Re: Spamhaus Technology contributions to SpamAssassin
On 7/3/19 11:24 AM, Riccardo Alfieri wrote: And 'Data::Validate::Domain'. That was for an older version of the plugin, it's now not needed anymore. Get the code from the github repository to have the latest version. I downloaded the version that was on the install page. It has a date tag of 20190621. https://docs.spamhaustech.com/40-real-world-usage/SpamAssassin/020-SpamAssassin.html I'll update to the github version. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes, you read that right) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax-deductible donation to my ride by visiting https://gmane.diabetessucks.net. You can see where my donations come from by visiting my interactive donation map ... https://gmane.diabetessucks.net/map (it's a geeky thing). I may have diabetes, but diabetes doesn't have me!
Re: Spamhaus Technology contributions to SpamAssassin
On 7/3/19 7:54 AM, Riccardo Alfieri wrote: apparently I missed to write on the documentation that you need also Perl's List::MoreUtils installed. And 'Data::Validate::Domain'. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes, you read that right) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax-deductible donation to my ride by visiting https://gmane.diabetessucks.net. You can see where my donations come from by visiting my interactive donation map ... https://gmane.diabetessucks.net/map (it's a geeky thing). I may have diabetes, but diabetes doesn't have me!
'dns: bad dns reply'
I noticed the following errors showing up in my logs ... Jan 18 08:36:12 listmail spamd[2800]: dns: bad dns reply: addr is not a string at /usr/share/perl5/vendor_perl/IO/Socket/IP.pm line 662, line 48. I'm running ... SpamAssassin version 3.4.2 running on Perl version 5.16.3 Any suggestions? Is something possibly out of date? david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes, you read that right) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax-deductible donation to my ride by visiting https://gmane.diabetessucks.net. You can see where my donations come from by visiting my interactive donation map ... https://gmane.diabetessucks.net/map (it's a geeky thing). I may have diabetes, but diabetes doesn't have me!
Re: spamd logging confusion
On 1/10/2019 6:03 PM, David Gibbs wrote: I'm trying to get spamd to log to my maillog but can't figure out what's going wrong. Jan 10 17:43:01 listmail spamd[21503]: logger: removing stderr method I tried changing the syslog facility on spamd to local1 and the same thing happened, expect the one log entry went to /var/log/spamd.log and the rest went to messages. Jan 10 18:11:32 listmail spamd[21867]: logger: removing stderr method Jan 10 18:11:33 listmail check[21869]: spamd: server started on IO::Socket::IP [::1]:783, IO::Socket::IP [127.0.0.1]:783 (running version 3.4.2) I figured out the issue ... apparently razor is changing the log facility to local3. I disabled razor and spamd is logging correctly now. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes, you read that right) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax-deductible donation to my ride by visiting https://gmane.diabetessucks.net. You can see where my donations come from by visiting my interactive donation map ... https://gmane.diabetessucks.net/map (it's a geeky thing). I may have diabetes, but diabetes doesn't have me!
Re: spamd logging confusion
On 1/10/19 6:03 PM, David Gibbs wrote: I'm trying to get spamd to log to my maillog but can't figure out what's going wrong. Also, spamd is logging oddly even in the messages file... Jan 10 18:11:32 listmail spamd[21867]: logger: removing stderr method Jan 10 18:11:33 listmail check[21869]: spamd: server started on IO::Socket::IP [::1]:783, IO::Socket::IP [127.0.0.1]:783 (running version 3.4.2) noticed the first entry has program spamd, but the next one is showing 'check'. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes, you read that right) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax-deductible donation to my ride by visiting https://gmane.diabetessucks.net. You can see where my donations come from by visiting my interactive donation map ... https://gmane.diabetessucks.net/map (it's a geeky thing). I may have diabetes, but diabetes doesn't have me!
spamd logging confusion
OK, I'm confused. I'm trying to get spamd to log to my maillog but can't figure out what's going wrong. I'm invoking spamd like this ... /usr/bin/perl -T -w /usr/bin/spamd --syslog=mail -d -c -m5 -H --razor-home-dir=/var/lib/razor/ --razor-log-file=sys-syslog -r /var/run/spamd.pid I have the following in rsyslogd.conf... # Log all the mail messages in one place. mail.*;mail.!=debug /var/log/maillog local1.*/var/log/spamd.log # Log anything (except mail) of level info or higher. # Don't log private authentication messages! *.info;mail.none;authpriv.none;cron.none/var/log/messages (ignore the local1.* entry for now) With this context, when spamd launches it puts one entry in maillog and then logs to /var/log/messages... Jan 10 17:43:01 listmail spamd[21503]: logger: removing stderr method I tried changing the syslog facility on spamd to local1 and the same thing happened, expect the one log entry went to /var/log/spamd.log and the rest went to messages. Any suggestions on what I need to do to get it to log correctly? FWIW: I'm running on Amazon linux. Thanks! david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes, you read that right) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax-deductible donation to my ride by visiting https://gmane.diabetessucks.net. You can see where my donations come from by visiting my interactive donation map ... https://gmane.diabetessucks.net/map (it's a geeky thing). I may have diabetes, but diabetes doesn't have me!
