sa-compile and SARE

2007-05-16 Thread Koopmann, Jan-Peter
Hi, please excuse me if the archives already answer the question and I overlooked it. I am going to upgrade to 3.2.0 this week but remember reading that sa-compile will not work with SARE rules currently. If I understand it correctly when using sa-compile it will be used for all rules so

RCVD_IN_WHOIS_INVALID false-positives?

2007-05-16 Thread Per Jessen
Recently I seem to be getting more than the usual batch of FPs, which I've tracked to be due to RCVD_IN_WHOIS_INVALID giving 2.2 points. According to the explanation, it reports an IP on an invalid block - RCVD_IN_WHOIS_INVALID RBL: CompleteWhois: sender on invalid IP * block

Re: Tag Level for spam

2007-05-16 Thread Matthias Haegele
Matt Kettler schrieb: Martin Hochreiter wrote: Hi! Is there something like a recommended tag level when to treat a mail as spam? (I actually use 1.7 as tag level for amavis/spamassassin) 5.0 is the recommended default. This level will tune SA to treat false positives (nonspam tagged as

RE: SpamAssassin timed out and was killed

2007-05-16 Thread Martin.Hepworth
Hi You sure about that MailScanner versionm or is it a typo? -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 -Original Message- From: leiw [mailto:[EMAIL PROTECTED] Sent: 16 May 2007 03:45 To: users@spamassassin.apache.org Subject:

Upgrade to 3.2.0 failed = Malformed UTF-8 character @Bayes.pm line 362

2007-05-16 Thread Hamel Gilles - Brandt Appliances
Hello, We have upgraded from 3.1.7 to 3.2.0. Now we get a lot of errors like this : May 16 10:45:01 mimedefang-multiplexor[22448]: Slave 2 stderr: art byte) in substitution iterator at /u sr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Bayes.pm line 362. Malformed UTF-8 character

RE: Upgrade to 3.2.0 failed = Malformed UTF-8 character @Bayes.pm line 362

2007-05-16 Thread Martin.Hepworth
Hi Common problem with perl 5.8.8 and the SARE rules. In Messages.pm in the spamassassin perl library add a line like the following after use warnings;... use bytes; -- Martin Hepworth Snr Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 -Original Message-

False negative problem

2007-05-16 Thread Cedric BUSCHINI
Hello everyone, I m running through a problem generating false negatives : I m getting e-mails sent to [EMAIL PROTECTED] from [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-25) on srvmail.carax.com X-Spam-Level: X-Spam-Status: No, score=-93.1 required=5.0

Re: False negative problem

2007-05-16 Thread Duncan Hill
On Wed, May 16, 2007 11:02, Cedric BUSCHINI wrote: Hello everyone, I m running through a problem generating false negatives : I m getting e-mails sent to [EMAIL PROTECTED] from [EMAIL PROTECTED] [EMAIL PROTECTED] is in the whitelist using whitelist_from in local.cf . How can I fix that

Re: False negative problem

2007-05-16 Thread Matt Kettler
Cedric BUSCHINI wrote: Hello everyone, I m running through a problem generating false negatives : I m getting e-mails sent to [EMAIL PROTECTED] from [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-25) on srvmail.carax.com X-Spam-Level: X-Spam-Status: No, score=-93.1

Re: Does anyone catch this....

2007-05-16 Thread Matt Hampton
Matt Hampton wrote: http://www.coders.co.uk/slipped.through.txt It has sailed through both a SA3.1.8 and SA3.2.0 (3.2.0-pre2-r512851) running on recent versions of MailScanner cheers Matt Thanks to everyone who replied - I'll look and the Clam signatures matt

Re: Spamd

2007-05-16 Thread Sunil Chelaramani
I am trying to compile from source files. On 5/15/07, .rp [EMAIL PROTECTED] wrote: On 14 May 2007 at 15:07, Sunil Chelaramani wrote: Hello Group/Everyone, I am trying to setup SPAMD on Fedora Core but no luck. I would appreciate if anyone can point to the documentation which guides though

RE: Upgrade to 3.2.0 failed = Malformed UTF-8 character @Bayes.pm line 362

2007-05-16 Thread Hamel Gilles - Brandt Appliances
Yes, you are right, we use SARE rules. But, I am not sure that my problem is the same as http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5440 or http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5437 Why these errors are triggered in Bayes.pm, SARE rules aren't dependant with Bayes ?

RE: tracking down problem messages

2007-05-16 Thread Jean-Paul Natola
Jean-Paul Natola wrote: Ok I was able to track them and found that they are timing out after about 5 mins- spamd is timing them out- I'm assuming its large messages that it is timing out on- what rule/acl would I need and WHERE would I enter it to tell SA to ignore or not to scan

Black Lists

2007-05-16 Thread Daniel Aquino
Do I need special configurations to query dns black lists ?

Re: Black Lists

2007-05-16 Thread Matthias Haegele
Daniel Aquino schrieb: Do I need special configurations to query dns black lists ? http://wiki.apache.org/spamassassin/UsingNetworkTests Additionally i would suggest a dns-cache like pdns-recursor ... -- Grüsse/Greetings MH Dont send mail to: [EMAIL PROTECTED] --

RE: tracking down problem messages

2007-05-16 Thread Duane Hill
On Wed, 16 May 2007, Jean-Paul Natola wrote: Jean-Paul Natola wrote: Ok I was able to track them and found that they are timing out after about 5 mins- spamd is timing them out- I'm assuming its large messages that it is timing out on- what rule/acl would I need and WHERE would I enter it

