whitelist_from_rcvd hits only sometimes

Hi, I'm trying to find out why a message sometimes hits whitelist_from_rcvd and sometimes does not. I checked the headers again and again but cannot see the difference. whitelist_from_rcvd quarant...@eu.quarantine.symantec.com messagelabs.com whitelist_from_rcvd quarant...@eu.quarantine.symantec

Re: remaining relays will be considered trusted, but no longer internal

Helmut Schneider wrote: > when further investigating my issue that ALL_TRUSTED is always true I > came along the following lines when debugging SA: > > Apr 15 11:44:43.211 mail /usr/sbin/amavisd-new[9991]: (09991-02) SA > dbg: received-header: parsed as [ ip=172.20.12.10 rdns=

Re: remaining relays will be considered trusted, but no longer internal

RW wrote: > On Fri, 15 Apr 2016 14:08:15 + (UTC) > Helmut Schneider wrote: > > > RW wrote: > > > > > On Fri, 15 Apr 2016 12:35:24 +0100 > > > RW wrote: > > > > > > > On Fri, 15 Apr 2016 10:10:13 + (

Re: remaining relays will be considered trusted, but no longer internal

Reindl Harald wrote: > > Am 15.04.2016 um 16:08 schrieb Helmut Schneider: > > What does "submission" mean in this context? > > ESMT(S)A > > https://en.wikipedia.org/wiki/SMTP_Authentication I'm neither using authentication nor smtp submission (TCP587).

Re: remaining relays will be considered trusted, but no longer internal

RW wrote: > On Fri, 15 Apr 2016 12:35:24 +0100 > RW wrote: > > > On Fri, 15 Apr 2016 10:10:13 + (UTC) > > Helmut Schneider wrote: > > > > > Hi, > > > > > > when further investigating my issue that ALL_TRUSTED is always > &g

remaining relays will be considered trusted, but no longer internal

Hi, when further investigating my issue that ALL_TRUSTED is always true I came along the following lines when debugging SA: Apr 15 11:44:43.211 mail /usr/sbin/amavisd-new[9991]: (09991-02) SA dbg: received-header: parsed as [ ip=172.20.12.10 rdns=relay-in helo=mail2 by=mail01 ident= envfrom= intl

Re: Fixing ALL_TRUSTED=-1

Helmut Schneider wrote: > Bill Cole wrote: > > > On 12 Apr 2016, at 9:03, Helmut Schneider wrote: > > > > > Bill Cole wrote: > > > > > > > Pipe that message into "spamassassin -t -D > > > > dns,received-header,metadata" *ru

Re: Fixing ALL_TRUSTED=-1

Bill Cole wrote: > On 12 Apr 2016, at 9:03, Helmut Schneider wrote: > > > Bill Cole wrote: > > > > > Pipe that message into "spamassassin -t -D > > > dns,received-header,metadata" *running as the same user that runs > > > your Amav

Re: Fixing ALL_TRUSTED=-1

Bill Cole wrote: > On 11 Apr 2016, at 10:55, Helmut Schneider wrote: > > > Hi, > > > > for more than 6 months I'm trying to fix ALL_TRUSTED=-1 without > > success. > > Did it just start showing up 6 months ago on a previously-working > SpamAssassin

Re: Fixing ALL_TRUSTED=-1

Martin Gregorie wrote: > On Mon, 2016-04-11 at 14:55 +0000, Helmut Schneider wrote: > > > > Hi, > > > > for more than 6 months I'm trying to fix ALL_TRUSTED=-1 without > > success. > > > > I have read https://wiki.apache.org/spamassassin/Trus

Re: Fixing ALL_TRUSTED=-1

Bowie Bailey wrote: > On 4/11/2016 10:55 AM, Helmut Schneider wrote: > > Hi, > > > > for more than 6 months I'm trying to fix ALL_TRUSTED=-1 without > > success. > > > > I have read https://wiki.apache.org/spamassassin/TrustPath and > > htt

Fixing ALL_TRUSTED=-1

Hi, for more than 6 months I'm trying to fix ALL_TRUSTED=-1 without success. I have read https://wiki.apache.org/spamassassin/TrustPath and https://wiki.apache.org/spamassassin/FixingAllTrusted carefully, put trusted_networks 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 internal_networks 10.0.0.0/8 1

