Re: On spamassassin usage, from an sa ignoramus
On Friday 06 October 2006 06:45, Chris Santerre wrote: > IMHO I think its because most of us belive if you have to fetch the spam, > scan it localy, then you have already lost the battle by having to waste > resources to get the spam down to your machine. What a strange attitude for someone on a Spamassassin Mailing list. SA always scans locally. When you figure out how to do remote scanning, preferably at the point of origin, please DO post back. -- _ John Andersen pgpcJhslWby7b.pgp Description: PGP signature
RE: 2 different scores?
At 01:37 PM 10/6/2006, you wrote: > > 0fw: spamassassin.lock > > spamd -L -c -s 512000 This should be: spamc -c -s 512000 > Now it appears spamassassin isn't checking mail at all, as the mail > isn't marked up at all. > > My cron entry upon bootup is: > > /opt/local/bin/spamd -L Get rid of the '-L'. That went from bad to worse... It looked for a while like all messages were being scored as 0, but it actually is basically blackholing messages. I'd ses entries in my mail log, but no mail in my inbox: Oct 6 22:15:37 www-espphotography-com postfix/smtpd[292]: connect from web53414.mail.yahoo.com[206.190.39.74] Oct 6 22:15:37 www-espphotography-com postfix/smtpd[292]: C11838F80AC: client=web53414.mail.yahoo.com[206.190.39.74] Oct 6 22:15:37 www-espphotography-com postfix/cleanup[293]: C11838F80AC: message-id=<[EMAIL PROTECTED]> Oct 6 22:15:37 www-espphotography-com postfix/qmgr[96]: C11838F80AC: from=<[EMAIL PROTECTED]>, size=1079, nrcpt=1 (queue active) Oct 6 22:15:38 www-espphotography-com spamd[256]: spamd: connection from localhost [127.0.0.1] at port 49157\n Oct 6 22:15:38 www-espphotography-com spamd[256]: spamd: setuid to nobody succeeded\n Oct 6 22:15:38 www-espphotography-com spamd[256]: spamd: checking message <[EMAIL PROTECTED]> for nobody:-2\n Oct 6 22:15:38 www-espphotography-com postfix/smtpd[292]: disconnect from web53414.mail.yahoo.com[206.190.39.74] Oct 6 22:15:38 www-espphotography-com postfix/local[294]: C11838F80AC: to=<[EMAIL PROTECTED]>, orig_to=<[EMAIL PROTECTED]>, relay=local, delay=1, status=sent (delivered to command: IFS=' ' && exec /usr/bin/procmail || exit 75 #eplatt) Oct 6 22:15:38 www-espphotography-com postfix/qmgr[96]: C11838F80AC: removed Oct 6 22:15:38 www-espphotography-com spamd[256]: spamd: clean message (0.2/5.0) for nobody:-2 in 0.2 seconds, 1227 bytes.\n Oct 6 22:15:38 www-espphotography-com spamd[256]: spamd: result: . 0 - BLANK_LINES_80_90,SUBJECT_NOVOWEL scantime=0.2,size=1227,user=nobody,uid=-2,required_score=5.0,rhost=localhost,raddr=127.0.0.1,rport=49157,mid=<[EMAIL PROTECTED]>,autolearn=no\n Oct 6 22:15:38 www-espphotography-com spamd[70]: prefork: child states: II\n ^[[BOct 6 22:16:16 www-espphotography-com ipop3d[301]: pop3 service init from 192.168.1.2 Oct 6 22:16:16 www-espphotography-com ipop3d[301]: Login user=eplatt host=[192.168.1.2] nmsgs=0/0 Oct 6 22:16:16 www-espphotography-com ipop3d[301]: Logout user=eplatt host=[192.168.1.2] nmsgs=0 ndele=0 Oct 6 22:16:36 www-espphotography-com ipop3d[303]: pop3 service init from 192.168.1.2 Oct 6 22:16:36 www-espphotography-com ipop3d[303]: Login user=eplatt host=[192.168.1.2] nmsgs=0/0 Oct 6 22:16:36 www-espphotography-com ipop3d[303]: Logout user=eplatt host=[192.168.1.2] nmsgs=0 ndele=0 Then took out :0fw: spamassassin.lock | spamc -c -s 512000 From my procmail, and it's fine - well obviously no spamassassin scores. I'm at my wits end, and the fact that I'm sick isn't helping much either. :(
Re: Spamassassin from CPAN and sa-update location.
Bowie Bailey wrote: Bookworm wrote: When I build SpamAssassin using the CPAN method, it installs the test files (20_anti_ratware.cf and similar) in /usr/share/spamassassin. However, sa-update shoves updates into /var/lib/spamassassin/3.001005/updates_spamassassin_org (with extra crap in /var/lib/spamassassin/3.001005/ ) I suspect that one or the other behavior is actually wrong. Either the CPAN method has a bad configuration script, or the sa-update has never been matched to the configure script. Either way, can anyone give me a suggestion on the best way to deal with this issue? (Besides the fact that the CPAN should probably use the same default site rules directory as sa-update?) Is this an FAQ yet? Both are correct. The default rules are installed in /usr/share/spamassassin these are created when you install/update spamassassin. Rules updated by sa-update are placed in /var/lib/spamassassin/(version)/. SA will use the updated rules if they exist. Otherwise, it uses the default rules. Best suggestion: Don't worry about it. It will work fine. And that's exactly what I needed to know. Thanks. I've read all the replies up to this point, and yes, I read the man files for spamassassin itself and for sa-update. It didn't really answer the question. However, I now have an answer! I will admit, I didn't go to the web site and read through it. I wasn't in a position to bring up lynx and try to bang around on the SpamAssassin apache web site. BW
Re: 3.1.6, local scores, and sa-update
On Thu, October 5, 2006 21:38, John Andersen wrote: > I'm pretty sure this is going to be a major problem for many many sites. > Lots of people are running various specialized rules in separate .cf files. i did: mv /etc/mail/spamassassin ~/tmp mkdir -p /etc/mail/spamassassin sa-update cp ~/tmp /etc/mail/spamassassin after that 3.1.6 works now back to amavisd here -- "This message was sent using 100% recycled spam mails."
"Re: Hi" spam
I noticed today an unusually high incidence of spam subject lines of "Re: Hi", and I don't see a rule for this in the distribution. Do others see this much in legitimate mail? Or could it make a good rule?
