bayes in sqlite db
Does anyone have a working example of storing Bayes and user prefs in SQLite? I only see mysql and postgres schemas in /usr/share/doc/spamassassin/sql/ Michael Grant signature.asc Description: PGP signature
Re: DMARC fails for valid record?
Hi, > > >I also haven't any references to DMARC whatsoever from any SA rules since > >it was uninstalled. > > >I otherwise have no way of telling if there should have been any hits, but > >I'd imagine there should have been at least one in 24-hours. > > > >It appears to have disabled DMARC functionality entirely. > > KAM.cf has some DMARC rules even without Mail::SpamAssassin::Plugin::DMARC > available, but I'm not sure if loading that plugin doesn't disable them. > > I have disabled loading it so let's see. > Any further thoughts on this? It appears removing the DMARC perl library has disabled any DMARC support altogether.
Re: DMARC fails for valid record?
>I also haven't any references to DMARC whatsoever from any SA rules since >it was uninstalled. >I otherwise have no way of telling if there should have been any hits, but >I'd imagine there should have been at least one in 24-hours. > >It appears to have disabled DMARC functionality entirely. KAM.cf has some DMARC rules even without Mail::SpamAssassin::Plugin::DMARC available, but I'm not sure if loading that plugin doesn't disable them. I have disabled loading it so let's see. On 26.05.22 09:34, Alex wrote: Any further thoughts on this? It appears removing the DMARC perl library has disabled any DMARC support altogether. disabling Mail::SpamAssassin::Plugin::DMARC should make KAM.cf revert to it's simpler DMARC functioality note that it requires: Mail::SpamAssassin::Plugin::AskDNS Mail::SpamAssassin::Plugin::DKIM Mail::SpamAssassin::Plugin::SPF no matter if you have Mail::SpamAssassin::Plugin::DMARC loaded or not. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. We are but packets in the Internet of life (userfriendly.org)
Re: DMARC fails for valid record?
On Thu, May 26, 2022 at 03:48:57PM +0200, Matus UHLAR - fantomas wrote: > > > >I also haven't any references to DMARC whatsoever from any SA rules since > > > >it was uninstalled. > > > > > > >I otherwise have no way of telling if there should have been any hits, > > > >but > > > >I'd imagine there should have been at least one in 24-hours. > > > > > > > >It appears to have disabled DMARC functionality entirely. > > > > > > KAM.cf has some DMARC rules even without Mail::SpamAssassin::Plugin::DMARC > > > available, but I'm not sure if loading that plugin doesn't disable them. > > > > > > I have disabled loading it so let's see. > > On 26.05.22 09:34, Alex wrote: > > Any further thoughts on this? It appears removing the DMARC perl library > > has disabled any DMARC support altogether. > > disabling Mail::SpamAssassin::Plugin::DMARC should > make KAM.cf revert to it's simpler DMARC > functioality > > note that it requires: > Mail::SpamAssassin::Plugin::AskDNS > Mail::SpamAssassin::Plugin::DKIM > Mail::SpamAssassin::Plugin::SPF > > no matter if you have Mail::SpamAssassin::Plugin::DMARC loaded or not. Latest trunk has fix for DMARC waiting for SPF and DKIM results. Might be relevant to this thread.
Memory requirement for SpamAssassin/Postfix/Roundcube/Dovecot stack
File under "questions I think I already know the answer to." Looking at moving my site to a new host and I'm pondering splitting my web/email servers which have always shared the same server. Our email server is five accounts. Just me and the missus. A big day is receiving 200 emails. Is it safe to assume that a $5/mth 1gig memory account will laugh at the resources needed to run a SpamAssassin/Postfix/Roundcube/Dovecot/Nginx stack and not ever break a sweat?
Re: DMARC fails for valid record?
Hi, > > Any further thoughts on this? It appears removing the DMARC perl library > > > has disabled any DMARC support altogether. > > > > disabling Mail::SpamAssassin::Plugin::DMARC should > > make KAM.cf revert to it's simpler DMARC > > functioality > > > > note that it requires: > > Mail::SpamAssassin::Plugin::AskDNS > > Mail::SpamAssassin::Plugin::DKIM > > Mail::SpamAssassin::Plugin::SPF > Yes, these plugins are already enabled. > no matter if you have Mail::SpamAssassin::Plugin::DMARC loaded or not. > > Latest trunk has fix for DMARC waiting for SPF and DKIM results. Might be > relevant to this thread. > Okay, new version in place, but without that perl DMARC plugin, still the same results with only KAM_DMARC_STATUS hitting. Going back to installing the PurePerl DMARC lib now as well.
