latest HEAD -lint warns ... warn: Found = in conditional, should be == ...
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 hi all. i'm building SA r345641 on OSX 10.4.3 w/ gcc401 perl 587. on '-lint', i get the following previously unseen warnings: ... [20222] dbg: check: running tests for priority: 500 [20222] dbg: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x188819c) implements 'check_post_dnsbl' [20222] dbg: rules: running meta tests; score so far=0.748 [20222] warn: Found = in conditional, should be == at (eval 3883) line 1046. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1047. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1050. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1056. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1058. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1061. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1064. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1100. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1109. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1113. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1123. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1127. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1138. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1141. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1149. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1164. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1176. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1179. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1210. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1216. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1218. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1220. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1238. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1239. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1242. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1316. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1317. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1324. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1345. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1350. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1366. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1374. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1384. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1387. [20222] warn: Found = in conditional, should be == at (eval 3883) line 1421. [20222] dbg: rules: running header regexp tests; score so far=2.226 [20222] dbg: rules: running body-text per-line regexp tests; score so far=2.226 [20222] dbg: uri: running uri tests; score so far=2.226 ... i realize these are 'warnings', not 'errors'; nonetheless ... problem/bug/non-issue? thx, richard - -- /\ \ / ASCII Ribbon Campaign X against HTML email, vCards / \ micro$oft attachments [GPG] OpenMacNews at gmail dot com fingerprint: 50C9 1C46 2F8F DE42 2EDB D460 95F7 DDBD 3671 08C6 -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.2 (Darwin) iEYEAREDAAYFAkN+3cIACgkQlffdvTZxCMaIrwCbB2zq86Xh5BYLfuqvh/ns5J/1 D0cAn0Y/DRUVkERD8QM9cI0h1zS+dHEG =hk2T -END PGP SIGNATURE-
Re: uol.com.br
Jdow wrote on Thu, 17 Nov 2005 22:22:40 -0800: curmudgeon I learned a new word :-) My stance on this is that the list-admin should please immediately unsubscribe everyone who uses a challenge/response system against a mailing list. It's is unbearable. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de http://msie.winware.org
Re: sa-learn magic numbers don't change
Kevin Old wrote on Sun, 13 Nov 2005 18:15:32 -0500: When I run sa-learn --dump magic and then run hams or spams into it and dump the magic again, the numbers *never* change. Most likely because you learn under a different account or with a different config file. And since you use MailScanner the latter is most probable. MailScanner comes with its own local.cf to get people going. However, it introduces this split config problem :-( You have to either set MailScanner to use the /etc/mail/spamassassin/local.cf (with updated values) or tell sa-learn to use a different config file. I prefer the first alternative. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de http://msie.winware.org
test for sql user prefs fails - debug not helpful - followup
Hello, The db name, username, and password all had underscores, so I renamed the db, added a new user, and set a password without an underscore in any of them. No change. I had read a post that suggested the parser might be confused by some unexpected characters so I removed the underscores. Running spamassassin --lint --debug --nocreate-prefs is clean with no errors or warnings. Any suggestions? -- Dale Morin, Mustang Internet Services, Inc. Support Without Compromise main office: 847.541.2811 direct line: 815.496.9853 email: [EMAIL PROTECTED]
Re: uol.com.br
From: Kai Schaetzl [EMAIL PROTECTED]
Jdow wrote on Thu, 17 Nov 2005 22:22:40 -0800:
curmudgeon
I learned a new word :-)
My stance on this is that the list-admin should please immediately
unsubscribe everyone who uses a challenge/response system against a
mailing list. It's is unbearable.
Kai
The administrator of the Fedora Core 4 list did so. But it was at least
a day after it was becoming an issue on the list and the morning after
I had helped diagnose what was going on. He was as frustrated as the
rest of us after sending a note to the list that he'd repair it and
getting several challenges back. So he solved it the rational way, for
an irritated person. He blocked and removed all uol.com.br participation
on the list. He really does not have time to handle this one at a time
for a problem that irritates people this much.
I block them. But I do so in a way I can see if I ever get anything real
from them.