RE: Syslog gone?
Chris wrote: > > I can't answer your questions, but that -m 16 has me worried. > > At around > > 40-60 megs per child, that is using up a LOT of ram. Unless > > you have a few > > gigs spare on this machine I'd stick with the default of 5 > > children until > > you have things up and running moderately well, then > > experiment with more if > > necessary. > LOL, thats the first thing that hit me as well! Sixteen!! > Hope they got some big iron! Remember, -m = "--max-children", not the number of permantly preforked children. It's just a ceiling to protect the system from overload (4G memory). I have 4 preforked children now, and 20 similarly-sized Apache processes; none of which is really out of the ordinary. - Mark
Re: spamd Sys-Hostname-Long-1.4 error
Good lord, I hope that's not the general solution on solaris 8. That would produce a result of: foo.ucsc.edu.ucsc.edu (as the hostname returned by "hostname" is already fully qualified on our systems, both because it SHOULD BE, and because MIT kerberos wants/needs it to be) or foo.ucsc.edu. (trailing dot, possibly with spaces after it, because domainname is blank) Sys::Hostname::Long has been screwed up for as long as I've seen it mentioned in connection to SA. I hope its developer manages to turn it into something sane, at some point. Rosenbaum, Larry M. wrote: In Long.pm, go to line 91 and change this my $tmp = `hostname` . '.' . `domainname`; to this my $tmph = `hostname`; my $tmpd = `domainname`; my $tmp = "$tmph.$tmpd"; -Original Message- From: John Goubeaux [mailto:[EMAIL PROTECTED] Posted At: Friday, October 06, 2006 12:54 PM Posted To: sa-users Conversation: spamd Sys-Hostname-Long-1.4 error Subject: spamd Sys-Hostname-Long-1.4 error I am getting the following error generated from spamd, apparently due to the fact that the sys::hostname::long module behaves differently on different OSs in this case Solaris 8. While i realize this is not specific to spmassassin and a perl /OS issue was wondering if anyone running SA on Solaris has seen and been able to eliminate this error? SpamAssassin version 3.1.5 running on Perl version 5.8.5 Oct 5 09:28:21 kady spamd[870]: Insecure dependency in `` while running with -T switch at /usr/local/perl-5.8.5/lib/site_perl/5.8.5/Sys/Hostname/Long.pm line 91, line 77. any clues are appreciated ! -john -- John Goubeaux Systems Administrator Gevirtz Graduate School of Education UC Santa Barbara Phelps Hall 3534 805 893-8190
RE: 2 different scores?
Evan Platt wrote: > From: "Loren Wilton" <[EMAIL PROTECTED]> > > > > The first case obviously isn't using network tests. -L on spamd > > startup? Permissions problem? Different usercode than what you ran > > the test under? Different home directory? > > > > I'd make a guess at the -L parameter as a first shot. > > Unless I'm misunderstanding.. > > I changed my procmailrc to; > > > 0fw: spamassassin.lock > > spamd -L -c -s 512000 This should be: spamc -c -s 512000 > Now it appears spamassassin isn't checking mail at all, as the mail > isn't marked up at all. > > My cron entry upon bootup is: > > /opt/local/bin/spamd -L Get rid of the '-L'. -- Bowie
Re: Spamassassin from CPAN and sa-update location.
--On Friday, October 06, 2006 10:37 AM -0500 Bookworm <[EMAIL PROTECTED]>
wrote:
When I build SpamAssassin using the CPAN method, it installs the test
files (20_anti_ratware.cf and similar) in /usr/share/spamassassin.
However, sa-update shoves updates into
/var/lib/spamassassin/3.001005/updates_spamassassin_org (with extra crap
in /var/lib/spamassassin/3.001005/ )
On a well-maintained system, everything under /usr should be read-only
except when you upgrade packages. /var is where you put stuff that changes
between package upgrades. /etc is, of course, where you put site-specific
customization.
So a given version of SA puts rules in /usr/lib/spamassassin. Between
upgrades, dynamic updates using sa-update go under
/var/lib/spamassassin/{version}. (The {version} part lets you back out an
update without having to re-download the interim rules updates.) Your own
rules go in your site rules dir, such as /etc/mail/spamassassin.
RE: 2 different scores?
> From: Evan Platt [mailto:[EMAIL PROTECTED] >... > I changed my procmailrc to; > > :0fw: spamassassin.lock > | spamd -L -c -s 512000 Shouldn't that be spamc?
Re: 2 different scores?
From: "Loren Wilton" <[EMAIL PROTECTED]> To: Subject: Re: 2 different scores? Date: Fri, 6 Oct 2006 01:11:50 -0700 The first case obviously isn't using network tests. -L on spamd startup? Permissions problem? Different usercode than what you ran the test under? Different home directory? I'd make a guess at the -L parameter as a first shot. Unless I'm misunderstanding.. I changed my procmailrc to; :0fw: spamassassin.lock | spamd -L -c -s 512000 Now it appears spamassassin isn't checking mail at all, as the mail isn't marked up at all. My cron entry upon bootup is: /opt/local/bin/spamd -L run as root. Any more help appreciated.. Thanks. Evan
RE: spamd Sys-Hostname-Long-1.4 error
