Re: Problem with SpamAssassin rules wiki. What is the new link ?

[Bill Cole]

On 9 Apr 2020, at 5:12, Antoine Chiris wrote:


Dear SpamAssassin users/team,

I have a little problem with *SpamAssassin*. I don't find the 
documentation

for the rules.


The definitive documentation of the rules that are distributed as part 
of the project is the rules files themselves. Most rules have (and all 
*should* have) a 'describe' line


For example, for the rule MIME_HTML_MOSTLY I have a link to this wiki 
:
https://wiki.apache.org/spamassassin/Rules/MIME_HTML_MOSTLY But 
apparently
the documentation is no longer available and I don't find the new 
link.


That's true.

The wiki was mostly migrated to the ASF Confluence instance recently and 
is now at https://cwiki.apache.org/confluence/display/SPAMASSASSIN/. The 
old rules descriptions (which had not been maintained since v3.3) were 
not migrated, as they were largely outdated where they were not 
redundant.


I don't have a definitive reference for the decision to stop maintaining 
rule descriptions on the wiki, so there may be a more correct 
explanation out there in the heads of the people who were on the PMC at 
the time. However, my view is that this was the right decision because 
of how the default rules are managed. Rules can shift in and out of the 
update channel based on the automated QA process, and there is a 
continuous trickle of new rules, rule changes, and rule deletions coming 
from the development team that get integrated (or not) via RuleQA. There 
was never a functional process for maintaining the wiki pages for rules 
properly in conjunction with that continuous change process, and the 
descriptions were mostly not much more illuminating than the 'describe' 
lines in the rules files.




If you look in the archives of the apache wiki (
web.archive.org/web/20170913151929/https://wiki.apache.org/…
<http://web.archive.org/web/20170913151929/https://wiki.apache.org/spamassassin/Rules/MIME_HTML_MOSTLY>),
there's a good explanation for that message.

Do you know if this wiki is still available? Is there a new link for 
this

wiki ?


As I noted above, the SA wiki is now at 
https://cwiki.apache.org/confluence/display/SPAMASSASSIN/ but it no 
longer contains any collection of pages that purports to be 
documentation of the individual rules.



--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Not Currently Available For Hire

Problem with SpamAssassin rules wiki. What is the new link ?

[Antoine Chiris]

Dear SpamAssassin users/team,

I have a little problem with *SpamAssassin*. I don't find the documentation
for the rules.

For example, for the rule MIME_HTML_MOSTLY I have a link to this wiki :
https://wiki.apache.org/spamassassin/Rules/MIME_HTML_MOSTLY But apparently
the documentation is no longer available and I don't find the new link.

If you look in the archives of the apache wiki (
web.archive.org/web/20170913151929/https://wiki.apache.org/…
<http://web.archive.org/web/20170913151929/https://wiki.apache.org/spamassassin/Rules/MIME_HTML_MOSTLY>),
there's a good explanation for that message.

Do you know if this wiki is still available? Is there a new link for this
wiki ?

Thanks in advance.


-- 
ANTOINE CHIRIS
INGENIEUR PRODUCTION JUNIOR | PRODUCTION ENGINEER | PROBANCE [image:
Twitter] <https://twitter.com/Probance> | [image: Facebook]
<https://www.facebook.com/Probance> | [image: Linkedin]
<https://www.linkedin.com/company/probance/>
antoine.chi...@probance.com
WWW.PROBANCE.COM <http://probance.com/>
FRANCE | JAPAN | SPAIN

Re: Problem with spamassassin update at /usr/bin/sa-update line 1603

[Kevin A. McGrail]

On 2/22/2019 5:36 AM, mbaldov wrote:
> So I ask you if it's possible to intervene on the mirror's list with
> some option so that to exclude the bad mirrors.

Escalating that issue to our sysadmins list.  Thanks for reporting the
problem.

