Re: Rules getting bypassed?

[jdow]

From: "Rick van Vliet" <[EMAIL PROTECTED]>


jdow wrote:

From: "Rick van Vliet" <[EMAIL PROTECTED]>



Hello. New to the list, I have a question that I hope isn't "too newbie".
Running SA 3.1.2  with a qmail server for a small (50) group of users.
Vpopmail handling virtuals, and procmail.
(auto_whitelist is disabled)

I have one user who is getting creamed and no matter how much we do 
sa-learn --spam...on the IMAP folder we move his spam into...this 
user's mail somehow gets through with low scores, and he's averaging 
60 spams a day, total,  with FORTY of those that actually get to his 
inbox.


Other than changing his email address, how would I teach SA that this 
is spam?


Thanks,
Rick


Return-Path:  <[EMAIL PROTECTED]>
X-Spam-Checker-Version:  SpamAssassin 3.1.2 (2006-05-25) on 
mail.vanmorel.com


Eliminate his Bayes filter and start over? On the other paw, there is
NO Bayes score on his mail as noted below. Are you learning the spam
under his account so that his Bayes is the one refreshed? Or do you
have a rule that is turning off Bayes for him altogether in his
user_prefs?

{^_^}


Hmm.
1) With vpopmail(virtual) under qmail, there's one user_prefs that 
handles all virtual users.

*use_bayes 1*
*bayes_auto_learn 1*

2) That said, I better look at how I set up Bayes.
sa-learn /runs/ when I run it...just not sure why it isn't being looked at.

Another virtual users's headers look like this, and it does have an 
"autolearn=":
X-Spam-Checker-Version:  SpamAssassin 3.1.2 (2006-05-25) on 
mail.vanmorel.com

X-Spam-Level:
X-Spam-Status:  No, score=0.0 required=4.7 
tests=HTML_MESSAGE,MIME_HTML_ONLY, MSGID_FROM_MTA_HEADER autolearn=ham 
version=3.1.2

Delivered-To:  [EMAIL PROTECTED]
(This user gets very few spams -- 98% get tagged properly.

But this one also has no Bayes score either, does it?
Looks like my Bayes component might be suspect?
I ran the install using the CPAN/perl method. Not sure now what kind of 
configure was involved.
I'll look at the INSTALL, and see what I missed in the configuration. 
(if I can find that ;)

Thanks,
rick


Rick, you do not have ANY BAYES_xx rule hitting at all. So Bayes is not
working. It looks like you have been carefully training individual user's
BAYES databases but not the global one. You must update the database
as the UID that owns the database.

{^_^}

spamd: handle_user unable to find user

[tomcatf14]

spamd: handle_user unable to find user: '[EMAIL PROTECTED]'

What does this mean?
-- 
View this message in context: 
http://www.nabble.com/spamd%3A-handle_user-unable-to-find-user-tf1959743.html#a5375825
Sent from the SpamAssassin - Users forum at Nabble.com.

Re: SA not tagging subject

[Jim Maul]

Bowie Bailey wrote:

tomcatf14 wrote:

I've disabled fast spamassassin and now it tag the subject!!!Good but
i think i still want to use Fast SA to enhance the performance.


What is "fast spamassassin"???



Basically spamc -c



The doc stated this:


The doc for what?



qmail-scanner



I want "fast_spamassassin" for performance - but I want the Subject:
header tagged as "SPAM" too! Boy - you don't want much do you! :-)
Anyway - you can. Simply change the "--scanner" option to
"fast_spamassassin=STRING" and "STRING" ("SPAM:" is a good value)
will be prepended to the Subject line of every message marked as Spam.


This is not part of the SpamAssassin config.



No, your right - its qmail-scanner.



But my qmail-scanner configure doesnt' have this option. I'm using
qmail-scanner 1.25. Try to use the latest version 2.0.1 and hope it
help. 


Maybe you should be asking on the qmail or qmail-scanner list?



He should have.  However, qmail-scanner does have this config option.

my @scanner_array=("clamdscan_scanner","spamassassin");

But this really has nothing to do with spamassassin as was mentioned...

-Jim

Re: Will bayes-db be 'skewed' by feeding it spam only (one central database)

[Chr. v. Stuckrad]

On Mon, 17 Jul 2006, Logan Shaw wrote:

...
> someone carrying a knife, they have been a violent criminal,
> so knife-carrying correlates perfectly with being a criminal.
> 
> Now imagine that you see a chef.  He is carrying a knife, but
(Good point: [OT: I even know people who react that way on TV-News] :-)

...
> by doing that, you will give it a very negative view of the
> world, where everything looks like spam.
> 
> (This is all assuming, of course, that your Bayes database is
> empty when you train it with spam only.)

Assuming this scenario I ORIGINALLY started the database
on ham of a long backlog of MY mail, which THEN had enough
spam AND ham to start with, so it's not as bad as would be possible;
but since the last 'fresh start' I 'updated' only the false negatives.
And checking near 6000 (low scoring) Spams a week I found only
'classical false positives' (like of this list :-) and for months
*I* did not loose(sort away) anything important. But may be
one in two months one of our power-users complains about a real
false positive, and if I'm allowed, I feed THAT one in.

> configuration changes that need to be made.  Do you have the
> latest SpamAssassin, and have you enabled some network tests
not the latest, because debian 'stable' is not fast in
the uptake of new versions.  May be I should move to the
volatile packages ...
> like DCC or razor and some RBLs?  Those should be carrying
> some of the load; you shouldn't be relying on Bayes only,

Of course. razor, pyzor, dcc, and the newer german iX-plugin,
and RBLs do catch lots of mails pushing thousands to scores
above 20 :-)

> If your Bayes database really is messed up, personally I would
...
> you *do* have is worthwhile.

H may be on one of the next 'maintenance days',
when (nearly) everything is down for a while, so nothing
will slip through during training ...

But this 'keeps' me thinking about the different 'hams' in
our department. Some are french and some even might be Chinese.
So if I train again with *my* mail (postmaster-problems and
a bit of half-private stuff) the database might start anew
skewed 'against' real hams of other parts of the department!
(While I think 'my spam' will be fine to train with).

The only 'real solution' might be to switch to a SQL-Database
and 'bayes-per-user', but then I'd have to 'train' hundreds
of Students how to 'train' their own databases themselves :-))

...
> Well, there are probably several different explanations.
> The best place to start is by looking at the spams that get
> through and how they scored, especially comparing that to what
> scores others get on the same messages or similar ones.

