Re: SURBL and DNS wildcards

2004-11-18 Thread Jeff Chan
On Wednesday, November 17, 2004, 11:32:41 AM, Chris Santerre wrote: That is correct, only the reg domains go in. Yes, the goal is to list the registrar domains and also to check those in SURBL applications. The wildcarded parts of subdomains are usually ignored. We did that deliberately to

sa-learn --import with postgresql

2004-11-18 Thread Rupa Schomaker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ran into a problem importing into postgres. Running with -D didn't help other than pinpointing to a problem while importing msgids. postgres logs showed: 2004-11-17 16:20:41 [14205] ERROR: value too long for type character varying(200) The

Re: sa-learn --import with postgresql

2004-11-18 Thread Rupa Schomaker
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Rupa Schomaker wrote: [snip] 2004-11-17 16:20:41 [14205] ERROR: value too long for type character varying(200) The bayes_seen table has msgid as a varchar(200). Changing it to 'test' fixed it for me. Either spamassassin should err,

Re: Insecure dependency in eval while running setuid [DOMAIN-OK]

2004-11-18 Thread Vicki Brown
At 08:53 -0500 11/15/2004, Matt Kettler wrote: 1) are you SURE you want allow_user_rules set? positive. Unless you trust all your users this can be a bit risky. I trust all my users. Or, to put it more specifically, I trust the three or four who might bother to edit their files and the rest

RE: spamd logging with wrong timestamp?

2004-11-18 Thread Dimitry Peisakhov
Mike, adding that switch to syslog didnt seem to work. I found some other posts through google which claim that stopping syslogd and spamd and starting them again fixes this up, but it hasnt worked for me. If anyone else has any ideas, they would be greately appreciated. Thanks, Regards, Dimitry

Re: Configuring bayes lock file locations?

2004-11-18 Thread alan premselaar
brian wrote: After upgrading to 3.0.1 I've been having problems with bayes. This may be a question for the mimedefang guys, but I'll start here. I have upgraded the databases, and its now reading correctly, as I get bayes scoring now. However autoupdates are failing because of lock files...

Re: Question

2004-11-18 Thread Martin Hepworth
Jason The default SpamAssassin rules are a good start, but what extra rules are you running? There are some very good ones on www.ruleemporium.com. Also are you using any of the URI RBL's from www.surbl.org? These can help alot too. -- Martin Hepworth Snr Systems Administrator Solid State

Re: Web Based sa-learn?

2004-11-18 Thread Martin Hepworth
Hi if you are using MailScanner to front end SA, Mailwatch can help - no cut and paste, but you can run sa-learn on the messages to 'correct' bayes view of spam. Also if you have a imap accessible email server (not Exchange 2000 of later as it mangles the headers) there are quite a few perl

How can I bring CPU down where Spamd takes %60 of all CPU?

2004-11-18 Thread LOGS \(Tunc Eresen\)
Is there a way of reducing or caping CPU usage spamd by issuing commands or making changes in config? Regards Tunc

Re: How to stop this stock-spam?

2004-11-18 Thread Martin
Matt Kettler wrote: First, a word of warning.. 2.63 is subject to DoS if a carefully made malformed message comes in. Not a huge security risk, but I'd at least consider upgrading to 2.64 or higher in the near future. (2.64 should be an easy upgrade from 2.63.. 3.0.x might be a bit more

Help me help someone...

2004-11-18 Thread Jonathan Nichols
http://forums.gentoo.org/viewtopic.php?p=1777629 This poor guy is having some strange issues with SpamAssassin and RulesDuJour that I can't manage to recreate. Anyone care to take a look and offer a suggestion or two? :)

'meds' spam

2004-11-18 Thread Peter Campion-Bye
The only spam that's getting through on my system these days seems to have 'meds' and 'rx' in common. I would have thought that antidrug was the ruleset to pick up stuff such as this: --Spam Start--- Subject: meds saving zone your

X-NAS-* headers

2004-11-18 Thread Keith Hackworth
One of my customers received a blank message from Korea which spoofed an invalid email address on his domain. I was looking at the message and it contained 3 distinct X-NAS message headers that I don't recognize: X-NAS-Classification: 0 X-NAS-MessageID: 43604 X-NAS-Validation:

RE: X-NAS-* headers

2004-11-18 Thread Bruno Guerreiro
Hi, I may be mistaken but i think that that's a Norton AntiSpam header. Best regards. Bruno Guerreiro -Original Message- From: Keith Hackworth [mailto:[EMAIL PROTECTED] Sent: Thursday, November 18, 2004 12:31 PM To: users@spamassassin.apache.org Subject: X-NAS-* headers One of my