Re: meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512'

John Hardin wrote: > On Sun, 6 Apr 2014, Helmut Schneider wrote: > > > John Hardin wrote: > > > > > On Sun, 6 Apr 2014, Helmut Schneider wrote: > > > > > > > over the last weeks I constantly run into issues when I cannot > > > &g

Re: meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512'

Dave Funk wrote: > On Sun, 6 Apr 2014, Helmut Schneider wrote: > > > over the last weeks I constantly run into issues when I cannot get > > SA up again because of "broken" rule sets. Today it's > > > > Apr 6 17:06:01.960 [31092] dbg: rules: meta t

Re: meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512'

John Hardin wrote: > On Sun, 6 Apr 2014, Helmut Schneider wrote: > > > over the last weeks I constantly run into issues when I cannot get > > SA up again because of "broken" rule sets. Today it's > > > > Apr 6 17:06:01.960 [31092] dbg: rules: meta t

meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512'

Hi, over the last weeks I constantly run into issues when I cannot get SA up again because of "broken" rule sets. Today it's Apr 6 17:06:01.960 [31092] dbg: rules: meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512' Is something wrong in my process or do we have a problem

Re: meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency '__AC_RHASH_URIb'

Kevin A. McGrail wrote: > > all over sudden all my installations (3.3.1 and 3.3.2) show > > > > rules: meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency > > '__AC_RHASH_URIb' > > > > when checking rules. Whats's wrong? > > That should not have auto promoted and has already been fixed.

Re: meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency '__AC_RHASH_URIb'

Helmut Schneider wrote: > all over sudden all my installations (3.3.1 and 3.3.2) show To be more precise: Feb 18 20:48:03.261 [68576] dbg: rules: meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency '__AC_RHASH_URIb' Feb 18 20:48:03.261 [68576] dbg: rul

meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency '__AC_RHASH_URIb'

Hi, all over sudden all my installations (3.3.1 and 3.3.2) show rules: meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency '__AC_RHASH_URIb' when checking rules. Whats's wrong? Thanks, Helmut

Re: whitelisting despite of trusted_networks

Benny Pedersen wrote: > Helmut Schneider skrev den 2013-03-13 15:19: > > > How can I whiltelist(_auth) senders now? > > if sender ip is whitelisted, does it then make sense to whitelist > based on dkim/spf ? > > note here dkim is not using ip at all ? I want to wh

whitelisting despite of trusted_networks

Hi, after a discussion here on September 12th I added MessageLabs to trusted_networks. If I understood posts in the net correctly this might be the reason why whitelist_ does not work anymore. Mar 13 14:44:04.119 [17641] dbg: spf: relayed through one or more trusted relays, cannot use header-base

Re: Exclude from RCVD_IN_DNSWL_MED

Helmut Schneider wrote: > Kris Deugau wrote: > > > Helmut Schneider wrote: > > but if their support refuses to tell you, I'd be looking at > > switching providers > > I guess they would if they knew themselves. But project "switch" is &

Re: Exclude from RCVD_IN_DNSWL_MED

Matthias Leisi wrote: > On Mon, Sep 10, 2012 at 8:34 PM, Helmut Schneider > wrote: > > >> It looks like RCVD_IN_DNSWL_MED examines "firstuntrusted" and if he > >> trusts his MX/relays correctly then this shouldn't be happening. > > In general,

Re: Exclude from RCVD_IN_DNSWL_MED

Kris Deugau wrote: > Helmut Schneider wrote: > > If I understood you correctly I'd need to add all relays of > > MessageLabs to trusted_networks and also track any IP address > > changes... > > If you don't have that info, and their support refuses to tell y

Re: Exclude from RCVD_IN_DNSWL_MED

Dave Funk wrote: > On Mon, 10 Sep 2012, John Hardin wrote: > > > On Mon, 10 Sep 2012, Helmut Schneider wrote: > > > > > Short story: > > > Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? > > > > > > Long story: > > > W

Re: Exclude from RCVD_IN_DNSWL_MED

John Hardin wrote: > On Mon, 10 Sep 2012, Helmut Schneider wrote: > > > Short story: > > Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? > > > > Long story: > > We are using an external provider to filter SPAM. We also use SA > > internally.

