Re: Razor, spamassassin - network test

2009-08-02 Thread monolit

I am really sorry it was mistake - I was yesterday very tired.

Back on-list.  I'm not a personal help-line.

When I use spamassassin -t -D razor2  /tmp/spam so I dont get the hash and
so on but content analysis
  details...bayes clasification and so on. I expected message like 

debug: Razor is available
  debug: Razor Agents 1.20, protocol version 2.
  debug: Read server list from /home/jgb/.razor.lst
  debug: 72636 seconds before closest server discovery
  debug: Closest server is 209.204.62.150
  debug: Connecting to 209.204.62.150...
  debug: Connection established
  debug: Signature: 48e74b8496877ba45072b201b41eebed7038186b
  debug: Server version: 1.11, protocol version 2
  debug: Server response: Negative
  48e74b8496877ba45072b201b41eebed7038186b
  debug: Message 1 NOT found in the catalogue

I dont have any idea howto do razor works. This command(spamassassin -t -D
razor2  /tmp/spam) is without --lint and its recommended by spamassassin
www pages.so  I am begginer in this field and therefore I need accurate
advise. 
Thanks for your help


-- 
View this message in context: 
http://www.nabble.com/Razor%2C-spamassassin---network-test-tp24773506p24776602.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: Razor, spamassassin - network test

2009-08-02 Thread Karsten Bräckelmann
Getting kind of a headache, trying to wrap my head around this confusing
mess. Anyway, here's my shot at this.

On Sun, 2009-08-02 at 03:31 -0700, an anonymous Nabble user wrote:
   When I use spamassassin -t -D razor2  /tmp/spam
   so I dont get the hash and so on but content analysis
   details...bayes clasification and so on. I expected message like 

The -D razor2 option limits debugging to Razor. No Bayes and so on
debugging.

I believe you're ONLY looking at the end. Which, due to the -t option,
indeed does show an additional Content Analysis at the end. The Razor
debugging however is at the TOP. Have a careful look at ALL the output,
not only the end.


 debug: Razor is available
 debug: Razor Agents 1.20, protocol version 2.
 debug: Read server list from /home/jgb/.razor.lst
 debug: 72636 seconds before closest server discovery
 debug: Closest server is 209.204.62.150
 debug: Connecting to 209.204.62.150...
 debug: Connection established
 debug: Signature: 48e74b8496877ba45072b201b41eebed7038186b
 debug: Server version: 1.11, protocol version 2
 debug: Server response: Negative 48e74b8496877ba45072b201b41eebed7038186b
 debug: Message 1 NOT found in the catalogue

This is a straight copy from the wiki [1], explaining how to test Razor
is working. However, it's an *old* snippet. Do run the command and have
a look at the Razor debug output at the top.

It will be different, cause this snippet is really, really old. Note the
version and protocol. But it will get you all the debugging output.


 I dont have any idea howto do razor works. This command(spamassassin -t -D
 razor2  /tmp/spam) is without --lint and its recommended by spamassassin
 www pages.so  I am begginer in this field and therefore I need accurate
 advise. 

That command is correct.


[1] http://wiki.apache.org/spamassassin/RazorHowToTell

-- 
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128  (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}



Re: Razor, spamassassin - network test

2009-08-02 Thread monolit

I understand that I must read whole output(message(TOP message)). But the
output this command is very fast and it stop at the end. I dont catch TOP of
message. I tried | more switch but it didint help. I tried redirecting
output to the file but it doesnt work. The file was empty:( I dont know how
can I read the TOP of output message.

The last things from spamassassin web is:

Edit your spamd start-up script, or start-up options file (depending on
which OS you're running, these may be different). There should be a -L or
--local switch in that file. Remove it to enable network tests.

I cant find the file with this switch - I use CentOS distro. 
 
-- 
View this message in context: 
http://www.nabble.com/Razor%2C-spamassassin---network-test-tp24773506p24780477.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: Razor, spamassassin - network test

2009-08-02 Thread Karsten Bräckelmann
On Sun, 2009-08-02 at 11:17 -0700, monolit wrote:
 I understand that I must read whole output(message(TOP message)). But the
 output this command is very fast and it stop at the end. I dont catch TOP of
 message. I tried | more switch but it didint help. I tried redirecting
 output to the file but it doesnt work. The file was empty:( I dont know how
 can I read the TOP of output message.

You mean, your terminal does not have a scroll-back buffer? You can't
simply go back a few pages?

Well, then try redirecting STDERR, instead of STDOUT only. That's where
the debugging messages are.

  spamassassin -D razor2   sample.msg  21 | less


 Edit your spamd start-up script, or start-up options file (depending on
 which OS you're running, these may be different). There should be a -L or
 --local switch in that file. Remove it to enable network tests.
 
 I cant find the file with this switch - I use CentOS distro. 

This  (a) applies to spamd only, not running the 'spamassassin' script
as you do right now, and  (b) only in the case network-tests have
explicitly been disabled in the daemon start-up script.


-- 
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128  (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}



Re: Razor, spamassassin - network test

2009-08-02 Thread monolit

Your command works! I found in spamassassin -D razor2   sample.msg  21 |
less  message the following:
check[9444]: [ 6] a=ce=4ep4=7542-10s=4uO_brp3_KWEDuqMYXBVHI-4-FwA
But I dont know how to recognize that is a signature(hash) of the mail. In
the old version it was clearly marked for example:
debug: Signature: 48e74b8496877ba45072b201b41eebed7038186b.

