Re: Spam Du Jour ? *.XLS
On Sun, 22 Jul 2007 01:55:20 +0200 "Chr. v. Stuckrad" <[EMAIL PROTECTED]> wrote: On Sun, 22 Jul 2007, Robert Schetterer wrote: > investors news-76212.xls, et all > > no real challenge > jep , got 3 xls spams today well, here too, but I think soon we'll get the whole mix ... a combinatoric explosion of envelope formats and content variants, meaning 'any windows-showable-fileformat' * 'all the already known picture-tricks embedded' Anybody working on generic detectors yet? (I really would like to plug that (w)hole :-) Something like amavis or clamav to first unpack and then spamassassin to analyze it? Stucki You might also want to keep in mind if some versions of Outlook are being used to generate these spams, you could start seeing just a winmail.dat attachment. This would indicate a message was generated in RTF (rich text format). See: http://en.wikipedia.org/wiki/TNEF If that's the case, non Outlook users won't be able to open the attachments period. That is unless they have loaded the proper tools to extract what's inside.
Re: scan internal email? SA and exchange server?
Sorry for the repeat and response to my own message. Must have skipped over the tail end of Gary's response. Must read more thorough next time. On Mon, 22 Jan 2007 05:02:25 + <[EMAIL PROTECTED]> wrote: On Sun, 21 Jan 2007 22:00:26 -0500 Michael Scheidell <[EMAIL PROTECTED]> wrote: I can scan incoming spam by MX record on my external box before it gets to exchange.server. I can can outgoing email by setting the external box as smarthost in exchange. How do I scan internal to internal, exchange server only email? It never seems to leave the exchange server. I believe you would have to be running SA on the Exchange server. Otherwise you would have to send the message off to something external then back in. Have you ever checked out the ESA Sink? http://www.christopherlewis.com/ESA/ExchangeSpamAssassin.htm Don't know if this is what you are looking for or not. I haven't used Exchange in over eight years.
Re: scan internal email? SA and exchange server?
On Sun, 21 Jan 2007 22:00:26 -0500 Michael Scheidell <[EMAIL PROTECTED]> wrote: I can scan incoming spam by MX record on my external box before it gets to exchange.server. I can can outgoing email by setting the external box as smarthost in exchange. How do I scan internal to internal, exchange server only email? It never seems to leave the exchange server. I believe you would have to be running SA on the Exchange server. Otherwise you would have to send the message off to something external then back in. Have you ever checked out the ESA Sink? http://www.christopherlewis.com/ESA/ExchangeSpamAssassin.htm Don't know if this is what you are looking for or not. I haven't used Exchange in over eight years.
Re: errors with spamassain in windows
All you should really do within the directory SA was unpacked into: perl makefile.pl nmake nmake install You would have to have a C compiler installed to build the spamc component. If you want to use the spamd/spamc components, search the archives of this list or google. There are a few Windows ports of the two that can be used. On Sat, 30 Dec 2006 09:36:08 +0100 "Guido van Brakel" <[EMAIL PROTECTED]> wrote: Dear Sir/Madam, Im trying to install SpamAssasin under Windows,I installed perl and nmake. But I'm getting these errors: --- C:\Perl\bin\perl.exe version.h.pl version.h.pl: creating version.h copy config.h.win config.h copy spamc.h.win spamc.h C:\Perl\bin\perl.exe ..\build\preprocessor -Mvars -iMakefile.win -oMakefile cd .. NMAKE -f spamc/Makefile spamc/spamc.exe Microsoft (R) Program Maintenance Utility Version 1.50 Copyright (c) Microsoft Corp 1988-94. All rights reserved. cd spamc NMAKE spamc.exe Microsoft (R) Program Maintenance Utility Version 1.50 Copyright (c) Microsoft Corp 1988-94. All rights reserved. cl /DWIN32 /W4 spamc.c replace\getopt.c libspamc.c utils.c ws2_32.lib 'cl' is not recognized as an internal or external command, operable program or batch file. NMAKE : fatal error U1077: 'C:\WINDOWS\system32\cmd.exe' : return code '0x1' Stop. NMAKE : fatal error U1077: 'C:\WINDOWS\system32\cmd.exe' : return code '0x2' Stop. NMAKE : fatal error U1077: 'C:\WINDOWS\system32\cmd.exe' : return code '0x2' Stop. C:\Downloads\Mail-SpamAssassin-3.1.7\Mail-SpamAssassin-3.1.7> C:\Downloads\Mail-SpamAssassin-3.1.7\Mail-SpamAssassin-3.1.7>spamassassin -D < sample-spam .txt 'spamassassin' is not recognized as an internal or external command, operable program or batch file. C:\Downloads\Mail-SpamAssassin-3.1.7\Mail-SpamAssassin-3.1.7>NMAKe Microsoft (R) Program Maintenance Utility Version 1.50 Copyright (c) Microsoft Corp 1988-94. All rights reserved. NMAKE -f spamc/Makefile spamc/spamc.exe Microsoft (R) Program Maintenance Utility Version 1.50 Copyright (c) Microsoft Corp 1988-94. All rights reserved. cd spamc NMAKE spamc.exe Microsoft (R) Program Maintenance Utility Version 1.50 Copyright (c) Microsoft Corp 1988-94. All rights reserved. cl /DWIN32 /W4 spamc.c replace\getopt.c libspamc.c utils.c ws2_32.lib 'cl' is not recognized as an internal or external command, operable program or batch file. NMAKE : fatal error U1077: 'C:\WINDOWS\system32\cmd.exe' : return code '0x1' Stop. NMAKE : fatal error U1077: 'C:\WINDOWS\system32\cmd.exe' : return code '0x2' Stop. NMAKE : fatal error U1077: 'C:\WINDOWS\system32\cmd.exe' : return code '0x2' Stop. C:\Downloads\Mail-SpamAssassin-3.1.7\Mail-SpamAssassin-3.1.7>NMAKE -f spamc/Makefile spamc /spamc.exe Microsoft (R) Program Maintenance Utility Version 1.50 Copyright (c) Microsoft Corp 1988-94. All rights reserved. cd spamc NMAKE spamc.exe Microsoft (R) Program Maintenance Utility Version 1.50 Copyright (c) Microsoft Corp 1988-94. All rights reserved. cl /DWIN32 /W4 spamc.c replace\getopt.c libspamc.c utils.c ws2_32.lib 'cl' is not recognized as an internal or external command, operable program or batch file. NMAKE : fatal error U1077: 'C:\WINDOWS\system32\cmd.exe' : return code '0x1' Stop. NMAKE : fatal error U1077: 'C:\WINDOWS\system32\cmd.exe' : return code '0x2' Stop. C:\Downloads\Mail-SpamAssassin-3.1.7\Mail-SpamAssassin-3.1.7>cd spamc C:\Downloads\Mail-SpamAssassin-3.1.7\Mail-SpamAssassin-3.1.7\spamc>NMAKE spamc.exe Microsoft (R) Program Maintenance Utility Version 1.50 Copyright (c) Microsoft Corp 1988-94. All rights reserved. cl /DWIN32 /W4 spamc.c replace\getopt.c libspamc.c utils.c ws2_32.lib 'cl' is not recognized as an internal or external command, operable program or batch file. NMAKE : fatal error U1077: 'C:\WINDOWS\system32\cmd.exe' : return code '0x1' Stop. C:\Downloads\Mail-SpamAssassin-3.1.7\Mail-SpamAssassin-3.1.7\spamc> Do you how I can fix it or how I let it work. Yours Sincerely, Guido
Re: dns_available
On Wed, 27 Dec 2006 23:24:36 +0100
"vertito" <[EMAIL PROTECTED]> wrote:
was it
dns_available 1
or
dns_available yes
From the documentation:
dns_available { yes | test[: name1 name2...] | no }
(default: test)
By default, SpamAssassin will query some default hosts on
the internet to attempt to check if DNS is working or not.
The problem is that it can introduce some delay if your
network connection is down, and in some cases it can
wrongly guess that DNS is unavailable because the test
connections failed. SpamAssassin includes a default set of
13 servers, among which 3 are picked randomly.
You can however specify your own list by specifying
dns_available test: domain1.tld domain2.tld
domain3.tldPlease note, the DNS test queries for NS
records.
SpamAssassin's network rules are run in parallel. This can
cause overhead in terms of the number of file descriptors
required; it is recommended that the minimum limit on file
descriptors be raised to at least 256 for safety.
Re: High CPU running SA in a VMware VM
On Thu, 26 Oct 2006 21:48:22 -0700 "Gary W. Smith" <[EMAIL PROTECTED]> wrote: Did you pre-allocate the disk space? If not you might consider do that first and defragging the disk. Good point! I forgot about the disk space.
Re: High CPU running SA in a VMware VM
On Thu, 26 Oct 2006 15:52:17 -0700 (PDT) Sammy Anderson <[EMAIL PROTECTED]> wrote: We recently migrated our SpamAssassin installation from a physical 3.6 GHz system running RHEL 4 and SA 3.0.4 to a VMware VM (ESX 2.5.4) with RHEL 4 as the guest OS and SA 3.1.7. Each user has their own Bayes files (Berkeley DB) and these were copied from the old to the new server. Now whenever an expiry process runs on a user's database, the CPU spikes, sometimes for a minute or longer. We did not notice spikes on the old server, but it is really hammering the VM. Has anyone else experienced this problem? For now I have disabled Bayes altogether because of the unacceptable load. Perhaps memory started to spill into the swap on either the VM or guest OS. I don't know what version of VMWare you are using. I'm using v5.2.2 running under Windows. In the memory preferences I have mine set so all the virtual machine memory has to fit into the reserved host ram. I've done small tests with SA before and haven't had any problems. Then again, I haven't found anything I can use to put a load on a test install. My test bed is on a duo-core 3.2ghz with four gig of ram. The VM has a full gig of ram allocated and is running the release version of FreeBSD 6.1.