That's one of the problems here. The mail-filter(-host) runs on old
amavis-perl and does not include the whole scoring headers in the mail,
but only a marking header with the score itself.  So when I later check
the same mail (cleaned of the previous marking) I get completely
different (mostly horrendously higher) scores for the same, but without
really seeing the differences.  Seemingly the later in time an 'one of a
series spam' comes in, the more of the dynamic systems have learned it
and score it.  I nearly believe we often are 'at one end' of some
'lists to be spammed', so we get it 'fresh', and only the first users
are hit, others get it 'after' the filter dynamically chokes down on it
and so the different users do complain about different 'slips'. Sometimes
it *seems* as if spammers work their list alphabetically, so user "a*"
is getting something often, which "w*" never sees, and other way around
too :-)

Thanks Stucki

-- 
Christoph von Stuckrad  * * |nickname |<[EMAIL PROTECTED]>   \
Freie Universitaet Berlin   |/_*|'stucki' |Tel(days):+49 30 838-5 57 78|
Mathematik & Informatik EDV |\ *|if online|Tel(else):+49 30 77 39 66 00|
Arnimallee 6 / 14195 Berlin * * |on IRCnet|Fax(alle):+49 30 838-75 454/

Spamasassin logging tons of errors

[Facundo Barrera]

Hi list: i'm new at the list, so here its my question, i sucessfully installed spamassasin in conjuction with qmail-scanner, so right now Q-scanner its filtering all messages thru spamassasin and clamav, but i get tons of error messages from spamassasin:
Jul 18 08:27:58 mail spamd[1397]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp lockfile /home/spamd/.spamassassin/auto-whitelist.lock.mail.kmmnet.net.1397 for /home/spamd/.spamassassin/auto-
whitelist.lock: No such file or directoryJul 18 08:27:58 mail spamd[1397]: bayes: locker: safe_lock: cannot create tmp lockfile /home/spamd/.spamassassin/bayes.lock.mail.kmmnet.net.1397 for /home/spamd/.spamassassin/bayes.lock: No such file or directory
Jul 18 08:27:58 mail spamd[1397]: spamd: identified spam (16.8/5.0) for qscand:1010 in 0.8 seconds, 8800 bytes.Jul 18 08:27:58 mail spamd[1397]: spamd: result: Y 16 - HTML_FONT_BIG,HTML_MESSAGE,LOCALPART_IN_SUBJECT,MAILTO_TO_REMOVE,RCVD_
HELO_IP_MISMATCH,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_DSBL,RCVD_IN_SORBS_WEB,RCVD_IN_WHOIS_BOGONS,RCVD_IN_XBL,RCVD_NUMERIC_HELO,X_MAILER_SPAM scantime=0.8,size=8800,user=qscand,uid=1010,required_score=5.0,rhost=localhost,raddr=
127.0.0.1,rport=32836,mid=<8714[EMAIL PROTECTED]>,autolearn=failedJul 18 08:27:58 mail spamd[1386]: prefork: child states: II
Jul 18 08:27:58 mail qmail-scanner[4441]: Clear:RC:0(193.120.211.196):SA:1(16.8/5.0): 1.013259 8760 [EMAIL PROTECTED] inf
[EMAIL PROTECTED] Info,_REGALOS_y_mas_REGALOS.. <[EMAIL PROTECTED]> 1153222077.4443-0.mail:428 1153222077.4443-1.mail:7214 orig-mail11532220755404441:8760
Jul 18 08:27:58 mail qmail-scanner[4441]: Clear:RC:0(193.120.211.196):SA:1(16.8/5.0): 1.013259 8760 [EMAIL PROTECTED] kmm@
kmm.com.ar Info,_REGALOS_y_mas_REGALOS.. <[EMAIL PROTECTED]> 1153222077.4443-0.mail:428 1153222077.4443-1.mail:7214 orig-mail11532220755404441:8760
Jul 18 09:06:55 mail spamd[1397]: spamd: connection from localhost [127.0.0.1] at port 32838Jul 18 09:06:55 mail spamd[1397]: spamd: checking message <[EMAIL PROTECTED]
> for [EMAIL PROTECTED]:1010Jul 18 09:06:55 mail spamd[1397]: mkdir /home/spamd: Permission denied at /usr/lib/perl5/site_perl/5.8.7/Mail/SpamAssassin.pmline 1486Jul 18 09:06:55 mail spamd[1397]: Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/site_perl/5.8.7/
Mail/SpamAssassin/Plugin/SPF.pm line 288,  line 243.Jul 18 09:06:55 mail spamd[1397]: Use of uninitialized value in concatenation (.) or string at /usr/lib/perl5/site_perl/5.8.7/Mail/SpamAssassin/Plugin/SPF.pm line 288,  line 243.
Jul 18 09:06:59 mail spamd[1397]: mkdir /home/spamd: Permission denied at /usr/lib/perl5/site_perl/5.8.7/Mail/SpamAssassin.pmline 1486Jul 18 09:06:59 mail spamd[1397]: locker: safe_lock: cannot create tmp lockfile /home/spamd/.spamassassin/auto-
whitelist.lock.mail.kmmnet.net.1397 for /home/spamd/.spamassassin/auto-whitelist.lock: No such file or directoryJul 18 09:06:59 mail spamd[1397]: auto-whitelist: open of auto-whitelist file failed: locker: safe_lock: cannot create tmp loc
kfile /home/spamd/.spamassassin/auto-whitelist.lock.mail.kmmnet.net.1397 for /home/spamd/.spamassassin/auto-whitelist.lock: No such file or directoryJul 18 09:06:59 mail spamd[1397]: bayes: locker: safe_lock: cannot create tmp lockfile /home/spamd/.spamassassin/bayes.lock.ma
il.kmmnet.net.1397 for /home/spamd/.spamassassin/bayes.lock: No such file or directoryJul 18 09:06:59 mail spamd[1397]: spamd: identified spam (21.5/5.0) for [EMAIL PROTECTED]:1010
 in 3.5 seconds, 13243 bytes.Jul 18 09:06:59 mail spamd[1397]: spamd: result: Y 21 - DATE_IN_FUTURE_03_06,EXTRA_MPART_TYPE,FROM_LOCAL_NOVOWEL,HTML_IMAGE_ONLY_32,HTML_MESSAGE,URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL,URIBL_WS_SURBL scantime=
3.5,size=13243,user=[EMAIL PROTECTED],uid=1010,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=32838,mid=<000701c6aa62$a3f335e0$95cf[EMAIL PROTECTED]
>,autolearn=failedJul 18 09:06:59 mail spamd[1386]: prefork: child states: IIJul 18 09:06:59 mail qmail-scanner[4778]: Clear:RC:0(81.14.207.149):SA:1(21.5/5.0): 3.654586 13203 
[EMAIL PROTECTED] ciroany ideas i'm still receiving lot of spamFacundo - Argentina 

