Could someone point me to a reference on getting this to work with exchange 2000, or confirm for me that it wont?
Thanks much, Carsten Erickson -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of [EMAIL PROTECTED] Sent: Thursday, May 23, 2002 10:26 AM To: [EMAIL PROTECTED] Subject: Spamassassin-talk digest, Vol 1 #434 - 32 msgs Send Spamassassin-talk mailing list submissions to [EMAIL PROTECTED] To subscribe or unsubscribe via the World Wide Web, visit https://lists.sourceforge.net/lists/listinfo/spamassassin-talk or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach the person managing the list at [EMAIL PROTECTED] When replying, please edit your Subject line so it is more specific than "Re: Contents of Spamassassin-talk digest..." Today's Topics: 1. Which user is running spamd - is this okay? (John Horne) 2. Re: Re: Sieve and SpamAssassin (Thomas Egrelius) 3. Re: Re: PostFix/Sendmail & user.prefs ... (Marc G. Fournier) 4. RE: Spamd not copying over proper user_prefs.template (Stephen Bader) 5. Per User Spam Filtering w/ postfix+cyrus+spamassassin ... (Marc G. Fournier) 6. Re: Out of Office AutoReply: [elektrosmog] Nordic Developer Briefing Invitation (fwd) (Tony L. Svanstrom) 7. RE: Spamd not copying over proper user_prefs.template (Justin Robinson) 8. Re: Per User Spam Filtering w/ postfix+cyrus+spamassassin ... (Alain Tesio) 9. RE: Spamd not copying over proper user_prefs.template (Stephen Bader) 10. Re: Per User Spam Filtering w/ postfix+cyrus+spamassassin ... (Vivek Khera) 11. Re: Re: Sieve and SpamAssassin (Bryan Fullerton) 12. RE: Spamd not copying over proper user_prefs.template (Justin Robinson) 13. Postfix set-up (John Weissberg) 14. Re: Sieve and SpamAssassin (Bryan Fullerton) 15. Re: Which user is running spamd - is this okay? (Corwin Grey) 16. Re: Postfix set-up (Vivek Khera) 17. Re: Postfix set-up (Stephen Bader) 18. Apologies for absence/slowness this week (Craig R Hughes) 19. Re: Apologies for absence/slowness this week (Rick Macdougall) 20. Re: date difference testing (Craig R Hughes) 21. Re: Apologies for absence/slowness this week (David T-G) 22. Re: Apologies for absence/slowness this week (Corwin Grey) 23. Suggested rule for "We will promote your ..." (Bart Schaefer) 24. Re: One detected as -67 points?? (Daniel Rogers) 25. Minus value hits on spam (Michelle Brownsworth) 26. Re: Which user is running spamd - is this okay? (John Horne) 27. Re: Which user is running spamd - is this okay? (Corwin Grey) 28. LMTP Filtering: A Potential Solution (Marc G. Fournier) 29. Re: Which user is running spamd - is this okay? (John Horne) 30. LMTPproxy *sigh* ... (Marc G. Fournier) 31. Re: Postfix set-up (Julien Beauviala) --__--__-- Message: 1 Date: Thu, 23 May 2002 14:05:57 +0100 (BST) Reply-To: [EMAIL PROTECTED] Organization: University of Plymouth From: John Horne <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [SAtalk] Which user is running spamd - is this okay? Hello, Using spamassassin 2.20, and running spamd as root, I am getting the following messages in our log file: May 23 14:02:55 tracy.csd.plymouth.ac.uk spamd[29334]: connection from localhost [ 127.0.0.1 ] at port 32922 May 23 14:02:55 tracy.csd.plymouth.ac.uk spamd[5]: Still running as root: user not specified, not found, or set to root. Fall back to nobody. May 23 14:02:55 tracy.csd.plymouth.ac.uk spamd[5]: identified spam (5.2/5.0) for (unknown):60001 in 0 seconds. It is the third line which confuses me. Why does it show the user as 'unknown'. If spamd is running as root, my understanding is that when it is called via spamc then it takes on that user. In our case it will be the MTA process, and so I would not expect to see 'unknown' there. Is this right? Thanks, John. ------------------------------------------------------------------------ John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] PGP key available from public key servers --__--__-- Message: 2 Date: Thu, 23 May 2002 15:39:07 +0200 (CEST) From: Thomas Egrelius <[EMAIL PROTECTED]> To: Skip Montanaro <[EMAIL PROTECTED]> cc: Daniel Pittman <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> Subject: Re: [SAtalk] Re: Sieve and SpamAssassin > >> I have been poking through the list and through google and haven't > >> had any luck with configureing SpamAssassin to work with sieve and > >> cyrus. > > Daniel> I think you are trying to hook SA in far too late in the process > Daniel> if either Cyrus or Sieve are involved... > > What are Cyrus and Sieve? They seem a bit too generic to feed to a search > engine with much success. Cyrus is an imap-server, and Sieve is a script language you can use to filter mail. A search for 'cyrus' on www.google.com bring it up as the first hit ;) http://asg.web.cmu.edu/cyrus/ /Egge --__--__-- Message: 3 Date: Thu, 23 May 2002 10:43:54 -0300 (ADT) From: "Marc G. Fournier" <[EMAIL PROTECTED]> To: Daniel Pittman <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Re: PostFix/Sendmail & user.prefs ... Nope, this doesn't work ... try sending yourself a CC'd mail message, and you'll see what I mean ... I sent an email to a friend on my server, CC'd it to myself, from a remote server, and here is the result that I've received: ============== Return-Path: <[EMAIL PROTECTED]> X-Sieve: cmu-sieve 2.0 Received: by earth.hub.org (Postfix, from userid 65534) id 978661037F6; Thu, 23 May 2002 10:38:16 -0300 (ADT) Received: from garlic.acadiau.ca (garlic.acadiau.ca [131.162.138.193]) by earth.hub.org (Postfix) with ESMTP id B03A21037E6; Thu, 23 May 2002 10:38:14 -0300 (ADT) Received: from atelier.acadiau.ca (atelier.acadiau.ca [131.162.138.223]) by garlic.acadiau.ca (8.11.5/8.11.5) with ESMTP id g4NDcJG50301; Thu, 23 May 2002 10:38:19 -0300 (ADT) (envelope-from [EMAIL PROTECTED]) Date: Thu, 23 May 2002 10:39:34 -0300 (ADT) From: "Marc G. Fournier" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: test2 Message-ID: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Status: No, hits=0.0 required=5.1 tests= version=2.20 X-Spam-Level: =============== Notice the 'required=5.1'? My required is the default 5.0 ... I've never changed from what was installed, but she has ... This, again, will only work properly if there is only one recipient :( On Mon, 20 May 2002, Daniel Pittman wrote: > On Sat, 18 May 2002, Marc G. Fournier wrote: > > On Sat, 18 May 2002, Daniel Pittman wrote: > >> On Fri, 17 May 2002, Marc G. Fournier wrote: > > [...] > > >> The simple filtering mode of Postfix, using a shell script and piped > >> data, can have the SMTP envelope information passed on the command > >> line. I use that. > > > > can you post your config/scripts? > > Sure. In master.cf I have: > > spam unix - n n - - pipe > flags=Rq user=mailfilter argv=/home/mailfilter/spam-filter ${user} -f ${sender} -- ${recipient} > > smtp inet n - - - - smtpd > -o content_filter=spam: > > The second defines the mail filter script, run as an unprivileged user > just in case someone manages to sneak something noxious into an email > address or the like. > > The spam-filter script is: > > ---------- cut here ---------- > #!