-- 
Kevin A. McGrail
Member, Apache Software Foundation
Chair Emeritus Apache SpamAssassin Project
https://www.linkedin.com/in/kmcgrail - 703.798.0171

Re: Problem with spamassassin update at /usr/bin/sa-update line 1603

[RW]

On Fri, 22 Feb 2019 11:36:38 +0100
mbaldov wrote:

> Hello,
> I have a mailserver with postfix installed (v.2.11.0) on Ubuntu 14.04
> LTS with Amavis, ClamAV and Spamassasins (v. 3.004002)
> Since the last upgrade that I have done next week, the upgrade of new
> signatures fails

The SA rules are not signatures as such. The core rules tend to be
fairly generic, so missing an update here and there isn't that much of a
problem - it's not like missing an antivirus update. 

If you have a problem with reliability there nothing to stop you
running sa-update several times a night. If the rules are up-to-date
sa-update is just a single DNS lookup. 

> Here below there are two manual attempts (wgets):
> One with a bad mirror (1) and one with a good one (2):
> 
> 1)
> wget http://sa-update.spamassassin.org/1853564.tar.gz
...
> HTTP request sent, awaiting response... *503 Service Unavailable*
> 2019-02-15 12:47:51 *ERROR 503*: Service Unavailable

This worked for me when I just tried it, and I don't have any recent
sa-update failures.

> 
> So I ask you if it's possible to intervene on the mirror's list with
> some option so that to exclude the bad mirrors.

In the short term you can edit unwanted mirrors out of the MIRRORED.BY
file. It will get replaced after a week (if you don't touch it).
It's worth trying just to see what happens.

Problem with spamassassin update at /usr/bin/sa-update line 1603

[mbaldov]

Hello,
I have a mailserver with postfix installed (v.2.11.0) on Ubuntu 14.04 LTS
with Amavis, ClamAV and Spamassasins (v. 3.004002)
Since the last upgrade that I have done next week, the upgrade of new
signatures fails with this messages:
"/etc/cron.daily/spamassassin:Cannot open file
/var/lib/spamassassin/3.004002/updates_spamassassin_org/1854020.tar.gz: No
such file or directory at /usr/bin/sa-update line 1603."

The problem isn't the file that clearly  doesn't exist but some mirrors
that it seems have problems when they are called.
I have seen many post where they spoke about permission but I have checked
and all it's correct.

Debugging the perl file called spamassasins, you get to a point where it
appears the mirror's list and their weight;
the first attempts is done on sa-update.spamassassin.org but the response
is 503 as highlighted below:

eb 15 12:45:10.992 [10243] dbg: channel: protocol family available:
inet,inet6
Feb 15 12:45:10.992 [10243] dbg: channel: file
/var/lib/spamassassin/3.004002/updates_spamassassin_org/MIRRORED.BY is too
old, refreshing mirrors file
Feb 15 12:45:10.992 [10243] dbg: channel: DNS lookup on
mirrors.updates.spamassassin.org
Feb 15 12:45:11.156 [10243] dbg: http: url:
http://spamassassin.apache.org/updates/MIRRORED.BY
Feb 15 12:45:11.156 [10243] dbg: http: downloading to:
/var/lib/spamassassin/3.004002/updates_spamassassin_org/MIRRORED.BY, replace
Feb 15 12:45:11.156 [10243] dbg: util: executable for curl was found at
/usr/bin/curl
Feb 15 12:45:11.156 [10243] dbg: http: /usr/bin/curl -s -L -O --remote-time
-g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o MIRRORED.BY
-- http://spamassassin.apache.org/updates/MIRRORED.BY
Feb 15 12:45:11.332 [10243] dbg: http: process [10244], exit status: exit 0
Feb 15 12:45:11.333 [10243] dbg: channel: MIRRORED.BY file for channel
updates.spamassassin.org retrieved
Feb 15 12:45:11.333 [10243] dbg: channel: parsing MIRRORED.BY file for
channel updates.spamassassin.org
Feb 15 12:45:11.333 [10243] dbg: channel: found mirror
http://sa-update.dnswl.org/ weight=3
Feb 15 12:45:11.333 [10243] dbg: channel: found mirror
http://www.sa-update.pccc.com/ weight=5
Feb 15 12:45:11.334 [10243] dbg: channel: found mirror
http://sa-update.secnap.net/ weight=5
Feb 15 12:45:11.334 [10243] dbg: channel: found mirror
http://sa-update.space-pro.be/ weight=1
Feb 15 12:45:11.334 [10243] dbg: channel: found mirror
http://sa-update.ena.com/ weight=5
Feb 15 12:45:11.334 [10243] dbg: channel: found mirror
http://sa-update.razx.cloud/ weight=5
Feb 15 12:45:11.334 [10243] dbg: channel: found mirror
http://sa-update.fossies.org/ weight=1
Feb 15 12:45:11.334 [10243] dbg: channel: found mirror
http://sa-update.bitwell.fi/ weight=5
Feb 15 12:45:11.335 [10243] dbg: channel: found mirror
http://sa-update.spamassassin.org/ weight=10
Feb 15 12:45:11.338 [10243] dbg: channel: selected mirror
http://sa-update.spamassassin.org
Feb 15 12:45:11.338 [10243] dbg: http: url:
*http://sa-update.spamassassin.org/1853564.tar.gz
*
Feb 15 12:45:11.338 [10243] dbg: http: downloading to:
/var/lib/spamassassin/3.004002/updates_spamassassin_org/1853564.tar.gz, new
Feb 15 12:45:11.338 [10243] dbg: util: executable for curl was found at
/usr/bin/curl
Feb 15 12:45:11.338 [10243] dbg: http: /usr/bin/curl -s -L -O --remote-time
-g --max-redirs 2 --connect-timeout 30 --max-time 300 --fail -o
1853564.tar.gz -- http://sa-update.spamassassin.org/1853564.tar.gz
Feb 15 12:45:11.543 [10243] dbg: http: process [10246], exit status: exit 22
Cannot open file
/var/lib/spamassassin/3.004002/updates_spamassassin_org/1853564.tar.gz: No
such file or directory at /usr/bin/sa-update line 1603.
##

Here below there are two manual attempts (wgets):
One with a bad mirror (1) and one with a good one (2):

1)
wget http://sa-update.spamassassin.org/1853564.tar.gz
--2019-02-15 12:47:51--  http://sa-update.spamassassin.org/1853564.tar.gz
Resolving sa-update.spamassassin.org (sa-update.spamassassin.org)...
64.142.56.146
Connecting to sa-update.spamassassin.org
(sa-update.spamassassin.org)|64.142.56.146|:80...
connected.
HTTP request sent, awaiting response... *503 Service Unavailable*
2019-02-15 12:47:51 *ERROR 503*: Service Unavailable

2)
wget http://sa-update.dnswl.org/1853564.tar.gz
--2019-02-15 12:48:08--  http://sa-update.dnswl.org/1853564.tar.gz
Resolving sa-update.dnswl.org (sa-update.dnswl.org)... 78.47.167.123,
2a01:4f8:d15:2fc0:::20
Connecting to sa-update.dnswl.org (sa-update.dnswl.org)|78.47.167.123|:80...
connected.
HTTP request sent, awaiting response... *200 OK*
Length: 295185 (288K) [application/x-gzip]
Saving to: ‘1853564.tar.gz’
100%[==>]

So I ask you if it's possible to intervene on the mirror's list with some
option so that to exclude the bad mirrors.

Thanks in advance for who will answer me.

Regards.

Re: problem with spamassassin for WIndows

[Gianluca Furnarotto]

Ok Groach, I perfectly understand. I already asked to Hmailserver forum about 
this issue. Thanks again.


Da: Groach 
(mailto:groachmail-stopspammin...@yahoo.com)
Rispondi: Groach 
(mailto:groachmail-stopspammin...@yahoo.com)
Data: 18 febbraio 2018 at 19:02:46
A: users@spamassassin.apache.org 
(mailto:users@spamassassin.apache.org)
Oggetto: Re: problem with spamassassin for WIndows

