Parallelizing Spam Assassin

2009-07-30 Thread poifgh
Hi I was measuring how quickly could SA [spam assassin] process spams when several SA processes are run in parallel over separate mbox files. I used a 8 core machine. Below are the numbers when I forked different number of processes. Fork = 8; Rate = 57 msgs/sec Fork = 4; Rate = 44 msgs/sec Fo

Re: Number of rules

2009-07-30 Thread LuKreme
On Jul 30, 2009, at 18:12, "Dennis B. Hopp" wrote: Yeah I knew that. I have a few negative scoring rules but not many (outside of what might be in the misc rules sets I have). What is a good threshold for ham then? 5.0 is the score SA us designed for. It's a very good number in almost a

Re: Upgrading perl modules for SA

2009-07-30 Thread MySQL Student
Hi, >> check_mail: decoding2-get-file-types FAILED: 'file' utility >> (/usr/bin/file) failed, status=1 (256 ) at /usr/sbin/amavisd line > How's this a SA question? Yes, my apologies. I don't know enough about amavis yet, and thought it may be related to all the modules I upgraded, and not amavis

Re: Any one interested in using a proper forum?

2009-07-30 Thread Aaron Wolfe
On Thu, Jul 30, 2009 at 10:07 PM, John Rudd wrote: > On Thu, Jul 30, 2009 at 17:54, Aaron Wolfe wrote: >> On Thu, Jul 30, 2009 at 5:01 PM, ktn wrote: >>> >>> Actually I think Nabble is great for those of us who can't handle the >>> traffic >>> of the whole mailing list. >>> >> >> This list generat

alpha2? beta1?

2009-07-30 Thread Warren Togami
Could we please schedule a desired date to release the next pre-release of 3.3.0? Time based releases help us to stay on track. Warren Togami wtog...@redhat.com

Network Tests / Rule Files Directories

2009-07-30 Thread Stefan Malte Schumacher
Hello Before I begin with my questions, here is a description of my setup: I am using the latest version of SpamAssassin (3.2.5). My perl version is perl-5.8.3-32.9 - the distribution (Suse 9.1) is rather old, most of the packages I actually use are self-compiled. I use getmail 4.9.1 to fetch the

Re: Any one interested in using a proper forum?

2009-07-30 Thread John Rudd
On Thu, Jul 30, 2009 at 17:54, Aaron Wolfe wrote: > On Thu, Jul 30, 2009 at 5:01 PM, ktn wrote: >> >> Actually I think Nabble is great for those of us who can't handle the traffic >> of the whole mailing list. >> > > This list generates less than 50 messages per day on average: > >  http://gmane.or

Re: Number of rules

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 19:12 -0500, Dennis B. Hopp wrote: > Quoting RW : > > > Bear in mind that autolearning uses it's own version of the score that > > excludes whitelisting and Bayes, which means that very little ham will > > reach the -1 threshold unless you've added your own site-specific rule

Re: header_rewrite To: Field

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 16:50 -0500, Bryan Haase wrote: > I am currently using the header_rewrite for the subject. Wondering if > it is possible to use header_rewrite to change the To: field to a > sub-domain? Nope. Which part of the docs [1] isn't clear? See rewrite_header, first item in the Basic

Re: Any one interested in using a proper forum?

2009-07-30 Thread Aaron Wolfe
On Thu, Jul 30, 2009 at 5:01 PM, ktn wrote: > > Actually I think Nabble is great for those of us who can't handle the traffic > of the whole mailing list. > This list generates less than 50 messages per day on average: http://gmane.org/plot-rate.php/plot.png?group=gmane.mail.spam.spamassassin.g

Re: header_rewrite To: Field

2009-07-30 Thread David B Funk
On Thu, 30 Jul 2009, Bryan Haase wrote: > I am currently using the header_rewrite for the subject. Wondering if it is > possible to use header_rewrite to change the To: field to a sub-domain? > > > > Example > Mail comes in for u...@domain.com > > Spamassassin flags message as Spam, rewrites

Re: Number of rules

2009-07-30 Thread Dennis B. Hopp
Quoting RW : Bear in mind that autolearning uses it's own version of the score that excludes whitelisting and Bayes, which means that very little ham will reach the -1 threshold unless you've added your own site-specific rules for identifying it. Yeah I knew that. I have a few negative scor

Re: Number of rules

2009-07-30 Thread RW
On Thu, 30 Jul 2009 15:28:49 -0500 "Dennis B. Hopp" wrote: > I'm using maia-mailguard with spamassassin 3.2.5. For the most part > it seems to be working ok but I feel like too many messages are > hitting BAYES_00 (roughly 3.7% of all messages) 3.7% of all messages sounds far too *low*, mo

RE: Any one interested in using a proper forum?