/bin/busybox sh > # > # Process mail through SpamAssassin, adding the results, then feed it back into > # the PostFix process. > user="$1" > shift > > exec spamc -u "${user}" | /usr/sbin/sendmail -i $@ > ---------- cut here ---------- > > This is pretty trivial, obviously, but gets the user thing right by > passing it to the daemon correctly. It depends on home directories > containing the right stuff. :) > > I found that using a statically linked busybox shell made a *huge* > difference to the performance when processing high mail loads with the > tools. > > Daniel > > -- > When the tyrant has disposed of foreign enemies by conquest or treaty, and > there is nothing to fear from them, then he is always stirring up some war or > other, in order that he people may require a leader. > -- Plato > > _______________________________________________________________ > Hundreds of nodes, one monster rendering program. > Now that's a super model! Visit http://clustering.foundries.sf.net/ > > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > --__--__-- Message: 4 Date: Thu, 23 May 2002 09:16:27 -0500 (CDT) From: Stephen Bader <[EMAIL PROTECTED]> To: Justin Robinson <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: RE: [SAtalk] Spamd not copying over proper user_prefs.template But if I modify the templates in this directory, they will be over written if I upgrade, right? -Steve On Wed, 22 May 2002, Justin Robinson wrote: > I believe mine are located in: > > (on machine #1): > /usr/share/spamassassin > > (on machine #2): > /usr/local/share/spamassassin > > > Try looking in those directories for a template file. > > > Justin Robinson > > > -----Original Message----- > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Sent: 5/22/02 5:35 PM > Subject: [SAtalk] Spamd not copying over proper user_prefs.template > > I am running spamd as the user 'root' with the flags "-c -d". > > According to the man page and the docs that I have found, if a > user_prefs.template file exists in /etc/mail/spamassassin, this file > will > be copied over into the users .spamassassin directory as user_prefs if > they do not already have a preferences file. Spamd is properly creating > the .spamassassin directory and user_prefs file, but it isn't copying > the > customized use_prefs.template file in /etc/mail/spamassassin, it is > copying the default user_prefs.template file. I have checked all the > permissions, and I have searched for information on why it is doing > this. > Here is an 'ls -l' on my /etc/mail/spamassassin directory: > > -rw-r--r-- 1 root wheel 148 May 22 00:04 local.cf > -rw-r--r-- 1 root wheel 68 May 22 00:19 user_prefs.template > > Customizations I have made to local.cf are taking place, so I know it is > reading the files in this directory. I have also tried restarting spamd, > but it still copies the default file and not the file I have modifed. Am > I > wrong about where spamd will copy the template file from, or is there > something else I am missing? > > TIA, > -Steve > > > > _______________________________________________________________ > > Don't miss the 2002 Sprint PCS Application Developer's Conference > August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm > > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > --__--__-- Message: 5 Date: Thu, 23 May 2002 11:18:23 -0300 (ADT) From: "Marc G. Fournier" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> Subject: [SAtalk] Per User Spam Filtering w/ postfix+cyrus+spamassassin ... After pounding my head against a wall for a very long time now, I'm starting to believe what I'm trying to do here is just not possible, but I'm hoping someone wiser out there can think of a way past this impasse ... I need to setup a mail server, using the above software ... the key requirement is that each user on the server has to have the ability to use the "per user" settings that are available in Spamassassin ... for instance, I have one user that gets a 'daily comic' from Dilbert that gets tagged as Spam, that she'd like to add to her personal whitelist(s) so that it doesn't get tag'd as such ... One of the servers that we want to set this up on is at the University where I work at, where wewan to set it up so that, by default, the 'required score' for spam is set abnormally high, to disable it by default, and let each user reduce it to a more reasonable number if they want it enabled ... All of this requires the ability for 'per-user' configurations to work ... Now, getting this to work where the email has one recipient is a piece of cake, and can be done inside of postfix quite nicely ... but as soon as you have 2+ recipients, it breaks ... For instance, from a remote machine, I just sent an email to two addresses on my machine, both on the To: line ... if you look at how the spam scoring worked, the first 'valid address' that it found is the one that it uses for scoring (kerri changed her required score to be 5.1, while mine is the default 5): ========================== Return-Path: <[EMAIL PROTECTED]> X-Sieve: cmu-sieve 2.0 Received: by earth.hub.org (Postfix, from userid 65534) id 978661037F6; Thu, 23 May 2002 10:38:16 -0300 (ADT) Received: from garlic.acadiau.ca (garlic.acadiau.ca [131.162.138.193]) by earth.hub.org (Postfix) with ESMTP id B03A21037E6; Thu, 23 May 2002 10:38:14 -0300 (ADT) Received: from atelier.acadiau.ca (atelier.acadiau.ca [131.162.138.223]) by garlic.acadiau.ca (8.11.5/8.11.5) with ESMTP id g4NDcJG50301; Thu, 23 May 2002 10:38:19 -0300 (ADT) (envelope-from [EMAIL PROTECTED]) Date: Thu, 23 May 2002 10:39:34 -0300 (ADT) From: "Marc G. Fournier" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: test2 Message-ID: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Status: No, hits=0.0 required=5.1 tests= version=2.20 X-Spam-Level: ========================== A subsequent email, as follows, scored right, as the first recipient wasn't "local" to this machine, so scored based on my rules: =========================== Return-Path: <[EMAIL PROTECTED]> X-Sieve: cmu-sieve 2.0 Received: by earth.hub.org (Postfix, from userid 65534) id 451371037EC; Thu, 23 May 2002 10:59:28 -0300 (ADT) Received: from garlic.acadiau.ca (garlic.acadiau.ca [131.162.138.193]) by earth.hub.org (Postfix) with ESMTP id 1F4AD1037C8 for <[EMAIL PROTECTED]>; Thu, 23 May 2002 10:59:12 -0300 (ADT) Received: from atelier.acadiau.ca (atelier.acadiau.ca [131.162.138.223]) by garlic.acadiau.ca (8.11.5/8.11.5) with ESMTP id g4NDxGG55241; Thu, 23 May 2002 10:59:16 -0300 (ADT) (envelope-from [EMAIL PROTECTED]) Date: Thu, 23 May 2002 11:00:31 -0300 (ADT) From: "Marc G. Fournier" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED], <[EMAIL PROTECTED]> Message-ID: <[EMAIL PROTECTED]> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Status: No, hits=2.4 required=5.0 tests=SUBJ_MISSING version=2.20 X-Spam-Level: ** ============================= Now, so far, I've tried running spamproxyd as a content_filter for postfix, but, that just processes the message, and ignores the recipient(s) altogether ... so that doesn't/won't work ... I've tried the 'spam extension' that someone wrote to sieve, which works beautifully, but doesn't mark up the message in any way that someone using a POP3 client can make use of it, nor can sieve deal with different "levels" of spam (ie. filter it differently depending on how high it scores) ... there is another extension to sieve that is being worked on that will allow for 'value filtering', but without the headers for it to work on, this won't help either ... altho, so far, its the closest to perfect that I've found ... I've tried the following in my master.cf file: smtp inet n - n - - smtpd -o content_filter=spam: spam unix - n n - - pipe flags=Rq user=nobody argv=/usr/local/etc/postfix/spam-filter ${user} -f ${sender} -- ${recipient} but that produces the above, where it uses the first valid recipient as the basis for the rules, and delivers to everyone else based on those changes ... Now, in a Cyrus environment, my understanding is that it isn't until it hits the LMTP connection itself before the 'valid recipients' are known ... if this is correct, is there any way of setting up postfix so that it "queries" the lmtp side of things for each recipient it *thinks* is valid, to make sure it is valid, and then take the message and run it through spamassassin before actually passing it to lmtp? Somehow doing: foreach valid recipient process with spamassassin and send results to lmtp for final delivery --__--__-- Message: 6 Date: Thu, 23 May 2002 16:28:18 +0200 (CEST) From: "Tony L. Svanstrom" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Out of Office AutoReply: [elektrosmog] Nordic Developer Briefing Invitation (fwd) On Wed, 22 May 2002 the voices made Craig R Hughes write: > Tony L. Svanstrom wrote: > > TLS> I know it's GA-evolved, but isn't the score (2.741) for SUBJ_HAS_SPACES > TLS> uncalled for when we're just talking about "linebreakingspaces", indenting the > TLS> continued subject-line...? > > TLS> X-Spam-Status: No, hits=3.3 required=4.5 tests=SUBJ_HAS_SPACES, > ^^^^^^^^^^^^^^^^^^^^^^^^^ > > SpamAssassin notches up another true-negative. I don't see how your example > here is an argument for changing anything -- SA is working as intended. I seem to just love looking like a fool on this ML; and after reading RFC (2)822 I see that strictly speaking SA is doing the right thing ("Unfolding is accomplished by simply removing any CRLF that is immediately followed by WSP."). IRL, however, I see unfolding done in a s/(\n\s*(?=\s\S)/\ /g-ish way (take a look at A.5. in 2822); and I'm getting e-mails where the subject's been folded with added whitespace (basically indenting the second line the length of the name of the header + 2). AFAIK these added whitespaces are not shown in most mailreaders. Based on a blurry "I'm pretty sure"-ish feeling I can't check due to me messing with all the headers before they're saved, I think that the SUBJ_HAS_SPACES rule would benefit from ignoring "indenting" WSP ("/(?<=\S)(?:\s{4,}|\t)/"?). Would it be possible to set up an environment where you can test changed/new rules against a set number of spam and non-spam, preferably the same ones used for the current GA-scores? /Tony -- # Per scientiam ad libertatem! // Through knowledge towards freedom! # # Genom kunskap mot frihet! =*= (c) 1999-2002 [EMAIL PROTECTED] =*= # -- Random URL (6/8): <URL: http://www.macslash.org/ > When http://apple.slashdot.org/ isn't enough. --__--__-- Message: 7 From: Justin Robinson <[EMAIL PROTECTED]> To: 'Stephen Bader' <[EMAIL PROTECTED]> Cc: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Subject: RE: [SAtalk] Spamd not copying over proper user_prefs.template Date: Thu, 23 May 2002 10:34:14 -0400 Why do you want to modify that one anyway? Just use the global config file and leave the user_prefs.template blank... That way if you ever want to change global user options you don't have to replace everyone's user_prefs file... Justin -----Original Message----- From: Stephen Bader [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 23, 2002 10:16 AM To: Justin Robinson Cc: [EMAIL PROTECTED] Subject: RE: [SAtalk] Spamd not copying over proper user_prefs.template But if I modify the templates in this directory, they will be over written if I upgrade, right? -Steve On Wed, 22 May 2002, Justin Robinson wrote: > I believe mine are located in: > > (on machine #1): > /usr/share/spamassassin > > (on machine #2): > /usr/local/share/spamassassin > > > Try looking in those directories for a template file. > > > Justin Robinson > > > -----Original Message----- > From: [EMAIL PROTECTED] > To: [EMAIL PROTECTED] > Sent: 5/22/02 5:35 PM > Subject: [SAtalk] Spamd not copying over proper user_prefs.template > > I am running spamd as the user 'root' with the flags "-c -d". > > According to the man page and the docs that I have found, if a > user_prefs.template file exists in /etc/mail/spamassassin, this file > will > be copied over into the users .spamassassin directory as user_prefs if > they do not already have a preferences file. Spamd is properly creating > the .spamassassin directory and user_prefs file, but it isn't copying > the > customized use_prefs.template file in /etc/mail/spamassassin, it is > copying the default user_prefs.template file. I have checked all the > permissions, and I have searched for information on why it is doing > this. > Here is an 'ls -l' on my /etc/mail/spamassassin directory: > > -rw-r--r-- 1 root wheel 148 May 22 00:04 local.cf > -rw-r--r-- 1 root wheel 68 May 22 00:19 user_prefs.template > > Customizations I have made to local.cf are taking place, so I know it is > reading the files in this directory. I have also tried restarting spamd, > but it still copies the default file and not the file I have modifed. Am > I > wrong about where spamd will copy the template file from, or is there > something else I am missing? > > TIA, > -Steve > > > > _______________________________________________________________ > > Don't miss the 2002 Sprint PCS Application Developer's Conference > August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm > > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > --__--__-- Message: 8 Date: Thu, 23 May 2002 16:35:21 +0200 From: Alain Tesio <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Per User Spam Filtering w/ postfix+cyrus+spamassassin ... On Thu, 23 May 2002 11:18:23 -0300 (ADT) "Marc G. Fournier" <[EMAIL PROTECTED]> wrote: > > I need to setup a mail server, using the above software ... the key > requirement is that each user on the server has to have the ability to use > the "per user" settings that are available in Spamassassin ... for > instance, I have one user that gets a 'daily comic' from Dilbert that gets > tagged as Spam, that she'd like to add to her personal whitelist(s) so > that it doesn't get tag'd as such ... Hi, I have a similar setup which works fine with just a couple of users: - do not install cyrus as the default delivery system in procmail - for each user, have a .forward and .procmailrc which executes spamd - deliver to cyrus through a wrapper (I wrote a small C program which executes cyradm and put the mail into a user mailbox) Maybe you could have a global procmail configuration and launch procmail directly from postfix, but I don't now if it's possible to use spamd with user-defined files. Alain --__--__-- Message: 9 Date: Thu, 23 May 2002 09:48:09 -0500 (CDT) From: Stephen Bader <[EMAIL PROTECTED]> To: Justin Robinson <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: RE: [SAtalk] Spamd not copying over proper user_prefs.template I want to make it copy over a more user friendly defaults file so if one of our users wants to ftp in and modify the file, the comments make are easier to understand and explain what we do system-wide by default. We will define system wide rules, but we want users to be able to override them, and want to make it as easy as possible for them. If we put larger, more clear comments in the template file, it will make it easier for them to follow and understand, which makes my job easier :) -Steve On Thu, 23 May 2002, Justin Robinson wrote: > Why do you want to modify that one anyway? Just use the global config file > and leave the user_prefs.template blank... That way if you ever want to > change global user options you don't have to replace everyone's user_prefs > file... > > > > Justin > > > > > > -----Original Message----- > From: Stephen Bader [mailto:[EMAIL PROTECTED]] > Sent: Thursday, May 23, 2002 10:16 AM > To: Justin Robinson > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] Spamd not copying over proper user_prefs.template > > > But if I modify the templates in this directory, they will be over written > if I upgrade, right? > > -Steve > > > On Wed, 22 May 2002, Justin Robinson wrote: > > > I believe mine are located in: > > > > (on machine #1): > > /usr/share/spamassassin > > > > (on machine #2): > > /usr/local/share/spamassassin > > > > > > Try looking in those directories for a template file. > > > > > > Justin Robinson > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > To: [EMAIL PROTECTED] > > Sent: 5/22/02 5:35 PM > > Subject: [SAtalk] Spamd not copying over proper user_prefs.template > > > > I am running spamd as the user 'root' with the flags "-c -d". > > > > According to the man page and the docs that I have found, if a > > user_prefs.template file exists in /etc/mail/spamassassin, this file > > will > > be copied over into the users .spamassassin directory as user_prefs if > > they do not already have a preferences file. Spamd is properly creating > > the .spamassassin directory and user_prefs file, but it isn't copying > > the > > customized use_prefs.template file in /etc/mail/spamassassin, it is > > copying the default user_prefs.template file. I have checked all the > > permissions, and I have searched for information on why it is doing > > this. > > Here is an 'ls -l' on my /etc/mail/spamassassin directory: > > > > -rw-r--r-- 1 root wheel 148 May 22 00:04 local.cf > > -rw-r--r-- 1 root wheel 68 May 22 00:19 user_prefs.template > > > > Customizations I have made to local.cf are taking place, so I know it is > > reading the files in this directory. I have also tried restarting spamd, > > but it still copies the default file and not the file I have modifed. Am > > I > > wrong about where spamd will copy the template file from, or is there > > something else I am missing? > > > > TIA, > > -Steve > > > > > > > > _______________________________________________________________ > > > > Don't miss the 2002 Sprint PCS Application Developer's Conference > > August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm > > > > _______________________________________________ > > Spamassassin-talk mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > > --__--__-- Message: 10 From: Vivek Khera <[EMAIL PROTECTED]> Date: Thu, 23 May 2002 11:06:34 -0400 To: [EMAIL PROTECTED], <[EMAIL PROTECTED]> Subject: [SAtalk] Re: Per User Spam Filtering w/ postfix+cyrus+spamassassin ... >>>>> "MGF" == Marc G Fournier <[EMAIL PROTECTED]> writes: MGF> For instance, from a remote machine, I just sent an email to two addresses MGF> on my machine, both on the To: line ... if you look at how the spam MGF> scoring worked, the first 'valid address' that it found is the one that it MGF> uses for scoring (kerri changed her required score to be 5.1, while mine MGF> is the default 5): It seems to me that amavisd-new is pretty close to what you want. About the only thing you'll need to add is the ability to flag spam at different levels for different people. It already does a wonderful job of handling multiple recipient email and filtering/delivering it appropriately based on whether the final recipient is configured to receive spam/virii. Hooking it into postfix is *trivial*. It does not, however, support per-user configs for white lists and other spamassassin configs... Just yesterday the Dilbert newsletter was flagged as spam because some twit reported it to Razor, throwing it over the normal threshhold, so it would be a nice feature to have. -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Vivek Khera, Ph.D. Khera Communications, Inc. Internet: [EMAIL PROTECTED] Rockville, MD +1-240-453-8497 AIM: vivekkhera Y!: vivek_khera http://www.khera.org/~vivek/ --__--__-- Message: 11 Date: Thu, 23 May 2002 11:15:53 -0400 Subject: Re: [SAtalk] Re: Sieve and SpamAssassin From: Bryan Fullerton <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] On Thursday, May 23, 2002, at 09:05 AM, Marc G. Fournier wrote: > On Thu, 23 May 2002, dman wrote: > >> Sieve is defined in an RFC, actually (but I don't know the number >> off-hand). I don't know if cyrus' implementation follows the RFC or >> not. > > As