RE: Which Operating Systems Do You Use and Why?
I use Linux, slackware 10.1 to be more specific. I use it for two reasons. 1. Its stable, secure and probably the most like UNIX( but free ). 2. It acts as a mailbag and buffer for my internal exchange servers. I have two companies setup in this configuration and haven't had any problems. I can also say that it does run better with more rules on a nice solid hardware platform.. I currently use dual 2.8 Pentiums with 2Gigs of ram with a hardware raid one. Brent Kennedy www.scsorlando.com
Re: Global vs per-user procmailrc filtering rules
Whips and chains maybe?
{O.O}
- Original Message -
From: "JM Coursimault" <[EMAIL PROTECTED]>
jdow <[EMAIL PROTECTED]> a dit:
Explicit paths helped me.
# Sauvegardes Bacula #
:0
* ^Subject:.*Bacula:
AxperiaSARL/Admin/Bacula
==> $HOME/mail/AxperiaSARL/Admin/Bacula
Well done, it works. Now the pb is that Ingo never generates the "$HOME/mail"
prefix. How can I tell Ingo to generate this prefix ?
Thanks !
Re: Which Operating Systems Do You Use and Why?
My opintion is Fedora Core 5 running on Dual Core Athlon 64 bit OS. The dual core athlons are screaming fast but you need a newer Linux kernel to run on it.
RE: Which Operating Systems Do You Use and Why?
> From: Dimitri Yioulos [mailto:[EMAIL PROTECTED] > Sent: Friday, April 07, 2006 2:23 PM > To: users@spamassassin.apache.org > Subject: Re: Which Operating Systems Do You Use and Why? > > (hmmm... top-posting) > > In truth, nothing I've read in this thread has seemed inciteful; not > inflamatory at all. I think we all understand the passion we > hold for the > distros we use, but it appears we've been mature enough (ok, > I'm sucking my > thumb right now, so I guess I'm out) to give the OP some good > insight into our experiences. > > Just my 2 (fill in the currency of your choice) :-) Under the above rules, I actually use: Windows Server 2003 with CygWin In no way, would I suggest this is "right" for anyone else here, but this is what works for me. I need to run Windows Server for business reasons (since I teach Advanced and Accelerated classes on this subject) and I have the skills to make it work and keep it "safe". Once Windows Server is chosen (remember I am NOT claiming it is better than anyone else's choice) then CygWin seems the only practical way to go. Although it is possible to run SpamAssassin directly on Windows doing that eliminates several add-ons (like DCC, Pyzor, Razor2 -- I forget which of these doesn't run.) More importantly it is very hard or impossible (at least when I started this) to get SpamD to run. With CygWin, I get the best of Windows AND most of the useful things (to me) from Linux/GNU. And the loads are practically the same as those the rest of your use -- no hacking around for every upgrade or point release. -- Herb Martin, MCSE, MVP [EMAIL PROTECTED] http://LearnQuick.Com 512 388 7339 -or- 1 800 MCSE PRO Accelerated MCSE in a Week Seminars > -Original Message- > > Dimitri > > > On Friday April 07 2006 2:51 pm, Gary W. Smith wrote: > > Now we get to watch the body part's fly across the room. :) > > > > You know there are 3 things in life which you never ever > talk about in > > public; religion, politics and what OS is best. > > > > > -Original Message- > > > From: Ryan Kather [mailto:[EMAIL PROTECTED] > > > Sent: Friday, April 07, 2006 11:24 AM > > > To: users@spamassassin.apache.org > > > Subject: Re: Which Operating Systems Do You Use and Why? > > > > > > > We can not seem to come to an agreement on the best > operating system > > > > to > > > > > run > > > > > > > spam assassin. So we have decided to post this question to the > > > > mailing > > > > > list > > > > > > > so we can have other opinions. I realize everyone will have a > > > > different > > > > > > opinion on the subject and some will have none at all, linux is > > > > linux > > > > > and > > > > > > > unix is unix. So I would like to hear users experiences using > > > > different > > > > > > operating systems. Pros/Cons/Problems/Headaches/etc. > The operating > > > > > > systems > > > > > > > I'm most interested in are Debian, Ubuntu, Gentoo, Slackware, > > > > FreeBSDs, > > > > > and > > > > > > > OpenSolaris. > > > > > > Now why do you have to go start a flame war ;). I guess > I'll add my 2 > > > cents. > > > > > > Let me start by saying they're all great choices (though I can't > > > > comment > > > > > on > > > OpenSolaris). I prefer Linux. > > > > > > It seems to me that more and more development is becoming Linux > > > > centric. > > > > > It > > > makes sense since it definitely seems to have a larger user base > > > > (though > > > > > I'm > > > sure SA is very much developed with BSD and Linux in > mind). I know > > > > when I > > > > > moved from FreeBSD to Linux I definitely noticed a performance > > > improvement. > > > This has also been very well documented several times.. In most > > > > situations > > > > > Linux outperforms BSD (though often at the cost of stability). > > > > > > Here's one such test, though it is slightly old FreeBSD > 5.1 and Linux > > > Kernel > > > 2.6.0-test7. > > > http://bulk.fefe.de/scalability/ > > > > > > It also seems that Linux gets a lot more interesting > features, IMO. > > > Reiser4, > > > SELinux, LVM2 (does FreeBSD have that with online volume > resizing and > > > snapshots?). > > > > > > I would say you should analyze your needs. What are you most > > > > comfortable > > > > > with? You'll be happy with Linux or FreeBSD, so it's > more a matter of > > > personal preference. For a rule of thumb maybe you could > say; If I > > > > want > > > > > to > > > be stability centric == FreeBSD, if I want to be feature > and/or speed > > > centric > > > == Linux. (Knowing that both are faster then *Certain* other > > > > operating > > > > > systems) > > > > > > As for my choice in Linux: > > > > > > I personally like SLES (SUSE Linux Enterprise Server) for > my servers. > > > Very > > > nice update features, solid stability and performance, > decent package > > > selection, and YaST is quite nice if you don't like hand editing > > > > config > > > > > files. You don't need a gui to run it sin
Re: Which Operating Systems Do You Use and Why?
Dimitri Yioulos wrote: [snip] Now, not to start a thing about real colors, but red ... [snip] I've heard that black is the new black (maybe the old one too). -- Robert G. Werner (Network Systems Administrator) [EMAIL PROTECTED] 559.244.3734 For God's sake, stop researching for a while and begin to think!
Re: Which Operating Systems Do You Use and Why?
On Friday April 07 2006 4:57 pm, mouss wrote: > Bob McClure Jr wrote: > > On Fri, Apr 07, 2006 at 11:51:05AM -0700, Gary W. Smith wrote: > >> Now we get to watch the body part's fly across the room. :) > >> > >> You know there are 3 things in life which you never ever talk about in > >> public; religion, politics and what OS is best. > > > > You forgot editors. No, wait, that is a religion. :-) > > Oh no, I can't let this slip:) > > - the only real editor is Emacs > - the only real OS is NetBSD > - the only real color is magenta > > > oh no, I won't speak about religions. this is too dangerous these times;-p Now, not to start a thing about real colors, but red ... -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Re: upgrade to 3.1.1
> Try adding this to your amavisd.conf: > $sa_debug = 1; > or > $sa_debug = '1,all'; > I'm not sure of the difference there, but those should allow amavis to > give you some information about how SA is running. The '1' was a value of choice with SA 2.x, the 'all' is used by SA 3.x. Luckily the '1,all' works with both of them, despite producing a warning with older versions. Mark
Re: Which Operating Systems Do You Use and Why?
Bob McClure Jr wrote: On Fri, Apr 07, 2006 at 11:51:05AM -0700, Gary W. Smith wrote: Now we get to watch the body part's fly across the room. :) You know there are 3 things in life which you never ever talk about in public; religion, politics and what OS is best. You forgot editors. No, wait, that is a religion. :-) Oh no, I can't let this slip:) - the only real editor is Emacs - the only real OS is NetBSD - the only real color is magenta oh no, I won't speak about religions. this is too dangerous these times;-p
RE: Which Operating Systems Do You Use and Why?
