Re: --timeout-child=secs

2010-10-28 Thread Karsten Bräckelmann
OMG. Thanks a ton for this perfect example why HTML mail sucks bleep. Not only did your $MUA [1] allow you to write your response indented as if it where written by me. It also managed to gray-out the first line of your response. Not the second one, mind you. And injected an HTML br tag arbitraril

Re: --timeout-child=secs

2010-10-28 Thread Keith De Souza
>>With Debian, it's /etc/default/spamassassin -- or, again, the init >>script directly. Also see my previous post. It *has* been changed in one >>of these places. Excellent and thanks again :-) Keith

Re: --timeout-child=secs

2010-10-28 Thread Keith De Souza
2010/10/29 Karsten Bräckelmann > On Fri, 2010-10-29 at 00:17 +0100, Keith De Souza wrote: > > I'm pretty new to spamassassin and recently been asked to change the > > flag timeout-child to 180 seconds, its currently set to to 60. > > >>The spamd default is 300. See 'man spamd'. Why has this been

Re: --timeout-child=secs

2010-10-28 Thread Karsten Bräckelmann
On Fri, 2010-10-29 at 00:28 +0100, Keith De Souza wrote: > > On 29 October 2010 00:19, Gary Smith wrote: > > > Check /etc/sysconfig/spamassassin config file > Thanks for your swift response, unfortunately I dont seem to have the > sysconfig directory. > If it helps, the linux distro running is Deb

Re: --timeout-child=secs

2010-10-28 Thread Karsten Bräckelmann
On Fri, 2010-10-29 at 00:17 +0100, Keith De Souza wrote: > I'm pretty new to spamassassin and recently been asked to change the > flag timeout-child to 180 seconds, its currently set to to 60. The spamd default is 300. See 'man spamd'. Why has this been changed in the first place? Btw, whoever kn

Re: --timeout-child=secs

2010-10-28 Thread Keith De Souza
>>On 29 October 2010 00:19, Gary Smith wrote: > >>Check /etc/sysconfig/spamassassin config file Hi Gary, Thanks for your swift response, unfortunately I dont seem to have the sysconfig directory. If it helps, the linux distro running is Debian Lenny. Any more thoughts? Many thanks Keith

--timeout-child=secs

2010-10-28 Thread Keith De Souza
Hi Users, == SpamAssassin version 3.2.5 running on Perl version 5.10.0 == I'm pretty new to spamassassin and recently been asked to change the flag timeout-child to 180 seconds, its currently set to to 60. I've googled this and some say that this can be changed in /etc/conf.d/spamd how

Re: SpamAssassin service file missing after installation

2010-10-28 Thread Benny Pedersen
On ons 27 okt 2010 10:22:16 CEST, Nigel Frankcom wrote Apologies if this is teaching you to suck eggs: In CPAN type: install Digest::SHA dont do this on centos ! make a rpm from cpan is fine, but dont install direct from cpan if its missing point this out on centos repo to have one of the ma

Re: SpamAssassin service file missing after installation

2010-10-28 Thread Martin Gregorie
On Thu, 2010-10-28 at 08:12 -0700, John Hardin wrote: > On Thu, 28 Oct 2010, Martin Gregorie wrote: > > > RH has provided /etc/init.d as a symlink to /etc/rc.d/init.d for quite > > some time now - possibly from the start of the Fedora distributions. I > > don't know why since it saves so little ty

Re: Collecting IP reputation data from many people

2010-10-28 Thread David F. Skoll
On Thu, 28 Oct 2010 12:43:51 -0400 dar...@chaosreigns.com wrote: > On 10/28, David F. Skoll wrote: > > Perhaps you have heard of a recent phenomenon called "a botnet"? > > Just what security do you think TCP really buys you? > Requiring them to use the botnet. In other words: No security at all.