far as I know, the cyrus developers are the ones that wrote the > RFC ... > in fact, isn't Cyrus the only mail backend that currently uses it, no? http://www.cyrusoft.com/sieve/ might be useful. As far as I know, Marc is correct that Cyrus IMAPd is the only well-known(ish) mail backend using Sieve. Bryan --__--__-- Message: 12 From: Justin Robinson <[EMAIL PROTECTED]> To: 'Stephen Bader' <[EMAIL PROTECTED]> Cc: "'[EMAIL PROTECTED]'" <[EMAIL PROTECTED]> Subject: RE: [SAtalk] Spamd not copying over proper user_prefs.template Date: Thu, 23 May 2002 11:28:34 -0400 Yes it would overwite - you could always make a backup copy and just update it everytime you upgrade... Justin -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Stephen Bader Sent: Thursday, May 23, 2002 10:48 AM To: Justin Robinson Cc: [EMAIL PROTECTED] Subject: RE: [SAtalk] Spamd not copying over proper user_prefs.template I want to make it copy over a more user friendly defaults file so if one of our users wants to ftp in and modify the file, the comments make are easier to understand and explain what we do system-wide by default. We will define system wide rules, but we want users to be able to override them, and want to make it as easy as possible for them. If we put larger, more clear comments in the template file, it will make it easier for them to follow and understand, which makes my job easier :) -Steve On Thu, 23 May 2002, Justin Robinson wrote: > Why do you want to modify that one anyway? Just use the global config file > and leave the user_prefs.template blank... That way if you ever want to > change global user options you don't have to replace everyone's user_prefs > file... > > > > Justin > > > > > > -----Original Message----- > From: Stephen Bader [mailto:[EMAIL PROTECTED]] > Sent: Thursday, May 23, 2002 10:16 AM > To: Justin Robinson > Cc: [EMAIL PROTECTED] > Subject: RE: [SAtalk] Spamd not copying over proper user_prefs.template > > > But if I modify the templates in this directory, they will be over written > if I upgrade, right? > > -Steve > > > On Wed, 22 May 2002, Justin Robinson wrote: > > > I believe mine are located in: > > > > (on machine #1): > > /usr/share/spamassassin > > > > (on machine #2): > > /usr/local/share/spamassassin > > > > > > Try looking in those directories for a template file. > > > > > > Justin Robinson > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] > > To: [EMAIL PROTECTED] > > Sent: 5/22/02 5:35 PM > > Subject: [SAtalk] Spamd not copying over proper user_prefs.template > > > > I am running spamd as the user 'root' with the flags "-c -d". > > > > According to the man page and the docs that I have found, if a > > user_prefs.template file exists in /etc/mail/spamassassin, this file > > will > > be copied over into the users .spamassassin directory as user_prefs if > > they do not already have a preferences file. Spamd is properly creating > > the .spamassassin directory and user_prefs file, but it isn't copying > > the > > customized use_prefs.template file in /etc/mail/spamassassin, it is > > copying the default user_prefs.template file. I have checked all the > > permissions, and I have searched for information on why it is doing > > this. > > Here is an 'ls -l' on my /etc/mail/spamassassin directory: > > > > -rw-r--r-- 1 root wheel 148 May 22 00:04 local.cf > > -rw-r--r-- 1 root wheel 68 May 22 00:19 user_prefs.template > > > > Customizations I have made to local.cf are taking place, so I know it is > > reading the files in this directory. I have also tried restarting spamd, > > but it still copies the default file and not the file I have modifed. Am > > I > > wrong about where spamd will copy the template file from, or is there > > something else I am missing? > > > > TIA, > > -Steve > > > > > > > > _______________________________________________________________ > > > > Don't miss the 2002 Sprint PCS Application Developer's Conference > > August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm > > > > _______________________________________________ > > Spamassassin-talk mailing list > > [EMAIL PROTECTED] > > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > > > _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk --__--__-- Message: 13 Date: Thu, 23 May 2002 17:56:23 +0200 From: John Weissberg <[EMAIL PROTECTED]> Organization: PerfectProof Company To: SpamAssassin <[EMAIL PROTECTED]> Subject: [SAtalk] Postfix set-up Can anyone point me to a clear and simply explanation of how to set-up SA with Postfix using either spamd or spamproxy? I tried 4 or 5 months ago back when bleeding edge was V2.0 and was unsuccessful then. Perhaps someone has developed a good solution now. -- John Weissberg PerfectProof www.perfectproof.com USA (888) 228 9070 Tel. (888) 228 9070 FAX Europe +32 2 253 0732 Tel. +32 2 253 3667 FAX --__--__-- Message: 14 Date: Thu, 23 May 2002 11:33:41 -0400 Subject: Re: [SAtalk] Sieve and SpamAssassin From: Bryan Fullerton <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] On Wednesday, May 22, 2002, at 10:58 PM, Paul Bauer wrote: > I have been poking through the list and through google and haven't had > any luck with configureing SpamAssassin to work with sieve and cyrus. Sieve is specifically designed for use in a black box mail server like Cyrus IMAPd. From the Abstract section of RFC 3028 (Sieve: A Mail Filtering Language): [...] It is suitable for running on a mail server where users may not be allowed to execute arbitrary programs, such as on black box Internet Message Access Protocol (IMAP) servers, as it has no variables, loops, or ability to shell out to external programs. So you need to feed your mail to SA before it gets to Cyrus (and Sieve). This can done by having your MTA feed mail to [something], which then feeds the mail to SA and takes the results and sends them to Cyrus. The spamcheck.py script in the SA /contrib directory will do this for Postfix, not sure about other MTAs. Be careful when using a bridge like this, however, as you can lose mail if there are problems. Bryan --__--__-- Message: 15 From: Corwin Grey <[EMAIL PROTECTED]> Date: Thu, 23 May 2002 08:38:32 -0700 To: John Horne <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Which user is running spamd - is this okay? On Thu, May 23, 2002 at 02:05:57PM +0100, John Horne wrote: > > May 23 14:02:55 tracy.csd.plymouth.ac.uk spamd[29334]: connection from > localhost [ 127.0.0.1 ] at port 32922 > May 23 14:02:55 tracy.csd.plymouth.ac.uk spamd[5]: Still running as root: > user not specified, not found, or set to root. Fall back to nobody. > May 23 14:02:55 tracy.csd.plymouth.ac.uk spamd[5]: identified spam > (5.2/5.0) for (unknown):60001 in 0 seconds. > > It is the third line which confuses