DNS checks not being performed-

Hello Seems like since the last rules update DNS rules aren't being checked given that 209.85.216.51 is listed in list.dnswl.org the relevant rule should show- ;; QUESTION SECTION: ;51.216.85.209.list.dnswl.org. IN A ;; ANSWER SECTION: 51.216.85.209.list.dnswl.org. 28800 IN A

Re: DNS checks not being performed-

On 11/11/2014 12:20 PM, Niamh Holding wrote: Hello Seems like since the last rules update DNS rules aren't being checked given that 209.85.216.51 is listed in list.dnswl.org the relevant rule should show- ;; QUESTION SECTION: ;51.216.85.209.list.dnswl.org. IN A ;; ANSWER SECTION:

Re: DNS checks not being performed-

Hello Niamh, Tuesday, November 11, 2014, 11:20:59 AM, I wrote: NH Seems like since the last rules update DNS rules aren't being checked Last update- Nov 10 04:23:02.028 [3867] dbg: dns: 0.4.3.sought.rules.yerp.org = 3402014020421, parsed as 3402014020421 Nov 10 04:23:02.333 [3867] dbg: dns:

Re: DNS checks not being performed-

Hello Axb, Tuesday, November 11, 2014, 11:26:50 AM, you wrote: A cat msg.eml | spamassassin -D dns RBL rules hit... but they aren't showing under normal checks. cat /tmp/0001.eml | spamassassin -D dns Nov 11 11:44:11.031 [26084] warn: config: created user preferences file:

Re: DNS checks not being performed-

Hello Niamh, Tuesday, November 11, 2014, 11:59:05 AM, you wrote: NH RBL rules hit... but they aren't showing under normal checks. That message of mine has- X-Spam-Report: * 0.0 HEADER_FROM_DIFFERENT_DOMAINS From and EnvelopeFrom 2nd level mail * domains are different

Re: DNS checks not being performed-

Hello Axb, Tuesday, November 11, 2014, 11:26:50 AM, you wrote: A what do you see maillog shows Nov 11 12:15:16 nitrogen spamd[26862]: spamd: connection from 127.0.0.1 [127.0.0.1]:46489 to port 783, fd 5 Nov 11 12:15:16 nitrogen spamd[26862]: spamd: setuid to spamtest succeeded Nov 11

Re: DNS checks not being performed-

Hello Niamh, Tuesday, November 11, 2014, 12:20:31 PM, you wrote: NH /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/DnsResolver.pm line 414. $sock = $io_socket_module_name-new(%args); And a quick test script suggests that $io_socket_module_name = IO::Socket::INET6 -- Best regards, Niamh

Re: DMARC policy check with AskDNS posible?

After a couple of iterations and re-reading the policy syntax in a DMARC draft, I ended up with the following set of rules ( based on https://issues.apache.org/SpamAssassin/show_bug.cgi?id=7099 ): ifplugin Mail::SpamAssassin::Plugin::AskDNS askdns __DMARC_POLICY_NONE _dmarc._AUTHORDOMAIN_

Re: DNS checks not being performed-

Niamh Holding wrote: spamd[26862]: spamd: connection from 127.0.0.1 [127.0.0.1]:46489 to port 783, fd 5 spamd[26862]: spamd: setuid to spamtest succeeded spamd[26862]: spamd: processing message 2014121508.3321875.277...@sailthru.com for spamtest:1028 spamd[26862]: plugin: eval failed:

Re: DNS checks not being performed-

Hello Mark, Tuesday, November 11, 2014, 1:55:42 PM, you wrote: MM Start spamd with option -D dns and compare its dns debuging So what's the command instead of service spamassassin start? -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpc5cY9k_gpO.pgp

Re: DNS checks not being performed-

On 11/11/2014 03:01 PM, Niamh Holding wrote: Hello Mark, Tuesday, November 11, 2014, 1:55:42 PM, you wrote: MM Start spamd with option -D dns and compare its dns debuging So what's the command instead of service spamassassin start? You need to add -D dns (without the quotes) option to

Re: DNS checks not being performed-

Hello Axb, Tuesday, November 11, 2014, 2:11:39 PM, you wrote: A You need to add -D dns (without the quotes) option to the spamassassin A init script So daemon $NICELEVEL spamd $SPAMDOPTIONS -r $SPAMD_PID becomes daemon $NICELEVEL spamd -D dns $SPAMDOPTIONS -r $SPAMD_PID or do I set

