Re: Spamassassin Spam Header
Sounds like you didn't kill spamd first. this is my top: 7091 root 9 0 20092 1096 1096 S 0.0 0.1 0:01.17 spamd 7303 backuppc 8 0 5468 3364 1124 S 0.0 0.3 1:02.43 BackupPC 7315 backuppc 9 0 3032 1536 1100 S 0.0 0.1 0:07.87 BackupPC_trashC 7428 root 9 0 38596 23m 23m S 0.0 2.3 0:27.23 spamd 7429 root 9 0 47164 27m 27m S 0.0 2.7 0:19.87 spamd 7430 root 9 0 34328 4948 4948 S 0.0 0.5 0:22.41 spamd 7431 root 9 0 118m 29m 29m S 0.0 3.0 0:33.93 spamd 7432 root 9 0 40520 23m 23m S 0.0 2.3 0:24.63 spamd Sounds like your installation is severely hosed. How did you install SA? i installed it over apt-get install spamassassin i have a debian sarge system... _ Haben Spinnen Ohren? Finden Sie es heraus mit dem MSN Suche Superquiz via http://www.msn-superquiz.de Jetzt mitmachen und gewinnen!
Re: Spamassassin Spam Header
Markus Braun wrote: > >> Also be careful with bayes_file_mode.. you want 7's here not 6's like >> you might think. This is really not a mode, but a mask, and it is >> sometimes used in directory creation. >> bayes_file_mode 0777 >> > hello again, > > so i make a cronjob the spamassassin is learning the spams from the > spam folder with the user vmail. > > Is this rule now correct: > header L_S_ULT_PHARMSubject =The Ultimate Online Pharmaceutical > score L_S_ULT_PHARM 3.0 > describe L_S_ULT_PHARM spam from the ultimate online pharmacy No, that's not correct. First, you need an =~ not just =. Second, you need to frame your regex in /'es header L_S_ULT_PHARMSubject =~ /The Ultimate Online Pharmaceutical/ Be *SURE* to run spamassassin --lint after editing. It should run quitely without any output.. if it complains about errors parsing the config file, fix em. > > And how can i reload the spamd? > > I try it with spamd reload then this comes up: > Could not create INET socket on 127.0.0.1:783: Die Adresse wird > bereits verwendet (IO::Socket::INET: Die Adresse wird bereits verwendet) Sounds like you didn't kill spamd first. > > > or: > > :/etc/spamassassin# spamassassin reload > > Unable to open reload: Datei oder Verzeichnis nicht gefunden > > > Did i something wrong? Sounds like your installation is severely hosed. How did you install SA?
Re: Spamassassin Spam Header
Also be careful with bayes_file_mode.. you want 7's here not 6's like you might think. This is really not a mode, but a mask, and it is sometimes used in directory creation. bayes_file_mode 0777 hello again, so i make a cronjob the spamassassin is learning the spams from the spam folder with the user vmail. Is this rule now correct: header L_S_ULT_PHARMSubject =The Ultimate Online Pharmaceutical score L_S_ULT_PHARM 3.0 describe L_S_ULT_PHARM spam from the ultimate online pharmacy And how can i reload the spamd? I try it with spamd reload then this comes up: Could not create INET socket on 127.0.0.1:783: Die Adresse wird bereits verwendet (IO::Socket::INET: Die Adresse wird bereits verwendet) or: :/etc/spamassassin# spamassassin reload Unable to open reload: Datei oder Verzeichnis nicht gefunden Did i something wrong? _ Die neue MSN Suche Toolbar mit Windows-Desktopsuche. Suchen Sie gleichzeitig im Web, Ihren E-Mails und auf Ihrem PC! Jetzt neu! http://desktop.msn.de/ Jetzt gratis downloaden!
Re: Spamassassin Spam Header
header L_S_SW_LOWPRSubject =~/\bS[o0]ftw[a4]r[e3] At L[o0]w
Pr[i1]c[e3]s?\b/i
You have a spurious line wrap above. Join it to the end of the line
above so that it will have the "w" followed by the "Pr[". That will
help. ALWAYS run "SpamAssassin --lint" when you make a change like that
and before you tell spamd to reaload.
score L_S_SW_LOWPR 3.0
describe L_S_SW_LOWPR offers software at low price
{^_^}
I think i have a good idea. Each Day i move t he spam files into the folder
.spam. In the night i make a cronjob called this:
0 1 * * * vmail sa-learn --spam /var/opt/vmail/marcus/Maildir/.spam/cur
*.*
But i don know that the command is correct.