My second question is: When I send mail for example from XP a) station to XP
b) station so spamassassin write to header of mail x-spam-status and so on.
According to I recognise that mail was checked by using SA rules,
bayes(autolearn), but how can I recognize that the mail was really checked
by Razor? In mail header isnt any info and in razor.log is too any
info(about checking the mail)
-- 
View this message in context: 
http://www.nabble.com/Razor%2C-spamassassin---network-test-tp24773506p24781568.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: Razor, spamassassin - network test

2009-08-02 Thread Karsten Bräckelmann
I'm starting to seriously wonder, what your homework actually is about.


On Sun, 2009-08-02 at 13:05 -0700, an anonymous Nabble user wrote:
 Your command works! I found in spamassassin -D razor2   sample.msg  21 |
 less  message the following:
 check[9444]: [ 6] a=ce=4ep4=7542-10s=4uO_brp3_KWEDuqMYXBVHI-4-FwA
 But I dont know how to recognize that is a signature(hash) of the mail. In

This is a question for the Razor community, don't you think?

(Hint: The Razor community is also not hosted at some Ubuntu help forum.
Where you previously posted these two threads, and then dumped a copy of
the forum-mangled text to the SA forum at Nabble.)

 the old version it was clearly marked for example:
 debug: Signature: 48e74b8496877ba45072b201b41eebed7038186b.

This hash is hexadecimal encoded. Unlike the values above. A crypto-
graphic hash does not necessarily need to be encoded in hex.


 My second question is: When I send mail for example from XP a) station to XP
 b) station so spamassassin write to header of mail x-spam-status and so on.
 According to I recognise that mail was checked by using SA rules,
 bayes(autolearn), but how can I recognize that the mail was really checked
 by Razor? In mail header isnt any info and in razor.log is too any
 info(about checking the mail)

If Razor is enabled in SA, SA will do the test. The rule gets hit (and
added to the Status header) only, if it is recognized as spam by Razor.

You probably would be able to define more rules, with an informational
score of 0.001, using a much wider range possibly covering all cases.
See 25_razor2.cf for the current rule.


-- 
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128  (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}



Re: Razor, spamassassin - network test

2009-08-01 Thread Karsten Bräckelmann
On Sat, 2009-08-01 at 16:10 -0700, an anonymous Nabble user wrote:
 Hi I need help with antispam. I use spamassassin with razor. And when I test
 spamassassin --lint -D razor2 then I get result that razor2 : test local
 only, skipping razor. I need test razor in connection to the internet. I
 dont know how it do. Can you advise me?

Lint checking disables network tests. That's why you see this. What you
need to do is to use debugging and feed it a message...

 I find out from spamassassin web the following:
 
 How to turn on network tests
 
 Edit your spamd start-up script, or start-up options file (depending on
 which OS you're running, these may be different). There should be a -L or
 --local switch in that file. Remove it to enable network tests.
 
 But i cant find the file with the switch -L. I use CentOS...
 When I type the folowing: spamassassin -t -D razor2  /tmp/spam

Like this.  Don't use --lint for that type of check. Use debugging only.
Apparently, it works if you do that.


-- 
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128  (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}



Re: Razor, spamassassin - network test

2009-08-01 Thread monolit



I tried it without --lint just spamassassin --lint -D razor2 so the
command line freeze(dont work).

 When I use spamassassin -t -D razor2  /tmp/spam
 so I dont get the hash and so on but content analysis details...bayes
 clasification and so on. I expected message like :
debug: Razor is available
 debug: Razor Agents 1.20, protocol version 2.
 debug: Read server list from /home/jgb/.razor.lst
 debug: 72636 seconds before closest server discovery
 debug: Closest server is 209.204.62.150
 debug: Connecting to 209.204.62.150...
 debug: Connection established
 debug: Signature: 48e74b8496877ba45072b201b41eebed7038186b
 debug: Server version: 1.11, protocol version 2
 debug: Server response: Negative
 48e74b8496877ba45072b201b41eebed7038186b
 debug: Message 1 NOT found in the catalogue

Can you type accurate command for using razor. I want test the mail...
Create hash ...send it to the server ang get the answer(is spam or ham).
-- 
View this message in context: 
http://www.nabble.com/Razor%2C-spamassassin---network-test-tp24773506p24773657.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: Razor, spamassassin - network test

2009-08-01 Thread Karsten Bräckelmann
Back on-list.  I'm not a personal help-line.

On Sat, 2009-08-01 at 16:40 -0700, an anonymous Nabble user wrote privately:
 I tried it without --lint just spamassassin --lint -D razor2 so the
 ^^^^
You did not.

 command line freeze(dont work).

Or maybe you did, despite your command given.

The --lint option creates an internal test message. With real debugging,
that means NO --lint option, but usually -D, you need to pipe it a
message. Otherwise, it apparently freezes, waiting for input (on STDIN).

  When I use spamassassin -t -D razor2  /tmp/spam
  so I dont get the hash and so on but content analysis
  details...bayes clasification and so on. I expected message like :

Despite the quote indentation, I did not write that.

Anyway, something like that should do...

 debug: Razor is available
  debug: Razor Agents 1.20, protocol version 2.
  debug: Read server list from /home/jgb/.razor.lst
  debug: 72636 seconds before closest server discovery
  debug: Closest server is 209.204.62.150
  debug: Connecting to 209.204.62.150...
  debug: Connection established
  debug: Signature: 48e74b8496877ba45072b201b41eebed7038186b
  debug: Server version: 1.11, protocol version 2
  debug: Server response: Negative
  48e74b8496877ba45072b201b41eebed7038186b
  debug: Message 1 NOT found in the catalogue
 
 Can you type accurate command for using razor. I want test the mail...
 Create hash ...send it to the server ang get the answer(is spam or
 ham).

-- 
char *t=\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4;
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;il;i++){ i%8? c=1:
(c=*++x); c128  (s+=h); if (!(h=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}