Remember that flames start as a small ember that finally blows up into flame. :) I'm more or less just joking that this is a flame war. It's not there yet. > -Original Message- > From: Dimitri Yioulos [mailto:[EMAIL PROTECTED] > Sent: Friday, April 07, 2006 12:23 PM > To: users@spamassassin.apache.org > Subject: Re: Which Operating Systems Do You Use and Why? > > (hmmm... top-posting) > > In truth, nothing I've read in this thread has seemed inciteful; not > inflamatory at all. I think we all understand the passion we hold for the > distros we use, but it appears we've been mature enough (ok, I'm sucking > my > thumb right now, so I guess I'm out) to give the OP some good insight into > our experiences. > > Just my 2 (fill in the currency of your choice) :-) > > Dimitri > > > On Friday April 07 2006 2:51 pm, Gary W. Smith wrote: > > Now we get to watch the body part's fly across the room. :) > > > > You know there are 3 things in life which you never ever talk about in > > public; religion, politics and what OS is best. > > > > > -Original Message- > > > From: Ryan Kather [mailto:[EMAIL PROTECTED] > > > Sent: Friday, April 07, 2006 11:24 AM > > > To: users@spamassassin.apache.org > > > Subject: Re: Which Operating Systems Do You Use and Why? > > > > > > > We can not seem to come to an agreement on the best operating system > > > > to > > > > > run > > > > > > > spam assassin. So we have decided to post this question to the > > > > mailing > > > > > list > > > > > > > so we can have other opinions. I realize everyone will have a > > > > different > > > > > > opinion on the subject and some will have none at all, linux is > > > > linux > > > > > and > > > > > > > unix is unix. So I would like to hear users experiences using > > > > different > > > > > > operating systems. Pros/Cons/Problems/Headaches/etc. The operating > > > > > > systems > > > > > > > I'm most interested in are Debian, Ubuntu, Gentoo, Slackware, > > > > FreeBSDs, > > > > > and > > > > > > > OpenSolaris. > > > > > > Now why do you have to go start a flame war ;). I guess I'll add my 2 > > > cents. > > > > > > Let me start by saying they're all great choices (though I can't > > > > comment > > > > > on > > > OpenSolaris). I prefer Linux. > > > > > > It seems to me that more and more development is becoming Linux > > > > centric. > > > > > It > > > makes sense since it definitely seems to have a larger user base > > > > (though > > > > > I'm > > > sure SA is very much developed with BSD and Linux in mind). I know > > > > when I > > > > > moved from FreeBSD to Linux I definitely noticed a performance > > > improvement. > > > This has also been very well documented several times.. In most > > > > situations > > > > > Linux outperforms BSD (though often at the cost of stability). > > > > > > Here's one such test, though it is slightly old FreeBSD 5.1 and Linux > > > Kernel > > > 2.6.0-test7. > > > http://bulk.fefe.de/scalability/ > > > > > > It also seems that Linux gets a lot more interesting features, IMO. > > > Reiser4, > > > SELinux, LVM2 (does FreeBSD have that with online volume resizing and > > > snapshots?). > > > > > > I would say you should analyze your needs. What are you most > > > > comfortable > > > > > with? You'll be happy with Linux or FreeBSD, so it's more a matter of > > > personal preference. For a rule of thumb maybe you could say; If I > > > > want > > > > > to > > > be stability centric == FreeBSD, if I want to be feature and/or speed > > > centric > > > == Linux. (Knowing that both are faster then *Certain* other > > > > operating > > > > > systems) > > > > > > As for my choice in Linux: > > > > > > I personally like SLES (SUSE Linux Enterprise Server) for my servers. > > > Very > > > nice update features, solid stability and performance, decent package > > > selection, and YaST is quite nice if you don't like hand editing > > > > config > > > > > files. You don't need a gui to run it since it has full ncurses > > > > support > > > > > (RHEL's tool doesn't I believe). SLES 10 is due out this summer too > > > > with > > > > > some impressive bundling (XEN for one). > > > > > > Ubuntu seems a bit desktop focused for me as far as serving is > > > > concerned. > > > > > Debian stable is too old, but apt is amazing and as someone else > > > > mentioned > > > > > you can mix stable, unstable, and testing packages together so it's > > > > really > > > > > no > > > big deal. Can't really comment on Slackware having only used it a few > > > times, > > > though I think it could use some better package management from what I > > > remember. > > > > > > Gentoo is amazing. I would definitely say you should run Gentoo if > > > > you > > > > > want a > > > testing environment for bleeding edge features. It makes a fine > > > > server > > > > > too > > > if you have a few boxes and can use distcc to reduce the time to > > > > update > > > > > packages and distribute load so users don't notice. I
Re: Which Operating Systems Do You Use and Why?
(hmmm... top-posting) In truth, nothing I've read in this thread has seemed inciteful; not inflamatory at all. I think we all understand the passion we hold for the distros we use, but it appears we've been mature enough (ok, I'm sucking my thumb right now, so I guess I'm out) to give the OP some good insight into our experiences. Just my 2 (fill in the currency of your choice) :-) Dimitri On Friday April 07 2006 2:51 pm, Gary W. Smith wrote: > Now we get to watch the body part's fly across the room. :) > > You know there are 3 things in life which you never ever talk about in > public; religion, politics and what OS is best. > > > -Original Message- > > From: Ryan Kather [mailto:[EMAIL PROTECTED] > > Sent: Friday, April 07, 2006 11:24 AM > > To: users@spamassassin.apache.org > > Subject: Re: Which Operating Systems Do You Use and Why? > > > > > We can not seem to come to an agreement on the best operating system > > to > > > run > > > > > spam assassin. So we have decided to post this question to the > > mailing > > > list > > > > > so we can have other opinions. I realize everyone will have a > > different > > > > opinion on the subject and some will have none at all, linux is > > linux > > > and > > > > > unix is unix. So I would like to hear users experiences using > > different > > > > operating systems. Pros/Cons/Problems/Headaches/etc. The operating > > > > systems > > > > > I'm most interested in are Debian, Ubuntu, Gentoo, Slackware, > > FreeBSDs, > > > and > > > > > OpenSolaris. > > > > Now why do you have to go start a flame war ;). I guess I'll add my 2 > > cents. > > > > Let me start by saying they're all great choices (though I can't > > comment > > > on > > OpenSolaris). I prefer Linux. > > > > It seems to me that more and more development is becoming Linux > > centric. > > > It > > makes sense since it definitely seems to have a larger user base > > (though > > > I'm > > sure SA is very much developed with BSD and Linux in mind). I know > > when I > > > moved from FreeBSD to Linux I definitely noticed a performance > > improvement. > > This has also been very well documented several times.. In most > > situations > > > Linux outperforms BSD (though often at the cost of stability). > > > > Here's one such test, though it is slightly old FreeBSD 5.1 and Linux > > Kernel > > 2.6.0-test7. > > http://bulk.fefe.de/scalability/ > > > > It also seems that Linux gets a lot more interesting features, IMO. > > Reiser4, > > SELinux, LVM2 (does FreeBSD have that with online volume resizing and > > snapshots?). > > > > I would say you should analyze your needs. What are you most > > comfortable > > > with? You'll be happy with Linux or FreeBSD, so it's more a matter of > > personal preference. For a rule of thumb maybe you could say; If I > > want > > > to > > be stability centric == FreeBSD, if I want to be feature and/or speed > > centric > > == Linux. (Knowing that both are faster then *Certain* other > > operating > > > systems) > > > > As for my choice in Linux: > > > > I personally like SLES (SUSE Linux Enterprise Server) for my servers. > > Very > > nice update features, solid stability and performance, decent package > > selection, and YaST is quite nice if you don't like hand editing > > config > > > files. You don't need a gui to run it since it has full ncurses > > support > > > (RHEL's tool doesn't I believe). SLES 10 is due out this summer too > > with > > > some impressive bundling (XEN for one). > > > > Ubuntu seems a bit desktop focused for me as far as serving is > > concerned. > > > Debian stable is too old, but apt is amazing and as someone else > > mentioned > > > you can mix stable, unstable, and testing packages together so it's > > really > > > no > > big deal. Can't really comment on Slackware having only used it a few > > times, > > though I think it could use some better package management from what I > > remember. > > > > Gentoo is amazing. I would definitely say you should run Gentoo if > > you > > > want a > > testing environment for bleeding edge features. It makes a fine > > server > > > too > > if you have a few boxes and can use distcc to reduce the time to > > update > > > packages and distribute load so users don't notice. I have had a few > > cases > > where ebuilds have been broken. That's not fun. It's definitely not > > the > > > most stable for a server, but you can't beat it's package management, > > customization (except for maybe LFS), and speed. > > > > Ryan > > > > -- > > 'Twas midnight, and the UNIX hacks > > Did gyre and gimble in their cave > > All mimsy was the CS-VAX > > And Cory raths outgrabe. > > > > "Beware the software rot, my son! > > The faults that bite, the jobs that thrash! > > Beware the broken pipe, and shun > > The frumious system crash!" -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Re: Which Operating Systems Do You Use and Why?