me. Why does it show the user as > 'unknown'. If spamd is running as root, my understanding is that when it is Hello John, I'm guessing that you are probably running spamc via a global /etc/procmailrc file. If so, you need to include the line DROPPRIVS=yes somewhere within the spamc rule (or at the top of your procmail file if this is what you want). The log message is actually a result of the global procmail running as root. The DROPPRIVS=yes will force it to run as the user that will be receiving the local delivery of the message. -- Corwin Grey, MCP Application Development Network Engineering Network Operations Services http://www.techtell.com --__--__-- Message: 16 From: Vivek Khera <[EMAIL PROTECTED]> Date: Thu, 23 May 2002 11:45:31 -0400 To: SpamAssassin <[EMAIL PROTECTED]> Subject: Re: [SAtalk] Postfix set-up >>>>> "JW" == John Weissberg <[EMAIL PROTECTED]> writes: JW> Can anyone point me to a clear and simply explanation of how to set-up JW> SA with Postfix using either spamd or spamproxy? spamproxyd can lose your mail, so don't use it. what I'm using is amavisd-new without any antivirus checker. basically, I configured amavisd-new with the --enable-all flag, then set the program for $uvscan to /usr/bin/true so it doesn't complain about a missing virus scanner. then just follow the directions for postfix that come with amavisd-new. it is trivial to get going. you don't get per-user configurations, but it is a server-level solution and your users may not exist on that server anyway (mine don't). --__--__-- Message: 17 Date: Thu, 23 May 2002 10:50:26 -0500 (CDT) From: Stephen Bader <[EMAIL PROTECTED]> To: John Weissberg <[EMAIL PROTECTED]> Cc: SpamAssassin <[EMAIL PROTECTED]> Subject: Re: [SAtalk] Postfix set-up John, I am setting up the same thing at the moment actually. I haven't fully released it to our customer base, but I am testing it and it is working fine. Any comments from others would be great though. I've installed Procmail v3.22 and SpamAssassin 2.20. I am running spamd with the flags -d (daemon) and -c (create user prefs files). I am running it as the user root. I've looked into mysql, but the docs said it is still Beta and could change at any time. I've had good luck so far with files in the users home directory anyways. It just makes it harder for the end user to customize. In my main.cf for postfix, I have: mailbox_command = /usr/local/bin/procmail This calls procmail, which then reads a system-wide rcfile I have installed in /usr/local/etc/procmailrc which consists of: :0fw | /usr/bin/spamc This seems to work great. I also don't suffer from the issues I've read here about postfix and people having problems with required hits being wrong when sending to more than one recipient. I made local customizations to /etc/mail/spamassassin/local.cf to change the default required hits for all of my users, which they can override with the user_prefs file in their .spamassassin directory. HTH! -Steve On Thu, 23 May 2002, John Weissberg wrote: > Can anyone point me to a clear and simply explanation of how to set-up > SA with Postfix using either spamd or spamproxy? > > I tried 4 or 5 months ago back when bleeding edge was V2.0 and was > unsuccessful then. Perhaps someone has developed a good solution now. > > -- > > John Weissberg > PerfectProof > www.perfectproof.com > > USA > (888) 228 9070 Tel. > (888) 228 9070 FAX > > Europe > +32 2 253 0732 Tel. > +32 2 253 3667 FAX > > > > _______________________________________________________________ > > Don't miss the 2002 Sprint PCS Application Developer's Conference > August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm > > _______________________________________________ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk > --__--__-- Message: 18 Date: Thu, 23 May 2002 09:00:34 -0700 (PDT) From: Craig R Hughes <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: [SAtalk] Apologies for absence/slowness this week If I've been somewhat unresponsive this week both to list mail and direct mail, it's only because I'm getting married this Sunday, and with all the family in town, etc. things are pretty hectic. Not to mention the hyper fiancee who keeps thinking everything's going wrong, and worrying the cake won't be there, etc. I should be back up to speed next week in a more substantial way -- not going on honeymoon until end of june. C --__--__-- Message: 19 From: "Rick Macdougall" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> Subject: Re: [SAtalk] Apologies for absence/slowness this week Date: Thu, 23 May 2002 12:04:48 -0400 Ho! Congrats! I'm doing the same the last Saturday in June. Hope you have a lovely wedding! Rick ----- Original Message ----- From: "Craig R Hughes" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, May 23, 2002 12:00 PM Subject: [SAtalk] Apologies for absence/slowness this week If I've been somewhat unresponsive this week both to list mail and direct mail, it's only because I'm getting married this Sunday, and with all the family in town, etc. things are pretty hectic. Not to mention the hyper fiancee who keeps thinking everything's going wrong, and worrying the cake won't be there, etc. I should be back up to speed next week in a more substantial way -- not going on honeymoon until end of june. C _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk --__--__-- Message: 20 Date: Thu, 23 May 2002 09:08:58 -0700 (PDT) From: Craig R Hughes <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] To: Daniel Quinlan <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] date difference testing Looks great Daniel -- go ahead and check it in. Probably skip the iterations stuff for now. C Daniel Quinlan wrote: DQ> Based on these results, my inclination is to add all of the above rules DQ> and let the GA sort it out. They all look pretty good to me except for DQ> DATE_IN_FUTURE_03_06 (it could just be my small sample size, though, DQ> because 7 out of the 9 false positives were from one guy). If any rules DQ> at the lower end of the range have a negative score, we can remove them DQ> later. --__--__-- Message: 21 Date: Thu, 23 May 2002 11:11:10 -0500 From: David T-G <[EMAIL PROTECTED]> To: SpamAssassin Users' list <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Apologies for absence/slowness this week --ieNMXl1Fr3cevapt Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable Craig -- =2E..and then Craig R Hughes said... %=20 % If I've been somewhat unresponsive this week both to list mail and direct= mail, We've managed, though :-) % it's only because I'm getting married this Sunday, and with all the famil= y in Yay for you! Congratulations! Be sure to post the link to the web site when the pictures are