Thanks! I actually got this to fix it as well: open HOSTNAME, "<", "/etc/hostname.hme0" or warn; open DOMAINNAME, "<", "/etc/defaultdomain" or warn; my $tmp = . '.' . ; -john At 2:17 PM -0400 10/6/06, Rosenbaum, Larry M. wrote: In Long.pm, go to line 91 and change this my $tmp = `hostname` . '.' . `domainname`; to this my $tmph = `hostname`; my $tmpd = `domainname`; my $tmp = "$tmph.$tmpd"; -Original Message- From: John Goubeaux [mailto:[EMAIL PROTECTED] Posted At: Friday, October 06, 2006 12:54 PM Posted To: sa-users Conversation: spamd Sys-Hostname-Long-1.4 error Subject: spamd Sys-Hostname-Long-1.4 error I am getting the following error generated from spamd, apparently due to the fact that the sys::hostname::long module behaves differently on different OSs in this case Solaris 8. While i realize this is not specific to spmassassin and a perl /OS issue was wondering if anyone running SA on Solaris has seen and been able to eliminate this error? SpamAssassin version 3.1.5 running on Perl version 5.8.5 Oct 5 09:28:21 kady spamd[870]: Insecure dependency in `` while running with -T switch at /usr/local/perl-5.8.5/lib/site_perl/5.8.5/Sys/Hostname/Long.pm line 91, line 77. any clues are appreciated ! -john -- John Goubeaux Systems Administrator Gevirtz Graduate School of Education UC Santa Barbara Phelps Hall 3534 805 893-8190 -- John Goubeaux Systems Administrator Gevirtz Graduate School of Education UC Santa Barbara Phelps Hall 3534 805 893-8190
RE: Change rule score
> I would like to change the scores on the following. > Could you tell me what file they are located in or how to > modify the score? > > Thank you > > HOST_EQ_DSL HOST_EQ_DSL_ > HOST_EQ_D_D_D_D > HOST_EQ_PACBELL_DSL > HOST_MISMATCH_NET > > I am running Redhat enterprise 4 with SpamAssassin 3.1.4 with > the latest MailScanner Assuming the rules load before your local.cf, you could include score lines for each rule there. If they're additional rules you've added, maybe create a zz_scores.cf and add the score lines there for the rules. The zz_ prefix should get that cf to load last. See the documentation for syntax on setting scores... Bret
RE: spamd Sys-Hostname-Long-1.4 error
In Long.pm, go to line 91 and change this my $tmp = `hostname` . '.' . `domainname`; to this my $tmph = `hostname`; my $tmpd = `domainname`; my $tmp = "$tmph.$tmpd"; > -Original Message- > From: John Goubeaux [mailto:[EMAIL PROTECTED] > Posted At: Friday, October 06, 2006 12:54 PM > Posted To: sa-users > Conversation: spamd Sys-Hostname-Long-1.4 error > Subject: spamd Sys-Hostname-Long-1.4 error > > > I am getting the following error generated from spamd, apparently due > to the fact that the sys::hostname::long module behaves differently > on different OSs in this case Solaris 8. > While i realize this is not specific to spmassassin and a perl /OS > issue was wondering if anyone running SA on Solaris has seen and > been able to eliminate this error? > > SpamAssassin version 3.1.5 >running on Perl version 5.8.5 > > Oct 5 09:28:21 kady spamd[870]: Insecure dependency in `` while > running with -T switch at > /usr/local/perl-5.8.5/lib/site_perl/5.8.5/Sys/Hostname/Long.pm line > 91, line 77. > > any clues are appreciated ! -john > > -- > John Goubeaux > Systems Administrator > Gevirtz Graduate School of Education > UC Santa Barbara > Phelps Hall 3534 > 805 893-8190
Re: Spamassassin from CPAN and sa-update location.
On Fri, Oct 06, 2006 at 12:11:24PM -0400, Bowie Bailey wrote: > Lots of good stuff there, but nothing that specifically references the > /usr/share/spamassassin vs /var/lib/spamassassin question. Well, there is, though not directly as a "why local state dir instead of default rules dir" type question. Usually, this issue comes up when people ask about moving files from one location to the other, which is covered in the FAQ area: "After sa-update completes, do I have to move the files somewhere for them to be used?" However, about one versus the other ... The location used is specified quite a few times in the "Using sa-update" and "Installed Updates" sections, and I think it's pretty clear that it's designed that way. The FAQ question: "Should I use "--updatedir" to put updates in the default rules directory (ie: /usr/share/spamassassin), or the site rules directory (ie: /etc/mail/spamassassin)?" also talks about how there are two directories and they do different things. I think it makes sense, but then again I'm a bit biased about the whole thing. If someone feels they want to explain things in more detail, please feel free to update the wiki page (that is, after all, why it's a wiki page... ;)) -- Randomly Selected Tagline: "Having a firewall that allows NFS to the Internet is like having a seat belt that lets your head touch the dashboard." - Marcus Ranum pgp20ZjRVQd06.pgp Description: PGP signature
Re: Failing install - CPAN NET::DNS
On Fri, Oct 06, 2006 at 06:15:01PM +0200, Thomas Ericsson wrote: > Net::DNS, restarted SA. URIBL rules starting to hit, jipe! Still > som eproblems running sa-update though. Seems like i'm missing some > perl modules: > > admin# ./sa-update -D > Can't locate LWP/UserAgent.pm in @INC (@INC contains: /usr/local/lib/ You should read the INSTALL doc. It specifies the dependencies (though not the dependencies' dependencies, fyi.) -- Randomly Selected Tagline: Hermes: Baby needs a new pair of shoes! Zoidberg: To hell with your spoiled baby, I need those shoes. pgp3VxQCnDtRx.pgp Description: PGP signature
Change rule score
I would like to change the scores on the following. Could you tell me what file they are located in or how to modify the score? Thank you HOST_EQ_DSL HOST_EQ_DSL_ HOST_EQ_D_D_D_D HOST_EQ_PACBELL_DSL HOST_MISMATCH_NET I am running Redhat enterprise 4 with SpamAssassin 3.1.4 with the latest MailScanner -- This message has been scanned for viruses and dangerous content by the Yolo County Office of Education MailScanner, and is believed to be clean.
