Re: FCrDNS and localhost

2009-06-04 Thread Matus UHLAR - fantomas
> Matus UHLAR - fantomas wrote: > > 181.188.252.222.in-addr.arpa domain name pointer localhost. > > > > That is why FcRDNS is being used everywhere... > > > > localhost has address 127.0.0.1 => fail. On 03.06.09 19:31, Adam Katz wrote: > Actually, localhost doesn't resolve via DNS; it has no A r

Re: Question on add-to-blacklist

2009-06-04 Thread Matus UHLAR - fantomas
> On 3-Jun-2009, at 14:02, Jari Fredriksson wrote: >> `ip` varchar(10) NOT NULL DEFAULT '', On 03.06.09 17:48, LuKreme wrote: > 10? 7 could be enough for now, afaik AWL only stores /16 prefix... PostgreSQL has a IPv4 type btw -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.

Re: Custome Plugin and Variables

2009-06-04 Thread Matus UHLAR - fantomas
On 04.06.09 00:44, Vahriç Muhtaryan wrote: > We would like to create our own plugin . I red custom plugin section but > maybe I do not understand, I would like to find out how spamassasin can > provide me header of mail , body of mail because I would like to play on > body and header. Could somebod

Re: Question on add-to-blacklist

2009-06-04 Thread Mike Cardwell
LuKreme wrote: `ip` varchar(10) NOT NULL DEFAULT '', 10? I'm missing some of the context here, but usually if someone is storing an ip in 10 characters it's because they're storing the ip number rather than the ip address. r...@haven:~# perl -e 'print length(256*256*256*256)."\n";' 10 r

Re: Question on add-to-blacklist

2009-06-04 Thread Jari Fredriksson
> On 3-Jun-2009, at 14:02, Jari Fredriksson wrote: >> `ip` varchar(10) NOT NULL DEFAULT '', > > > 10? It's on wiki http://wiki.apache.org/spamassassin/BetterDocumentation/SqlReadmeAwl?highlight=%28awl%29%7C%28sql%29

Re: FW: SpamAssassin error Interrupted system call

2009-06-04 Thread Bowie Bailey
John Hardin wrote: On Wed, 3 Jun 2009, Luis campo wrote: this is an example of var / log / qmail / spamd 2009-06-03 12:00:16.531889500 [19168] info: prefork: child states: BB 2009-06-03 12:00:16.531949500 [19168] info: prefork: server reached --max-children setting, consider raising

spamc not defaulting to my user

2009-06-04 Thread Steeve McCauley
I just spent the better part of the last month trying to figure out why my baysian filtering was not working on a new mail server setup. I noticed yesterday, after adding the following header, add_header all Bayes bayes=_BAYES_ tokens=_TOKENSUMMARY_ new=_BAYESTC_ seen=_BAYESTCLEARNED_ spammy=_BA

Re: spamc not defaulting to my user

2009-06-04 Thread Karsten Bräckelmann
On Thu, 2009-06-04 at 11:29 -0400, Steeve McCauley wrote: > I just spent the better part of the last month trying to figure > out why my baysian filtering was not working on a new mail server > setup. [...] > Today on a whim I decided to add -u to the spamc > command line in my procmail filter

FW: SpamAssassin error Interrupted system call

2009-06-04 Thread Luis campo
we have made with the configuration option-x ./configure --enable-clamav=y --enable-clamdscan=/usr/local/bin/clamdscan --enable-dropmsg=y --enable-custom-smtp-reject=n --enable-per-domain=y --enable-attach=y --enable-spam=y --enable-ripmime=/usr/local/bin/ripmime --enable-received=y --enable-s

Re: Any amavisd-milter help out there?

2009-06-04 Thread Mark Martinec
Tony, > Hope for some insight into what I'm looking at... > > Brand new install Scalix/SuSE11.1/Amavis/Amavisd1.4/SA/ClamAV > > Following "How To" published on the Scalix Wiki at > http://www.scalix.com/wiki/index.php?title=Scalix/Sendmail_%26_Amavisd-New_ >HOWTO > > All seemed to be working excep

Re: spamc not defaulting to my user

2009-06-04 Thread Steeve McCauley
On Thu, Jun 04, 2009 at 06:28:18PM +0200, Karsten Bräckelmann wrote: > On Thu, 2009-06-04 at 11:29 -0400, Steeve McCauley wrote: > > I just spent the better part of the last month trying to figure > > out why my baysian filtering was not working on a new mail server > > setup. [...] > > > Today o