Exclude from RCVD_IN_DNSWL_MED

Hi, Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally and forwarded to SA. The mailrelays of the external provider are listed in RCVD_IN_DNS

Re: Bayes expiration

RW wrote: > On Wed, 19 Jan 2011 13:16:09 + (UTC) > "Helmut Schneider" wrote: > > > Michael Scheidell wrote: > > > > > On 1/19/11 7:56 AM, Helmut Schneider wrote: > > > > Michael Scheidell wrote: > > > > > > > >

Re: Bayes expiration

Michael Scheidell wrote: > On 1/19/11 8:16 AM, Helmut Schneider wrote: > > 1295442708, > > Last: 1295442672, atime: 0, count: 0, newdelta: 0, ratio: 0, period: > > 43200 > or, it has been trying (automatically) for a while. remove auto > expire (at least) d

Re: Bayes expiration

Michael Scheidell wrote: > On 1/19/11 7:56 AM, Helmut Schneider wrote: > > Michael Scheidell wrote: > > > > > On 1/19/11 6:04 AM, Helmut Schneider wrote: > > > > bayes_auto_expire 1 > > > disable auto expire and run a cron

Re: Bayes expiration

Michael Scheidell wrote: > On 1/19/11 6:04 AM, Helmut Schneider wrote: > > bayes_auto_expire 1 > disable auto expire and run a cronjob. OK...but..why? :) > make sure you run the cronjob for each user in bayes. The database ist global...

Bayes expiration

Hi, I set use_bayes 1 bayes_auto_learn1 bayes_expiry_max_db_size30 bayes_auto_expire 1 bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn DBI:mysql:$mysqlser

Re: Performance problem body tests

Helmut Schneider wrote: > with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance > problem: I might have been able to "catch" a non-confident example mail[1] (bad example because of the size, but an example). While SA 3.2.5 needs ~45 seconds, with SA 3.3.1: Jun

Re: Performance problem body tests

Helmut Schneider wrote: > with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance > problem: [...] > Any idea where to start? Appendix: I set up a fresh and clean FreeBSD 8.0 with only SA 3.3.1 and Perl 5.10.1_1 and the problem still persists. I then removed all packages,

Re: [sa] Performance problem body tests

Charles Gregory wrote: > On Wed, 2 Jun 2010, Helmut Schneider wrote: > > with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance > > problem: > > What distinguishes 'certain mails'? Length? Content? Mime > attachements? It's around 1 of 1000, I

Re: Performance problem body tests

David Michaels wrote: > Quoting "Helmut Schneider" : > > > Hi, > > > > with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance > > problem: [...] > > timing: total 36840 ms - init: 3827 (10.4%), parse: 43 (0.1%), > > extract_me

Performance problem body tests

Hi, with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance problem: [/var/amavis/tmp]# spamassassin -D -lint < /var/amavis/tmp/amavis-20100602T192227-44802/email.txt Jun 2 21:37:08.809 [50826] warn: The -l option has been deprecated and is no longer supported, ignoring. Jun 2 21:37

Re: URIDNSBL

I am using the 3.0 line of SpamAssassin and it's being invoked through amavisd-maia (Maia Mailguard.) I have a certain domain name that's blocked in several of the URIDNSBL lists as "fm.interia.pl" however my DNSBL checks are only doing interia.pl Just as I'm curious, what does SA score that m

Re: bayes options

Matt Kettler wrote: Helmut Schneider wrote: where can I find a complete set of (bayes) options for local.cf? Either it's well hidden or even http://spamassassin.apache.org/ does not provide such a list. Thanks, Helmut http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf

bayes options

Hi, where can I find a complete set of (bayes) options for local.cf? Either it's well hidden or even http://spamassassin.apache.org/ does not provide such a list. Thanks, Helmut -- No Swen today, my love has gone away My mailbox stands for lorn, a symbol of the dawn

Re: move bayes-db to mysql, unable to initialize database for amavis user, aborting!

Micke Andersson wrote: Helmut Schneider wrote: Hi, I tried to move a global (not per user) bayes-db to mysql5.0 to use it with 3 different machines. From local.cf: use_bayes 1 bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn

move bayes-db to mysql, unable to initialize database for amavis user, aborting!