But he execute it as vmail user and not root. or?
marcus
_
Sie suchen E-Mails, Dokumente oder Fotos? Die neue MSN Suche Toolbar mit
Windows-Desktopsuche liefert in sekundenschnelle Ergebnisse. Jetzt neu!
http://desktop.msn.de/ Jetzt gratis downloaden!
Re: Spamassassin Spam Header
Markus Braun wrote: >> It looks OK, except the file for some reason has HTML tags in it.. The >> real file must not have HTML in it. > Which HTML Tags do you mean in the rule.cf? Nevermind.. it was an artifact of the tool I used to view the file and the mime type your client chose for the attachment. > I Think spamd is running as vmail. > > so must i login over ssh with vmail and learn the messages? Yes, or make use of bayes_path and bayes_file_mode to create one single site-wide bayes database shared by all users. Any training you perform as root will go nowhere right now. Be carefuly with bayes_path.. it's not a path, but a path plus partial filename. If you want your bayes db in /var/spamassassin/ you want: bayes_path /var/spamassassin/bayes Also be careful with bayes_file_mode.. you want 7's here not 6's like you might think. This is really not a mode, but a mask, and it is sometimes used in directory creation. bayes_file_mode 0777
Re: Spamassassin Spam Header
From: "Markus Braun" <[EMAIL PROTECTED]>
>You can drop these into a .cf file in your site-config directory
(/etc/mail/spamassassin/ for most people):
header L_S_ULT_PHARMSubject =~/\bThe Ultimate Online Pharmaceutical\b/i
score L_S_ULT_PHARM 3.0
describe L_S_ULT_PHARM spam from the ultimate online pharmacy
header L_S_SW_LOWPRSubject =~/\bS[o0]ftw[a4]r[e3] At L[o0]w
Pr[i1]c[e3]s?\b/i
You have a spurious line wrap above. Join it to the end of the line
above so that it will have the "w" followed by the "Pr[". That will
help. ALWAYS run "SpamAssassin --lint" when you make a change like that
and before you tell spamd to reaload.
score L_S_SW_LOWPR 3.0
describe L_S_SW_LOWPR offers software at low price
{^_^}
Re: Spamassassin Spam Header
It looks OK, except the file for some reason has HTML tags in it.. The real file must not have HTML in it. Which HTML Tags do you mean in the rule.cf? header L_S_ULT_PHARMSubject =~/\bThe Ultimate Online Pharmaceutical\b/i score L_S_ULT_PHARM 3.0 describe L_S_ULT_PHARM spam from the ultimate online pharmacy header L_S_SW_LOWPRSubject =~/\bS[o0]ftw[a4]r[e3] At L[o0]wPr[i1]c[e3]s?\b/i score L_S_SW_LOWPR 3.0 describe L_S_SW_LOWPR offers software at low price > Is it a problem when i make the sa-learn with the user root? If you use spamd and don't have a bayes_path and bayes_file_mode statement in your config files, yes. Spamd never scans mail as the root user. If you try to make it, it will setuid itself to the nobody user. This is my local.cf: # rewrite_header Subject *SPAM* # report_safe 1 # trusted_networks 212.17.35. # lock_method flock required_score 5.0 use_bayes 1 bayes_auto_learn 1 I Think spamd is running as vmail. so must i login over ssh with vmail and learn the messages? _ Sie suchen E-Mails, Dokumente oder Fotos? Die neue MSN Suche Toolbar mit Windows-Desktopsuche liefert in sekundenschnelle Ergebnisse. Jetzt neu! http://desktop.msn.de/ Jetzt gratis downloaden!
Re: Spamassassin Spam Header
Markus Braun wrote: >> You can drop these into a .cf file in your site-config directory >> (/etc/mail/spamassassin/ for most people): >> >> header L_S_ULT_PHARMSubject =~/\bThe Ultimate Online >> Pharmaceutical\b/i >> score L_S_ULT_PHARM 3.0 >> describe L_S_ULT_PHARM spam from the ultimate online pharmacy >> >> header L_S_SW_LOWPRSubject =~/\bS[o0]ftw[a4]r[e3] At L[o0]w >> Pr[i1]c[e3]s?\b/i >> score L_S_SW_LOWPR 3.0 >> describe L_S_SW_LOWPR offers software at low price >> >> >> >> Note: careful of the word-wrapping, each of those rules is 3 lines >> long, for a >> total of 6 lines. > > I put one *.cf files into the /etc/spamassasin/ Directory. > > See also attached. It looks OK, except the file for some reason has HTML tags in it.. The real file must not have HTML in it. > > Can you take a short look? > > Also i restarted spamassassin. > > Is it a problem when i make the sa-learn with the user root? If you use spamd and don't have a bayes_path and bayes_file_mode statement in your config files, yes. Spamd never scans mail as the root user. If you try to make it, it will setuid itself to the nobody user.
Re: Spamassassin Spam Header
You can drop these into a .cf file in your site-config directory (/etc/mail/spamassassin/ for most people): header L_S_ULT_PHARMSubject =~/\bThe Ultimate Online Pharmaceutical\b/i score L_S_ULT_PHARM 3.0 describe L_S_ULT_PHARM spam from the ultimate online pharmacy header L_S_SW_LOWPRSubject =~/\bS[o0]ftw[a4]r[e3] At L[o0]w Pr[i1]c[e3]s?\b/i score L_S_SW_LOWPR 3.0 describe L_S_SW_LOWPR offers software at low price Note: careful of the word-wrapping, each of those rules is 3 lines long, for a total of 6 lines. I put one *.cf files into the /etc/spamassasin/ Directory. See also attached. Can you take a short look? Also i restarted spamassassin. Is it a problem when i make the sa-learn with the user root? Thank you very much marcus _ Sie suchen E-Mails, Dokumente oder Fotos? Die neue MSN Suche Toolbar mit Windows-Desktopsuche liefert in sekundenschnelle Ergebnisse. Jetzt neu! http://desktop.msn.de/ Jetzt gratis downloaden! header L_S_ULT_PHARMSubject =~/\bThe Ultimate Online Pharmaceutical\b/i score L_S_ULT_PHARM 3.0 describe L_S_ULT_PHARM spam from the ultimate online pharmacy header L_S_SW_LOWPRSubject =~/\bS[o0]ftw[a4]r[e3] At L[o0]wPr[i1]c[e3]s?\b/i score L_S_SW_LOWPR 3.0 describe L_S_SW_LOWPR offers software at low price
Re: Spamassassin Spam Header
Are you sure your sa-learning was done as the correct user? What user did you use? (root? nobody? The message recipient?) I logged in as root. I type sa-learn -spam and then the name of the email file. Do you use spamd? yes spamd is loaded. Do you normally pass a -u parameter to either spamd or spamc? I dont know :-(, i installed it from apt-get install spamassassin What BAYES rules do the messages hit when they are scanned at delivery time? Where can i look ? You can drop these into a .cf file in your site-config directory (/etc/mail/spamassassin/ for most people): Yes i made a file called rule.cf in this directory. I think i must restart the daemon? bye marcus _ Die neue MSN Suche Toolbar mit Windows-Desktopsuche. Suchen Sie gleichzeitig im Web, Ihren E-Mails und auf Ihrem PC! Jetzt neu! http://desktop.msn.de/ Jetzt gratis downloaden!
Re: Spamassassin Spam Header
Markus Braun wrote: > Hello again, > > sorry but iI have still the problem , that i dont understand the spam > bayes function. > I have SA-learn about 50 emails they are spam. But always the same > header as spam comes as ham into my mailbox. Are you sure your sa-learning was done as the correct user? What user did you use? (root? nobody? The message recipient?) Do you use spamd? Do you normally pass a -u parameter to either spamd or spamc? What BAYES rules do the messages hit when they are scanned at delivery time? > > e.g.: > > The Ultimate Online Pharmaceutical > Software > Software At Low Pr1ce > > How can i make that such emails with these headers are marked as spam? Well at least two of those are best dealt with by custom rules.. If you've got a very specific, often repeated pattern, static rules help a lot and are a sure-fire way to cover it. You can drop these into a .cf file in your site-config directory (/etc/mail/spamassassin/ for most people): header L_S_ULT_PHARMSubject =~/\bThe Ultimate Online Pharmaceutical\b/i score L_S_ULT_PHARM 3.0 describe L_S_ULT_PHARM spam from the ultimate online pharmacy header L_S_SW_LOWPRSubject =~/\bS[o0]ftw[a4]r[e3] At L[o0]w Pr[i1]c[e3]s?\b/i score L_S_SW_LOWPR 3.0 describe L_S_SW_LOWPR offers software at low price Note: careful of the word-wrapping, each of those rules is 3 lines long, for a total of 6 lines.