Spamassassin Starter

2004-11-18 Thread Jfabricio - Greenwich International
Dear all, I need to use some kind of antispam and decided to use spamassassin. We just installed and started it but appear not work as well. I use RedHat 7.3 + kernel 2.4.20-28.7 + sendmail 8.11.6 + procmail 3.22 + mailscanner 3.27 + Fprot 3.13b (antivirus) + Spamassassin 2.64-1. Some one can

Re: Spamassassin Starter

2004-11-18 Thread Martin Hepworth
Hi so whats the problem? -- Martin Hepworth Senior Systems Administrator Solid State Logic Ltd tel: +44 (0)1865 842300 Jfabricio - Greenwich International wrote: Dear all, I need to use some kind of antispam and decided to use spamassassin. We just installed and started it but appear not work as

Re: 'meds' spam

2004-11-18 Thread Matt Kettler
At 11:35 AM 11/18/2004 +, Peter Campion-Bye wrote: I've put in a custom rule to pick up meds in the subject: header PCB_MEDSSubject =~ /(?:\bmeds|meds\b)/i describePCB_MEDSSubject contains meds score PCB_MEDS5 erm.. I'd

RES: Spamassassin Starter

2004-11-18 Thread Jfabricio - Greenwich International
Dear Martin, Thanks for yours quickly reply. I started spamd yesterday morning, but it does not stop any spam message. For example, I usually receive about 130 spams every morning. I checked this morning and the same number of spam entered on my inbox. TKS Jfabricio

Re: Spamassassin Starter

2004-11-18 Thread Kjetil Kjernsmo
On torsdag 18 november 2004, 15:58, Jfabricio - Greenwich International wrote: I started spamd yesterday morning, but it does not stop any spam message. For example, I usually receive about 130 spams every morning. I checked this morning and the same number of spam entered on my inbox. Oh,

Re: RES: Spamassassin Starter

2004-11-18 Thread Martin Hepworth
J MailScanner does not use spamd/spamc in order to scan emails, but calls Spamassassin directly via Perl. If email is flowing and you've not stopped sendmail before the MailScanner install then that's the problem. Also MailScanner 3.x is kinda old (a couple of years at leaast), may I suggest

Re: Spamassassin Starter

2004-11-18 Thread Martin Hepworth
Kjetil Kjernsmo wrote: On torsdag 18 november 2004, 15:58, Jfabricio - Greenwich International wrote: I started spamd yesterday morning, but it does not stop any spam message. For example, I usually receive about 130 spams every morning. I checked this morning and the same number of spam

Re: RES: Spamassassin Starter

2004-11-18 Thread Evan Platt
At 06:58 AM 11/18/2004, you wrote: Dear Martin, Thanks for yours quickly reply. I started spamd yesterday morning, but it does not stop any spam message. For example, I usually receive about 130 spams every morning. I checked this morning and the same number of spam

Re: spamd logging with wrong timestamp?

2004-11-18 Thread Michael Barnes
I've had servers log with incorrect time before and it was due to the fact that I was in a different timezone than my server and I set my TZ environment variable to reflect my timezone and not the timezone that the server was located. So, when I restarted the server, it inheireted my TZ variable

Re: [OT] Amavisd memory usage

2004-11-18 Thread Vivek Khera
On Nov 17, 2004, at 11:07 AM, Michael W Cocke wrote: Is this normal? I would have expected them to be using the same amount of memory, unless there's a leak somewhere. Try not to confuse memory usage with memory leak. It is a very common trap. Vivek Khera, Ph.D. +1-301-869-4449 x806

Re: How can I bring CPU down where Spamd takes %60 of all CPU?

2004-11-18 Thread Jeremy Rumpf
On Thursday 18 November 2004 04:20 am, LOGS (Tunc Eresen) wrote: Is there a way of reducing or caping CPU usage spamd by issuing commands or making changes in config? Regards Tunc If you must, nice it down to a lower priority. In your startup script add a nice adjustment to the spamd

sender_header search algorithm

2004-11-18 Thread Eric A. Hall
I noticed that Mail::SpamAssassin::Conf describes the search algorithm for the message sender as follows: | SpamAssassin will attempt to discover the address used in the | 'MAIL FROM:' phase of the SMTP transaction that delivered this | message, if this data has been made available by the SMTP

Re: any rules for RelayCountry?