Re: DNS checks not being performed-

On 11/11/2014 03:26 PM, Niamh Holding wrote: Hello Axb, Tuesday, November 11, 2014, 2:11:39 PM, you wrote: A You need to add -D dns (without the quotes) option to the spamassassin A init script So daemon $NICELEVEL spamd $SPAMDOPTIONS -r $SPAMD_PID becomes daemon $NICELEVEL spamd -D dns

Re: DNS checks not being performed-

Hello Axb, Tuesday, November 11, 2014, 2:29:19 PM, you wrote: A should do the trick... service spamassassin start logs- Nov 11 14:42:41 nitrogen spamd[29405]: logger: removing stderr method Nov 11 14:42:41 nitrogen spamd[29407]: Can't locate Crypt/OpenSSL/Bignum.pm in @INC (@INC contains:

Re: DNS checks not being performed-

Hello Axb, Tuesday, November 11, 2014, 2:29:19 PM, you wrote: A SPAMDOPTIONS=-d -c -m5 -H -D dns A should do the trick... And a message logs- Nov 11 14:42:41 nitrogen spamd[29405]: logger: removing stderr method Nov 11 14:42:41 nitrogen spamd[29407]: Can't locate Crypt/OpenSSL/Bignum.pm in

Re: DNS checks not being performed-

Bignum.pm Am 11.11.2014 um 15:48 schrieb Niamh Holding: Hello Axb, Tuesday, November 11, 2014, 2:29:19 PM, you wrote: A SPAMDOPTIONS=-d -c -m5 -H -D dns A should do the trick... And a message logs- Nov 11 14:42:41 nitrogen spamd[29405]: logger: removing stderr method Nov 11 14:42:41

Re: DNS checks not being performed-

On 11/11/2014 9:48 AM, Niamh Holding wrote: Hello Axb, Tuesday, November 11, 2014, 2:29:19 PM, you wrote: A SPAMDOPTIONS=-d -c -m5 -H -D dns A should do the trick... And a message logs- Nov 11 14:42:41 nitrogen spamd[29405]: logger: removing stderr method Nov 11 14:42:41 nitrogen

Re: DNS checks not being performed-

Hello Kevin, Tuesday, November 11, 2014, 2:51:14 PM, you wrote: KAM These two sound like you are missing Perl modules for SA. Not sure if KAM they are relevant but they definitely irk me. Are you installing from KAM source or from a package? From source, but 3.4.0 was working fine until

Re: DNS checks not being performed-

On Tue, 2014-11-11 at 15:11 +0100, Axb wrote: You need to add -D dns (without the quotes) option to the spamassassin init script (depending on your distro it may be /etc/init.d/spamassassin) On current Fedora Linux systems /etc/sysconfig/spamassassin contains a single line: SPAMDOPTIONS=-c

Re: DNS checks not being performed-

Hello Martin, Tuesday, November 11, 2014, 3:03:10 PM, you wrote: MG In Fedora 18 SA is managed this way, so editing MG /etc/sysconfig/spamassasin is the best way to do it for Linuxes that MG use sysVinit daemon management. Cheers, probably the same for CentOS -- Best regards, Niamh

Re: DNS checks not being performed-

Hello Martin, Tuesday, November 11, 2014, 3:03:10 PM, you wrote: MG Start by seeing if your setup has a copy of /etc/sysconfig/spamassassin. OK startup now logs - Nov 11 15:06:25 nitrogen spamd[29594]: spamd: server killed by SIGTERM, shutting down Nov 11 15:06:28 nitrogen spamd[29849]:

Re: DNS checks not being performed-

On 11/11/2014 9:59 AM, Niamh Holding wrote: Hello Kevin, Tuesday, November 11, 2014, 2:51:14 PM, you wrote: KAM These two sound like you are missing Perl modules for SA. Not sure if KAM they are relevant but they definitely irk me. Are you installing from KAM source or from a package? From

Re: DNS checks not being performed-

Hello Kevin, Tuesday, November 11, 2014, 3:03:12 PM, you wrote: KAM I would start with KAM cpan Crypt::OpenSSL::RSA and see if you don't find a bunch of module dependencies. Crypt::OpenSSL::RSA is up to date. -- Best regards, Niamhmailto:ni...@fullbore.co.uk

