RE: RulesDuJour Summary messages
Thanks! That's what I was looking for. I couldn't find it by greping. It was in the rulesdujour/config file. Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Bowie Bailey [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 27, 2006 9:21 AM To: users@spamassassin.apache.org Subject: RE: RulesDuJour Summary messages Dimitri Yioulos wrote: > On Monday June 26 2006 5:17 pm, you wrote: > > > Well that's just itI don't know where it's getting these. I > > don't have SARE_URI2 in my rules_du_jour file to update. The > > listing for the "ARE_BAYES_POISON_NXM" is listed as > > "SARE_BAYES_POISON_NXM". I can't seem to find a file that contains > > the URI2 that is not commented out and the POISON spelled wrong. > > > > What file could these be in for me to correct these issues? > > /etc/rulesdujour/config? Actually, it could be any of these: /etc/rulesdujour/config /etc/rulesdujour /etc/mail/rulesdujour /etc/sysconfig/RulesDuJour /etc/sysconfig/rulesdujour Or something completely different in a RDJ_CONFIGFILE environment variable. -- Bowie
RE: RulesDuJour Summary messages
Well that's just itI don't know where it's getting these. I don't have SARE_URI2 in my rules_du_jour file to update. The listing for the "ARE_BAYES_POISON_NXM" is listed as "SARE_BAYES_POISON_NXM". I can't seem to find a file that contains the URI2 that is not commented out and the POISON spelled wrong. What file could these be in for me to correct these issues? Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: David Filion [mailto:[EMAIL PROTECTED] Sent: Monday, June 26, 2006 3:55 PM To: users@spamassassin.apache.org Subject: Re: RulesDuJour Summary messages Tracey Gates wrote: > I'm getting the following messages from the RulesDuJour run: > > RulesDuJour Run Summary on yoursummit.com: > > No index found for ruleset named ARE_BAYES_POISON_NXM. Check that > this ruleset is still valid. > > SARE Top 200 spamcop ip addresses Ruleset (automatically generated) > has changed on yoursummit.com. Version line: # Modified: 06/23/2006 > 2:58:27 PM EST > > No index found for ruleset named SARE_URI2. Check that this ruleset > is still valid. > > > How do I check that the ruleset is valid?? I went to rulesemporium > and they say that these rules are still active with Auto-Update as > "yes". What do I need to do to rectify these issues? > > Thanks! > > Tracey Gates > Lead Developer > [EMAIL PROTECTED] > > > > > > You may wish to check again... a. "ARE_BAYES_POISON_NXM"? Are you sure it's not SARE_BAYES_POISON_NXM? b. From SARE rules page: '... add one or more of "SARE_URI0", "SARE_URI1", "SARE_URI3", or "SARE_URI_ENG" to TRUSTED_RULESETS ...' Where did you get SARE_URI2 from? HTH David Filion -- David Filion System / Network Administrator Auto123.com / XPrima Corporation
RulesDuJour Summary messages
I'm getting the following messages from the RulesDuJour run: RulesDuJour Run Summary on yoursummit.com: No index found for ruleset named ARE_BAYES_POISON_NXM. Check that this ruleset is still valid. SARE Top 200 spamcop ip addresses Ruleset (automatically generated) has changed on yoursummit.com. Version line: # Modified: 06/23/2006 2:58:27 PM EST No index found for ruleset named SARE_URI2. Check that this ruleset is still valid. How do I check that the ruleset is valid?? I went to rulesemporium and they say that these rules are still active with Auto-Update as "yes". What do I need to do to rectify these issues? Thanks! Tracey Gates Lead Developer [EMAIL PROTECTED]
SPF & Verifying email
Title: Message I've been reading up on SPF and understand that it checks the validity of the return address of an email and if that return address is valid, it doesn't change the scoring of the email to identify it as spam...a wash so to speak. If it cannot validate the return address then it assumes that it's spamis that correct? We are getting some emails that end up as being identified as spam but aren't. What we would like to do is to send a "bounce" email back to the sender (if it is a valid return address & their email has been identified as spam by spamassassin) for them to tell us that it really isn't spam. I know that this may sound weird but it's difficult to us to review all the spam to catch a few false positives. So my boss thought that this might be a solution. Of course the sender of the email couldn't reply back to the bounce because it would also be considered spam. Is anyone else doing this? Is this a good idea? How do we tell the senders to verify that what they sent us is indeed NOT spam? Tracey GatesLead Developer[EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203Phone 918-663-0991 / Fax 918-663-0840
RE: AWL whitelist & CGPSA
Here is the header: Received: from mail.dluxlink.com ([66.143.207.22] verified) by yoursummit.com (CommuniGate Pro SMTP 4.3.8) with ESMTP id 3283974 for [EMAIL PROTECTED]; Fri, 19 May 2006 09:46:09 -0500 Received-SPF: none receiver=yoursummit.com; client-ip=66.143.207.22; [EMAIL PROTECTED] Received: from federation (pcstrucking.com [66.143.200.224]) by mail.dluxlink.com (8.13.6/8.12.6) with ESMTP id k4JEjpOO029554 for <[EMAIL PROTECTED]>; Fri, 19 May 2006 09:45:51 -0500 MIME-Version: 1.0 Message-Id: <[EMAIL PROTECTED]> Date: Fri, 19 May 2006 09:45:43 -0500 (Central Standard Time) Content-Type: Multipart/related; type="multipart/alternative"; boundary="Boundary-00=_50PIRN00" X-Mailer: IncrediMail (5002253) From: "Patrick Leding" <[EMAIL PROTECTED]> X-FID: BA285063-5BCE-11D4-AF8D-0050DAC67E11 X-Priority: 3 To: "Brooke Harp" <[EMAIL PROTECTED]> Subject: coverage Reply-To: "Patrick Leding" <[EMAIL PROTECTED]> My local.cf whitelist line is: whitelist_from_rcvd [EMAIL PROTECTED] pcstrucking.com HTH! Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Bowie Bailey [mailto:[EMAIL PROTECTED] Sent: Friday, May 19, 2006 3:57 PM To: users@spamassassin.apache.org Subject: RE: AWL whitelist & CGPSA Tracey Gates wrote: > I apologize if this has already been addressed.I am using CGPro > with CGPSA. I have placed an entry in my local.cf > > "whitelist_from_rcvd *(at)domain(dot)com domain(dot)com" > > I find that spamassassin is marking it as spam with the following: > > Content analysis details: (5.9 points, 5.0 required) > > pts rule name description > -- > -- > 4.8 FROM_KING_COM From known spammer 'king.com' > 1.1 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= > entry 3.1 URI_MAIL_COM URI: Link to 'mail.com' - spam central! > -0.2 BAYES_40 BODY: Bayesian spam probability is 20 to 40% > [score: 0.2548] > 1.9 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of > words > 0.0 HTML_MESSAGE BODY: HTML included in message > -0.5 SARE_HEAD_DATE_LONG1 Date header has interesting length > -4.3 AWL AWL: From: address is in the auto white-list > > How do I get these to actually come through without going through SA? > I thought that if I whitelisted them that SA would allow all the > emails from that domain to come through without being scanned. I'm > guessing I'm wrong but that's nothing new. Can someone tell me what I > need to do? The first thing you should do is give us the information needed to answer your question. This includes the real whitelist_from_rcvd line and the Received headers from the email. We need to be able to compare your whitelist entry with the headers from the email to determine if it should have matched and, if not, what you need to do to make it match. Most likely, either your whitelist entry is not quite right or it doesn't work the way you think it does. In either case, we will need the above information so that we can help you. -- Bowie