{^_^}
Re: [sa-list] OT: Spammers' reactions to rejection
Kris Deugau wrote on Fri, 18 Nov 2005 12:54:54 -0500: A nice thought, but absolutely useless in the case where you receive any volume of mail from a host running qmail. :( Doesn't it try to deliver the rest a bit later? After all, it should recognize that it was able to deliver a few ... Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de http://msie.winware.org
Re: OT: Spammers' reactions to rejection
Magnus Holmgren wrote on Thu, 17 Nov 2005 19:04:06 +0100: Spammers need to clean their address lists once in a while, lest they end up with a very low proportion of valid addresses, right? They do not care at all, at least not those which make up for the majority of spam. They don't even care that they can't deliver a single mail for years to whole domains. I have a customer who got joe-jobbed about two years ago (= spam mail that was sent with his domain as sender). The influx of bounces from these was so high we had to take the domain not only of the mail but also off DNS (by moving his dns records right-away to the registry which is possible in Germany). When I checked a year later we were still getting something like 50.000 bounces a day, so I deactivated him again. I just tried again and have already received nearly 10.000 delivery attempts (spam, not bounces this time) during the last hours. As Matt says, all of that are dictionary attacks. That domain was pointing to 127.0.0.1 for two years, nevertheless they spam at it in incredible masses. What makes me wonder the most is why there are a few domains which so heavily attract spammers for years and in such big numbers. This domain doesn't have anything special about it and is not widely known. If other domains would only get ten per-cent of that spam they would already be more or less useless. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de http://msie.winware.org
Re: uol.com.br
On Sat, 2005-11-19 at 05:37 -0800, jdow wrote: From: Kai Schaetzl [EMAIL PROTECTED] Jdow wrote on Thu, 17 Nov 2005 22:22:40 -0800: curmudgeon I learned a new word :-) My stance on this is that the list-admin should please immediately unsubscribe everyone who uses a challenge/response system against a mailing list. It's is unbearable. Kai The administrator of the Fedora Core 4 list did so. But it was at least a day after it was becoming an issue on the list and the morning after I had helped diagnose what was going on. He was as frustrated as the rest of us after sending a note to the list that he'd repair it and getting several challenges back. So he solved it the rational way, for an irritated person. He blocked and removed all uol.com.br participation on the list. you must have been dreaming though. There wasn't an email address from uol.com.br subscribed to the list so he actually didn't solve anything and if you remove the blocks that you have in your system and then post to [EMAIL PROTECTED], you will see this is still happening. Apparently someone has subscribed to the mail list with one address which automatically bounces it to the uol.com.br address which automatically sends the challenge to the originator of the message to the list because the list retains the original 'From' address. So in actuality, Warren has done nothing really to solve the problem. He really does not have time to handle this one at a time for a problem that irritates people this much. I block them. But I do so in a way I can see if I ever get anything real from them. OK Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Re: geocities rule?