RE: Stock/image-only spam still getting through

[Bowie Bailey]

Loren Wilton wrote:
> > I've attached the one that just got through. spamassassin -t
> > reports the following for it: 
> > 
> > 0.8 EXTRA_MPART_TYPE   Header has extraneous
> > Content-type:...type= entry 
> > 2.9 HELO_DYNAMIC_SPLIT_IP  Relay HELO'd using suspicious hostname
> >(Split IP)
> > 1.3 RCVD_NUMERIC_HELO  Received: contains an IP address used
> > for HELO 
> > 0.0 HTML_MESSAGE   BODY: HTML included in message
> > 0.8 SARE_GIF_ATTACHFULL: Email has a inline gif
> 
> Well, I get
> 
> Content analysis details:   (12.2 points, 4.6 required)

  snip details

> Now 5 points is from Bayes_99.  But even without that it seems to do
> pretty well.

I'll second that.  Mine didn't hit Bayes, but it still got plenty of
points.

Content analysis details:   (12.8 points, 5.0 required)

 pts rule name  description
 --
--
 0.8 EXTRA_MPART_TYPE   Header has extraneous Content-type:...type=
entry
 2.9 HELO_DYNAMIC_SPLIT_IP  Relay HELO'd using suspicious hostname (Split
IP)
 1.3 RCVD_NUMERIC_HELO  Received: contains an IP address used for HELO
 1.8 TVD_FW_GRAPHIC_NAME_LONG BODY: TVD_FW_GRAPHIC_NAME_LONG
 2.8 TVD_FW_GRAPHIC_ID1 BODY: TVD_FW_GRAPHIC_ID1
 1.2 TVD_FW_GRAPHIC_NAME_MID BODY: TVD_FW_GRAPHIC_NAME_MID
 0.0 HTML_MESSAGE   BODY: HTML included in message
 0.8 SARE_GIF_ATTACHFULL: Email has a inline gif
 1.3 RCVD_IN_BL_SPAMCOP_NET RBL: Received via a relay in bl.spamcop.net
   [Blocked - see
]

The TVD_FW_GRAPHIC rules come from sa-update.

My suggestion:  Upgrade to 3.1.3 so you have the latest bugfixes and
run sa-update to get the new rules.

-- 
Bowie

RE: Rules getting bypassed?

[Bowie Bailey]

Rick van Vliet wrote:
> Hello. New to the list, I have a question that I hope isn't "too
> newbie". Running SA 3.1.2  with a qmail server for a small (50) group
> of users. Vpopmail handling virtuals, and procmail.
> (auto_whitelist is disabled)
> 
> I have one user who is getting creamed and no matter how much we do
> sa-learn --spam...on the IMAP folder we move his spam into...this
> user's mail somehow gets through with low scores, and he's averaging
> 60 spams a day, total,  with FORTY of those that actually get to his
> inbox. 
> 
> Other than changing his email address, how would I teach SA that this
> is spam?

You posted the headers from one of the spam emails, but that didn't
tell us much.  Put the full text of one of the emails on a webserver
where we can look at it.  If we have a full email to test, we can tell
you what rules should be hitting it and give you some suggestions.

-- 
Bowie

Re: Stock/image-only spam still getting through

[Andy Jezierski]

Owen Mehegan <[EMAIL PROTECTED]> wrote on
07/17/2006 05:20:44 PM:

> I've been inundated with maddening image-only stock spam lately. 
> I've just today sat down to try and tweak my rules up to weed this

> out. I added sare_stocks and sare_obfu, updated my version of rules

> du jour for good measure, and restarted spamd. I tested these 
> changes on an example message, and neither of those new rule sets

> hit on it at all. A few minutes later, ANOTHER of these messages 
> came through! Argh! And I just realized, looking at its headers, 
> these messages are getting through my greylisting too! Clever bastards.

Getting trapped over here

X-Spam-Status: Yes, score=10.1 required=5.0 tests=BAYES_50,
        EXTRA_MPART_TYPE,HELO_DYNAMIC_SPLIT_IP,HTML_MESSAGE,
        RCVD_IN_BL_SPAMCOP_NET,RCVD_NUMERIC_HELO,TVD_FW_GRAPHIC_ID1,
        TVD_FW_GRAPHIC_NAME_LONG,TVD_FW_GRAPHIC_NAME_MID
        autolearn=unavailable
version=3.1.3

Andy

Re: Mail::SpamAssassin::Message how to replace a header?

[Robert Nicholson]

Basically I'm processing archived mail thru spamassassin in an  
attempt to weed out spam. In order to identify it as spam I will be  
adding a header to the spam. so when I use "re_write" I get back a  
Mail::SpamAssassin::Message but I then want to add my own header to  
the message.


f ($status->is_spam())
  {
 my $mail = message_from_string_or_arrayref($rewritten);
 #$mail->head->replace("X-Accept-Flag", "Spam");
 print "$filename is spam\n";
 open (NEW_MESSAGE, ">$filename.new") || die ("Couldn't open  
message $filename

:$!\n");
 print NEW_MESSAGE $first;
 print NEW_MESSAGE $mail->get_pristine;
 close(NEW_MESSAGE);
 exit;
 # backup old msg
 move ($filename, "$filename.backup") || die ("Couldn't move  
message $filename

:$!\n");
 # replace old with new
 move ("$filename.new", "$filename") || die ("Couldn't replace  
message $filena

me:$!\n");
  } else {
 print "$filename is not spam\n";
  }

 I know SpamAssassin will add it's own headers but I want to add my  
own in addition.


The rules my Mail client uses do not allow me to use regular  
expressions which is why
I need a reliable string that identifies that the mail was in fact  
considered Spam.


On Jul 17, 2006, at 10:22 PM, Theo Van Dinter wrote:


On Mon, Jul 17, 2006 at 10:03:39PM -0500, Robert Nicholson wrote:

Also, if I have a Mail::SpamAssassin::Message and I want to replace a
header in the message do I have to do all this myself and reconstruct
a new message with the new header value?

From what I can tell this class retains header and body as scalars.


Can you be a little more specific about what you're trying to do?

Generally speaking, without mucking about manually, which I don't  
recommend,
you can't modify the headers in the internal data structure.  You  
can add and
you can delete, but there's no modify function.  There's also no  
way to modify
the original headers on output, beyond adding in X-Spam-* headers.   
You can
take the output from rewrite_mail() and modify it yourself (it's  
just a

scalar).

