Should I be worried about this?

2009-07-30 Thread jpff
Just noticed in the logs for updating the SA tables the following [15417] info: body_0: 1696 base strings extracted in 189 seconds Illegal octal digit '9' ignored at /usr/local/bin/sa-compile line 631, $fh line 1589. Wide character in print at /usr/local/bin/sa-compile line 385, $fh line 1589.

Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
Hi, I was under the impression that whitelist_from_rcvd checks if the reverse lookup is forged. But still with the following rule whitelist_from_rcvd *...@alita.karotte.org localhost the attached mail is whitelisted because 220.231.127.15 resolves to localhost. Am I doing something wrong or is

Re: How to Disable ALL CAPS OPTION

2009-07-30 Thread McDonald, Dan
On Thu, 2009-07-30 at 18:29 +0530, ganesh payelkar wrote: As per your instruction i did same setting but it is not working, Kindly let me know any other setting. On Thu, Jul 30, 2009 at 5:52 PM, Daniel J McDonald dan.mcdon...@austinenergy.com wrote: On Thu, 2009-07-30 at 17:49

Re: How to Disable ALL CAPS OPTION

2009-07-30 Thread Benny Pedersen
On Thu, July 30, 2009 14:06, ganesh payelkar wrote: Dear All, thats not very dear Kindly help me to disable ALL CAPS option in spamassassin explain more in detail what CAPS is in spamassassin -- xpoint

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
* Matus UHLAR - fantomas uh...@fantomas.sk [2009-07-30 16:35]: On 30.07.09 14:03, Sebastian Wiesinger wrote: I was under the impression that whitelist_from_rcvd checks if the reverse lookup is forged. But still with the following rule whitelist_from_rcvd *...@alita.karotte.org localhost

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: So how can I whitelist mails which come from the server where my SpamAssassin is running? Tell your glue layer that messages originating on that server should not be passed to SA at all. If you describe how SA is glued to your MTA we might be

Re: How to Disable ALL CAPS OPTION

2009-07-30 Thread Luis Croker
You can assing the value of that rule in /path-spamassassin/local.cf. For example I have it in /usr/local/etc/mail/spamassassin/local.cf: score SUBJ_ALL_CAPS 0.2 Regards. On Thu, 2009-07-30 at 17:36 +0530, ganesh payelkar wrote: Dear All, Kindly help me to

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
* John Hardin jhar...@impsec.org [2009-07-30 17:24]: On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: So how can I whitelist mails which come from the server where my SpamAssassin is running? Tell your glue layer that messages originating on that server should not be passed to SA at all.

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Benny Pedersen
On Thu, July 30, 2009 16:46, Sebastian Wiesinger wrote: * Matus UHLAR - fantomas uh...@fantomas.sk [2009-07-30 16:35]: On 30.07.09 14:03, Sebastian Wiesinger wrote: I was under the impression that whitelist_from_rcvd checks if the reverse lookup is forged. But still with the following rule

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Benny Pedersen
On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: the attached mail is whitelisted because 220.231.127.15 resolves to localhost. Am I doing something wrong or is this a bug? non working dns is not a spamassassin bug a bug apparently. JFYI, I created a bugreport for this:

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: * John Hardin jhar...@impsec.org [2009-07-30 17:24]: On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: So how can I whitelist mails which come from the server where my SpamAssassin is running? Tell your glue layer that messages originating on

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Sebastian Wiesinger
* Benny Pedersen m...@junc.org [2009-07-30 17:37]: On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: the attached mail is whitelisted because 220.231.127.15 resolves to localhost. Am I doing something wrong or is this a bug? non working dns is not a spamassassin bug

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Benny Pedersen wrote: On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: the attached mail is whitelisted because 220.231.127.15 resolves to localhost. Am I doing something wrong or is this a bug? non working dns is not a spamassassin bug How do you get

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Jeff Mincy
From: Sebastian Wiesinger spamassassin.us...@ml.karotte.org Date: Thu, 30 Jul 2009 17:48:09 +0200 * John Hardin jhar...@impsec.org [2009-07-30 17:39]: Sendmail - Procmail - SA (spamc) Cool, that should be simple. Can you send: (1) the Received: headers from

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Jeff Mincy wrote: From: Sebastian Wiesinger spamassassin.us...@ml.karotte.org Date: Thu, 30 Jul 2009 17:48:09 +0200 * John Hardin jhar...@impsec.org [2009-07-30 17:39]: Sendmail - Procmail - SA (spamc) Cool, that should be simple. Can you send:

Upgrading perl modules for SA

2009-07-30 Thread MySQL Student
Hi, I recently upgraded perl from 5.6.0 to perl-5.10.0, along with all the modules necessary for sa-3.2.5 and amavisd-new (an old version still). I'm now having a problem that I really don't understand: Jul 30 14:24:30 bigship amavis[1757]: (01757-175) TROUBLE in check_mail:

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 09:39 -0700, John Hardin wrote: On Thu, 30 Jul 2009, Jeff Mincy wrote: Processing locally generated email that contain spam URLs through SpamAssassin is not a particularly good idea. If you have Bayes enabled then you are training your Bayes that spam URLs and

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Benny Pedersen
On Thu, July 30, 2009 17:41, Sebastian Wiesinger wrote: * Benny Pedersen m...@junc.org [2009-07-30 17:37]: On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: the attached mail is whitelisted because 220.231.127.15 resolves to localhost. Am I doing something wrong or is this a bug?