spamd Sys-Hostname-Long-1.4 error
I am getting the following error generated from spamd, apparently due to the fact that the sys::hostname::long module behaves differently on different OSs in this case Solaris 8. While i realize this is not specific to spmassassin and a perl /OS issue was wondering if anyone running SA on Solaris has seen and been able to eliminate this error? SpamAssassin version 3.1.5 running on Perl version 5.8.5 Oct 5 09:28:21 kady spamd[870]: Insecure dependency in `` while running with -T switch at /usr/local/perl-5.8.5/lib/site_perl/5.8.5/Sys/Hostname/Long.pm line 91, line 77. any clues are appreciated ! -john -- John Goubeaux Systems Administrator Gevirtz Graduate School of Education UC Santa Barbara Phelps Hall 3534 805 893-8190
Scripted Upgrade from 2.x to 3.x
Hello Everyone, Long time ago, a link to a script names sa3-upgrade.pl was posted at http://wiki.apache.org/spamassassin/UpgradeTo300. The link to the script is currently broken, so it's unavailable. Does anyone have this script and would like to share with me? It's time to do away with my 2.64. Thanks in advance. -Wash http://www.netmeister.org/news/learn2quote.html DISCLAIMER: See http://www.wananchi.com/bms/terms.php -- +==+ |\ _,,,---,,_ | Odhiambo Washington<[EMAIL PROTECTED]> Zzz /,`.-'`'-. ;-;;,_ | Wananchi Online Ltd. www.wananchi.com |,4- ) )-,_. ,\ ( `'-'| Tel: +254 20 313985-9 +254 20 313922 '---''(_/--' `-'\_) | GSM: +254 722 743223 +254 733 744121 +==+ It is not true that life is one damn thing after another -- it's one damn thing over and over. -- Edna St. Vincent Millay
Re: Failing install - CPAN NET::DNS
Just an update on this for reference. Tried to install the missing IO::Socket::INET6 first, did not pass tests either, then used the force flag on the DNS module, cpan -if Net::DNS, restarted SA. URIBL rules starting to hit, jipe! Still som eproblems running sa-update though. Seems like i'm missing some perl modules: admin# ./sa-update -D Can't locate LWP/UserAgent.pm in @INC (@INC contains: /usr/local/lib/ perl5/site_perl/5.8.1/darwin-2level /usr/local/lib/perl5/site_perl/ 5.8.1 /usr/local/lib/perl5/5.8.1/darwin-2level /usr/local/lib/ perl5/5.8.1 /usr/local/lib/perl5/site_perl) at ./sa-update line 79. BEGIN failed--compilation aborted at ./sa-update line 79. I'll check to see if LWP/UserAgent.pl installs Thomas 4 okt 2006 kl. 16.41 skrev Thomas Ericsson: Hi all Tried to install NET::DNS via CPAN to get my network tests going but get the following error report at the end: sudo cpan -i Net::DNS Running make test PERL_DL_NONLAZY=1 /usr/local/bin/perl "-MExtUtils::Command::MM" "- e" "test_harness(0, 'blib/lib', 'blib/arch')" t/*.t t/00-load..ok t/00-pod...skipped all skipped: Test::Pod v0.95 required for testing POD t/00-version...ok t/01-resolver-env..ok t/01-resolver-file.ok 7/8 skipped: Could not read configuration file t/01-resolver-opt..ok t/01-resolver..ok t/02-headerok t/03-question..ok t/04-packet-unique-pushok t/04-packetok t/05-rr-optok t/05-rr-rrsort.ok t/05-rr-sshfp..skipped all skipped: Digest::BubbleBabble not installed. t/05-rr-txtok t/05-rr-unknownok t/05-rrok t/06-updateok t/07-misc..ok t/08-onlineok 73/93 # Failed test 'Socket is ready' # in t/08-online.t at line 176. t/08-onlineok 93/93# Looks like you failed 1 test of 93. t/08-onlinedubious Test returned status 1 (wstat 256, 0x100) DIED. FAILED test 74 Failed 1/93 tests, 98.92% okay (less 3 skipped tests: 89 okay, 95.70%) t/09-tkey..ok t/10-recurse...ok t/11-escapedchars..# Using the XS compiled dn_expand function t/11-escapedchars..ok 96/141# # disabling XS based dns_expand for a moment. t/11-escapedchars..ok 99/141# # Continuing to use the XS based dn_expand() t/11-escapedchars..ok t/11-inet6.ok 10/11 skipped: Socket6 and or IO::Socket::INET6 not loaded Failed Test Stat Wstat Total Fail Failed List of Failed -- - t/08-online.t1 256931 1.08% 74 2 tests and 20 subtests skipped. Failed 1/24 test scripts, 95.83% okay. 1/1057 subtests failed, 99.91% okay. make: *** [test_dynamic] Error 2 /usr/bin/make test -- NOT OK Running make install make test had returned bad status, won't install without force Any tips on how to tweak to pass the test or do you think it is safe to use a bit of force? Could it be the missing IO::Socket::INET6? Setup: OSX 10.3.9, Communigate 4.2.8, CGPSA 1.4, SA 3.1.3 Thomas Ericsson _ Fido Film AB Stadsgården 17 SE-116 45 Stockholm T: int+46 (0)8 556 990 06 F: int+46 (0)8 556 990 01 http://www.fido.se _
RE: Spamassassin from CPAN and sa-update location.
Theo Van Dinter wrote: > On Fri, Oct 06, 2006 at 11:44:51AM -0400, Bowie Bailey wrote: > > > I suspect that one or the other behavior is actually wrong. > > > Either the CPAN method has a bad configuration script, or the > > > sa-update has never been matched to the configure script. > > > > Is this an FAQ yet? > > Yes, actually. http://wiki.apache.org/spamassassin/RuleUpdates Lots of good stuff there, but nothing that specifically references the /usr/share/spamassassin vs /var/lib/spamassassin question. -- Bowie
Re: Spamassassin from CPAN and sa-update location.
On Fri, Oct 06, 2006 at 11:44:51AM -0400, Bowie Bailey wrote: > > I suspect that one or the other behavior is actually wrong. Either > > the CPAN method has a bad configuration script, or the sa-update has > > never been matched to the configure script. > > Is this an FAQ yet? Yes, actually. http://wiki.apache.org/spamassassin/RuleUpdates :) -- Randomly Selected Tagline: "We all know engineers are way better than doctors because doctors can only kill people one at a time while engineers can send 600 to a 1000 people screaming into Mt. Rushmore at 300 to 400 knots." - Unknown pgpT6XDP9ndSi.pgp Description: PGP signature
Setup local rbl for my server
Hi Actually, i receive 750 000 mails/days on my server, for best performance, i have a local Dccd server and now i want put a local rbl .. Anyone know what is the best rbl list that i can mirror in local ? i can put more rbl list on my dns server ? and do you know if it's possible to create a personnal rbl list with email adress ? for sample: [EMAIL PROTECTED] request: spammeur.domaine.com.localrbl.int ? thanks bye
RE: Spamassassin from CPAN and sa-update location.
Bookworm wrote: > When I build SpamAssassin using the CPAN method, it installs the > test files (20_anti_ratware.cf and similar) in > /usr/share/spamassassin. > > However, sa-update shoves updates into > /var/lib/spamassassin/3.001005/updates_spamassassin_org (with extra > crap in /var/lib/spamassassin/3.001005/ ) > > I suspect that one or the other behavior is actually wrong. Either > the CPAN method has a bad configuration script, or the sa-update has > never been matched to the configure script. > > Either way, can anyone give me a suggestion on the best way to deal > with this issue? (Besides the fact that the CPAN should probably use > the same default site rules directory as sa-update?) Is this an FAQ yet? Both are correct. The default rules are installed in /usr/share/spamassassin these are created when you install/update spamassassin. Rules updated by sa-update are placed in /var/lib/spamassassin/(version)/. SA will use the updated rules if they exist. Otherwise, it uses the default rules. Best suggestion: Don't worry about it. It will work fine. -- Bowie
Re: Spamassassin from CPAN and sa-update location.
