No imageinfo.pm score

2011-06-01 Thread Barry Kwok
I just found out that there is no ImageInfo plugin score in one of my
server. Spamassassin debug show:

Jun  1 17:46:50.229 [29338] dbg: config: fixed relative path:
/var/lib/spamassas
sin/3.003001/updates_spamassassin_org/20_imageinfo.cf
Jun  1 17:46:50.229 [29338] dbg: config: using
/var/lib/spamassassin/3.003001/u
pdates_spamassassin_org/20_imageinfo.cf for included file
Jun  1 17:46:50.229 [29338] dbg: config: read file
/var/lib/spamassassin/3.00300
1/updates_spamassassin_org/20_imageinfo.cf
..
...
..
..
Jun  1 17:47:08.197 [29338] dbg: imageinfo: image
ratio=0.000254277605525206, mi
n=0.000 max=0.008
Jun  1 17:47:08.197 [29338] dbg: rules: ran eval rule __DC_IMG_TEXT_RATIO
==
 got hit (1)


But there is no DC_IMG_TEXT_RATIO score.

I test the same spam in other server and have DC_IMG_TEXT_RATIO score.
I compare the debug log and can't see the difference.


--barry


Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Pat Traynor

Here's my situation:  I lease a host from a provider.  They initially
did all my setup, and I do the simple maintenance I need.  A short time
ago, the spam increased dramatically.  Others on this list reported it,
and a common suggested problem was that the installed Spamassassin was
badly out of date.  Mine is 3.0.4, and I probably fall into that
category.

I called my co-hosting provider and asked to have Spamassassin upgraded.
They told me that to do this would require an upgrade to my Fedora core,
which would require an upgrade to this, and to that, and I'd then need
to reinstall those...  Bottom line is that the whole ordeal will cost
me thousands of dollars, which I simply don't have.  My gut feeling is
that a SA upgrade *could* be done, but they see an opportunity to get
some cash out of me, and they know they've got me by the short hairs.

I do a lot of my own installations without any problem, but the thing is
that I've got a couple dozen customers using Spamassassin, and if I
crash and burn on the upgrade, it won't be a pretty situation.  So...

I was wondering if it's possible to install an alternate version of
Spamassassin and verify that it's working properly before burning my
bridge on the outdated (but working) version I've currently got
installed.

Thanks for any advice.

--pat--
--
Pat Traynor
p...@ssih.com


Re: No imageinfo.pm score

2011-06-01 Thread Yet Another Ninja

On 2011-06-01 12:42, Barry Kwok wrote:

I just found out that there is no ImageInfo plugin score in one of my
server. Spamassassin debug show:

Jun  1 17:46:50.229 [29338] dbg: config: fixed relative path:
/var/lib/spamassas
sin/3.003001/updates_spamassassin_org/20_imageinfo.cf
Jun  1 17:46:50.229 [29338] dbg: config: using
/var/lib/spamassassin/3.003001/u
pdates_spamassassin_org/20_imageinfo.cf for included file
Jun  1 17:46:50.229 [29338] dbg: config: read file
/var/lib/spamassassin/3.00300
1/updates_spamassassin_org/20_imageinfo.cf
..
...
..
..
Jun  1 17:47:08.197 [29338] dbg: imageinfo: image
ratio=0.000254277605525206, mi
n=0.000 max=0.008
Jun  1 17:47:08.197 [29338] dbg: rules: ran eval rule __DC_IMG_TEXT_RATIO
==

got hit (1)



But there is no DC_IMG_TEXT_RATIO score.

I test the same spam in other server and have DC_IMG_TEXT_RATIO score.
I compare the debug log and can't see the difference.


__DC_IMG_TEXT_RATIO is used by the meta DC_IMAGE_SPAM_TEXT

Per default there is no DC_IMG_TEXT_RATIO rule scoring unless you've set 
a score manually


Pls paste the sample message on pastebin.com and let others compare results


Re: Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Mihamina Rakotomandimby
 On Wed, 1 Jun 2011 07:22:05 -0400 (EDT)
 Pat Traynor p...@ssih.com wrote:
 I was wondering if it's possible to install an alternate version of
 Spamassassin and verify that it's working properly before burning my
 bridge on the outdated (but working) version I've currently got
 installed.

