Thanks Tim,
I'm going to do a yum remove on SA and reinstall if required. At the
time of the original post I didn't have a spare failover box for SA,
that situation is now resolved.
My concern stems from the fact that the original Yum updates done
before 3.1.0 was installed didn't mention 3.0.5;
Hello John,
Monday, March 13, 2006, 2:53:33 PM, you wrote:
JD> I am trying to train spamassassin using spam and ham I've collected. My
JD> problem is the sa-learn script is using too many resources on the server
JD> (my spam folder had ~1000 messages).
JD> Is there a way I can run sa-learn on m
Hello Kelson,
Monday, March 13, 2006, 11:30:07 AM, you wrote:
K> Robert Menschel wrote:
>> I'm not familiar enough with the newsletters below to know ...
>> whitelist_from_rcvd [EMAIL PROTECTED]
>> ...
K> I can confirm this one as both legit and a frequent false positive (in
K> part because o
You have an older version of the stock rules. Doc fixed this one a week
or
two ago, since we knew it was going to come up.
Weird. rules_du_jour did not grab the newer version.
You have an older version of the stock rules. Doc fixed this one a week or
two ago, since we knew it was going to come up.
Loren
> However after about 2-3 hours mail randomly starts getting returned to the
> sender with 421 BSMTP timeout errors. It doesn't matter if the sender is
a
> client on my server, or someone using a Yahoo account, about 50-75% of
mail
> that is sent is returned undeliverable with that 421 BSMTP timeo
FM_NO_FROM_OR_TO=,FM_NO_TO=,MISSING_SUBJECT=,NO_RECEIVED=,TO_CC_NONE=
Something seems a little odd here. On my system those rules would add up to
quite a few points, and they don't seem to add up to anything for you.
Loren
Jason Parsons wrote:
>
> I'm using an internal URIBL, configured like so:
>
> urirhssub SAFF_EXAMPLE rbl.example.com. A 127.0.0.8
> body SAFF_EXAMPLE eval:check_uridnsbl('SAFF_EXAMPLE')
> describe SAFF_EXAMPLE Example RBL hit 8
>
> Running with the above configuration causes spamd
Spamassassin List wrote:
Leading zeros are required for values between (-1,1).
Thanks. After examine all the rules, found out that 70_sare_stocks.cf is
causing it.
It contains lines like:-
body SARE_MLB_Stock3 /Last[ _](?:Trade|Price)[ :]/i
scoreSARE_MLB_Stock3 .794
body
I believe you're using an old version of 70_sare_stocks.cf. This issue
was located and corrected a couple of weeks ago if I'm not mistaken.
Current version is # Version: 01.00.14
HTH,
M
Spamassassin List wrote:
Leading zeros are required for values between (-1,1).
Thanks. After examine all
Leading zeros are required for values between (-1,1).
Thanks. After examine all the rules, found out that 70_sare_stocks.cf is
causing it.
It contains lines like:-
body SARE_MLB_Stock3 /Last[ _](?:Trade|Price)[ :]/i
scoreSARE_MLB_Stock3 .794
bodySARE_LWSAFEH
Leading zeros are required for values between (-1,1).
On 3/13/2006 9:27 PM, Spamassassin List wrote:
Hi List,
After upgraded SA from 3.10 to 3.11, ran spamassassin --lint,
encountered the error as follows:-
[21824] warn: config: SpamAssassin failed to parse line,
"SARE_MLB_Stock3 .794" is n
Hi List,
After upgraded SA from 3.10 to 3.11, ran spamassassin --lint, encountered
the error as follows:-
[21824] warn: config: SpamAssassin failed to parse line, "SARE_MLB_Stock3
.794" is not valid for "score", skipping: scoreSARE_MLB_Stock3 .794
[21824] warn: config: SpamAssassin fa
[EMAIL PROTECTED] wrote:
Xavier Sudre wrote:
[EMAIL PROTECTED] wrote:
See http://wiki.apache.org/spamassassin/EnvelopeSenderInHeaders
My postfix version is compatible.
Is there a Return-Path header on the file that spamc is told to scan?
That was the trouble! The transport that I used in m
Xavier Sudre wrote:
> [EMAIL PROTECTED] wrote:
>> See http://wiki.apache.org/spamassassin/EnvelopeSenderInHeaders
>
> My postfix version is compatible.
Is there a Return-Path header on the file that spamc is told to scan?
--
Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902
Hispa
[EMAIL PROTECTED] wrote:
Xavier Sudre wrote:
I am trying to get SPF to work with my spamassassin installation.
So far when I receive an email, SA logs the following:
spamd[874]: spf: cannot get Envelope-From, cannot use SPF
...
The email goes through postfix then spamc then spamd.
