Re: MySQL bayes setup question
On 6/14/2011 12:10 PM, Dave Wreski wrote: Marc, You can also find the readme for sql support there, or check out: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/README.bayes It's quite easy to setup and get running. I can't seem to find the bayes_mysql.sql file anywhere. Depending on your distribution it could be in a number of places. You could try a: find / -name bayes_mysql.sql If you have svn installed you can download it via svn. You can also download it with wget (or view in browser) directry via: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/bayes_mysql.sql From there it's as easy an configuring your local.cf to use Bayes SQL and creating the tables in mysql. Don't forget to backup your existing bayes tokens and such before doing any changes. You can later restore that backup to Mysql so you don't lose any training. Thanks - that's what I was looking for. You might also find this helpful: http://www200.pair.com/mecham/spam/debian-spamassassin-sql.html Regards, Dave Thanks Dave, that was useful. -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400
Replace built in Bayes with another
So, reading some history, I can see that a few years back, Bayes was made a plugin to allow it to be replaced, according to bug 5293. Apparently, this is in Spamassassin 3.3.1 as I found it in the code. I might want to do just that. So, here's what I would like: Internal Bayes would be off, my Bayes would be on. sa-learn would still work. So, looking through the code, near as I can tell, I would need to: Not load Mail::SpamAssassin::Plugin::Bayes in the configuration file, instead, load my plugin file. My plugin file would HAVE to be package Mail::SpamAssassin::Plugin::Bayes else it would appear other code breaks. I would of course need to write the plugin using the existing Bayes plugin as a starting point to interface with another system and use their same interface. If the above is all true, then, sa-learn may well work since it is hard coded to load Mail::SpamAssassin::Plugin::Bayes. So, perhaps, it is possible now to 100% replace bayes with another system using a plugin. Not sure if anyone has done this, but, if any dev listening, any thoughts if this would work? Any issues come to mind? Steve -- View this message in context: http://old.nabble.com/Replace-built-in-Bayes-with-another-tp31847048p31847048.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: MySQL bayes setup question
On Tue, 14 Jun 2011 13:40:33 -0400, Morgan Bishop wrote: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/bayes_mysql.sql note that MyISAM should be changed to INNODB on bayes_token if you have INNODB avail, other tables can still be as is
Re: DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1 bug ?
On Tue, 14 Jun 2011 13:42:32 +0200, Mark Martinec wrote:
Not sure I understand the question.
The DKIM_ADSP_ALL rule as distributed does test for a valid
author domain signature and does not fire in its presence:
header DKIM_ADSP_ALL eval:check_dkim_adsp('A')
olso what i see, amavisd only makes DKIM_VALID
not DKIM_VALID_AU
should this be so?
Re: MySQL bayes setup question
Marc, You can also find the readme for sql support there, or check out: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/README.bayes It's quite easy to setup and get running. I can't seem to find the bayes_mysql.sql file anywhere. Depending on your distribution it could be in a number of places. You could try a: find / -name bayes_mysql.sql If you have svn installed you can download it via svn. You can also download it with wget (or view in browser) directry via: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/bayes_mysql.sql From there it's as easy an configuring your local.cf to use Bayes SQL and creating the tables in mysql. Don't forget to backup your existing bayes tokens and such before doing any changes. You can later restore that backup to Mysql so you don't lose any training. Thanks - that's what I was looking for. You might also find this helpful: http://www200.pair.com/mecham/spam/debian-spamassassin-sql.html Regards, Dave
Re: How to test RBL
Please keep the thread on-list, unless you specifically intend to
contact me personally. Others can help you, too.
On Tue, 2011-06-14 at 20:20 +0200, Sebastian Deißner wrote:
> Am 14.06.2011 16:44, schrieb Karsten Bräckelmann:
> > Seems the problem is your DNS configuration. The DNS on the RBL server
> > is not authoritative, but the general DNS serves a wildcard entry.
> >
> >$ host 18.151.139.61.rbl.cdubitterfeld.de rbl.cdubitterfeld.de
> >18.151.139.61.rbl.cdubitterfeld.de has address 127.0.0.2
> von DNS-Servern verstehe ich jetzt nicht "so sehr viel" - muss ich hier
> die Änderungen am rbldns-Server machen oder an den DNS-Servern, welche
> die Domain verwalten?
I'm not a DNS expert either, but I believe it's your (general) DNS
configuration you need to change, not the rbldnsd [1].
If you 'dig' the above hostname (the equivalent of an RBL query) you can
see in the authority section, that the same nameservers are responsible
for the rbl zone, as well as the overall domain. Which AFAIK is your
problem, since the rbldnsd running machine should be authoritative for
the zone -- that's the DNS serving the blacklist.