Hi Bookworm, There isn't a problem. This is exactly how it is designed to work. SA has an inbuilt order of checking for files, RTFM: http://spamassassin.apache.org/full/3.1.x/dist/doc/spamassassin.html#configuration Bookworm wrote: When I build SpamAssassin using the CPAN method, it installs the test files (20_anti_ratware.cf and similar) in /usr/share/spamassassin. However, sa-update shoves updates into /var/lib/spamassassin/3.001005/updates_spamassassin_org (with extra crap in /var/lib/spamassassin/3.001005/ ) I suspect that one or the other behavior is actually wrong. Either the CPAN method has a bad configuration script, or the sa-update has never been matched to the configure script. Either way, can anyone give me a suggestion on the best way to deal with this issue? (Besides the fact that the CPAN should probably use the same default site rules directory as sa-update?) Bookworm -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an idea and we exchange these ideas, then each of us will have two ideas." -- George Bernard Shaw
Spamassassin from CPAN and sa-update location.
When I build SpamAssassin using the CPAN method, it installs the test files (20_anti_ratware.cf and similar) in /usr/share/spamassassin. However, sa-update shoves updates into /var/lib/spamassassin/3.001005/updates_spamassassin_org (with extra crap in /var/lib/spamassassin/3.001005/ ) I suspect that one or the other behavior is actually wrong. Either the CPAN method has a bad configuration script, or the sa-update has never been matched to the configure script. Either way, can anyone give me a suggestion on the best way to deal with this issue? (Besides the fact that the CPAN should probably use the same default site rules directory as sa-update?) Bookworm
RE: On spamassassin usage, from an sa ignoramus
Chris Santerre wrote: > From: Bowie Bailey [mailto:[EMAIL PROTECTED] > > Loren Wilton wrote: > > > > So I started running fetchmail as a cron job from each mail > > > > server. This seems to work fine. What puzzles me is that I > > > > never saw this suggested anywhere. Am I missing some obvious > > > > alternative? > > > > > > Nope, this is a moderately standard way to do this. > > > Fetchmail->procmail->SA (spamc/spamd)->delivery stuff. > > > > > > It has been discussed, but not a lot. Most perople on the list > > > seem to be running Big Machines and would be on the feeding end > > > of the pop3 link, so they don't have much use fo r this sort of > > > solution. There are probably half a dozen perople (including > > > myself) on the list that do this. > > > > There may be more than you think. I do both. I've got a "Big > > Machine" (medium volume mail server) at work and I do > > Fetchmail->Maildrop->SA at home. > > IMHO I think its because most of us belive if you have to fetch the > spam, scan it localy, then you have already lost the battle by having > to waste resources to get the spam down to your machine. I realise > there are people who don't have a choice. Only thing you can do is > complain to your ISP. (The S in ISP is for Service. Most ISPs forget > that.) My ISP does provide spam filtering -- I just don't like it. It tends to be a bit too aggressive at times, is not configurable at all, and I have to log on to the webmail interface to check on it. With only two low volume mail users, the resource usage is minimal. By running Fetchmail->SA, I have full control over the filtering and deleting of messages and I can filter the spam into an IMAP folder that I can easily check with Thunderbird. -- Bowie
RE: Syslog gone?
Title: RE: Syslog gone? > -Original Message- > From: Loren Wilton [mailto:[EMAIL PROTECTED]] > Sent: Friday, October 06, 2006 4:15 AM > To: users@spamassassin.apache.org > Subject: Re: Syslog gone? > > > > /usr/local/bin/spamd -D -x -q -d -m 16 -r > /var/run/spamd.pid -i 127.0.0.1 > > -A 127.0.0.1 -u spamd -s mail.crit > > I can't answer your questions, but that -m 16 has me worried. > At around > 40-60 megs per child, that is using up a LOT of ram. Unless > you have a few > gigs spare on this machine I'd stick with the default of 5 > children until > you have things up and running moderately well, then > experiment with more if > necessary. LOL, thats the first thing that hit me as well! Sixteen!! Hope they got some big iron! --Chris
Re: dcc whiteclnt support broken in SA 3.1.x?
Justin Mason wrote: > Matt Kettler writes: > >> What's going on? What magic do I need to make whiteclnt work properly in >> a SA 3.1.x environment when using dccifd? >> > > er, I think it'd need to be implemented ;) > > The whole idea of manually whitelisting all the DCC FPs is anathema to the > SpamAssassin model -- instead we try to just accept the FPs and adjust the > score to cope. Hence we've never added support for whiteclnt. > > Of course, the advice on this very list is that if you're using DCC, you must make use of DCC whitelists for all your high-volume mailing lists. I've got some pretty significant problems where DCC is matching solicited commercial bulk mail. That same solicited commercial bulk mail are often already borderline in score, and the combination results in a FP. While it's difficult to get these guys to stop using things like broken HTML, third party hosting that's URIBLed, or third party sending service that's in SpamCop, I can affect the DCC processing. So I'm stuck with the alternative of whitelisting the whole sender in SA with whitelist_from_rcvd or def_whitelist_from_rcvd. Which is a little over-strong for this situation. That said, Paul seems to have env_from dcc whitelists working, so I'll have to delve further into my problem.
