Re: Differing scores on spamassassin checks

2018-04-15 Thread RW
On Sun, 15 Apr 2018 13:39:31 -0500
Computer Bob wrote:

> Update:
> For this location, it is ok to have a central bayes database, so I 
> turned off AWL, adjusted local.cf to contain:
> bayes_path /Central_Path/bayes_db/bayes
> bayes_file_mode 0777

Don't set 0777. If that's still in the wiki someone with access should
remove it.

All setting bayes_path buys you here is the ability to run sa-learn and
spamassassin as root, something you should *never* do anyway. 

If you run spamd as the unix user spamd, with "-u spamd", then spamd
look for files in ~spamd which is where it was finding them when you
(correctly) ran spamassassin as spamd.



On Sun, 15 Apr 2018 13:39:46 -0500
Computer Bob wrote:

> I still am a bit puzzled how bayes db gets handled when using virtual 
> users and domains. I see no trace of bayes or .spamassassin files in
> any of the virtual locations or in the sql databases.

It doesn't do that by default.


Re: Differing scores on spamassassin checks

2018-04-15 Thread RW
On Sun, 15 Apr 2018 11:08:35 -0700 (PDT)
John Hardin wrote:

> On Sun, 15 Apr 2018, Matus UHLAR - fantomas wrote:
> 
> > On 15.04.18 11:55, Computer Bob wrote:  
> >> Here is a root scan:  https://pastebin.com/qdXMRzKb  
> >
> > X-Spam-Status: Yes, score=10.2 required=4.0 tests=HTML_MESSAGE,
> >RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS,
> >URIBL_DBL_SPAM autolearn=no autolearn_force=no version=3.4.1
> >  
> >> Here is the same run under spamd: https://pastebin.com/SvvYptYv  
> >
> > X-Spam-Status: No, score=2.5 required=4.0
> > tests=AWL,BAYES_00,HTML_MESSAGE,
> > RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS
> > autolearn=no autolearn_force=no version=3.4.1
> >
> > the main two differences are AWL and BAYES_00 which means
> >
> > 1. your spamd' bayes database is mistrained
> > 2. you apparently should disable AWL at least until you train bayes
> > properly.  
> 
> Actually, it's using user-specific (vs. global) bayes databases, and 
> apparently only root's database is being trained.

No that's not correct. The version run as spamd is using files under
~spamd and has BAYES_00, the version run as root is using files under
~root and hasn't been trained.



Re: Differing scores on spamassassin checks

2018-04-15 Thread Matus UHLAR - fantomas

On 15.04.18 11:55, Computer Bob wrote:

Here is a root scan:  https://pastebin.com/qdXMRzKb



On Sun, 15 Apr 2018, Matus UHLAR - fantomas wrote:

X-Spam-Status: Yes, score=10.2 required=4.0 tests=HTML_MESSAGE,
  RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS,
  URIBL_DBL_SPAM autolearn=no autolearn_force=no version=3.4.1



Here is the same run under spamd: https://pastebin.com/SvvYptYv



X-Spam-Status: No, score=2.5 required=4.0 tests=AWL,BAYES_00,HTML_MESSAGE,
  RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS
  autolearn=no autolearn_force=no version=3.4.1



the main two differences are AWL and BAYES_00 which means

1. your spamd' bayes database is mistrained
2. you apparently should disable AWL at least until you train bayes
properly.



On Sun, 15 Apr 2018, John Hardin wrote:
Actually, it's using user-specific (vs. global) bayes databases, 
and apparently only root's database is being trained.


Define a shared Bayes database that all users can read and use that.


On 15.04.18 11:13, John Hardin wrote:

...or train as spamd rather than as root...


the root's BAYES DB seems untrained.
the spamd's is trained, but badly (re-training should help there).

the question is:

how is spamassassin used? running spamd? does spamd run with "-u" option?

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Depression is merely anger without enthusiasm. 


Re: Differing scores on spamassassin checks

2018-04-15 Thread John Hardin

On Sun, 15 Apr 2018, John Hardin wrote:


On Sun, 15 Apr 2018, Matus UHLAR - fantomas wrote:


On 15.04.18 11:55, Computer Bob wrote:

Here is a root scan:  https://pastebin.com/qdXMRzKb


X-Spam-Status: Yes, score=10.2 required=4.0 tests=HTML_MESSAGE,
   RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS,
   URIBL_DBL_SPAM autolearn=no autolearn_force=no version=3.4.1


Here is the same run under spamd: https://pastebin.com/SvvYptYv


X-Spam-Status: No, score=2.5 required=4.0 tests=AWL,BAYES_00,HTML_MESSAGE,
   RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS
   autolearn=no autolearn_force=no version=3.4.1

the main two differences are AWL and BAYES_00 which means

1. your spamd' bayes database is mistrained
2. you apparently should disable AWL at least until you train bayes
properly.