--
Randomly Generated Tagline:
Know a good chiropractor? My computer has a slipped disk.

Re: Mail::SpamAssassin::Message how to replace a header?

[Theo Van Dinter]

On Tue, Jul 18, 2006 at 08:54:03AM -0500, Robert Nicholson wrote:
> Basically I'm processing archived mail thru spamassassin in an  
> attempt to weed out spam. In order to identify it as spam I will be  
> adding a header to the spam. so when I use "re_write" I get back a  
> Mail::SpamAssassin::Message but I then want to add my own header to  
> the message.
> 
>  #$mail->head->replace("X-Accept-Flag", "Spam");
> 
> I know SpamAssassin will add it's own headers but I want to add my  
> own in addition.

The only headers SA lets you add all start with "X-Spam-".  You can
add whatever ones you want, but the prefix is automatically added.
If you want to add/remove/replace other headers, you need to do it in
your own code.

> The rules my Mail client uses do not allow me to use regular  
> expressions which is why
> I need a reliable string that identifies that the mail was in fact  
> considered Spam.

Can you just use the default X-Spam-Flag?  It's value will be "YES"
if the message is considered spam (or "NO" if it isn't).

-- 
Randomly Generated Tagline:
"When I grow up, I want to be a principal or a caterpillar."
 
--Ralph Wiggum
  The Principal and the Pauper (Episode 4F23)


pgp6KsvJIblNn.pgp
Description: PGP signature

Re: Spamasassin logging tons of errors

[Theo Van Dinter]

On Tue, Jul 18, 2006 at 09:11:40AM -0300, Facundo Barrera wrote:
> Jul 18 08:27:58 mail spamd[1397]: auto-whitelist: open of auto-whitelist
> file failed: locker: safe_lock: cannot create tmp loc
> kfile /home/spamd/.spamassassin/auto-whitelist.lock.mail.kmmnet.net.1397 for
> /home/spamd/.spamassassin/auto-whitelist.lock: No
> such file or directory

Does the directory exist?

> ILER_SPAM scantime=0.8,size=8800,user=qscand,uid=1010,required_score=5.0

does user "qscand" have access to /home/spamd/.spamassassin ?

> Jul 18 09:06:55 mail spamd[1397]: mkdir /home/spamd: Permission denied at
> /usr/lib/perl5/site_perl/5.8.7/Mail/SpamAssassin.pm
> line 1486

Looks like /home/spamd doesn't exist, and qscand has no access to make it.

-- 
Randomly Generated Tagline:
"This web project is the most self-indulgent, egotistical thing I have
 ever done in my life.  But the day is young.  I can top it." - Scott Adams


pgpaitoJAGp1L.pgp
Description: PGP signature

Re: Rules getting bypassed?

[Rick van Vliet]

jdow wrote:

From: "Rick van Vliet" <[EMAIL PROTECTED]>


jdow wrote:

From: "Rick van Vliet" <[EMAIL PROTECTED]>


Hello. New to the list, I have a question that I hope isn't "too 
newbie".

Running SA 3.1.2  with a qmail server for a small (50) group of users.
Vpopmail handling virtuals, and procmail.
(auto_whitelist is disabled)

I have one user who is getting creamed and no matter how much we do 
sa-learn --spam...on the IMAP folder we move his spam into...this 
user's mail somehow gets through with low scores, and he's averaging 
60 spams a day, total,  with FORTY of those that actually get to his 
inbox.


Other than changing his email address, how would I teach SA that 
this is spam?


I'll look at the INSTALL, and see what I missed in the configuration. 
(if I can find that ;)

Thanks,
rick


Rick, you do not have ANY BAYES_xx rule hitting at all. So Bayes is not
working. It looks like you have been carefully training individual user's
BAYES databases but not the global one. You must update the database
as the UID that owns the database.

{^_^}


OK, Thanks...I think I know what my problem is-I've been su'ing to root, 
and running sa-learn as root.

Also, I seem to be running "spamassassin", and not "spamd/spamc".
Is this a problem?

BUT--I'm really not sure how to do it as the vpopmail user, since these 
maildirs are owned by vpopmail:vchkpw. (individual users do not have 
shell account), and
Any pointers to a reliable guide for getting SA to work with *vpopmail*, 
and I'll work on that.


I'm pretty sure was getting BAYES_xx rules hitting before upgrading to 
3.1.2

I'm feeling a little dense, all of a sudden.
thanks,
rick

(And since midnight, this virtual user received 17 msgs, all spam, all 
moved into .Spam folder properly by procmail. But still no BAYES_xx rule 
mentioned in the headers)

Re: spamd: handle_user unable to find user

[Theo Van Dinter]

On Tue, Jul 18, 2006 at 03:43:12AM -0700, tomcatf14 wrote:
> spamd: handle_user unable to find user: '[EMAIL PROTECTED]'
> What does this mean?

It means "spamc -u [EMAIL PROTECTED]" was run, and spamd can't find that user.
Perhaps you need to pass in virtual user options to spamd?

-- 
Randomly Generated Tagline:
"I wanted respect.  Instead, I turned into a wishing well with legs."
 - Londo Mollari on Babylon 5


pgpYbrINgLgX8.pgp
Description: PGP signature

Problems with make test -> Dumper.so: undefined symbol: PL_sv_undef

[Whisky]

Dear list members,

I receive two errors/warnings when running "make test" for
Mail-SpamAssassin-3.1.3 on Debian testing.


---
1) 
t/gtube.Not found: gtube =  BODY: Generic Test for
Unsolicited Bulk Email 
# Failed test 2 in t/SATest.pm at line 592
t/gtube.FAILED test 2