Re: spamc not defaulting to my user

2009-06-04 Thread Karsten Bräckelmann
On Thu, 2009-06-04 at 15:15 -0400, Steeve McCauley wrote: > On Thu, Jun 04, 2009 at 06:28:18PM +0200, Karsten Bräckelmann wrote: > > > Today on a whim I decided to add -u to the spamc > > > command line in my procmail filter and bayes started working. > > > > > I discovered in the syslog the fo

Re: spamc not defaulting to my user

2009-06-04 Thread Steeve McCauley
On Thu, Jun 04, 2009 at 09:41:48PM +0200, Karsten Bräckelmann wrote: > > > > Any ideas? > > > > > > Just to verify, try adding something like this to your procmailrc, right > > > before the recipe that filters through spamc. Then check the log. (Note, > > > linebreak intended.) > > > > > > LOG =

Re: spamc not defaulting to my user

2009-06-04 Thread Karsten Bräckelmann
On Thu, 2009-06-04 at 21:41 +0200, Karsten Bräckelmann wrote: > On Thu, 2009-06-04 at 15:15 -0400, Steeve McCauley wrote: > > Procmail is running as "steeve", > > > > Hello, I am steeve. > > Weird. :) Honestly, I quickly pulled LOGNAME out of the man page. I'm > not entirely sure this really re

Re: spamc not defaulting to my user

2009-06-04 Thread Karsten Bräckelmann
On Thu, 2009-06-04 at 15:54 -0400, Steeve McCauley wrote: > On Thu, Jun 04, 2009 at 09:41:48PM +0200, Karsten Bräckelmann wrote: > > > It woudl have been incredbily perplexing if procmail were running > > > as an openpkg user since it's not an openpkg package. > > > > But spamc is. Not that that

Re: FCrDNS and localhost

2009-06-04 Thread Adam Katz
John Hardin wrote: >> I think what Matus was saying is: >> 181.188.252.222.in-addr.arpa -> "localhost" -> 127.0.0.1 = FAIL. And what I'm saying is that the second step of that: "localhost" -> 127.0.0.1 doesn't work since "localhost" has no A record. So it should actually go: 181.188.252.222.in-ad

Re: spamc not defaulting to my user

2009-06-04 Thread Steeve McCauley
On Thu, Jun 04, 2009 at 10:04:46PM +0200, Karsten Bräckelmann wrote: > On Thu, 2009-06-04 at 15:54 -0400, Steeve McCauley wrote: > > On Thu, Jun 04, 2009 at 09:41:48PM +0200, Karsten Bräckelmann wrote: > > > > > It woudl have been incredbily perplexing if procmail were running > > > > as an openpk

Re: FCrDNS and localhost

2009-06-04 Thread John Hardin
On Thu, 4 Jun 2009, Adam Katz wrote: John Hardin wrote: I think what Matus was saying is: 181.188.252.222.in-addr.arpa -> "localhost" -> 127.0.0.1 = FAIL. And what I'm saying is that the second step of that: "localhost" -> 127.0.0.1 doesn't work since "localhost" has no A record. So that da

Re: FCrDNS and localhost

2009-06-04 Thread Adam Katz
John Hardin wrote: > So that data comes from /etc/hosts. How does that materially affect the > FCrDNS sanity test? By definition, FCrDNS uses DNS lookups. Unless you're using dnsmasq, the entries in /etc/hosts are ignored during DNS lookups. Unless I'm mistaken, no FCrDNS implementation ever que

Re: FCrDNS and localhost

2009-06-04 Thread John Hardin
On Thu, 4 Jun 2009, Adam Katz wrote: John Hardin wrote: So that data comes from /etc/hosts. How does that materially affect the FCrDNS sanity test? By definition, FCrDNS uses DNS lookups. Unless you're using dnsmasq, the entries in /etc/hosts are ignored during DNS lookups. Unless I'm mista

Re: FW: SpamAssassin error Interrupted system call

2009-06-04 Thread Karsten Bräckelmann
On Thu, 2009-06-04 at 17:18 +, Luis campo wrote: > total used free sharedbuffers cached > Mem: 10334681012956 20512 0 71440 270720 > -/+ buffers/cache: 670796 362672 > Swap: 2031608 02031608 OK, no

Re: FCrDNS and localhost

2009-06-04 Thread John Rudd
On Thu, Jun 4, 2009 at 13:57, Adam Katz wrote: > John Hardin wrote: >> So that data comes from /etc/hosts. How does that materially affect the >> FCrDNS sanity test? > > By definition, FCrDNS uses DNS lookups.  Unless you're using dnsmasq, > the entries in /etc/hosts are ignored during DNS lookups

Re: how to know what blacklists i'm checking against

2009-06-04 Thread Lists
John Hardin wrote: On Wed, 3 Jun 2009, Lists wrote: I am trying to trouble shoot why a particular server cannot send into our email system. There is no reference in the logs to this server ever trying to connect. Are users of that system getting reject notifications? Have them forward one

I never got WrongMx working and have no idea why.