Re: Lost mail during update
On 11/21/2018 12:56 AM, @lbutlr wrote: While updating spamassassin, several emails were destructive lost because of the absence of spamc. To be fair, the date did get stuck unexpectedly asking for a confirmation, but still I’d like to avoid this happening again. Maybe I'm missing something, but perhaps you should shut down the MTA before performing the upgrade? david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes, you read that right) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax-deductible donation to my ride by visiting https://gmane.diabetessucks.net. You can see where my donations come from by visiting my interactive donation map ... https://gmane.diabetessucks.net/map (it's a geeky thing). I may have diabetes, but diabetes doesn't have me!
Re: Please add these blocks
On 4/13/2018 8:40 AM, David Jones wrote: P.S. I would love to help with any RBL/URIBLs with honeypot/spamtrap accounts if anyone would like to contact me off list. I have a few domains that I will _never_ receive email on ... I would like to contribute too. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding 615 miles (Yes, you read that right) in the American Diabetes Association's Tour de Cure to raise money for diabetes research, education, advocacy, and awareness. You can make a tax deductible donation to my ride by visiting https://gmane.diabetessucks.net. You can see where my donations come from by visiting my interactive donation map ... https://gmane.diabetessucks.net/map (it's a geeky thing). I may have diabetes, but diabetes doesn't have me!
Re: SA 3.4 'make test' fails in 't/sa_sompile.t' with Not found: able-to-use
On 4/24/2014 12:36 PM, Kevin A. McGrail wrote: Overall, it should let you know you can proceed. Kevin: Thanks for your help. Got the update installed running fine now. david -- IBM i on Power Systems: For when you can't afford to be out of business! I'm riding a metric century (100 km / 62 miles) in the 2014 Chicagoland Tour de Cure to raise money for diabetes research, education, and advocacy. Sponsor me by visiting http://email.diabetessucks.net. Any amount is appreciated. See where I get my donations from ... visit http://email.diabetessucks.net/mapdonations.php for an interactive map (it's a geeky thing).
Re: SA 3.4 'make test' fails in 't/sa_sompile.t' with Not found: able-to-use
On 04/23/2014 04:42 PM, Kevin A. McGrail wrote: If you run make distclean and then perl Makefile.PL and then make tardist, does that work? I blew away the directory and untar'ed it again ... this time it didn't complain about Config.pm. /usr/local/home/david/work/Mail-SpamAssassin-3.4.0/t/log/d.sa_compile/inst.basic/foo/bin/spamassassin -p log/test_default.cf -D -Lt /usr/local/home/david/work/Mail-SpamAssassin-3.4.0/t/data/spam/001 ok 1 Checking FOO ok 2 /usr/local/home/david/work/Mail-SpamAssassin-3.4.0/t/log/d.sa_compile/inst.basic/foo/bin/sa-compile --keep-tmps Apr 23 17:49:33.185 [5749] info: generic: base extraction starting. this can take a while... Apr 23 17:49:33.185 [5749] info: generic: extracting from rules of type body_0 100% [===] 52.90 rules/sec 00m00s DONE 100% [===] 229.31 bases/sec 00m00s DONE Apr 23 17:49:33.280 [5749] info: body_0: 4 base strings extracted in 0 seconds cd /tmp/.spamassassin5749FmkqRetmp reading bases_body_0.in cd Mail-SpamAssassin-CompiledRegexps-body_0 re2c -i -b -o scanner1.c scanner1.re /usr/bin/perl Makefile.PL PREFIX=/tmp/.spamassassin5749FmkqRetmp/ignored INSTALLSITEARCH=/usr/local/home/david/work/Mail-SpamAssassin-3.4.0/t/log/d.sa_compile/inst.basic/foo/var/spamassassin/compiled/5.010/3.004000 Generating a Unix-style Makefile Writing Makefile for Mail::SpamAssassin::CompiledRegexps::body_0 Writing MYMETA.yml and MYMETA.json make cp body_0.pm blib/lib/Mail/SpamAssassin/CompiledRegexps/body_0.pm Running Mkbootstrap for Mail::SpamAssassin::CompiledRegexps::body_0 () chmod 644 body_0.bs /usr/bin/perl /usr/lib/perl5/5.10.0/ExtUtils/xsubpp -typemap /usr/lib/perl5/5.10.0/ExtUtils/typemap body_0.xs body_0.xsc mv body_0.xsc body_0.c gcc -c -D_REENTRANT -D_GNU_SOURCE -DPERL_USE_SAFE_PUTENV -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables -DVERSION=\1.0\ -DXS_VERSION=\1.0\ -fPIC -I/usr/lib/perl5/5.10.0/i386-linux-thread-multi/CORE body_0.c gcc -c -D_REENTRANT -D_GNU_SOURCE -DPERL_USE_SAFE_PUTENV -DDEBUGGING -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables -DVERSION=\1.0\ -DXS_VERSION=\1.0\ -fPIC -I/usr/lib/perl5/5.10.0/i386-linux-thread-multi/CORE scanner1.c rm -f blib/arch/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so gcc -shared -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i386 -mtune=generic -fasynchronous-unwind-tables -L/usr/local/lib body_0.o scanner1.o -o blib/arch/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so \ \ chmod 755 blib/arch/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so /usr/bin/perl -MExtUtils::Command::MM -e 'cp_nonempty' -- body_0.bs blib/arch/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.bs 644 Manifying blib/man3/Mail::SpamAssassin::CompiledRegexps::body_0.3pm make install Running Mkbootstrap for Mail::SpamAssassin::CompiledRegexps::body_0 () chmod 644 body_0.bs Files found in blib/arch: installing files in blib/lib into architecture dependent library tree Installing /usr/local/home/david/work/Mail-SpamAssassin-3.4.0/t/log/d.sa_compile/inst.basic/foo/var/spamassassin/compiled/5.010/3.004000/auto/Mail/SpamAssassin/CompiledRegexps/body_0/body_0.so Installing /usr/local/home/david/work/Mail-SpamAssassin-3.4.0/t/log/d.sa_compile/inst.basic/foo/var/spamassassin/compiled/5.010/3.004000/Mail/SpamAssassin/CompiledRegexps/body_0.pm Installing /tmp/.spamassassin5749FmkqRetmp/ignored/share/man/man3/Mail::SpamAssassin::CompiledRegexps::body_0.3pm Appending installation info to /tmp/.spamassassin5749FmkqRetmp/ignored/lib/perl5/5.10.0/i386-linux-thread-multi/perllocal.pod cp /tmp/.spamassassin5749FmkqRetmp/bases_body_0.pl /usr/local/home/david/work/Mail-SpamAssassin-3.4.0/t/log/d.sa_compile/inst.basic/foo/var/spamassassin/compiled/5.010/3.004000/bases_body_0.pl temporary dir left due to --keep-tmps: /tmp/.spamassassin5749FmkqRetmp /usr/local/home/david/work/Mail-SpamAssassin-3.4.0/t/log/d.sa_compile/inst.basic/foo/bin/spamassassin -p log/test_default.cf -D -Lt /usr/local/home/david/work/Mail-SpamAssassin-3.4.0/t/data/spam/001 ok 3 Checking able-to-use Not found: able-to-use = able to use 1/1 'body_0' compiled rules at t/sa_compile.t line 148. not ok 4 # Failed test 4 in t/SATest.pm at line 751 Checking FOO ok 5 Output can be examined in: log/d.sa_compile/3 Failed 1/5 subtests Test
Problem creating RPM for 3.2.5
I'm trying to create a RPM for my Fedora 10 system and have encountered a problem. I run the command: rpmbuild -tb Mail-SpamAssassin-3.2.5.tar.gz It seems to run OK until this point ... -- Requires(post): /bin/sh Requires(preun): /bin/sh Requires(postun): /bin/sh Requires: /bin/sh /usr/bin/perl libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1) libc.so.6(GLIBC_2.3.4) libc.so.6(GLIBC_2.4) libdl.so.2 libz.so.1 perl(Archive::Tar) = 1.23 perl(Carp) perl(Config) perl(Cwd) perl(Data::Dumper) perl(Digest::SHA1) perl(DynaLoader) perl(Errno) perl(ExtUtils::MakeMaker) perl(File::Copy) perl(File::Path) perl(File::Spec) perl(File::Spec) = 0.8 perl(Getopt::Long) perl(HTTP::Date) perl(IO::Handle) perl(IO::Pipe) perl(IO::Zlib) = 1.04 perl(LWP::UserAgent) perl(Mail::SpamAssassin) perl(Mail::SpamAssassin::ArchiveIterator) perl(Mail::SpamAssassin::Logger) perl(Mail::SpamAssassin::Message) perl(Mail::SpamAssassin::NetSet) perl(Mail::SpamAssassin::PerMsgLearner) perl(Mail::SpamAssassin::SpamdForkScaling) perl(Mail::SpamAssassin::SubProcBackChannel) perl(Mail::SpamAssassin::Timeout) perl(Mail::SpamAssassin::Util::Progress) perl(Net::DNS) perl(POSIX) perl(Pod::Usage) perl(Socket) perl(bytes) perl(constant) perl(lib) perl(strict) perl(vars) perl(warnin gs) rtld(GNU_HASH) Processing files: perl-Mail-SpamAssassin-3.2.5-1 error: File not found by glob: /root/rpmbuild/BUILDROOT/spamassassin-3.2.5-1.i386/usr/local/lib/perl5/site_perl/5.10.0/* RPM build errors: Bad exit status from /var/tmp/rpm-tmp.GqlX4b (%doc) File not found by glob: /root/rpmbuild/BUILDROOT/spamassassin-3.2.5-1.i386/usr/local/lib/perl5/site_perl/5.10.0/* -- Any suggestions? Thanks! david -- Any decision, made in haste, is invariably flawed... regardless of the outcome.
Re: List headers and footers [Re: Unsubscribe]
mouss wrote: Mailman has specific functionality to remove signature headers so that the message can be resigned as it's sent out. which doesn't help, because if I get mail claiming to come From: mo...@netoyen.net, yet it doesn't have a sig of mine, I don't really care if some fancy mailman owner has added his own. Huh? I really don't understand what you just wrote. Mailman is a mailing list management program (which is used to manage this list, fwiw). And the signatures I was talking about are DKIM or Domainkeys. Since Mailman adds it's own headers to the messages it processes, any existing signatures in the message are invalidated. Thus, Mailman has to remove any existing signatures and let the MTA resign the message after it's been processed. Or are you just being sarcastic? david -- IBM i on Power -- For when you can't afford to be out of business.
Re: List headers and footers [Re: Unsubscribe]
mouss wrote: - this modifies the body, thus breaking signatures. when mail gets back to the same domain (sender and final recipient in same domain), this may cause problems. I agree that many lists do break signatures so the receiving site should cope with this, but I am not sure they really do. Signatures ... as in DKIM / DomainKeys? Or GPG signatures? - the code is not trivial because of the MIME structure. Ah, this may be the case ... I'm unfamiliar with the exact configuration of the SA lists. On my own list server I convert everything to plain text to avoid problems with incompatible mail clients. This is what I do for all the lists I run. Yes, some people are too dumb to read that far ... but MOST people aren't. those who send these unsubscribe posts do not really look at the list messages when they do. True enough. Add to those the people who think the best way to get unsubscribed from a list is to simply report it as spam. I am convinced that an unsubscribe option should be implemented in MUAs. I completely concur. It's not rocket science. I *THINK* I saw a tbird add in that implements this kind of functionality, but it would be better as part of the core. david -- IBM i on Power -- For when you can't afford to be out of business.
Re: List headers and footers [Re: Unsubscribe]
mouss wrote: - mail admin at example.com configures his mail system to sign all outbound mail with DKIM - he rejects any mail with a From: in his domain if it doesn't have a valid DKIM signature - j...@example.com posts to a list that appends a footer (or munges the Reply-To header, assuming this is used in the signature). - list resends the message to mx.example.com. - mail is From: j...@example.com, but it is either not signed (list removed the signature) or the sig is not valid (message altered by list). I don't think DKIM / Domainkeys will be invalidated by adding a footer ... as the footer is added to the message before it is signed and resent. BTW, in .fr, most MUAs (including webmail) translate spam as Messages undesirables, which most users naturally understand as a way to report mail they don't want. so even if you send them mail regularly, but there is one they didn't like, they'll hit the This Is Spam button. The fault is shared between the luser and the UI designer/translater! Yeah ... but I've also had cases of idiots who were deliberately reporting mailing list messages as spam because they couldn't be bothered to unsubscribe. david -- IBM i on Power -- For when you can't afford to be out of business.
Re: List headers and footers [Re: Unsubscribe]
Bill Landry wrote: This may be true if the sender were adding the footer before signing and sending the message to the list. However, not true if it's the mailing list that is adding the footer after the original sender has already signed the message. As I understand it, in order for the signatures to be valid, the message has to be signed by the sender ... because most mailing list software adds headers. Mailman has specific functionality to remove signature headers so that the message can be resigned as it's sent out. david -- IBM i on Power -- For when you can't afford to be out of business.
Re: Unsubscribe
LuKreme wrote: The unsubscribe link is right there in plain sight. Whether Gmail conceals it from you has nothing to do with it. Few consumer mail clients (Gmail, Yahoo, Thunderbird, OE, Outlook, Lotus/Domino, etc) show the user headers by default. This means they are clearly NOT in plain sight. No. this is a bad idea. If you can't figure out how to look at mail headers, then you have no business on this list. The point is, you shouldn't HAVE to look at the mail headers. Putting the unsubscribe info in the footer is a good idea no mater what. This is what I do for all the lists I run. Yes, some people are too dumb to read that far ... but MOST people aren't. david -- IBM i on Power -- For when you can't afford to be out of business.
Re: Errors all of a sudden?
Any thoughts on this? David Gibbs wrote: I was watching my maillog this morning, trying to spot something else that wasn't quite working right when I noticed a bunch of errors similar to the following: Feb 19 11:09:26 rivendell spamd[987]: Subroutine DEAR_SOMETHING_one_line_body_te st redefined at /var/lib/spamassassin/3.002004/updates_spamassassin_org/20_phras es.cf, rule DEAR_SOMETHING, line 4, GEN839 line 128. Feb 19 11:09:26 rivendell spamd[987]: Subroutine __DRUGS_ERECTILE_L_one_line_bod y_test redefined at /var/lib/spamassassin/3.002004/updates_spamassassin_org/20_d rugs.cf, rule __DRUGS_ERECTILE_L, line 6, GEN839 line 128. Feb 19 11:09:26 rivendell spamd[987]: Subroutine __CARD_DIRECT_WWW_ADDRESS_one_l ine_body_test redefined at /var/lib/spamassassin/3.002004/updates_spamassassin_o rg/80_additional.cf, rule __CARD_DIRECT_WWW_ADDRESS, line 6, GEN839 line 128. Feb 19 11:09:26 rivendell spamd[987]: Subroutine FB_HOMELOAN_one_line_body_test redefined at /var/lib/spamassassin/3.002004/updates_spamassassin_org/72_active.c f, rule FB_HOMELOAN, line 6, GEN839 line 128. From what I can see in the logs, they started on 19-Feb. I'm running SpamAssassin version 3.2.4 running on Perl version 5.8.8 in stock Fedora 8. I run the following command every 6 hours to update spamassassin: /usr/bin/sa-update /usr/bin/sa-compile /dev/null 2/tmp/sa-com pile.log kill -HUP $(cat /var/run/spamd.pid) When I run spamassassin --lint, no errors are reported. If it's useful, the output of spamassassin --lint -D is available at http://www.qtemp.net/spamassassin-lint.txt. Any thoughts? Thanks! david
Errors all of a sudden?
I was watching my maillog this morning, trying to spot something else that wasn't quite working right when I noticed a bunch of errors similar to the following: Feb 19 11:09:26 rivendell spamd[987]: Subroutine DEAR_SOMETHING_one_line_body_te st redefined at /var/lib/spamassassin/3.002004/updates_spamassassin_org/20_phras es.cf, rule DEAR_SOMETHING, line 4, GEN839 line 128. Feb 19 11:09:26 rivendell spamd[987]: Subroutine __DRUGS_ERECTILE_L_one_line_bod y_test redefined at /var/lib/spamassassin/3.002004/updates_spamassassin_org/20_d rugs.cf, rule __DRUGS_ERECTILE_L, line 6, GEN839 line 128. Feb 19 11:09:26 rivendell spamd[987]: Subroutine __CARD_DIRECT_WWW_ADDRESS_one_l ine_body_test redefined at /var/lib/spamassassin/3.002004/updates_spamassassin_o rg/80_additional.cf, rule __CARD_DIRECT_WWW_ADDRESS, line 6, GEN839 line 128. Feb 19 11:09:26 rivendell spamd[987]: Subroutine FB_HOMELOAN_one_line_body_test redefined at /var/lib/spamassassin/3.002004/updates_spamassassin_org/72_active.c f, rule FB_HOMELOAN, line 6, GEN839 line 128. From what I can see in the logs, they started on 19-Feb. I'm running SpamAssassin version 3.2.4 running on Perl version 5.8.8 in stock Fedora 8. I run the following command every 6 hours to update spamassassin: /usr/bin/sa-update /usr/bin/sa-compile /dev/null 2/tmp/sa-com pile.log kill -HUP $(cat /var/run/spamd.pid) When I run spamassassin --lint, no errors are reported. If it's useful, the output of spamassassin --lint -D is available at http://www.qtemp.net/spamassassin-lint.txt. Any thoughts? Thanks! david
Re: google spams
mouss wrote:
uri GOOGLE_SEARCH_BTNIm{gooo?gle\..*/search.*btnI=}
Loose the last equals sign, I've seen similar samples come through
without it.
david
Re: sa-update problem in 3.2.4
Justin Mason wrote: oops, that looks like a bug. could you open an entry on bugzilla.spamassassin.org? Logged as #5769. david -- System i ... for when you can't afford to be out of business
sa-update problem in 3.2.4 (was: ANNOUNCE: Apache SpamAssassin 3.2.4 available)
Justin Mason wrote: Apache SpamAssassin 3.2.4 is now available! This is a maintenance release of the 3.2.x branch. I just updated to 2.3.4 ... but when I tried to run sa-compile, I got the following error ... -- [18717] info: generic: base extraction starting. this can take a while... [18717] info: generic: extracting from rules of type body_0 0% [ ] 0.00 rules/sec --m--s LEFTplugin: eval failed: Can't find label NO at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm line 164. cd / rm -rf /tmp/.spamassassin18717DKqMU5tmp -- Any suggestions? Output with -D on the command line can be found here: http://www.qtemp.net/sa-compile-2.3.4.txt david -- System i ... for when you can't afford to be out of business
Forward after running through SA?
Does anyone know if there is a way to setup a sendmail alias (or virtuser table entry) so that a message is received, filtered through spamassassin, and then forwarded to another email address? I've got some 'role' addresses I want to setup ... but really want to flag spam as much as possible for the recipients. Right now I have setup a real user account and put in a .forward... but I would like to avoid having to use a real account if possible. Thanks! david
Re: OT spammers
Igor Chudov wrote: Here's something that I do not understand. What is the point of spamming people repeatedly not once, twice, or even 10 times, but hundreds of times. If I wanted to procure pils, or pgrn, or whatever, I would have done it on the first 10 spams. After 100 or so spams, what is the benefit of sending me yet more spam? I seem to receive some spams, such as about getting fake education, way over 100 times. Because it works. Scary to think that some people are that stupid. david
Re: apache httpd + spam assassin = web without spam?
dny wrote: is there a way to setup apache to use spam assassin rule? so that apache will check first (dnsbl or some other way) if the posted content is spam or not? Although not generic to apache in general, this is a Wordpress plug-in that uses spamassassin to filter comments. http://www.ioerror.us/software/wp-spamassassin/ david
Rule help ... if one rule matched, ignore another
Folks: I'm trying to create a rule that are basically exclusive of each other. That is ... if rule 1 is matched, then ignore rule 2. My particular example ... I want to create a rule that will assign a specific score if the subject contains the word 'euromillion', but have a lower score if the subject contains 'million'. Obviously if I put two separate rules with the 'euromillion' rule just adding to the score set by 'million' it would work... but I would rather have only one rule listed in the spam header. Is this possible? Is it worthwhile? Thanks! david
DBIPlugin (was: Extending Apache SpamAssassin Using Plugins)
Michael Parker wrote: One interesting feature of the talk was the release of a plugin that handles persistent database connection in SpamAssassin. This is especially useful for folks using SQL for user preferences, AWL or Bayes. I invite everyone to try it out and provide lots of feedback on how well it works for you. You can find the plugin on the wiki here: http://wiki.apache.org/spamassassin/DBIPlugin Possibly dumb question ... where do you put the DBIPlugin module? david (not a perl programmer)
Re: Java Interface
Paul Benedict wrote: I want to know if there is a Java interface into SpamAssassin? Shouldn't be too difficult. You can interact with spamd using TCP/IP. Check out http://spamassassin.apache.org/full/3.1.x/dist/spamd/PROTOCOL david
Avoiding FP on domain fragments?
Folks: I just got a message that was flagged as spam due to the URIBL_JP_SURBL rule ... it matched on the URI 'range.com' ... my domain, midrange.com, is what triggered it. 3.4 URIBL_JP_SURBL Contains an URL listed in the JP SURBL blocklist [URIs: range.com] Can anyone recommend a way of counteracting the match? Thanks! david
Re: Odd SPF Query Error
Chris wrote: On Tuesday 11 October 2005 09:14 pm, David Gibbs wrote: http://bugzilla.spamassassin.org/show_bug.cgi?id=4541#c5 Thanks David, I see that it only applies to Microsoft caller-id and not an SA bug. It relates to the missing perl module which is used by SPF, which is used by SA. david
Re: Odd SPF Query Error
Chris wrote: Oct 11 19:51:44 cpollock spamd[6762]: Can't locate LMAP/CID2SPF.pm in @INC See http://bugzilla.spamassassin.org/show_bug.cgi?id=4541#c5
spamd shutdown (3.1.0)
Folks: This morning spamd shutdown for some reason ... I can't determine what it might be. The log showed this ... Sep 30 07:28:54 linux spamd[15172]: Can't locate LMAP/CID2SPF.pm in @INC (@INC contains: lib ../lib /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl) at /usr/lib/perl5/site_perl/5.8.0/Mail/SPF/Query.pm line 1749, GEN1430 line 105. and then this ... Sep 30 07:29:57 linux spamd[14373]: prefork: child states: II Sep 30 07:30:09 linux spamd[14373]: tcp timeout at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamdForkScaling.pm line 195. Sep 30 07:30:11 linux spamd[14373]: tcp timeout at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/SpamdForkScaling.pm line 195. Sep 30 07:30:34 linux spamc[31170]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#1 of 3): Connection refused The first error I fixed by installing CID2SPF.pm using bug http://bugzilla.spamassassin.org/show_bug.cgi?id=4541 as a reference (it's shown up in the log a number of times, now that I've noticed it). Is the other error related? Thanks! david
Exclude address from AWL processing?
Folks: Does anyone know if there is a way to cause specific email addresses to be excluded from AWL processing? I run a number of mailing lists using mailman ... and I get a lot of notification messages from the mailman-owner address. I also get a rather significant amount of spam addressed to the mailman-owner address (which is forwarded on to me). This has the effect of causing the mailman-owner address to get a large number of spam hits in the AWL tables... and now the address has enough bad karma so that the legitimate mailman-owner messages are being marked as spam. What I would like to do is exclude the mailman-owner address from AWL processing, but have all other rules apply. This will allow spam to be caught, but it won't accumulate bad AWL karma. Thanks! david
Re: ANNOUNCE: SpamAssassin 3.1.0-rc1 release candidate available!
Justin Mason wrote: SpamAssassin 3.1.0-rc1 is released! SpamAssassin 3.1.0 is a major update. SpamAssassin is a mail filter which uses advanced statistical and heuristic tests to identify spam (also known as unsolicited bulk email). Don't know if this is significant ... When I ran perl Makefile.PL, I got the following messages: checking module dependencies and their versions... Net::Ident::_export_hooks() called too early to check prototype at /usr/lib/perl5/site_perl/5.8.0/Net/Ident.pm line 29. Checking if your kit is complete... Looks good Writing Makefile for Mail::SpamAssassin Makefile written by ExtUtils::MakeMaker 6.05 Should I be concerned about the Net::Ident::_export_hooks message? The perl version on my RedHat 8 system is: Summary of my perl5 (revision 5.0 version 8 subversion 0) configuration: Platform: osname=linux, osvers=2.4.21-1.1931.2.382.entsmp, archname=i386-linux-thread-multi uname='linux stripples.devel.redhat.com 2.4.21-1.1931.2.382.entsmp #1 smp wed aug 6 17:18:52 edt 2003 i686 i686 i386 gnulinux ' config_args='-des -Doptimize=-O2 -g -pipe -march=i386 -mcpu=i686 -Dmyhostname=localhost [EMAIL PROTECTED] -Dcc=gcc -Dcf_by=Red Hat, Inc. -Dinstallprefix=/usr -Dprefix=/usr -Darchname=i386-linux -Dvendorprefix=/usr -Dsiteprefix=/usr -Dotherlibdirs=/usr/lib/perl5/5.8.0 -Duseshrplib -Dusethreads -Duseithreads -Duselargefiles -Dd_dosuid -Dd_semctl_semun -Di_db -Ui_ndbm -Di_gdbm -Di_shadow -Di_syslog -Dman3ext=3pm -Duseperlio -Dinstallusrbinperl -Ubincompat5005 -Uversiononly -Dpager=/usr/bin/less -isr' hint=recommended, useposix=true, d_sigaction=define usethreads=define use5005threads=undef useithreads=define usemultiplicity=define