Failed 1/4 tests, 75.00% okay

---


---
2)
t/meta..Can't load
'/usr/local/lib/perl5/5.8.4/i686-linux/auto/Data/Dumper/Dumper.so' for
module Data::Dumper:
/usr/local/lib/perl5/5.8.4/i686-linux/auto/Data/Dumper/Dumper.so: undefined
symbol: PL_sv_undef at /usr/local/lib/perl5/5.8.4/i686-linux/XSLoader.pm
line 68.
 at /usr/local/lib/perl5/5.8.4/i686-linux/Data/Dumper.pm line 27
Compilation failed in require at ../masses/parse-rules-for-masses line 36.
BEGIN failed--compilation aborted at ../masses/parse-rules-for-masses line
36.
parse-rules-for-masses failed! at t/meta.t line 43.
tmp/rules.pl is unparseable: Can't locate log/rules-0.pl in @INC (@INC
contains: ../blib/lib
/usr/src/Mail-SpamAssassin/Mail-SpamAssassin-3.1.3/blib/lib
/usr/src/Mail-SpamAssassin/Mail-SpamAssassin-3.1.3/blib/arch
/usr/local/lib/perl5/5.8.4/i686-linux /usr/local/lib/perl5/5.8.4/i686-linux
/usr/local/lib/perl5/5.8.4 /usr/local/lib/perl5/site_perl/5.8.4/i686-linux
/usr/local/lib/perl5/site_perl/5.8.4/i686-linux
/usr/local/lib/perl5/site_perl/5.8.4
/usr/local/lib/perl5/site_perl/5.8.4/i686-linux
/usr/local/lib/perl5/site_perl/5.8.4 /usr/local/lib/perl5/site_perl .
/usr/local/lib/perl5/5.8.4/i686-linux /usr/local/lib/perl5/5.8.4
/usr/local/lib/perl5/site_perl/5.8.4/i686-linux
/usr/local/lib/perl5/site_perl/5.8.4 /usr/local/lib/perl5/site_perl .) at
t/meta.t line 46.
giving up on test. at t/meta.t line 50.

---

The final result looks like this:


---
Failed Test Stat Wstat Total Fail  Failed  List of Failed

---
t/gtube.t  41  25.00%  2
16 tests skipped.
Failed 1/95 test scripts, 98.95% okay. 1/2090 subtests failed, 99.95% okay.

---

Can I safely ignore these problems and install SA anyway? Or does anyone of
you guys have an idea on how to solve this?

Thank you very much in advance,

Stefan

Re: Will bayes-db be 'skewed' by feeding it spam only (one central database)

[Dirk Bonengel]

Stucki,

did you investigate auto-learning? This might let your system learn ham 
as well as spam. Works fine here (same situation  - gateway server to a 
Lotus Notes system, no feedback loop possible)


As far as I recall, SA starts using its Bayes data only after having 
learned at least 200 ham and spam each. I guess this applies to 
per-user-databases as well, which in turn means many users will never 
(or late) accumulate enough data to use bayes effectively. I'd stick to 
a global DB


If I was in your position, I'd try to switch over to a system like Maia 
Mailguard that keeps a copy of each mail in a database and users can 
confirm and/or correct the underlying SpamAssassin engine's decisions. 
This system uses a singel bayes DBWorks fine at a customer of ours 
that uses some weird proprietary document managing software


Hope my plugin works wellfeedback off-list would be welcome

Dirk

Chr. v. Stuckrad schrieb:

On Mon, 17 Jul 2006, Logan Shaw wrote:

...
  

someone carrying a knife, they have been a violent criminal,
so knife-carrying correlates perfectly with being a criminal.

Now imagine that you see a chef.  He is carrying a knife, but


(Good point: [OT: I even know people who react that way on TV-News] :-)

...
  

by doing that, you will give it a very negative view of the
world, where everything looks like spam.

(This is all assuming, of course, that your Bayes database is
empty when you train it with spam only.)



Assuming this scenario I ORIGINALLY started the database
on ham of a long backlog of MY mail, which THEN had enough
spam AND ham to start with, so it's not as bad as would be possible;
but since the last 'fresh start' I 'updated' only the false negatives.
And checking near 6000 (low scoring) Spams a week I found only
'classical false positives' (like of this list :-) and for months
*I* did not loose(sort away) anything important. But may be
one in two months one of our power-users complains about a real
false positive, and if I'm allowed, I feed THAT one in.

  

configuration changes that need to be made.  Do you have the
latest SpamAssassin, and have you enabled some network tests


not the latest, because debian 'stable' is not fast in
the uptake of new versions.  May be I should move to the
volatile packages ...
  

like DCC or razor and some RBLs?  Those should be carrying
some of the load; you shouldn't be relying on Bayes only,



Of course. razor, pyzor, dcc, and the newer german iX-plugin,
and RBLs do catch lots of mails pushing thousands to scores
above 20 :-)

  

If your Bayes database really is messed up, personally I would


...
  

you *do* have is worthwhile.



H may be on one of the next 'maintenance days',
when (nearly) everything is down for a while, so nothing
will slip through during training ...

But this 'keeps' me thinking about the different 'hams' in
our department. Some are french and some even might be Chinese.
So if I train again with *my* mail (postmaster-problems and
a bit of half-private stuff) the database might start anew
skewed 'against' real hams of other parts of the department!
(While I think 'my spam' will be fine to train with).

The only 'real solution' might be to switch to a SQL-Database
and 'bayes-per-user', but then I'd have to 'train' hundreds
of Students how to 'train' their own databases themselves :-))

...
  

Well, there are probably several different explanations.
The best place to start is by looking at the spams that get
through and how they scored, especially comparing that to what
scores others get on the same messages or similar ones.



That's one of the problems here. The mail-filter(-host) runs on old
amavis-perl and does not include the whole scoring headers in the mail,
but only a marking header with the score itself.  So when I later check
the same mail (cleaned of the previous marking) I get completely
different (mostly horrendously higher) scores for the same, but without
really seeing the differences.  Seemingly the later in time an 'one of a
series spam' comes in, the more of the dynamic systems have learned it
and score it.  I nearly believe we often are 'at one end' of some
'lists to be spammed', so we get it 'fresh', and only the first users
are hit, others get it 'after' the filter dynamically chokes down on it
and so the different users do complain about different 'slips'. Sometimes
it *seems* as if spammers work their list alphabetically, so user "a*"
is getting something often, which "w*" never sees, and other way around
too :-)

Thanks Stucki

  

Re: Problems with make test -> Dumper.so: undefined symbol: PL_sv_undef

[Theo Van Dinter]

On Tue, Jul 18, 2006 at 05:04:23PM +0200, Whisky wrote:
> 1) 
> t/gtube.Not found: gtube =  BODY: Generic Test for
> Unsolicited Bulk Email 
> # Failed test 2 in t/SATest.pm at line 592
> t/gtube.FAILED test 2
> Failed 1/4 tests, 75.00% okay

Hrm.  Are you running in a non-English locale/language?
If so this is a known problem (fixed in 3.1.4 --
http://issues.apache.org/SpamAssassin/show_bug.cgi?id=4908).