Re: DNS checks not being performed-

On 11/11/2014 10:40 AM, Niamh Holding wrote: Hello Kevin, Tuesday, November 11, 2014, 3:03:12 PM, you wrote: KAM I would start with KAM cpan Crypt::OpenSSL::RSA and see if you don't find a bunch of module dependencies. Crypt::OpenSSL::RSA is up to date. Did that fix the BigNum and RSA

Re: DNS checks not being performed-

Hello Niamh, Tuesday, November 11, 2014, 3:08:49 PM, you wrote: NH OK startup now logs - And a message check logs- Nov 11 15:41:42 nitrogen spamd[29852]: spamd: connection from 127.0.0.1 [127.0.0.1]:59387 to port 783, fd 5 Nov 11 15:41:42 nitrogen spamd[29852]: spamd: setuid to spamtest

Re: DNS checks not being performed-

Hello Kevin, Tuesday, November 11, 2014, 3:46:51 PM, you wrote: KAM Did that fix the BigNum and RSA error you logged? No -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpesAE2KAyQJ.pgp Description: PGP signature

Re: DNS checks not being performed-

Tuesday, November 11, 2014, 2:51:14 PM, you wrote: KAM These two sound like you are missing Perl modules for SA. Not sure if KAM they are relevant but they definitely irk me. Are you installing from KAM source or from a package? On 11.11.14 14:59, Niamh Holding wrote: From source, but 3.4.0

Re: DNS checks not being performed-

Hello Matus, Tuesday, November 11, 2014, 4:02:33 PM, you wrote: MUf what exactly do you install from source: perl or SA? SA on 30 Oct 2014 MUf ...What did you do yesterday? 23 4 * * * sa-update -D --gpgkey 6C6191E3 --channel sought.rules.yerp.org --channel updates.spamassassin.org

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

Is your IO::Socket::IP at version 0.21 or older? $ perl -le 'use IO::Socket::IP; print IO::Socket::IP-VERSION' 0.21 CHANGES: * Ensure that IO::Socket-new( Domain = ... ) definitely returns a socket in the right family Mark

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

Hello Mark, Tuesday, November 11, 2014, 4:19:28 PM, you wrote: MM perl -le 'use IO::Socket::IP; print IO::Socket::IP-VERSION' Socket version 1.97 required--this is only version 1.78 at /usr/lib/perl5/site_perl/5.8.8/IO/Socket/IP.pm line 30. BEGIN failed--compilation aborted at

Re: DNS checks not being performed-

Am 11.11.2014 um 17:24 schrieb Niamh Holding: Tuesday, November 11, 2014, 4:19:28 PM, you wrote: MM perl -le 'use IO::Socket::IP; print IO::Socket::IP-VERSION' Socket version 1.97 required--this is only version 1.78 at /usr/lib/perl5/site_perl/5.8.8/IO/Socket/IP.pm line 30. BEGIN

Re: DNS checks not being performed-

Tuesday, November 11, 2014, 4:02:33 PM, you wrote: MUf what exactly do you install from source: perl or SA? On 11.11.14 16:10, Niamh Holding wrote: SA on 30 Oct 2014 MUf ...What did you do yesterday? 23 4 * * * sa-update -D --gpgkey 6C6191E3 --channel sought.rules.yerp.org --channel

Re: DNS checks not being performed-

Hello Matus, Tuesday, November 11, 2014, 4:47:10 PM, you wrote: MUf ... as it was already said: do NOT mix manually installed CPAN modules with MUf packages of any kind. use either one or the other. so don't use yum and cpan? -- Best regards, Niamh

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

Niamh Holding wrote: MUf ... as it was already said: do NOT mix manually installed CPAN modules with MUf packages of any kind. use either one or the other. so don't use yum and cpan? Well, you probably can - if you are careful. But using an 8 years old version of perl you'd be safer with

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

Hello Niamh, Tuesday, November 11, 2014, 4:24:23 PM, you wrote: NH Socket version 1.97 required--this is only version 1.78 at NH /usr/lib/perl5/site_perl/5.8.8/IO/Socket/IP.pm line 30. OK, looks like it's using /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/Socket.pm But