Hi, I tried to move a global (not per user) bayes-db to mysql5.0 to use it with 3 different machines. From local.cf: use_bayes 1 bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn DBI:mysql:SpamAssassin bayes_sql_username amavis

Re: Filter from *and* to

Helmut Schneider wrote: can I (and if how) create a filter that catches mails _from_and_to_ specific email addresses? It should only apply if a specific sender sendw an email to a specific recipient. I can use a meta rule, thanks. -- No Swen today, my love has gone away My mailbox stands

Filter from *and* to

Hi, can I (and if how) create a filter that catches mails _from_and_to_ specific email addresses? It should only apply if a specific sender sendw an email to a specific recipient. Thanks, Helmut -- No Swen today, my love has gone away My mailbox stands for lorn, a symbol of the dawn

Re: whitelist_from/whitelist_auth and custom score

On Wed, 2008-07-02 at 11:12 +0200, Helmut Schneider wrote: I would like to do some whitelisting for an external mailing list. I found "whitelist_from" and "whitelist_auth" but they automatically score -100. Is there a way to use whitelist_* or something similiar with a cus

whitelist_from/whitelist_auth and custom score

Hi, I would like to do some whitelisting for an external mailing list. I found "whitelist_from" and "whitelist_auth" but they automatically score -100. Is there a way to use whitelist_* or something similiar with a custom score? Thanks, Helmut -- No Swen today, my love has gone away My mailb

Re: sa-update and location of rules

"Theo Van Dinter" <[EMAIL PROTECTED]> wrote: On Tue, Jun 17, 2008 at 09:56:49PM +0200, Helmut Schneider wrote: >FWIW, the directories and their order are well documented in the >spamassassin >POD. Could you please point me to the exact location? Thanks. (you could a

Re: sa-update and location of rules

"Theo Van Dinter" <[EMAIL PROTECTED]> wrote: On Tue, Jun 17, 2008 at 10:42:41AM +0200, Helmut Schneider wrote: So /var/db/spamassassin//updates_spamassassin_org has precedence over /usr/local/etc/mail/spamassassin? Some kind of version checking or rather the existence of the

Re: SpamAssassin 3.2.5 committed to FreeBSD ports

Helmut Schneider <[EMAIL PROTECTED]> wrote: Len Conrad <[EMAIL PROTECTED]> wrote: Does libkrb5.so.8 exist (usually in /usr/lib/)?! no. installed heimdal then krb5 from ports, no problem. re-booted. same msgs as before in sshd logs. sshd won't allow any logins. and c

Re: SpamAssassin 3.2.5 committed to FreeBSD ports

Len Conrad <[EMAIL PROTECTED]> wrote: Does libkrb5.so.8 exist (usually in /usr/lib/)?! no. installed heimdal then krb5 from ports, no problem. re-booted. same msgs as before in sshd logs. sshd won't allow any logins. and complains same as before. Did you install security/krb5 or sec

Re: SpamAssassin 3.2.5 committed to FreeBSD ports

Please don't post HTML, thanks... for sshd: /libexec/ld-elf.so.1: shared object "libkrb5.so.8" not found required by "sshd" Both sshd and libkrb5.so.8 are part of the base system so I guess you messed up something else. Does libkrb5.so.8 exist (usually in /usr/lib/)?! Did you install secur

Re: sa-update and location of rules

Michael Scheidell <[EMAIL PROTECTED]> wrote: running FreeBSD I have two directories with rules in it: /usr/local/share/spamassassin /var/db/spamassassin/3.002005/updates_spamassassin_org Which is the correct directory, which rules are used? SpamAssassin will use the default, distributed rule

sa-update and location of rules

Hi, running FreeBSD I have two directories with rules in it: /usr/local/share/spamassassin /var/db/spamassassin/3.002005/updates_spamassassin_org Which is the correct directory, which rules are used? Thanks, Helmut -- No Swen today, my love has gone away My mailbox stands for lorn, a symbol o