Re: SpamAssassin service file missing after installation

2010-10-28 Thread Jari Fredriksson
On 28.10.2010 18:12, John Hardin wrote: >> >> RH has provided /etc/init.d as a symlink to /etc/rc.d/init.d for quite >> some time now - possibly from the start of the Fedora distributions. I >> don't know why since it saves so little typing. > > More likely to reduce cognitive distruption for thos

Re: Collecting IP reputation data from many people

2010-10-28 Thread David F. Skoll
On Thu, 28 Oct 2010 13:56:08 -0230 "Lawrence @ Rogers" wrote: > What reporting system do you use? Although our Perl client library is free, the server-side code is proprietary. > and how does one avail of the data it provides? We sell rsync access to our lists. We also provide it for free to

Re: Collecting IP reputation data from many people

2010-10-28 Thread Darxus
On 10/28, David F. Skoll wrote: > Perhaps you have heard of a recent phenomenon called "a botnet"? Just > what security do you think TCP really buys you? Requiring them to use the botnet. > And what kind of account registration do you envision that lets you > easily register "millions" of accoun

Re: Collecting IP reputation data from many people

2010-10-28 Thread Lawrence @ Rogers
On 28/10/2010 1:45 PM, David F. Skoll wrote: OK, On a somewhat less sarcastic note: One reason we didn't use TCP is that it simply doesn't scale. If you have clients that open a TCP connection, do a report, and then close the TCP connection, there's a huge bandwidth penalty. On the other hand

Re: Collecting IP reputation data from many people

2010-10-28 Thread David F. Skoll
OK, On a somewhat less sarcastic note: One reason we didn't use TCP is that it simply doesn't scale. If you have clients that open a TCP connection, do a report, and then close the TCP connection, there's a huge bandwidth penalty. On the other hand, if your clients maintain persistent TCP conne

Re: Collecting IP reputation data from many people

2010-10-28 Thread David F. Skoll
On Thu, 28 Oct 2010 11:19:50 -0400 dar...@chaosreigns.com wrote: > Having nothing to prevent someone from registering millions of > accounts and spewing data from a single IP is not acceptable to me. Umm... Perhaps you have heard of a recent phenomenon called "a botnet"? Just what security do y

RE: SA 3.3.1 and NetAddr::IP 4.034

2010-10-28 Thread Giampaolo Tomassoni
> > If you confirm this, I can take care of reporting the bug to > upstream. > > Please do so, thanks! I'm too late: Steve Huff already did it... See: https://rt.cpan.org/Public/Bug/Display.html?id=62521 . Giampaolo > Mark

Re: SA 3.3.1 and NetAddr::IP 4.034

2010-10-28 Thread Mark Martinec
> > Looks like a but in NetAddr::IP 4.034, it forgets to adjust the CIDR > > mask when converting an IPv4 address to an IPv6 notation: s/but/BUG/:) > > correct (NetAddr-IP-4.033): > > $ perl -le 'use NetAddr::IP; print NetAddr::IP->new6("127.0.0.0/8")' > > 0:0:0:0:0:0:7F00:0/104 > > > >

RE: SA 3.3.1 and NetAddr::IP 4.034

2010-10-28 Thread Giampaolo Tomassoni
> Mmmh. > > In fact it seems they bobbed few lines from 4.033... > > You sure new6 may be used with IPv4 address, huh? > > If you confirm this, I can take care of reporting the bug to upstream. > > Giampaolo Aha, you're too fast! ;) Giampaolo > > > > Mark

Re: Collecting IP reputation data from many people

2010-10-28 Thread Darxus
On 10/28, Dave O'Neill wrote: > >>http://www.mimedefang.org/reputation > You're discounting it entirely because it uses UDP? Are you sure > you read the RFC? > > The sender IP address is irrelevant -- it's not used for anything at > all. Reports are authenticated with a prearranged username and

RE: SA 3.3.1 and NetAddr::IP 4.034

2010-10-28 Thread Giampaolo Tomassoni
> > Looking into it... > > > > I know NetAddr::IP recently got a re-design and probably SA have to > cope > > > with this. > > Looks like a but in NetAddr::IP 4.034, it forgets to adjust the CIDR > mask > when converting an IPv4 address to an IPv6 notation: > > correct (NetAddr-IP-4.033): > $

Re: SpamAssassin service file missing after installation

2010-10-28 Thread John Hardin
On Thu, 28 Oct 2010, Martin Gregorie wrote: On Thu, 2010-10-28 at 06:06 -0700, John Hardin wrote: On Thu, 28 Oct 2010, Gnanam wrote: So, to have SpamAssassin as part of my system service, can I copy it to /etc/init.d/ ... ./. Caveat: I've been away from RH for a while - have they

Re: Collecting IP reputation data from many people

2010-10-28 Thread Dave O'Neill
On Fri, Oct 22, 2010 at 02:32:17PM -0400, dar...@chaosreigns.com wrote: On 10/22, Henrik K wrote: You should check out this draft: http://www.mimedefang.org/reputation (An IETF draft of a Reputation Reporting Protocol.) Yup, thank you. It's interesting that the ASRG list didn't mention this.