Re: DMARC fails for valid record?
> Any further thoughts on this? It appears removing the DMARC perl library > > has disabled any DMARC support altogether. > > disabling Mail::SpamAssassin::Plugin::DMARC should > make KAM.cf revert to it's simpler DMARC > functioality > > note that it requires: > Mail::SpamAssassin::Plugin::AskDNS > Mail::SpamAssassin::Plugin::DKIM > Mail::SpamAssassin::Plugin::SPF no matter if you have Mail::SpamAssassin::Plugin::DMARC loaded or not. Latest trunk has fix for DMARC waiting for SPF and DKIM results. Might be relevant to this thread. according to: https://github.com/apache/spamassassin/commit/63fa58d814837f5d12b5d587ab4b72fa3c7501c3 it should fix the problem. On 26.05.22 10:40, Alex wrote: Okay, new version in place, but without that perl DMARC plugin, still the same results with only KAM_DMARC_STATUS hitting. Going back to installing the PurePerl DMARC lib now as well. let us know -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Despite the cost of living, have you noticed how popular it remains?
Re: Memory requirement for SpamAssassin/Postfix/Roundcube/Dovecot stack
On Thu, May 26, 2022, 10:36 AM Reindl Harald, wrote: > > > Am 26.05.22 um 16:32 schrieb Ian Evans: > > File under "questions I think I already know the answer to." > > > > Looking at moving my site to a new host and I'm pondering splitting my > > web/email servers which have always shared the same server. > > > > Our email server is five accounts. Just me and the missus. A big day is > > receiving 200 emails. > > > > Is it safe to assume that a $5/mth 1gig memory account will laugh at the > > resources needed to run a SpamAssassin/Postfix/Roundcube/Dovecot/Nginx > > stack and not ever break a sweat? > > when you add clamav later it will be clamav who laughs about 1 GB memory > after it has sucked it completly > Just looked at clamav's memory usage. Ouch. :) >
Re: DMARC fails for valid record?
On Thu, May 26, 2022 at 10:40 AM Alex wrote: > Hi, > > > > Any further thoughts on this? It appears removing the DMARC perl >> library >> > > has disabled any DMARC support altogether. >> > >> > disabling Mail::SpamAssassin::Plugin::DMARC should >> > make KAM.cf revert to it's simpler DMARC >> > functioality >> > >> > note that it requires: >> > Mail::SpamAssassin::Plugin::AskDNS >> > Mail::SpamAssassin::Plugin::DKIM >> > Mail::SpamAssassin::Plugin::SPF >> > > Yes, these plugins are already enabled. > > > no matter if you have Mail::SpamAssassin::Plugin::DMARC loaded or not. >> >> Latest trunk has fix for DMARC waiting for SPF and DKIM results. Might be >> relevant to this thread. >> > > Okay, new version in place, but without that perl DMARC plugin, still the > same results with only KAM_DMARC_STATUS hitting. > > Going back to installing the PurePerl DMARC lib now as well. > Ugh, and again we already have DKIM_AU and SPF_PASS and DMARC_REJECT all hitting. * 0.0 SPF_HELO_NONE SPF: HELO does not publish an SPF Record * -0.0 SPF_PASS SPF: sender matches SPF record * -0.1 DKIM_VALID Message has at least one valid DKIM or DK signature * 0.1 DKIM_SIGNED Message has a DKIM or DK signature, not necessarily * valid * -0.1 DKIM_VALID_AU Message has a valid DKIM or DK signature from author's * domain * -0.7 DKIMWL_WL_HIGH DKIMwl.org - High trust sender * -1.5 DKIMWL_WL ASKDNS: DKIMwl.org - Whitelisted sender * [wish.com.lookup.dkimwl.org A:127.0.13.5] * 0.1 DMARC_REJECT DMARC reject policy * 1.0 KAM_DMARC_REJECT DKIM has Failed or SPF has failed on the message * and the domain has a DMARC reject policy It was quarantined because it also hit BAYES_99 and a local rule, despite lowering KAM_DMARC_REJECT to just 1 point. > > >
Re: [SPAM?] Re: Memory requirement for SpamAssassin/Postfix/Roundcube/Dovecot stack