RE: On spamassassin usage, from an sa ignoramus
Title: RE: On spamassassin usage, from an sa ignoramus > -Original Message- > From: Bowie Bailey [mailto:[EMAIL PROTECTED]] > Sent: Friday, October 06, 2006 9:10 AM > To: users@spamassassin.apache.org > Subject: RE: On spamassassin usage, from an sa ignoramus > > > Loren Wilton wrote: > > > So I started running fetchmail as a cron job from each > mail server. > > > This seems to work fine. What puzzles me is that I never saw this > > > suggested anywhere. > > > Am I missing some obvious alternative? > > > > Nope, this is a moderately standard way to do this. > > Fetchmail->procmail->SA (spamc/spamd)->delivery stuff. > > > > It has been discussed, but not a lot. Most perople on the list seem > > to be running Big Machines and would be on the feeding end of the > > pop3 link, so they don't have much use fo r this sort of solution. > > There are probably half a dozen perople (including myself) on the > > list that do this. > > There may be more than you think. I do both. I've got a "Big > Machine" (medium volume mail server) at work and I do > Fetchmail->Maildrop->SA at home. IMHO I think its because most of us belive if you have to fetch the spam, scan it localy, then you have already lost the battle by having to waste resources to get the spam down to your machine. I realise there are people who don't have a choice. Only thing you can do is complain to your ISP. (The S in ISP is for Service. Most ISPs forget that.) Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com
RE: Low spam score but marqued as spam
I agree with you. I'll turn off this right now. I didn't know this and I realized I bother spamassassin mailing list for nothing, Sorry guys :-( Thanks for the answers Anthony and François. Note : it's stranger that when I use online web XBL checks result is negative (no match). And now mails received from my gateway, from the same user, the same smtp server, are not XBL positive. Strange huh ? > -Message d'origine- > De : Anthony Peacock [mailto:[EMAIL PROTECTED] > Envoyé : vendredi 6 octobre 2006 15:37 > À : users@spamassassin.apache.org > Objet : Re: Low spam score but marqued as spam > > Hi, > > François Rousseau wrote: > > I don't know MailScanner but maybe because they have found > the adress > > in a XBL list? > > > > "X-caliseo-MailScanner-SpamCheck: spam, SBL+XBL," > > > Yes, MailScanner can be configured to do the RBL lookups > itself and to mark messages on that basis (this is regardless > of the SA score). > > This can be configured on the MailScanner.conf file: > > # If a message appears in at least this number of "Spam > Lists" (as defined # above), then the message will be treated > as spam and so the "Spam # Actions" will happen, unless the > message reaches the levels for "High # Scoring Spam". By > default this is set to 1 to mimic the previous # behaviour, > which means that appearing in any "Spam Lists" will cause # > the message to be treated as spam. > # This can also be the filename of a ruleset. > Spam Lists To Be Spam = 1 > > > Personally I turn this off and let SA do its scoring. The > MailScanner settings are a little too cut and dried for my > taste. If I was to trust a RBL that much I would use it at > SMTP time anyway. > > > > > > > > > > 2006/10/6, Fabien GARZIANO <[EMAIL PROTECTED]>: > >> > >> Hi folks, > >> > >> I'm in trouble with 1 particular mail and in front of a > strange problem. > >> I got a mail which my spamassassin score 1.5 (the score > limit before > >> spam is identified is 5.2) but it tag it like spam anyway > >> > >> X-caliseo-MailScanner: Found to be clean > >> X-caliseo-MailScanner-SpamCheck: spam, SBL+XBL, SpamAssassin > >> (score=1.562, requis 5.8, BAYES_00 -2.60, HTML_90_100 0.02, > >> HTML_FONT_BIG 0.14, HTML_MESSAGE 0.00, HTML_NONELEMENT_00_10 0.00, > >> HTML_SHOUTING3 0.02, RCVD_IN_XBL 3.98) > >> X-caliseo-MailScanner-SpamScore: 1 > >> X-caliseo-MailScanner-From: [EMAIL PROTECTED] > >> X-Spam-Status: Yes > >> > >> SpamAssassin version 3.0.5 > >> running on Perl version 5.8.6 > >> > >> I can't find anything in the previous mails in here. And > google give > >> nothing. > >> Anyone got an idea ? > >> > >> -- > >> > >> F a b i e n G a r z i a n o > >> > > > > > -- > Anthony Peacock > CHIME, Royal Free & University College Medical School > WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ > "If you have an apple and I have an apple and we exchange > apples then you and I will still each have one apple. But > if you have an idea and I have an idea and we exchange these > ideas, then each of us will have two ideas." -- George Bernard Shaw >
Re: Low spam score but marqued as spam
Hi, François Rousseau wrote: I don't know MailScanner but maybe because they have found the adress in a XBL list? "X-caliseo-MailScanner-SpamCheck: spam, SBL+XBL," Yes, MailScanner can be configured to do the RBL lookups itself and to mark messages on that basis (this is regardless of the SA score). This can be configured on the MailScanner.conf file: # If a message appears in at least this number of "Spam Lists" (as defined # above), then the message will be treated as spam and so the "Spam # Actions" will happen, unless the message reaches the levels for "High # Scoring Spam". By default this is set to 1 to mimic the previous # behaviour, which means that appearing in any "Spam Lists" will cause # the message to be treated as spam. # This can also be the filename of a ruleset. Spam Lists To Be Spam = 1 Personally I turn this off and let SA do its scoring. The MailScanner settings are a little too cut and dried for my taste. If I was to trust a RBL that much I would use it at SMTP time anyway. 2006/10/6, Fabien GARZIANO <[EMAIL PROTECTED]>: Hi folks, I'm in trouble with 1 particular mail and in front of a strange problem. I got a mail which my spamassassin score 1.5 (the score limit before spam is identified is 5.2) but it tag it like spam anyway X-caliseo-MailScanner: Found to be clean X-caliseo-MailScanner-SpamCheck: spam, SBL+XBL, SpamAssassin (score=1.562, requis 5.8, BAYES_00 -2.60, HTML_90_100 0.02, HTML_FONT_BIG 0.14, HTML_MESSAGE 0.00, HTML_NONELEMENT_00_10 0.00, HTML_SHOUTING3 0.02, RCVD_IN_XBL 3.98) X-caliseo-MailScanner-SpamScore: 1 X-caliseo-MailScanner-From: [EMAIL PROTECTED] X-Spam-Status: Yes SpamAssassin version 3.0.5 running on Perl version 5.8.6 I can't find anything in the previous mails in here. And google give nothing. Anyone got an idea ? -- F a b i e n G a r z i a n o -- Anthony Peacock CHIME, Royal Free & University College Medical School WWW:http://www.chime.ucl.ac.uk/~rmhiajp/ "If you have an apple and I have an apple and we exchange apples then you and I will still each have one apple. But if you have an idea and I have an idea and we exchange these ideas, then each of us will have two ideas." -- George Bernard Shaw
How to monitor spamd works well or not?
