Re: Is HAS_X_OUTGOING_SPAM_STAT a useful indicator?

2021-04-25 Thread Alan
On 2021-04-25 19:31, Bill Cole wrote: On 25 Apr 2021, at 18:40, Alan wrote: We run cPanel servers and scan every outbound message with SA in order to reduce the amount of garbage that comes through website contact forms. That's good. However, in a default cPanel configuration, HAS_X_OUTGOI

Re: Is HAS_X_OUTGOING_SPAM_STAT a useful indicator?

2021-04-25 Thread Bill Cole
On 25 Apr 2021, at 18:40, Alan wrote: We run cPanel servers and scan every outbound message with SA in order to reduce the amount of garbage that comes through website contact forms. That's good. However, in a default cPanel configuration, HAS_X_OUTGOING_SPAM_STAT scores a whopping 2.3. I'm

Is HAS_X_OUTGOING_SPAM_STAT a useful indicator?

2021-04-25 Thread Alan
We run cPanel servers and scan every outbound message with SA in order to reduce the amount of garbage that comes through website contact forms. However, in a default cPanel configuration, HAS_X_OUTGOING_SPAM_STAT scores a whopping 2.3. I'm not sure what the distribution default is but that's

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread RW
On Sun, 25 Apr 2021 13:34:16 -0400 Steve Dondley wrote: > I’m experimenting with writing my own rules. My machines are using SA > 3.4.4 so I want to use the 3.4.4 rules. There is only one set of rules, "if" statements handle any differences.

Re: TXREP recommendation status, default status?

2021-04-25 Thread Greg Troxel
RW writes: > On Sun, 25 Apr 2021 11:48:06 -0400 > Greg Troxel wrote: > >> I recently went thrugh my setup and read a bunch of web pages, and >> decided to try TXREP.My summary comments after a few weeks: >> >> It seems to be working quite well. >> >> Outbound processing is really usefu

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Steve Dondley
On 2021-04-25 01:47 PM, Henrik K wrote: On Sun, Apr 25, 2021 at 01:28:31PM -0400, Steve Dondley wrote: > mass-check -c parameter expects to find every config file in that single > directory. Now it's missing spamassassin updates and specifically > 20_aux_tlds.cf from there. You could copy it

Re: TXREP recommendation status, default status?

2021-04-25 Thread RW
On Sun, 25 Apr 2021 11:48:06 -0400 Greg Troxel wrote: > I recently went thrugh my setup and read a bunch of web pages, and > decided to try TXREP.My summary comments after a few weeks: > > It seems to be working quite well. > > Outbound processing is really useful; people I mail to get n

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Steve Dondley
spamassassin -V reports: "SpamAssassin version 3.4.4" I imagine I have to checkout an older 3.4.4 point version from SVN and use the mass-check command from that. It's been ages since I've used SVN. How can I get to the older version via SVN? I solved this by downloading version 3.4.4 of S

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Henrik K
On Sun, Apr 25, 2021 at 01:28:31PM -0400, Steve Dondley wrote: > > > mass-check -c parameter expects to find every config file in that single > > directory. Now it's missing spamassassin updates and specifically > > 20_aux_tlds.cf from there. You could copy it to /etc/spamassassin > > temporaril

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Axb
On 4/25/21 7:34 PM, Steve Dondley wrote: On Apr 25, 2021, at 1:31 PM, Axb wrote: What are you trying to do? run masscheck for your rules or for the SA project? I’m experimenting with writing my own rules. My machines are using SA 3.4.4 so I want to use the 3.4.4 rules. this may give yo

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Steve Dondley
> On Apr 25, 2021, at 1:31 PM, Axb wrote: > > What are you trying to do? > run masscheck for your rules or for the SA project? I’m experimenting with writing my own rules. My machines are using SA 3.4.4 so I want to use the 3.4.4 rules.

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Axb
What are you trying to do? run masscheck for your rules or for the SA project? On 4/25/21 7:28 PM, Steve Dondley wrote: mass-check -c parameter expects to find every config file in that single directory.  Now it's missing spamassassin updates and specifically 20_aux_tlds.cf from there.  You co

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Steve Dondley
mass-check -c parameter expects to find every config file in that single directory. Now it's missing spamassassin updates and specifically 20_aux_tlds.cf from there. You could copy it to /etc/spamassassin temporarily, but I'd rather make a completely separate directory that should include

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Henrik K
On Sun, Apr 25, 2021 at 07:38:44PM +0300, Henrik K wrote: > On Sun, Apr 25, 2021 at 12:17:51PM -0400, Steve Dondley wrote: > > I'm running this command: > > > > ./mass-check -n --rules='^LOCAL_AWK_INTRO' -o ham:dir:/spam/Maildir/.INBOX* > > -c=/etc/spamassassin/ | grep '. 1' > > > > > > Everyth

