Re: How do I get delisted from SORBS? [OT]
corpus.defero wrote: On Fri, 2010-10-08 at 20:13 +0200, Per Jessen wrote: corpus.defero wrote: On Thu, 2010-10-07 at 08:56 -1000, Alexandre Chapellon wrote: Indeed no IP should be blacklisted undefinitely... at least without checking regularily. I don't agree. An IP that hops on and off lists should stay ON until the blocklist operator is satisfied that no further abuse will come from it. How does that differ from what Alexandre said? It differs because I am saying they *should* remain listed forever. Actually, as far as I can tell, you said until the blocklist operator is satisfied that no further abuse will come from it which is clearly not forever. Personally if I were running the show I'd seek a large deposit to remove an IP and any repeat would result in the loss of that deposit with no further chance to remove the IP until it was clearly and demonstrably reassigned. I doubt if a list with such a policy would be of much interest to anyone. Just my opinion, of course. /Per Jessen, Zürich
Re: How do I get delisted from SORBS? [OT]
On Sat, 2010-10-09 at 15:58 +0200, Per Jessen wrote: corpus.defero wrote: On Fri, 2010-10-08 at 20:13 +0200, Per Jessen wrote: corpus.defero wrote: On Thu, 2010-10-07 at 08:56 -1000, Alexandre Chapellon wrote: Indeed no IP should be blacklisted undefinitely... at least without checking regularily. I don't agree. An IP that hops on and off lists should stay ON until the blocklist operator is satisfied that no further abuse will come from it. How does that differ from what Alexandre said? It differs because I am saying they *should* remain listed forever. Actually, as far as I can tell, you said until the blocklist operator is satisfied that no further abuse will come from it which is clearly not forever. No, in my clarification I have been precise and clear and said: I am saying they *should* remain listed forever Really, I cannot be any more exact than that. This is all OT for a Spamassassin. If you want to bitch about blocklists why not do it on SPAM-L or at NANAE?
Re: How do I get delisted from SORBS? [OT]
corpus.defero wrote: This is all OT for a Spamassassin. If you want to bitch about blocklists why not do it on SPAM-L or at NANAE? I'm not bitching about anything. /Per Jessen, Zürich
spamc sometimes complains MISSING_MID sometimes not with same message
The question is: Has anyone seen unpredictable and different results when processing the same message? The operative part of the script is: #first run use echo setting aside user_prefs, running with system wide values mv ~/.spamassassin/user_prefs ~/.spamassassin/user_prefss cp ~/.spamassassin/user_prefs.rptonly ~/.spamassassin/user_prefs grep -iv X-SPAM $1 | spamc $1.o grep X-Spam $1.o grep -A14 pts rule name $1.oo|grep -v \-\-\-\- #second run. use all MY prefs mv -f ~/.spamassassin/user_prefss ~/.spamassassin/user_prefs grep -iv X-SPAM $1 | spamc $1.oo grep X-Spam $1.oo grep -A13 pts rule name $1.oo |grep -v \-\-\-\- where user_prefs.rptonly contains add_header all report _REPORT_ add_header all testscores _TESTSSCORES(,)_ I run the script multiple times and get unpredictable results regarding the appearance of MISSING_MID. Thank you, Dennis German Hello world, goodnight moon
Re: spamc sometimes complains MISSING_MID sometimes not with same message
On 10/9/10 11:35 AM, Dennis German wrote: The question is: Has anyone seen unpredictable and different results when processing the same message? Sure. if your setup is messed up, you will get unpredictable results. -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 ISN: 1259*1300 *| *SECNAP Network Security Corporation * Certified SNORT Integrator * 2008-9 Hot Company Award Winner, World Executive Alliance * Five-Star Partner Program 2009, VARBusiness * Best in Email Security,2010: Network Products Guide * King of Spam Filters, SC Magazine 2008 __ This email has been scanned and certified safe by SpammerTrap(r). For Information please see http://www.secnap.com/products/spammertrap/ __
Re: spamc sometimes complains MISSING_MID ... NOT...
There is at least one problem with my script, NOT spamassassin. I did not expect the results to be in different order. The grep -A14 'pts rule name' may not display all the errors. Sorry 'bout that. Dennis
Re: spamc sometimes complains MISSING_MID sometimes not with same message
On Sat, 2010-10-09 at 11:35 -0400, Dennis German wrote:
The question is: Has anyone seen unpredictable and different results
when processing the same message?
No.
The operative part of the script is:
#first run use
echo setting aside user_prefs, running with system wide values
mv ~/.spamassassin/user_prefs ~/.spamassassin/user_prefss
cp ~/.spamassassin/user_prefs.rptonly ~/.spamassassin/user_prefs
grep -iv X-SPAM $1 | spamc $1.o
grep X-Spam $1.o
Your grepping is broken. You're not limiting the pattern at the
beginning of a line, and more importantly don't account for multi-line
headers. This can result in a lot of strange things.
Formail is your friend. To correctly extract all X-Spam headers, use
formail -X, and to remove them use -I instead of -X.
formail -X X-Spam $msg
However, there is no need to remove SA headers before processing it a
second time with SA. SA ignores these.
grep -A14 pts rule name $1.oo|grep -v \-\-\-\-
What if there are more lines??
I run the script multiple times and get unpredictable results regarding
the appearance of MISSING_MID.
Yeah, I can see that happening with a script like the above. :)
--
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128 (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: spamc sometimes complains MISSING_MID sometimes not with same message
On Sat, 2010-10-09 at 11:35 -0400, Dennis German wrote:
#first run use
echo setting aside user_prefs, running with system wide values
mv ~/.spamassassin/user_prefs ~/.spamassassin/user_prefss
cp ~/.spamassassin/user_prefs.rptonly ~/.spamassassin/user_prefs
grep -iv X-SPAM $1 | spamc $1.o
grep X-Spam $1.o
grep -A14 pts rule name $1.oo|grep -v \-\-\-\-
^
This greps in the previous second run's output, NOT this first one's.
#second run. use all MY prefs
mv -f ~/.spamassassin/user_prefss ~/.spamassassin/user_prefs
grep -iv X-SPAM $1 | spamc $1.oo
grep X-Spam $1.oo
grep -A13 pts rule name $1.oo |grep -v \-\-\-\-
--
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128 (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: spamc sometimes complains MISSING_MID ..NOT...
Please keep list posts on-list.
On Sat, 2010-10-09 at 12:27 -0400, Dennis German wrote:
Formail is your friend. To correctly extract all X-Spam headers, use
formail -X, and to remove them use -I instead of -X.
formail -X X-Spam $msg
However, there is no need to remove SA headers before processing it a
second time ...
I processed the same input file each time.
I don't see how that changes the need to remove X-Spam headers. There
still is no need to.
grep -A14 pts rule name $1.oo|grep -v \-\-\-\-
What if there are more lines?
That's the problem since the report lines do not always come in the same
order.
Thanks for the info on formail.
Just goes to show how helpful others can be if you can just ask.
Ask, and provide all relevant info. ;) This one was much better than
your first attempt (which was terribly confusing), because it included
the way you're post-processing, enabling us to reproduce or understand
the issue.
As a side-note, you may want to consider using 'spamassassin' with the
--cf or --prefs-file options, defining single config lines ad-hoc and
completely switching user_prefs files respectively. Slower than using
spamc, but gets rid of the nasty mv orgy to switch user_prefs.
--
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128 (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Bbedit SA syntax highlighting
Does anybody have or know of SA syntax (highlighting) definition for BBedit (Mac) ? If yes, would you share? Thanks
