Re: DKIM invalid

2020-02-05 Thread Chris Conn
age a few plugins of my own for installation on other systems and hence you mangle the spamassassin package itself? oh my lord.. [root@mail-gw:~]$ rpm -qa | grep spamassassin | sort spamassassin-3.4.4-1.fc31.x86_64 spamassassin-bogofilter-1.0-8.fc31.20200204.rh.noarch spamassassin-clamav-

Re: DKIM invalid

2020-02-05 Thread Chris Conn
smart people would have opened koji, enter spamasssin,, select the F31 package from https://koji.fedoraproject.org/koji/packageinfo?packageID=554 and downloaded https://kojipkgs.fedoraproject.org//packages/spamassassin/3.4.4/1.fc31/x86_64/spamassassin-3.4.4-1.fc31.x86_64.rpm or just used "dnf

Re: DKIM invalid

2020-02-05 Thread Chris Conn
On 2/4/2020 5:12 PM, Chris Conn wrote: On 2/4/2020 5:09 PM, Damian wrote: https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7785 maybe? Hello, You were correct; using 3.4.3  on fedora with milter-spamc, pretty much every email would match DKIM_INVALID when handled by the MTA and

Re: DKIM invalid

2020-02-04 Thread Chris Conn
On 2/4/2020 5:09 PM, Damian wrote: https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7785 maybe? Hello, HM, very possible.  I am using milter-spamc but the behaviour might be similar.  I will look to build 3.4.4 and see if I get better DKIM returns.  Thanks for this. Chris I am runni

DKIM invalid

2020-02-04 Thread Chris Conn
Hello, I am running SA3.4.3 and I noticed that I am scoring DKIM_INVALID on pretty much each and every email handled by the MTA.  However, if I take the raw .eml and pipe it through spamassassin -t -D, I receive a DKIM_VALID score. Any tips on how I could go about to troubleshoot why the MTA

Re: rpm of centos

2020-01-10 Thread Chris Conn
On 1/9/2020 10:10 PM, Amir Caspi wrote: On Jan 9, 2020, at 6:59 PM, Rick Gutierrez wrote: Hi everyone, someone from the list who can share the rpm of the latest version of spamassassin for centos 7 and 6 of x64, I want to update to the latest version and I can't find the rpm. SA 3.4.2 is

Re: Spamhaus Technology contributions to SpamAssassin

2019-07-03 Thread Chris Conn
On 7/3/2019 5:43 AM, Riccardo Alfieri wrote: The plugin works with our Data Query Service (DQS). The DQS provides you with additional feeds: Zero Reputation Domain & AuthBL, and it also receives updates in 'realtime.' This last point is key, because, as you can see in the latest Virus Bulle

Re: plugin: eval failed: __alarm__ignore__(xxx) how to troubleshoot

2018-04-20 Thread Chris Conn
Yeah, because 3.4.x implements maxhits. So, should I disable the __GENERATE_LEADS family for < 3.4.0? I suspect it would be prudent, but I am surprised the other tflags=multiple rules aren't also problematic in the same manner... Hello, I don`t think I am in a position to comment on whe

Re: plugin: eval failed: __alarm__ignore__(xxx) how to troubleshoot

2018-04-20 Thread Chris Conn
WTF? If tflags=multiple is supported at all, it should behave properly (i.e. not hitting over and over on the *same bit of text*). maxhits was implemented after 3.3.1; is it possible that there are just a *lot* of instances of "your business" in that test message, and it's simply hitting all

Re: plugin: eval failed: __alarm__ignore__(xxx) how to troubleshoot

2018-04-20 Thread Chris Conn
On 4/18/2018 10:32 AM, Benny Pedersen wrote: Chris Conn skrev den 2018-04-18 16:00: this is a relatively old install, SA 3.3.1 on Centos6 (stock RPMs) maybe solved in centos7 ? i do not use precompiled problems Hello, I believe I found the issue.  On my Centos6 boxes with SA 3.3.1 (the

Re: plugin: eval failed: __alarm__ignore__(xxx) how to troubleshoot

2018-04-18 Thread Chris Conn
maybe solved in centos7 ? i do not use precompiled problems Hello, I guess I will soon find out.  Not using bayes or anything, most plugins are disabled actually.  Just trying to figure out which one is misbehaving, as spamd grows to 4Gb of resident memory usage, at 100% CPU, and eventual

plugin: eval failed: __alarm__ignore__(xxx) how to troubleshoot

2018-04-18 Thread Chris Conn
Hello, We recently started having problems on a few servers with spamd processes starting to hog RAM (3G++ per child) and we are noting some timeouts in the logs.  as well,  we are seeing this msg Apr 18 08:48:24 spamd[2451]: plugin: eval failed: __alarm__ignore__(156) Apr 18 08:58:25 spamd[1

Re: spamc/spamd using IPv6?

2011-01-17 Thread Chris Conn
Hello, Why use the link-local address? Have a look at this thread; http://www.mail-archive.com/users@spamassassin.apache.org/msg58685.html Link local is all I have ;) I know next to nothing about v6, but it is coming... so testing things. Off topic: I have currently one fixed IPv4 addres

Re: spamc/spamd using IPv6?

