moving the bayesian database and auto whitelist to a new cerver?
I am moving my email to a new server. How do I ensure that the procmail bayseian database and auto whitelist for each user is moved too? Should I just copy ~/.spamassassin/* for each user? Here is the contents for my ~/.spamassassin/ [EMAIL PROTECTED] ~/.spamassassin $ ls -l total 37636 -rw--- 1 nick users 5386240 Sep 2 19:16 auto-whitelist -rw--- 2 nick users 7107377 Jan 11 2005 auto-whitelist.dir -rw--- 2 nick users 7107377 Jan 11 2005 auto-whitelist.pag -rw--- 1 nick users 105 Jan 10 2005 bayes.lock.www.rout.co.nz.11956 -rw--- 1 nick users 73344 Sep 2 19:16 bayes_journal -rw--- 1 nick users 5472256 Sep 2 17:49 bayes_seen -rw--- 1 nick users 5410816 Sep 2 17:49 bayes_toks -rw-r--r-- 1 nick users 5206016 Jan 10 2005 old_bayes_seen -rw-r--r-- 1 nick users 5206016 Jan 10 2005 old_bayes_toks -rw-r--r-- 1 nick users 344064 Jan 10 2005 old_bayes_toks.new -rw-r--r-- 1 nick users1165 Feb 9 2004 user_prefs
analysing the logs
Using spamd started from .procmailrc, it logs to syslog and ends up in /var/log/mail.log, along with postfix's log and courier-imap's log. How can I get some analysis of this?, eg positives per day, etc. Have googled a bit, and looked in the archives, a lot of people talk about their stats, not many messages show the commands they use to get them! -- Nick Rout [EMAIL PROTECTED]
Re: USER_IN_WHITELIST problem
On Wed, 23 Aug 2006 14:49:19 -0700 Kelson wrote: Nick Rout wrote: So I take it USER_IN_WHITELIST also checks Return-Path? I wonder where Return-Path is being set? Is it likely to be set by the spammer? Or is my system adding it in somewhere (probably in error). Return-Path is usually added by the receiving system, and contains the envelope sender of the message. So effectively, it's set by the sender. It can legitimately disagree with the value in the From header. A perfect example would be this message right here. From will contain my email address, but Return-Path will contain an address managed by the mailing list software at spamassassin.apache.org Thank you for that, it helps fill in the picture in my fuzzy old brain. Cheers. -- Nick Rout [EMAIL PROTECTED]
USER_IN_WHITELIST problem
Hi, I am new to this list and certainly not a SA expert, however I have moderate experience in general linux issues and mailer issues. I am getting a series of messages allowed through on the basis of USER_IN_WHITELIST. I have searched the mailing list archive and pored over my setup files and just cannot understand why these messages are getting marked USER_IN_WHITELIST. The headers are below, my (perhaps limited) understanding is: (1) that USER_IN_WHITELIST has nothing to do with bayes or AWL So I am ignoring them. (2) I have checked the .cf files in /usr/share/spamassassin, /etc/spamassassin/ and ~nick/.spamassassin/ and cannot see any reason why [EMAIL PROTECTED] should be getting whitelisted (or indeed any of the other users in this series of emails) (3) the X-Spam-* headers seem to be written by my machine (rather than being forged, if that were possible) (4) SA is launched out of spamd/spamc via ~/.procmailrc on gentoo linux. The MTA is postfix and the SA version is 3.1.3. Can anyone help me with where to look next? Return-Path: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 3.1.3-gr0 (2006-06-01) on www.rout.co.nz X-Spam-Level: X-Spam-Status: No, score=-88.6 required=5.5 tests=AWL,BAYES_99, HTML_IMAGE_ONLY_04,HTML_MESSAGE,HTML_SHORT_LENGTH,MIME_HTML_ONLY, MSGID_SPAM_LETTERS,USER_IN_WHITELIST autolearn=no version=3.1.3-gr0 X-Original-To: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: from Trishamobile.net (unknown [196.36.9.186]) by www.rout.co.nz (Postfix) with SMTP id 7169A19DA6 for [EMAIL PROTECTED]; Tue, 22 Aug 2006 20:38:17 +1200 (NZST) Date: Tue, 22 Aug 2006 10:41:19 +0200 To: Nick [EMAIL PROTECTED] From: Lee [EMAIL PROTECTED] Subject: Judith Message-ID: [EMAIL PROTECTED] MIME-Version: 1.0 Content-Type: multipart/mixed; boundary=ntrgncacgcywucwiohzd -- Nick Rout [EMAIL PROTECTED]
Re: USER_IN_WHITELIST problem
On Tue, 22 Aug 2006 19:58:59 -0400 Rick Macdougall wrote: Return-Path: [EMAIL PROTECTED] X-Spam-Checker-Version: SpamAssassin 3.1.3-gr0 (2006-06-01) on www.rout.co.nz X-Spam-Level: X-Spam-Status: No, score=-88.6 required=5.5 tests=AWL,BAYES_99, HTML_IMAGE_ONLY_04,HTML_MESSAGE,HTML_SHORT_LENGTH,MIME_HTML_ONLY, MSGID_SPAM_LETTERS,USER_IN_WHITELIST autolearn=no version=3.1.3-gr0 The return-path looks a little iffy to me, have you white listed yourself or your domain ? (hint: not a good idea). Regards, Rick Thanks, quick reply! (Thanks too Daryl, also quick) So I take it USER_IN_WHITELIST also checks Return-Path? I wonder where Return-Path is being set? Is it likely to be set by the spammer? Or is my system adding it in somewhere (probably in error). Anyway, yes I did whitelist my domain owing to a few false positives, (my wife asking about money or s** or both?) Whitelisting seemed the obvious but clearly wrong idea. The relevantt line will be this one in /etc/spamassassin/local.cf: whitelist_from [EMAIL PROTECTED] (yep thats my domain) So is there any better way to do it? (Clearly there will be, but I don't yet know what it is, your further help will be appreciated) -- Nick Rout [EMAIL PROTECTED]