It possible.

But this, of course, depends on your skills.
For example, if you ever need a newer Perl library/module, you will also
need to install it.

Why wont you try on a Virtual machine first?
Install the old Fedora and try it out.

That said, depending how Spamassassin is called, you will have it
working or not.

On some servers, the MTA directly submit to Spamassassin (via network
or not) with no possibility for a user to change the paremeters (path
or port), so you could also run into that problem.

-- 
RMA.


Re: Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Pat Traynor

On Wed, 1 Jun 2011, Mihamina Rakotomandimby wrote:


It possible.

But this, of course, depends on your skills.
For example, if you ever need a newer Perl library/module, you will also
need to install it.


My perl installation is at the latest version as of about a month ago
(5.3.12), and I'm comfortable installing modules.


Why wont you try on a Virtual machine first?
Install the old Fedora and try it out.


Well, THAT is probably well beyond my capabilities - getting a server
completely installed to the point of it accepting outside mail.

Thanks for the ideas!

--pat--
--
Pat Traynor
p...@ssih.com


Re: Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Mihamina Rakotomandimby
 On Wed, 1 Jun 2011 07:37:46 -0400 (EDT)
 Pat Traynor p...@ssih.com wrote:

  Why wont you try on a Virtual machine first?
  Install the old Fedora and try it out.
 Well, THAT is probably well beyond my capabilities - getting a server
 completely installed to the point of it accepting outside mail.

Pat, you just need to telnet virtual-server 25, and test several
deliveries.
Nothing beyound :-)

-- 
RMA.


Re: Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Michael Scheidell

On 6/1/11 7:37 AM, Pat Traynor wrote:

My perl installation is at the latest version as of about a month ago
(5.3.12), and I'm comfortable installing modules.


I believe for current versions of SA, the minimum perl is 5.8.8

and, the modules, especially the sha and crypt modules need to be 
installed all together.  you will need to install newer dkim and spf 
modules.


untar SA, and look at the install and readme's for dependencies.



--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
*| *SECNAP Network Security Corporation

   * Best Mobile Solutions Product of 2011
   * Best Intrusion Prevention Product
   * Hot Company Finalist 2011
   * Best Email Security Product
   * Certified SNORT Integrator

__
This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.secnap.com/products/spammertrap/
__  


Re: Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Pat Traynor

On Wed, 1 Jun 2011, Michael Scheidell wrote:


On 6/1/11 7:37 AM, Pat Traynor wrote:

My perl installation is at the latest version as of about a month ago
(5.3.12), and I'm comfortable installing modules.


I believe for current versions of SA, the minimum perl is 5.8.8


See, this is why I really shouldn't be left alone in front of a keyboard.
My perl installation is 5.12.3, NOT 5.3.12.  Sigh...

--pat--
--
Pat Traynor
p...@ssih.com


Re: Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Michael Scheidell


On 6/1/11 8:43 AM, Pat Traynor wrote:


See, this is why I really shouldn't be left alone in front of a keyboard.
My perl installation is 5.12.3, NOT 5.3.12.  Sigh...

it should be 'safe' to backup the ../site_perl* and ../lib/perl5* 
libraries, and try to upgrade the perl modules first.  newer pm's SHOULD 
work with old SA.


look at upgrading file and tar/pax as well.



--pat--


--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
*| *SECNAP Network Security Corporation

   * Best Mobile Solutions Product of 2011
   * Best Intrusion Prevention Product
   * Hot Company Finalist 2011
   * Best Email Security Product
   * Certified SNORT Integrator


__
This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.secnap.com/products/spammertrap/

__  

Re: Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Pat Traynor

On Wed, 1 Jun 2011, Michael Scheidell wrote:



On 6/1/11 8:43 AM, Pat Traynor wrote:


See, this is why I really shouldn't be left alone in front of a keyboard.
My perl installation is 5.12.3, NOT 5.3.12.  Sigh...

it should be 'safe' to backup the ../site_perl* and ../lib/perl5* libraries, 
and try to upgrade the perl modules first.  newer pm's SHOULD work with old 
SA.


look at upgrading file and tar/pax as well.