On Fri, Apr 07, 2006 at 11:51:05AM -0700, Gary W. Smith wrote: > Now we get to watch the body part's fly across the room. :) > > You know there are 3 things in life which you never ever talk about in > public; religion, politics and what OS is best. You forgot editors. No, wait, that is a religion. :-) Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com The best things in life aren't things.
RE: Which Operating Systems Do You Use and Why?
Now we get to watch the body part's fly across the room. :) You know there are 3 things in life which you never ever talk about in public; religion, politics and what OS is best. > -Original Message- > From: Ryan Kather [mailto:[EMAIL PROTECTED] > Sent: Friday, April 07, 2006 11:24 AM > To: users@spamassassin.apache.org > Subject: Re: Which Operating Systems Do You Use and Why? > > > We can not seem to come to an agreement on the best operating system to > run > > spam assassin. So we have decided to post this question to the mailing > list > > so we can have other opinions. I realize everyone will have a different > > opinion on the subject and some will have none at all, linux is linux > and > > unix is unix. So I would like to hear users experiences using different > > operating systems. Pros/Cons/Problems/Headaches/etc. The operating > systems > > I'm most interested in are Debian, Ubuntu, Gentoo, Slackware, FreeBSDs, > and > > OpenSolaris. > > Now why do you have to go start a flame war ;). I guess I'll add my 2 > cents. > > Let me start by saying they're all great choices (though I can't comment > on > OpenSolaris). I prefer Linux. > > It seems to me that more and more development is becoming Linux centric. > It > makes sense since it definitely seems to have a larger user base (though > I'm > sure SA is very much developed with BSD and Linux in mind). I know when I > moved from FreeBSD to Linux I definitely noticed a performance > improvement. > This has also been very well documented several times.. In most situations > Linux outperforms BSD (though often at the cost of stability). > > Here's one such test, though it is slightly old FreeBSD 5.1 and Linux > Kernel > 2.6.0-test7. > http://bulk.fefe.de/scalability/ > > It also seems that Linux gets a lot more interesting features, IMO. > Reiser4, > SELinux, LVM2 (does FreeBSD have that with online volume resizing and > snapshots?). > > I would say you should analyze your needs. What are you most comfortable > with? You'll be happy with Linux or FreeBSD, so it's more a matter of > personal preference. For a rule of thumb maybe you could say; If I want > to > be stability centric == FreeBSD, if I want to be feature and/or speed > centric > == Linux. (Knowing that both are faster then *Certain* other operating > systems) > > As for my choice in Linux: > > I personally like SLES (SUSE Linux Enterprise Server) for my servers. > Very > nice update features, solid stability and performance, decent package > selection, and YaST is quite nice if you don't like hand editing config > files. You don't need a gui to run it since it has full ncurses support > (RHEL's tool doesn't I believe). SLES 10 is due out this summer too with > some impressive bundling (XEN for one). > > Ubuntu seems a bit desktop focused for me as far as serving is concerned. > Debian stable is too old, but apt is amazing and as someone else mentioned > you can mix stable, unstable, and testing packages together so it's really > no > big deal. Can't really comment on Slackware having only used it a few > times, > though I think it could use some better package management from what I > remember. > > Gentoo is amazing. I would definitely say you should run Gentoo if you > want a > testing environment for bleeding edge features. It makes a fine server > too > if you have a few boxes and can use distcc to reduce the time to update > packages and distribute load so users don't notice. I have had a few > cases > where ebuilds have been broken. That's not fun. It's definitely not the > most stable for a server, but you can't beat it's package management, > customization (except for maybe LFS), and speed. > > Ryan > > -- > 'Twas midnight, and the UNIX hacks > Did gyre and gimble in their cave > All mimsy was the CS-VAX > And Cory raths outgrabe. > > "Beware the software rot, my son! > The faults that bite, the jobs that thrash! > Beware the broken pipe, and shun > The frumious system crash!"
RE: upgrade to 3.1.1 - solved, but?
Robert Fitzpatrick <[EMAIL PROTECTED]> wrote on 04/07/2006 01:11:44 PM: > On Fri, 2006-04-07 at 13:58 -0400, Bowie Bailey wrote: > > That's normal. RDJ keeps an extra copy of all of the rules in that > > subdirectory. SpamAssassin should ignore them. You need to leave the > > rules in /usr/local/etc/mail/spamassassin since that is where SA will > > read them from. > > > > So, I need to figure out why it is reading those as well. I mean the > problem goes away completely as soon as I nuke a copy of the cf files. > Perhaps my FreeBSD 5.4 port install is telling SA something, I doubt > that. I do not see anything in the local.cf file, where else can I check > for this issue? > > -- > Robert > Where is your amavisd config pointing to. Doesn't amavisd use it's own config file for the location of the cf files and ignores SA? I myself don't use amavis, but seem to recall that it does.
Re: Which Operating Systems Do You Use and Why?
> We can not seem to come to an agreement on the best operating system to run > spam assassin. So we have decided to post this question to the mailing list > so we can have other opinions. I realize everyone will have a different > opinion on the subject and some will have none at all, linux is linux and > unix is unix. So I would like to hear users experiences using different > operating systems. Pros/Cons/Problems/Headaches/etc. The operating systems > I'm most interested in are Debian, Ubuntu, Gentoo, Slackware, FreeBSDs, and > OpenSolaris. Now why do you have to go start a flame war ;). I guess I'll add my 2 cents. Let me start by saying they're all great choices (though I can't comment on OpenSolaris). I prefer Linux. It seems to me that more and more development is becoming Linux centric. It makes sense since it definitely seems to have a larger user base (though I'm sure SA is very much developed with BSD and Linux in mind). I know when I moved from FreeBSD to Linux I definitely noticed a performance improvement. This has also been very well documented several times.. In most situations Linux outperforms BSD (though often at the cost of stability). Here's one such test, though it is slightly old FreeBSD 5.1 and Linux Kernel 2.6.0-test7. http://bulk.fefe.de/scalability/ It also seems that Linux gets a lot more interesting features, IMO. Reiser4, SELinux, LVM2 (does FreeBSD have that with online volume resizing and snapshots?). I would say you should analyze your needs. What are you most comfortable with? You'll be happy with Linux or FreeBSD, so it's more a matter of personal preference. For a rule of thumb maybe you could say; If I want to be stability centric == FreeBSD, if I want to be feature and/or speed centric == Linux. (Knowing that both are faster then *Certain* other operating systems) As for my choice in Linux: I personally like SLES (SUSE Linux Enterprise Server) for my servers. Very nice update features, solid stability and performance, decent package selection, and YaST is quite nice if you don't like hand editing config files. You don't need a gui to run it since it has full ncurses support (RHEL's tool doesn't I believe). SLES 10 is due out this summer too with some impressive bundling (XEN for one). Ubuntu seems a bit desktop focused for me as far as serving is concerned. Debian stable is too old, but apt is amazing and as someone else mentioned you can mix stable, unstable, and testing packages together so it's really no big deal. Can't really comment on Slackware having only used it a few times, though I think it could use some better package management from what I remember. Gentoo is amazing. I would definitely say you should run Gentoo if you want a testing environment for bleeding edge features. It makes a fine server too if you have a few boxes and can use distcc to reduce the time to update packages and distribute load so users don't notice. I have had a few cases where ebuilds have been broken. That's not fun. It's definitely not the most stable for a server, but you can't beat it's package management, customization (except for maybe LFS), and speed. Ryan -- 'Twas midnight, and the UNIX hacks Did gyre and gimble in their cave All mimsy was the CS-VAX And Cory raths outgrabe. "Beware the software rot, my son! The faults that bite, the jobs that thrash! Beware the broken pipe, and shun The frumious system crash!"