Hello.. I have operated sendmail + procmail + SA at linux. and sometimes, it seems that SA doesn't work well. At that times, I can see so lots of procmail processes. But after spamd restart, SA works well... So is there any script or tool to monitor spamd works well or not. If spamd doesn't work well, I would like to restart spamd automatically. Thanks for your advice. _ MSN Messenger를 통해 온라인상에 있는 친구와 대화를 나누세요. http://messenger.msn.co.kr
Re: Low spam score but marqued as spam
I don't know MailScanner but maybe because they have found the adress in a XBL list?"X-caliseo-MailScanner-SpamCheck: spam, SBL+XBL," 2006/10/6, Fabien GARZIANO <[EMAIL PROTECTED]>: Hi folks,I'm in trouble with 1 particular mail and in front of a strange problem.I got a mail which my spamassassin score 1.5 (the score limit beforespam is identified is 5.2) but it tag it like spam anyway X-caliseo-MailScanner: Found to be cleanX-caliseo-MailScanner-SpamCheck: spam, SBL+XBL, SpamAssassin (score=1.562, requis 5.8, BAYES_00 -2.60, HTML_90_100 0.02, HTML_FONT_BIG 0.14, HTML_MESSAGE 0.00, HTML_NONELEMENT_00_10 0.00, HTML_SHOUTING3 0.02, RCVD_IN_XBL 3.98)X-caliseo-MailScanner-SpamScore: 1X-caliseo-MailScanner-From: [EMAIL PROTECTED]X-Spam-Status: Yes SpamAssassin version 3.0.5 running on Perl version 5.8.6I can't find anything in the previous mails in here. And google givenothing.Anyone got an idea ?--F a b i e n G a r z i a n o
RE: On spamassassin usage, from an sa ignoramus
Loren Wilton wrote: > > So I started running fetchmail as a cron job from each mail server. > > This seems to work fine. What puzzles me is that I never saw this > > suggested anywhere. > > Am I missing some obvious alternative? > > Nope, this is a moderately standard way to do this. > Fetchmail->procmail->SA (spamc/spamd)->delivery stuff. > > It has been discussed, but not a lot. Most perople on the list seem > to be running Big Machines and would be on the feeding end of the > pop3 link, so they don't have much use fo r this sort of solution. > There are probably half a dozen perople (including myself) on the > list that do this. There may be more than you think. I do both. I've got a "Big Machine" (medium volume mail server) at work and I do Fetchmail->Maildrop->SA at home. -- Bowie
Re: Syslog gone?
Well, I got my syslog back. Apparently, 3.1.6 no longer accepts facility in the form of "mail.crit" (facility + severity; 2.55 did). But using a single word facility like "debug" or some such works fine. Yep. Facility coding scheme changed about three releases back as best I recall. You might find 'info' more appropriate than debug. Loren
Low spam score but marqued as spam
Hi folks, I'm in trouble with 1 particular mail and in front of a strange problem. I got a mail which my spamassassin score 1.5 (the score limit before spam is identified is 5.2) but it tag it like spam anyway X-caliseo-MailScanner: Found to be clean X-caliseo-MailScanner-SpamCheck: spam, SBL+XBL, SpamAssassin (score=1.562, requis 5.8, BAYES_00 -2.60, HTML_90_100 0.02, HTML_FONT_BIG 0.14, HTML_MESSAGE 0.00, HTML_NONELEMENT_00_10 0.00, HTML_SHOUTING3 0.02, RCVD_IN_XBL 3.98) X-caliseo-MailScanner-SpamScore: 1 X-caliseo-MailScanner-From: [EMAIL PROTECTED] X-Spam-Status: Yes SpamAssassin version 3.0.5 running on Perl version 5.8.6 I can't find anything in the previous mails in here. And google give nothing. Anyone got an idea ? -- F a b i e n G a r z i a n o
RE: Syslog gone?
> -Original Message- > From: Loren Wilton [mailto:[EMAIL PROTECTED] > Sent: vrijdag 6 oktober 2006 10:16 > To: users@spamassassin.apache.org > Subject: Re: Syslog gone? > > > Well, I got my syslog back. Apparently, 3.1.6 no longer accepts facility in the form of "mail.crit" (facility + severity; 2.55 did). But using a single word facility like "debug" or some such works fine. - Mark
spf: no suitable relay for spf use found
When I "test" spamassassin setup by running "spamassassin -D --lint", I get these complaints about spf: [6100] dbg: spf: no suitable relay for spf use found, skipping SPF-helo check [6100] dbg: spf: no suitable relay for spf use found, skipping SPF check [6100] dbg: spf: cannot get Envelope-From, cannot use SPF [6100] dbg: spf: def_spf_whitelist_from: could not find useable envelope sender [6100] dbg: spf: spf_whitelist_from: could not find useable envelope sender Is it because I didn't feed spamassassin with an email containing headers, or is something broken with my setup? -- Tomasz Chmielewski http://wpkg.org
Re: dcc whiteclnt support broken in SA 3.1.x?
Matt Kettler writes:
> I recently have been fighting with making DCC work properly on a SA
> 3.1.x install.
>
> I have several high-volume mailing lists, that repeatedly hit DCC, so I
> did what every good DCC user should do. I added an "ok" for the envelope
> from to my whiteclnt file, make sure dccifd was using it, and reloaded
> dccifd.
>
> Next message from that list, still tagged by DCC.
>
> So I tried received, still no go.
>
> Looking at the code, the evelope_from will *never* work, because SA
> passes an empty string as the envelope sender in sub dccifd_lookup.
>
> # send the options and other parameters to the daemon
> $sock->print("header " . $opts . "\n") || dbg("dcc: failed write")
> && die; # options
> $sock->print($client . "\n") || dbg("dcc: failed write") && die; #
> client
> $sock->print($helo . "\n") || dbg("dcc: failed write") && die; #
> HELO value
> $sock->print("\n") || dbg("dcc: failed write") && die; # sender
> $sock->print("unknown\r\n") || dbg("dcc: failed write") && die; #
> recipients
> $sock->print("\n") || dbg("dcc: failed write") && die; # recipients
>
> However, the received one should work. in check_dcc, both the first
> external host and it's RDNS name are added to $client, so that should be
> getting to dccifd.
>
> What's going on? What magic do I need to make whiteclnt work properly in
> a SA 3.1.x environment when using dccifd?
er, I think it'd need to be implemented ;)
The whole idea of manually whitelisting all the DCC FPs is anathema to the
SpamAssassin model -- instead we try to just accept the FPs and adjust the
score to cope. Hence we've never added support for whiteclnt.
--j.