2009-07-30 Thread Michael Hutchinson
Gidday Peter, > I don't know about anyone else, but I'm getting a bit hacked of with > this > 1980's style forum. I'm trying to get to the bottom of an SA issue and > this > list/forum thing is giving me a bigger headache than SA! It's a bit like that when you're using Mailing lists, just another

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: Received: from alside.com (localhost [220.231.127.15] (may be forged)) by alita.karotte.org (8.14.3/8.14.3/Debian-5) with SMTP id n6UBn1BJ021997 for ; Thu, 30 Jul 2009 13:49:05 +0200 That nonsense should be worth a point: header R

Re: Any one interested in using a proper forum?

2009-07-30 Thread LuKreme
On Jul 30, 2009, at 3:01 PM, ktn wrote: Actually I think Nabble is great for those of us who can't handle the traffic of the whole mailing list. I dunno, I looked at Nabble once when i was away from my computer and wanted to see quickly if there was a reply to a thread. The only word that

Re: Any one interested in using a proper forum?

2009-07-30 Thread John Rudd
On Thu, Jul 30, 2009 at 14:01, ktn wrote: > > Actually I think Nabble is great for those of us who can't handle the traffic > of the whole mailing list. If you're an RSS reader, I'd suggest getting an RSS feed from gmane. You can pick 4 types of feed: 1) full articles, 1 article per email 2) full

header_rewrite To: Field

2009-07-30 Thread Bryan Haase
I am currently using the header_rewrite for the subject. Wondering if it is possible to use header_rewrite to change the To: field to a sub-domain? Example Mail comes in for u...@domain.com Spamassassin flags message as Spam, rewrites the subject to include ***SPAM*** then rewrites

Re: Any one interested in using a proper forum?

2009-07-30 Thread Kenneth Porter
On Thursday, July 30, 2009 2:01 PM -0700 ktn wrote: Actually I think Nabble is great for those of us who can't handle the traffic of the whole mailing list. Or you could use a news reader pointed at Gmane's news server and subscribe to the SA newsgroups. A web interface is available here:

Re: Any one interested in using a proper forum?

2009-07-30 Thread ktn
Actually I think Nabble is great for those of us who can't handle the traffic of the whole mailing list. And I wonder, what has REALLY gotten better since the '80s? Google, cell phones, and Priuses is all I can think of off the top of my head. Powershell seems like Bash finally invented for Win

Re: Number of rules

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 15:28 -0500, Dennis B. Hopp wrote: > I'm using maia-mailguard with spamassassin 3.2.5. For the most part > it seems to be working ok but I feel like too many messages are > hitting BAYES_00 (roughly 3.7% of all messages) and BAYES_99 is only > hitting about 1.7%. I hav

Number of rules

2009-07-30 Thread Dennis B. Hopp
I'm using maia-mailguard with spamassassin 3.2.5. For the most part it seems to be working ok but I feel like too many messages are hitting BAYES_00 (roughly 3.7% of all messages) and BAYES_99 is only hitting about 1.7%. I have bayes autolearn on with ham being learned at -1.0 and spam le

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Anthony Cartmell
[sebast...@alita:~]$ host 220.231.127.15 15.127.231.220.in-addr.arpa domain name pointer localhost. this is your dns error, it does not make sense You are correct, but the problem is not in Sebastian's DNS - it is in the rDNS of the IP that contacted his MTA. Not quite the same thing, bu

Re: Upgrading perl modules for SA

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 14:36 -0400, Alex wrote: > I recently upgraded perl from 5.6.0 to perl-5.10.0, along with all the > modules necessary for sa-3.2.5 and amavisd-new (an old version still). > I'm now having a problem that I really don't understand: > > Jul 30 14:24:30 bigship amavis[1757]: (017