> Keysteal, you will get your help for that on the hmailserver forum (where you 
> are following the guide from).
>  
> This mail list is strictly spamassassin and not for the bespoke configuration 
> you are trying with mysql.
>  
> (And we have already seen that some Linux snobs will refuse you your right to 
> use an os different to theirs and ask for help).
>  
> Do not pursue this particular question on here.
>  
> On 18 February 2018 16:23:22 GMT+00:00, Gianluca Furnarotto 
>  wrote:
> >Thanks Groach, and all guys that answered to me. This was very helpful.
> >Next step for me is using Mysql to store learning spam. I followed a
> >guide, but when I start sa-learn I have a strange windows error : "The
> >program can't start because libmysql__.dll is missing from your
> >computer. Try reinstalling
> >the program to fix this problem"
> >I find the .dll inside a perl folder, and I tried to copy everywhere,
> >but nothing has changed.
> >
> >--
> >Gianluca Furnarotto
> >
> >Da: Groach
> >(mailto:groachmail-stopspammin...@yahoo.com)
> >Rispondi: Groach
> >(mailto:groachmail-stopspammin...@yahoo.com)
> >Data: 18 febbraio 2018 at 11:57:44
> >A: users@spamassassin.apache.org
> >(mailto:users@spamassassin.apache.org)
> >Oggetto: Re: problem with spamassassin for WIndows
> >
> >> Gianluca
> >>
> >> 1, Your .PRE files are (by default) in:
> >>
> >> %ProgramFiles(x86)%\JAM Software\SpamAssassin for
> >Windows\etc\spamassassin
> >>
> >> You will find the 'AutoLearnThreshold' plugin you need in v310.pre.
> >> You will find the BAYES and SHORTCIRCUIT plugins you need in v320.pre
> >(they may already be enabled - but if not just removed the #)
> >>
> >> Then remove the loading of them from your Local.cf.
> >>
> >> 2,
> >> To make them useful, your LOCAL.CF should read something like:
> >>
> >> (Example)
> >>
> >> > ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
> >> >
> >> > # default: strongly-whitelisted mails are *really* whitelisted now,
> >if the
> >> > # shortcircuiting plugin is active, causing early exit to save CPU
> >load.
> >> > # Uncomment to turn this on
> >> > #
> >> > shortcircuit USER_IN_WHITELIST on
> >> > shortcircuit USER_IN_DEF_WHITELIST on
> >> >
> >> > endif # Mail::SpamAssassin::Plugin::Shortcircuit
> >>
> >>
> >>
> >>
> >> On 18/02/2018 01:21, John Hardin wrote:
> >> > On Sun, 18 Feb 2018, Gianluca Furnarotto wrote:
> >> >
> >> > > I’ve done this modifications in local.cf:
> >> > >
> >> > > # ifplugin
> >> > >
> >> > > loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
> >> > > loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
> >> > > loadplugin Mail::SpamAssassin::Plugin::Bayes
> >> > >
> >> > > #ok_languages en it
> >> > >
> >> > > ok_locales en
> >> > >
> >> > > # endif
> >> > >
> >> > > And command spamassassin —lint doesn’t show any errors. Tomorrow
> >I will continue
> >> > > the debugging. It seems it doesn’t agree ifplugin-endif and also
> >ok_languages
> >> >
> >> > Three points:
> >> >
> >> > (1) the syntax for "ifplugin" is:
> >> >
> >> > ifplugin Mail::SpamAssassin::Plugin::whatever
> >> >
> >> > It's a test to see whether that plugin is loaded, so that you can
> >write plugin-dependent rules without generating lint errors when the
> >plugin isn't loaded.
> >> >
> >> > (2) "ifplugin" only accepts one plugin name.
> >> >
> >> > (3) "loadplugin" commands should be in your v340.pre file, so that
> >they get loaded before any rules.
> >> >
> >> >
> >> > If you added that "ifplugin" block to your config file, what
> >exactly were you trying to achieve with that block?
> >> >
> >> >
> >>
>  
> --
> Sent from my Android device with K-9 Mail. Please excuse my brevity. 

Re: problem with spamassassin for WIndows

[Groach]

Keysteal, you will get your help for that on the hmailserver forum (where you 
are following the guide from).

This mail list is strictly spamassassin and not for the bespoke configuration 
you are trying with mysql.

