RE: sender-valid SMTP callbacks (Re: Does tuxorama.com sound fa miliar to anyone?)
Roger Taranto wrote: How are your users authenticated for the MSFT software? Is it via a domain controller? AFAIK, Active Directory can be configured as an LDAP server, which might somehow solve your problem -- or at least give you LDAP access to your users. (I think you have to be running at least Win2K on your AD machine though.) Nope, we're still running NT server with Exchange 5.5 (I told you it was old). Exchange can be accessed via LDAP though. Brian Leyton IT Manager Commercial Petroleum Equipment
RE: Stats question...
Dallas L. Engelken wrote: For 3.0.x - http://www.rulesemporium.com/programs/sa-stats.txt For 3.1.x - http://www.rulesemporium.com/programs/sa-stats-1.0.txt Using a high -n val will produce the hit rates for all your rules. This looks really nice, but I ran it against my maillog, and it didn't come up with any stats. I assume that I don't have the proper information being added to my logs. Where can I configure my system to add the needed information? I'm using MimeDefang/SpamAssassin/Sendmail. Brian Leyton IT Manager Commercial Petroleum Equipment
RE: Stats question...
jdow wrote:
It defaults funkity. Run --help on it then set the start and stop
times to yesterday and today.
{^_^}
It only gives me 2 options, -t and -y for today yesterday, respectively.
I tried both of those, plus no option at all, to process the whole logfile
(which contains logs from 12/4 through today), and the result is the same.
Nothing.
Brian Leyton
IT Manager
Commercial Petroleum Equipment
RE: Stats question...
jdow wrote: Which version of SA did it come with? Three versions exist that all behave differently. One is the version a fellow just posted a pointer to, today. The other comes with SA. I am running 3.0.5 here and use the version that came with 3.0.4 with edited default values. It was not changed for 3.0.5, apparently. I wasn't aware that one came with the SpamAssassin distribution. A search on my system did not reveal any copies of sa-stats.pl other than the one I downloaded from http://david.hexstream.co.uk/linux/scripts/, mentioned earlier in this thread. I could not find the one you mention at the SARE site. Maybe I'm missing it, but I'd expect it to be under Tools, and it's not there. My SA was installed using YUM, so maybe the sa-stats.pl wasn't included with that version (which is 3.04-2) in case you're wondering. I guess I'll download the tarball pull the script from there. Brian Leyton IT Manager Commercial Petroleum Equipment
RE: Stats question...
Ok, I downloaded 3.05, and tried the sa-stats.pl that comes with the distribution. Still nothing. I'm pretty sure that the reason is that there isn't any information in the maillog to process. When I look through the maillog, I don't see anything from SpamAssassin or MimeDefang at all. There must be something that needs to be written to the logs, that's not being written. The man page says that sa-stats.pl parses spamd entries in the mail log. I'm not running spamd (I'm running MimeDefang), so I assume that's part of my problem. Also - this server doesn't deliver mail directly - it passes everything to an Exchange Server. Does that make a difference? Brian Leyton IT Manager Commercial Petroleum Equipment
RE: URIBL False positive
Jeff Chan wrote: What version of SpamAssassin are you using? There is a bug in 3.0.x that can cause intermittent errors like this. Spamassassin -V reports: SpamAssassin version 3.0.4 running on Perl version 5.8.6 Brian Leyton IT Manager Commercial Petroleum Equipment
RE: URIBL False positive
Jeff Chan wrote: OK I can't remember if that one has the bug fix or not. 3.1 definitely does. What was the specific FP domain? Here's the scoring section of the SA report: Content analysis details: (5.5 points, 5.0 required) pts rule name description -- -- -2.6 BAYES_00 BODY: Bayesian spam probability is 0 to 1% [score: 0.] 2.0 URIBL_PH_SURBL Contains an URL listed in the PH SURBL blocklist [URIs: americanbroadcastdx.com] 0.4 URIBL_AB_SURBL Contains an URL listed in the AB SURBL blocklist [URIs: americanbroadcastdx.com] 1.5 URIBL_WS_SURBL Contains an URL listed in the WS SURBL blocklist [URIs: americanbroadcastdx.com] 4.3 URIBL_SC_SURBL Contains an URL listed in the SC SURBL blocklist [URIs: americanbroadcastdx.com] Brian Leyton IT Manager Commercial Petroleum Equipment
RE: URIBL False positive
Jeff Chan wrote: Thanks. americanbroadcastdx.com was never on any SURBLs, so it's probably the bug. Please consider upgrading to 3.1 or possibly even 3.0.5 as this may fix the bug: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=3997 The developers will know for sure about which versions the patch is in. Or you could perhaps apply the patch manually to 3.0.4. They would know that too. It may be worth asking if you have any unusual DNS arrangement such as proxying firewalls, etc. Nothing unusual there. It uses the firewall (IPCop) as a caching DNS server, and the ISP's DNS as a fallback (not that that would help if the firewall were down). I'll see what I need to do to update. I think I used yum to install it in the first place, but something's hosed in the package dependencies. I'll get to work on that see if I can get a newer spamassassin installed. Thanks for your help! Brian Leyton IT Manager Commercial Petroleum Equipment
URIBL False positive
I'm relatively new to SpamAssassin, but I've managed to get it working well in conjunction with MimeDefang. I'm having a strange problem though, which I hope someone can help me figure out. I'm on a hobby mailing list, and occasionally emails to this list are being tagged as spam by SpamAssassin, based on the website mentioned in the emails being on multiple URIBL lists. Strangely though, when I go to the SURBL checker at rulesemporium.com, the site is NOT shown as being listed on any of these lists. Bayes correctly considers these emails to NOT be spam, but the 4 URIBL positives are enough to put the score over the top. I have included this domain in the whitelist in sa-mimedefang.cf, but that doesn't help. What might cause these lookups to return false positives? Brian Leyton IT Manager Commercial Petroleum Equipment