RE: upgrade to 3.1.1 - solved, but?
Robert Fitzpatrick wrote: > On Fri, 2006-04-07 at 13:58 -0400, Bowie Bailey wrote: > > That's normal. RDJ keeps an extra copy of all of the rules in that > > subdirectory. SpamAssassin should ignore them. You need to leave > > the rules in /usr/local/etc/mail/spamassassin since that is where > > SA will read them from. > > > > So, I need to figure out why it is reading those as well. I mean the > problem goes away completely as soon as I nuke a copy of the cf files. > Perhaps my FreeBSD 5.4 port install is telling SA something, I doubt > that. I do not see anything in the local.cf file, where else can I > check for this issue? I don't know what to tell you on this. My SA, which was installed via CPAN, reads the rules from /etc/mail/spamassassin, but ignores the files in /etc/mail/spamassassin/RulesDuJour/. -- Bowie
Re: Postfix/SpamAssassin Integration
Attached is what I use, found it on a webpage about installing SA when I
was going through it. Customized slightly for my local usernames and ways
of doing things.
When spamd dies, all mail continues to come through, it just doesn't get
analyzed by SA until spamd gets restarted.
Here's my config bits:
Postfix:
master.cf:
smtp inet n - n - - smtpd
-o content_filter=spamchk:dummy
spamchk unix - n n - 20 pipe
flags=Rq user=spamfilter argv=/usr/local/bin/spamchk -f ${sender}
-- ${recipient}
attached files:
spamchk - the filter script that gets called, pushes messages over to
spamc... note I commented out the bottom half of the script snice I don't
use that functionality currently, but may on other boxes in the future so
I left it there for reference.
spamdcheck.sh - wrote this scruipt to run every 5 minutes to check to see
if spamd is running. I've had instances where spamd just dies in the
middle of the night, but leaves the pidfile there, so I wrote this to
check and restart... might be crude, if anyone has suggestions on
bettering it, please do (also it monitors the number of spamd children to
tell me if I need to adjust child parameters if I'm running too many
processes).
Any questions, let me know.
-Gary
On Fri, 7 Apr 2006, James Keating wrote:
Michael Monnerie wrote:
On Freitag, 7. April 2006 14:09 James Keating wrote:
Any other thoughts?
I just found this:
http://wiki.apache.org/spamassassin/IntegratePosfixViaSpampd
mfg zmi
I have already tried this script and it was very close to what I was wanting,
but it does not connect to spamd in any manner. It actually uses the perl
libraries to interact with spamassassin in it's own manner, plus it is not
designed to use per user preferences/bayes/awl.
Thanks anyway Michael.
- James
#!/bin/sh
#
# SpamAssassin Spamd checking script
#
#
#
# Original script written by Gary Margiotta ([EMAIL PROTECTED]) 3/2006
#
#
#
# Run the check to see if spamd is running by running a ps and checking the
number of #
# lines returned. If the test returns with less then 3 process lines, assume
that #
# spamd is not running, since there should be no less than 6 processes active
at#
# any given time. In that case, check for a stale pidfile, remove it and then
restart #
# spamd with the usual startup parameters, and mail the output to the admin to
let them #
# know the process died and was restarted automatically.
#
#
#
#
PATH=/bin:/sbin:/usr/bin:/usr/sbin:/usr/local/bin:/usr/local/sbin;
export PATH;
DATE=`date "+%Y%m%d%H%M"`
SPAMDHOME="/data/home/spamd"
LOGFILE="/tmp/spamdrestart-${DATE}.txt"
PIDFILE="spamd.pid"
PSCHECK=`ps -ax | grep spamd | wc -l`
PSLOG="/tmp/pschecksa.log"
# Running the check and outputting to logfile for testing purposes
if [ -f ${PSLOG} ];
then
rm -f ${PSLOG}
fi
echo ${PSCHECK} > ${PSLOG}
#
# As an aside, check to see whether we need to adjust the number of child
# processes running.
#
if [ "${PSCHECK}" -gt "16" ];
then
echo " ${DATE} " >>
${LOGFILE}
echo "" >> ${LOGFILE}
echo "spamd children exceeded 15, consider bumping max" >> ${LOGFILE}
echo "" >> ${LOGFILE}
cat ${LOGFILE} | mail [EMAIL PROTECTED]
exit 0
fi
# Here's the meat of it
if [ "${PSCHECK}" -le "5" ];
then
echo " ${DATE} " >>
${LOGFILE}
echo "###" >>
${LOGFILE}
echo "# #" >>
${LOGFILE}
echo "# spamd doesn't appear to be running, attemping restart #" >>
${LOGFILE}
echo "# #" >>
${LOGFILE}
echo "###" >>
${LOGFILE}
#
# Checking for an existing pidfile
#
if [ -f "${SPAMDHOME}/${PIDFILE}" ];
then
echo "" >> ${LOGFILE}
echo "Old pidfile found, removing..." >> ${LOGFILE}
rm -f ${SPAMDHOME}/${PIDFILE}
echo "${SPAMDHOME}/${PIDFILE} removed." >> ${LOGFILE}
echo "" >> ${LOGFILE}
fi
echo "" >> ${LOGFILE}
echo "Restarting spamd..." >> ${LOGFILE}
spamd --daemonize -
RE: upgrade to 3.1.1 - solved, but?
On Fri, 2006-04-07 at 13:58 -0400, Bowie Bailey wrote: > That's normal. RDJ keeps an extra copy of all of the rules in that > subdirectory. SpamAssassin should ignore them. You need to leave the > rules in /usr/local/etc/mail/spamassassin since that is where SA will > read them from. > So, I need to figure out why it is reading those as well. I mean the problem goes away completely as soon as I nuke a copy of the cf files. Perhaps my FreeBSD 5.4 port install is telling SA something, I doubt that. I do not see anything in the local.cf file, where else can I check for this issue? -- Robert
RE: upgrade to 3.1.1 [solved]
On Fri, 2006-04-07 at 12:42 -0400, Bowie Bailey wrote:
> > Thanks, I am running Postfix 2.2.8 with amavisd-new 2.3.3. I took a
> > message in my inbox, viewed source and copied to a file on the server,
> > but when I run 'spamassassin -D testfile', it just sits there and
> > hangs. The messages are getting through, it's just there is a 30-60
> > minute delay. Why do you think this does not work?
>
> Try adding this to your amavisd.conf:
>
> $sa_debug = 1;
> or
> $sa_debug = '1,all';
>
> I'm not sure of the difference there, but those should allow amavis to
> give you some information about how SA is running.
>
Thanks, but I found the issue, and this happened before, I had just not
remembered. Couple of problems, my restart amavisd command in
rulesdujour was wrong because the location changed in the last
portupgrade of amavis. I found that out this morning while trying to
figure out why my new rules were not working. Anyway, all restarted fine
for the first time in a couple of months I'd say. The real problem is
when I run rules du jour, I end up with duplicate cf rules
in /usr/local/etc/mail/spamassassin as well as a RuleDuJour sub folder,
so it is processing double. I nuke the rules in the SA folder, leaving
the ones in RulesDuJour sub folder and all is well again.
Now, my question is this. I assume the cf files in RulesDuJour sub
folder are the correct rules since there are multiple versions of the cf
files with the date appended to previous versions. I see in my
rulesdujour config file that my SA_DIR is set to
'/usr/local/etc/mail/spamassassin'. Is the RulesDuJour sub folder
supposed to be in a separate hierarchy? The TMP_DIR is set to
TMPDIR="${SA_DIR}/RulesDuJour" by default. Can someone tell me what I'm
doing wrong with my rules to cause duplicates when running rulesdujour?
--
Robert
RE: upgrade to 3.1.1 - solved, but?