Re: DNS checks not being performed-

Am 11.11.2014 um 19:12 schrieb Niamh Holding: Hello Niamh, Tuesday, November 11, 2014, 4:24:23 PM, you wrote: NH Socket version 1.97 required--this is only version 1.78 at NH /usr/lib/perl5/site_perl/5.8.8/IO/Socket/IP.pm line 30. OK, looks like it's using

Re: DNS checks not being performed-

Hello Reindl, Tuesday, November 11, 2014, 6:27:05 PM, you wrote: RH not install software on random locations RH * especially not in the root's homedir What do you think I specifically installed in arandom location and in root's homedir? RH BTW: what is the Re: ***UNCHECKED(Encrypted)*** in

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

On 11/11/2014 07:12 PM, Niamh Holding wrote: Hello Niamh, Tuesday, November 11, 2014, 4:24:23 PM, you wrote: NH Socket version 1.97 required--this is only version 1.78 at NH /usr/lib/perl5/site_perl/5.8.8/IO/Socket/IP.pm line 30. OK, looks like it's using

Re: DNS checks not being performed-

Am 11.11.2014 um 19:33 schrieb Niamh Holding: Hello Reindl, Tuesday, November 11, 2014, 6:27:05 PM, you wrote: RH not install software on random locations RH * especially not in the root's homedir What do you think I specifically installed in arandom location and in root's homedir? *you*

Re: DNS checks not being performed-

--On November 11, 2014 at 7:38:08 PM +0100 Reindl Harald h.rei...@thelounge.net wrote: What do you think I specifically installed in arandom location and in root's homedir? *you* wrote OK, looks like it's using /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/Socket.pm

Re: DNS checks not being performed-

Am 11.11.2014 um 19:43 schrieb Quanah Gibson-Mount: --On November 11, 2014 at 7:38:08 PM +0100 Reindl Harald h.rei...@thelounge.net wrote: What do you think I specifically installed in arandom location and in root's homedir? *you* wrote OK, looks like it's using

Re: DNS checks not being performed-

Hello Reindl, Tuesday, November 11, 2014, 6:38:08 PM, you wrote: RH *you* wrote And you made an accusation... -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpGURXZr8Iud.pgp Description: PGP signature

Re: DNS checks not being performed-

Am 11.11.2014 um 19:49 schrieb Niamh Holding: Hello Reindl, Tuesday, November 11, 2014, 6:38:08 PM, you wrote: RH *you* wrote And you made an accusation... you mis-use the word accusation i just read the infos you offer and bring them in a context - in fact until now nobody knows where

Re: DNS checks not being performed-

Reindl Harald wrote: BTW: what is the Re: ***UNCHECKED(Encrypted)*** in your subjects?\ Sorry, my fault. Forgot to remove this from a Subject when replying. It was added here because the posting includes a PGP signature and the file(1) utility cannot distinguish a PGP/GPG encrypted message

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

Hello Axb, Tuesday, November 11, 2014, 6:37:05 PM, you wrote: A Did I miss this? Do we know what OS version are you using? cat /etc/*release CentOS release 5.4 -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgp9XHgbBFk2l.pgp Description: PGP signature

Re: DNS checks not being performed-

Hello Reindl, Tuesday, November 11, 2014, 6:46:37 PM, you wrote: RH so mentioning /root/.cpan/build/ make sno sense at all find / -name Socket.pm -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgp51oScErvzv.pgp Description: PGP signature

Re: DNS checks not being performed-

Hello Reindl, Tuesday, November 11, 2014, 6:55:22 PM, you wrote: RH nobody knows where you expect Socket.pm loaded from base so where tells me which is loaded? -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpXUw5neK_Ve.pgp Description: PGP signature

Re: DNS checks not being performed-

On 11/11/2014 08:06 PM, Niamh Holding wrote: Hello Axb, Tuesday, November 11, 2014, 6:37:05 PM, you wrote: A Did I miss this? Do we know what OS version are you using? cat /etc/*release CentOS release 5.4 here's an idea: remove the /root/.cpan/ dir... Update your ancient Centos version

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

Hello Axb, Tuesday, November 11, 2014, 6:37:05 PM, you wrote: A Did I miss this? Do we know what OS version are you using? This yum update might be connected to the problem... -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpARfMki3D5J.pgp Description: PGP