AWL whitelist & CGPSA
I apologize if this has already been addressed.I am using CGPro with CGPSA. I have placed an entry in my local.cf "whitelist_from_rcvd *(at)domain(dot)com domain(dot)com" I find that spamassassin is marking it as spam with the following: Content analysis details: (5.9 points, 5.0 required) pts rule name description -- -- 4.8 FROM_KING_COM From known spammer 'king.com' 1.1 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry 3.1 URI_MAIL_COM URI: Link to 'mail.com' - spam central! -0.2 BAYES_40 BODY: Bayesian spam probability is 20 to 40% [score: 0.2548] 1.9 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 0.0 HTML_MESSAGE BODY: HTML included in message -0.5 SARE_HEAD_DATE_LONG1 Date header has interesting length -4.3 AWL AWL: From: address is in the auto white-list How do I get these to actually come through without going through SA? I thought that if I whitelisted them that SA would allow all the emails from that domain to come through without being scanned. I'm guessing I'm wrong but that's nothing new. Can someone tell me what I need to do? Thanks! Tracey Gates Lead Developer
RE: Way OT: What do you use for anti-virus (Linux)
Title: Message Has anyone used or tried Panda for Linux? If so, what is your feedback on the product? We use it only on the client machines but haven't ran it on my email/web server. To tell the truth, I'm a little scared to install it with running CommuniGate Pro, CGPSA, Spamassassin without having a test server to see the effects in case it screws something up. Tracey GatesLead Developer[EMAIL PROTECTED] -Original Message-From: Ricardo Oliveira [mailto:[EMAIL PROTECTED] Sent: Monday, May 01, 2006 3:30 PMTo: users@spamassassin.apache.orgSubject: Re: Way OT: What do you use for anti-virus (Linux) John,I use sophos too, but I though I'd drop the note on a memory-and-performance-saver: Sophie is a deamon which received the messages, processos them and returns the result "infected" or "not infected" instead of forking a new sweep process for every incoming email. This resulted in WAY lower memory and CPU usage in my email servers.Regards,Ricardo Oliveira
RE: Spam coming thru w/high score & different SA version
I had to restart CGPSA and it picked up the new version of 3.1.1. I hope now that it will catch the spam emails better that I have been having problems with. :-) Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Jim Maul [mailto:[EMAIL PROTECTED] Sent: Thursday, April 27, 2006 1:21 PM To: Tracey Gates Cc: users@spamassassin.apache.org Subject: Re: Spam coming thru w/high score & different SA version Tracey Gates wrote: > OK. Sorry, I'm a novice at all of this admin stuff. I replaced the > old files back and restarted spamd again. I did a find for spamd and > here is my results: > > [EMAIL PROTECTED] /]# find ./ -name spamd > find: ./proc/9832/fd: No such file or directory > ./etc/rc.d/init.d/spamd ./usr/bin/spamd > ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.0.2/spamd > ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.0.2/spamd/spamd > ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.0.2/blib/script/spamd > ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1/spamd > ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1/spamd/spamd > ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1/blib/script/spamd > ./home/administrator/Mail-SpamAssassin-3.0.2/spamd > ./home/administrator/Mail-SpamAssassin-3.0.2/spamd/spamd > ./home/administrator/Mail-SpamAssassin-3.0.2/blib/script/spamd > > Am I looking for the correct file? I don't see what it might be > picking up the wrong version. > Ah, wait! I just went back and re-read the original email. You said: >I'm running on a RedHat ES 3.0 using CommuniGatePro and CGPSA. The >CGPSA.conf file points to the correct directories for my SA >installation. Any suggestions would be a great help. This link: http://www.tffenterprises.com/cgpsa/ says: >The filter works efficiently, by directly using the SpamAssassin API. >It does not rely on a daemon process such as spamd or on the execution >of shell scripts (as the usual process for utilizing SpamAssassin with >CommuniGate servers does). It can safely be used with multiple >CommuniGate Pro enqueuer threads. So... basically, your not using spamd. Looking for another copy of it is pointless. It seems you have 2 copies of the SpamAssassin API laying around. -Jim
RE: Spam coming thru w/high score & different SA version
OK. Sorry, I'm a novice at all of this admin stuff. I replaced the old files back and restarted spamd again. I did a find for spamd and here is my results: [EMAIL PROTECTED] /]# find ./ -name spamd find: ./proc/9832/fd: No such file or directory ./etc/rc.d/init.d/spamd ./usr/bin/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.0.2/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.0.2/spamd/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.0.2/blib/script/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1/spamd/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1/blib/script/spamd ./home/administrator/Mail-SpamAssassin-3.0.2/spamd ./home/administrator/Mail-SpamAssassin-3.0.2/spamd/spamd ./home/administrator/Mail-SpamAssassin-3.0.2/blib/script/spamd Am I looking for the correct file? I don't see what it might be picking up the wrong version. Confused Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Jim Maul [mailto:[EMAIL PROTECTED] Sent: Thursday, April 27, 2006 12:59 PM To: Tracey Gates; users@spamassassin.apache.org Subject: Re: Spam coming thru w/high score & different SA version Tracey Gates wrote: > I checked and did find 2 spamd files. One was in /usr/bin with the > latest install date. The other one was in /etc/rc.d/init.d with the > older install date. I backed up the older files and replaced the ones > that are in the init.d directory with the ones from the /usr/bin > directory. (replaced the spamassassin and spamd files). I then > stopped and restarted spamd. I checked emails that came in after the > restart of spamd and they still say version 3.0.2. I'm guessing I'm > still missing something? > > Any suggestions? > Yeah, the one in /usr/bin is the actual file. The one you see in /etc/rc.d/init.d is a startup script for spamd. These are NOT the same thing. You do NOT want to copy /usr/bin/spamd to /etc/rc.d/init.d/spamd! What you did will cause spamd to not start up on reboot anymore. I would undo what you did and look around some more for another copy. the one in init.d is not what your looking for. -Jim
RE: Spam coming thru w/high score & different SA version
I checked and did find 2 spamd files. One was in /usr/bin with the latest install date. The other one was in /etc/rc.d/init.d with the older install date. I backed up the older files and replaced the ones that are in the init.d directory with the ones from the /usr/bin directory. (replaced the spamassassin and spamd files). I then stopped and restarted spamd. I checked emails that came in after the restart of spamd and they still say version 3.0.2. I'm guessing I'm still missing something? Any suggestions? Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 26, 2006 3:12 PM To: Tracey Gates Cc: users@spamassassin.apache.org Subject: Re: Spam coming thru w/high score & different SA version Tracey Gates wrote: > OK. Now I understand the high (actually negative) score but what > about the version difference? Anyone have any idea about that issue? Possible double-install. One in /usr/ and one in /usr/local?
RE: Spam coming thru w/high score & different SA version
OK. Now I understand the high (actually negative) score but what about the version difference? Anyone have any idea about that issue? Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Dale Morin [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 26, 2006 2:31 PM To: Tracey Gates Cc: users@spamassassin.apache.org Subject: Re: Spam coming thru w/high score & different SA version > I got this email with a high score of 101.6 and the version as 3.0.2. > I have my score limit set to 3.5 in my local.cf file. Why wasn't this > detected as spam? > > HEADER OF PROBLEM EMAIL: > > X-Spam-Status: No, score=-101.6 required=3.5 > tests=BAYES_00,FM_NO_STYLE, HTML_80_90,HTML_MESSAGE,USER_IN_WHITELIST > autolearn=no version=3.0.2 Sorry, Tracey, the score is a MINUS 101.6. The USER_IN_WHITELIST probably subtracted 100 from the score. -- Dale Morin, Mustang Internet Services, Inc. "Support Without Compromise" email: [EMAIL PROTECTED]
RE: Spam coming thru w/high score & different SA version
DOH! Thanks Dale for pointing that out. Of course I didn't see the negative sign. Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Dale Morin [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 26, 2006 2:31 PM To: Tracey Gates Cc: users@spamassassin.apache.org Subject: Re: Spam coming thru w/high score & different SA version > I got this email with a high score of 101.6 and the version as 3.0.2. > I have my score limit set to 3.5 in my local.cf file. Why wasn't this > detected as spam? > > HEADER OF PROBLEM EMAIL: > > X-Spam-Status: No, score=-101.6 required=3.5 > tests=BAYES_00,FM_NO_STYLE, HTML_80_90,HTML_MESSAGE,USER_IN_WHITELIST > autolearn=no version=3.0.2 Sorry, Tracey, the score is a MINUS 101.6. The USER_IN_WHITELIST probably subtracted 100 from the score. -- Dale Morin, Mustang Internet Services, Inc. "Support Without Compromise" email: [EMAIL PROTECTED]
Spam coming thru w/high score & different SA version
Title: Message I got this email with a high score of 101.6 and the version as 3.0.2. I have my score limit set to 3.5 in my local.cf file. Why wasn't this detected as spam? Also when I run spamassassin -v on my server I get the version as 3.1.1 but the email header has 3.0.2 as the version? Did I miss something in my upgrade last week? HEADER OF PROBLEM EMAIL: Return-Path: <[EMAIL PROTECTED]>Received: by yoursummit.com (CommuniGate Pro PIPE 4.3.8) with PIPE id 3130662; Wed, 26 Apr 2006 13:38:30 -0500Received: from [88.0.181.15] (HELO dpra.com) by yoursummit.com (CommuniGate Pro SMTP 4.3.8) with SMTP id 3130660 for [EMAIL PROTECTED]; Wed, 26 Apr 2006 13:38:24 -0500Received-SPF: none receiver=yoursummit.com; client-ip=88.0.181.15; [EMAIL PROTECTED]Message-ID: <[EMAIL PROTECTED]>Reply-To: "Ezra Defeo" <[EMAIL PROTECTED]>From: "Ezra Defeo" <[EMAIL PROTECTED]>To: [EMAIL PROTECTED]Subject: Re: good AMBvtENDate: Wed, 26 Apr 2006 11:38:03 -0700MIME-Version: 1.0Content-Type: multipart/alternative; boundary="=_NextPart_000_0001_01C66925.E0D8AA40"X-Priority: 3X-MSMail-Priority: NormalX-Mailer: Microsoft Outlook Express 6.00.2800.1106X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on yoursummit.comX-Spam-Level: X-Spam-Status: No, score=-101.6 required=3.5 tests=BAYES_00,FM_NO_STYLE, HTML_80_90,HTML_MESSAGE,USER_IN_WHITELIST autolearn=no version=3.0.2X-TFF-CGPSA-Version: 1.4X-TFF-CGPSA-Filter: Scanned Tracey GatesLead Developer[EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.
Spam coming thru w/high score & different SA version
Title: Message I got this email with a high score of 101.6 and the version as 3.0.2. I have my score limit set to 3.5 in my local.cf file. Why wasn't this detected as spam? Also when I run spamassassin -v on my server I get the version as 3.1.1 but the email header has 3.0.2 as the version? Did I miss something in my upgrade last week? I'm running on a RedHat ES 3.0 using CommuniGatePro and CGPSA. The CGPSA.conf file points to the correct directories for my SA installation. Any suggestions would be a great help. HEADER OF PROBLEM EMAIL: Return-Path: <[EMAIL PROTECTED]>Received: by mydomain.com (CommuniGate Pro PIPE 4.3.8) with PIPE id 3130662; Wed, 26 Apr 2006 13:38:30 -0500Received: from [88.0.181.15] (HELO dpra.com) by mydomain.com (CommuniGate Pro SMTP 4.3.8) with SMTP id 3130660 for tgates@mydomain.com; Wed, 26 Apr 2006 13:38:24 -0500Received-SPF: none receiver=yoursummit.com; client-ip=88.0.181.15; [EMAIL PROTECTED]Message-ID: <[EMAIL PROTECTED]>Reply-To: "Ezra Defeo" <[EMAIL PROTECTED]>From: "Ezra Defeo" <[EMAIL PROTECTED]>To: tgates@mydomain.comSubject: Re: good AMBvtENDate: Wed, 26 Apr 2006 11:38:03 -0700MIME-Version: 1.0Content-Type: multipart/alternative; boundary="=_NextPart_000_0001_01C66925.E0D8AA40"X-Priority: 3X-MSMail-Priority: NormalX-Mailer: Microsoft Outlook Express 6.00.2800.1106X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on mydomain.comX-Spam-Level: X-Spam-Status: No, score=-101.6 required=3.5 tests=BAYES_00,FM_NO_STYLE, HTML_80_90,HTML_MESSAGE,USER_IN_WHITELIST autolearn=no version=3.0.2X-TFF-CGPSA-Version: 1.4X-TFF-CGPSA-Filter: Scanned Tracey GatesLead Developer[EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.
RE: --Lint Warnings
I had those as well and I went into the 50_scores.cf and commented out those rules that are listed as non-existent. Tracey Gates Lead Developer [EMAIL PROTECTED] -Original Message- From: Clay Davis [mailto:[EMAIL PROTECTED] Sent: Friday, April 21, 2006 11:28 AM To: users@spamassassin.apache.org Subject: --Lint Warnings When I --lint my rule set I get the warnings below; however, I do see a corresponding rule score in 50_scores.cf for each: warning: score set for non-existent rule DRUG_ED_ONLINE warning: score set for non-existent rule SUBJECT_DRUG_GAP_VIC warning: score set for non-existent rule SUBJECT_DRUG_GAP_VA warning: score set for non-existent rule DEEP_DISC_MEDS warning: score set for non-existent rule DRUG_ED_GENERIC warning: score set for non-existent rule SUBJECT_DRUG_GAP_C warning: score set for non-existent rule DRUG_ED_COMBO warning: score set for non-existent rule SUBJECT_DRUG_GAP_L warning: score set for non-existent rule SUBJECT_DRUG_GAP_P warning: score set for non-existent rule SUBJECT_DRUG_GAP_VIA warning: score set for non-existent rule DRUG_ED_SILD warning: score set for non-existent rule ONLINE_PHARMACY warning: score set for non-existent rule DRUG_ED_CAPS warning: score set for non-existent rule SUBJECT_DRUG_GAP_S warning: score set for non-existent rule SUBJECT_DRUG_GAP_X warning: score set for non-existent rule DRUG_DOSAGE warning: score set for non-existent rule VIA_GAP_GRA Thanks for any suggestions, Clay
RE: Error Script modules on update from 3.0.1 to 3.1
Theo - I saw that I only upgraded the perl modules so I also ran rpm -U on the spamassassin package. It took care of that error but when I try to do a spamd -d I get the following error: [22562] error: persistent_udp: no such method at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/DnsResolver.pm line 98 When I run spamassassin --lint I get a lot of warnings like the following for several rules: [22484] warn: config: warning: score set for non-existent rule SUBJECT_DRUG_GAP_VIA I only have the following loadplugin lines uncommented in my v310.pre: loadplugin Mail::SpamAssassin::Plugin::AWL loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold loadplugin Mail::SpamAssassin::Plugin::WhiteListSubject loadplugin Mail::SpamAssassin::Plugin::MIMEHeader loadplugin Mail::SpamAssassin::Plugin::ReplaceTags Here's my init.pre: loadplugin Mail::SpamAssassin::Plugin::URIDNSBL loadplugin Mail::SpamAssassin::Plugin::Hashcash loadplugin Mail::SpamAssassin::Plugin::SPF My local.cf is very simple: use_bayes1 bayes_auto_learn 1 required_hits3.5 Can't seem to find anything on google about the DnsResolver.pm problem. Any suggestions? Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 19, 2006 2:04 PM To: Tracey Gates Cc: SpamAssassin Subject: Re: Error Script modules on update from 3.0.1 to 3.1 On Wed, Apr 19, 2006 at 01:53:08PM -0500, Tracey Gates wrote: > -Original Message- > > stopped spamd and tried to restart it and got the following error > > message: > > ERROR! spamassassin script is v3.02, but using modules > > v3.001001! That error only comes when you run "spamassassin" and not "spamd". Since you mentioned you're using RPM, did you upgrade the perl-Mail-SpamAssassin package and not the spamassassin package? Usually trying to upgrade only one will cause RPM to give an error, but it can happen. Also, did you have SpamAssassin installed somewhere without being from a package? Search in $PATH and find out where the script is being run from. If it's not from your installed package, remove it. -- Randomly Generated Tagline: It is the quality rather than the quantity that matters. -- Lucius Annaeus Seneca
RE: Error Script modules on update from 3.0.1 to 3.1
I went to the /usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1 directory that the rpmbuild created and did a listing: -rw-r--r--1 root root12953 Mar 10 13:30 UPGRADE -rw-r--r--1 root root 927 Mar 10 13:30 STATUS -rwxr-xr-x1 root root41293 Mar 10 13:30 sa-learn.raw -rw-r--r--1 root root 1604 Mar 10 13:30 procmailrc.example -rw-r--r--1 root root10715 Mar 10 13:30 INSTALL -rw-r--r--1 root root11444 Mar 10 13:30 CREDITS -rw-r--r--1 root root 145 Mar 10 13:30 BUGS -rw-r--r--1 root root 9222 Mar 10 13:30 USAGE -rw-r--r--1 root root 3295 Mar 10 13:30 TRADEMARK -rw-r--r--1 root root 5567 Mar 10 13:30 spamassassin.spec -rwxr-xr-x1 root root24487 Mar 10 13:30 spamassassin.raw -rwxr-xr-x1 root root36602 Mar 10 13:30 sa-update.raw -rw-r--r--1 root root 799 Mar 10 13:30 sample-spam.txt -rw-r--r--1 root root 6494 Mar 10 13:30 sample-nonspam.txt -rw-r--r--1 root root12484 Mar 10 13:30 README -rw-r--r--1 root root14505 Mar 10 13:30 PACKAGING -rw-r--r--1 root root 165 Mar 10 13:30 NOTICE -rw-r--r--1 root root 1922 Mar 10 13:30 MANIFEST.SKIP -rw-r--r--1 root root10657 Mar 10 13:30 MANIFEST -rw-r--r--1 root root35641 Mar 10 13:30 Makefile.PL -rw-r--r--1 root root11358 Mar 10 13:30 LICENSE -rw-r--r--1 root root 1240 Mar 10 13:30 INSTALL.VMS -rw-r--r--1 root root28671 Mar 10 20:37 Changes drwxr-xr-x2 root root 4096 Mar 10 20:42 tools drwxr-xr-x3 root root 4096 Mar 10 20:42 t drwxr-xr-x2 root root 4096 Mar 10 20:42 sql drwxr-xr-x2 root root 4096 Mar 10 20:42 rules drwxr-xr-x8 root root 4096 Mar 10 20:42 masses drwxr-xr-x3 root root 4096 Mar 10 20:42 lib drwxr-xr-x2 root root 4096 Mar 10 20:42 ldap drwxr-xr-x2 root root 4096 Mar 10 20:42 contrib drwxr-xr-x2 root root 4096 Mar 10 20:42 build drwxr-xr-x4 root root 4096 Apr 19 09:11 .. -rw-r--r--1 root root63474 Apr 19 09:11 Makefile -rw-r--r--1 root root0 Apr 19 09:11 pm_to_blib drwxr-xr-x3 root root 4096 Apr 19 09:11 spamc -rwxr-xr-x1 root root24569 Apr 19 09:11 spamassassin -rwxr-xr-x1 root root41320 Apr 19 09:11 sa-learn drwxr-xr-x7 root root 4096 Apr 19 09:11 blib -rwxr-xr-x1 root root36607 Apr 19 09:11 sa-update drwxr-xr-x 14 root root 4096 Apr 19 09:11 . drwxr-xr-x3 root root 4096 Apr 19 09:11 spamd Did it put the files in this directory instead of copying them to the /usr/bin directory where the original files are? What do I need to do to properly update and get this to work? Thanks! Tracey Gates Lead Developer -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 19, 2006 2:04 PM To: Tracey Gates Cc: SpamAssassin Subject: Re: Error Script modules on update from 3.0.1 to 3.1 On Wed, Apr 19, 2006 at 01:53:08PM -0500, Tracey Gates wrote: > -Original Message- > > stopped spamd and tried to restart it and got the following error > > message: > > ERROR! spamassassin script is v3.02, but using modules > > v3.001001! That error only comes when you run "spamassassin" and not "spamd". Since you mentioned you're using RPM, did you upgrade the perl-Mail-SpamAssassin package and not the spamassassin package? Usually trying to upgrade only one will cause RPM to give an error, but it can happen. Also, did you have SpamAssassin installed somewhere without being from a package? Search in $PATH and find out where the script is being run from. If it's not from your installed package, remove it. -- Randomly Generated Tagline: It is the quality rather than the quantity that matters. -- Lucius Annaeus Seneca
RE: Error Script modules on update from 3.0.1 to 3.1
I did a find and here are the results: ./etc/rc.d/init.d/spamd ./usr/bin/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.0.2/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.0.2/spamd/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.0.2/blib/script/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1/spamd/spamd ./usr/src/redhat/BUILD/Mail-SpamAssassin-3.1.1/blib/script/spamd ./home/administrator/Mail-SpamAssassin-3.0.2/spamd ./home/administrator/Mail-SpamAssassin-3.0.2/spamd/spamd ./home/administrator/Mail-SpamAssassin-3.0.2/blib/script/spamd The dates on the spamd in the /etc and /usr directories are stamped as last Feb, 2005 when I installed Spamassassin. Is there suppose to be a newer spamd file? Still at a loss. Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Wednesday, April 19, 2006 1:46 PM To: Tracey Gates Cc: SpamAssassin Subject: Re: Error Script modules on update from 3.0.1 to 3.1 Tracey Gates wrote: > I followed the installation/upgrade instructions for version 3.1.0 and > renamed the local.cf.rpmnew file to be my local.cf file with my > scoring set and whitelist_from_rcvd & blacklist_from entries. I > stopped spamd and tried to restart it and got the following error > message: > > > ERROR! spamassassin script is v3.02, but using modules v3.001001! > > I've reread the upgrade instructions to make sure that I haven't > forgotten anything and can't see where I went wrong. Can someone > please help? I'm upgrading on a Redhat ES 3.0 server. I downloaded > the RPM, ran rpmbuild and did an rpm -U to upgrade. > > __ Looks like the RPM you built did not have the same installation directories as the original RPM did. look around on your system, you probably have two copies of spamd. Likely in /usr/sbin and /usr/local/sbin.
Error Script modules on update from 3.0.1 to 3.1
Title: Message I followed the installation/upgrade instructions for version 3.1.0 and renamed the local.cf.rpmnew file to be my local.cf file with my scoring set and whitelist_from_rcvd & blacklist_from entries. I stopped spamd and tried to restart it and got the following error message: ERROR! spamassassin script is v3.02, but using modules v3.001001! I've reread the upgrade instructions to make sure that I haven't forgotten anything and can't see where I went wrong. Can someone please help? I'm upgrading on a Redhat ES 3.0 server. I downloaded the RPM, ran rpmbuild and did an rpm -U to upgrade. Tracey GatesLead Developer[EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.
RE: "news spam"
I have seen a lot of postings talk about the BAYES_99 rule. I think that this rule will help tremendously with catch some of this spam as I have already implemented the "news" rule that Phile Randall posted. I have searched my server and I do not find the BAYES_99 rule already on there so where do I find that to download and how do I make sure that it is implemented? Thanks. Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Iain Smith [mailto:[EMAIL PROTECTED] Sent: Tuesday, March 21, 2006 9:37 AM To: SpamAssassin Subject: Re: "news spam" Payal Rathod wrote: > Hi, > To my various email addresses I am getting lot of "Re: news" spam. SA > is not catching all of it. I have pasted a links of headers and body > at, http://pastebin.ca/46477 Can someone advise on it please? > With warm regards, > -Payal Bayes has been catching these here, but in some cases the only other rule to fire has been HTML_MESSAGE. I've managed to largely mitigate this with a custom meta rule that combines BAYES_99 and a custom subject rule: header __LOCAL_NEWS_IN_SUBJ Subject =~ /re:.*news/i meta LOCAL_BAYES99_NEWS_SPAM (__LOCAL_NEWS_IN_SUBJ && BAYES_99) score LOCAL_BAYES99_NEWS_SPAM 2.0 You perhaps could expand it to other BAYES_x rules, depending on how brave you are feeling...YMMV. :-) Iain
RE: Drug email keeps getting thru
I have URIBL lookups enabled. I have also increased my score in mangled.cf. I have posted the email that I'm receiving at www.yoursummit.com/pharmNews.html if you'd like to view the actual email content. Below is the header of the latest email that I've gotten. The names of the drugs are in blue and the dollar amounts are in red along. I'm still at a loss as to what I need to do to get these stopped. Here is the output of doing the "spamassassin --lint -D": debug: config: read file /etc/mail/spamassassin/25_uribl.cf debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xa96f558) debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0xa95afa4) debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0xa95c66c) debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xa96f558) implements ' parse_config' debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0xa95afa4) implements ' parse_config' Here is the Header info: Received: by yoursummit.com (CommuniGate Pro PIPE 4.3.8) with PIPE id 2829044; Tue, 14 Mar 2006 04:05:46 -0600 Received: from [81.104.204.233] (HELO gcsincorp.com) by yoursummit.com (CommuniGate Pro SMTP 4.3.8) with SMTP id 2829043 for [EMAIL PROTECTED]; Tue, 14 Mar 2006 04:05:38 -0600 Subject: Re: PhaPOramacy news Date: Tue, 14 Mar 2006 04:04:55 -0600 Message-Id: <[EMAIL PROTECTED]> MIME-Version: 1.0 Thread-Topic: PhaPOramacy news Priority: Normal Importance: normal X-MSMail-Priority: normal X-Priority: 3 Sensitivity: Normal From: "Kanta Bramblett" <[EMAIL PROTECTED]> To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> X-Real-To: "Tracey Gates" <[EMAIL PROTECTED]> X-Mailer: CommuniGate Pro MAPI Connector 1.1.22 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on yoursummit.com X-Spam-Level: X-Spam-Status: No, score=-0.0 required=3.5 tests=BAYES_40,FM_NO_STYLE, HTML_80_90,HTML_MESSAGE autolearn=no version=3.0.2 X-TFF-CGPSA-Version: 1.4 X-TFF-CGPSA-Filter: Scanned Content-Type: multipart/alternative; boundary="_=_NextPart_11254_00012994.4466" Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Theo Van Dinter [mailto:[EMAIL PROTECTED] Sent: Wednesday, March 08, 2006 12:01 PM To: Tracey Gates Cc: users@spamassassin.apache.org Subject: Re: Drug email keeps getting thru On Wed, Mar 08, 2006 at 11:47:49AM -0600, Tracey Gates wrote: > Here is a list of the rulesets that I'm using: > > 70_sare_adult.cf 70_sare_unsub.cf > 70_sare_bayes_poison_nxm.cf 70_sare_uri0.cf [...] > > How do I tell if I have URIBL lookups enabled? Those are the third party rules that you have enabled, URIBL is part of the standard (assuming 3.0 or later) set of rules. They are enabled by default if you allow network tests to be run (ie: not local-only mode), and you'd see rule results similar to URIBL_JP_SURBL or URIBL_BLACK (if you added in rules to use the uribl.com lists). In general, if you run in debug mode (ala: spamassassin --lint -D), you'll see a list of all the config files in use as well as which plugins are loading. Make sure that 25_uribl.cf is being read and that the URIDNSBL plugin is loaded, ala: [21549] dbg: config: read file /usr/share/spamassassin/25_uribl.cf [...] [21549] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC [21549] dbg: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x845f20) -- Randomly Generated Tagline: Monday is a bad way to spend 1/7 of your life.
RE: Drug email keeps getting thru
Here is a list of the rulesets that I'm using: 70_sare_adult.cf 70_sare_unsub.cf 70_sare_bayes_poison_nxm.cf 70_sare_uri0.cf 70_sare_evilnum0.cf 70_sare_uri1.cf 70_sare_evilnum1.cf 70_sare_uri3.cf 70_sare_evilnum2.cf 70_sare_uri.cf 70_sare_genlsubj0.cf 70_sare_uri_eng.cf 70_sare_genlsubj1.cf 70_sc_top200.cf 70_sare_genlsubj2.cf 72_sare_bml_post25x.cf 70_sare_genlsubj3.cf 72_sare_redirect_post3.0.0.cf 70_sare_genlsubj.cf 88_FVGT_body.cf 70_sare_genlsubj_eng.cf 88_FVGT_headers.cf 70_sare_genlsubj_x30.cf 88_FVGT_rawbody.cf 70_sare_header0.cf 88_FVGT_subject.cf 70_sare_header1.cf 88_FVGT_uri.cf 70_sare_header2.cf 99_FVGT_meta.cf 70_sare_header3.cf 99_FVGT_Tripwire.cf 70_sare_header.cf99_sare_fraud_post25x.cf 70_sare_header_eng.cfantidrug.cf 70_sare_header_x264_x30.cf backhair.cf 70_sare_header_x30.cfbogus-virus-warnings.cf 70_sare_highrisk.cf chickenpox.cf 70_sare_html0.cf init.pre 70_sare_html1.cf local.cf 70_sare_html2.cf local.cf.orig 70_sare_html3.cf local.cf.rpmsave 70_sare_html4.cf mangled.cf 70_sare_html.cf random.cf 70_sare_html_eng.cf random.current.cf 70_sare_html_x30.cf rules_du_jour 70_sare_oem.cf RulesDuJour 70_sare_random.cftripwire.cf 70_sare_specific.cf weeds.cf 70_sare_spoof.cf How do I tell if I have URIBL lookups enabled? I'm upping the scores for the drug rules within mangled.cf if see if that helps. Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: news [mailto:[EMAIL PROTECTED] On Behalf Of Jeremy Sent: Wednesday, March 08, 2006 9:50 AM To: users@spamassassin.apache.org Subject: Re: Drug email keeps getting thru Does the message body contain "mangled" (deliberately misspelled) drug names? If so, you might find the mangled.cf ruleset at http://www.rulesemporium.com/other-rules.htm to be useful - it helps my setup a lot with those sorts of spams, especially the drug ones. You might even consider increasing the scores in mangled.cf for the drug-related rules within there, if that might help futher. Myself, I bumped the mangled drug rules in that ruleset right up, as I have no legitimate need to be receiving emails with mangled drug names in them. You could also create your own rule to filter for unique signs in the email such as the word "ParaLmcy" in the subject. Without seeing the spam's body it's hard to suggest anything else. Were there any URLs in the body? If so, do you have the URIBL lookups enabled in your setup? What about the SARE rules at http://www.rulesemporium.com/rules.htm, do you use any of those? It's possible that some of those may also help. Cheers, Jeremy "Tracey Gates" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] I keep getting these drug emails that antidrug.cf is suppose to catch but it's not. The emails are scoring low. I've updated the antidrug.cf rule. I've done sa-learn on them but we are still being inundated with these "news" emails. What can I do to get these to stop? Here is the header from one of them: *** Return-Path: <[EMAIL PROTECTED]> Received: by yoursummit.com (CommuniGate Pro PIPE 4.3.8) with PIPE id 2790021; Wed, 08 Mar 2006 03:21:07 -0600 Received: from [66.50.88.167] (HELO clividian.co.za) by yoursummit.com (CommuniGate Pro SMTP 4.3.8) with SMTP id 2790026 for [EMAIL PROTECTED]; Wed, 08 Mar 2006 03:20:56 -0600 Received-SPF: none receiver=yoursummit.com; client-ip=66.50.88.167; [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> Reply-To: "Sumayya Lovvorn" <[EMAIL PROTECTED]> From: "Sumayya Lovvorn" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: ParaLmcy news Date: Wed, 8 Mar 2006 04:20:19 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_NextPart_000_0001_01C64267.9C61FD10" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on yoursummit.com X-Spam-Level: X-Spam-Status: No, score=-0.9 required=3.
Drug email keeps getting thru
I keep getting these drug emails that antidrug.cf is suppose to catch but it's not. The emails are scoring low. I've updated the antidrug.cf rule. I've done sa-learn on them but we are still being inundated with these "news" emails. What can I do to get these to stop? Here is the header from one of them: *** Return-Path: <[EMAIL PROTECTED]> Received: by yoursummit.com (CommuniGate Pro PIPE 4.3.8) with PIPE id 2790021; Wed, 08 Mar 2006 03:21:07 -0600 Received: from [66.50.88.167] (HELO clividian.co.za) by yoursummit.com (CommuniGate Pro SMTP 4.3.8) with SMTP id 2790026 for [EMAIL PROTECTED]; Wed, 08 Mar 2006 03:20:56 -0600 Received-SPF: none receiver=yoursummit.com; client-ip=66.50.88.167; [EMAIL PROTECTED] Message-ID: <[EMAIL PROTECTED]> Reply-To: "Sumayya Lovvorn" <[EMAIL PROTECTED]> From: "Sumayya Lovvorn" <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Re: ParaLmcy news Date: Wed, 8 Mar 2006 04:20:19 -0500 MIME-Version: 1.0 Content-Type: multipart/alternative; boundary="=_NextPart_000_0001_01C64267.9C61FD10" X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1106 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1106 X-Spam-Checker-Version: SpamAssassin 3.0.2 (2004-11-16) on yoursummit.com X-Spam-Level: X-Spam-Status: No, score=-0.9 required=3.5 tests=BAYES_20,FM_NO_STYLE, HTML_80_90,HTML_MESSAGE,UPPERCASE_25_50 autolearn=no version=3.0.2 X-TFF-CGPSA-Version: 1.4 X-TFF-CGPSA-Filter: Scanned * Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.
RE: SA Errors on --lint run
Thanks Craig, It took someone else to point out that I didn't read the entire error message. On first glance I thought it was correct but I misspelled spamassissin (I spelled it "spamassisin" with one less "s"). DUH!!! Thanks again! Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Craig McLean [mailto:[EMAIL PROTECTED] Sent: Monday, November 14, 2005 3:14 PM To: Tracey Gates Cc: users@spamassassin.apache.org Subject: Re: SA Errors on --lint run -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Tracey Gates wrote: > I'm trying to run it as user root but I'm still getting these error > messages: > > > [EMAIL PROTECTED] mail]# /usr/local/sbin/rules_du_jour > mkdir: cannot create directory `/etc/mail/spamassasin/RulesDuJour': No > such file or directory [snip] Do you actually *have* an /etc/mail/spamassassin directory? This error is commonly seen when creating a directory /a/b/c/d when the directory /a/b/c does not exist. If you are storing your local rules somewhere other than /etc/mail/spamassassin, you should make the relevant change in /etc/rulesdujour/config C. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.1 (GNU/Linux) iD8DBQFDeP4fMDDagS2VwJ4RAhOOAKCeIw28G+6p22+w2CirDKEhShew0wCfZwrO nuzZr8Ff6TPSG+oeJNCzfvY= =OpYd -END PGP SIGNATURE-
RE: SA Errors on --lint run
I'm trying to run it as user root but I'm still getting these error
messages:
[EMAIL PROTECTED] mail]# /usr/local/sbin/rules_du_jour
mkdir: cannot create directory `/etc/mail/spamassasin/RulesDuJour': No
such file or directory
/usr/local/sbin/rules_du_jour: line 675: cd:
/etc/mail/spamassasin/RulesDuJour: No such file or directory
***NOTICE***: Cannot write to /etc/mail/spamassasin. Are you running as
the correct user? No rulesets will be checked or updated.
***NOTICE***: Cannot write to /etc/mail/spamassasin/RulesDuJour. Are
you running as the correct user? No rulesets will be checked or
updated.
exec: curl -w %{http_code} --compressed -O -R -s -S -z
/etc/mail/spamassasin/RulesDuJour/rules_du_jour
http://sandgnat.com/rdj/rules_du_jour 2>&1
curl_output: 200
Performing preliminary lint (sanity check; does the CURRENT config
lint?).
No files updated; No restart required.
Rules Du Jour Run Summary:RulesDuJour Run Summary on yoursummit.com:
***NOTICE***: Cannot write to /etc/mail/spamassasin. Are you running as
the correct user? No rulesets will be checked or updated.
***NOTICE***: Cannot write to /etc/mail/spamassasin/RulesDuJour. Are
you running as the correct user? No rulesets will be checked or
updated.
[EMAIL PROTECTED] mail]# /etc/mail/submit.cf: line 528: fileclass: cannot
open '/etc/mail/trusted-users': Group writable directory
******
Tracey Gates
Lead Developer
[EMAIL PROTECTED]
1350 South Boulder, Third Floor / Tulsa, OK 74119-3203
Phone 918-663-0991 / Fax 918-663-0840
This communication is intended only for the recipient(s) named above;
may be confidential and/or legally privileged; and, must be treated as
such in accordance with state and federal laws. If you are not the
intended recipient, you are hereby notified that any use of this
communication, or any of its contents, is prohibited. If you have
received this communication in error, please reply to the sender and
then delete the message from your computer system immediately.
-Original Message-
From: Matt Kettler [mailto:[EMAIL PROTECTED]
Sent: Monday, November 14, 2005 3:00 PM
To: Tracey Gates
Cc: users@spamassassin.apache.org
Subject: Re: SA Errors on --lint run
Tracey Gates wrote:
> Thanks Matt.
>
> What should the permissions & ownership be to run the Rules Du Jour
> script? Getting the following:
>
>
>
> Rules Du Jour Run Summary:RulesDuJour Run Summary on
> yoursummit.com:
>
> ***NOTICE***: Cannot write to /etc/mail/spamassasin. Are you
> running as the correct user? No rulesets will be checked or
> updated.
>
> ***NOTICE***: Cannot write to /etc/mail/spamassasin/RulesDuJour.
> Are you running as the correct user? No rulesets will be checked
or
> updated.
>
>
> I have the files set with *root:mail* and *777* for the permissions on
> the /etc/mail/spamassassin & all files and directories under there.
>
>
Depends on how yo're calling RDJ.. if you're running it as root, you
should be fine. However, if you have it in /etc/cron.daily/ then it will
likely run as the user "cron" instead of root.
RE: SA Errors on --lint run
Title: Message Thanks Matt.What should the permissions & ownership be to run the Rules Du Jour script? Getting the following: Rules Du Jour Run Summary:RulesDuJour Run Summary on yoursummit.com:***NOTICE***: Cannot write to /etc/mail/spamassasin. Are you running as the correct user? No rulesets will be checked or updated.***NOTICE***: Cannot write to /etc/mail/spamassasin/RulesDuJour. Are you running as the correct user? No rulesets will be checked or updated. I have the files set with root:mail and 777 for the permissions on the /etc/mail/spamassassin & all files and directories under there. Tracey GatesLead Developer[EMAIL PROTECTED]1350 South Boulder, Third Floor / Tulsa, OK 74119-3203Phone 918-663-0991 / Fax 918-663-0840This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.-Original Message-From: Matt Kettler [mailto:[EMAIL PROTECTED]]Sent: Monday, November 14, 2005 1:49 PMTo: Tracey GatesCc: users@spamassassin.apache.orgSubject: Re: SA Errors on --lint runTracey Gates wrote:> I'm getting the following errors when I run SpamAssassin --lint:> > I haven't touched my config file for a very long time and SA seems to> have been working fine. I'm trying to run Rules Du Jour to update my> SARE rules and am getting the following error. I'm running> SpamAssassin version 3.0.2.In general your using old syntax that applies to very old versions of SA..Did you use a web-form to generate your local.cf? if so, don't, that site is valid for SA 2.50 only.> > [EMAIL PROTECTED] SpamAssassin]# spamassassin --lint> config: SpamAssassin failed to parse line, skipping: rewrite_subject 0Deprecated as of SA 3.0.0 in favor of the more flexible rewrite_header command Read the SA 3.0.x UPGRADE document for details.> config: SpamAssassin failed to parse line, skipping: report_header 1> config: SpamAssassin failed to parse line, skipping: use_terse_report 1> config: SpamAssassin failed to parse line, skipping: defang_mime 0All of the above are deprecated in SA 2.60 and higher. See report_safe instead.> config: SpamAssassin failed to parse line, skipping: spam_level_stars 0Deprecated in SA 3.0.0 due to redundancy with the report template commands.> config: SpamAssassin failed to parse line, skipping: auto_learn 1auto_learn was deprecated for bayes_auto_learn in SA 2.60> Net::DNS version is 0.31, but need 0.34dnsavailable-1 at> /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Dns.pm line 1230.> lint: 6 issues detected. please rerun with debug enabled for more> information.> >> __>> *Tracey Gates*> *Lead Developer*> __ <mailto:[EMAIL PROTECTED]>[EMAIL PROTECTED]>> *1350 South Boulder, Third Floor / Tulsa, OK 74119-3203> Phone 918-663-0991 / Fax 918-663-0840*>> This communication is intended only for the recipient(s) named above;> may be confidential and/or legally privileged; and, must be treated as> such in accordance with state and federal laws. If you are not the> intended recipient, you are hereby notified that any use of this> communication, or any of its contents, is prohibited. If you have> received this communication in error, please reply to the sender and> then delete the message from your computer system immediately.>>
SA Errors on --lint run
Title: Message I'm getting the following errors when I run SpamAssassin --lint: I haven't touched my config file for a very long time and SA seems to have been working fine. I'm trying to run Rules Du Jour to update my SARE rules and am getting the following error. I'm running SpamAssassin version 3.0.2. [EMAIL PROTECTED] SpamAssassin]# spamassassin --lintconfig: SpamAssassin failed to parse line, skipping: rewrite_subject 0config: SpamAssassin failed to parse line, skipping: report_header 1config: SpamAssassin failed to parse line, skipping: use_terse_report 1config: SpamAssassin failed to parse line, skipping: spam_level_stars 0config: SpamAssassin failed to parse line, skipping: defang_mime 0config: SpamAssassin failed to parse line, skipping: auto_learn 1Net::DNS version is 0.31, but need 0.34dnsavailable-1 at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Dns.pm line 1230.lint: 6 issues detected. please rerun with debug enabled for more information. Tracey GatesLead Developer[EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.
Rules Du Jour Script Error
Title: Message I have followed the installation steps from the Rules Du Jour site (http://www.exit0.us/index.php?pagename=RulesDuJour) and am trying to run the script manually but I get the following error: [EMAIL PROTECTED] sbin]# ./rules_du_jour: bad interpreter: No such file or directory It doesn't see to like the #!/bin/bash line. I haven't changed any of the script and have it executable. I have my configuration file as /etc/rulesdujour/config as stated in the installation steps. I have also made sure that bash is located in the /bin directory and it is there. I am trying to run the script at root so there shouldn't be any permissions problems. I'm not sure why I'm getting this error or what to do to correct it. Can someone please help me? Thanks! Tracey GatesLead Developer[EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.
newbie ? on testing SA
I have a new server that I've brought up on SpamAssassin. I have the .cf files listed below that I've added to it to catch other spam messages. It's catching some spam but not the amount that my old server had. Here is the snippet of my SA's local.cf rewrite_subject 0 report_header1 use_terse_report 1 spam_level_stars 0 defang_mime 0 required_hits3.5 My questions are: 1. How do I test that these .cf files are working? 2. What other .cf rules are good to add to catch most spam that I'm missing? 3. How do I test a message that got through to me but is spam? 4. How do I tell SA that a message is spam? evilnumbers.cf 70_sare_bayes_poison_nxm.cf 70_sare_html0.cf 70_sare_adult.cf 70_sare_random.cf chickenpox.cf weeds.cf backhair.cf Tripwire.cf Thanks! Tracey Gates Lead Developer [EMAIL PROTECTED] This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.
CommuniGate Pro / CGPSA plug-in
Title: Message Is anyone using the CommuniGate Pro Email Server along with the CGPSA (SpamAssassin API)? I having problems setting up and configuring the CGPSA. I've followed the install directions and configuration steps but when I enable the CGPSA Helper in CommuniGate Pro, CGPro stops working and I have to restart the service. I running under RedHat Linux Enterprise Edition, CGPro version 4.2.8 with the latest CGPSA download. Can anyone help me figure out what's going on? I can't find anything in the CGPro log about an error or problem. Tracey GatesLead Developer[EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.
RE: where is database updated by sa-learn
I followed the steps below that are posted on the website http://spamassassin.apache.org/full/3.0.x/dist/UPGRADE but I get an error when I run the sa-learn --sync after copying the bayes files over from my version 2.63 to 3.0.2. The files I copied are the bayes_toks and bayes_seen files. Error Messages: Cannot open bayes databases /root/.spamassassin/bayes_* R/O: tie failed: Cannot open bayes databases /root/.spamassassin/bayes_* R/W: tie failed: Inappropriate ioctl for device Here are the Upgrade instructions I was following: *** - The Bayesian storage modules have been completely re-written and now include Berkeley DB (DBM) storage as well as SQL based storage (see sql/README.bayes for more information). In addition, a new format has been introduced for the bayes database that stores tokens in fixed length hashes (Bayes v3). All DBM databases should be automatically converted to this new format the first time they are opened for write. You can manually perform the upgrade by running "sa-learn --sync" from the command line. Due to the database format change, you will want to do something like this when upgrading: - stop running spamassassin/spamd (ie: you don't want it to be running during the upgrade) - run "sa-learn --rebuild", this will sync your journal. if you skip this step, any data from the journal will be lost when the DB is upgraded. - upgrade SA to 3.0.0 - run "sa-learn --sync", which will cause the db format to be upgraded. if you want to see what is going on, you can add the "-D" option. - test the new database by running some sample mails through SpamAssassin, and/or at least running "sa-learn --dump" to make sure the data looks valid. - start running spamassassin/spamd again I'm assuming that I could stop spamd, copy the files from versoin 2.63, run "sa-learn --sync" and it would automatically convert the files to the new format as stated above. What's causing the error? Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Kang, Joseph S. [mailto:[EMAIL PROTECTED] Sent: Friday, February 18, 2005 11:59 AM To: users@spamassassin.apache.org Subject: RE: where is database updated by sa-learn > -Original Message- > From: Tracey Gates [mailto:[EMAIL PROTECTED] > Sent: Friday, February 18, 2005 11:41 AM > To: 'Joe Polk'; users@spamassassin.apache.org > Subject: RE: where is database updated by sa-learn > > > I don't have a bayes directory but I have the following files > in the .spamassassin directory for the user that I have been > sa-learning. > > bayes_toks > bayes_seen > bayes_journal > > I don't intend to use user prefs. Can I copy these files in > the spamassassin directory on my new server and it be > compatible? Old machine is ver 2.63 and going to 3.0.2. > > Then I put the following into the local.cf?? > > Bayes_path /etc/mail/spamassassin/bayes/ > SA 3.0.2 uses Berkeley DB version 3, SA 2.6.x used DB version 2. The 3.0.x documentation (wiki, too, I think) has info on dealing with the DB upgrade. Also, you might want to read the man page for Spamassassin configuration files on what the Bayes_path parameter actually does. Best of luck, Joe K.
RE: ROLEX spam
I downloaded the .cf files from the rulesemporium.com site but I don't know what to do with them. Do I just place them in the same folder as my local.cf and SpamAssassin will automatically use them or do I need to place something in a configuration file to make SpamAssassin use them? Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Thomas Arend [mailto:[EMAIL PROTECTED] Sent: Friday, February 18, 2005 5:35 AM To: users@spamassassin.apache.org Subject: Re: ROLEX spam Am Freitag, 18. Februar 2005 10:11 schrieb Gray, Richard: > Does anyone have a good ruleset for catching all this fake watch spam? My rules can be found here: http://www.rulesemporium.com/forums/showthread.php?s=&postid=329#post329 There is also a mass check with a former version. Thomas > > I'm seeing more of it in our systems here, and don't want to duplicate > effort if one of you fine people has already got one written. > > TIA > > Richard > > > --- > This email from dns has been validated by dnsMSS Managed Email > Security and is free from all known viruses. > > For further information contact [EMAIL PROTECTED] -- icq:133073900 http://www.t-arend.de
RE: where is database updated by sa-learn
I don't have a bayes directory but I have the following files in the .spamassassin directory for the user that I have been sa-learning. bayes_toks bayes_seen bayes_journal I don't intend to use user prefs. Can I copy these files in the spamassassin directory on my new server and it be compatible? Old machine is ver 2.63 and going to 3.0.2. Then I put the following into the local.cf?? Bayes_path /etc/mail/spamassassin/bayes/ Thanks. Tracey Gates Lead Developer [EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately. -Original Message- From: Joe Polk [mailto:[EMAIL PROTECTED] Sent: Friday, February 18, 2005 9:23 AM To: users@spamassassin.apache.org Subject: Re: where is database updated by sa-learn It really depends. If you've not given it a path, then it will be in a subdirectory under each user, usually if you're been sa-learning as root then look under root's .spamassassin directory for a bayes directory. If you don't intend to use user prefs (letting users have their own bayes db's) then you can just set a path in your local.cf like so: bayes_path /etc/mail/spamassassin/bayes/ Or whereever you prefer. -- <> -- Original Message --- From: "Tracey Gates" <[EMAIL PROTECTED]> To: Sent: Fri, 18 Feb 2005 08:17:41 -0600 Subject: where is database updated by sa-learn > I have a server that I have been running SpamAssassin's sa-learn on > for a long time. I just built another server and would like to copy > the information for the production server over to the new server so I > don't have to have the new server re-learn the spam. > > I have SA 2.63 on the production server and the latest version of SA > on the new server. > > 1. Where do I find the data that sa-learn creates? > 2. Can I copy version 2.63 data to the new version? > > I just don't want to start from scratch to rebuild my spam list. Any > ideas of how to do this? > > <http://yoursummit.com/Images/scg_logo.jpg> > > Tracey Gates > Lead Developer > <mailto:[EMAIL PROTECTED]> [EMAIL PROTECTED] > > 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203 > Phone 918-663-0991 / Fax 918-663-0840 > > This communication is intended only for the recipient(s) named above; > may be confidential and/or legally privileged; and, must be treated as > such in accordance with state and federal laws. If you are not the > intended recipient, you are hereby notified that any use of this > communication, or any of its contents, is prohibited. If you have > received this communication in error, please reply to the sender and > then delete the message from your computer system immediately. --- End of Original Message ---
where is database updated by sa-learn
Title: Message I have a server that I have been running SpamAssassin's sa-learn on for a long time. I just built another server and would like to copy the information for the production server over to the new server so I don't have to have the new server re-learn the spam. I have SA 2.63 on the production server and the latest version of SA on the new server. 1. Where do I find the data that sa-learn creates? 2. Can I copy version 2.63 data to the new version? I just don't want to start from scratch to rebuild my spam list. Any ideas of how to do this? Tracey GatesLead Developer[EMAIL PROTECTED] 1350 South Boulder, Third Floor / Tulsa, OK 74119-3203Phone 918-663-0991 / Fax 918-663-0840 This communication is intended only for the recipient(s) named above; may be confidential and/or legally privileged; and, must be treated as such in accordance with state and federal laws. If you are not the intended recipient, you are hereby notified that any use of this communication, or any of its contents, is prohibited. If you have received this communication in error, please reply to the sender and then delete the message from your computer system immediately.