Re: OT: digest version of mailing list

From: "SM" <[EMAIL PROTECTED]> At 07:41 18-07-2007, Helmut Schneider wrote: sorry if I missed something but is there also a digest version of the mailing list? I searched http://wiki.apache.org/spamassassin/MailingLists but only found subscribe and unsubscribe. Send an

OT: digest version of mailing list

Hi, sorry if I missed something but is there also a digest version of the mailing list? I searched http://wiki.apache.org/spamassassin/MailingLists but only found subscribe and unsubscribe. Thanks, Helmut

Re: "report_safe" does not work

From: "Wolfgang Zeikat" <[EMAIL PROTECTED]> On 07/12/07 15:47, Helmut Schneider wrote: Hi, I use amavisd-new 2.52 and SA3.21 chroot'ed. Is there a setting that only mail with a hit greater than X is modified? Or did I miss anything else? AFAIK, amavisd-new has it's

"report_safe" does not work

Hi, I use amavisd-new 2.52 and SA3.21 chroot'ed. [EMAIL PROTECTED] ~]# grep -ir report_safe /var/amavis/usr/local/etc/mail/spamassassin/local.cf # report_safe 1 report_safe 2 [EMAIL PROTECTED] ~]# spamassassin --lint -d [...] [15632] dbg: config: read file /usr/local/etc/mail/spamassassin/loca

Re: AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

From: "Leon Kolchinsky" <[EMAIL PROTECTED]> I've never run amavisd-new in chroot, but may be you'll find some tips here - http://www.ijs.si/software/amavisd/README.chroot Seems to me like a resolver issue (probably need to configure FreeBSD a little different than OpenBSD). Best Regards, Well

Re: AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

From: "Helmut Schneider" <[EMAIL PROTECTED]> [problems resolving a host] Damn!! [EMAIL PROTECTED] ~]# cat /var/amavis/test2.pl #!/usr/bin/perl -w use Net::DNS; my $res = Net::DNS::Resolver->new; my $query = $res->search("www.google.de"); if ($quer

Re: AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

From: "Leon Kolchinsky" <[EMAIL PROTECTED]> Stupid question, but $MYHOME = /var/amavis ? Yes Also you can try to debug it with strace. Look for all the files you're missing in the jail and copy them into it. (here is a little example on how to use strace to find requirements outside the jail

Re: AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

From: "Leon Kolchinsky" <[EMAIL PROTECTED]> I tried to set up SA with AMaViS in a chrooted environment ($daemon_chroot_dir = $MYHOME). I (thought I) copied all necessary files to the jail but when SA is starting I get an error: Jul 10 10:44:02 TEG /usr/local/sbin/amavisd[6817]: SpamControl: init

AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

Hi, I tried to set up SA with AMaViS in a chrooted environment ($daemon_chroot_dir = $MYHOME). I (thought I) copied all necessary files to the jail but when SA is starting I get an error: Jul 10 10:44:02 TEG /usr/local/sbin/amavisd[6817]: SpamControl: initializing Mail::SpamAssassin Error cr

Re: sa-update, can't resolve 'localhost' to address

From: "Duncan Hill" <[EMAIL PROTECTED]> On Fri, June 15, 2007 08:20, Helmut Schneider wrote: From: "Justin Mason" <[EMAIL PROTECTED]> [EMAIL PROTECTED] ~]# sa-update --nogpg can't resolve "localhost" to address at /usr local/libdata/perl5/site_

Re: sa-update, can't resolve "localhost" to address

Hi, From: "Justin Mason" <[EMAIL PROTECTED]> [EMAIL PROTECTED] ~]# sa-update --nogpg can't resolve "localhost" to address at /usr/local/libdata/perl5/site_perl/i386-openbsd/Net/DNS/Resolver/Base.pm line 751. [EMAIL PROTECTED] ~]# A guess-- you have server localhost in /etc/resolv.conf. In d

sa-update, can't resolve "localhost" to address

Hi, [EMAIL PROTECTED] ~]# uname -rs OpenBSD 4.0 [EMAIL PROTECTED] ~]# When I run sa-update I get the error below: [EMAIL PROTECTED] ~]# sa-update --nogpg can't resolve "localhost" to address at /usr/local/libdata/perl5/site_perl/i386-openbsd/Net/DNS/Resolver/Base.pm line 751. [EMAIL PROTECTED]