What vers
John Davis wrote:
> I am trying to train spamassassin using spam and ham I've collected. My
> problem is the sa-learn script is using too many resources on the server
> (my spam folder had ~1000 messages).
>
> Is there a way I can run sa-learn on my PC and then merge the results with
> the serve
Matt Kettler wrote:
John Davis wrote:
I am trying to train spamassassin using spam and ham I've collected. My
problem is the sa-learn script is using too many resources on the server
(my spam folder had ~1000 messages).
Is there a way I can run sa-learn on my PC and then merge the results with
John Davis wrote:
> I am trying to train spamassassin using spam and ham I've collected. My
> problem is the sa-learn script is using too many resources on the server
> (my spam folder had ~1000 messages).
>
> Is there a way I can run sa-learn on my PC and then merge the results with
> the serve
Xavier Sudre wrote:
> I am trying to get SPF to work with my spamassassin installation.
> So far when I receive an email, SA logs the following:
>
> spamd[874]: spf: cannot get Envelope-From, cannot use SPF
...
> The email goes through postfix then spamc then spamd.
What version of postfix?
See
Hi there!
I am trying to get SPF to work with my spamassassin installation.
So far when I receive an email, SA logs the following:
spamd[874]: spf: cannot get Envelope-From, cannot use SPF
spamd[874]: spf: def_spf_whitelist_from: could not find useable envelope
sender
spamd[874]: spf: spf_whit
I am trying to train spamassassin using spam and ham I've collected. My
problem is the sa-learn script is using too many resources on the server
(my spam folder had ~1000 messages).
Is there a way I can run sa-learn on my PC and then merge the results with
the server?
--
--
[EMAIL PROTECTED]
I'm using an internal URIBL, configured like so:
urirhssub SAFF_EXAMPLE rbl.example.com. A 127.0.0.8
body SAFF_EXAMPLE eval:check_uridnsbl('SAFF_EXAMPLE')
describe SAFF_EXAMPLE Example RBL hit 8
Running with the above configuration causes spamd to log:
warn: Argument "127.0.0
From: "Matt Kettler" <[EMAIL PROTECTED]>
jdow wrote:
===8<---
Return-Path: <[EMAIL PROTECTED]>
Received: from smtp.earthlink.net [209.86.93.205]
by localhost with POP3 (fetchmail-6.2.5.5)
for [EMAIL PROTECTED] (single-drop); Mon, 13 Mar 2006 05:36:39
-0800 (PST)
Received: from amazon.com ([80.3
X-Spam-Status: No, score=-2.6 required=5.0
tests=AWL=0.023,BAYES_00=-2.599
autolearn=failed version=3.1.1
It seems that since upgrading to 3.11 last night, the
autolearn=yes|no|failed always shows up as failed (on all messages).
Did I miss something?
As well, the headers added by SA (and me
===8<---
Return-Path: <[EMAIL PROTECTED]>
Received: from smtp.earthlink.net [209.86.93.205]
by localhost with POP3 (fetchmail-6.2.5.5)
for [EMAIL PROTECTED] (single-drop); Mon, 13 Mar 2006 05:36:39 -0800 (PST)
Received: from amazon.com ([80.33.31.58])
by mx-pigeons.atl.sa.earthlink.net (EarthLink
_TESTSSCORES(,)_
From: Shane Mullins [mailto:[EMAIL PROTECTED]
Sent: Monday, March 13, 2006 1:22 PM
To: users@spamassassin.apache.org
Subject: X-Spam-Status settings
I have forgotten the setting that tell
> > It seems that since upgrading to 3.11 last night, the
> > autolearn=yes|no|failed always shows up as failed (on all messages).
> >
> > Did I miss something?
>
> Generally "Failed" means that SA somehow can't access the
> bayes database to write to it.
>
> Have you tried sa-learn --sync an
On Mon, 13 Mar 2006, Eric W. Bates wrote:
> Sorry to rehash what must be an old question...
>
> I can't find LMAP/CID2SPF on CPAN or FreeBSD ports. I found an old list
> item suggesting that there was a download link at:
> http://www.openspf.org/downloads.html
> This link appears to be gone at the
> -Original Message-
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: Monday, March 13, 2006 1:35 PM
> To: Steven Manross
> Cc: users@spamassassin.apache.org
> Subject: Re: autolearn=failed after upgrade to 3.11
>
> Steven Manross wrote:
>
> > It looks like the autolearn is wo
Steven Manross wrote:
> It looks like the autolearn is working now.
>
> Does anyone have any ideas on the "misplaced" headers? Or is that a new
> de facto standard?