Robert Fitzpatrick wrote:
>
> The real problem is when I run rulesdujour, I end up with duplicate
> cf, a copy of each rule being in both
> /usr/local/etc/mail/spamassassin as well as a RuleDuJour sub folder,
> so it twice. I nuke the rules in the SA folder, leaving the ones in
> RulesDuJour sub folder and all is well again.
>
> Now, my question is this. I assume the cf files in RulesDuJour sub
> folder are the correct rules since there are multiple versions of
> the cf files with the date appended to previous versions. I see in
> my rulesdujour config file that my SA_DIR is set to
> '/usr/local/etc/mail/spamassassin'. Is the RulesDuJour sub folder
> supposed to be in a separate hierarchy? The TMP_DIR is set to
> TMPDIR="${SA_DIR}/RulesDuJour" by default. Can someone tell me what
> I'm doing wrong with my rules to cause duplicates when running
> rulesdujour?
That's normal. RDJ keeps an extra copy of all of the rules in that
subdirectory. SpamAssassin should ignore them. You need to leave the
rules in /usr/local/etc/mail/spamassassin since that is where SA will
read them from.
--
Bowie
RE: upgrade to 3.1.1 - solved, but?
On Fri, 2006-04-07 at 12:42 -0400, Bowie Bailey wrote:
> > Thanks, I am running Postfix 2.2.8 with amavisd-new 2.3.3. I took a
> > message in my inbox, viewed source and copied to a file on the server,
> > but when I run 'spamassassin -D testfile', it just sits there and
> > hangs. The messages are getting through, it's just there is a 30-60
> > minute delay. Why do you think this does not work?
>
> Try adding this to your amavisd.conf:
>
> $sa_debug = 1;
> or
> $sa_debug = '1,all';
>
> I'm not sure of the difference there, but those should allow amavis to
> give you some information about how SA is running.
>
Thanks, but I found the issue, and this happened before, I had just not
remembered. Couple of problems, my restart amavisd command in
rulesdujour was wrong because the location changed in the last
portupgrade of amavis. I found that out this morning while trying to
figure out why the most recent rules were not working. Anyway, all restarted
fine
for the first time in a couple of months I'd say.
The real problem is when I run rulesdujour, I end up with duplicate cf, a copy
of each rule
being in both /usr/local/etc/mail/spamassassin as well as a RuleDuJour sub
folder,
so it twice. I nuke the rules in the SA folder, leaving
the ones in RulesDuJour sub folder and all is well again.
Now, my question is this. I assume the cf files in RulesDuJour sub
folder are the correct rules since there are multiple versions of the cf
files with the date appended to previous versions. I see in my
rulesdujour config file that my SA_DIR is set to
'/usr/local/etc/mail/spamassassin'. Is the RulesDuJour sub folder
supposed to be in a separate hierarchy? The TMP_DIR is set to
TMPDIR="${SA_DIR}/RulesDuJour" by default. Can someone tell me what I'm
doing wrong with my rules to cause duplicates when running rulesdujour?
--
Robert
New Spam Assassin Setup 3.1
Hello Everyone, I installed SA 3.1 last night from source. I followed the qmailrocks.org guide (since I use qmail) which seemed pretty easy when came to setting up SA. This setup uses qmail-queue to invoke SA and Clamav. My problem is when I monitor the mail server I see SA dominating the cpu @ 97% or more when new mail is coming into the server. I also noticed that it (SA) starts to recognize some mail and pass it right through with little delay. I'm still concerned and looked at the SA website for help on cpu utilization but no luck. Can anyone point me in the right direction for troublshooting this? I did tail the syslog and found one problem which I fixed but that did not resolve the cpu % issue. Thank you for your consideration, Tim PS: This is from the mail header of the last Spam msg I recieved: 1.25-st-qms (Clear:RC:0(63.252.150.43):SA:1(6.6/4.0):.* Processed in 149.986422* secs Process 6433) Non spam msg are processed anywhere from 2 -6 seconds.
RE: upgrade to 3.1.1
Robert Fitzpatrick <[EMAIL PROTECTED]> wrote on 04/07/2006 11:33:25 AM: [snip] > Thanks, I am running Postfix 2.2.8 with amavisd-new 2.3.3. I took a > message in my inbox, viewed source and copied to a file on the server, > but when I run 'spamassassin -D testfile', it just sits there and hangs. The command is: spamassassin -D < testfile The command you entered will just sit there forever waiting for console input. Andy
RE: upgrade to 3.1.1
Robert Fitzpatrick wrote: > On Fri, 2006-04-07 at 08:31 -0700, Bret Miller wrote: > > Running a single message through SA with the -D option would > > probably show you where the delay is. > > > > Unless you've disabled the URIDNSBL plugin, I'd add RBL_TIMEOUT 5 to > > your config as the RBL timout value is used for other DNS-type > > lookups, not just RBL checks that you're skipping. 5 seconds may or > > may not be to short for your environment-- something you'll have to > > evaluate on your own. > > > > Thanks, I am running Postfix 2.2.8 with amavisd-new 2.3.3. I took a > message in my inbox, viewed source and copied to a file on the server, > but when I run 'spamassassin -D testfile', it just sits there and > hangs. The messages are getting through, it's just there is a 30-60 > minute delay. Why do you think this does not work? Try adding this to your amavisd.conf: $sa_debug = 1; or $sa_debug = '1,all'; I'm not sure of the difference there, but those should allow amavis to give you some information about how SA is running. -- Bowie
RE: upgrade to 3.1.1
On Fri, 2006-04-07 at 08:31 -0700, Bret Miller wrote: > Running a single message through SA with the -D option would probably > show you where the delay is. > > Unless you've disabled the URIDNSBL plugin, I'd add RBL_TIMEOUT 5 to > your config as the RBL timout value is used for other DNS-type lookups, > not just RBL checks that you're skipping. 5 seconds may or may not be to > short for your environment-- something you'll have to evaluate on your > own. > Thanks, I am running Postfix 2.2.8 with amavisd-new 2.3.3. I took a message in my inbox, viewed source and copied to a file on the server, but when I run 'spamassassin -D testfile', it just sits there and hangs. The messages are getting through, it's just there is a 30-60 minute delay. Why do you think this does not work? -- Robert -- Robert
RE: upgrade to 3.1.1
> I upgraded from 3.1.0 to 3.1.1 and my delays went from less than 20 to
> 900 to over 1000. Here is my rule sets used by rules du jour and my SA
> config (same as prior to upgrade). I don't see anything that
> needs to be
> changed, can someone suggest what I am doing wrong?
>
> [ "${TRUSTED_RULESETS}" ] || \
> TRUSTED_RULESETS="TRIPWIRE SARE_EVILNUMBERS0
> BLACKLIST ANTIDRUG \
> BLACKLIST_URI BOGUSVIRUS SARE_ADULT \
> SARE_FRAUD SARE_BML SARE_HEADER0 \
> SARE_HTML0 SARE_SPECIFIC SARE_SPOOF SARE_REDIRECT_POST300 \
> SARE_GENLSUBJ SARE_UNSUB \
> SARE_URI0 SARE_URI1 SARE_URI3 SARE_RANDOM
> SARE_BAYES_POISON_NXM \
> SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 SARE_EVILNUMBERS2";
>
> SA config:
> rewrite_header Subject *SPAM*
> lock_method flock
> ok_languages en es fr it da de el ga gd ko nl no ru zh.big5
> report_safe 1
> trusted_networks 10/8 127/8 208.38.145.0/27 208.38.145.32/27
> 216.139.202.0/27
> use_bayes 1
> bayes_path /var/amavis/.spamassassin/bayes
> skip_rbl_checks 1
> dns_available yes
> score RAZOR2_CHECK 2.500
> score BAYES_99 4.300
> score BAYES_80 3.000
>
> uri GEOCITIES
> /^http:\/\/[a-z0-9-]{1,30}\.geocities\.com\b/i
> describe GEOCITIESHigh amounts of spam from Geocities.
> score GEOCITIES 6.01
> uri GEOCITIES_YAHOO
> /^http:\/\/(?:www\.)?geocities\.yahoo\.com\.br\b/i
> describe GEOCITIES_YAHOOHigh amounts of spam from Geocities.
