Re: Configuring SA as frontend to Exchange

2008-04-09 Thread Jonathan Armitage

Henry Kwan wrote:

Hi,

Have been running SA on CentOS for a few years now and everything has been
working great.  But the powers that be want to move to Exchange so I am trying
to plan a SA frontend that feeds the Exchange server.

As I was thinking over how SA works now and how it might work in the my future
setup, I was wondering how you would feed unmarked spam to the SA frontend? 
Since email is passed through to Exchange, it isn't stored on the SA server

anymore like it is now.  Or would I be limited to just having SA autolearn?



Henry,

I think this is a fairly common configuration.

You don't say which MTA you are using, but we do this with Exim running 
on Solaris.


It is quite trivial to configure Exim to forward mail for our domains to 
the Exchange server and send outgoing mail, well, outwards. Exim can 
also be configured/compiled to call SpamAssassin and then flag or reject 
the email depending on the SA score. You can also add ClamAV (or any 
other virus or spam checker) to this mix.


I am sure similar things are possible with your favourite MTA.

Jon Armitage
Systems Administrator
365 Media Group



Re: How to whitelist the recipient?

2008-04-01 Thread Jonathan Armitage

Roman Serbski escribió:

How do I configure SA to whitelist particular recipient's
email address?


Actually, I think you need whitelist_to, same syntax as whitelist_from.

There are other options: more_spam_to and all_spam_to. See the 
documentation at 
http://spamassassin.apache.org/full/3.2.x/doc/Mail_SpamAssassin_Conf.txt.


However, it would probably be better to avoid sending the emails through 
SpamAssassin at all, but this would involve changing the configuration 
of whatever you use to call SpamAssassin.


Jon Armitage
Systems Administrator
365 Media Group


Re: Score vs Bars

2008-02-20 Thread Jonathan Armitage

Matt Kettler wrote:

Theo Van Dinter wrote:

On Wed, Feb 06, 2008 at 11:52:09PM -0500, Don Ireland wrote:
 
When I look at the message source, the following is among them--this 
is actually from YOUR reply. 
X-Spam-Status: No, score=-6.6

X-Spam-Score: -65
X-Spam-Bar: --




Looks like it might have been generated by whatever these guys are using:

http://mail-archives.apache.org/mod_mbox/spamassassin-users/200708.mbox/[EMAIL PROTECTED] 



I think it is. See

http://www.exim.org/exim-html-current/doc/html/spec_html/ch41.html#SECTscanspamass

Jon


Re: ok_languages doesn't seem to work

2008-02-13 Thread Jonathan Armitage

R. Steven Rainwater wrote:

100% of the non-English email we're getting is spam, so I added this to
my local.cf file:


ok_languages en


However, I can't see that it's having any effect at all.


Steven,

I think you might need to uncomment

loadplugin Mail::SpamAssassin::Plugin::TextCat

in /etc/mail/spamassassin/v310.pre (or your equivalent).

As an aside, I'm afraid I simply reject some of them out of hand if they 
contain a particular MIME charset. Using an Exim ACL, I do:


  denymessage   = Sorry, no one speaks this language here.
  condition = ${if eq{lc:$mime_charset}{gb2312}{1}{0}}

That one's simplified Chinese, but I reject other languages as well, 
including Russian.


You may be able to do something similar with your MTA. And it's one less 
message for SA to scan :)


Jon


Re: Problem with sa-learn and virtual user

2008-01-17 Thread Jonathan Armitage

Jean-Edouard Babin wrote:

On Jan 17, 2008 1:38 PM, Jonathan Armitage [EMAIL PROTECTED]
wrote:


Jean-Edouard Babin wrote:

But i would like to be able to run sa-learn for spefic users

I tryed sa-lean --username [EMAIL PROTECTED] --spam files

But as I can see with debug (-D) it use bayes file of the unix user

running

the command.


Try su - username -c sa-learn --spam spamdir

Jon



User are virtual.


I think there is another way, but can't remember offhand.

Look back through the mailing list. It was discussed a few months ago.

Jon


Re: Problem with 3.2.2

2007-12-09 Thread Jonathan Armitage

jobthart wrote:

Do you mean this should be solved in 3.2.3? I am having those errors when
trying to install the version 3.2.3. So maybe there is still a bug in
version 3.2.3 regarding this matter?

I was still having this problem last week when trying to install the 
latest SpamAssassin from CPAN.


The solution is to download the source, manually build and test as 
yourself, and install as root.


Jon


Re: the opposit of ok_locales ??

2007-12-05 Thread Jonathan Armitage

Karsten Bräckelmann wrote:

On Wed, 2007-12-05 at 17:00 +0100, Axel Werner wrote:

im looking for some opposit parameters of ok_locales to
make spamassassin mark all incoming mail of some specific charsets or 
language settings (locales) to get marked by default.


Provided it is possible with your MTA, you could consider rejecting such email 
at that level, thus relieving SA of the burden of having to scan it at all.


This is easy in Exim, but I don't know if other mailers can do the same thing.

Jon


Re: what is error code 29 (make: Fatal error)

2007-11-14 Thread Jonathan Armitage

Jeffrey Pawlan wrote:

I have had SpamAssassin version 3.1.7  running on Perl version 5.8.7 running
perfectly for a year. The system is a Sun workstation (SPARC) with Solaris
5.9.

Last night I tried to upgrade spamassassin to the current version by running
as Root:
	perl -MCPAN -e shell 


Jeffrey,

This doesn't answer your question, but it may solve your problem.

I have spent most of today failing to install SA 3.2.3 on a Sun V120 
running Solaris 10 by using CPAN.


In the end I downloaded the tarball and installed manually. It worked 
first time.



I suspect some of the tests don't work properly if you are root.

Jon


Re: Win32.pm

2007-11-08 Thread Jonathan Armitage

Duane Hill wrote:

On Tue, 30 Oct 2007 02:04:31 -0400
Payne [EMAIL PROTECTED] confabulated:


Guys,

How can I fix this?

error: Can't locate Sys/Syslog/Win32.pm in @INC (@INC contains: 


The maintainer has just told me that a new version of Sys::Syslog has 
been uploaded to CPAN which should fix this problem.


Jon


Re: DNSWL question

2007-10-16 Thread Jonathan Armitage

Mark Wendt (Contractor) wrote:
I've started seeing some spam come through that gets labeled with 
RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/;


 Can someone point me in the right
direction as to how and where I can turn off this rule if it can be 
turned off?



In local.cf: score RCVD_IN_DNSWL_MED 0.00

Jon


Re: newbie question: scan msgs smaller than certain size

2007-10-06 Thread Jonathan Armitage

Tom Bombadil wrote:


Thanks for the response Loren, but unfortunately, as far as I know we
 can specify the spamd directive just once in exim.


I realise we're getting OT here, but there are at least two ways to call
SA from Exim, the built-in hook which you are using, and sa-exim, which
calls SA via the local_scan() function. So you could call SA twice.

Jon


[Fwd: Re: unable to run sa-learn utility as non-root user]

2007-10-03 Thread Jonathan Armitage

Matt Kettler wrote:

Srilatha wrote:

Hi,

I am using SpamAssassin 3.2.1

sa-learn utility is taking user name but it is not running as the
given user

First, I assume you're trying to use sa-learn -u.

If you read the docs closely, the -u parameter to sa-learn *ONLY* works
for SQL and virtual configurations.


Why not su - youruser -c sa-learn --spam /whatever ?

Jon

Sorry about that, Matt. I'll get the hang of this email thing eventually :)


Perl error after upgrade to 3.2.3

2007-09-12 Thread Jonathan Armitage
Apologies if I am asking in the wrong place, since I can see that there are 
several possible reasons.


We have just upgraded to SpamAssassin 3.2.3 on an elderly 386 box running Red 
Hat 9. At the same time I used CPAN to upgrade any out-of-date perl modules.


Now, when SA starts, we get the following error:

Starting SpamAssassin daemon...
[23172] error: Can't locate Sys/Syslog/Win32.pm in @INC (@INC contains: 
/usr/local/lib/perl5/site_perl/5.8.8/i686-linux 
/usr/local/lib/perl5/site_perl/5.8.8 /usr/local/lib/perl5/5.8.8/i686-linux 
/usr/local/lib/perl5/5.8.8 /usr/local/lib/perl5/site_perl) at (eval 11) line 2.

[23172] error: BEGIN failed--compilation aborted at (eval 11) line 2.

done.

The error comes up twice, but SA does in fact start, and appears to be 
functioning normally. Does anyone know why it suddenly wants to load a Win32 
module?


Jon

Jon Armitage
System Administrator, 365 Media Group


Re: sa-learn --username option

2006-06-07 Thread Jonathan Armitage

In Solaris, that would be something like:

su - user1 -c sa-learn --spam /home/user2/Maildir/.Spam/cur/

Jon


Aaron Axelsen wrote:

I am trying to run a cronjob as root which will learn a different
accounts spam into my spam db.  Example command:

sa-learn -u user1 --spam /home/user2/Maildir/.Spam/cur/

When the command runs, it learns the spam into /root/.spamassassin
instead of /home/user1/.spamassassin




Re: Which Operating Systems Do You Use and Why?

2006-04-06 Thread Jonathan Armitage

Ask List wrote:

Ask List askthelist at gmail.com writes:


We can not seem to come to an agreement on the best operating system to run

spam assassin. So we have decided to post this question to the mailing list so
we can have other opinions. 


I see RedhatEL,Fedora,CentOS is a common theme. Anyone not running a RedHat
based distribution





I run a small SpamAssassin/Exim system at home on Solaris 10: It works 
fine except for the well known syslog problem.


We use Redhat at work, for much the same reasons as everyone else does.


Re: Filtering windows-1252 charset

2006-04-03 Thread Jonathan Armitage

Theo Van Dinter wrote:

On Mon, Apr 03, 2006 at 12:07:00PM -0600, Philip Prindeville wrote:

--=_NextPart_000_0016=_NextPart_000_0016
Content-Type: text/plain;
charset=Windows-1252
Content-Transfer-Encoding: 7bit


Using:
# don't allow windows-1252 text attachments...
header __CTYPE_WIN_1252 Content-Type =~ /charset=\windows-1252\/i
What am I missing?


the charset isn't in the message header, it's in the mime header.  you can use
the MIMEHeader plugin if you want to.

I see some spam with windows-1252 or other unwanted character sets at 
the start of the subject. I reject them via an Exim ACL, so SA doesn't 
even have to scan them.