You mean this:
> As well, the headers added by SA (and me [through SA] for MsgID) are now
> showing at the top of the headers from
jdow wrote:
> ===8<---
> Return-Path: <[EMAIL PROTECTED]>
> Received: from smtp.earthlink.net [209.86.93.205]
> by localhost with POP3 (fetchmail-6.2.5.5)
> for [EMAIL PROTECTED] (single-drop); Mon, 13 Mar 2006 05:36:39
> -0800 (PST)
> Received: from amazon.com ([80.33.31.58])
> by mx-pigeons.atl.s
Actually my server logs don't show "server reached" messages. Rather I'm
still fighting a nasty battle of getting SpamAssassin to work in conjunction
with Exim. I've posted numerous times on this issue only to get no
resolution. The whole problem lies with SpamAssassin it seems. As soon as
I ru
On Mon, 13 Mar 2006, Shane Mullins wrote:
hI,
> I have forgotten the setting that tells SA to include the point value
> for each of the hits the incoming message was flagged on. I searched
> the web and looked in my book, but can't seem to find it. Could someone
> please jog my memory?
"add_he
Sorry to rehash what must be an old question...
I can't find LMAP/CID2SPF on CPAN or FreeBSD ports. I found an old list
item suggesting that there was a download link at:
http://www.openspf.org/downloads.html
This link appears to be gone at the moment.
Should I just ignore the errors in the log;
Steven Manross wrote:
> _TESTSSCORES(,)_
>
> From: Shane Mullins [mailto:[EMAIL PROTECTED]
>
> > I have forgotten the setting that tells SA to include the point
> > value for each of the hits the incoming message was flagged on. I
> > searched the web and looked in my book, but can't seem to fin
On Mon, Mar 13, 2006 at 12:29:49PM -0800, jdow wrote:
> Received: from smtp.earthlink.net [209.86.93.205]
> by localhost with POP3 (fetchmail-6.2.5.5)
> for [EMAIL PROTECTED] (single-drop); Mon, 13 Mar 2006 05:36:39
> -0800 (PST)
> Received: from amazon.com ([80.33.31.58])
> by mx-pigeons.atl.sa.e
On Fri, 10 Mar 2006, Dan Mahoney, System Admin wrote:
Okay. SpamAssassin 3.1.1 -- same problems. Uninitialized values, bad
match strings, and the ever popular "spamd uses all its children and the
spam keeps flowing".
http://www.gushi.org/maillogAGAIN.txt (warning, 20 megs)
The user in que
I have forgotten the setting that tells SA to
include the point value for each of the hits the incoming message was flagged
on. I searched the web and looked in my book, but can't seem to find
it. Could someone please jog my memory?
Thanks
Shane
I'm still working on my server that is having problems with running
spamassassin 3.10 and exim 4.60. Currently the command I run is
spamd -d -c
-m 5 to have it use 5 child processes. Is there some sort of recommended
ratio to amount of processed email to how many max child processes I
should
I'm still working on
my server that is having problems with running spamassassin 3.10 and exim
4.60. Currently the command I run is spamd -d -c -m 5 to have it use 5
child processes. Is there some sort of recommended ratio to amount of
processed email to how many max child processes I shou
Steven Manross wrote:
> X-Spam-Status: No, score=-2.6 required=5.0
> tests=AWL=0.023,BAYES_00=-2.599
> autolearn=failed version=3.1.1
>
> It seems that since upgrading to 3.11 last night, the
> autolearn=yes|no|failed always shows up as failed (on all messages).
>
> Did I miss something?
Gen
On Mon, 13 Mar 2006, Scott Russell wrote:
hI,
> I've seen this under both SA 3.1.0 and 3.1.1 and I have IP::Country 2.20
> installed. If I enable debug mode in spamd I see
> Mail::SpamAssassin::Plugin::RelayCountry load. When processing a message
> through spamd I also see metadata: X-Relay-Count
> -Original Message-
> From: Steven Manross
> Sent: Monday, March 13, 2006 12:46 PM
> To: users@spamassassin.apache.org
> Subject: autolearn=failed after upgrade to 3.11
>
> X-Spam-Status: No, score=-2.6 required=5.0
> tests=AWL=0.023,BAYES_00=-2.599
> autolearn=failed version=3.1.1
Robert Menschel wrote:
I'm not familiar enough with the newsletters below to know whether
they should be whitelisted. Can anyone confirm that these newsletters
(which apparently do get flagged as spam, at least from time to time)
should be whitelisted? Does anyone have any objections to
whiteli
On Mon, Mar 13, 2006 at 07:45:47PM +0100, Cedric Foll wrote:
> So by default, spamassassin read /usr/share/spamassassin and next /var/lib.
> And rules of /var/lib overwright the ones of /usr/share/spamassassin.
>
> I'm right ?
Not really. For rules, /var/lib/spamassassin overrides the use of
/us
> sa-learn doesn't install any rules. Perhaps you mean sa-update? There's
>
yes sorry.
