Yes, I'm running bayes and AWL, but it has been running all the way from the very first releases which supported Bayes. Anyway, here's my local.cf (trimmed) it also has a large number of whitelist entries, since many many mails from yahoo get tagged as spam because they send the email ususlly three hours in the future, and because many suppliers of the Faculty send spammy-like mails, but I've cut them out, and I'm only sending the (I think) relevant part. OK, so here it is:
#Users that bypass filtering use_auto_whitelist 1 lock_method flock skip_rbl_checks 1 ok_locales en es gr allow_user_rules 0 dns_available no trusted_networks 163.10.18.0/32 trusted_networks 163.10.7.0/32 #timelog (hace mucha basura, no dejar!!) #timelog_path /var/spool/spamassassin #razor use_razor2 0 #razor_config /etc/razor/razor-agent.conf #razor_timeout 5 #dcc use_dcc 0 #dcc_path /usr/local/bin/dccproc #dcc_add_header 1 #dcc_timeout 5 auto_whitelist_path /var/spool/spamassassin/auto-whitelist bayes_path /var/spool/spamassassin/bayes auto_whitelist_file_mode 0777 required_hits 5 use_pyzor 0 # Custom Rules header NOTEBOOKS Subject =~ /[Nn]otebooks/i describe NOTEBOOKS Spam acerca de venta de notebooks score NOTEBOOKS 10.0 header MANUALES Subject =~ /[Mm]anuales/i describe MANUALES Spam acerca de venta de manuales score MANUALES 6.0 body SOLTERO /desuscribiremail2/i describe SOLTERO Spam acerca de dating sites score SOLTERO 6.0 body ATANASOF /Atanasof/i describe ATANASOF Spam de quien no debería hacerlo score ATANASOF 17.0 #prueba de una regla para cachar el tipo nuevo de spam: header DATING_TRUCHO Subject =~ /re\:\[\d\]/i describe DATING_TRUCHO Sitios de citas en ingles score DATING_TRUCHO 7.0 Additionally, I have to add that I still have one warning when I run spamassassin --lint, and it seems to come from the standard ruleset: warning: description for EXCUSE_ES_03 is over 50 chars On Fri, 1 Oct 2004 12:14:59 -0400, Chris Santerre <[EMAIL PROTECTED]> wrote: > Can you post your local.cf file? Maybe one of the rules has a typo that is > sending it to parts unknown. We've seen something like that before. Are you > running bayes and awl? > > --Chris > > > > >-----Original Message----- > >From: Luis Hernán Otegui [mailto:[EMAIL PROTECTED] > >Sent: Friday, October 01, 2004 11:52 AM > >To: Chris Santerre > >Cc: Matt Kettler; users@spamassassin.apache.org > >Subject: Re: SA 3.0 is eating up all my memory!!! > > > > > >ok, all I had in the /etc/mail/spamassassin dir was my local.cf and > >the init.pre. I've cleaned the local.cf according to the list of > >obsolete rules and directives, and still it is eating as much memory > >as it can... > >No idea why, the setup is the same as for another 4 production > >servers, it started all when I upgraded to 3.0... > > > > > >On Fri, 1 Oct 2004 11:05:40 -0400, Chris Santerre > ><[EMAIL PROTECTED]> wrote: > >> Something is seriously wrong with your setup! Move all cf > >files except > >> local.cf out of the > >> /etc/mail/spamassassin dir and restart spamd. What does it read then? > >> > >> There is no way spamd should be that large!! > >> > >> --Chris > >> > >> > >> > >> >-----Original Message----- > >> >From: Luis Hernán Otegui [mailto:[EMAIL PROTECTED] > >> >Sent: Friday, October 01, 2004 11:00 AM > >> >To: Matt Kettler > >> >Cc: users@spamassassin.apache.org > >> >Subject: Re: SA 3.0 is eating up all my memory!!! > >> > > >> > > >> >Just a little update, this is what's going on over the server: > >> > > >> > 11:59am up 16:12, 1 user, load average: 10,51, 5,30, 2,47 > >> >151 processes: 144 sleeping, 6 running, 1 zombie, 0 