Re: Upgrading from SpamAssassin 2.55
Matt Kettler writes: > Mark wrote: > > Hello, > > > > I'm finally upgrading from SpamAssassin 2.55 (tweaked myself, over time) > > to 3.1.6. I have a few questions regarding this upgrade. > > > > In the "old" SA, I had a file called ConfSourceSQL.pm, which did the > > per-user stuff for MySQL. I cannot seem to find a similar file in > > function. I see BayesStore/MySQL.pm, but that's not what I'm looking for > > (I just want the file that retrieves the per-user MySQL settings). > > > > I also read somewhere that you can no longer parse the -u option to spamc. > > > Parse? or pass? You can still pass -u to spamc. That's not changed in > any way I'm aware of from 2.55 to 3.1.6. > > According to the docs you shouldn't use -u to cause spamc's environment > (ie: where ~/ is), but I say that's nothing but shenanigans. Your > version of spamassassin says the same thing. Check the spamc manpage on > your system.. > > The spamc docs have claimed -u is "semi obsoleted" and you should su > first for a very long time. In fact, the docs for this argument haven't > changed since at least 2.40. I say it's a crock. yep -- actually, we spotted that during 3.2.0 development and removed it ;) --j.
Re: Syslog gone?
/usr/local/bin/spamd -D -x -q -d -m 16 -r /var/run/spamd.pid -i 127.0.0.1 -A 127.0.0.1 -u spamd -s mail.crit I can't answer your questions, but that -m 16 has me worried. At around 40-60 megs per child, that is using up a LOT of ram. Unless you have a few gigs spare on this machine I'd stick with the default of 5 children until you have things up and running moderately well, then experiment with more if necessary. Loren
Re: 2 different scores?
X-Spam-Status: No, score=2.4 required=5.0 tests=HELO_DYNAMIC_HOME_NL,INFO_TLD, UNPARSEABLE_RELAY autolearn=no version=3.1.6 X-Spam-Status: Yes, score=20.2 required=5.0 tests=HELO_DYNAMIC_HOME_NL, INFO_TLD,RCVD_IN_SORBS_DUL,RCVD_IN_WHOIS_BOGONS,UNPARSEABLE_RELAY, URIBL_AB_SURBL,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SBL,URIBL_SC_SURBL autolearn=spam version=3.1.6 Any hints of what to look for as to why mail being received isn't The first case obviously isn't using network tests. -L on spamd startup? Permissions problem? Different usercode than what you ran the test under? Different home directory? I'd make a guess at the -L parameter as a first shot. Loren
Re: Message Vs Batch mode processing ..
On Tue, Oct 03, 2006 at 02:01:00PM -0400 or thereabouts, Theo Van Dinter wrote: > On Tue, Oct 03, 2006 at 08:59:08PM +1300, Adam Bogacki wrote: > > Thanks for the advice Theo .. I've registered with razor and am > > now reporting spam regularly and saving to folder 'Spam'. > > :) > > > However, I'm a bit frustrated having to do this 'message by message' with > > downloads averaging around 1-200. I am impressed that > > Sylpheed-Claws-GTK2 (with SA & ClamAV plugins) munches away at the > > whole downloaded batch and delivers it spam-free. > > > > I'd prefer to understand what is happening under the hood - could you > > point me in the direction of how I can do this via CLI with Mutt ? > > I'm not really sure what you're asking here. Doing batch processing isn't > hard with SpamAssassin, do something like: > > spamassassin --mbox messages.mbox > messages-out.mbox > > If you want to use spamc/spamd, you have to go per message since spamc only > understands single messages. Ala: > > formail -s spamc < messages.mbox > messages-out.mbox > > If you want SA to run over a message, and then have some filtering going on > (ie: spams to one folder, etc,) you'd have to do some kind of > formail/procmail thing to break a mailbox apart, process it through SA, then > filter it. > > -- > Randomly Selected Tagline: > "Al is a very busy person, as is most everyone else on helpdesk. They > might even be more busy than Microsoft engineers who have much higher > salaries, and have time for nerf gun battles and pillow fights in > the halls." - Paul English Sorry Theo, I think I owe you an apology, Running 'sylpheed-claws-gtk2 --receive --debug' I realised it was processing by message, not 'by batch'. Nevertheless your suggestion is worth pursuing - as soon as I work out why my procmail logs are not working. Cheers, Adam. -- Adam Bogacki, - email: afb(at)paradise.net.nz VoIP: sip:agike(at)ekiga.net [Zfone] Key: 0x4E553910 - DABB 4963 8973 7CCD 33C0 DC27 D7C5 F516 4E55 3910 Key Servers: hkp://pgp.mit.edu:1137 ldap://keyserver.pgp.com - signature.asc Description: Digital signature
Syslog gone?
Ok, nearly there. :) I start spamd 3.1.6 as follows: /usr/local/bin/spamd -D -x -q -d -m 16 -r /var/run/spamd.pid -i 127.0.0.1 -A 127.0.0.1 -u spamd -s mail.crit I get: [11581] dbg: logger: adding facilities: all [11581] dbg: logger: logging level is DBG [11581] dbg: logger: successfully opened file mail.crit [11581] dbg: logger: successfully added file method [11581] dbg: spamd: creating INET socket: [11581] dbg: spamd: Listen: 128 "successfully opened file mail.crit"?? Say what? :) I specified the syslog facility "mail.crit", not a file! Far as I can tell, -s is still used to set the syslog facility. How do I get SA to log to syslog again? These are more worrisome, though: Fri Oct 6 09:04:18 2006 [11583] dbg: prefork: new lowest idle kid: 11585 Fri Oct 6 09:04:18 2006 [11583] dbg: prefork: child reports idle Fri Oct 6 09:04:18 2006 [11583] info: prefork: child states: II Fri Oct 6 09:04:18 2006 [11585] dbg: prefork: sysread(7) not ready, wait max 300 secs Fri Oct 6 09:04:28 2006 [11586] dbg: prefork: periodic ping from spamd parent Fri Oct 6 09:04:28 2006 [11586] dbg: prefork: sysread(8) not ready, wait max 300 secs Fri Oct 6 09:04:28 2006 [11585] dbg: prefork: periodic ping from spamd parent Fri Oct 6 09:04:28 2006 [11585] dbg: prefork: sysread(7) not ready, wait max 300 secs That does not look good. What does it mean, and how can I solve it? Thanks, - Mark