Actually, it's using user-specific (vs. global) bayes databases, and 
apparently only root's database is being trained.


Define a shared Bayes database that all users can read and use that.


...or train as spamd rather than as root...

--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Our government should bear in mind the fact that the American
  Revolution was touched off by the then-current government
  attempting to confiscate firearms from the people.
---
 4 days until the 243rd anniversary of The Shot Heard 'Round The World

Re: Differing scores on spamassassin checks

2018-04-15 Thread John Hardin

On Sun, 15 Apr 2018, Matus UHLAR - fantomas wrote:


On 15.04.18 11:55, Computer Bob wrote:

Here is a root scan:  https://pastebin.com/qdXMRzKb


X-Spam-Status: Yes, score=10.2 required=4.0 tests=HTML_MESSAGE,
   RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS,
   URIBL_DBL_SPAM autolearn=no autolearn_force=no version=3.4.1


Here is the same run under spamd: https://pastebin.com/SvvYptYv


X-Spam-Status: No, score=2.5 required=4.0 tests=AWL,BAYES_00,HTML_MESSAGE,
   RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS
   autolearn=no autolearn_force=no version=3.4.1

the main two differences are AWL and BAYES_00 which means

1. your spamd' bayes database is mistrained
2. you apparently should disable AWL at least until you train bayes
properly.


Actually, it's using user-specific (vs. global) bayes databases, and 
apparently only root's database is being trained.


Define a shared Bayes database that all users can read and use that.

--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Our government should bear in mind the fact that the American
  Revolution was touched off by the then-current government
  attempting to confiscate firearms from the people.
---
 4 days until the 243rd anniversary of The Shot Heard 'Round The World

Re: Differing scores on spamassassin checks

2018-04-15 Thread Matus UHLAR - fantomas

On 15.04.18 11:55, Computer Bob wrote:

Here is a root scan:  https://pastebin.com/qdXMRzKb


X-Spam-Status: Yes, score=10.2 required=4.0 tests=HTML_MESSAGE,
RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS,
URIBL_DBL_SPAM autolearn=no autolearn_force=no version=3.4.1


Here is the same run under spamd: https://pastebin.com/SvvYptYv


X-Spam-Status: No, score=2.5 required=4.0 tests=AWL,BAYES_00,HTML_MESSAGE,
RAZOR2_CF_RANGE_51_100,RAZOR2_CHECK,RCVD_IN_SBL_CSS,SPF_HELO_PASS
autolearn=no autolearn_force=no version=3.4.1

the main two differences are AWL and BAYES_00 which means

1. your spamd' bayes database is mistrained
2. you apparently should disable AWL at least until you train bayes
properly.



On 4/15/18 11:34 AM, Computer Bob wrote:

Greeting all, *
*I have had some issues with spam getting low scores and in 
troubleshooting I have found that if I run a command line check 
with "spamassassin -D -x  < test" on a mail in question, I get a 
very high score when run under user root. When run under user spamd 
it gets a low passing score. This is on obvious spam mail. Any 
advice on how to determine what is the difference ? *

*




--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Atheism is a non-prophet organization. 


Re: Differing scores on spamassassin checks

2018-04-15 Thread Computer Bob

Here is a root scan:  https://pastebin.com/qdXMRzKb
Here is the same run under spamd: https://pastebin.com/SvvYptYv



On 4/15/18 11:34 AM, Computer Bob wrote:

Greeting all, *
*I have had some issues with spam getting low scores and in 
troubleshooting I have found that if I run a command line check with 
"spamassassin -D -x  < test" on a mail in question, I get a very high 
score when run under user root. When run under user spamd it gets a 
low passing score. This is on obvious spam mail. Any advice on how to 
determine what is the difference ? *
* 




Differing scores on spamassassin checks

2018-04-15 Thread Computer Bob

Greeting all, *
*I have had some issues with spam getting low scores and in 
troubleshooting I have found that if I run a command line check with 
"spamassassin -D -x  < test" on a mail in question, I get a very high 
score when run under user root. When run under user spamd it gets a low 
passing score. This is on obvious spam mail. Any advice on how to 
determine what is the difference ? *

*