If you want to save on memory usage, just having amavis filter out exe files or exe-like files (screensavers, exes in archives, etc.) is much more efficient than using clamav. Of course this doesn't filter out Office macros/OLE, but there's a plugin in SA related to that, I believe. On 26/05/2022 16:49, Ian Evans wrote: On Thu, May 26, 2022, 10:36 AM Reindl Harald, wrote: Am 26.05.22 um 16:32 schrieb Ian Evans: > File under "questions I think I already know the answer to." > > Looking at moving my site to a new host and I'm pondering splitting my > web/email servers which have always shared the same server. > > Our email server is five accounts. Just me and the missus. A big day is > receiving 200 emails. > > Is it safe to assume that a $5/mth 1gig memory account will laugh at the > resources needed to run a SpamAssassin/Postfix/Roundcube/Dovecot/Nginx > stack and not ever break a sweat? when you add clamav later it will be clamav who laughs about 1 GB memory after it has sucked it completly Just looked at clamav's memory usage. Ouch. :)
Re: DMARC fails for valid record?
Hi, >> no matter if you have Mail::SpamAssassin::Plugin::DMARC loaded or not. > >> > >> Latest trunk has fix for DMARC waiting for SPF and DKIM results. Might > be > >> relevant to this thread. > > according to: > > https://github.com/apache/spamassassin/commit/63fa58d814837f5d12b5d587ab4b72fa3c7501c3 > > it should fix the problem. > Okay, wait, it doesn't appear that I have those changes. $ spamassassin --version SpamAssassin version 4.0.0-r1900857 running on Perl version 5.34.1 I built SA using the following: $ svn checkout http://svn.apache.org/repos/asf/spamassassin/trunk Mail-SpamAssassin-4.0.0 This gave me revision 1901294. Is that not the proper trunk?
Re: DMARC fails for valid record?
On 2022-05-26 15:34, Alex wrote: Any further thoughts on this? It appears removing the DMARC perl library has disabled any DMARC support altogether. disable kam channel solves it ? if it does then wait for final spamassassin 4.x.x and hope Mail:DMARC finaly work with the DMARC plugin in all details with AuthRes plugin deep data change DKIM scores to not score dkim fails as reject score, rejects should only happen on dmarc policy
Re: [SPAM?] Re: Memory requirement for SpamAssassin/Postfix/Roundcube/Dovecot stack
Am 26.05.22 um 16:32 schrieb Ian Evans: > File under "questions I think I already know the answer to." > > Looking at moving my site to a new host and I'm pondering splitting > my web/email servers which have always shared the same server. > > Our email server is five accounts. Just me and the missus. A big > day is receiving 200 emails. > > Is it safe to assume that a $5/mth 1gig memory account will laugh at > the resources needed to run > a SpamAssassin/Postfix/Roundcube/Dovecot/Nginx stack and not ever > break a sweat? On Thu, May 26, 2022, 10:36 AM Reindl Harald, wrote: when you add clamav later it will be clamav who laughs about 1 GB memory after it has sucked it completly On 26/05/2022 16:49, Ian Evans wrote: Just looked at clamav's memory usage. Ouch. :) On 26.05.22 17:00, Bert Van de Poel wrote: If you want to save on memory usage, just having amavis filter out exe files or exe-like files (screensavers, exes in archives, etc.) is much more efficient than using clamav. Of course this doesn't filter out Office macros/OLE, but there's a plugin in SA related to that, I believe. there are also many signatures for JS and other kinds of malicious content in clamav... however, with clamav, 2G of RAM is not enough. Especially when using ConcurrentDatabaseReload (default on) -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. "They say when you play that M$ CD backward you can hear satanic messages." "That's nothing. If you play it forward it will install Windows."
Re: DMARC fails for valid record?