ready. % town, etc. things are pretty hectic. Not to mention the hyper fiancee wh= o keeps % thinking everything's going wrong, and worrying the cake won't be there, = etc. Ah, yes... Just remember that they can't start without the two of you there and that it's really about the two of you and things will fall into perspective a lot better :-) %=20 % I should be back up to speed next week in a more substantial way -- not g= oing on % honeymoon until end of june. Have fun then, too; we'll muddle through again. Probably shouldn't post *this* link, though ;-) %=20 % C HAND & congrats :-D --=20 David T-G * It's easier to fight for one's principles (play) [EMAIL PROTECTED] * than to live up to them. -- fortune cookie (work) [EMAIL PROTECTED] http://www.justpickone.org/davidtg/ Shpx gur Pbzzhavpngvbaf Qrprapl Npg! --ieNMXl1Fr3cevapt Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.7 (GNU/Linux) iD8DBQE87RSeGb7uCXufRwARAp0wAKDYyvppLNS0OiDhObsqB5MlTLFDRACggyIh PrMcA/ChrfszrLIasd0q76w= =tPql -----END PGP SIGNATURE----- --ieNMXl1Fr3cevapt-- --__--__-- Message: 22 From: Corwin Grey <[EMAIL PROTECTED]> Date: Thu, 23 May 2002 09:15:39 -0700 To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Apologies for absence/slowness this week On Thu, May 23, 2002 at 09:00:34AM -0700, Craig R Hughes wrote: > If I've been somewhat unresponsive this week both to list mail and direct mail, > it's only because I'm getting married this Sunday, and with all the family in > town, etc. things are pretty hectic. Not to mention the hyper fiancee who keeps > thinking everything's going wrong, and worrying the cake won't be there, etc. > > I should be back up to speed next week in a more substantial way -- not going on > honeymoon until end of june. Congratulations!!! I just got married 18 months ago and I don't think I was able to focus on a project at all for about a month beforehand (and afterwards). -- Corwin Grey, MCP Application Development Network Engineering Network Operations Services http://www.techtell.com --__--__-- Message: 23 Date: Thu, 23 May 2002 09:14:53 -0700 (PDT) From: Bart Schaefer <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: [SAtalk] Suggested rule for "We will promote your ..." Getting a lot of spam recently with text like this: > We have visited www.zanshin.com and found it a thoughtfully-designed one > with much helpful information but poorly listed in many search engines. > It's time to do something. Find a most effective way of advertising, > find FULLPROMOTE=21 Best Service, lowest cost=21 Fullpromote will > instantly submit your website to all the famous searching engines around > the world.=20 To check our pricelist and submit www.zanshin.com to > 500,000 search engines in the world, go to www.fullpromote.com.We will > try our best to publicize your website. (I know advertising this stuff is not new, but we've just started getting the spam.) I've been using this rule for a while: body PROMOTE_YOUR_BUSINESS /(?:(?:advert|public)i[sz]e|promote|increase|grow|expand|boost)\s+.{0,15}\b( ?:(?:web)?site|business|offer(?:ing)?|(?:down|power)line|exposure)/i describe PROMOTE_YOUR_BUSINESS Wants to help promote your business score PROMOTE_YOUR_BUSINESS 3.0 The score of 3.0 is not entirely arbitrary -- it was chosen to be high enough to push any of the false-negatives I'd seen at the time, into the positives. However, the search engine promotion quoted above was still a false negative (matched only DEAR_SOMEBODY at -0.5 plus the rule above). Does anybody already have a "submit to search engine" rule they'd like to share? Oh: test PROMOTE_YOUR_BUSINESS ok publicize your website test PROMOTE_YOUR_BUSINESS ok grow your business test PROMOTE_YOUR_BUSINESS ok Increase your Business Sales! test PROMOTE_YOUR_BUSINESS ok Fwd:Promote any business test PROMOTE_YOUR_BUSINESS ok boost your Internet exposure Sorry, no "fail" tests at the moment ... --__--__-- Message: 24 Date: Thu, 23 May 2002 09:18:21 -0700 From: Daniel Rogers <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: Daniel Quinlan <[EMAIL PROTECTED]>, Theo Van Dinter <[EMAIL PROTECTED]>, Jim Scott <[EMAIL PROTECTED]>, Spamassassin List <[EMAIL PROTECTED]> Subject: Re: [SAtalk] One detected as -67 points?? On Wed, May 22, 2002 at 05:49:59PM -0700, Craig R Hughes wrote: > Well, the trouble is that SA isn't on the outbound path, and it's often a lot > more difficult to insert ourselves into the outbound stream than to insert into > the inbound stream. What if you're reading your office email from your home > computer, and sending via your ISP's smtp server? Just too many variables, > unless you have really good control over all your mail users. If you run SA from mimedefang as a milter, it's on the outbound stream too. Dan. --__--__-- Message: 25 Date: Thu, 23 May 2002 09:27:27 -0700 To: [EMAIL PROTECTED] From: Michelle Brownsworth <[EMAIL PROTECTED]> Subject: [SAtalk] Minus value hits on spam A piece of spam made it through our filters this morning. It was almost a prototypical spam; I was surprised it hadn't been bit-bucketed. Then I noticed the X-Spam-Status had an -81 rating. Anyone seen anything like this? From: MyPoints Member Values <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Subject: Download your 50% Hotel Card by 6/5/02 X-Indiv: y5c74399c7bf323dd7d75535202bf53b8 X-JobID: 104315 X-Spam-Status: No, hits=-81.0 required=5.0 tests=INVALID_DATE_NO_TZ,DEAR_SOMEBODY,NO_OBLIGATION,GREAT_OFFER,EARN_PER_WE EK,CLICK_BELOW,COPYRIGHT_CLAIMED,BIG_FONT,NO_MX_FOR_FROM,RCVD_IN_OSIRUSOFT_C OM,USER_IN_WHITELIST,X_OSIRU_SPAM_SRC version=2.20 X-Spam-Level: I also noted the "USER_IN_WHITELIST" in the tests list, from which I infer the sender is on the good guys list. I'm a little unclear from reading the docs as to how to see who's on the list and how to remove an entry. .