Sounds good.  I'll look into that and tread carefully.

--pat--
--
Pat Traynor
p...@ssih.com


Re: Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Bowie Bailey
On 6/1/2011 7:22 AM, Pat Traynor wrote:
 Here's my situation:  I lease a host from a provider.  They initially
 did all my setup, and I do the simple maintenance I need.  A short time
 ago, the spam increased dramatically.  Others on this list reported it,
 and a common suggested problem was that the installed Spamassassin was
 badly out of date.  Mine is 3.0.4, and I probably fall into that
 category.

 I called my co-hosting provider and asked to have Spamassassin upgraded.
 They told me that to do this would require an upgrade to my Fedora core,
 which would require an upgrade to this, and to that, and I'd then need
 to reinstall those...  Bottom line is that the whole ordeal will cost
 me thousands of dollars, which I simply don't have.  My gut feeling is
 that a SA upgrade *could* be done, but they see an opportunity to get
 some cash out of me, and they know they've got me by the short hairs.

Sounds like they're looking for money.  SA is dependent on Perl and a
bunch of modules, but if you are already at 5.12 as you mentioned in a
later post, there should be nothing stopping you from upgrading SA. 
This upgrade should take a couple of hours at most.  This is definitely
not something that should cost thousands of dollars and require you to
upgrade everything.

 I do a lot of my own installations without any problem, but the thing is
 that I've got a couple dozen customers using Spamassassin, and if I
 crash and burn on the upgrade, it won't be a pretty situation.  So...

 I was wondering if it's possible to install an alternate version of
 Spamassassin and verify that it's working properly before burning my
 bridge on the outdated (but working) version I've currently got
 installed.

That could be a bit tricky.  You would have to upgrade the required Perl
modules first (which *shouldn't* cause a problem with the old SA
version).  Then you could install the new SA in your local directory and
call it directly from there with some test mail files to verify that it
is working.  However, you would probably then want to re-install it into
the system directories to be used by the server.

In-place upgrades have never been a problem for me.  I generally install
the new version while the old version is still up and running.  Then I
just restart spamd to activate the new stuff.  Since spamd reads
everything into memory when it starts, it doesn't really matter that the
files are changing while it is running.  Sure, it is possible for this
to cause problems, but I've been doing it for years now with no issues. 
That being said, I've been following the current versions pretty closely
and have never tried to jump as far as 3.0.4 to 3.3.1.  There may be
some incompatibilities with the Bayes DB format and there may also be
some changes in the configuration keywords, but your testing should be
able to catch those easily enough before you try to go live.

Try to install it the same way it was installed originally (rpm, CPAN,
source?) to cut down on the problems with having different versions
installed in different places. 

-- 
Bowie




How to change a database (configuration)

2011-06-01 Thread monolit

Hello,
 I am a newbie in using Spamassassin. I need your help as for configuration
of spamassasin. I use Debian Lenny Spamassassin 3.2.5 and I want to change
database from Berkeley DB to SDBM (because this database was recommended me
on this forum).

1) I have to dump Berkeley DB a then import it as a SDBM.
2) I have to change configuration Spamassassin - set SDBM as a work database
now.

I found a guide how to change database, but I doesnt exactly understand what
I have to do.
The guide:
http://wiki.mailscanner.info/doku.php?id=documentation:anti_spam:spamassassin:bayes:sdbm


Could you give me a clue?

Thanks a lot.