2004-11-18 Thread Eric A. Hall
On 11/17/2004 12:53 PM, Martin wrote: |I'm looking to use the RelayCountry plugin data but there |doesn't seem to be any rules. Anybody know of any? Here's some rules I use, utilising the nerds.dk lists, not sure if its what you are looking for. That works perfectly, and doesn't even

spamd process using to much cpu

2004-11-18 Thread Matias Lopez Bergero
Hello, I'm running spamassassin 3.0.1 on linux 2.4, using milter-spamc to talk with sendmail milter. I'm seeing a heavy cpu usage in some process of spamd for a long time and sometimes they just hang there until I kill them(usage goes from 80% to 97%). Also my system is reporting a high iowait

Kill spamd spawns new processes

2004-11-18 Thread Pradeep
Hi, Today I updated spamassassin from 2.63 to 3.01 on a linux machine. My init script does not work anymore because when I kill spamd it creates five new processes. So, I cannot start the daemon again.Any help is appreciated. Here is the info. [EMAIL PROTECTED]:~# ps -ef|grep spam [EMAIL

Re: spamd process using to much cpu

2004-11-18 Thread Matt Kettler
At 04:13 PM 11/18/2004, Matias Lopez Bergero wrote: I'm seeing a heavy cpu usage in some process of spamd for a long time and sometimes they just hang there until I kill them(usage goes from 80% to 97%). Also my system is reporting a high iowait load and a high disk usage that stops if a

Spamd cpu issues.

2004-11-18 Thread Dave Goodrich
I've been watching these messages concerning high memory and cpu usage in spamd. In fact it caused me to wait until 3.01. But I have upgraded, running now for several days. Spamd is quite well behaved, not catching as much as 2.64 was, but I am still tuning. I don't know if it matters but I'll

Re: Kill spamd spawns new processes

2004-11-18 Thread Matt Kettler
At 05:04 PM 11/18/2004, Pradeep wrote: Today I updated spamassassin from 2.63 to 3.01 on a linux machine. My init script does not work anymore because when I kill spamd it creates five new processes. So, I cannot start the daemon again.Any help is appreciated. Here is the info. [EMAIL

Re: Question

2004-11-18 Thread Jason Novak
Hi Martin, I think I may have found the issue...It looks like these domains were added in the auto-whitelist file which were probably decreasing the score below the standard threshold of 5. The extra rulesets you see are actually coming from ruleemporium.com.(SARE). That's why I was so

Re: despamassassining

2004-11-18 Thread Hanspeter Roth
On Nov 11 at 20:31, Matt Kettler spoke: Besides adjusting your administrator with a clue-by-four, you can run it through spamassassin --remove-markup Well I can't use perl on this site. I'm trying to pipe it throgh `reformime -s 1.2 -e | formail -b`. This only affects the date in the

Re: Kill spamd spawns new processes

2004-11-18 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Kettler writes: At 05:04 PM 11/18/2004, Pradeep wrote: Today I updated spamassassin from 2.63 to 3.01 on a linux machine. My init script does not work anymore because when I kill spamd it creates five new processes. So, I cannot start the

Re: Kill spamd spawns new processes

2004-11-18 Thread Matt Kettler
At 06:05 PM 11/18/2004, Justin Mason wrote: Kill -9 is NOT a good thing to use for general shutdown of processes, it's really only one step better than having to pull the power plug on the box. yep -- in fact, it's pretty much equivalent to pulling the power plug on that process. kill -15 is a

Re: more spamassassin + bayes + postgres stuff

2004-11-18 Thread Michael Parker
On Thu, Nov 18, 2004 at 06:53:19AM -0800, Rupa Schomaker wrote: Some questions: Is bytea really necessary? If I follow the path of the patch, the bytea change was done prior to adding the index. Since the tokens are binary data it is probably more correct through, especially if one has a

RE: Spamd cpu issues.

2004-11-18 Thread Gary W. Smith
We ran the 3-beta for a while and recently built out a machine to start building up our bayes and for a 1:1 comparison of spam scores. We are running SURBL, multiple SARE rules and AWL/Bayes with MySQL. The spamd and MySQL processes are running on a shared box for right now. Box specs are

script error?

2004-11-18 Thread Stefan Suurmeijer
Hi list, this is probably some easy configuration issue, but it's now almost 1am and I just spent the last 4 hours upgrading my system so by now I wouldn't see a solution if it hit me in the face. I have everything working, except for spamassassin. I had it working earlier, but I decided to

Re: Kill spamd spawns new processes

2004-11-18 Thread Rick Macdougall
Matt Kettler wrote: At 06:05 PM 11/18/2004, Justin Mason wrote: Kill -9 is NOT a good thing to use for general shutdown of processes, it's really only one step better than having to pull the power plug on the box. yep -- in fact, it's pretty much equivalent to pulling the power plug on that