\\ichelle -------------------- Michelle Brownsworth System Administrator Willamette.Net http://www.willamette.net Phone (541) 465-3282 Fax (541) 465-1194 --__--__-- Message: 26 Date: Thu, 23 May 2002 17:26:26 +0100 (BST) Reply-To: [EMAIL PROTECTED] Organization: University of Plymouth From: John Horne <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Which user is running spamd - is this okay? On 23-May-2002 at 15:38:32 Corwin Grey wrote: > On Thu, May 23, 2002 at 02:05:57PM +0100, John Horne wrote: >> May 23 14:02:55 tracy.csd.plymouth.ac.uk spamd[29334]: connection from >> localhost [ 127.0.0.1 ] at port 32922 >> May 23 14:02:55 tracy.csd.plymouth.ac.uk spamd[5]: Still running as >> root: user not specified, not found, or set to root. Fall back >> to nobody. >> May 23 14:02:55 tracy.csd.plymouth.ac.uk spamd[5]: identified spam >> (5.2/5.0) for (unknown):60001 in 0 seconds. >> > I'm guessing that you are probably running spamc via a global > /etc/procmailrc file. > No, we run spamc from the Exim MTA, however I think your statements are still applicable in as much as the MTA will run as root. My understanding though was that the MTA runs as root so that it can change to the (normal) user which we have configured it to use when it runs 'spamc'. Hence I thought spamc would run as the (MTA) configured user. Looking at the spamd man page says that if spamd is running as root then it will take on the userid of the person using spamc - hence I would expect to see a username in the messages and not 'unknown'. Confusing. I may need well need to look at the Exim docs again. John. ------------------------------------------------------------------------ John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] PGP key available from public key servers --__--__-- Message: 27 From: Corwin Grey <[EMAIL PROTECTED]> Date: Thu, 23 May 2002 09:40:46 -0700 To: John Horne <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] Which user is running spamd - is this okay? On Thu, May 23, 2002 at 05:26:26PM +0100, John Horne wrote: > On 23-May-2002 at 15:38:32 Corwin Grey wrote: > No, we run spamc from the Exim MTA, however I think your statements are > still applicable in as much as the MTA will run as root. I'm not very familiar with Exim. Does Exim function as both MTA and MDA? -- Corwin Grey, MCP Application Development Network Engineering Network Operations Services http://www.techtell.com --__--__-- Message: 28 Date: Thu, 23 May 2002 13:58:04 -0300 (ADT) From: "Marc G. Fournier" <[EMAIL PROTECTED]> To: Alain Tesio <[EMAIL PROTECTED]> Cc: [EMAIL PROTECTED], <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> Subject: [SAtalk] LMTP Filtering: A Potential Solution Hey all ... After I sent out my last email, I spent some more time scouring the web looking for some way of doing this, and came across: http://www.btinternet.com/~davecridland/sanifilter-HOWTO/t1.html Its a Virus scanner that works at the LMTP level, which, from what I can tell from the postfix logs, would be *exactly* what is needed ... unless I'm reading the logs wrong: May 23 11:33:11 earth postfix/qmgr[14211]: 8F5411037C9: from=<[EMAIL PROTECTED]>, size=361, nrcpt=2 (queue active) May 23 11:33:12 earth postfix/lmtp[39317]: 8F5411037C9: to=<[EMAIL PROTECTED]>, relay=/var/run/socket/lmtp[/var/run/socket/lmtp], delay=1, status=sent (250 2.1.5 Ok) May 23 11:33:12 earth postfix/lmtp[41328]: 8F5411037C9: to=<[EMAIL PROTECTED]>, relay=/var/run/socket/lmtp[/var/run/socket/lmtp], delay=1, status=sent (250 2.1.5 Ok) the previous indicates that one message came in, and two seperate lmtp processes were used for delivery, one for each recipient ... I'm suspecting that this is what the whole idea of the lmtpproxyd stuff is that comes with the newest Cyrus? Has anyone toyed with this to create a lmtp-spam proxy? I believe there was mentioned *some* reason why lmtpproxyd in Cyrus wouldn't do for this at this time, but I might have missed something ... ? I'm going to look at the sanifilter stuff and see what would be involved in 'converting it', but just would like to know if someone else has already looked down this road, and/or is working on it? Thanks ... --__--__-- Message: 29 Date: Thu, 23 May 2002 18:13:57 +0100 (BST) Reply-To: [EMAIL PROTECTED] Organization: University of Plymouth From: John Horne <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: [SAtalk] Which user is running spamd - is this okay? On 23-May-2002 at 16:40:46 Corwin Grey wrote: > On Thu, May 23, 2002 at 05:26:26PM +0100, John Horne wrote: >> On 23-May-2002 at 15:38:32 Corwin Grey wrote: > >> No, we run spamc from the Exim MTA, however I think your statements are >> still applicable in as much as the MTA will run as root. > > I'm not very familiar with Exim. Does Exim function as both MTA and MDA? > I'll say yes, but I'm not familiar as such with MDA's. Exim can pass mail on (an MTA) but it can also delivery mail to local accounts (actually on the mailhub) - in that respect I assume it is an MDA? John. ------------------------------------------------------------------------ John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] PGP key available from public key servers --__--__-- Message: 30 Date: Thu, 23 May 2002 14:15:18 -0300 (ADT) From: "Marc G. Fournier" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [SAtalk] LMTPproxy *sigh* ... The last place I looked was the first place I should have ... Craig, if its okay with James, would it be possible to take contrib/spamcheck.py and move it to lmtpproxy/lmtpproxy.py? So that it stands out a bit more? I'm going to work on moving to this righ tnow, but it looks like I've finally found a solution that makes sense ... --__--__-- Message: 31 Date: Thu, 23 May 2002 18:40:04 +0200 From: Julien Beauviala <[EMAIL PROTECTED]> Subject: Re: [SAtalk] Postfix set-up To: [EMAIL PROTECTED] On 23/05/02 at 17:56, John Weissberg <[EMAIL PROTECTED]> wrote : > Can anyone point me to a clear and simply explanation of how > to set-up SA with Postfix using either spamd or spamproxy? > > I tried 4 or 5 months ago back when bleeding edge was V2.0 and > was unsuccessful then. Perhaps someone has developed a good > solution now. Hum, surely there are better tutorials, but this works for me (with spamd, on a FreeBSD 4.4 box) Postfix 1.1.7, procmail and spamassassin installed through the port collection. 1 in my .forward file : >---------------------------------- "|IFS=' ' && p=/usr/local/bin/procmail && exec $p -Yf- || exit 75 #usernamehere" ----------------------------------< 2 in my .procmail file : >---------------------------------- PATH=$HOME/bin:/usr/bin:/bin:/usr/local/bin:. MAILDIR=$HOME/Mail LOGFILE=$MAILDIR/from LOCKFILE=$HOME/.lockmail :0fw | spamc # all flagged spam is sent to another account # for later review. If it was a false positive # bounce to the right person. :0 * ^X-Spam-Status: Yes ! [EMAIL PROTECTED] ----------------------------------< 3 set the flags as you want them in /usr/local/etc/rc.d/spamd.sh (for ex: -c -L -a -d) and start spamd. 4 edit a /etc/mail/spamassassin/local.cf. Here is mine : >---------------------------------- # no subject rewrite : rewrite_subject 0 # a few precautions : all_spam_from [EMAIL PROTECTED] [EMAIL PROTECTED] all_spam_to spamassassin-l@* ----------------------------------< Voila, it works good. For me. Best of luck. j. --__--__-- _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk End of Spamassassin-talk Digest _______________________________________________________________ Don't miss the 2002 Sprint PCS Application Developer's Conference August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
