RE: Error "cannot open bayes databases" lock failed: File exists

2021-01-21 Thread Emanuel Gonzalez
anyway, the error is still represented even with low configuration values.

Jan 21 10:39:43 eternia6 spamd[28053]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
Jan 21 10:39:43 eternia6 spamd[28299]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
Jan 21 10:39:43 eternia6 spamd[28273]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists

Anyone know any way to fix it??

Regards Emanuel.

De: Emanuel Gonzalez 
Enviado: jueves, 21 de enero de 2021 10:35
Para: Matus UHLAR - fantomas ; users@spamassassin.apache.org 

Asunto: RE: Error "cannot open bayes databases" lock failed: File exists

I'm testing right now. I have lowered the parameters but in the logs I see an 
error or warning:

prefork: adjust: 3 idle children more than 2 maximum idle children. Decreasing 
spamd children: 28057 killed.

That message can cause slow analysis of emails?

In my infrastructure I have about 10 physical servers with spamassassin, using 
the keepalived service the requests are balanced between them.

Regards, Emanuel.


____
De: Emanuel Gonzalez 
Enviado: miércoles, 20 de enero de 2021 15:31
Para: Matus UHLAR - fantomas ; users@spamassassin.apache.org 

Asunto: RE: Error "cannot open bayes databases" lock failed: File exists

The problem can be generated by the number of processes?

# Server CPU

cpu family  : 6
model   : 60
model name  : Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz

# SpamAssassin

SPAMDOPTIONS="-u spamd --min-children=30 --max-children=80 --min-spare=25 
--max-spare=80 --timeout-child=60 --max-conn-per-child=150

what change i need to apply?

Regards, Emanuel.

De: Matus UHLAR - fantomas 
Enviado: miércoles, 20 de enero de 2021 15:28
Para: users@spamassassin.apache.org 
Asunto: Re: Error "cannot open bayes databases" lock failed: File exists

On 20.01.21 14:50, Emanuel Gonzalez wrote:
>Hello Matus, thanks for your reply.
>
># ls -la /var/spamassassin/bayesdb/bayes
>
>ls: no se puede acceder a /var/spamassassin/bayesdb/bayes: No existe el 
>fichero o el directorio

>I see an error of inexistent file.

sorry, that was supposed to be:

ls -la /var/spamassassin/bayesdb/

so we can see hidden files too.

/var/spamassassin/bayesdb/bayes* does NOT show hidden filesa.

...however you showed us many lock files, which should explain.


># lsof /var/spamassassin/bayesdb/bayes_journal  
>/var/spamassassin/bayesdb/bayes_seen /var/spamassassin/bayesdb/bayes_toks
>
>COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF  NODE NAME

>spamd   25467 spamd   12r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25470 spamd   15r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25491 spamd   36r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25494 spamd   39r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25502 spamd   47r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
[...]

ohh!  too many processes.  I don't recommend more spamd processes than e.g.
2x number of CPUs. maybe even less.
It does not make sense to run too many processes in parallel.

If you process too much mail, you could store bayes database in SQL or
redis. However, first lower amount of processes.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759


RE: Error "cannot open bayes databases" lock failed: File exists

2021-01-21 Thread Emanuel Gonzalez
I'm testing right now. I have lowered the parameters but in the logs I see an 
error or warning:

prefork: adjust: 3 idle children more than 2 maximum idle children. Decreasing 
spamd children: 28057 killed.

That message can cause slow analysis of emails?

In my infrastructure I have about 10 physical servers with spamassassin, using 
the keepalived service the requests are balanced between them.

Regards, Emanuel.



De: Emanuel Gonzalez 
Enviado: miércoles, 20 de enero de 2021 15:31
Para: Matus UHLAR - fantomas ; users@spamassassin.apache.org 

Asunto: RE: Error "cannot open bayes databases" lock failed: File exists

The problem can be generated by the number of processes?

# Server CPU

cpu family  : 6
model   : 60
model name  : Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz

# SpamAssassin

SPAMDOPTIONS="-u spamd --min-children=30 --max-children=80 --min-spare=25 
--max-spare=80 --timeout-child=60 --max-conn-per-child=150

what change i need to apply?

Regards, Emanuel.

De: Matus UHLAR - fantomas 
Enviado: miércoles, 20 de enero de 2021 15:28
Para: users@spamassassin.apache.org 
Asunto: Re: Error "cannot open bayes databases" lock failed: File exists

On 20.01.21 14:50, Emanuel Gonzalez wrote:
>Hello Matus, thanks for your reply.
>
># ls -la /var/spamassassin/bayesdb/bayes
>
>ls: no se puede acceder a /var/spamassassin/bayesdb/bayes: No existe el 
>fichero o el directorio

>I see an error of inexistent file.

sorry, that was supposed to be:

ls -la /var/spamassassin/bayesdb/

so we can see hidden files too.

/var/spamassassin/bayesdb/bayes* does NOT show hidden filesa.

...however you showed us many lock files, which should explain.


># lsof /var/spamassassin/bayesdb/bayes_journal  
>/var/spamassassin/bayesdb/bayes_seen /var/spamassassin/bayesdb/bayes_toks
>
>COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF  NODE NAME

>spamd   25467 spamd   12r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25470 spamd   15r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25491 spamd   36r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25494 spamd   39r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25502 spamd   47r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
[...]

ohh!  too many processes.  I don't recommend more spamd processes than e.g.
2x number of CPUs. maybe even less.
It does not make sense to run too many processes in parallel.

If you process too much mail, you could store bayes database in SQL or
redis. However, first lower amount of processes.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759


RE: Error "cannot open bayes databases" lock failed: File exists

2021-01-20 Thread Emanuel Gonzalez
The problem can be generated by the number of processes?

# Server CPU

cpu family  : 6
model   : 60
model name  : Intel(R) Core(TM) i7-4790 CPU @ 3.60GHz

# SpamAssassin

SPAMDOPTIONS="-u spamd --min-children=30 --max-children=80 --min-spare=25 
--max-spare=80 --timeout-child=60 --max-conn-per-child=150

what change i need to apply?

Regards, Emanuel.

De: Matus UHLAR - fantomas 
Enviado: miércoles, 20 de enero de 2021 15:28
Para: users@spamassassin.apache.org 
Asunto: Re: Error "cannot open bayes databases" lock failed: File exists

On 20.01.21 14:50, Emanuel Gonzalez wrote:
>Hello Matus, thanks for your reply.
>
># ls -la /var/spamassassin/bayesdb/bayes
>
>ls: no se puede acceder a /var/spamassassin/bayesdb/bayes: No existe el 
>fichero o el directorio

>I see an error of inexistent file.

sorry, that was supposed to be:

ls -la /var/spamassassin/bayesdb/

so we can see hidden files too.

/var/spamassassin/bayesdb/bayes* does NOT show hidden filesa.

...however you showed us many lock files, which should explain.


># lsof /var/spamassassin/bayesdb/bayes_journal  
>/var/spamassassin/bayesdb/bayes_seen /var/spamassassin/bayesdb/bayes_toks
>
>COMMAND   PID  USER   FD   TYPE DEVICE SIZE/OFF  NODE NAME

>spamd   25467 spamd   12r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25470 spamd   15r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25491 spamd   36r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25494 spamd   39r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
>spamd   25502 spamd   47r   REG8,1  5132288 402667308 
>/var/spamassassin/bayesdb/bayes_toks
[...]

ohh!  too many processes.  I don't recommend more spamd processes than e.g.
2x number of CPUs. maybe even less.
It does not make sense to run too many processes in parallel.

If you process too much mail, you could store bayes database in SQL or
redis. However, first lower amount of processes.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -- Benjamin Franklin, 1759


RE: Error "cannot open bayes databases" lock failed: File exists

2021-01-20 Thread Emanuel Gonzalez
Hello,

-rw--- 1 spamd spamd 224 ene 20 13:45 bayes.lock
-rw--- 1 spamd spamd  84 ene  2 01:31 
bayes.lock.eternia6.dattaweb.com.11016
-rw--- 1 spamd spamd 224 ene  2 01:31 
bayes.lock.eternia6.dattaweb.com.11251
-rw--- 1 spamd spamd  84 ene  2 01:31 
bayes.lock.eternia6.dattaweb.com.14855
-rw--- 1 spamd spamd 224 ene  2 01:31 
bayes.lock.eternia6.dattaweb.com.16779
-rw--- 1 spamd spamd 224 ene  5 01:37 
bayes.lock.eternia6.dattaweb.com.25210
-rw--- 1 spamd spamd 168 ene 20 11:29 
bayes.lock.eternia6.dattaweb.com.25620
-rw--- 1 spamd spamd  28 ene  5 01:37 
bayes.lock.eternia6.dattaweb.com.25694
-rw--- 1 spamd spamd  28 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.29848
-rw--- 1 spamd spamd 112 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.29852
-rw--- 1 spamd spamd  28 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.29868
-rw--- 1 spamd spamd 224 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.29873
-rw--- 1 spamd spamd  54 ene 15 17:47 
bayes.lock.eternia6.dattaweb.com.3018
-rw--- 1 spamd spamd 252 ene 19 11:22 
bayes.lock.eternia6.dattaweb.com.30473
-rw--- 1 spamd spamd 252 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31005
-rw--- 1 spamd spamd 252 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31007
-rw--- 1 spamd spamd 224 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31009
-rw--- 1 spamd spamd 112 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31092
-rw--- 1 spamd spamd 112 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31095
-rw--- 1 spamd spamd 196 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31101
-rw--- 1 spamd spamd 196 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31149
-rw--- 1 spamd spamd 112 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31160
-rw--- 1 spamd spamd 252 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31274
-rw--- 1 spamd spamd 140 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31687
-rw--- 1 spamd spamd 168 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31733
-rw--- 1 spamd spamd  56 ene 20 13:54 
bayes.lock.eternia6.dattaweb.com.31836
-rw--- 1 spamd spamd 270 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5412
-rw--- 1 spamd spamd  54 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5429
-rw--- 1 spamd spamd 216 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5436
-rw--- 1 spamd spamd 108 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5443
-rw--- 1 spamd spamd 270 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5455
-rw--- 1 spamd spamd 243 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5493
-rw--- 1 spamd spamd 135 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5496
-rw--- 1 spamd spamd 270 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5524
-rw--- 1 spamd spamd 189 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5527
-rw--- 1 spamd spamd 108 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5529
-rw--- 1 spamd spamd  81 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5540
-rw--- 1 spamd spamd 243 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5549
-rw--- 1 spamd spamd 270 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5557
-rw--- 1 spamd spamd 162 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5574
-rw--- 1 spamd spamd  81 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5579
-rw--- 1 spamd spamd 108 ene 18 10:11 
bayes.lock.eternia6.dattaweb.com.5582
-rw--- 1 spamd spamd 216 ene  2 01:31 
bayes.lock.eternia6.dattaweb.com.9227
-rw--- 1 spamd spamd  720192 ene 20 13:54 bayes_journal
-rwxr-xr-x 1 spamd spamd  172032 dic 18 10:52 bayes_seen
-rwxr-xr-x 1 spamd spamd 5132288 ene 20 13:45 bayes_toks



De: Dave Funk 
Enviado: miércoles, 20 de enero de 2021 13:39
Para: users@spamassassin.apache.org 
Asunto: Re: Error "cannot open bayes databases" lock failed: File exists

On Wed, 20 Jan 2021, Matus UHLAR - fantomas wrote:

> On 20.01.21 11:07, Emanuel Gonzalez wrote:
>> Date: Wed, 20 Jan 2021 11:07:59 +0000
>> From: Emanuel Gonzalez 
>> To: SA Mailing list 
>> Subject: Re: Error "cannot open bayes databases" lock failed: File exists
>>
>> Hello everyone, i'm back from my vacations, i try solved this problem but i
>> could not.
>>
>> I still see in the spamsassin error logs the mentioned error:
>>
>> bayes_learn_to_journal 1
>> use_bayes yes
>> bayes_path /var/spamassassin/bayesdb/bayes
>> bayes_auto_learn 0
>> bayes_auto_expire 0
>>
>
> try:
>
> ls -la /var/spamassassin/bayesdb/bayes
> lsof /var/spamassassin/bayesdb/bayes_journal
> /var/spamassassin/bayesdb/bayes_seen /var/spamassassin/bayesdb/bayes_toks

Umm, the command:
   ls -la /var/spamassassin/bayesdb/bayes

s

RE: Error "cannot open bayes databases" lock failed: File exists

2021-01-20 Thread Emanuel Gonzalez
/bayes_seen
spamd   25595 spamd  140r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   25595 spamd  141r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   25598 spamd  143r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   25598 spamd  144r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   25599 spamd  144r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   25599 spamd  147r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   25600 spamd  145r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   25600 spamd  146r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   25605 spamd  150r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   25605 spamd  151r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   25619 spamd  164r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   25619 spamd  165r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   25624 spamd  169r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   25624 spamd  170r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   25625 spamd  170r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   25625 spamd  171r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   25645 spamd  190r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   25645 spamd  191r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   29795 spamd  191r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   29795 spamd  192r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   29850 spamd  105r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   29850 spamd  111r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   29856 spamd  169r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   29856 spamd  189r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   29857 spamd  189r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   29857 spamd  190r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   29872 spamd  191r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   29872 spamd  192r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   29875 spamd  191r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   29875 spamd  192r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen
spamd   29921 spamd  192r   REG8,1  5132288 402667308 
/var/spamassassin/bayesdb/bayes_toks
spamd   29921 spamd  193r   REG8,1   172032 402828743 
/var/spamassassin/bayesdb/bayes_seen

Regards, Emanuel.

De: Matus UHLAR - fantomas 
Enviado: miércoles, 20 de enero de 2021 9:09
Para: users@spamassassin.apache.org 
Asunto: Re: Error "cannot open bayes databases" lock failed: File exists

On 20.01.21 11:07, Emanuel Gonzalez wrote:
>Date: Wed, 20 Jan 2021 11:07:59 +
>From: Emanuel Gonzalez 
>To: SA Mailing list 
>Subject: Re: Error "cannot open bayes databases" lock failed: File exists
>
>Hello everyone, i'm back from my vacations, i try solved this problem but i 
>could not.
>
>I still see in the spamsassin error logs the mentioned error:
>
>bayes_learn_to_journal 1
>use_bayes yes
>bayes_path /var/spamassassin/bayesdb/bayes
>bayes_auto_learn 0
>bayes_auto_expire 0
>

try:

ls -la /var/spamassassin/bayesdb/bayes
lsof /var/spamassassin/bayesdb/bayes_journal  
/var/spamassassin/bayesdb/bayes_seen /var/spamassassin/bayesdb/bayes_toks

> - rw--- 1 spamd spamd   48984 ene 20 08:06 
> /var/spamassassin/bayesdb/bayes_journal
>-rwxr-xr-x 1 spamd spamd  172032 dic 18 10:52 
>/var/spamassassin/bayesdb/bayes_seen
>-rwxr-xr-x 1 spamd spamd 5132288 ene 20 08:05 
>/var/spamassassin/bayesdb/bayes_toks
>
>Jan 20 07:25:27 eternia6 spamd[22817]: bayes: cannot open bayes databases 
>/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
>Jan 20 07:25:27 eternia6 spamd[22916]: bayes: cannot open bayes databases 
>/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
>Jan 20 07:25:27 eternia6 spamd[22843]: bayes: cannot open bayes databases 
>/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
>
>
>Any ideas?  i don't know how resolve this error.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Atheism is a non-prophet organization.


Re: Error "cannot open bayes databases" lock failed: File exists

2021-01-20 Thread Emanuel Gonzalez
Hello everyone, i'm back from my vacations, i try solved this problem but i 
could not.

I still see in the spamsassin error logs the mentioned error:

bayes_learn_to_journal 1
use_bayes yes
bayes_path /var/spamassassin/bayesdb/bayes
bayes_auto_learn 0
bayes_auto_expire 0

#

 - rw--- 1 spamd spamd   48984 ene 20 08:06 
/var/spamassassin/bayesdb/bayes_journal
-rwxr-xr-x 1 spamd spamd  172032 dic 18 10:52 
/var/spamassassin/bayesdb/bayes_seen
-rwxr-xr-x 1 spamd spamd 5132288 ene 20 08:05 
/var/spamassassin/bayesdb/bayes_toks

Jan 20 07:25:27 eternia6 spamd[22817]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
Jan 20 07:25:27 eternia6 spamd[22916]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
Jan 20 07:25:27 eternia6 spamd[22843]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists


Any ideas?  i don't know how resolve this error.

Regards, Emanuel.


Error "cannot open bayes databases" lock failed: File exists

2020-12-30 Thread Emanuel Gonzalez
Good Morning everyone,

In the logs of spamassassin i see this error:

Dec 30 09:56:57 eternia6 spamd[15993]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
Dec 30 09:56:57 eternia6 spamd[15915]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
Dec 30 09:56:58 eternia6 spamd[16002]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
Dec 30 09:56:59 eternia6 spamd[15960]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
Dec 30 09:57:00 eternia6 spamd[15847]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists
Dec 30 09:57:01 eternia6 spamd[15909]: bayes: cannot open bayes databases 
/var/spamassassin/bayesdb/bayes_* R/W: lock failed: File exists

is possible be an error of permission?

drwsr-sr-x 3 spamd spamd 20 dic 18 10:26 /var/spamassassin
drwxr-xr-x 2 spamd spamd 60 dic 30 10:03 /var/spamassassin/bayesdb/

-rw--- 1 spamd spamd   66960 dic 30 10:03 bayes_journal
-rwxr-xr-x 1 spamd spamd  172032 dic 18 10:52 bayes_seen
-rwxr-xr-x 1 spamd spamd 5132288 dic 30 10:03 bayes_toks

# Bayes config

use_bayes yes
bayes_path /var/spamassassin/bayesdb/bayes
bayes_auto_learn 0
bayes_auto_expire 0

# SpamAssassin Deamon config

SPAMDOPTIONS="-u spamd --round-robin --min-children=30 --max-children=180 
--min-spare=25 --max-spare=80 --timeout-child=60 --max-conn-per-child=150
-i -A 
172.17.0.0/16,10.0.0.0/8,200.58.96.0/19,179.43.112.0/20,168.197.48.0/22,168.181.184.0/22,138.219.40.0/22,138.36.236.0/22,66.97.32.0/20"

I read various publications for this error but i don't know how resolve it.

Any ideas, recommendations?

Regards, Emanuel.


RE: How do you fight image-spam?

2020-01-17 Thread Emanuel Gonzalez
I haven't touched the plugin at all, download the rpm file from 
http://repo.iotti.biz/CentOS/7/noarch/spamassassin-FuzzyOcr-3.6.0-12.el7.lux.1.noarch.rpm
 and follow installation steps

Any ideas?

Regards,

De: Matus UHLAR - fantomas 
Enviado: viernes, 17 de enero de 2020 10:55
Para: users@spamassassin.apache.org 
Asunto: Re: How do you fight image-spam?

On 17.01.20 13:46, Emanuel Gonzalez wrote:
>I'm trying to fight an image, which refers to an attempt at Microsoft 
>phishing, i install FuzzyOCR, i know this plugin is very old.
>
>the installation is fine, but I don't see the plug-in loading correctly, 
>because I train a spam message and in the logs I don't see any information 
>related to the import to the plugin database:
>
>spamassassin --debug FuzzyOcr < Vista\ Previa\ -\ Confirme\ inicio\ de\ 
>sesion.eml > /dev/null
>ene 17 09:02:52.231 [31789] dbg: FuzzyOcr: focr_bin_helper: 
>'pnmnorm,pnminvert,pamthreshold,ppmtopgm,pamtopnm'
[...]
>ene 17 09:02:52.568 [31789] info: FuzzyOcr: Loaded preprocessor normalize: 
>/usr/bin/pnmnorm
>ene 17 09:02:52.568 [31789] info: FuzzyOcr: Loaded preprocessor invert: 
>/usr/bin/pnminvert
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Loaded preprocessor ppmtopgm: 
>/usr/bin/ppmtopgm
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Loaded preprocessor pamtopnm: 
>/usr/bin/pamtopnm
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Loaded preprocessor pamthreshold: 
>/usr/bin/pamthreshold -simple -threshold 0.5
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Loaded preprocessor maketiff: 
>pnmtotiff -color -truecolor
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Using scan ocrad: /usr/bin/ocrad 
>-s5 $input
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Using scan ocrad-invert: 
>/usr/bin/ocrad -s5 -i $input
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Using scan 
>ocrad-decolorize-invert: /usr/bin/ocrad -s5 -i $input
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Using scan ocrad-decolorize: 
>/usr/bin/ocrad -s5 $input
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Using scan gocr: /usr/bin/gocr -i 
>$input
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Using scan gocr-180: /usr/bin/gocr 
>-l 180 -d 2 -i $input
>ene 17 09:02:52.569 [31789] info: FuzzyOcr: Added <45> words from 
>"/etc/mail/spamassassin/FuzzyOcr.words"

I would expect some more lines here, did you break it?
note that fuzzyocr plugin can run for a long time.

>This plugin is work fine in Centos 7?

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Save the whales. Collect the whole set.


How do you fight image-spam?

2020-01-17 Thread Emanuel Gonzalez
Hi, everyone.!!

I'm trying to fight an image, which refers to an attempt at Microsoft phishing, 
i install FuzzyOCR, i know this plugin is very old.

the installation is fine, but I don't see the plug-in loading correctly, 
because I train a spam message and in the logs I don't see any information 
related to the import to the plugin database:

spamassassin --debug FuzzyOcr < Vista\ Previa\ -\ Confirme\ inicio\ de\ 
sesion.eml > /dev/null
ene 17 09:02:52.231 [31789] dbg: FuzzyOcr: focr_bin_helper: 
'pnmnorm,pnminvert,pamthreshold,ppmtopgm,pamtopnm'
ene 17 09:02:52.231 [31789] info: FuzzyOcr: Adding <5> new helper apps
ene 17 09:02:52.231 [31789] dbg: FuzzyOcr: focr_bin_helper: 'tesseract'
ene 17 09:02:52.231 [31789] info: FuzzyOcr: Adding <1> new helper apps
ene 17 09:02:52.231 [31789] dbg: FuzzyOcr: focr_bin_helper: 
'pnmnorm,pnminvert,convert,ppmtopgm,tesseract'
ene 17 09:02:52.231 [31789] warn: FuzzyOcr: pnmnorm is already defined, 
skipping...
ene 17 09:02:52.231 [31789] warn: FuzzyOcr: pnminvert is already defined, 
skipping...
ene 17 09:02:52.231 [31789] warn: FuzzyOcr: ppmtopgm is already defined, 
skipping...
ene 17 09:02:52.231 [31789] warn: FuzzyOcr: tesseract is already defined, 
skipping...
ene 17 09:02:52.231 [31789] info: FuzzyOcr: Adding <1> new helper apps
ene 17 09:02:52.232 [31789] info: FuzzyOcr: Starting preprocessor parser for 
file "/etc/mail/spamassassin/FuzzyOcr.preps"...
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: preprocessor normalize {
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: command = pnmnorm
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: }
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: preprocessor invert {
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: command = pnminvert
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: }
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: preprocessor ppmtopgm {
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: command = ppmtopgm
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: }
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: preprocessor pamtopnm {
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: command = pamtopnm
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: }
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: preprocessor pamthreshold {
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: command = pamthreshold
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: args = -simple -threshold 0.5
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: }
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: preprocessor maketiff {
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: command = pnmtotiff
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: args = -color -truecolor
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line: }
ene 17 09:02:52.232 [31789] info: FuzzyOcr: Starting scanset parser for file 
"/etc/mail/spamassassin/FuzzyOcr.scansets"...
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line scanset ocrad {
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line command = $ocrad
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line args = -s5 $input
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line }
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line scanset ocrad-invert {
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line command = $ocrad
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line args = -s5 -i $input
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line }
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line scanset ocrad-decolorize-invert 
{
ene 17 09:02:52.232 [31789] dbg: FuzzyOcr: line preprocessors = ppmtopgm, 
pamthreshold, pamtopnm
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line command = $ocrad
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line args = -s5 -i $input
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line }
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line scanset ocrad-decolorize {
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line preprocessors = ppmtopgm, 
pamthreshold, pamtopnm
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line command = $ocrad
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line args = -s5 $input
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line }
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line scanset gocr {
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line command = $gocr
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line args = -i $input
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line }
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line scanset gocr-180 {
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line command = $gocr
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line args = -l 180 -d 2 -i $input
ene 17 09:02:52.233 [31789] dbg: FuzzyOcr: line }
ene 17 09:02:52.567 [31789] info: FuzzyOcr: Searching in: /usr/local/netpbm/bin
ene 17 09:02:52.567 [31789] info: FuzzyOcr: Searching in: /usr/local/bin
ene 17 09:02:52.567 [31789] info: FuzzyOcr: Searching in: /usr/bin
ene 17 09:02:52.567 [31789] info: FuzzyOcr: Using gifsicle => /usr/bin/gifsicle
ene 17 09:02:52.567 [31789] info: FuzzyOcr: Using giffix => /usr/bin/giffix
ene 17 09:02:52.567 [31789] info: FuzzyOcr: 

Whitelist rcvd IP

2019-06-12 Thread Emanuel Gonzalez
Hello,

I have the need to mark certain IP addresses as secure, only for receiving 
mail, but I can not find information about it.

In a publication they advise using the module called Mail :: SpamAssassin :: 
Plugin :: WhitelistRcvdIP but I can not find it.

Any ideas.?

Regards,


RE: Spamd error message "spamd: error: addr is not a string"

2019-05-29 Thread Emanuel Gonzalez
Hello.!!!

[root@server ~] # yum list installed perl-Socket
Complementos cargados:fastestmirror
Loading mirror speeds from cached hostfile
 * elrepo: ftp.utexas.edu
 * epel: espejito.fder.edu.uy
Paquetes instalados
perl-Socket.x86_64 
2.010-4.el7_1 installed

[root@server ~] # yum list installed perl
Complementos cargados:fastestmirror
Loading mirror speeds from cached hostfile
 * elrepo: ftp.utexas.edu
 * epel: espejito.fder.edu.uy
Paquetes instalados
perl.x86_64  
4:5.16.3-294.el7_6   
@updates



De: Bill Cole 
Enviado: martes, 28 de mayo de 2019 16:41
Para: Mailing-List spamassassin
Asunto: Re: Spamd error message "spamd: error: addr is not a string"

On 28 May 2019, at 14:55, Emanuel Gonzalez wrote:

> Hello, i updated perl via yum.
>
> # spamassassin --version
> SpamAssassin version 3.4.2
>   running on Perl version 5.16.3
>
> CentOS Linux release 7.6.1810 (Core)
> x86_64
>
> I see this error:
>
> May 28 15:40:03 server spamd[17267]: spamd: error: addr is not a
> string at /usr/share/perl5/vendor_perl/IO/Socket/IP.pm line 685.
>
>
> any ideas.?


Run "yum list installed perl-Socket" to verify that you have version
2.010-4.el7. If not, upgrade (or install) the perl-Socket package.

There are other *possible* sources of that error, so you may find it
useful to update all of your Perl packages to the latest versions in the
CentOS 7 repository.


Spamd error message "spamd: error: addr is not a string"

2019-05-28 Thread Emanuel Gonzalez
Hello, i updated perl via yum.

# spamassassin --version
SpamAssassin version 3.4.2
  running on Perl version 5.16.3

CentOS Linux release 7.6.1810 (Core)
x86_64

I see this error:

May 28 15:40:03 server spamd[17267]: spamd: error: addr is not a string at 
/usr/share/perl5/vendor_perl/IO/Socket/IP.pm line 685.


any ideas.?


Spamd error message "failed to obtain port and ip from socket"

2019-05-14 Thread Emanuel Gonzalez
Hello,

I'm afraid that someone updated some python (maybe perl?) component and there 
are SpamAssassin plugins that stopped working.
Any idea how to correct this error?

May 14 10:47:30 server spamd[2041]: spamd: error: failed to obtain port and ip 
from socket at /usr/bin/spamd line 1594.
May 14 10:47:30 server spamd[2041]:  Transport endpoint is not connected, 
continuing at /usr/bin/spamd line 1406.
May 14 10:47:40 server spamd[2018]: spamd: error: failed to obtain port and ip 
from socket at /usr/bin/spamd line 1594.
May 14 10:47:40 server spamd[2018]:  Transport endpoint is not connected, 
continuing at /usr/bin/spamd line 1406.
May 14 10:47:40 server spamd[1976]: spamd: error: failed to obtain port and ip 
from socket at /usr/bin/spamd line 1594.
May 14 10:47:40 server spamd[1976]:  Transport endpoint is not connected, 
continuing at /usr/bin/spamd line 1406.

[root@server ~] # spamassassin --version
SpamAssassin version 3.4.1
  running on Perl version 5.10.1

Thanks for the help.


Re: spamd fails to remove bayes.lock file

2018-10-29 Thread Emanuel Gonzalez
Hi.!!

the permits of the directory are correct:

ll -d /.spamassassin/
drwxrwxr-x 2 nobody nobody 63 oct 29 08:54 /.spamassassin/

The parameter bayes_auto_learn is set to "0".

any ideas?

Regards,

Emanuel.


RE: Bayes error (lock failed: File exists)

2018-10-24 Thread Emanuel Gonzalez
Any help?



spamd fails to remove bayes.lock file

2018-10-24 Thread Emanuel Gonzalez
Hello.!!

I have a problem with the `/.spamassassin/bayes.lock`

This is the error I'm seeing :

Oct 23 15:12:14 server spamd[18073]: bayes: cannot open bayes databases
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 23 15:12:14 server spamd[18157]: bayes: cannot open bayes databases
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 23 15:12:14 server spamd[18107]: bayes: cannot open bayes databases
/.spamassassin/bayes_* R/W: lock failed: File exists


The command `spamassassin -V` is showing :

SpamAssassin version 3.4.1
running on Perl version 5.10.1

bayes_expiry_max_db_size 15
bayes_learn_to_journal 1
bayes_auto_learn 0


128Kbayes_journal
547Mbayes_seen
4,0Mbayes_toks


# spamassassin

SPAMDOPTIONS="-u nobody -H --round-robin --min-children=30
--max-children=190 --min-spare=5 --max-spare=80 --timeout-child=120
--max-conn-per-child=100 -i -A IP"

# directory perms

Also the command `ll -d /.spamassassin` is showing :

drwxrwxrwx 3 nobody nobody 4096 oct 23 15:16 /.spamassassin

I restart the service and it works, but the problem reappears again

Do you have any idea how to solve it?

Regards,


spamd: error: failed to obtain port and ip from socket

2018-10-24 Thread Emanuel Gonzalez
Hello.!!

I have a problem with the `/.spamassassin/bayes.lock`

This is the error I'm seeing :

Oct 23 15:12:14 server spamd[18073]: bayes: cannot open bayes databases
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 23 15:12:14 server spamd[18157]: bayes: cannot open bayes databases
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 23 15:12:14 server spamd[18107]: bayes: cannot open bayes databases
/.spamassassin/bayes_* R/W: lock failed: File exists


The command `spamassassin -V` is showing :

SpamAssassin version 3.4.1
running on Perl version 5.10.1

bayes_expiry_max_db_size 15
bayes_learn_to_journal 1
bayes_auto_learn 0


128Kbayes_journal
547Mbayes_seen
4,0Mbayes_toks


# spamassassin

SPAMDOPTIONS="-u nobody -H --round-robin --min-children=30
--max-children=190 --min-spare=5 --max-spare=80 --timeout-child=120
--max-conn-per-child=100 -i -A IP"

# directory perms

Also the command `ll -d /.spamassassin` is showing :

drwxrwxrwx 3 nobody nobody 4096 oct 23 15:16 /.spamassassin

I restart the service and it works, but the problem reappears again

Do you have any idea how to solve it?

Regards,


spamd fails to remove bayes.lock file

2018-10-23 Thread Emanuel Gonzalez
Hello,

I have a problem with the /.spamassassin/bayes.lock

I see this error:

Oct 23 15:12:14 server spamd[18073]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 23 15:12:14 server spamd[18157]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 23 15:12:14 server spamd[18107]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists


spamassassin -V
SpamAssassin version 3.4.1
running on Perl version 5.10.1

bayes_expiry_max_db_size 15
bayes_learn_to_journal 1
bayes_auto_learn 0

# spamassassin

SPAMDOPTIONS="-u nobody -H --round-robin --min-children=30 --max-children=190 
--min-spare=5 --max-spare=80 --timeout-child=120 --max-conn-per-child=100 -i -A 
IP"

# directory perms

ll -d /.spamassassin
drwxrwxrwx 3 nobody nobody 4096 oct 23 15:16 /.spamassassin



Any idea how to solve it?

Regards,


Re: Spamassassin 3.4.2 RPM for CentOS 6

2018-10-22 Thread Emanuel Gonzalez
rpm for Centos 7???


Bayes error (lock failed: File exists)

2018-10-22 Thread Emanuel Gonzalez
Hello,

from one day to the next I stop working the service, I have 14 servers with 
spamassassin and they all return this error message:

Oct 22 10:58:10 eternia13 spamd[14361]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 22 10:58:10 eternia13 spamd[14361]: spamd: checking message 
 for 
nobody:99
Oct 22 10:58:10 eternia13 spamd[15080]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 22 10:58:10 eternia13 spamd[14359]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 22 10:58:10 eternia13 spamd[14359]: spamd: checking message 
<007e01d46a0f$410e58e0$c32b0aa0$@hotelviamonte.com.ar> for nobody:99
Oct 22 10:58:10 eternia13 spamd[14428]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists
Oct 22 10:58:11 eternia13 spamd[15082]: bayes: cannot open bayes databases 
/.spamassassin/bayes_* R/W: lock failed: File exists

SPAMDOPTIONS="-u nobody -H --min-children=30 --max-children=190 --min-spare=5 
--max-spare=120 --timeout-child=120 --max-conn-per-child=120

spamassassin -V
SpamAssassin version 3.4.1
  running on Perl version 5.16.3


any ideas?


ASN Blacklist

2018-09-07 Thread Emanuel Gonzalez
Hello, I would like to know if it is possible to assign a specific score to 
e-mails from China or another country in Asia.


Example mail SPAM:


Dear Value Customer,

Good day,this is N.G from GRAND SEA SERVICE CO.,LTD.(GSS),we are a energetic 
and leading logistics company in China,member of NOVCC and WCA.

We can offer you all kinds of service for FCL/LCL/AIR shipments,also with other 
logistic service such as Trucking/Warehouse/Customs Clearance here in China and 
destination.

If you have any inquiry from China,please feel free to contact us,we'll try our 
best to complete the shipments.

*
Tks & Rgds
N.G/Oversea Manager

GRAND SEA SERVICE CO.,LTD (深圳市浩海达国际货运代理有限公司)
NVOCC NO:MOC NV 08847
Room 1207-1209. 12th Floor,Yue Yun Building, No.1001,Wenjin South Road,LuoHu 
District,ShenZhen
Email:overs...@gsssz.com
Tel:86-755-25993989-8006  Fax:86-755-61640997



IP 106.75.232.29


inetnum:106.75.0.0 - 106.75.255.255
netname:UCLOUD-NET
descr:  Shanghai UCloud Information Technology Company Limited
admin-c:JJ2197-AP
tech-c: JJ2197-AP
country:CN
mnt-by: MAINT-CNNIC-AP
mnt-lower:  MAINT-CNNIC-AP
mnt-irt:IRT-CNNIC-CN
mnt-routes: MAINT-CNNIC-AP
status: ALLOCATED PORTABLE
last-modified:  2017-06-22T01:26:01Z
source: APNIC


Regards,





Re: Anti Phish Rules

2018-04-26 Thread Emanuel Gonzalez
Here is an example of an phishing email:

Authentication-Results: spf=none (sender IP is 200.58.117.126)
 smtp.mailfrom=ppl3.com; hotmail.com; dkim=fail (body hash did not verify)
 header.d=c0800455.domain.com;hotmail.com; dmarc=none action=none
 header.from=ppl3.com;
Received-SPF: None (protection.outlook.com: ppl3.com does not designate
 permitted sender hosts)
Received: from smht-x-x.domain.com (200.58.117.126) by
 DB5EUR03FT006.mail.protection.outlook.com (10.152.20.106) with Microsoft SMTP
 Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P384) id
 15.20.696.11 via Frontend Transport; Thu, 26 Apr 2018 10:22:41 +
X-IncomingTopHeaderMarker: 
OriginalChecksum:BC2CEE5C26E95CD829053392BF062A8A8EF5B80B38721334E4D422793F5D4711;UpperCasedChecksum:DBAACD04967E0EBE075BAE00C7F9A355386276A19553DE2D32FBB1B903C63A0B;SizeAsReceived:3262;Count:21
Received: from c00.domain.com (c00 [172.x.x.x])
by smarthost.domain.com (Postfix) with ESMTPS id 4FC2A2A24
for ; Thu, 26 Apr 2018 07:22:39 -0300 (-03)
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
d=c0800455.domain; s=mail; h=Content-Transfer-Encoding:Content-Type:

MIME-Version:Date:Subject:To:From:Message-ID:Sender:Reply-To:Cc:Content-ID:

Content-Description:Resent-Date:Resent-From:Resent-Sender:Resent-To:Resent-Cc

:Resent-Message-ID:In-Reply-To:References:List-Id:List-Help:List-Unsubscribe:
List-Subscribe:List-Post:List-Owner:List-Archive;
bh=LUcrH5hRyj2Ujx36ZGDIENRVn7MtrTTfammZnXLJGrg=; 
b=RXl8e5v1c/TQQo/kLRo+tyg4VA

54BiXbsaC0z2TFM3dMDf4uNZpILl2RXYzhwcKptr9UVm+LQHUXW9UJmdqXKywlisZXyyJtk4U5KSP
LcaKmcWO+d9HwQWLY3MeDjBT4iw4xEiEeVN4Myra1K8Mf8Pfs3U42IqPHJWF4lLVPSeo=;
Received: from [105.155.80.137] (helo=Abdo-PC)
by c000.domain.com with esmtpsa (TLSv1:EDH-RSA-DES-CBC3-SHA:168)
(Exim 4.87_1)
(envelope-from )
id 1fBe2q-0006i7-4d
for mkch...@hotmail.com; Thu, 26 Apr 2018 07:22:39 -0300
Message-ID: <0364314f-43216-021f47358625@abdo-pc>
From: PayPal Inc 


Could you apply some verification for the signature dkim? I'm working in it




De: Matus UHLAR - fantomas 
Enviado: jueves, 26 de abril de 2018 5:12:05
Para: users@spamassassin.apache.org
Asunto: Re: Anti Phish Rules

On 26.04.18 18:00, Nick Edwards wrote:
>We've been using a separate product to do this, but it struck me, maybe
>spamassassin can do this easier (or without having to call yet another
>binary to run as can over mails)
>
>Rules that look at URLs in a html message  href and src tags, check the "A"
>tag to see if there is a URL there, and if they do not match,  consider it
>a phis so apply said phis score to the message.
>
>Has anyone done this? module even?

the main problem: may non-spam senders do that, see:

https://wiki.apache.org/spamassassin/AntiPhishFakeUrlRule

and further the discussion in linked bug:

https://bz.apache.org/SpamAssassin/show_bug.cgi?id=4255

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Micro$oft random number generator: 0, 0, 0, 4.33e+67, 0, 0, 0...


plugin: eval failed: bayes: Redis failed

2018-04-10 Thread Emanuel Gonzalez
Hello,


I install Redis vía yum in Centos 7 and through cpan the Mail plugin :: 
SpamAssassin :: BayesStore :: Redis.


In local.cf add this rule:


bayes_store_module  Mail::SpamAssassin::BayesStore::Redis
bayes_sql_dsn  server=0.0.0.0:6379,database=0

In redis.conf:

port 6379

pidfile /var/run/redis.pid
logfile /var/log/redis.log
#loglevel notice
loglevel verbose

databases 16
save 600 1

dir /var/lib/redis
dbfilename dump.rdb

maxclients 1024
timeout 30

I see this error:

abr 10 08:18:56.229 [8978] dbg: bayes: _open_db(not yet connected)
plugin: eval failed: bayes: Redis failed: Error: Argumento inválido at 
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore/Redis.pm line 264. at 
/usr/share/perl5/vendor_perl/Mail/SpamAssassin/BayesStore/Redis.pm line 271.


any ideas?

I have followed the steps of 
https://svn.apache.org/repos/asf/spamassassin/trunk/contrib/HOWTO.Bayes-Redis/ 
the following documentation but it is very brief



Re: bayes: cannot open bayes databases lock failed: File exists

2018-04-09 Thread Emanuel Gonzalez
Hello, thanks for the reply. I use one database bayes for all email accounts 
(not sites, sorry for the error)


here i show some spamassassin configuration


local.cf


bayes_expiry_max_db_size 15
bayes_learn_to_journal 1
bayes_auto_learn 0

include custom_rules
include whitelist
include blacklist
include hostname


I have two questions:


1- How do I configure? I can not find a tutorial, only information about 
spamassassin and mysql, not spamassassin and redis


2- why the bayes is empty?

sa-learn --dump all
0.000  0  3  0  non-token data: bayes db version
0.000  0  0  0  non-token data: nspam
0.000  0  0  0  non-token data: nham
0.000  0  0  0  non-token data: ntokens
0.000  0  0  0  non-token data: oldest atime
0.000  0  0  0  non-token data: newest atime
0.000  0  0  0  non-token data: last journal sync atime
0.000  0  0  0  non-token data: last expiry atime
0.000  0  0  0  non-token data: last expire atime delta
0.000  0  0  0  non-token data: last expire reduction 
count

du -sh /.spamassassin/bayes_*
8,0K/.spamassassin/bayes_journal
513M/.spamassassin/bayes_seen
4,0M/.spamassassin/bayes_toks

Regards and thanks for the reply.



De: Matus UHLAR - fantomas <uh...@fantomas.sk>
Enviado: lunes, 9 de abril de 2018 13:00:49
Para: users@spamassassin.apache.org
Asunto: Re: bayes: cannot open bayes databases lock failed: File exists

On 09.04.18 11:01, Emanuel Gonzalez wrote:
>I use one bayes database to all sites in my server.

sites? afaik spamd and MTAs differ between mailboxes, not sites.

>What would be the best way to avoid my problem?? create a database of bayes
> by email account?  Or create a unique database of bayes for all email
> accounts?

so, do you use one or multipler BAYES databases?


>De: Pedro David Marco <pedrod_ma...@yahoo.com>
>Enviado: viernes, 6 de abril de 2018 19:01:53
>Para: users@spamassassin.apache.org
>Asunto: Re: bayes: cannot open bayes databases lock failed: File exists
>
>
>>under such load, yes.
>>if you use per-site bayes database, you can try redis - even faster than
>>mysql.
>
>Much much much faster

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Silvester Stallone: Father of the RISC concept.


Re: bayes: cannot open bayes databases lock failed: File exists

2018-04-09 Thread Emanuel Gonzalez
Hello, thans for the reply.

I use one bayes database to all sites in my server.

What would be the best way to avoid my problem?? create a database of bayes by 
email account? Or create a unique database of bayes for all email accounts?

Thanks,



De: Pedro David Marco 
Enviado: viernes, 6 de abril de 2018 19:01:53
Para: users@spamassassin.apache.org
Asunto: Re: bayes: cannot open bayes databases lock failed: File exists


>under such load, yes.
>if you use per-site bayes database, you can try redis - even faster than
>mysql.

Much much much faster


PedroD



Re: rule enlist_uri_host not work

2017-11-17 Thread Emanuel Gonzalez
AH.!!!


it only analyzes the existence of the extensions inside the body of the 
message, I understood that it worked at field level from.


Any recommendation?


Regards,


Emanuel.


De: John Hardin <jhar...@impsec.org>
Enviado: viernes, 17 de noviembre de 2017 14:01:49
Para: users@spamassassin.apache.org
Asunto: Re: rule enlist_uri_host not work

On Fri, 17 Nov 2017, Emanuel Gonzalez wrote:

> enlist_uri_host (MED) tk uk ru tr cn kr vn us za
>
> From: en...@enviando.tk

>From address is not a URI.


--
  John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
  jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
   It's easy to be noble with other people's money.
-- John McKay, _The Welfare State:
   No Mercy for the Middle Class_
---
  232 days since the first commercial re-flight of an orbital booster (SpaceX)


rule enlist_uri_host not work

2017-11-17 Thread Emanuel Gonzalez
Hello,

I create this rule in my custom_rules.

enlist_uri_host (HIGH) date win faith racing top bid website stream link xyz 
fun fyi loan club party trade click men ninja cricket download

enlist_uri_host (MED) tk uk ru tr cn kr vn us za

header   DW_OTHER_BAD_TLD eval:check_uri_host_listed('HIGH')
scoreDW_OTHER_BAD_TLD 3
describe URI_HOST_LOW   Host or domain found in URI is listed in the HIGH list
#describe DW_OTHER_BAD_TLD Other untrustworthy TLDs

# MEDIUM LEVEM INBOUND SPAM

header   DW_OTHER_BAD_TLD eval:check_uri_host_listed('MED')
scoreDW_OTHER_BAD_TLD 1.5
describe URI_HOST_LOW   Host or domain found in URI is listed in the MED list

But not detected the TLD .TK

From: en...@enviando.tk
To: user@domain

  pts rule name  description
  -- --
  4.0 BAYES_99   BODY: Bayes spam probability is 99 to 100%
 [score: 1.]
 -0.0 SPF_PASS   SPF: sender matches SPF record
  1.4 BAYES_999  BODY: Bayes spam probability is 99.9 to 100%
 [score: 1.]
  0.0 HTML_MESSAGE   BODY: HTML included in message
  0.1 DKIM_SIGNEDMessage has a DKIM or DK signature, not 
necessarily valid
  0.8 RDNS_NONE  Delivered to internal network by a host with no 
rDNS
  0.0 T_DKIM_INVALID DKIM-Signature header exists but is not valid
X-Spam-Threshold: 60
X-Spam-Status: Yes
Subject: test

Regards.!!!