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

On 11/11/2014 08:25 PM, Niamh Holding wrote: Hello Axb, Tuesday, November 11, 2014, 6:37:05 PM, you wrote: A Did I miss this? Do we know what OS version are you using? This yum update might be connected to the problem... Which means? Did you run an update or not? Pls be specific to

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

Hello Axb, Tuesday, November 11, 2014, 7:29:57 PM, you wrote: A Which means? Did you run an update or not? Fail to paste error! Nov 09 13:15:19 Updated: 4:perl-5.8.8-43.el5_11.x86_64 -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgplxkltbXGIG.pgp

Re: DNS checks not being performed-

Hello Axb, Tuesday, November 11, 2014, 7:20:36 PM, you wrote: A Update your ancient Centos version to Centos 5.11 That's scary... given the server is in a data centre 250 miles away! -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpzrFhHwg7hr.pgp

Re: DNS checks not being performed-

On 11/11/2014 08:41 PM, Niamh Holding wrote: Hello Axb, Tuesday, November 11, 2014, 7:20:36 PM, you wrote: A Update your ancient Centos version to Centos 5.11 That's scary... given the server is in a data centre 250 miles away! real men hug their teddy before doing yum update and patching

Re: DNS checks not being performed-

Am 11.11.2014 um 20:41 schrieb Niamh Holding: Tuesday, November 11, 2014, 7:20:36 PM, you wrote: A Update your ancient Centos version to Centos 5.11 That's scary... given the server is in a data centre 250 miles away! you should subscribe to the CentOS list it's multiple times explained

Re: ***UNCHECKED(Encrypted)*** Re: DNS checks not being performed-

Am 11.11.2014 um 20:41 schrieb Niamh Holding: Tuesday, November 11, 2014, 7:29:57 PM, you wrote: A Which means? Did you run an update or not? Fail to paste error! Nov 09 13:15:19 Updated: 4:perl-5.8.8-43.el5_11.x86_64 besides my previous mail about how to handle CenTOS: it is *very*

Scoring numbers explained

Hi, Hopefully someone can answer this simply with a link to the right documentation. I want to adjust the score on a test but I have no idea what the four numbers actually are. e.g. score AC_SPAMMY_URI_PATTERNS10 3.995 1.010 3.995 1.010 I feel so dumb as I can't find the documentation

Re: Scoring numbers explained

Am 11.11.2014 um 23:41 schrieb Tom Robinson: Hopefully someone can answer this simply with a link to the right documentation. I want to adjust the score on a test but I have no idea what the four numbers actually are. e.g. score AC_SPAMMY_URI_PATTERNS10 3.995 1.010 3.995 1.010 I feel so

Re: Scoring numbers explained

On 11/11/2014 11:41 PM, Tom Robinson wrote: Hi, Hopefully someone can answer this simply with a link to the right documentation. I want to adjust the score on a test but I have no idea what the four numbers actually are. e.g. score AC_SPAMMY_URI_PATTERNS10 3.995 1.010 3.995 1.010 I feel so

Re: Scoring numbers explained

On Wed, 12 Nov 2014, Tom Robinson wrote: I want to adjust the score on a test but I have no idea what the four numbers actually are. e.g. score AC_SPAMMY_URI_PATTERNS10 3.995 1.010 3.995 1.010 https://spamassassin.apache.org/full/3.4.x/doc/Mail_SpamAssassin_Conf.html User Preferences -

Re: Scoring numbers explained

On 12/11/14 09:45, Reindl Harald wrote: Am 11.11.2014 um 23:41 schrieb Tom Robinson: Hopefully someone can answer this simply with a link to the right documentation. I want to adjust the score on a test but I have no idea what the four numbers actually are. e.g. score

Re: DNS checks not being performed-

On November 11, 2014 8:48:53 PM Axb axb.li...@gmail.com wrote: yum update -y reboot good luck send us a postcard... emerge @world echo cpan not needed in gentoo :)

Re: whitelist_from_rcvd / trusted_networks

On Mon, 10 Nov 2014 23:30:28 -0500 (EST) Derek Diget wrote: We have a department that has subscribed to a service in the cloud product that is sending email to us via our MX record. The problem is that they appear to be using shared servers/IPs and thus every once in a while mail will