SA 3.3 w/MailScanner

2010-02-04 Thread Noel Butler
Hi, 

Is anyone else using this combination, and who uses "attachment" to, in
particular for low score spam, seeing
no results in the initial warning.txt, as ...

(no report template found)
instead of the SA report?

If you do, I ask you to report it if you're on mailscanner list, as I am
unable to.
This seemed to stop working for us on my own pvt server and a corporate
one that I upgraded to 3.3
on SA 3.2 servers it works fine still.

Yes self appointed list cops, I know this is not a SA issue,  but it
involves it  :) and as stated I am unable to
communicate with them or JKF.




Re: Different DCC outputs

2010-02-04 Thread Chris
On Thu, 2010-02-04 at 19:03 -0600, Chris wrote:
> Just noticed this in a spam:
> 
> 2.2 DCC_CHECK  listed in DCC
> (http://rhyolite.com/anti-spam/dcc/)
> -0.0 DCC_CHECK_NEGATIVE Not listed in DCC
> 
> Could this be just a fluke or should I check something?
> 

I guess I neglected to mention that this is SA 3.3.0

-- 
KeyID 0xE372A7DA98E6705C



signature.asc
Description: This is a digitally signed message part


Different DCC outputs

2010-02-04 Thread Chris
Just noticed this in a spam:

2.2 DCC_CHECK  listed in DCC
(http://rhyolite.com/anti-spam/dcc/)
-0.0 DCC_CHECK_NEGATIVE Not listed in DCC

Could this be just a fluke or should I check something?

-- 
KeyID 0xE372A7DA98E6705C



signature.asc
Description: This is a digitally signed message part


Re: howto stop scanning

2010-02-04 Thread Kai Schaetzl
Christoph Lehmann wrote on Thu, 04 Feb 2010 22:57:09 +0100:

> is there a simple way to stop further checks after achieving a specified 
> number of points?

search the documentation for shortcircuit. However, be aware that this may 
lead to more false positives. SA is not a spam detector, it is a spam *and* 
ham detector. If you shortcircuit you may not get some ham scores that come 
in too late.

Kai

-- 
Get your web at Conactive Internet Services: http://www.conactive.com





Re: howto stop scanning

2010-02-04 Thread Mathias Homann
Am Donnerstag 04 Februar 2010 schrieb Christoph Lehmann:
> Hey List,
> 
> is there a simple way to stop further checks after achieving a
>  specified number of points?


I don't think that would make sense, since the later checks might 
actually bring the total down.

just imagine the whitelist_from check being applied after everything 
else.


bye,
MH


sa-update cron gives ouput like errors

2010-02-04 Thread Muzammel Asghar
Hi Guys iam using SpamAssassin Server version 3.3.0, on Fedora Core 11,
default rpm of FC, i have only one problem when default install sa-update
cron runs, its gives below output on every run.

Waiting for the process [3822] to terminate
Daemon [3822] terminated by SIGTERM

process and dameons [*] ids are different on each run, its runs on daily
basis, and after update to above version continously same above output comes
in logs. Below is the command run in cron

/usr/share/spamassassin/sa-
update.cron 2>&1 | tee -a /var/log/sa-update.log

I can verify in debug mode, no error and updates are also applied first time
but i dont know why above output comes every time in log, I want to confirm
is this ok ? or some problem in cron running for update spam databases ?.

Kindly confirm please.

Thanks


howto stop scanning

2010-02-04 Thread Christoph Lehmann

Hey List,

is there a simple way to stop further checks after achieving a specified 
number of points?


Thanks,
Christoph

--
Christoph Lehmann
Dr. Ralf Schwedler e.K. Amtsgericht Pinneberg, HRA 5609 PI
Internet / Sicherheit   Bankverbindung:
   Sparkasse Westholstein
Steinbrückstrasse 13b   BLZ 222 500 20
25524 Itzehoe, Germany  Konto-Nr. 11 00 84 323
T +49 4821 40 87 58 International Account Number
 0700-SCHWEDLERIBAN DE05 2225 0020 0110 0843 23
F +49 4821 40 87 59 BIC HSHNDEH1IZH

www.schwedler.com   Steuer-Nr. 18019 34593
lehm...@schwedler.com   USt.-Id. DE 214230181


Re: FH_DATE_PAST_20XX

2010-02-04 Thread jdow

Run saupdate. The rule has been changed.

