Re: Warning: Your Pyzor may be broken.

2024-06-08 Thread Bill Cole
On 2024-06-08 at 15:35:01 UTC-0400 (Sat, 08 Jun 2024 21:35:01 +0200)
Benny Pedersen 
is rumored to have said:

> Bill Cole skrev den 2024-06-08 20:45:
>
>> I've chosen #3 for myself, but it's not great.
>
> is why cpanel provided a perl pyzor client ?

I had forgotten about that. Thank you, Benny.

Using pyzor_perl=1 and pyzor_server_file is absolutely the best option, 
assuming that it works.

> ifplugin Mail::SpamAssassin::Plugin::Pyzor
>
> use_pyzor 1
> pyzor_count_min 1
> pyzor_welcomelist_min 1
> pyzor_welcomelist_factor 0.2
> pyzor_fork 0
> pyzor_perl 1
> pyzor_timeout 120
>
> # pyzor_options options
> # pyzor_path STRING
>
> # pyzor_server_file FILE
> pyzor_server_file /etc/mail/spamassassin/pyzor_server_file.conf
>
> # Pyzor servers configuration file path, used by Pyzor Perl 
> implementation.
> # By default Pyzor will connect to public.pyzor.org on port 24441.
>
> endif # Mail::SpamAssassin::Plugin::Pyzor
>
> i juat got no hits yet


-- 
Bill Cole


Re: Warning: Your Pyzor may be broken.

2024-06-08 Thread Benny Pedersen

Bill Cole skrev den 2024-06-08 20:45:


I've chosen #3 for myself, but it's not great.


is why cpanel provided a perl pyzor client ?

ifplugin Mail::SpamAssassin::Plugin::Pyzor

use_pyzor 1
pyzor_count_min 1
pyzor_welcomelist_min 1
pyzor_welcomelist_factor 0.2
pyzor_fork 0
pyzor_perl 1
pyzor_timeout 120

# pyzor_options options
# pyzor_path STRING

# pyzor_server_file FILE
pyzor_server_file /etc/mail/spamassassin/pyzor_server_file.conf

# Pyzor servers configuration file path, used by Pyzor Perl 
implementation.

# By default Pyzor will connect to public.pyzor.org on port 24441.

endif # Mail::SpamAssassin::Plugin::Pyzor

i juat got no hits yet



Warning: Your Pyzor may be broken.

2024-06-08 Thread Bill Cole
I was working on a mail system today and inadvertently noticed that its Pyzor 
was broken. When I tried to reinstall Pyzor according to the web documentation 
with "pip3 install pyzor" I got what claimed to be v1.0.0 and no complaints 
from the installer but when running the pyzor client tool, it kicked out errors 
indicating to me that the program had not been even trivially updated to work 
with Python 3. I did the absolute hackiest thing I could to make it work 
(blanket s/iteritems/items/ and s/xrange/range/ to address specific error 
messages) and it did so, but that's not acceptable. Neither is reinstalling a 
Python2 world.

I went looking for a better fix and found a reported issue at 
https://github.com/SpamExperts/pyzor/issues/155 matching my original symptoms 
in which a workaround was provided: install directly from the GitHub project's 
master.zip link, i.e. a snapshot assembled from the current state of the repo, 
which claims to be v1.1.1. I do not like that solution at all, and added a 
comment to that issue suggesting that they fix the problem by cutting a release 
for PyPI. No response yet, but it has only been a matter of minutes.

FOR NOW: If you are running a system where Python 2.x no longer exists (that 
should be everywhere...) and you've never confirmed that Pyzor is working for 
you, do so now. If you pipe a message to 'pyzor check' and it gives you a 
response like this you're fine:

   public.pyzor.org:24441   (200, 'OK') 0   0

If instead you get a Python stack trace, obviously it's broken.

I don't feel great recommending any of the obvious mitigations. They are:

1. Install Python 2.7 and pyzor 1.0.0 from PyPI.
2. Hand-patch pyzor 1.0.0 minimally to get it to work with Python 3.
3. Install the head of the development tree from GitHub, whatever that happens 
to be at the moment.

I've chosen #3 for myself, but it's not great.


-- 
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire


Re: [mailop] SORBS Closing.

2024-06-08 Thread A. Schulze




Am 07.06.24 um 23:33 schrieb Bill Cole:

You do not even need to do that.

All SORBS-referencing rules were removed from the updates.spamasssassin.org 
rules channel earlier this week. Scanning the latest deployed (by sa-update) 
version r1918114 I see no surviving references to SORBS.


since yesterday I do see no queries to dnsbl.sorbs.net. in my network anymore.
So: thanks for the (spamassassin)-update :-)

Andreas