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 16:46 +0200, Sebastian Wiesinger wrote: * Matus UHLAR - fantomas uh...@fantomas.sk [2009-07-30 16:35]: On 30.07.09 14:03, Sebastian Wiesinger wrote: I was under the impression that whitelist_from_rcvd checks if the reverse lookup is forged. But still with the

Re: Upgrading perl modules for SA

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, MySQL Student wrote: Jul 30 14:24:30 bigship amavis[1757]: (01757-175) TROUBLE in check_mail: decoding2-get-file-types FAILED: 'file' utility (/usr/bin/file) failed, status=1 (256 ) at /usr/sbin/amavisd line 4019. Jul 30 14:24:30 bigship amavis[1757]: (01757-175)

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Benny Pedersen wrote: On Thu, July 30, 2009 17:41, Sebastian Wiesinger wrote: * Benny Pedersen m...@junc.org [2009-07-30 17:37]: On Thu, July 30, 2009 17:17, Sebastian Wiesinger wrote: the attached mail is whitelisted because 220.231.127.15 resolves to localhost. Am I

Re: Upgrading perl modules for SA

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 14:36 -0400, Alex wrote: I recently upgraded perl from 5.6.0 to perl-5.10.0, along with all the modules necessary for sa-3.2.5 and amavisd-new (an old version still). I'm now having a problem that I really don't understand: Jul 30 14:24:30 bigship amavis[1757]:

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread Anthony Cartmell
[sebast...@alita:~]$ host 220.231.127.15 15.127.231.220.in-addr.arpa domain name pointer localhost. this is your dns error, it does not make sense You are correct, but the problem is not in Sebastian's DNS - it is in the rDNS of the IP that contacted his MTA. Not quite the same thing,

Number of rules

2009-07-30 Thread Dennis B. Hopp
I'm using maia-mailguard with spamassassin 3.2.5. For the most part it seems to be working ok but I feel like too many messages are hitting BAYES_00 (roughly 3.7% of all messages) and BAYES_99 is only hitting about 1.7%. I have bayes autolearn on with ham being learned at -1.0 and spam

Re: Number of rules

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 15:28 -0500, Dennis B. Hopp wrote: I'm using maia-mailguard with spamassassin 3.2.5. For the most part it seems to be working ok but I feel like too many messages are hitting BAYES_00 (roughly 3.7% of all messages) and BAYES_99 is only hitting about 1.7%. I have

Re: Any one interested in using a proper forum?

2009-07-30 Thread ktn
Actually I think Nabble is great for those of us who can't handle the traffic of the whole mailing list. And I wonder, what has REALLY gotten better since the '80s? Google, cell phones, and Priuses is all I can think of off the top of my head. Powershell seems like Bash finally invented for

Re: Any one interested in using a proper forum?

2009-07-30 Thread Kenneth Porter
On Thursday, July 30, 2009 2:01 PM -0700 ktn j_engl...@kawasaki-tn.com wrote: Actually I think Nabble is great for those of us who can't handle the traffic of the whole mailing list. Or you could use a news reader pointed at Gmane's news server and subscribe to the SA newsgroups. A web

header_rewrite To: Field

2009-07-30 Thread Bryan Haase
I am currently using the header_rewrite for the subject. Wondering if it is possible to use header_rewrite to change the To: field to a sub-domain? Example Mail comes in for u...@domain.com Spamassassin flags message as Spam, rewrites the subject to include ***SPAM*** then rewrites

Re: Any one interested in using a proper forum?

2009-07-30 Thread John Rudd
On Thu, Jul 30, 2009 at 14:01, ktnj_engl...@kawasaki-tn.com wrote: Actually I think Nabble is great for those of us who can't handle the traffic of the whole mailing list. If you're an RSS reader, I'd suggest getting an RSS feed from gmane. You can pick 4 types of feed: 1) full articles, 1

Re: Any one interested in using a proper forum?