> 2)
> t/meta..Can't load
> '/usr/local/lib/perl5/5.8.4/i686-linux/auto/Data/Dumper/Dumper.so' for
> module Data::Dumper:
> /usr/local/lib/perl5/5.8.4/i686-linux/auto/Data/Dumper/Dumper.so: undefined
> symbol: PL_sv_undef at /usr/local/lib/perl5/5.8.4/i686-linux/XSLoader.pm
> line 68.
>  at /usr/local/lib/perl5/5.8.4/i686-linux/Data/Dumper.pm line 27

Hrm.  Looks like your local install of the Data::Dumper module is screwed up.

> Can I safely ignore these problems and install SA anyway? Or does anyone of
> you guys have an idea on how to solve this?

I would say yes, you'd be fine doing the install.  #1 is likely the LANG
issue, and #2 is a problem but we don't use Data::Dumper in the normal code.
My biggest concern is whether you'll have other module issues, but ...

-- 
Randomly Generated Tagline:
Somehow tuna doesn't taste the same without the dolphin.


pgplzwlJDgabc.pgp
Description: PGP signature

Re: spamd: handle_user unable to find user

[tomcatf14]

How do i do this?
-- 
View this message in context: 
http://www.nabble.com/spamd%3A-handle_user-unable-to-find-user-tf1959743.html#a5380578
Sent from the SpamAssassin - Users forum at Nabble.com.

Re: users Digest 18 Jul 2006 15:14:24 -0000 Issue 1541

[Gino Cerullo]

On 18-Jul-06, at 11:14 AM, Logan Shaw <[EMAIL PROTECTED]> wrote:On Tue, 18 Jul 2006, Chr. v. Stuckrad wrote: I'm a postmaster working with spamassassin (now debian sarge) for the last years, we habe one filter-host for all mails, so at the moment we have only one global bayes-database..  We are a department for math and computer science and so we get zillions of spam for all addresses 'known on the net' and we get ham for lots of different 'themes' for different workgroups in diverse languages (mostly german of course, being Berlin Germany). Not beeing allowed to peek into other users mailboxes I have no 'representative ham corpus' but only my own, which seems to be very postmaster-specific, while I seem to get a typical average of spams (because my address already existed on a 'News' server :-).  Can somebody tell me, whether the bayes-database's accuray does deteriorate by feeding it 'only my spam' (my false negatives) and not feeding it the (to me unknown) typical hams.  Yes, feeding your Bayes database only spam is a bad idea.  As an analogy, imagine that you are a policeman trying to learn to identify dangerous and violent people.  You examine 100 violent criminals, and all of them are carrying knives. You don't examine anyone else, though, so based on your sample, anyone carrying a knife must be a violent criminal. The reasoning for this is simple:  every time you have seen someone carrying a knife, they have been a violent criminal, so knife-carrying correlates perfectly with being a criminal.  Now imagine that you see a chef.  He is carrying a knife, but what does your experience tell you about him?  You have never seen anyone *else* carrying a knife who wasn't a criminal, so this new guy must be a criminal too.  But he's not:  he's just a chef.  This problem only arises with words (tokens) that could be expected to appear in both spam and ham.  It isn't a problem for words that are names of "performance-enhancing" drugs. But it is a problem for neutral words.  For example, a word like "link" or "today" might occur in both ham and spam, so it doesn't indicate much about which type of message it is. But if you train your Bayes database only with spam, it will see neutral words as strongly associated with spam.  Basically, by doing that, you will give it a very negative view of the world, where everything looks like spam.  (This is all assuming, of course, that your Bayes database is empty when you train it with spam only.)  To me it lately seems to slowly skew to let more and more spam through, instead of 'catching' it.  Is this typical?  Do I have to recreate the database? Or do I need to get 'ham from a set of typical users' to balance the database? OR are there typical values for bayes_auto_learn_threshold_{non,}spam, different from the defatult, to use in my case?  To answer that question, we'd first have to know whether Bayes is really at fault here.  Perhaps there are other configuration changes that need to be made.  Do you have the latest SpamAssassin, and have you enabled some network tests like dcc or razor and some RBLs?  Those should be carrying some of the load; you shouldn't be relying on Bayes only, because these days Bayes alone isn't sufficient.  If your Bayes database really is messed up, personally I would recommend that you just wipe it and start over.  If you have the proper setup, then you can be confident it will be trained correctly.  Yes, you would be throwing away existing data, but what you get in exchange is the knowledge that the data you *do* have is worthwhile.  Just curious why so many spams get through to me ... (i.e. around 10 false negatives relative to 90 marked as spam, which ist 'relatively bad' compared to many opinions on the list)  Well, there are probably several different explanations. The best place to start is by looking at the spams that get through and how they scored, especially comparing that to what scores others get on the same messages or similar ones.    - Logan Great analogy Logan and reading it only reinforces by belief that Stucki's problem may not be due to a DB skewed by too much spam. Actually the opposite result would probably be true. If the DB was skewed with too much spam the result would normally be too many false positives. The DB would be skewed by too many tokens for 'neutral' words. Stucki, maybe Spamassassin is working better then you think and the answer to your false negatives is to lower the score at which a message is considered spam. Have you examined the scores assigned to your ham messages? Assuming your spam score level is set at 7 and all your ham is scoring below 4 maybe you should adjust the score to 5.Just something to consider. --Gino CerulloPixel Point Studios21 Chesham DriveToronto, ON  M3M 1W6T: 416-247-7740F: 416-247-7503 

smime.p7s
Description: S/MIME cryptographic signature

spamassassin sql lookup

[Martin Schiøtz]

Hi

I am using spamassassin-3.1.3 with bayes_pg.sql. Everything is working
fine but in maillog it looks like spamassassin is making the bayes
lookup 3 times for each email??
Also the postgres log shows 3 times lookup for each email.

Is something wrong here or ... ??

Best regards,
Martin

tail -f /var/log/maillog | grep bayes

Jul 18 19:28:20 BlackPete spamd[24325]: bayes: using username: a0002
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: database connection established
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: found bayes db version 3
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: Using userid: 13
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not available for
scanning, only 1 spam(s) in bayes DB < 20
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: database connection established
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: found bayes db version 3
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: Using userid: 13
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not available for
scanning, only 1 spam(s) in bayes DB < 20
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: database connection established
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: found bayes db version 3
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: Using userid: 13
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not available for
scanning, only 1 spam(s) in bayes DB < 20
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not scoring message,
returning undef
Jul 18 19:28:20 BlackPete spamd[24325]: bayes: DB expiry: tokens in
DB: 152, Expiry max size: 15, Oldest atime: 1058995800, Newest
atime: 1153243555, Last expire: 0, Current time: 1153243700

Best regards,
Martin

Re: spamassassin sql lookup

[Nigel Frankcom]

Do you have sql whitelist and user prefs enabled?

