00 AM, Johann Spies wrote: > I have discovered a mistake in my exim configuration that caused exim > to hand over all sizes to spamassassin. This was the same on the old > and new servers, but apparently attributed greatly towards timeouts on > the new server. Correcting that mist

Re: AOL Spam

2008-03-11 Thread Robert Schetterer
Tarak Ranjan schrieb: Hi List, i'm getting lots of AOL spam, im attaching the mail , here is my SA log.. Mar 11 12:47:17 mail qmail-scanner[10609]: Clear:RC:0(64.12.137.4):SA:0(-0.6/4.0): 0.982348 859 [EMAIL PROTECTED] [EMAIL PROTECTED] Changing_careers_but_lack_the_right_Degree? <[EMAIL PROTECT

Re: AOL Spam

2008-03-11 Thread Robert Schetterer
Tarak Ranjan schrieb: Hi List, i'm getting lots of AOL spam, im attaching the mail , here is my SA log.. Mar 11 12:47:17 mail qmail-scanner[10609]: Clear:RC:0(64.12.137.4):SA:0(-0.6/4.0): 0.982348 859 [EMAIL PROTECTED] [EMAIL PROTECTED] Changing_careers_but_lack_the_right_Degree? <[EMAIL PROTECT

Re: imeout-problem - additional information

2008-03-11 Thread Johann Spies
I have discovered a mistake in my exim configuration that caused exim to hand over all sizes to spamassassin. This was the same on the old and new servers, but apparently attributed greatly towards timeouts on the new server. Correcting that mistake to make exim only hand messages smaller than 1

AOL Spam

2008-03-11 Thread Tarak Ranjan
Hi List, i'm getting lots of AOL spam, im attaching the mail , here is my SA log.. Mar 11 12:47:17 mail qmail-scanner[10609]: Clear:RC:0(64.12.137.4):SA:0(-0.6/4.0): 0.982348 859 [EMAIL PROTECTED] [EMAIL PROTECTED] Changing_careers_but_lack_the_right_Degree? <[EMAIL PROTECTED]> 1205219837.10611-0.