On Tuesday, November 15, 2005, 3:47:22 PM, Loren Wilton wrote: Unfortunately, I've had plenty of FPs with the basic *.geocities.com.. A lot of enthusiast websites of various sorts are hosted there and my users like to forward around links to them. I wonder what the effect of listing /\w\.\w\w\.geocities\.com\b/ would be? That would only catch the non-US hosts. Arguably still using way too large a hammer, but for some people it might work. Loren Funny, a few days after you said that I saw www.geocities.com in spams. Hello spammers F U !;-) Jeff C. -- Jeff Chan mailto:[EMAIL PROTECTED] http://www.surbl.org/
Re: [sa-list] OT: Spammers' reactions to rejection
Return-Path: [EMAIL PROTECTED] X-Sieve: CMU Sieve 2.2 Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm Precedence: bulk list-help: mailto:[EMAIL PROTECTED] list-unsubscribe: mailto:[EMAIL PROTECTED] List-Post: mailto:users@spamassassin.apache.org List-Id: users.spamassassin.apache.org Delivered-To: mailing list users@spamassassin.apache.org X-ASF-Spam-Status: No, hits=0.0 required=10.0 tests=SPF_PASS,UNPARSEABLE_RELAY Received-SPF: pass (asf.osuosl.org: domain of [EMAIL PROTECTED] designates 212.202.99.227 as permitted sender) Date: Sat, 19 Nov 2005 15:31:24 +0100 To: users@spamassassin.apache.org Subject: Re: [sa-list] OT: Spammers' reactions to rejection X-Mailer: Virtual Access Open Source http://www.virtual-access.org/ Mime-Version: 1.0 Content-Type: text/plain; charset=iso-8859-1 Content-Transfer-Encoding: 8bit In-Reply-To: [EMAIL PROTECTED] References: [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] [EMAIL PROTECTED] From: Kai Schaetzl [EMAIL PROTECTED] Reply-To: users@spamassassin.apache.org X-Rcpt-To: users@spamassassin.apache.org X-Virus-Checked: Checked by ClamAV on apache.org X-TOI-SPAM: u;0;2005-11-19T14:32:15Z X-TOI-VIRUSSCAN: unchecked X-TOI-MSGID: bf38862f-9cb6-429a-b742-3a6a6b980fed X-Seen: false X-Spam-Checker-Version: SpamAssassin 3.0.4 (2005-06-05) on amadeus3.local X-Spam-Status: No, score=-2.6 required=5.0 tests=AWL,BAYES_00 autolearn=ham version=3.0.4 X-Spam-Level: Kris Deugau wrote on Fri, 18 Nov 2005 12:54:54 -0500: A nice thought, but absolutely useless in the case where you receive any volume of mail from a host running qmail. :( Doesn't it try to deliver the rest a bit later? After all, it should recognize that it was able to deliver a few ... Kai Hi, in practice, if the recipient says try later with a 4xx response, the sender will try a little later. If the sender does not get connected at all, due to firewalling, it might try the backup mxes instead Wolfgang Hamann
Razor2 is not available, but it really is!
Hello, This is really strange. I have Razor installed and working, but SA insists that it isn't there (spamassasin -tD): (crop) [402] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC [402] dbg: razor2: razor2 is not available [402] dbg: plugin: registered Mail::SpamAssassin::Plugin::Razor2=HASH(0x8d0a354) (crop) But I have Razor, in the search path and all: [EMAIL PROTECTED]:~$ razor-check --v Razor Agents 2.77, protocol version 3 [EMAIL PROTECTED]:~/etc/mail/spamassassin$ which razor-check /home/hjerto/bin/razor-check And the plugin: [EMAIL PROTECTED]:~$ perl -e 'require Mail::SpamAssassin::Plugin::Razor2' [EMAIL PROTECTED]:~$ (I.e.: No error message is good news.) I'm not root, so it's a single user install. Followed the great guide at http://wiki.apache.org/spamassassin/SingleUserUnixInstall I also activate it in v310.pre: [EMAIL PROTECTED]:~/etc/mail/spamassassin$ grep -v ^# v310.pre loadplugin Mail::SpamAssassin::Plugin::DCC loadplugin Mail::SpamAssassin::Plugin::Pyzor loadplugin Mail::SpamAssassin::Plugin::Razor2 loadplugin Mail::SpamAssassin::Plugin::SpamCop loadplugin Mail::SpamAssassin::Plugin::AWL loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject loadplugin Mail::SpamAssassin::Plugin::MIMEHeader loadplugin Mail::SpamAssassin::Plugin::ReplaceTags Running SA version 3.1.0 on Perl 5.8.4. Can anybody help me? I'm _so_ close to getting this thing up and running. Thanks in advance!
Re: Razor2 is not available, but it really is!