On Tue, 18 Jul 2006 20:18:12 +0200, "Martin Schiøtz"
<[EMAIL PROTECTED]> wrote:

>Hi
>
>I am using spamassassin-3.1.3 with bayes_pg.sql. Everything is working
>fine but in maillog it looks like spamassassin is making the bayes
>lookup 3 times for each email??
>Also the postgres log shows 3 times lookup for each email.
>
>Is something wrong here or ... ??
>
>Best regards,
>Martin
>
>tail -f /var/log/maillog | grep bayes
>
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: using username: a0002
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: database connection established
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: found bayes db version 3
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: Using userid: 13
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not available for
>scanning, only 1 spam(s) in bayes DB < 20
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: database connection established
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: found bayes db version 3
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: Using userid: 13
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not available for
>scanning, only 1 spam(s) in bayes DB < 20
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: database connection established
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: found bayes db version 3
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: Using userid: 13
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not available for
>scanning, only 1 spam(s) in bayes DB < 20
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not scoring message,
>returning undef
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: DB expiry: tokens in
>DB: 152, Expiry max size: 15, Oldest atime: 1058995800, Newest
>atime: 1153243555, Last expire: 0, Current time: 1153243700
>
>Best regards,
>Martin

Re: spamassassin sql lookup

[Nigel Frankcom]

Previous message aside, either the user name is wrong or the db for
that user is empty

On Tue, 18 Jul 2006 20:18:12 +0200, "Martin Schiøtz"
<[EMAIL PROTECTED]> wrote:

>Hi
>
>I am using spamassassin-3.1.3 with bayes_pg.sql. Everything is working
>fine but in maillog it looks like spamassassin is making the bayes
>lookup 3 times for each email??
>Also the postgres log shows 3 times lookup for each email.
>
>Is something wrong here or ... ??
>
>Best regards,
>Martin
>
>tail -f /var/log/maillog | grep bayes
>
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: using username: a0002
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: database connection established
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: found bayes db version 3
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: Using userid: 13
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not available for
>scanning, only 1 spam(s) in bayes DB < 20
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: database connection established
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: found bayes db version 3
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: Using userid: 13
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not available for
>scanning, only 1 spam(s) in bayes DB < 20
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: database connection established
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: found bayes db version 3
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: Using userid: 13
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not available for
>scanning, only 1 spam(s) in bayes DB < 20
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: not scoring message,
>returning undef
>Jul 18 19:28:20 BlackPete spamd[24325]: bayes: DB expiry: tokens in
>DB: 152, Expiry max size: 15, Oldest atime: 1058995800, Newest
>atime: 1153243555, Last expire: 0, Current time: 1153243700
>
>Best regards,
>Martin

SA 3.1.1 and sql user prefs

[spamassassinuser19]

I am running spamassassin 3.1.1 and using sql as the userprefs file. The
system is reading the @GLOBAL for defaults but when i go into and change an
individual users settings in the sql database it doesnt use the users
settings but still just the @GLOBAL.

Any assistance would be greatly appreciated.

Thanks
-- 
View this message in context: 
http://www.nabble.com/SA-3.1.1-and-sql-user-prefs-tf1962453.html#a5384545
Sent from the SpamAssassin - Users forum at Nabble.com.

RE: SA 3.1.1 and sql user prefs

[Dallas L. Engelken]

> -Original Message-
> From: spamassassinuser19 [mailto:[EMAIL PROTECTED] 
> Sent: Tuesday, July 18, 2006 14:15
> To: users@spamassassin.apache.org
> Subject: SA 3.1.1 and sql user prefs
> 
> 
> I am running spamassassin 3.1.1 and using sql as the 
> userprefs file. The system is reading the @GLOBAL for 
> defaults but when i go into and change an individual users 
> settings in the sql database it doesnt use the users settings 
> but still just the @GLOBAL.
> 
> Any assistance would be greatly appreciated.
> 

I wrote an article on this way back.  Take a quick read of.. 
http://wiki.apache.org/spamassassin/UsingSQL

Maybe it will help?

[no subject]

[Andreas Walter]

unsubscribe
end

Re:

[Richard Collyer]

Andreas Walter wrote:

unsubscribe
end



Send mail to: [EMAIL PROTECTED] to unsubscribe.

Re:

[Steve Thomas]

> unsubscribe
> end

list-unsubscribe: 

Re:

[Evan Platt]

At 12:55 PM 7/18/2006, Andreas Walter wrote:

unsubscribe
end


Please check the headers of every spamassassin message:

list-unsubscribe: 

I know of no list where you send unscubscribe commands to the general 
list address. 

Re:

[Geoff Soper]

Richard Collyer wrote:

Andreas Walter wrote:

unsubscribe
end



Send mail to: [EMAIL PROTECTED] to unsubscribe.


Good luck, I'm still here a week after first trying to unsubscribe!
;-)

sa-learn error/permission problem?

[Brian Read]

Since 3.1.3 I get this error on a call to sa-learn
>
Learning Spammail: 
/home/e-smith/files/users/brianr/Maildir/.LearnAsSpam/cur/1153112667.P29360Q3M149088.bjsserver\:2,Sbayes: 
expire_old_tokens: locker: safe_lock: cannot create lockfile 
/var/spool/spamd/.spamassassin/bayes.mutex: Permission deniedbayes: 
locker: safe_lock: cannot create lockfile 
/var/spool/spamd/.spamassassin/bayes.mutex: Permission denied
Result of sa-learn: Learned tokens from 0 message(s) (1 message(s) 
examined)

>>>

This is the code that calls sa-learn:

my $result = `su - $key -c "/usr/bin/sa-learn --spam $filetolearn"`;

where (I guess) $key is the username.  I didn't write this.

It worked fine for months on 3.1.2 and 3.1.1 and for a while on 3.1.3!

Any ideas?

--
Cheers

Brian

Reliable, secure and affordable Office servers using Open Source software 
http://www.abandonmicrosoft.co.uk

Re:

[John D. Hardin]

On Tue, 18 Jul 2006, Evan Platt wrote:

> At 12:55 PM 7/18/2006, Andreas Walter wrote:
> >unsubscribe
> >end
> 
> I know of no list where you send unscubscribe commands to the general 
> list address. 

Oh, hell, I can name *lots* of lists like that. Practically every one
I've ever been subscribed to.

:)

--
 John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]FALaholic #11174pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  You are in a maze of twisty little protocols,
  all written by Microsoft.
--
 6 days until The 37th anniversary of Apollo 11 landing on the Moon

Re: sa-learn error/permission problem?