Since your general DNS server obviously is configured with a wildcard
entry for the rbl zone, you get the result shown in the thread: Asking
for any host in the rbl zone gets answered by your general DNS servers
with the IP of the host rbl.cdubitterfeld.de itself. Instead, the
rbldnsd should answer (and be authoritative for) any query for hosts in
the rbl zone.
[1] The rbldnsd server answers correctly, when queried directly.
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: MySQL bayes setup question
On 6/14/2011 10:40 AM, Morgan Bishop wrote: On 6/14/2011 1:23 PM, Marc Perkel wrote: On 6/14/2011 10:19 AM, Morgan Bishop wrote: On 6/14/2011 1:03 PM, Marc Perkel wrote: I must be blind but I can seem to find the files or instructions for creating the mysql databases to set up bayes. Thanks in advance I'm not sure, but I believe you are looking for bayes_mysql.sql in the spamassassin documentation directory. Depending on your install/distribution it may be in /usr/share/doc/spamassassin/sql/ You can also find the readme for sql support there, or check out: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/README.bayes It's quite easy to setup and get running. I can't seem to find the bayes_mysql.sql file anywhere. Depending on your distribution it could be in a number of places. You could try a: find / -name bayes_mysql.sql If you have svn installed you can download it via svn. You can also download it with wget (or view in browser) directry via: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/bayes_mysql.sql From there it's as easy an configuring your local.cf to use Bayes SQL and creating the tables in mysql. Don't forget to backup your existing bayes tokens and such before doing any changes. You can later restore that backup to Mysql so you don't lose any training. Thanks - that's what I was looking for. -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400
Re: MySQL bayes setup question
On 6/14/2011 1:23 PM, Marc Perkel wrote: On 6/14/2011 10:19 AM, Morgan Bishop wrote: On 6/14/2011 1:03 PM, Marc Perkel wrote: I must be blind but I can seem to find the files or instructions for creating the mysql databases to set up bayes. Thanks in advance I'm not sure, but I believe you are looking for bayes_mysql.sql in the spamassassin documentation directory. Depending on your install/distribution it may be in /usr/share/doc/spamassassin/sql/ You can also find the readme for sql support there, or check out: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/README.bayes It's quite easy to setup and get running. I can't seem to find the bayes_mysql.sql file anywhere. Depending on your distribution it could be in a number of places. You could try a: find / -name bayes_mysql.sql If you have svn installed you can download it via svn. You can also download it with wget (or view in browser) directry via: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/bayes_mysql.sql From there it's as easy an configuring your local.cf to use Bayes SQL and creating the tables in mysql. Don't forget to backup your existing bayes tokens and such before doing any changes. You can later restore that backup to Mysql so you don't lose any training.
Re: MySQL bayes setup question
On 6/14/2011 10:19 AM, Morgan Bishop wrote: On 6/14/2011 1:03 PM, Marc Perkel wrote: I must be blind but I can seem to find the files or instructions for creating the mysql databases to set up bayes. Thanks in advance I'm not sure, but I believe you are looking for bayes_mysql.sql in the spamassassin documentation directory. Depending on your install/distribution it may be in /usr/share/doc/spamassassin/sql/ You can also find the readme for sql support there, or check out: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/README.bayes It's quite easy to setup and get running. I can't seem to find the bayes_mysql.sql file anywhere. -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400
Re: MySQL bayes setup question
On 6/14/2011 1:03 PM, Marc Perkel wrote: I must be blind but I can seem to find the files or instructions for creating the mysql databases to set up bayes. Thanks in advance I'm not sure, but I believe you are looking for bayes_mysql.sql in the spamassassin documentation directory. Depending on your install/distribution it may be in /usr/share/doc/spamassassin/sql/ You can also find the readme for sql support there, or check out: http://svn.apache.org/repos/asf/spamassassin/branches/3.3/sql/README.bayes It's quite easy to setup and get running.
Re: MySQL bayes setup question
Look in the "sql" directory in the source code, Andy. Quoting Marc Perkel : I must be blind but I can seem to find the files or instructions for creating the mysql databases to set up bayes.
MySQL bayes setup question
I must be blind but I can seem to find the files or instructions for creating the mysql databases to set up bayes. Thanks in advance -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400
Re: How to test RBL
On Mon, 2011-06-13 at 21:07 +0200, sebast...@debianfan.de wrote:
> - the answer is the ip of the rbl-server.
>
> i think that is not correct?
Nope, that most likely is not correct. You tell us, though -- isn't that
your domain, and your own, local RBL?