Re: SA 3.3.1 and NetAddr::IP 4.034

2010-10-28 Thread Mark Martinec
> Looking into it... > > I know NetAddr::IP recently got a re-design and probably SA have to cope > > with this. Looks like a but in NetAddr::IP 4.034, it forgets to adjust the CIDR mask when converting an IPv4 address to an IPv6 notation: correct (NetAddr-IP-4.033): $ perl -le 'use NetAddr::I

Re: SA 3.3.1 and NetAddr::IP 4.034

2010-10-28 Thread Mark Martinec
On Thursday 28 October 2010 14:29:41 Giampaolo Tomassoni wrote: > this morning Gentoo people liked to upgrade NetAddr::IP from 4.033 to > 4.034. > > People with "stable" systems (a Gentoo feature) actually runs SpamAssassin > 3.3.1. > > Soon after upgrading NetAddr::IP, a lint run reported these:

Re: SpamAssassin service file missing after installation

2010-10-28 Thread Martin Gregorie
On Thu, 2010-10-28 at 06:06 -0700, John Hardin wrote: > On Thu, 28 Oct 2010, Gnanam wrote: > > > So, to have SpamAssassin as part of my system service, can I copy it to > > /etc/init.d/ ... > ./. > Caveat: I've been away from RH for a while - have they moved from > /etc/rc.d/init.d to /

Re: SpamAssassin service file missing after installation

2010-10-28 Thread Gnanam
John Hardin wrote: > > I've been away from RH for a while - have they moved from /etc/rc.d/init.d > to /etc/init.d ? > Thanks for your comments. /etc/rc.d/init.d is the actual physical directory path. /etc/init.d is a symbolic link of /etc/rc.d/init.d Example listing from /etc directory shown

Re: SpamAssassin service file missing after installation

2010-10-28 Thread John Hardin
On Thu, 28 Oct 2010, Gnanam wrote: So, to have SpamAssassin as part of my system service, can I copy it to /etc/init.d/ ... Please verify that directory. RedHat and RedHat-derived distributions have historically used /etc/rc.d/init.d to store init scripts and use chkconfig to manage the syml

Re: Bad pattern in HELO_DYNAMIC_IPADDR check?

2010-10-28 Thread John Hardin
On Thu, 28 Oct 2010, Angel L. Mateo wrote: Is there any reason for this pattern being so general? Or this is a bug? IPv4 addresses are numbers (uint4 to be precise), dotted quad notation is just the most-human-readable way to represent them. It is valid to represent an IPv4 address as a 32-

SA 3.3.1 and NetAddr::IP 4.034

2010-10-28 Thread Giampaolo Tomassoni
Hi, this morning Gentoo people liked to upgrade NetAddr::IP from 4.033 to 4.034. People with "stable" systems (a Gentoo feature) actually runs SpamAssassin 3.3.1. Soon after upgrading NetAddr::IP, a lint run reported these: warn: netset: cannot include 0:0:0:0:0:0:0:1/128 as it has already been

Re: SpamAssassin service file missing after installation

2010-10-28 Thread Gnanam
Henrik K wrote: > > Look at Mail-SpamAssassin-3.3.1/spamd/README & redhat-rc-script.sh > Thanks for reminding me to check these 2 files. So, to have SpamAssassin as part of my system service, can I copy it to /etc/init.d/ using: 'cp /usr/local/Mail-SpamAssassin-3.3.1/spamd/redhat-rc-script.

Bad pattern in HELO_DYNAMIC_IPADDR check?

2010-10-28 Thread Angel L. Mateo
Hello, We are having a problema with one of our users that all his email was marked as spam. The problem is that all his emails has the HELO_DYNAMIC_IPADDR (or HELO_DYNAMIC_IPADDR2) check, because spamassassin thinks that the connection used the IP address in the helo commando, but not. T

Re: Spammassassin is slow on poll_dns_idle and tests_pri_500 tests

2010-10-28 Thread Matus UHLAR - fantomas
> On Sunday 24 October 2010 14:34:04 escalera wrote: > > Fol all messages, spamassassin takes 14++ seconds. Version: 3.3.1 > > Debuging it, the times are: > > poll_dns_idle: 13355 (93.8%), > > As you can see, the most time is on poll_dns_idle and tests_pri_500 tests. > > Any idea that what append