2009-06-04 Thread Steven W. Orr
In my /etc/mail/spamassassin, I have two files, wrongmx.cf and wrongmx.pm The cf file looks like this: loadplugin WrongMX wrongmx.pm header WRONGMX eval:wrongmx() describeWRONGMX Sent to lower pref MX when higher pref MX was up. tflags WRONGMX net score

Re: Identifying Source of False Positives

2009-06-04 Thread Rich Shepard
On Mon, 1 Jun 2009, Bowie Bailey wrote: The empty body problem is a more difficult problem. Have procmail save a copy of the raw message somewhere and take a look at it. Make sure there is a blank line between the headers and the body. Bowie, et al.: Progress is being made. I discovered tha

Re: Controlling spamd logging from spamc

2009-06-04 Thread Jeff Mincy
From: Martin Gregorie Date: Tue, 02 Jun 2009 16:54:11 +0100 How difficult would it be to let spamc control spamd's logging output on a per-message basis? My reason for asking is this: I maintain a body of spam that I use to develop and regression test local rules and, du

FW: SpamAssassin error Interrupted system call

2009-06-04 Thread Luis campo
yes, we have configured the SA to 20 children /usr/bin/spamd -v -u vpopmail -m 20 -x -q -s stderr -r /var/run/spamd/spamd.pid \ -i 172.16.10.9 -A 172.16.10.0/24 2>&1 | \ /usr/local/bin/setuidgid qmaill \ /usr/local/bin/multilog t !spamdappend /var/log/qmail/spamd &

Re: FCrDNS and localhost

2009-06-04 Thread Adam Katz
John Rudd wrote: > That seems to be an important distinction for > strict/rigorous/theoretical discussions of "what is full circle > reverse DNS", and things along those lines... but I'm not sure if > it really is an important distinction for the practical matter of > how you handle tests in SA.

Re: I never got WrongMx working and have no idea why.

2009-06-04 Thread RW
On Thu, 4 Jun 2009 18:04:35 -0400 (EDT) "Steven W. Orr" wrote: > My dns MX record looks like this: > > ;; ANSWER SECTION: > syslang.net.9738IN MX 100 mx2.zoneedit.com. > syslang.net.9738IN MX 0 syslang.net. > ... > The pm file is the latest. Th

Re: FW: SpamAssassin error Interrupted system call

2009-06-04 Thread Karsten Bräckelmann
On Thu, 2009-06-04 at 22:53 +, Luis campo wrote: > yes, we have configured the SA to 20 children I know. I stated that fact myself. OK, I'm out. That doesn't even remotely answer any new question I asked or asked again, since it was left unanswered by you before. You can even read all the st

Re: FW: SpamAssassin error Interrupted system call

2009-06-04 Thread John Hardin
On Thu, 4 Jun 2009, Karsten Br?ckelmann wrote: (a) Do you scan *all* messages, regardless of their size? Don't do that, but skip scanning for messages larger than about 500 kByte. If I remember his spamc options correctly, it was limited to 200kB. -- John Hardin KA7OHZhtt

Re: how to know what blacklists i'm checking against

2009-06-04 Thread John Hardin
On Fri, 5 Jun 2009, Lists wrote: John Hardin wrote: On Wed, 3 Jun 2009, Lists wrote: > I am trying to trouble shoot why a particular server cannot send > into our email system. There is no reference in the logs to this > server ever trying to connect. Are users of that system getting

Re: FW: SpamAssassin error Interrupted system call

2009-06-04 Thread John Hardin
On Thu, 4 Jun 2009, Luis campo wrote: yes, we have configured the SA to 20 children Try setting it to 5. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136

Re: FW: SpamAssassin error Interrupted system call

2009-06-04 Thread Karsten Bräckelmann
On Thu, 2009-06-04 at 17:34 -0700, John Hardin wrote: > On Thu, 4 Jun 2009, Karsten Brckelmann wrote: > > > (a) Do you scan *all* messages, regardless of their size? Don't do that, > > but skip scanning for messages larger than about 500 kByte. > > If I remember his spamc options correctly, it w

Re: I never got WrongMx working and have no idea why.

2009-06-04 Thread Steven W. Orr
On Thursday, Jun 4th 2009 at 19:47 -, quoth RW: On Thu, 4 Jun 2009 18:04:35 -0400 (EDT) "Steven W. Orr" wrote: My dns MX record looks like this: ;; ANSWER SECTION: syslang.net.9738IN MX 100 mx2.zoneedit.com. syslang.net.9738IN MX 0 sysl