On Sat, Nov 19, 2005 at 11:36:36PM +0100, Hjerto wrote: This is really strange. I have Razor installed and working, but SA insists that it isn't there (spamassasin -tD): (crop) [402] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC [402] dbg: razor2: razor2 is not available [402] dbg: plugin: registered Mail::SpamAssassin::Plugin::Razor2=HASH(0x8d0a354) (crop) Ok, it can't find the perl modules. But I have Razor, in the search path and all: [EMAIL PROTECTED]:~$ razor-check --v Razor Agents 2.77, protocol version 3 [EMAIL PROTECTED]:~/etc/mail/spamassassin$ which razor-check /home/hjerto/bin/razor-check So it looks like you installed the modules in your home directory, which probably won't be in @INC, so the plugin can't find them. If this is the case, you'll probably have to set PERL5LIB before running SA so that it'll be able to find the non-standard module location. -- Randomly Generated Tagline: Oh mother, I've got a present for you. It's in my diaper and it's not a toaster. - Stewie on Family Guy pgpbRULJgBpE0.pgp Description: PGP signature
Re: Return-Path: ([EMAIL PROTECTED])
Hello Elton, Friday, November 18, 2005, 8:00:07 AM, you wrote: ERC I`m getting some spams with Return-Path: ([EMAIL PROTECTED]). Return-Path: [EMAIL PROTECTED] Return-Path: [EMAIL PROTECTED] ERC Then I did this rule. ERC header EL_NOBODY_RP Return-Path =~ /[EMAIL PROTECTED]/i ERC describe EL_NOBODY_RP Contém nobody no return path ERC score EL_NOBODY_RP 1.0 ERC What do you think about? ERC Is it a good idea? ERC Will it give me some ham? Yes, it will match ham. * Nov 11 2005, userid/password notification from network54.com * Nov 5 2005, VCOM Registration confirmation * Oct 4 2005, sun.com download registration confirmation * Oct 4 2005, entech inventory program download confirmation ERC Elton Carvalho -- Best regards, Robertmailto:[EMAIL PROTECTED]
[SARE] specific.cf updated
Just a quick note that 70_sare_specific.cf has been updated. Many of the geocities spam and table-built spam should now be flagged. Documentation and link at http://www.rulesemporium.com/rules.htm#specific Scores may need adjusting. And with this announcement, we expect the spammers will begin modifying their spams to avoid the new rules. Please send feedback and examples of unmatched spam to [EMAIL PROTECTED] We expect to issue two or three more updates this week to catch those modifications. Keep an eye on the file or that doc. Thanks. Bob Menschel
Re: uol.com.br
From: Craig White [EMAIL PROTECTED]
On Sat, 2005-11-19 at 05:37 -0800, jdow wrote:
From: Kai Schaetzl [EMAIL PROTECTED]
Jdow wrote on Thu, 17 Nov 2005 22:22:40 -0800:
curmudgeon
I learned a new word :-)
My stance on this is that the list-admin should please immediately
unsubscribe everyone who uses a challenge/response system against a
mailing list. It's is unbearable.
Kai
The administrator of the Fedora Core 4 list did so. But it was at least
a day after it was becoming an issue on the list and the morning after
I had helped diagnose what was going on. He was as frustrated as the
rest of us after sending a note to the list that he'd repair it and
getting several challenges back. So he solved it the rational way, for
an irritated person. He blocked and removed all uol.com.br participation
on the list.
you must have been dreaming though. There wasn't an email address from
uol.com.br subscribed to the list so he actually didn't solve anything
and if you remove the blocks that you have in your system and then post
to [EMAIL PROTECTED], you will see this is still happening.
Apparently someone has subscribed to the mail list with one address
which automatically bounces it to the uol.com.br address which
automatically sends the challenge to the originator of the message to
the list because the list retains the original 'From' address.
So in actuality, Warren has done nothing really to solve the problem.
The last couple postings to the list did NOT result in a UOL C/R. So
the bozoid must have been nuked and managed to resubscribe. In that
case the bozo will never see email one from me. I will *NOT* reply to
a UOL C/R to a mailing list message and likely not to any other message,
either. (I redirect them to a uol_crap mail folder. So checking is easy.)
{^_-}
He really does not have time to handle this one at a time
for a problem that irritates people this much.
I block them. But I do so in a way I can see if I ever get anything real
from them.
OK
I block them, too. I'm not very interested in seeing even anything real
from them at this time. There is NO WAY I will do business with Brazil
after all the stories of rampant corruption down there that I have heard.
So I figure it is no loss to me.
{^_^}
Java Interface
Hi, I want to know if there is a Java interface into SpamAssassin? I have a requirement to flag some text as spam or not, but I am not using email. My data is similar to email (from, title, body) but it is not itself from an email system. I just want to hook into the spam detection through Java and teach it how to detect. Is this possible? __ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs
