strange entries in log

2009-09-17 Thread François Rousseau
Hello,

I just notice that I have many time the same strange line in my spamd
log.  Anyone have an idea about this?

SpamAssassin Server version 3.2.5

log entries:
Sep 16 18:08:06 myhostname spamd[2008]:
s-female-silhouettes-beverages-film-hearts-music-notes-and-thea...
Sep 16 18:08:06 myhostname spamd[2008]: truncated to 63 octets
(RFC1035 2.3.1) at /usr/lib/perl5/Net/DNS/Question.pm line 233


Thanks,
François


Re: strange entries in log

2009-09-17 Thread François Rousseau
Thanks for the information.

If I understand correctly, an email is scan by spamassassin and in
this email, a link or a headers point to a an invalid domain.

Thanks,
François

2009/9/17 LuKreme krem...@kreme.com:
 On Sep 17, 2009, at 11:25, Jason Bertoch ja...@i6ix.com wrote:

 Per Jessen wrote:

 A domain name component cannot be more than 63 characters.

 I am under the impression that host names are limited to 255 characters.
  Maybe I missed something in the RFC?

 No, 255 TOTAL characters, but no one component can exceed 63.




Outlook 2007/imap headers

2009-09-01 Thread François Rousseau
Hello,

Almost all my user use Outlook :(

In the past with Outlook 2003, I was using an IMAP account to permit
my users to transmit their spam with all the headers.  But now with
Outlook 2007 I lost almost all the headers when the email is moved to
an IMAP account.

Anyone have found a solution to this great new Outlook feature?

Thanks,
François


Re: Outlook 2007/imap headers

2009-09-01 Thread François Rousseau
Sorry I have forget to specify the other Microsoft tricks ;)

You will continu to see all the headers in you Outlook client but if
you use another email client or if you go check directly on the email
server you will not have all the headers (only a part of it).

* I have not test with Exchange account, only pop3.

François

2009/9/1 Rob Sterenborg r.sterenb...@netsourcing.nl:
 Hello,

 Almost all my user use Outlook :(

 In the past with Outlook 2003, I was using an IMAP account to
 permit
 my users to transmit their spam with all the headers.  But now with
 Outlook 2007 I lost almost all the headers when the email is moved
 to
 an IMAP account.

 Anyone have found a solution to this great new Outlook feature?

 I just moved an email from the Exchange store to my personal IMAP mailbox 
 (Dovecot) using OL2007 but AFAICT I'm not losing any headers.


 Rob




Re: Outlook 2007/imap headers

2009-09-01 Thread François Rousseau
2009/9/1 Benny Pedersen m...@junc.org:
 On tir 01 sep 2009 16:18:37 CEST, François Rousseau wrote

 Almost all my user use Outlook :(

 why is it sad ?, it can do imap aswell as pop3

 In the past with Outlook 2003, I was using an IMAP account to
 permit my users to transmit their spam with all the headers.

 okay

 But now with Outlook 2007 I lost almost all the headers when the
 email is moved to an IMAP account.

 moved from imap to imap folder ?, same remote password in one mailbox on
 server ?

 if otherwize the user gets mail from pop3 and later move it with imap, then
 i might say headers will be changed

 Anyone have found a solution to this great new Outlook feature?

 dovecot-antispam, and all remote users via imap, it even works with amiga :)

 dspam add a tag to the body so when reported back as ham or spam, it only
 need this tag to know original headers and body as learnt in the first place

 --
 xpoint



Maybe I was not clear but yes my users use pop3 accounts and move
problematic email to one common IMAP account.  (in fact one common
account by group of users)

With Thunderbird and Outlook 2003, the headers was there but not with
Outlook 2007.

It could be an idea to encapsulated the spam message into another
email (report_safe) but I could also juste keep trying to explain to
some of my user how to forward an email as an attachment.

Thanks,
François


Re: posting thru gmane to this list and not getting bombarded

2007-11-21 Thread François Rousseau
Maybe iI'm weird but... what is the point to posting to a mailing list
if you don't read it?

François Rousseau

2007/11/21, Bowie Bailey [EMAIL PROTECTED]:
 mouss wrote:
  Micah Anderson wrote:
   * [EMAIL PROTECTED] [EMAIL PROTECTED] [071119 10:01]:
  
 PS: I post to this list using gmane. Is it possible to stop
 delivery on my email address so that I can post but I do not
 receive the list messages?
   
http://www.google.com/[EMAIL PROTECTED]
   
  
   Can this information be added to
   http://wiki.apache.org/spamassassin/MailingLists ?
  
 
  I fail to see the relationship between the OP question and this google
  search URL.
 
  The thread in the search url is about filtering mail once it is
  received. OP would like not to receive the mail in the first place.

 The second search result is the relevant one:

 You can do the equivalent (to turn off delivery) by un-subscribing
 from the user's list and subscribing to
 [EMAIL PROTECTED] .

 --
 Bowie



Re: Spamd HIGH LOAD

2007-11-05 Thread François Rousseau
How do you start spamassassin?



On 11/5/07, Qnet .. [EMAIL PROTECTED] wrote:


 I used /usr/bin/sa-update –D allways. then restart. but I have the load
 problem still. Do you know other way to solve it? thanks.
 From: [EMAIL PROTECTED]
 To: users@spamassassin.apache.org
 Subject: RE: Spamd HIGH LOAD
 Date: Mon, 5 Nov 2007 16:11:57 -0500

























 From: Qnet ..
 [mailto:[EMAIL PROTECTED]

 Sent: Monday, November 05, 2007 2:47 PM

 To: users@spamassassin.apache.org

 Subject: Spamd HIGH LOAD







 Hi,


 My Qmail server work  with spamassassin + clamav. The processes
 Spamd  take the most part of the load so it 's  Spamassassin
 crash. Do you know any way to solve it?

 Please look the attach file( top -d1 ). Thank you so munch !











 Try running /usr/bin/sa-update –D, then restart SA see if this
 helps.



 Also do you run rulesdajour?



 Joey









 _
 Express yourself instantly with MSN Messenger! Download today it's FREE!
 http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/


Re: Still problems with spamd at 100%

2007-11-02 Thread François Rousseau
First, this answer will not solve your problem but I wish will help
you to identify the exact trouble.

Try to disable every module/option, one by one.
Also try to remove some rules, maybe start with __DOS_HAS_ANY_URI

That will not solve your issue but it will probably help to find what
is causing the issue.

François Rousseau

2007/10/30, Peter Fastré [EMAIL PROTECTED]:
 A few weeks ago, I posted the following question:

 Hello

 I have a severe problem with one of my mailservers. I'm using spamassassin
 3.2.3 in combination with exim 4.66, and experience hanging spamd processes
 which consume all my server resources.
 I've searched these mailing lists, searched google, searched documentation,
 ... I found very much old posts of people experiencing the same problems, so
 I think it's a very common one. I tried different solutions: tracing the
 process (process doesn't do anything when it hangs - no trace output),
 clearing the bayes database (doesn't help), ...
 The problem is really urgent, because exim receives timeouts from spamd, and
 rejects the mails.
 I reduced the number of mails each spamd processes, to reduce the risk of
 hanging. Usually it hangs after having processed 2 or 3 mails.
 Now I've even reduced it to 1, the hangups are less often, but still there!
 I hope someone has a solution, or a clue to what I can do!
 I checked the log files and debug output, which is very consistent. The last
 thing all hanging processes do, is this:
 Oct 19 09:42:09 mail01 spamd[6072]: rules: ran uri rule __DOS_HAS_ANY_URI
 == got hit: k
 After this line in the log, the process hangs.

 For your reference: the full log file is here:
  http://peter.lunatis.be/temp/spamd.txt

 After trying some things that were suggested, the problem went away for a
 time. Now it's back though, and I can't work around it. I really hope
 someone can give me a direction to search, because this thing is really
 driving me crazy!
 I noticed the startup is a little bit weird too:
  http://peter.lunatis.be/temp/spamd-startup.txt

 What am I doing wrong?

 Regards,

 Peter





Re: problem with check_whitelist

2007-10-29 Thread François Rousseau
same problem under 3.2.3 but with the script of 3.1.7

Maybe my db is broken?

2007/10/27, François Rousseau [EMAIL PROTECTED]:
 Hi,

 I use SA 3.1.7 and I want to check the AWL database.
 Normarly I simply run check_whitelist and I get what I search for.

 But this time, this command just return nothing!

 ~# /download/clean/Mail-SpamAssassin-3.1.7/tools/check_whitelist
 /home/spamd/.spamassassin/auto-whitelist
 ~#

 And the database is not empty.
 -rwrw- 1 spamd spamd 161M 2007-10-27 19:42 auto-whitelist

 Any idea what to do?

 Thanks,
 François



Re: problem with check_whitelist

2007-10-29 Thread François Rousseau
I have forget to tell you that the script is working find for a test
db but not for the main db that I use.



2007/10/29, François Rousseau [EMAIL PROTECTED]:
 same problem under 3.2.3 but with the script of 3.1.7

 Maybe my db is broken?

 2007/10/27, François Rousseau [EMAIL PROTECTED]:
  Hi,
 
  I use SA 3.1.7 and I want to check the AWL database.
  Normarly I simply run check_whitelist and I get what I search for.
 
  But this time, this command just return nothing!
 
  ~# /download/clean/Mail-SpamAssassin-3.1.7/tools/check_whitelist
  /home/spamd/.spamassassin/auto-whitelist
  ~#
 
  And the database is not empty.
  -rwrw- 1 spamd spamd 161M 2007-10-27 19:42 auto-whitelist
 
  Any idea what to do?
 
  Thanks,
  François
 



problem with check_whitelist

2007-10-27 Thread François Rousseau
Hi,

I use SA 3.1.7 and I want to check the AWL database.
Normarly I simply run check_whitelist and I get what I search for.

But this time, this command just return nothing!

~# /download/clean/Mail-SpamAssassin-3.1.7/tools/check_whitelist
/home/spamd/.spamassassin/auto-whitelist
~#

And the database is not empty.
-rwrw- 1 spamd spamd 161M 2007-10-27 19:42 auto-whitelist

Any idea what to do?

Thanks,
François


Re: Re: OT: Spamtraps

2007-09-21 Thread François Rousseau
Well normally you tried to keep your spamtraps secret.  You want to be
100% sure that all email coming true is really spams.



2007/9/20, Michael Scheidell [EMAIL PROTECTED]:
 Or, better yet, just change the name on the email to lines when you
 complain to many isp's.

 They forward those to the spammers who happily add you to their 'known
 valid email address list'.

 Also, google for various opt-out pages.  You opt out of the wrong page,
 you know you will get spam.

 Also, how about 'free porn in your inbox'?
 24 hours later, you are getting mortgage ads from 5 banks.

 (yes, I all this is true)
 _
 This email has been scanned and certified safe by SpammerTrap(tm).
 For Information please see http://www.spammertrap.com
 _



Re: Objective site to run spamcheck against?

2007-09-20 Thread François Rousseau
Yes and no,

Some people use know good RBL like sbl.spamhaus.org to discard the
email but will also use a RBL of dynamic IP to score the email or any
other hard rbl.

Of course, you have ask people to check the headers of the email to
see if the reason is specify there?

François Rousseau



2007/9/19, Bob Proulx [EMAIL PROTECTED]:
 Tuc at T-B-O-H.NET wrote:
ANYWAY, it doesn't look like my server is in the lists,
  BUT..The IP I send from (RR.COM) is blacklisted here :
 
  dul.dnsbl.sorbs.net
  dynablock.njabl.org

 These are not really blacklists but are a list of dynamic IP
 addresses.  Many sites will not accept mail from a dynamic IP range.
 My site is one of those.  My policy is that I refuse connections from
 dynamic IP ranges.

 As has been discussed many times in various forums and would be
 available by reading the archives the best practice is always to send
 from a static IP address.  Otherwise RBLs don't really work at all
 because a spammer could simply rotate addresses routinely and avoid
 the RBL listing.

   An inordinate amount of people are telling me I'm
 ending up in spam folders,

 RBLs would probably result in a silent discard as opposed to delivery
 to a spam folder.  I suspect it would be other triggers.

 Bob



Re: Objective site to run spamcheck against?

2007-09-14 Thread François Rousseau
If you don t want to search:

http://www.robtex.com/rbl.html and http://www.dnsstuff.com/ .

2007/9/14, Bowie Bailey [EMAIL PROTECTED]:
 Tuc at T-B-O-H.NET wrote:
  Hi,
 
An inordinate amount of people are telling me I'm
  ending up in spam folders, so I wondered if there was
  some objective site where I might be able to run a
  message through and have it score an email. I realize this
  could also be used by spammers to check about getting past
  the filters, so I'm thinking maybe there isn't. I can't
  run it against my own systems since they like me too much. :)
 
Thanks, Tuc/TBOH

 A good first step would be checking to see if your mail servers are on
 any blacklists.  There are two or three sites that will check multiple
 lists for you.  I don't know of one offhand, but a Google search should
 be able to come up with one for you.

 --
 Bowie



Re: spam and virus

2007-09-14 Thread François Rousseau
I use ClamAv plugin for SpamAssassin and I have add a rules in my
milter to discard every infected email.

For the plugin part: http://wiki.apache.org/spamassassin/ClamAVPlugin

François Rousseau

2007/9/14, Randal, Phil [EMAIL PROTECTED]:
 Dean,

 Check out MailScanner - http://www.mailscanner.info

 Cheers,

 Phil

 --
 Phil Randal
 Network Engineer
 Herefordshire Council
 Hereford, UK

  -Original Message-
  From: Dean Clapper [mailto:[EMAIL PROTECTED]
  Sent: 14 September 2007 14:39
  To: users@spamassassin.apache.org
  Subject: spam and virus
 
  Is there a configuration for spamassassin to catch virus
  attachments?   Or,
  does any one know of one to run on a server with sendmail?
 
  thanks
  Dean
 
 



How to analyze scan time

2007-09-12 Thread François Rousseau
Hello,

I have recently change my SA server for another really similar server
but many software version have change between the 2 servers (include
SA 3.1.7 -- 3.2.3)

My old server scan the messages much faster (around 3-4 seconds vs
7.5-10 seconds).

This is not a critical issue for me because I'm still under the limit
of my server but I'm curious to know why it take longer to scan and
what part of my scan take longer.  Of course, I also want to find a
way to optimize my scan process.

What I search it's a way to know, for exemple, that my clamav scan
have take 2 seconds, the rules processing have take X seconds, the X
module have take X seconds, ...

Any idea?

---
SA 3.2.3 from source
Debian Etch

Thanks,
François Rousseau


Re: How do you stop others from sending emails from your email addresses ?

2007-07-25 Thread François Rousseau

Hi Chris,

You can't stop other from using your email address.  You can help
reducing the usage of your email address by implementing SPF on your
domain.

I will let other specify more detail or I will let you search on SPF
because I don't have experience with SPF.

François Rousseau

2007/7/25, Chris [EMAIL PROTECTED]:

I constantly, (about 15-20 times a day), receive s**m
emails from other people, but addressed from my email
address.  Is there any way of using SA to help on this
in any way at all please ?

I want to stop myself from receiving them, but even
more importantly, how do I stop someone from sending
from my email address - can it be done please ?

Any help much appreciated.

Chris.





Re: ANNOUNCE: Apache SpamAssassin 3.2.2 available

2007-07-25 Thread François Rousseau

try 
http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.2.2.tar.gz

2007/7/25, Randal, Phil [EMAIL PROTECTED]:

Hmmm,

Can't find a mirror carrying it, not even apache.org!

Phil

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Justin Mason
Sent: 25 July 2007 14:10
To: users@spamassassin.apache.org; [EMAIL PROTECTED];
[EMAIL PROTECTED]
Subject: ANNOUNCE: Apache SpamAssassin 3.2.2 available

Apache SpamAssassin 3.2.2 is now available!  This is a maintenance
release of the 3.2.x branch.

Downloads are available from:
  http://spamassassin.apache.org/downloads.cgi

The release file will also be available via CPAN in the near future.

  md5sum of archive files:
  7423a1bca96b932d321882fc6092080b  Mail-SpamAssassin-3.2.2.tar.bz2
  87b2a8852f125060f781922c3663525f  Mail-SpamAssassin-3.2.2.tar.gz
  8dd32339bf82591b50c9eb307745c8fa  Mail-SpamAssassin-3.2.2.zip

  sha1sum of archive files:
  6dfaa36eb8e500f9315cf2461fbd3229ae92a2c7
Mail-SpamAssassin-3.2.2.tar.bz2
  e8ea034fa4f695607af0e596c86c5daf82f234e0
Mail-SpamAssassin-3.2.2.tar.gz
  e9a9723bb1cbadaded2340ef0aa86a0329f03783  Mail-SpamAssassin-3.2.2.zip

The release files also have a .asc accompanying them.  The file serves
as an external GPG signature for the given release file.  The signing
key is available via the wwwkeys.pgp.net key server, as well as
http://spamassassin.apache.org/released/GPG-SIGNING-KEY

The key information is:

pub 1024D/265FA05B 2003-06-09 SpamAssassin Signing Key
[EMAIL PROTECTED]
Key fingerprint = 26C9 00A4 6DD4 0CD5 AD24  F6D7 DEE0 1987 265F A05B


3.2.2 is a minor bug-fix release.  Summary of changes:

- bug 5548: Certain mail input can take a long time to scan with 100%
CPU
  utilisation, due to backtracking in a rule's regexp. fix

- bugs 5510, 5518, 5529: fix 'make test' when running as root, needed
for CPAN

- bug 5419: kill -HUP of pidof spamd causes the ps name to change from
spamd
  to perl. fixed

- bug 5535: 'make test' errors in Windows caused by nonportable use of
  getpwuid

- bug 5462: multiple DNS records for a host name should allow use of
spamd -H
  for load balancing installs to work

- bugs 5509, 5511: fix network lookup timeouts, where lookups were being
lost
  once a timeout was hit; also fix code to match documentation on
  rbl_timeout's scaling and minimum duration of 1 second; and attempt to
  collect already-received DNS responses when the timeout is reached;
improve
  related debugging output. Thanks to Mark Martinec

- bugs 5412, 5478, 5522: Fix problems using the spamc -x option with
certain
  other options; 'spamc -x -R' always returned 0, instead of the exit
code, on
  error.  Bug 5478: in addition, 'spamc -x -e /command' would still run
the
  command, even if errors meant that the filtered text would be
unavailable,
  which contradicted -x.

- bug 5445: body eval tests defined in user_rules cause ugly 'Subroutine
  _eval_tests_type11_prineg400_set3 redefined' warnings

- bug 5355: add in new entries for RegistrarBoundaries

- bug 5515: libsslspamc.so  libsslspamc.so can not build without -fPIC,
but
  we were picking up the wrong CFLAGS to do this.

- bug 5501: zero score for FH_HAS_XID

- bug 5449: allow_user_rules causes sa-compile / Rule2XSBody plugin to
emit
  spurious warnings; fix.  also, add a new 'user_conf_parsing_end'
plugin
  hook, which is called after the per-user configuration is parsed

- bug 5182: update the sa-learn doc to mention that -u is only usable w/
sql

- bug 5534: fix harmless-but-ugly C compiler warning in sa-compile





Re: Can you setup a folder for certain emails to go ?

2007-07-10 Thread François Rousseau

Be sure to have the rules apply to the email in the headers and then
just do a normal sorting on it?

François Rousseau


2007/7/10, Chris [EMAIL PROTECTED]:

I want to reduce the setting number on my SA but I want
to be sure I'm not gonna be missing any legit emails
because of it.  Is there a setup that you can do so
that you cam lower the setting and all of the emails
affected by that go into a folder, for say 3 months,
then you can look into the folder after that time and
if you see no legit emails, it means that you probably
chose the correct setting.

Any ideas ?

Chris.





Re: What is the spam filtering for windows

2007-07-06 Thread François Rousseau

Just becareful with this solution, the ESA folder will grow relativly
fast but its work fine.

François Rousseau

2007/7/6, Duane Hill [EMAIL PROTECTED]:

On Fri, 6 Jul 2007 at 14:51 +0530, [EMAIL PROTECTED] confabulated:

 Hi

 I am working with MS Exchange 2003 on windows 2003. What is the filtering
 software for spam assassin on windows?

I've never used it. However, I've seen referrences to it a number of times
in the past:

   http://www.christopherlewis.com/ESA/ExchangeSpamAssassin.htm

This works directly on the Exchange server.

-
  _|_
(_| |



Re: SA on SBS

2007-03-01 Thread François Rousseau

We have do it for some of our clients with SBS 2003 and exchange 2003
std, it's working fine.
You will need gnuPG for running sa-update if I remeber correctly.

François Rousseau

2007/3/1, Bret Miller [EMAIL PROTECTED]:

 Any issues installing SA on a Microsoft Small Business Server
 with their Exchange version?

I can't think of any.


 Any recommendations pros/cons will be appreciated.

Get the latest ActivePerl (5.8.8.820) and perl modules.
See http://wiki.apache.org/spamassassin/InstallingOnWindows
See http://www.christopherlewis.com/ESA/ExchangeSpamAssassin.htm

HTH,
Bret






Re: Problem with spamd

2006-11-08 Thread François Rousseau
max-children (set to 1 in this case).Why 1???How many email to you received by day? (or by minute???)Francois Rousseau2006/11/8, Charlie Clark 
[EMAIL PROTECTED]:Am 08.11.2006 um 18:43 schrieb Theo Van Dinter:
 On Wed, Nov 08, 2006 at 06:38:19PM +0100, Charlie Clark wrote: 2006-11-08 17:31:00 [9733] i: debug: refresh: 9733 refresh /home/ confixx/web1p2/.spamassassin/bayes.lock Is this standard behaviour? It seemed okay when the lock is acquired
 but seems to spend most of its time actually refreshing the lock. It's ok if it's doing something to the DB, you want the lock refreshed.I'm guessing you're seeing a bayes expiry.
Okay, seems to have calmed down now. i wonder if that's related tothe fact that I seem tobe having problems sending e-mail:The address to which the message has not yet been delivered is: [EMAIL PROTECTED]
 Delay reason: Connection timed outPresumably because my buffers have been filled. I'v restarted Exim inthe hope that will help but I wonder what's causing this in the firstplace - what is screwing my SMTP server? It really doesn't look like
it should be that busy but I don't really know where I should belooking!Charlie--Charlie ClarkHelmholtzstr. 20DüsseldorfD- 40215Tel: +49-211-938-5360GSM: +49-178-782-6226



Re: Spamc not working, spamassassin is.

2006-11-05 Thread François Rousseau
Can you copy/paste your header here please? The one with spamd and the one with spamassassin .2006/11/5, Ron Gage [EMAIL PROTECTED]:
Help!I am trying to get spamassassin 3.1.7 working with net-qmail 1.05 and
vpopmail 5.4.16.It's not going too well.I have the QMAILQUEUE patch applied and am using theqmail-scanner-queue.pl script in an attempt to get spamassassin working.The juxt of the problem: scanc is reporting all emails back with a score
of 0, where if I send the same email through spamassassin itself, theemail gets scored properly.I am running scanc with no options.scand is running with the followingoptions: -d -C /etc/mail/spamassassin -m 5 -v -u qscand --nouser-config
The headers are being added to emails as they pass through, but everyemail scores at 0.0 - even the gtube email.If I run spamc  /root/.cpan/Mail-SpamAssassin-3.1.7/sample-spam.txt -it comes back with a score of 
0.0.If I run spamassassin /root/.cpan/Mail-SpamAssassin-3.1.7/sample-spam.txt, it comes back witha score of 998.5.I am not seeing any indications of errors in /var/log/maillog oranywhere else.spamassassin --lint reports nothing.
What am I doing wrong here?ROn


Re: R: BIG increase in spam today

2006-11-02 Thread François Rousseau
Greylisting is not always good... The greylisting insert delay in delevery and sometimes the email have to be delever fast. For example: on some public wireless network, you have to register to have access to the internet. You can access internet without authentification for 15 minutes. In this 15 minutes, you have to register in the captive portal and then go confirm your inscription by clicking in a link received by email. If the greylisting insert more then 15 minutes of delay...
I think technologies like SPF have a better futur.François Rousseau2006/11/2, Giampaolo Tomassoni [EMAIL PROTECTED]
: On 11/2/06, Debbie D [EMAIL PROTECTED]
 wrote:   Yes Chris I did notice.. my server was attacked with spam yesterday  morning.. it was coming from several different ip, so fast I could not keep  it quiet
  There's been a lot of chatter about this: http://it.slashdot.org/article.pl?sid=06/11/01/1321226
 Actually, it's getting to the extent that some at work are raising questions as to whether our SA setup will be able to maintain adequate protection from this growing onslaught. However, I have a feeling that
 even the appliance vendors are going to be equally hard pressed to deal with it.Use greylisting: if they're bots, they will not even reach your SA.Greylisting is a force.Use the Force!
---Giampaolo Tomassoni - IT ConsultantPiazza VIII Aprile 1948, 4I-53044 Chiusi (SI) - ItalyPh: +39-0578-21100MAI inviare una e-mail a:NEVER send an e-mail to:
 [EMAIL PROTECTED] Amos


pyzor server address

2006-10-31 Thread François Rousseau
I have a simple question... someone know a good pyzor server?Right now pyzor discover give me 66.250.40.33:24441and a pyzor ping give me 
66.250.40.33:24441 TimeoutError:So I suppose this server is just dead...ThanksFrancois Rousseau


Re: problem with spamassassin

2006-10-30 Thread François Rousseau
Yes, it is possible. If you use spamc/spamd:A simple way to see this is to check the log file of spamassassin (spamd).In my case, I have redirect the syslog channel to a separate file. Make a script with those line or run in manually... I have test it for SA 
3.1.4 thru 3.1.7 but it will probably work whit all the 3.1.x and maybe 3.0.x =echo SpamAssassin Checkupecho ***Number of mail: `grep second /var/log/spamassassin -c`
echo ***Number of SPAM: `grep identified /var/log/spamassassin -c`echo ***Max child reach: `grep raising /var/log/spamassassin -c`=If Max child reach: is greater then 0 , consider raising the number of possible child. (--max-children=num)
Sorry for my english too.Francois Rousseau2006/10/30, [EMAIL PROTECTED] [EMAIL PROTECTED]
:Thanks.I've found a possible answer.Spamassassin works with only 1 child.
Now I have add another child, 2.And now all my mails have the header.Is possible that spamassassin couldn't process all mails because hasonly one child... so I have some mails with no header and much spam???
sorry for my englishfraskaIl giorno 30/ott/06, alle ore 12:11, Loren Wilton ha scritto: SA always adds information the header I believe.Although what you get depends on the report_safe option value in 
local.cf. Many of the mail tools that use SA will process the message through SA and then discard the result if it isn't marked as spam.So you don't see SA's markup in these tools unless SA said it was spam.
 Sometimes there is an option to override this and always return the result SA generated. Here are some typical headers from a mail message that is NOT spam: X-Spam-Checker-Version: SpamAssassin 
3.1.4 (2006-07-25) on xxx.com X-Spam-Level: ** X-Spam-Status: No, score=2.3 required=4.6 tests=BAYES_50,DK_POLICY_SIGNSOME, FH_RELAY_NODNS,HELO_MISMATCH_COM,HTML_FONT_BIG,HTML_MESSAGE
 autolearn=disabled version=3.1.4Loren


Pyzor problem

2006-10-21 Thread François Rousseau
Hi,I need help to figure out what is going wrong with pyzor.The problem:-I saw many line like this in the log:Oct 20 18:45:11 localhost spamd[30610]: pyzor: check failed: internal error
What I know:-Pyzor work because I have 397 email tagged by pyzor today.My setup:-Linux debian unstable-SA from source 3.1.7 (3.1.5 does the same things)-Spamd on Linux, Spamc on Windows 2000.
-My first DNS server in resolv.conf is a server on the same network, public IP but they are on the same physical local network.Stat:-today: 65 errors on 7189 mails-yesterday: 74 errors on 5751 mails
ThanksFrançois Rousseau


Re: Low spam score but marqued as spam

2006-10-06 Thread François Rousseau
I don't know MailScanner but maybe because they have found the adress in a XBL list?X-caliseo-MailScanner-SpamCheck: spam, SBL+XBL,
2006/10/6, Fabien GARZIANO [EMAIL PROTECTED]:
Hi folks,I'm in trouble with 1 particular mail and in front of a strange problem.I got a mail which my spamassassin score 1.5 (the score limit beforespam is identified is 5.2) but it tag it like spam anyway
X-caliseo-MailScanner: Found to be cleanX-caliseo-MailScanner-SpamCheck: spam, SBL+XBL, SpamAssassin (score=1.562, requis 5.8, BAYES_00 -2.60, HTML_90_100 0.02, HTML_FONT_BIG 0.14, HTML_MESSAGE 0.00,
 HTML_NONELEMENT_00_10 0.00, HTML_SHOUTING3 0.02, RCVD_IN_XBL 3.98)X-caliseo-MailScanner-SpamScore: 1X-caliseo-MailScanner-From: [EMAIL PROTECTED]X-Spam-Status: Yes
SpamAssassin version 3.0.5running on Perl version 5.8.6I can't find anything in the previous mails in here. And google givenothing.Anyone got an idea ?--F a b i e n G a r z i a n o



Re: duplicate emails

2006-09-28 Thread François Rousseau
I have alreay have a similar problem but with another mail server (ModusMail).It's not exactly the same problem and I'm not sure if that will help you.The user start downloading the email and the connection reset so the client have to redownload from the start... The email server only note the downloaded email a the end, so if the connection crash before the end, the server consider no message as read.
But the message are already in the user client, so they received it in loop. In my case, the problem was some badly formated email (empty one with strange message-id). I have create a perl script to filter those emails.
Francois Rousseau2006/9/28, Steve Ingraham [EMAIL PROTECTED]:
Mark Adams wrote:What is your exchange server hosting? pop3? I have noted problems beforewith clients recieving duplicate emails when connections timeout and theserver does not know how far the client application has gone through
the download of the mailbox - causing it to start downloading again. Areany of the clients remote from the server? (this is where i noted theproblem most, notably on mobile internet devices especially on high
speed trains etc..)All clients are networked desktop machines.There are no remoteconnections.Steve Ingraham