> score GEOCITIES_YAHOO 6.01
> header __SOBER_P_MSGID Message-ID =~ /<[0-9a-f\.]{15,22}\@/
> header __SOBER_P_CTYPE Content-Type =~
> /text\/plain.*charset=\"us-ascii\"/
> header __SOBER_P_PRIO X-Priority =~ /^3 /
> header __SOBER_P_IMP Importance =~ /^Normal/
>
> meta SOBER_P_SPAM (__SOBER_P_MSGID && __SOBER_P_CTYPE &&
> __SOBER_P_PRIO && __SOBER_P_IMP )
> score SOBER_P_SPAM 18.0
> describe SOBER_P_SPAM Rassistische Mail Sober-P
>
> In addition to the config above, I also have the ruleset to
> catch german
> sober virus spam bounces, which has probably 20 different
> body, header,
> meta, score and describe entries.
Running a single message through SA with the -D option would probably
show you where the delay is.
Unless you've disabled the URIDNSBL plugin, I'd add RBL_TIMEOUT 5 to
your config as the RBL timout value is used for other DNS-type lookups,
not just RBL checks that you're skipping. 5 seconds may or may not be to
short for your environment-- something you'll have to evaluate on your
own.
Bret
upgrade to 3.1.1
I upgraded from 3.1.0 to 3.1.1 and my delays went from less than 20 to
900 to over 1000. Here is my rule sets used by rules du jour and my SA
config (same as prior to upgrade). I don't see anything that needs to be
changed, can someone suggest what I am doing wrong?
[ "${TRUSTED_RULESETS}" ] || \
TRUSTED_RULESETS="TRIPWIRE SARE_EVILNUMBERS0 BLACKLIST ANTIDRUG \
BLACKLIST_URI BOGUSVIRUS SARE_ADULT \
SARE_FRAUD SARE_BML SARE_HEADER0 \
SARE_HTML0 SARE_SPECIFIC SARE_SPOOF SARE_REDIRECT_POST300 \
SARE_GENLSUBJ SARE_UNSUB \
SARE_URI0 SARE_URI1 SARE_URI3 SARE_RANDOM SARE_BAYES_POISON_NXM \
SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 SARE_EVILNUMBERS2";
SA config:
rewrite_header Subject *SPAM*
lock_method flock
ok_languages en es fr it da de el ga gd ko nl no ru zh.big5
report_safe 1
trusted_networks 10/8 127/8 208.38.145.0/27 208.38.145.32/27 216.139.202.0/27
use_bayes 1
bayes_path /var/amavis/.spamassassin/bayes
skip_rbl_checks 1
dns_available yes
score RAZOR2_CHECK 2.500
score BAYES_99 4.300
score BAYES_80 3.000
uri GEOCITIES /^http:\/\/[a-z0-9-]{1,30}\.geocities\.com\b/i
describe GEOCITIESHigh amounts of spam from Geocities.
score GEOCITIES 6.01
uri GEOCITIES_YAHOO /^http:\/\/(?:www\.)?geocities\.yahoo\.com\.br\b/i
describe GEOCITIES_YAHOOHigh amounts of spam from Geocities.
score GEOCITIES_YAHOO 6.01
header __SOBER_P_MSGID Message-ID =~ /<[0-9a-f\.]{15,22}\@/
header __SOBER_P_CTYPE Content-Type =~ /text\/plain.*charset=\"us-ascii\"/
header __SOBER_P_PRIO X-Priority =~ /^3 /
header __SOBER_P_IMP Importance =~ /^Normal/
meta SOBER_P_SPAM (__SOBER_P_MSGID && __SOBER_P_CTYPE && __SOBER_P_PRIO &&
__SOBER_P_IMP )
score SOBER_P_SPAM 18.0
describe SOBER_P_SPAM Rassistische Mail Sober-P
In addition to the config above, I also have the ruleset to catch german
sober virus spam bounces, which has probably 20 different body, header,
meta, score and describe entries.
--
Robert
Re: Which Operating Systems Do You Use and Why?
On Thu, 06 Apr 2006 16:47:01 -0400 Matt Kettler <[EMAIL PROTECTED]> wrote: > Ask List wrote: > > Ask List gmail.com> writes: > > > >> We can not seem to come to an agreement on the best operating system to run > > spam assassin. So we have decided to post this question to the mailing list > > so > > we can have other opinions. I realize everyone will have a different > > opinion on > > the subject and some will have none at all, linux is linux and unix is > > unix. So > > I would like to hear users experiences using different operating systems. > > Pros/Cons/Problems/Headaches/etc. The operating systems I'm most interested > > in > > are Debian, Ubuntu, Gentoo, Slackware, FreeBSDs, and OpenSolaris. > > > > I see RedhatEL,Fedora,CentOS is a common theme. Anyone not running a RedHat > > based distribution > > > > > > I'm mostly RH/Fed/Cent and OpenBSD. > > That said, I can give some subjective commentary on the non-redhat's your > looking at. > > Note that anything I comment on that I've never used, or haven't used recently > is purely subjective opinion based on watching the communities. Take them > with a > huge grain of salt. > > Overall the most important thing about a distro is that it fit your personal > style of administration. Some folks prefer source patching compiling, some > abhor > it and want a binary-package auto-updater. Some want a nice minimal text-only > headless server and prefer text-editing config files. Others want the latest > gnome/kde desktop and want GUI config tools. Keep this all in mind and realize > my opinions may vary greatly from yours due to MY preferences being different > from yours. > > > Debian - Never used it. Debian seems to make a pretty reasonable server > product. > They have a highly conservative patch release process for stable releases. > This > is perhaps a bit too conservative for my own tastes, but it is valuable in a > server environment at times. Debian is more strict about the openness of > licenses for packages they distribute than most other distros. In some cases > this strictness takes out some "whiz-bang" tools, but it also keeps you > relatively free from licensing land mines. If you need a whiz-bang, you can > always add it from source. > > Ubuntu - Never used it. However, being Debian based, SOME of the above > applies. > I get the impression that Ubuntu tries to be more "full featured" than > standard > Debian, compared with Debians more minimalist approach. > > Gentoo - I find this distro makes a GREAT developer/test box. However, its > lengthy setup and "build as you go" model doesn't make well suited for server > environments. If your choice of compiler options doesn't work with a > particular > package then your run of emerge can get to be a painful mess. However, this > same > model gives you ultimate flexibility, which is great on a devel box. We use Gentoo on our production servers. Our mailgateways with exim, spamassassin and clamav and our mailserver (Communigate). It works well. However it's true that it is very time consuming and that you easily mess up your system if you are not careful. Gentoo has a great online documentation (http://www.gentoo.org/doc/en/index.xml) Regards, Claudia
RE: Best way to send spam for learning from OE and Outlook
> What is the best way to send spam candidates from Outlook and Outlook > Express to spamassassin for learning? I use an IMAP account, have the users drag their message into an IMAP folder on the server, then use a script to pull the messages from the IMAP folder and learn them. Bret
Re: Postfix/SpamAssassin Integration
Michael Monnerie wrote: I just found this: http://wiki.apache.org/spamassassin/IntegratePosfixViaSpampd mfg zmi I have already tried this script and it was very close to what I was wanting, but it does not connect to spamd in any manner. It actually uses the perl libraries to interact with spamassassin in it's own manner, plus it is not designed to use per user preferences/bayes/awl. Thanks anyway Michael. - James
Re: Postfix/SpamAssassin Integration
Michael Monnerie wrote: On Freitag, 7. April 2006 14:09 James Keating wrote: Any other thoughts? I just found this: http://wiki.apache.org/spamassassin/IntegratePosfixViaSpampd mfg zmi I have already tried this script and it was very close to what I was wanting, but it does not connect to spamd in any manner. It actually uses the perl libraries to interact with spamassassin in it's own manner, plus it is not designed to use per user preferences/bayes/awl. Thanks anyway Michael. - James
Re: Postfix/SpamAssassin Integration
On Freitag, 7. April 2006 14:09 James Keating wrote: > Any other thoughts? I just found this: http://wiki.apache.org/spamassassin/IntegratePosfixViaSpampd mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660/4156531 .network.your.ideas. // PGP Key: "lynx -source http://zmi.at/zmi3.asc | gpg --import" // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE pgpFFgiZkaHIg.pgp Description: PGP signature
Re: Global vs per-user procmailrc filtering rules
jdow <[EMAIL PROTECTED]> a dit:
Explicit paths helped me.