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Benny Pedersen wrote: On Thu, July 30, 2009 17:41, Sebastian Wiesinger wrote: * Benny Pedersen [2009-07-30 17:37]: On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: the attached mail is whitelisted because 220.231.127.15 resolves to localhost. Am I doing somethin

Re: Upgrading perl modules for SA

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, MySQL Student wrote: Jul 30 14:24:30 bigship amavis[1757]: (01757-175) TROUBLE in check_mail: decoding2-get-file-types FAILED: 'file' utility (/usr/bin/file) failed, status=1 (256 ) at /usr/sbin/amavisd line 4019. Jul 30 14:24:30 bigship amavis[1757]: (01757-175) PRESERVING

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 16:46 +0200, Sebastian Wiesinger wrote: > * Matus UHLAR - fantomas [2009-07-30 16:35]: > > On 30.07.09 14:03, Sebastian Wiesinger wrote: > > > I was under the impression that whitelist_from_rcvd checks if the > > > reverse lookup is forged. But still with the following rule

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Benny Pedersen
On Thu, July 30, 2009 17:41, Sebastian Wiesinger wrote: > * Benny Pedersen [2009-07-30 17:37]: >> >> On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: >> >> > the attached mail is whitelisted because 220.231.127.15 resolves to >> >> > localhost. Am I doing something wrong or is this a bug?

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 09:39 -0700, John Hardin wrote: > On Thu, 30 Jul 2009, Jeff Mincy wrote: > > Processing locally generated email that contain spam URLs through > > SpamAssassin is not a particularly good idea. If you have Bayes > > enabled then you are training your Bayes that spam URLs and

Upgrading perl modules for SA

2009-07-30 Thread MySQL Student
Hi, I recently upgraded perl from 5.6.0 to perl-5.10.0, along with all the modules necessary for sa-3.2.5 and amavisd-new (an old version still). I'm now having a problem that I really don't understand: Jul 30 14:24:30 bigship amavis[1757]: (01757-175) TROUBLE in check_mail: decoding2-get-file-ty

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Jeff Mincy wrote: From: Sebastian Wiesinger Date: Thu, 30 Jul 2009 17:48:09 +0200 * John Hardin [2009-07-30 17:39]: >> Sendmail -> Procmail -> SA (spamc) > > Cool, that should be simple. > > Can you send: > > (1) the Received: headers from an email gen

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Jeff Mincy
From: Sebastian Wiesinger Date: Thu, 30 Jul 2009 17:48:09 +0200 * John Hardin [2009-07-30 17:39]: >> Sendmail -> Procmail -> SA (spamc) > > Cool, that should be simple. > > Can you send: > > (1) the Received: headers from an email generated on that box, and >

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
* John Hardin [2009-07-30 17:39]: >> Sendmail -> Procmail -> SA (spamc) > > Cool, that should be simple. > > Can you send: > > (1) the Received: headers from an email generated on that box, and > > (2) the procmail stanza where you call SA? I could create a procmail rule that excludes local mail

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Benny Pedersen wrote: On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: the attached mail is whitelisted because 220.231.127.15 resolves to localhost. Am I doing something wrong or is this a bug? non working dns is not a spamassassin bug How do you get "non-worki

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
* Benny Pedersen [2009-07-30 17:37]: > > On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: > >> > the attached mail is whitelisted because 220.231.127.15 resolves to > >> > localhost. Am I doing something wrong or is this a bug? > > non working dns is not a spamassassin bug [sebast...@al

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: * John Hardin [2009-07-30 17:24]: On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: So how can I whitelist mails which come from the server where my SpamAssassin is running? Tell your glue layer that messages originating on that server should n

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Benny Pedersen
On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: >> > the attached mail is whitelisted because 220.231.127.15 resolves to >> > localhost. Am I doing something wrong or is this a bug? non working dns is not a spamassassin bug >> a bug apparently. > JFYI, I created a bugreport for this: >

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Benny Pedersen
On Thu, July 30, 2009 16:46, Sebastian Wiesinger wrote: > * Matus UHLAR - fantomas [2009-07-30 16:35]: >> On 30.07.09 14:03, Sebastian Wiesinger wrote: >> > I was under the impression that whitelist_from_rcvd checks if the >> > reverse lookup is forged. But still with the following rule >> > >> >