useperlio=define d_sfio=undef uselargefiles=define usesocks=undef use64bitint=undef use64bitall=undef uselongdouble=undef usemymalloc=n, bincompat5005=undef Compiler: cc='gcc', ccflags ='-D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64 -I/usr/include/gdbm', optimize='-O2 -g -pipe -march=i386 -mcpu=i686', cppflags='-D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBUGGING -fno-strict-aliasing -I/usr/local/include -I/usr/include/gdbm' ccversion='', gccversion='3.2.2 20030222 (Red Hat Linux 3.2.2-5)', gccosandvers='' intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234 d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12 ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8 alignbytes=4, prototype=define Linker and Libraries: ld='gcc', ldflags =' -L/usr/local/lib' libpth=/usr/local/lib /lib /usr/lib libs=-lnsl -lgdbm -ldb -ldl -lm -lpthread -lc -lcrypt -lutil perllibs=-lnsl -ldl -lm -lpthread -lc -lcrypt -lutil libc=/lib/libc-2.3.2.so, so=so, useshrplib=true, libperl=libperl.so gnulibc_version='2.3.2' Dynamic Linking: dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-rdynamic -Wl,-rpath,/usr/lib/perl5/5.8.0/i386-linux-thread-multi/CORE' cccdlflags='-fPIC', lddlflags='-shared -L/usr/local/lib' Characteristics of this binary (from libperl): Compile-time options: DEBUGGING MULTIPLICITY USE_ITHREADS USE_LARGE_FILES PERL_IMPLICIT_CONTEXT Locally applied patches: MAINT18379 Built under linux Compiled at Aug 13 2003 11:47:58 @INC: /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/site_perl/5.8.0 /usr/lib/perl5/site_perl /usr/lib/perl5/vendor_perl/5.8.0/i386-linux-thread-multi /usr/lib/perl5/vendor_perl/5.8.0 /usr/lib/perl5/vendor_perl /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0
Re: Transport endpoint is not connected?
David Gibbs wrote: I ran spamd in debug mode for a while, hoping that I could catch one of the messages slipping by ... and I did. Anyone? This is happening more frequently ... and I can't find a pattern. david
Re: Insecure dependency in eval while running setuid at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm
Any thoughts on this? David Gibbs wrote: Folks: I recently enabled rbl checks in my spamassassin configuration ... skip_rbl_checks 0 After I did this, I noticed the following error showing up in my log ... Oct 22 09:31:02 linux spamd[13465]: error: Insecure dependency in eval while running setuid at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 1669, GEN58 line 216._ , continuing and some spam was slipping through untagged. When I disabled the rbl checks, the error went away and so did the spam misses. Any suggestions? david
Activating the RelayCountry plug-in?
Any suggestions on how to activate the RelayCountry plug-in? I've added this line to my /etc/mail/spamassassin/local.cf file ... loadplugin Mail::SpamAssassin::Plugin::RelayCountry ... and restarted spamd. My messages, however, do not have any additional information that indicates the country the message was relayed through. I do have IP::Country::Fast installed. Thanks! david
Re: Activating the RelayCountry plug-in?
Matt Kettler wrote: I don't believe the RelayCountry plugin adds anything visible to the message. Ok, I didn't get that from the docs (such as they are). I expected the X-Relay-Countries header to be added to the message. It adds the country code to the metadata that gets used as bayes tokens, but I don't think that information gets folded back into the message. That makes sense ... I guess. It would be kind of interesting to see the information, however. You may want to try pumping a message through spamassassin -tD and look at the debug output. It should show up as a metadata debug for X-Relay-Countries if it's working. Yeah, that's showing up ... debug: tokenize: header tokens for X-Relay-Countries = IL ... which had me confused, because the header it referenced was not actually in the message. Thanks for clearing it up. david
reporting errors
I have a number of email addresses that get only spam, so I've set them up as spamtraps. They are simply sendmail aliases that send to | /usr/bin/spamassassin -r. When I manually run the spamassassin -r command, however, I get the following... $cat sample-spam.txt | spamassassin -r Pyzor - report failed: Exited with non-zero exit code 1 SpamCop - message older than 3 days, not reporting 1 message(s) examined. This is causing the alias to generate errors. Any suggestions? Thanks! david