BAYES_99 triggered on every message

2007-05-16 Thread Jari Fredriksson
SpamAssassin version 3.1.8 assembled via cpan Every message gets BAYES_99, even when a) the message has no body b) I have cleaned the database with sa-learn --clean (Still BAYES_99 while the bayes should be off!) The bayes database is in a MySQL instance, and the connection works (-D

Problems with live.com alerts service

2007-05-16 Thread Luis Hernán Otegui
Interesting approach by M$... offering an alerts service for PayPal, which is supposed to be secure, and then using mailservers which don't resolv to anything... This came up today (the user deleted the mail, and then decided to give me a call, so all I have are the mail logs): May 16 11:48:15

Re: BAYES_99 triggered on every message

2007-05-16 Thread Theo Van Dinter
On Wed, May 16, 2007 at 06:38:12PM +0300, Jari Fredriksson wrote: Every message gets BAYES_99, even when a) the message has no body Bayes uses the header as well. b) I have cleaned the database with sa-learn --clean (Still BAYES_99 while the bayes should be off!) Then you're not doing

Re: BAYES_99 triggered on every message

2007-05-16 Thread Craig Carriere
Perhaps a dumb comment on my part, but have you tried to delete the table entries from the mySQL database and are you sure you are using the SA user? Doesn't sa-learn --clean only clear the Berkeley dbs and you appear to state that you are using mySQL. Best Jari Fredriksson wrote:

Bayes Auto Learn

2007-05-16 Thread Daniel Aquino
Is spam assassin smart enough to not auto-learn (bayesian) spam if the default tests allready detect it as spam... ? What I'm wondering is if the other tests have allready deamed it to be spam, then why would you want to increase the size of your bayesian db... Bayesian I believe would be

sa-compile error

2007-05-16 Thread Steven Stern
I've set up sa-compile successfully on two of our three servers. The third gives this error: Insecure dependency in mkdir while running with -T switch at /usr/bin/sa-compile line 321, $fh line 1. Googling around, there are references to editing a perl .pm file, but this error points to the

Re: Bayes Auto Learn

2007-05-16 Thread JamesDR
Daniel Aquino wrote: Is spam assassin smart enough to not auto-learn (bayesian) spam if the default tests allready detect it as spam... ? What I'm wondering is if the other tests have allready deamed it to be spam, then why would you want to increase the size of your bayesian db... Bayesian

Re: BAYES_99 triggered on every message

2007-05-16 Thread Jari Fredriksson
Craig Carriere wrote: Perhaps a dumb comment on my part, but have you tried to delete the table entries from the mySQL database and are you sure you are using the SA user? Doesn't sa-learn --clean only clear the Berkeley dbs and you appear to state that you are using mySQL. Best --clean

ALL_TRUSTED Overriding Bayes

2007-05-16 Thread Clay Davis
Hi gang: I am getting a bunch of messages that are passing through my SA setup with the following scores: pts rule name description -- -- 0.0 SUBJ_FOR_ONLY Subject contains For Only -3.3

Re: ALL_TRUSTED Overriding Bayes

2007-05-16 Thread Duane Hill
On Wed, 16 May 2007, Clay Davis wrote: Hi gang: I am getting a bunch of messages that are passing through my SA setup with the following scores: pts rule name description -- -- 0.0 SUBJ_FOR_ONLY

Re: Bayes Auto Learn

2007-05-16 Thread Kelson
Daniel Aquino wrote: Is spam assassin smart enough to not auto-learn (bayesian) spam if the default tests allready detect it as spam... ? What I'm wondering is if the other tests have allready deamed it to be spam, then why would you want to increase the size of your bayesian db... Bayesian I

Re: sa-compile error

2007-05-16 Thread Daryl C. W. O'Shea
Steven Stern wrote: I've set up sa-compile successfully on two of our three servers. The third gives this error: Insecure dependency in mkdir while running with -T switch at /usr/bin/sa-compile line 321, $fh line 1. Googling around, there are references to editing a perl .pm file, but this

Re: test=none

2007-05-16 Thread Daryl C. W. O'Shea
Martin Hochreiter wrote: Daryl C. W. O'Shea schrieb: --- trusted_networks 80.123.XXX.XXX trusted_networks 80.122.XXX.XXX internal_networks 192.168.1.0/24 internal_networks 192.168.2.0/24 internal_networks 127.0.0.1 --- I am using the SuSE rpm

Re: sa-compile fails Make

2007-05-16 Thread Daryl C. W. O'Shea
If this is still an issue please open a bug at http://issues.apache.org/SpamAssassin/. Thanks, Daryl Daniel J McDonald wrote: When I run sa-compile, it breaks while trying to run make: [EMAIL PROTECTED] ~]$ sudo sa-compile [32101] info: generic: base extraction starting. this can take a

Re: sa-compile and SARE

2007-05-16 Thread Daryl C. W. O'Shea
Koopmann, Jan-Peter wrote: Hi, please excuse me if the archives already answer the question and I overlooked it. I am going to upgrade to 3.2.0 this week but remember reading that sa-compile will not work with SARE rules currently. If I understand it correctly when using sa-compile it

Re: sa-compile and SARE

2007-05-16 Thread Doc Schneider
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Daryl C. W. O'Shea wrote: Koopmann, Jan-Peter wrote: Hi, please excuse me if the archives already answer the question and I overlooked it. I am going to upgrade to 3.2.0 this week but remember reading that sa-compile will not work with

Re: ALL_TRUSTED Overriding Bayes

2007-05-16 Thread Duane Hill
On Wed, 16 May 2007, Clay Davis wrote: I only have one internal network 10.0.0.0 (mask: 255.255.255.0). I have attached a few of the message that scored like this. Do you have any trusted_networks or internal_networks set up in SA's local.cf? If not, SA would be trying to guess your