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
* John Hardin [2009-07-30 17:24]: > On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: > >> So how can I whitelist mails which come from the server where my >> SpamAssassin is running? > > Tell your glue layer that messages originating on that server should not > be passed to SA at all. > > If yo

Re: How to Disable ALL CAPS OPTION

2009-07-30 Thread Luis Croker
You can assing the value of that rule in /path-spamassassin/local.cf. For example I have it in /usr/local/etc/mail/spamassassin/local.cf: score SUBJ_ALL_CAPS 0.2 Regards. On Thu, 2009-07-30 at 17:36 +0530, ganesh payelkar wrote: > > Dear All, > > >Kindly help me to

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: So how can I whitelist mails which come from the server where my SpamAssassin is running? Tell your glue layer that messages originating on that server should not be passed to SA at all. If you describe how SA is glued to your MTA we might be

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
* Matus UHLAR - fantomas [2009-07-30 16:35]: > On 30.07.09 14:03, Sebastian Wiesinger wrote: > > I was under the impression that whitelist_from_rcvd checks if the > > reverse lookup is forged. But still with the following rule > > > > whitelist_from_rcvd *...@alita.karotte.org localhost > > > >

Re: How to Disable ALL CAPS OPTION

2009-07-30 Thread Benny Pedersen
On Thu, July 30, 2009 14:06, ganesh payelkar wrote: > Dear All, thats not very dear > Kindly help me to disable ALL CAPS option in spamassassin explain more in detail what CAPS is in spamassassin -- xpoint

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
* Matus UHLAR - fantomas [2009-07-30 16:35]: > On 30.07.09 14:03, Sebastian Wiesinger wrote: > > I was under the impression that whitelist_from_rcvd checks if the > > reverse lookup is forged. But still with the following rule > > > > whitelist_from_rcvd *...@alita.karotte.org localhost > > > >

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Matus UHLAR - fantomas
On 30.07.09 14:03, Sebastian Wiesinger wrote: > I was under the impression that whitelist_from_rcvd checks if the > reverse lookup is forged. But still with the following rule > > whitelist_from_rcvd *...@alita.karotte.org localhost > > the attached mail is whitelisted because 220.231.127.15 reso

Timed Out

2009-07-30 Thread Sasa
Hi, in log file I have this error with SA-3.2.5 and MySQL-5.0.77 (with amavisd-new, postfix, maia): Jul 23 11:03:35 mail amavis[6329]: (06329-02-2) SA TIMED OUT, backtrace: at /usr/lib/perl5/vendor_perl/5.10.0/Mail/SpamAssassin/BayesStore/MySQL.pm line 492\n\teval {...} called at /usr/lib/per

Re: How to Disable ALL CAPS OPTION

2009-07-30 Thread McDonald, Dan
On Thu, 2009-07-30 at 18:29 +0530, ganesh payelkar wrote: As per your instruction i did same setting but it is not working, Kindly let me know any other setting. > On Thu, Jul 30, 2009 at 5:52 PM, Daniel J McDonald wrote: > On Thu, 2009-07-30 at 17:49 +0530, ganesh payelkar wrote: >

Re: How to Disable ALL CAPS OPTION

2009-07-30 Thread McDonald, Dan
On Thu, 2009-07-30 at 17:36 +0530, ganesh payelkar wrote: > > Dear All, > > >Kindly help me to disable ALL CAPS option in spamassassin I assume you are talking about SUBJ_ALL_CAPS. just add to your local rules: score SUBJ_ALL_CAPS 0 Your local rules could be in /etc/mail/spamassa

How to Disable ALL CAPS OPTION

2009-07-30 Thread ganesh payelkar
Dear All, Kindly help me to disable ALL CAPS option in spamassassin Regards, Ganesh

Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
Hi, I was under the impression that whitelist_from_rcvd checks if the reverse lookup is forged. But still with the following rule whitelist_from_rcvd *...@alita.karotte.org localhost the attached mail is whitelisted because 220.231.127.15 resolves to localhost. Am I doing something wrong or is

Re: Should I be worried about this?

2009-07-30 Thread Justin Mason
sounds like a bug in sa-compile; it would probably mean one of the SOUGHT rules will not fire on its input. minor issue, but annoying. could you run "sa-compile --debug --keep-tmps", find the output dir, and post the stdout/stderr output and the /tmp dir to a bug on the bugzilla? thanks! --j. O