> # dig 18.151.139.61.rbl.cdubitterfeld.de @213.186.33.99
> ;; ANSWER SECTION:
> 18.151.139.61.rbl.cdubitterfeld.de. 878 IN A81.89.110.187
$ host 18.151.139.61.rbl.cdubitterfeld.de
18.151.139.61.rbl.cdubitterfeld.de has address 81.89.110.187
1.1.1.1.rbl.cdubitterfeld.de has address 81.89.110.187
foo.rbl.cdubitterfeld.de has address 81.89.110.187
Seems the problem is your DNS configuration. The DNS on the RBL server
is not authoritative, but the general DNS serves a wildcard entry.
$ host 18.151.139.61.rbl.cdubitterfeld.de rbl.cdubitterfeld.de
18.151.139.61.rbl.cdubitterfeld.de has address 127.0.0.2
The RBL DNS server appears to answer correctly.
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: Sought rules
On Tue, 2011-06-14 at 09:58 -0400, pseudonymous Alex wrote:
> I see that recently Justin made some changes to the svn rules for
> this, but I wasn't sure if that was going to be reflected in the
> channel?
Yes, it will eventually. See the other direct reply by Justin from Sat
to the post you replied to.
> I just noticed that the last update I have is 1083704, from Apr 18th,
> and wasn't sure if I was somehow missing something?
$ host -t TXT 1.3.3.updates.spamassassin.org
1.3.3.updates.spamassassin.org descriptive text "1083704"
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: Sought rules
Hi, >> Wait a sec, I'm confused about this. "JM_SOUGHT_2 hitting on every >> legit Facebook message" on dev@ list February 17th 2011. If the SOUGHT >> channel was being overridden by the sa-update rules, how would this >> problem appear from the SOUGHT channel? Doesn't this suggest that >> spamassassin was successfully using the SOUGHT channel? > > Yes, and no. grep for SOUGHT in the stock rules... > > The stock rule-set has a snapshot of the SOUGHT_FRAUD patterns, they do > NOT have the SOUGHT patterns. > > > And, well... READ THIS instead. ;) I see that recently Justin made some changes to the svn rules for this, but I wasn't sure if that was going to be reflected in the channel? I just noticed that the last update I have is 1083704, from Apr 18th, and wasn't sure if I was somehow missing something? Thanks, Alex
Re: Sought rules
On Mon, 2011-06-13 at 10:56 -0400, Bowie Bailey wrote:
> On 6/10/2011 8:01 PM, Karsten Bräckelmann wrote:
> > IFF you use the sought channel with SA 3.3.x, you will need the reorder
> > hack to bend the alphabet.
>
> Would it be worthwhile to change the main code instead? Rather than
> making a change to ensure that the sought channel is processed after
> updates, why not ensure that the main updates file is always processed
> first regardless of the naming of any other third party rules? You
> could either make it a special case in the code that processes the .cf
> files, or you could change the filename to 0_updates_spamassassin_org.cf.
>
> This would not only fix the current issue with the sought rules, it
> would also avoid future problems like this.
Thought about a "stock always comes first" code change myself, but this
won't help immediately. It will not get into the upcoming 3.3.2 release,
and moreover is very unlikely to make it into any version before 3.4.0.
The problem remains for 3.3.x -- until one of the next stock rules
updates, which will have the Sought FRAUD patterns dropped.
--
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}
Re: DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1 bug ?
Benny,
> missing meta on DKIM_VALID when DKIM_ADSP_ALL ?
> header testing ___DKIM_ADSP_ALL eval:test()
> meta DKIM_ADSP_ALL (__DKIM_ADSP_ALL && !DKIM_VALID)
> or is it just checking with DKIM_VALID_AU ?
> how to solve it ?
Not sure I understand the question.
The DKIM_ADSP_ALL rule as distributed does test for a valid
author domain signature and does not fire in its presence:
header DKIM_ADSP_ALL eval:check_dkim_adsp('A')
Mark
Re: Rule to match X-Spam-Flag
On Fri, Jun 10, 2011 at 10:52:25PM +0200, Benny Pedersen wrote: > On Fri, 10 Jun 2011 11:29:23 +0200, Alessandro Dentella wrote: > > >thanks to all of you for the great support. > > super duper will test this in postfix, just a shame one need to turn > postfix into a content filter just to make it work :( that's really already the way I setup postfix to work with MailScanner. A rule set it on hold and Mailwatch picks it from the queue and process it. This is just one more row in the header filter... sandro *:-) -- Sandro Dentella *:-) http://www.reteisi.org Soluzioni libere per le scuole http://sqlkit.argolinux.orgSQLkit home page - PyGTK/python/sqlalchemy