Re: Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Henrik K
On Sun, Apr 25, 2021 at 12:17:51PM -0400, Steve Dondley wrote: > I'm running this command: > > ./mass-check -n --rules='^LOCAL_AWK_INTRO' -o ham:dir:/spam/Maildir/.INBOX* > -c=/etc/spamassassin/ | grep '. 1' > > > Everything appears to work as expected but I'm getting this warning/error > when

Getting "config: registryboundaries: no tlds defined, need to run sa-update" message when running mass-check

2021-04-25 Thread Steve Dondley
I'm running this command: ./mass-check -n --rules='^LOCAL_AWK_INTRO' -o ham:dir:/spam/Maildir/.INBOX* -c=/etc/spamassassin/ | grep '. 1' Everything appears to work as expected but I'm getting this warning/error when I do: "config: registryboundaries: no tlds defined, need to run sa-updat

Wrong languages file.

2021-04-25 Thread RW
I noticed that there is a languages file in /usr/local/share/spamassassin/ (DEF_RULES_DIR) installed by the SA package as well as a newer and larger version installed by sa-update. When I look at the debug it looks like the wrong one is being used: textcat: loading languages file /usr/local/

Re: Wrong languages file.

2021-04-25 Thread Henrik K
On Sun, Apr 25, 2021 at 04:55:43PM +0100, RW wrote: > > I noticed that there is a languages file in > /usr/local/share/spamassassin/ (DEF_RULES_DIR) installed by the SA > package as well as a newer and larger version installed by sa-update. > > When I look at the debug it looks like the wrong

Re: Two different machines running same versoin of SA giving different scores for scores that are commented out

2021-04-25 Thread John Hardin
On Sun, 25 Apr 2021, John Hardin wrote: On Sun, 25 Apr 2021, Steve Dondley wrote: On 2021-04-25 01:00 AM, John Hardin wrote: On Sun, 25 Apr 2021, Steve Dondley wrote: That rule has this line in the 72_active.cf file: Look in 72_scores.cf and compare the modification dates on that file.

TXREP recommendation status, default status?

2021-04-25 Thread Greg Troxel
I recently went thrugh my setup and read a bunch of web pages, and decided to try TXREP.My summary comments after a few weeks: It seems to be working quite well. Outbound processing is really useful; people I mail to get negative points on inbound messages. I worry less about FPs fr

Re: Two different machines running same versoin of SA giving different scores for scores that are commented out

2021-04-25 Thread John Hardin
On Sun, 25 Apr 2021, Steve Dondley wrote: On 2021-04-25 01:00 AM, John Hardin wrote: On Sun, 25 Apr 2021, Steve Dondley wrote: That rule has this line in the 72_active.cf file: Look in 72_scores.cf and compare the modification dates on that file. The date is Jan 30, 2020. I'm running SA 3

Re: Two different machines running same versoin of SA giving different scores for scores that are commented out

2021-04-25 Thread Steve Dondley
On 2021-04-25 10:19 AM, RW wrote: On Sun, 25 Apr 2021 00:40:59 -0400 Steve Dondley wrote: On both machines, /usr/share/spasmassassin/72_active.cf has this rule which is commented out: This is the legacy rule directory from before sa-update existed. Have you not got another directory popu

Re: Two different machines running same versoin of SA giving different scores for scores that are commented out

2021-04-25 Thread Steve Dondley
On 2021-04-25 05:57 AM, Reindl Harald wrote: Am 25.04.21 um 07:09 schrieb Steve Dondley: That rule has this line in the 72_active.cf file: Look in 72_scores.cf and compare the modification dates on that file. Their scores as of today (saturday): 72_scores.cf:score FSL_BULK_SIG   

Re: Two different machines running same versoin of SA giving different scores for scores that are commented out

2021-04-25 Thread RW
On Sun, 25 Apr 2021 00:40:59 -0400 Steve Dondley wrote: > > On both machines, /usr/share/spasmassassin/72_active.cf has this rule > which is commented out: > This is the legacy rule directory from before sa-update existed. Have you not got another directory populated by sa-update?

Re: Why single periods in regex in spamassassin rules?

2021-04-25 Thread Kevin A. McGrail
Completely agree with Joe. Normally if we did that we saw some situation where they were using something other than a space perhaps a pipe or a plus or a non-printable character or something else. So we made the rest of the role like that to future proof it against other variants of the same spam.

Re: Why single periods in regex in spamassassin rules?

2021-04-25 Thread Joe Quinn
On 4/23/21 2:52 PM, David B Funk wrote: On Fri, 23 Apr 2021, Steve Dondley wrote: I'm looking at KAM.cf. There is this rule: body    __KAM_WEB2  /INDIA based IT|indian.based.website|certified.it.company/i I'm wondering if there is a good reason why a singe period is used instead of somethi