2011-01-17 Thread Chris Conn
On 2011-01-15 14:47, Jari Fredriksson wrote: I just assigned records to my DNS, and spamc/spamd fails. I have a DNS alias spamd for a server. jarif@lancaster:~$ host spamd spamd.fredriksson.dy.fi is an alias for lancaster.fredriksson.dy.fi. lancaster.fredriksson.dy.fi has address 10.123.2

Re: comparing From and Reply-To:

2010-11-02 Thread Chris Conn
On 2010-11-02 17:01, Lawrence @ Rogers wrote: As a sort of follow up to my last message, I was wondering how complicated it is to write a rule that would compare the From: and Reply-To: headers, and set it to 0.001 or make it a meta rule that could be used in conjunction with others? Would this

Re: Increase in scan time from 3.3 to 3.3.1

2010-06-11 Thread Chris Conn
In a followup to http://www.gossamer-threads.com/lists/spamassassin/users/151470; Is it possible to set the priority on RBL rules to run after rules, or not at all if shortcircuited? I tried: priority RCVD_IN_BL_SPAMCOP_NET -300 priority RCVD_IN_XBL -300 priority RCVD_IN_PSBL -300 priority R

Re: Malformed UTF-8 character

2010-06-01 Thread Chris Conn
John Hardin wrote: On Tue, 1 Jun 2010, Chris Conn wrote: I upgraded to SA 3.3.1 on a CentOS system using Perl 5.8.5 and I occasionally get this error; Malformed UTF-8 character (unexpected non-continuation byte 0x00, immediately after start byte 0xc3) in pattern match (m//) at /var/lib

Malformed UTF-8 character

2010-06-01 Thread Chris Conn
Hello, I upgraded to SA 3.3.1 on a CentOS system using Perl 5.8.5 and I occasionally get this error; Malformed UTF-8 character (unexpected non-continuation byte 0x00, immediately after start byte 0xc3) in pattern match (m//) at /var/lib/spamassassin/3.003001/updates_spamassassin_org/72_activ

GIF stock spams

2006-02-24 Thread Chris Conn
Hello, Has anyone written any rules to catch the following types of spam http://nisk.creenet.com/~cconn/sa/ They consist of a few lines of text (sometimes), and a .gif attachment that is in fact some penny stock being pushed. Thanks in advance, Chris

Re: spamcop.net tactics

2005-11-21 Thread Chris Conn
e (according to your email) responsible. Claiming non-socialist ideals will get you nowhere, particularily if you send your concerns to the wrong people. Good luck, Chris Conn

Re: Gmail address listed on spamcop

2005-11-04 Thread Chris Conn
Dallas L. Engelken wrote: FYI Just had a report from a user regarding http://www.spamcop.net/w3m?action=checkblock&ip=66.249.82.205 64.233.185.27 is an mx ( 5 ) for xproxy.gmail.com 64.233.185.27 is an mx ( 5 ) for gmail.com That could be effecting quite a lot of people... D Lower down,

Couldn't find a good delta atime

2005-08-15 Thread Chris Conn
Hello, When I run the sa-learn --force-expire on a regular basis, I eventually run into this: debug: bayes: expiry check keep size, 0.75 * max: 562500 debug: bayes: token count: 675802, final goal reduction size: 113302 debug: bayes: First pass? Current: 1124120405, Last: 1124089241, atime:

Re: Cannot get rid of new online pharmacy spams

2005-05-25 Thread Chris Conn
Eddy Beliveau wrote: Hi! Thanks to all for your replies I cannot upgrade right now, the current academic semester is not yet completed In the mean time, I will try Chris Conn's solution: rawbody __LW_URI_CR1 /href=\"[^"]*\r[^\n]/is full__LW_URI_CR2 /href=\"[^"]*\r[^\n]/

Re: Cannot get rid of new online pharmacy spams

2005-05-25 Thread Chris Conn
Eddy Have you tried updating to a newer version? I suspect it will be many peoples first suggestion. Alan Hello, Someone correct me if I am wrong, however the multi-line URI spams with ampersands need a patch that is not yet integrated into the default 3.0.3 distribution. http://bugzil

Re: Cannot get rid of new online pharmacy spams

2005-05-25 Thread Chris Conn
Eddy Beliveau wrote: Hi! I'm running spamassassin 2.4 with pamCopURI 0.24 and it work perfectly. Thanks ;-) My current problem is that I cannot get rid of those online pharmacy spams. (see attached picture). The email contains a picture and many words in font size 1. Am I the only on

Different BAYES scores

2005-05-24 Thread Chris Conn
Hello, I have just gotten around to upgrading my 2.64 SA servers to 3.0.3. I have read the FAQ and searched the archives, so if the following question has been asked or covered, please push me in the right direction and I will be on my way Is there any documentation as to why the BAYES_

Re: Arithmetic score for replaced O's and I's?

2005-04-12 Thread Chris Conn
Matt Thoene wrote: Does anyone have a good custom arithmetic score for spam that has a whole bunch of o's and l's replaced with zeros and "|"? Example of part of an l replacement spam body below... Yap International, Inc.(YPIL) VoIP techno|ogy requires no computer or high speed Internet connection

counting occurrances

2005-04-06 Thread Chris Conn
Hello, I have been googling for a few days trying to find a way to count the number of matches and score accordingly. Let's say for example I have something against the letter A. I would like to write a rule that scores 0.01 for every letter A matched in a given text. So, 5 A-s would score 0.