> Nope. Once the files are installed in the /var/lib area, you're fine.
> When you next run "spamassassin" (or restart spamd, etc,) it will use
> the new rule files.
>
So by default, spamassassin read
On Mon, 13 Mar 2006, Theo Van Dinter wrote:
> On Mon, Mar 13, 2006 at 07:45:47PM +0100, Cedric Foll wrote:
> > So by default, spamassassin read /usr/share/spamassassin and next /var/lib.
> > And rules of /var/lib overwright the ones of /usr/share/spamassassin.
> >
> > I'm right ?
>
> Not really.
On Mon, Mar 13, 2006 at 11:14:43AM -0300, Pablo Allietti wrote:
> hi all, i upgrade my version of spamassassin in freebsd from 2.x to 3.x
> and now when a e-mail has detected like spam in body of message i have
> this
> (no report template found)
> and no scores show me.
> i miss any fil
On Mon, Mar 13, 2006 at 12:01:01PM +0100, Cedric Foll wrote:
> sa-learn by default install rules in
> /var/lib/spamassassin/3.001001/updates_spamassassin_org/.
> I wonder why it doesn't copy them in /usr/share/spamassassin/ ?
> Is it for safety reason (ie avoid automaticly use of new rules).
sa-le
Greets.
I've seen this under both SA 3.1.0 and 3.1.1 and I have IP::Country 2.20
installed. If I enable debug mode in spamd I see
Mail::SpamAssassin::Plugin::RelayCountry load. When processing a message
through spamd I also see metadata: X-Relay-Countries: US ** US US ** US
US US DE SK SK SK
Nigel Frankcom wrote:
> I installed 3.1.1 today on a fresh CentOS install and foolishly
> neglected to check it hadn't already installed an older version of SA.
> Now when I run yum update it lists 3.0.5 as an update. I've installed
> 3.1.1 from source and am wondering if using yum remove for the
Jeremy Fairbrass wrote:
> Hi Eric,
> The text there is encoded with base64, which is decoded into the "proper"
> text by the mail client. SpamAssassin will also decode it before running its
> rules against it, for "body" or "rawbody" rules, which means SpamAssassin
> will be able to filter it ou
Thanks all. I'm test driving the below-listed rule and it seems to be
good and fast as you suggest.
I'm a bit jittery on the multi-line rules right now due to an
"incident" with what I thought was a brilliant RE that ended up gumming
up our system really bad a few weeks back.
Thanks again.
J
> Without being able to decode that block of stuff myself and thus see what
> it says
It's a stock spam for some oil company.
Decoding anything base64 encoded is pretty easy if you have perl installed
somewhere:
cut
#!/usr/bin/perl
use MIME::Base64;
print decode_base64("");
cut
Hi Eric,
The text there is encoded with base64, which is decoded into the "proper"
text by the mail client. SpamAssassin will also decode it before running its
rules against it, for "body" or "rawbody" rules, which means SpamAssassin
will be able to filter it out whether the text was encoded wit
James Long wrote:
James Long wrote:
In my SpamAssassin-3.1.0 (p5-Mail-SpamAssassin-3.1.0_6) local.cf, I
use:
...
trusted_networks 127.0.0.0/8 65.75.198.48/28 63.105.30.37/32
^^
Your IP for the ns.museum.rain.com comes back as 65.7
I don't even understand how the following message works (let alone how
to block it).
It simply has a chunk of what looks like encoded binary; and yet,
thunderbird renders it as a stock announcement (as I write this, I
wonder whether the good readers of this list are likely to the ascii
block, or t
hi all, i upgrade my version of spamassassin in freebsd from 2.x to 3.x
and now when a e-mail has detected like spam in body of message i have
this
[-- Attachment #1 --]
[-- Type: text/plain, Encoding: 8bit
Hello,
The following Message ID causes a '+3.78' (bayes+network) score for
hitting a meta rule MSGID_DOLLARS_RANDOM, SA Version 3.1.x
Message-ID: <[EMAIL PROTECTED]>
X-Mailer: Intrapop 1.4 SMTP Component 1.0
It is a regular mail and the sender appears to be using a mailserver
developed by
Hi,
I've a question about sa-learn which has been included in 3.1.1.
sa-learn by default install rules in
/var/lib/spamassassin/3.001001/updates_spamassassin_org/.
I wonder why it doesn't copy them in /usr/share/spamassassin/ ?
Is it for safety reason (ie avoid automaticly use of new rules).
Are
On Saturday 11 March 2006 04:25, NW7US, Tomas wrote:
> My scripts are really buttoned down, those that I have written myself.
> The perl scripts do use the CGI code, latest. And I do my own regex
> stuff. I'll double-check my tests. I just don't yet see how the messages
> are getting through.
62 matches
Mail list logo