[John Andersen]

On Tuesday 18 July 2006 12:30, Brian Read wrote:
> Since 3.1.3 I get this error on a call to sa-learn
>
> Learning Spammail:
> /home/e-smith/files/users/brianr/Maildir/.LearnAsSpam/cur/1153112667.P29360
>Q3M149088.bjsserver\:2,Sbayes: expire_old_tokens: locker: safe_lock: cannot
> create lockfile
> /var/spool/spamd/.spamassassin/bayes.mutex: Permission deniedbayes:
> locker: safe_lock: cannot create lockfile
> /var/spool/spamd/.spamassassin/bayes.mutex: Permission denied
> Result of sa-learn: Learned tokens from 0 message(s) (1 message(s)
> examined)
>
>
> This is the code that calls sa-learn:
>
> my $result = `su - $key -c "/usr/bin/sa-learn --spam $filetolearn"`;
>
> where (I guess) $key is the username.  I didn't write this.
>
> It worked fine for months on 3.1.2 and 3.1.1 and for a while on 3.1.3!
>
> Any ideas?

Are you doing this on a per-message basis, or a per-folder basis?
Also is that LearnAsSpam folder really hidden?

What happens if you run that sa-learn command manually?  Does that work?

-- 
_
John Andersen


pgpfDLT84kwHI.pgp
Description: PGP signature

Re: sa-learn error/permission problem?

[brian read]

John Andersen wrote:

On Tuesday 18 July 2006 12:30, Brian Read wrote:

Since 3.1.3 I get this error on a call to sa-learn

Learning Spammail:
/home/e-smith/files/users/brianr/Maildir/.LearnAsSpam/cur/1153112667.P29360
Q3M149088.bjsserver\:2,Sbayes: expire_old_tokens: locker: safe_lock: cannot
create lockfile
/var/spool/spamd/.spamassassin/bayes.mutex: Permission deniedbayes:
locker: safe_lock: cannot create lockfile
/var/spool/spamd/.spamassassin/bayes.mutex: Permission denied
Result of sa-learn: Learned tokens from 0 message(s) (1 message(s)
examined)


This is the code that calls sa-learn:

my $result = `su - $key -c "/usr/bin/sa-learn --spam $filetolearn"`;

where (I guess) $key is the username.  I didn't write this.

It worked fine for months on 3.1.2 and 3.1.1 and for a while on 3.1.3!

Any ideas?


Are you doing this on a per-message basis, or a per-folder basis?


per message


Also is that LearnAsSpam folder really hidden?


yes, it is an imap folder



What happens if you run that sa-learn command manually?  Does that work?



same error, logged in as root. (perl script is run from crond as root)

I see that the bayes.mutex is spamd:spamd and the permissions are:
-rw--w-rw-


--
Cheers

Brian

Reliable, secure and affordable Office servers using Open Source software
http://www.abandonmicrosoft.co.uk

get_pristine_header in an array context

[Robert Nicholson]

If i'm suppose to get back one header per element why do I get back  
the following?


that is not one header per element is it?

  DB<3> x @header
0  "Status: R\cJX-Status: \cJX-Keywords:\cJFrom: \"Suphannika\" [EMAIL PROTECTED]>\cJTo: \"Robert Nicholson\" <[EMAIL PROTECTED]> 
\cJSubject: want to AOL?\cJDate: Sat, 1 Jul 2000 06:31:21 -0700 
\cJMIME-Version: 1.0\cJContent-Type: text/html;\cJ\cIcharset= 
\"iso-8859-1\"\cJContent-Transfer-Encoding: quoted-printable\cJX- 
Priority: 3\cJX-MSMail-Priority: Normal\cJX-MimeOLE: Produced By  
Microsoft MimeOLE V6.00.2600.\cJ\cJ"

Re: Bayes corrupt?

[martin]

just wonder, how can make sa-learn/spamassassin to unlearn a message? thx

jdow  earthlink.net> writes:

> 
> First unlearn that one message. Then read the rest of this message and
> use sa-learn properly for your mail storage format.
> 
> Then do it correctly. You're obviously running mbox format for your spam
> store. So you need to include --mbox as an option on sa-learn.

Re: get_pristine_header in an array context

[Robert Nicholson]

secondly I see in the SA code that in order to get one per array  
element you have to use split /^/ the documentation for  
get_pristine_header doesn't appear to be correct.


secondly why must I remove the blank line myself?

$header = $mail->get_pristine_header;
 # remove the last new line
 $header =~ s/\s$//g;

just how reliable is this going to be?

  my $header = $check_mail->get_pristine_header;
  $header =~ s/\s$//g;
  $header .= "\cJ";

  my @header = split /^/m, $header;
  my $body = $check_mail->get_pristine_body;
  my @body = split /^/m, $body;

  push @header, "X-Accept-Flag: Sender in Whitelist\n";
  my @lines;
  push @lines, @header, "\n", @body;



On Jul 19, 2006, at 12:09 AM, Robert Nicholson wrote:

If i'm suppose to get back one header per element why do I get back  
the following?


that is not one header per element is it?

  DB<3> x @header
0  "Status: R\cJX-Status: \cJX-Keywords:\cJFrom: \"Suphannika\" [EMAIL PROTECTED]>\cJTo: \"Robert Nicholson\" <[EMAIL PROTECTED]> 
\cJSubject: want to AOL?\cJDate: Sat, 1 Jul 2000 06:31:21 -0700 
\cJMIME-Version: 1.0\cJContent-Type: text/html;\cJ\cIcharset= 
\"iso-8859-1\"\cJContent-Transfer-Encoding: quoted-printable\cJX- 
Priority: 3\cJX-MSMail-Priority: Normal\cJX-MimeOLE: Produced By  
Microsoft MimeOLE V6.00.2600.\cJ\cJ"

Re: Re: Bayes corrupt?

[Nigel Frankcom]

http://spamassassin.apache.org/full/3.0.x/dist/doc/sa-learn.html

http://spamassassin.apache.org/full/3.1.x/dist/doc/sa-learn.html


On Wed, 19 Jul 2006 05:37:29 + (UTC), martin
<[EMAIL PROTECTED]> wrote:

>just wonder, how can make sa-learn/spamassassin to unlearn a message? thx
>
>jdow  earthlink.net> writes:
>
>> 
>> First unlearn that one message. Then read the rest of this message and
>> use sa-learn properly for your mail storage format.
>> 
>> Then do it correctly. You're obviously running mbox format for your spam
>> store. So you need to include --mbox as an option on sa-learn.
>