stopped > >> >CPU states: 6,5% user, 2,1% system, 0,0% nice, 91,3% idle > >> >Mem: 449484K av, 444476K used, 5008K free, 0K > >> >shrd, 12K buff > >> >Swap: 265032K av, 263440K used, 1592K free > >> > 24896K cached > >> > > >> > PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM > >TIME COMMAND > >> > 9295 spamd 15 0 90604 79M 4788 S 0,0 18,1 0:09 spamd > >> > 9293 spamd 15 0 90228 78M 4908 S 0,0 17,9 0:09 spamd > >> > 9289 spamd 18 0 90248 66M 3924 S 0,0 15,2 0:09 spamd > >> > 9298 spamd 15 0 22808 14M 4764 S 0,0 3,2 0:00 spamd > >> > 9296 spamd 15 0 22904 14M 4744 S 0,0 3,2 0:00 spamd > >> > 9291 spamd 15 0 22896 14M 4732 S 0,0 3,2 0:00 spamd > >> > 9297 spamd 15 0 23008 14M 4740 S 0,0 3,2 0:00 spamd > >> > 9292 spamd 16 0 22480 13M 4856 S 0,0 3,1 0:00 spamd > >> > 9294 spamd 15 0 22460 13M 4800 S 0,0 3,0 0:00 spamd > >> > 9299 spamd 15 0 22440 13M 4908 S 0,0 3,0 0:00 spamd > >> > 9302 spamd 15 0 22808 12M 4636 D 0,0 2,9 0:00 spamd > >> > 9300 spamd 15 0 22524 12M 4720 D 0,7 2,8 0:00 spamd > >> > 9301 spamd 15 0 22460 12M 4652 D 0,1 2,7 0:00 spamd > >> > 9290 spamd 15 0 22704 9628 3760 S 0,0 2,1 0:00 spamd > >> > 7844 apache 15 0 7708 7204 6336 S 0,0 1,6 0:04 httpd > >> > 7437 apache 15 0 7488 7008 4916 S 0,1 1,5 0:04 httpd > >> > 7564 apache 15 0 7520 7008 4840 S 0,0 1,5 0:04 httpd > >> > > >> >I mean, 80 MB for the master spamd porcess? How do I limit this? > >> > > >> >On Fri, 1 Oct 2004 10:37:05 -0300, Luis Hernán Otegui > >> ><[EMAIL PROTECTED]> wrote: > >> >> ok, the virus warning issues have been solved, but NOT the > >> >fact that I > >> >> have 22 copies of spamd running at the same time, even when I´ve > >> >> limited the number of max children of Sendmail to 20, and > >> >each copy of > >> >> spamd weights 21 MB! How can I limit the amount of memory spamd is > >> >> chewing? > >> >> > >> >> > >> >> > >> >> > >> >> On Thu, 30 Sep 2004 21:05:29 -0400, Matt Kettler > >> ><[EMAIL PROTECTED]> wrote: > >> >> > At 07:29 PM 9/30/2004, Luis Hernán Otegui wrote: > >> >> > >warning: rule 'VIRUS_WARNING_MYDOOM_BNCE' is over 22 chars > >> >> > >lint: 51 issues detected. please rerun with debug > >> >enabled for more > >> >> > >information. > >> >> > > > >> >> > >I have an antivirus running as a milter, how do I disable > >> >the virus > >> >> > >tests in SA, and also, why do I have this warnings? > >> >> > > >> >> > Those aren't virus tests, those are tests for "Someone > >> >sent a virus using > >> >> > your address and my virus scanner is stupidly telling you > >> >about it" type > >> >> > emails. > >> >> > > >> >> > They are also not a part of spamassassin's default rules, > >> >they are an add > >> >> > on called bogus-virus-warnings.cf . > >> >> > > >> >> > If you don't want the ruleset, remove it. Otherwise update > >> >it from it's source: > >> >> > http://www.timj.co.uk/linux/bogus-virus-warnings.cf > >> >> > > >> >> > > >> >> > >> >> > >> >> -- > >> >> ------------------------------------------------- > >> >> GNU-GPL: "May The Source Be With You... > >> >> ------------------------------------------------- > >> >> > >> > > >> > > >> > > >> >-- > >> >------------------------------------------------- > >> >GNU-GPL: "May The Source Be With You... > >> >------------------------------------------------- > >> > > >> > > > > > > > >-- > >------------------------------------------------- > >GNU-GPL: "May The Source Be With You... > >------------------------------------------------- > > > -- ------------------------------------------------- GNU-GPL: "May The Source Be With You... -------------------------------------------------