2009-07-30 Thread LuKreme
On Jul 30, 2009, at 3:01 PM, ktn wrote: Actually I think Nabble is great for those of us who can't handle the traffic of the whole mailing list. I dunno, I looked at Nabble once when i was away from my computer and wanted to see quickly if there was a reply to a thread. The only word that

Re: Problem with whitelist_from_rcvd and forged reverse lookup

2009-07-30 Thread John Hardin
On Thu, 30 Jul 2009, Sebastian Wiesinger wrote: Received: from alside.com (localhost [220.231.127.15] (may be forged)) by alita.karotte.org (8.14.3/8.14.3/Debian-5) with SMTP id n6UBn1BJ021997 for webmas...@alita.karotte.org; Thu, 30 Jul 2009 13:49:05 +0200 That nonsense should

RE: Any one interested in using a proper forum?

2009-07-30 Thread Michael Hutchinson
Gidday Peter, I don't know about anyone else, but I'm getting a bit hacked of with this 1980's style forum. I'm trying to get to the bottom of an SA issue and this list/forum thing is giving me a bigger headache than SA! It's a bit like that when you're using Mailing lists, just another

Re: Number of rules

2009-07-30 Thread RW
On Thu, 30 Jul 2009 15:28:49 -0500 Dennis B. Hopp dh...@coreps.com wrote: I'm using maia-mailguard with spamassassin 3.2.5. For the most part it seems to be working ok but I feel like too many messages are hitting BAYES_00 (roughly 3.7% of all messages) 3.7% of all messages sounds far

Re: Number of rules

2009-07-30 Thread Dennis B. Hopp
Quoting RW rwmailli...@googlemail.com: Bear in mind that autolearning uses it's own version of the score that excludes whitelisting and Bayes, which means that very little ham will reach the -1 threshold unless you've added your own site-specific rules for identifying it. Yeah I knew that.

Re: header_rewrite To: Field

2009-07-30 Thread David B Funk
On Thu, 30 Jul 2009, Bryan Haase wrote: I am currently using the header_rewrite for the subject. Wondering if it is possible to use header_rewrite to change the To: field to a sub-domain? Example Mail comes in for u...@domain.com Spamassassin flags message as Spam, rewrites the

Re: Any one interested in using a proper forum?

2009-07-30 Thread Aaron Wolfe
On Thu, Jul 30, 2009 at 5:01 PM, ktnj_engl...@kawasaki-tn.com wrote: Actually I think Nabble is great for those of us who can't handle the traffic of the whole mailing list. This list generates less than 50 messages per day on average:

Re: header_rewrite To: Field

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 16:50 -0500, Bryan Haase wrote: I am currently using the header_rewrite for the subject. Wondering if it is possible to use header_rewrite to change the To: field to a sub-domain? Nope. Which part of the docs [1] isn't clear? See rewrite_header, first item in the Basic

Re: Number of rules

2009-07-30 Thread Karsten Bräckelmann
On Thu, 2009-07-30 at 19:12 -0500, Dennis B. Hopp wrote: Quoting RW rwmailli...@googlemail.com: Bear in mind that autolearning uses it's own version of the score that excludes whitelisting and Bayes, which means that very little ham will reach the -1 threshold unless you've added your own

Re: Any one interested in using a proper forum?

2009-07-30 Thread John Rudd
On Thu, Jul 30, 2009 at 17:54, Aaron Wolfeaawo...@gmail.com wrote: On Thu, Jul 30, 2009 at 5:01 PM, ktnj_engl...@kawasaki-tn.com wrote: Actually I think Nabble is great for those of us who can't handle the traffic of the whole mailing list. This list generates less than 50 messages per day

Network Tests / Rule Files Directories

2009-07-30 Thread Stefan Malte Schumacher
Hello Before I begin with my questions, here is a description of my setup: I am using the latest version of SpamAssassin (3.2.5). My perl version is perl-5.8.3-32.9 - the distribution (Suse 9.1) is rather old, most of the packages I actually use are self-compiled. I use getmail 4.9.1 to fetch

alpha2? beta1?

2009-07-30 Thread Warren Togami
Could we please schedule a desired date to release the next pre-release of 3.3.0? Time based releases help us to stay on track. Warren Togami wtog...@redhat.com

Re: Any one interested in using a proper forum?

2009-07-30 Thread Aaron Wolfe
On Thu, Jul 30, 2009 at 10:07 PM, John Ruddjr...@ucsc.edu wrote: On Thu, Jul 30, 2009 at 17:54, Aaron Wolfeaawo...@gmail.com wrote: On Thu, Jul 30, 2009 at 5:01 PM, ktnj_engl...@kawasaki-tn.com wrote: Actually I think Nabble is great for those of us who can't handle the traffic of the whole

Re: Upgrading perl modules for SA

2009-07-30 Thread MySQL Student
Hi, check_mail: decoding2-get-file-types FAILED: 'file' utility (/usr/bin/file) failed, status=1 (256 ) at /usr/sbin/amavisd line How's this a SA question? Yes, my apologies. I don't know enough about amavis yet, and thought it may be related to all the modules I upgraded, and not amavis