{^_^}
- Original Message - 
From: "twofers" 

To: 
Sent: Thursday, 2010/February/04 04:06
Subject: FH_DATE_PAST_20XX


I think I started getting this config error again during sa-update a couple 
of days ago. I thought it had gone away but now it seems it is back. I 
haven't done anything or changed anything at all outside of sa-update run 
by a cron.


I run spamassassin --lint and there are no errors.

The cron reports:
config: warning: score set for non-existent rule FH_DATE_PAST_20XX

channel: lint check of update failed, channel failed

My local.cf doesn't have any reference to FH_DATE_PAST_20XX in it.

Any ideas?

Thanks,

Wes








FH_DATE_PAST_20XX

2010-02-04 Thread twofers
I think I started getting this config error again during sa-update a couple of 
days ago. I thought it had gone away but now it seems it is back. I haven't 
done anything or changed anything at all outside of sa-update run by a cron.

I run spamassassin --lint and there are no errors.

The cron reports:
config: warning: score set for non-existent rule FH_DATE_PAST_20XX

channel: lint check of update failed, channel failed

My local.cf doesn't have any reference to FH_DATE_PAST_20XX in it.

Any ideas?

Thanks,

Wes


  


Set the obligatory report methods?

2010-02-04 Thread Kārlis Repsons
Hi again,
[hopefully that is not- or documented somewhere deep]
presumably, when all spam reporting methods have failed, I get this warning: 
"warn: spamassassin: warning, unable to report message". 
My question: is there some way to set the obligatory report methods, missing 
any of which would result in an error return value (for example, when 
pyzor/razor failed because I had a heavily loaded router, but other methods 
didn't)?


signature.asc
Description: This is a digitally signed message part.


update the wiki?

2010-02-04 Thread Kārlis Repsons
People,
in trying to set up Razor2 sitewide, I found some things, which were not so 
good about the wikipage [1]. As per me, it would be this way (and it works):


I What was wrong

1. no need calling razor-client
2. no need to touch /etc/spamassassin, just /etc/spamassassin/.razor
3. cd .razor && chmod g+rw *

(first two cause some small confusion, but the last one took me digging through 
logfiles)

+ better razorhome = /etc/mail/spamassassin/.razor
not razorhome = /etc/mail/spamassassin/.razor/
!


II The instructions to set Razor up sitewide:

razor-admin -home=/etc/mail/spamassassin/.razor -register
razor-admin -home=/etc/mail/spamassassin/.razor -create
razor-admin -home=/etc/mail/spamassassin/.razor -discover

groupadd -g 812 spam-reporters
usermod -a -G spam-reporters myuser
cd /etc/mail/spamassassin/.razor
chmod g+rws .
chmod g+rw *
add to /etc/mail/spamassassin/local.cf: razor_config 
/etc/mail/spamassassin/.razor/razor-agent.conf
add to /etc/mail/spamassassin/.razor/razor-agent.conf: razorhome = 
/etc/mail/spamassassin/.razor
change into /etc/mail/spamassassin/.razor/razor-agent.conf: debuglevel  
   = 1  # or you will have to treat that log seriously! Frankly, it presented 
me with lots of what I don't care about, but 
made no priority about failed report logging in my case.

That was all... I might have made some mistake, as I just wrote from memory!


Its not clear to me in what cases should "-C /etc/mail/spamassassin" be added 
to calling spamassassin. Maybe /etc/mail/spamassassin is in some default path?
(as it works without "-C .." for me)


[1] http://wiki.apache.org/spamassassin/RazorSiteWide


signature.asc
Description: This is a digitally signed message part.