On 2022-05-26 at 11:05:59 UTC-0400 (Thu, 26 May 2022 11:05:59 -0400) Alex is rumored to have said: Hi, no matter if you have Mail::SpamAssassin::Plugin::DMARC loaded or not. Latest trunk has fix for DMARC waiting for SPF and DKIM results. Might be relevant to this thread. according to: https://github.com/apache/spamassassin/commit/63fa58d814837f5d12b5d587ab4b72fa3c7501c3 it should fix the problem. Okay, wait, it doesn't appear that I have those changes. Don't be confused: the GitHub repo is a read-only replica of the in-house Subversion repo, which obviously uses different commit/revision identifiers than git. $ spamassassin --version SpamAssassin version 4.0.0-r1900857 That's the last change (in the Subversion repo) to the Mail::SpamAssassin module. running on Perl version 5.34.1 I built SA using the following: $ svn checkout http://svn.apache.org/repos/asf/spamassassin/trunk Mail-SpamAssassin-4.0.0 This gave me revision 1901294. Is that not the proper trunk? That's the correct way to get our trunk. Right now we are at r1901296, because automated ruleQA/update jobs generate changes in trunk. -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire
Re: DMARC fails for valid record?
On 2022-05-26 at 10:59:29 UTC-0400 (Thu, 26 May 2022 10:59:29 -0400) Alex is rumored to have said: [...] Ugh, and again we already have DKIM_AU and SPF_PASS and DMARC_REJECT all hitting. Can you get these to match by re-running the same message with the 'spamassassin' script? If so, try it with "-D DMARC" to get all the messages from the plugin. They may be illuminating. My suspicion *from a very quick 1st look at the code* is that the logic for DMARC_REJECT is wrong, in that it seems to mean 'DMARC validation is good' && 'p=reject,' which seems less than useful. (And yes, the plugin just bails out, not returning any match, if Mail::DMARC::PurePerl is not available.) -- Bill Cole b...@scconsult.com or billc...@apache.org (AKA @grumpybozo and many *@billmail.scconsult.com addresses) Not Currently Available For Hire
Re: DMARC fails for valid record?
Hi, On Thu, May 26, 2022 at 1:15 PM Bill Cole < sausers-20150...@billmail.scconsult.com> wrote: > On 2022-05-26 at 10:59:29 UTC-0400 (Thu, 26 May 2022 10:59:29 -0400) > Alex > is rumored to have said: > > [...] > > Ugh, and again we already have DKIM_AU and SPF_PASS and DMARC_REJECT > > all > > hitting. > > Can you get these to match by re-running the same message with the > 'spamassassin' script? If so, try it with "-D DMARC" to get all the > messages from the plugin. They may be illuminating. > This is from the example provided earlier today. It says SPF failed(?) but it hit SPF_PASS May 26 14:25:12.080 [370198] dbg: DMARC: using Mail::DMARC::PurePerl for DMARC checks May 26 14:25:12.146 [370198] dbg: DMARC: result: pass, disposition: none, dkim: pass, spf: fail (spf: pass, spf_helo: fail) My suspicion *from a very quick 1st look at the code* is that the logic > for DMARC_REJECT is wrong, in that it seems to mean 'DMARC validation is > good' && 'p=reject,' which seems less than useful. > Any idea when this bug may have been introduced? It seems like a pretty serious problem to just be overlooked? And my confusion was actually only with the comments in the new DMARC.pm not reflecting 25_dmarc.cf with the new priority settings. It does appear I'm using the latest.
Re: Memory requirement for SpamAssassin/Postfix/Roundcube/Dovecot stack
On 5/26/22 8:32 AM, Ian Evans wrote: Is it safe to assume that a $5/mth 1gig memory account will laugh at the resources needed to run a SpamAssassin/Postfix/Roundcube/Dovecot/Nginx stack and not ever break a sweat? Sadly, I found that I needed to quit tilting at the 1GB memory windmill and upgraded my tiny VPSs to 2GB for SpamAssassin + ClamAV + some other milters. You /might/ be able to get SpamAssassin in 1GB, but I don't know what else will be on the system. -- Grant. . . . unix || die smime.p7s Description: S/MIME Cryptographic Signature