# Sauvegardes Bacula #
:0
* ^Subject:.*Bacula:
AxperiaSARL/Admin/Bacula
==> $HOME/mail/AxperiaSARL/Admin/Bacula
Well done, it works. Now the pb is that Ingo never generates the "$HOME/mail"
prefix. How can I tell Ingo to generate this prefix ?
Thanks !
- Original Message - From: "JM Coursimault"
<[EMAIL PROTECTED]>
To:
Sent: Friday, April 07, 2006 00:59
Subject: Global vs per-user procmailrc filtering rules
Hello all,
I want to sort my incoming mail into various folders after it has
been processed
by spamc/spamd. But my per-user .procmailrc does not seem to be taken into
account.
I'm on a Mandriva 2006. My packages are
spamassassin-3.0.4-3.2.20060mdk
spamassassin-spamc-3.0.4-3.2.20060mdk
spamassassin-spamd-3.0.4-3.2.20060mdk
spamassassin-tools-3.0.4-3.2.20060mdk
spamd is started so :
/usr/bin/spamd -d -c --max-children=3 --max-conn-per-child=20 -H
My (global) /etc/procmailrc contains this :
DROPPRIVS=yes
:0fw
* < 256000
| spamc
and my per-user .procmailrc contains (this is an example)
# Script procmail genere par Ingo (April 6, 2006, 11:02 pm)
# [SPAM] #
:0
* ^Subject:.*\[SPAM\]
Spam
$HOME/mail/Spam
# Sauvegardes Bacula #
:0
* ^Subject:.*Bacula:
AxperiaSARL/Admin/Bacula
$HOME/mail/AxperiaSARL/Admin/Bacula
But it is not doing anything, it seems. I just get the mail in my INBOX no
matter what.
Any hints would be much appreciated.
Explicit paths helped me. For example here is how I dispose of UOL crap:
:0:
* ^From: AntiSpam UOL <[EMAIL PROTECTED]>
#/dev/null
$HOME/mail/uol_crap
{^_^}
{^_^}
Re: Postfix/SpamAssassin Integration
Gary W. Smith wrote:
In master.cf we have:
smtp inet n - n - - smtpd -o
content_filter=filter:
filterunix - n n - - pipe flags=Rq
user=filter argv=/etc/mail/spamassassin/filter.sh -f ${sender} --
${recipient}
filter.sh:
spamc -u filter -d 10.0.13.28,10.0.14.22,10.0.13.31 | sendmail -i "$@"
This is very similiar to what I do now, execpt you use an external
script for piping the email to spamc and then to sendamil.. So in your
configuration what occurs when spamc cannot connect to spamd? My guess
and tests show that it just gets passed to sendmail without getting
scanned. Is that what occurs for you?
> Alternatively you can defer it yourself. Nothing says you have to
re-inject it back to sendmail.
There is some pseudo code that we do in dev.
Tee -a sometmpfile | spamc -params-you-see-fix | sometmpfile.sa
Check for sa flag in sometmpfile.sa or return codes, etc
If there is,
cat sometmpfile.sa,
unlink original
Else
Move tmpfile to your queue directory
get some caffine as you will need to write a crontab retests
those queued email
if that job works, reinject into sendmail
I would really like to keep away from dealing with this type of method.
Any other thoughts?
- James
Re: 2nd mail server problem
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Joshua, C.S. Chen wrote: > Looks like I have to enable SA in the 2nd server. It might be a spam > hole if the spam sent to 2nd first, then forcily relayed to the primary. > > Sorry for the late response, I'm just catching up on some backlog. Here's my personal opinion: your secondary mail server should have stronger restrictions on it than your primary mail server. The reason I say this is because for some time now it has been a common spammer practice to hit your secondary, terciary, etc. MX servers first with the assumption that they are typically configured with fewer restrictions or merely, as yours is, as a store-and-forward. For specific reasons I'm unable to implement greylisting on my primary MX server however, it's perfectly acceptable for me to enable it on my secondary MX server. On top of that, I have value user checks, antivirus checks and share the bayes database (using MySQL) with the primary MX server for spamassassin checks. Because your secondary MX is in place for "in case the primary mail server fails" you should have to have the same kind of horsepower. my secondary server is significantly lower powered than my primary MX server. in the case that the primary server is still running, the secondary will most likely only be dealing with SPAM anyways, and it won't matter if it takes awhile to process those messages. in the case that the primary server is down, well, your users aren't going to be getting their email anytime soon anyways so it shouldn't matter if it takes a bit more time to process those incoming mails. if the mail coming into the 2nd MX server is SPAM, it should reject it (not bounce) properly either way, if it's not SPAM, it should accept it and then pass it off to the primary MX server once it's back up and running. this scenario has been working well for us here for the past 2 years or so. Alan -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFENj0vE2gsBSKjZHQRArxzAJwIZ3zyz00psNgFWTkgMqhua9fqDACg2ecD R/So24Tv3qHBAjOI/Aqymxk= =rZvg -END PGP SIGNATURE-
Re: Global vs per-user procmailrc filtering rules
- Original Message -
From: "JM Coursimault" <[EMAIL PROTECTED]>
To:
Sent: Friday, April 07, 2006 00:59
Subject: Global vs per-user procmailrc filtering rules
Hello all,
I want to sort my incoming mail into various folders after it has been processed
by spamc/spamd. But my per-user .procmailrc does not seem to be taken into
account.
I'm on a Mandriva 2006. My packages are
spamassassin-3.0.4-3.2.20060mdk
spamassassin-spamc-3.0.4-3.2.20060mdk
spamassassin-spamd-3.0.4-3.2.20060mdk
spamassassin-tools-3.0.4-3.2.20060mdk
spamd is started so :
/usr/bin/spamd -d -c --max-children=3 --max-conn-per-child=20 -H
My (global) /etc/procmailrc contains this :
DROPPRIVS=yes
:0fw
* < 256000
| spamc
and my per-user .procmailrc contains (this is an example)
# Script procmail genere par Ingo (April 6, 2006, 11:02 pm)
# [SPAM] #
:0
* ^Subject:.*\[SPAM\]
Spam
$HOME/mail/Spam
# Sauvegardes Bacula #
:0
* ^Subject:.*Bacula:
AxperiaSARL/Admin/Bacula
$HOME/mail/AxperiaSARL/Admin/Bacula
But it is not doing anything, it seems. I just get the mail in my INBOX no
matter what.
Any hints would be much appreciated.