-- 
View this message in context: 
http://old.nabble.com/How-to-change-a-database-%28configuration%29-tp31749051p31749051.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: No imageinfo.pm score

2011-06-01 Thread Barry Kwok
On Wed, Jun 1, 2011 at 7:27 PM, Yet Another Ninja axb.li...@gmail.comwrote:

 On 2011-06-01 12:42, Barry Kwok wrote:

 I just found out that there is no ImageInfo plugin score in one of my
 server. Spamassassin debug show:

 Jun  1 17:46:50.229 [29338] dbg: config: fixed relative path:
 /var/lib/spamassas
 sin/3.003001/updates_spamassassin_org/20_imageinfo.cf
 Jun  1 17:46:50.229 [29338] dbg: config: using
 /var/lib/spamassassin/3.003001/u
 pdates_spamassassin_org/20_imageinfo.cf for included file
 Jun  1 17:46:50.229 [29338] dbg: config: read file
 /var/lib/spamassassin/3.00300
 1/updates_spamassassin_org/20_imageinfo.cf
 ..
 ...
 ..
 ..
 Jun  1 17:47:08.197 [29338] dbg: imageinfo: image
 ratio=0.000254277605525206, mi
 n=0.000 max=0.008
 Jun  1 17:47:08.197 [29338] dbg: rules: ran eval rule __DC_IMG_TEXT_RATIO
 ==

 got hit (1)



 But there is no DC_IMG_TEXT_RATIO score.

 I test the same spam in other server and have DC_IMG_TEXT_RATIO score.
 I compare the debug log and can't see the difference.


 __DC_IMG_TEXT_RATIO is used by the meta DC_IMAGE_SPAM_TEXT

 Per default there is no DC_IMG_TEXT_RATIO rule scoring unless you've set a
 score manually

 Pls paste the sample message on pastebin.com and let others compare
 results



I have manually set a score for __DC_IMG_TEXT_RATIO but there still no
score.

here is a sample spam messages:

http://pastebin.com/T2rszLgJ


Re: No imageinfo.pm score

2011-06-01 Thread John Hardin

On Wed, 1 Jun 2011, Barry Kwok wrote:


I have manually set a score for __DC_IMG_TEXT_RATIO but there still no
score.


Subrules (rules whose names begin with two underscores) _cannot_ have a 
score assigned to them, as they do not by themselves contribute to the 
message's score. They are combined with other rules in meta rules which, 
if not also named with two leading underscores, may be assigned a score.


Look to see what meta rules __DC_IMG_TEXT_RATIO appears in. Are those 
rules listed as hits in your log? Are those rules assigned scores that 
make sense?


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Mine eyes have seen the horror of the voting of the horde;
  They've looted the fromagerie where guv'ment cheese is stored;
  If war's not won before the break they grow so quickly bored;
  Their vote counts as much as yours.  -- Tam
---
 5 days until the 67th anniversary of D-Day


Re: No imageinfo.pm score

2011-06-01 Thread Barry Kwok
On Wed, Jun 1, 2011 at 11:31 PM, John Hardin jhar...@impsec.org wrote:

 On Wed, 1 Jun 2011, Barry Kwok wrote:

  I have manually set a score for __DC_IMG_TEXT_RATIO but there still no
 score.


 Subrules (rules whose names begin with two underscores) _cannot_ have a
 score assigned to them, as they do not by themselves contribute to the
 message's score. They are combined with other rules in meta rules which, if
 not also named with two leading underscores, may be assigned a score.

 Look to see what meta rules __DC_IMG_TEXT_RATIO appears in. Are those rules
 listed as hits in your log? Are those rules assigned scores that make sense?

 --
  John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
  jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
 ---
  Mine eyes have seen the horror of the voting of the horde;
  They've looted the fromagerie where guv'ment cheese is stored;
  If war's not won before the break they grow so quickly bored;
  Their vote counts as much as yours.  -- Tam
 ---
  5 days until the 67th anniversary of D-Day


Thanks. I manually create a meta rule set a score. Spamassassin now hits.


--barry


Re: Can I install upgraded Spamassassin without uninstalling old?

2011-06-01 Thread Benny Pedersen
On Wed, 1 Jun 2011 08:47:28 -0400, Michael Scheidell
michael.scheid...@secnap.com wrote:
 it should be 'safe' to backup the ../site_perl* and ../lib/perl5*
 libraries, and try to upgrade the perl modules first. newer pm's SHOULD
 work with old SA.

it will just be unsafe to restore it, correct way to upgrade is with rpms
if installed that way, missing latest spamassassin, make a bug on your
distro

by not doing this one learns more if it fails