Explicit paths helped me. For example here is how I dispose of UOL crap:
:0:
* ^From: AntiSpam UOL <[EMAIL PROTECTED]>
#/dev/null
$HOME/mail/uol_crap
{^_^}
{^_^}
Mail via MDAEMON and OE gets marked as FORGED_MUA_OUTLOOK
Hi, I received such a legitimate mail: Received: from GTEW2KPR07 by marketing.grouppoint.at (MDaemon.Standard.v7.2.2.R) with ESMTP id pd5008044.msg for <[EMAIL PROTECTED]>; Fri, 07 Apr 2006 11:26:25 +0200 Message-ID: <[EMAIL PROTECTED]> From: "GROUP POINT News" <[EMAIL PROTECTED]> To: "GROUP POINT News" <[EMAIL PROTECTED]> Subject: Server Angebot April 2006 Date: Fri, 7 Apr 2006 11:25:16 +0200 MIME-Version: 1.0 Content-Type: multipart/related; type="multipart/alternative"; boundary="=_NextPart_000_0045_01C65A35.F1EF82D0" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1506 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1506 X-Authenticated-Sender: [EMAIL PROTECTED] X-MDRemoteIP: 10.1.1.101 Sender: [EMAIL PROTECTED] X-Return-Path: [EMAIL PROTECTED] X-MDMailing-List: [EMAIL PROTECTED] X-MDSend-Notifications-To: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] X-MDaemon-Deliver-To: [EMAIL PROTECTED] X-Virus-Scanned: amavisd-new at goelsen.net X-Virus-Scanned: amavisd-new at zmi.at X-Spam-Status: Yes, hits=5.724 tagged_above=-999 required=5 tests=AWL=-0.275, DNS_FROM_RFC_POST=1.44, EXTRA_MPART_TYPE=0.815, FORGED_MUA_OUTLOOK=3.36, HTML_FONT_BIG=0.256, HTML_MESSAGE=0.001, HTML_TAG_EXIST_TBODY=0.126, UNPARSEABLE_RELAY=0.001 X-Spam-Level: * X-Spam-Flag: YES I believe it hits FORGED_MUA_OUTLOOK because MDAEMON modifies the Message-ID. So there should be a rule allowing MDAEMON like header __OE_MSGID_4 MESSAGEID =~ /^<[EMAIL PROTECTED]>$/m Any other ideas? mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660/4156531 .network.your.ideas. // PGP Key: "lynx -source http://zmi.at/zmi3.asc | gpg --import" // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE pgpK69mKvDUeP.pgp Description: PGP signature
Re: pb with score mail
> spamc -R < 2006.04.07/ham/33. -4.6/5.0 > > Détails de l'analyse du message: (-4.6 points, 5.0 requis) > 0.0 NO_REAL_NAME Le champ From: ne contient pas le nom complet de l'e xpéditeur > -3.3 ALL_TRUSTEDDid not pass through any untrusted hosts > -2.6 BAYES_00 BODY: L'algorithme Bayésien a évalué la probabilité de spam entre 0 > et 1% > [score: 0.] > 0.0 UPPERCASE_25_50Message composé de 25 à 50% de majuscules > 1.3 AWLAWL: From: address is in the auto white-list > And i do not understand something : > > 1) why is the score negative ? The score is negative because two negative-scoring rules hit, and no positive-scoring rules hit. BAYES_00 says that the message is ham. This is -2.6 points on your system. ALL_TRUSTED indicates either that the message came from a trusted host in your network. Or quite possibly it indicates that you don't have trusted_networks set up correctly and SA is tagging all mail as trusted, lowering the score by 3.3 points. -2.6 + -3.3 = -5.9. Then add 1.3 for AWL and you get -4.6, which is what the summary line says. > 2) the mail is a ham, and the score is 4,6. So, this is not supposed to be a spam. > howerver, it's written "Ce message est probablement du SPAM" > I really do not understand this Probably a side effect of you having specified -R for report. Rep[ort is only supposed to be reporting spam, so it uses the standard header that indicates that the message is spam. If you instead did spamassassin <2006.04.07/ham/33 (or whatever the message name is) you will probably not see a spam report. If you do it again with "spamassassin -t < file" you will see the spam report, because -t says it is a test message and you want to see the spam report. Loren
pb with score mail
hi ! i'v got this spamc -R < 2006.04.07/ham/33. -4.6/5.0 -- Début de Rapport SpamAssassin - Ce message est probablement du SPAM (message non sollicité envoyé en masse, publicité, escroquerie...). Cette notice a été ajoutée par le système d'analyse "SpamAssassin" sur votre serveur de courrier "sec-pr0018", pour vous aider à identifier ce type de messages. Le système SpamAssassin ajoute un en-tête "X-Spam-Flag: YES" aux messages qu'il considère comme étant probablement du Spam. Vous pouvez si vous le souhaitez utiliser cette caractéristique pour régler un filtre dans votre logiciel de lecture de courrier, afin de détruire ou de classer à part ce type de message. Si ce robot a classifié incorrectement un message qui vous était destiné, ou pour toute question, veuillez contacter l'administrateur du système par e-mail à the administrator of that system . Voir http://spamassassin.apache.org/tag/ pour plus de détails (en anglais). Détails de l'analyse du message: (-4.6 points, 5.0 requis) 0.0 NO_REAL_NAME Le champ From: ne contient pas le nom complet de l'e xpéditeur -3.3 ALL_TRUSTED Did not pass through any untrusted hosts -2.6 BAYES_00 BODY: L'algorithme Bayésien a évalué la probabilité de spam entre 0 et 1% [score: 0.] 0.0 UPPERCASE_25_50 Message composé de 25 à 50% de majuscules 1.3 AWL AWL: From: address is in the auto white-list Fin de Rapport SpamAssassin - And i do not understand something : 1) why is the score negative ? 2) the mail is a ham, and the score is 4,6. So, this is not supposed to be a spam. howerver, it's written "Ce message est probablement du SPAM" I really do not understand this plz help thx
Re: Broken FORGED_MUA_OUTLOOK checks
On Dienstag, 4. April 2006 09:23 Michael Monnerie wrote: > Hi, I got feedback today that they use "Mass Mailer" to send their > e-mails. So it's really a forged OE Mail. I told them to use > something else, otherwise they won't be able to contact a lot of > customers... I received another e-mail from them, marked as SPAM. I believe it's too strong to give a total of 5.8 points for FORGED_.*OUTLOOK.* rules, as they are similar. X-Spam-Status: Yes, hits=6.132 tagged_above=-999 required=5 tests=FORGED_MUA_OUTLOOK=3.36, FORGED_OUTLOOK_HTML=2.514, HTML_FONT_BIG=0.256, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.001 Mass_checks on my corpus says: MSECSSPAM% HAM% S/ORANK SCORE NAME 0.679 0.9814 0.25990.791 0.573.36 FORGED_MUA_OUTLOOK 0.557 0.8144 0.20210.801 0.563.25 FORGED_OUTLOOK_HTML It looks like most e-mails hit both rules, or am I wrong? mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660/4156531 .network.your.ideas. // PGP Key: "lynx -source http://zmi.at/zmi3.asc | gpg --import" // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE pgpajrRC8OypB.pgp Description: PGP signature
Re: Best way to send spam for learning from OE and Outlook
On Freitag, 7. April 2006 10:00 Jeremy Fairbrass wrote: > http://www.olspamcop.org/download.shtml. It looks like something very useful. I'll give it a try. Thanks for the hint. mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660/4156531 .network.your.ideas. // PGP Key: "lynx -source http://zmi.at/zmi3.asc | gpg --import" // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE pgp8qIUXGrKn2.pgp Description: PGP signature
Re: Best way to send spam for learning from OE and Outlook
I use Outlook 2003 and use a freeware Outlook toolbar called "Outlook Spam Report Utility", available from http://www.olspamcop.org/download.shtml. It's designed to enable the easy forwarding of spam to SpamCop, but can easily be modified to forward spam or ham to your own mail server for learning, if your mail server has a special email address that you can use to send spam/ham samples to. So the toolbar makes it very easy for the end-user to forward spam and ham to the server on-the-fly as necessary, without needing to set up special rules or use IMAP or anything like that. Works well for me anyway... :) Cheers, Jeremy "Patrick Sherrill" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > What is the best way to send spam candidates from Outlook and Outlook > Express to spamassassin for learning? > TIA. > Pat...
Global vs per-user procmailrc filtering rules
Hello all, I want to sort my incoming mail into various folders after it has been processed by spamc/spamd. But my per-user .procmailrc does not seem to be taken into account. I'm on a Mandriva 2006. My packages are spamassassin-3.0.4-3.2.20060mdk spamassassin-spamc-3.0.4-3.2.20060mdk spamassassin-spamd-3.0.4-3.2.20060mdk spamassassin-tools-3.0.4-3.2.20060mdk spamd is started so : /usr/bin/spamd -d -c --max-children=3 --max-conn-per-child=20 -H My (global) /etc/procmailrc contains this : DROPPRIVS=yes :0fw * < 256000 | spamc and my per-user .procmailrc contains (this is an example) # Script procmail genere par Ingo (April 6, 2006, 11:02 pm) # [SPAM] # :0 * ^Subject:.*\[SPAM\] Spam # Sauvegardes Bacula # :0 * ^Subject:.*Bacula: AxperiaSARL/Admin/Bacula But it is not doing anything, it seems. I just get the mail in my INBOX no matter what. Any hints would be much appreciated. Thanks !