(And  we have already seen that some Linux snobs will refuse you your right to 
use an os different to theirs and ask for help). 

Do not pursue this particular question on here. 

On 18 February 2018 16:23:22 GMT+00:00, Gianluca Furnarotto 
 wrote:
>Thanks Groach, and all guys that answered to me. This was very helpful.
>Next step for me is using Mysql to store learning spam. I followed a
>guide, but when I start sa-learn I have a strange windows error : "The
>program can't start because libmysql__.dll is missing from your
>computer. Try reinstalling
>the program to fix this problem"
>I find the .dll inside a perl folder, and I tried to copy everywhere,
>but nothing has changed.
>
>--  
>Gianluca Furnarotto  
>
>Da: Groach
>(mailto:groachmail-stopspammin...@yahoo.com)
>Rispondi: Groach
>(mailto:groachmail-stopspammin...@yahoo.com)
>Data: 18 febbraio 2018 at 11:57:44
>A: users@spamassassin.apache.org
>(mailto:users@spamassassin.apache.org)
>Oggetto: Re: problem with spamassassin for WIndows
>
>> Gianluca
>>  
>> 1, Your .PRE files are (by default) in:
>>  
>> %ProgramFiles(x86)%\JAM Software\SpamAssassin for
>Windows\etc\spamassassin
>>  
>> You will find the 'AutoLearnThreshold' plugin you need in v310.pre.
>> You will find the BAYES and SHORTCIRCUIT plugins you need in v320.pre
>(they may already be enabled - but if not just removed the #)
>>  
>> Then remove the loading of them from your Local.cf.
>>  
>> 2,
>> To make them useful, your LOCAL.CF should read something like:
>>  
>> (Example)
>>  
>> > ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
>> >  
>> > # default: strongly-whitelisted mails are *really* whitelisted now,
>if the
>> > # shortcircuiting plugin is active, causing early exit to save CPU
>load.
>> > # Uncomment to turn this on
>> > #
>> > shortcircuit USER_IN_WHITELIST on
>> > shortcircuit USER_IN_DEF_WHITELIST on
>> >  
>> > endif # Mail::SpamAssassin::Plugin::Shortcircuit
>>  
>>  
>>  
>>  
>> On 18/02/2018 01:21, John Hardin wrote:
>> > On Sun, 18 Feb 2018, Gianluca Furnarotto wrote:
>> >  
>> > > I’ve done this modifications in local.cf:
>> > >  
>> > > # ifplugin
>> > >  
>> > > loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
>> > > loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
>> > > loadplugin Mail::SpamAssassin::Plugin::Bayes
>> > >  
>> > > #ok_languages en it
>> > >  
>> > > ok_locales en
>> > >  
>> > > # endif
>> > >  
>> > > And command spamassassin —lint doesn’t show any errors. Tomorrow
>I will continue
>> > > the debugging. It seems it doesn’t agree ifplugin-endif and also
>ok_languages
>> >  
>> > Three points:
>> >  
>> > (1) the syntax for "ifplugin" is:
>> >  
>> > ifplugin Mail::SpamAssassin::Plugin::whatever
>> >  
>> > It's a test to see whether that plugin is loaded, so that you can
>write plugin-dependent rules without generating lint errors when the
>plugin isn't loaded.
>> >  
>> > (2) "ifplugin" only accepts one plugin name.
>> >  
>> > (3) "loadplugin" commands should be in your v340.pre file, so that
>they get loaded before any rules.
>> >  
>> >  
>> > If you added that "ifplugin" block to your config file, what
>exactly were you trying to achieve with that block?
>> >  
>> >  
>>  

-- 
Sent from my Android device with K-9 Mail. Please excuse my brevity.

Re: problem with spamassassin for WIndows

[Gianluca Furnarotto]

Thanks Groach, and all guys that answered to me. This was very helpful. Next 
step for me is using Mysql to store learning spam. I followed a guide, but when 
I start sa-learn I have a strange windows error : "The program can't start 
because libmysql__.dll is missing from your computer. Try reinstalling
the program to fix this problem"
I find the .dll inside a perl folder, and I tried to copy everywhere, but 
nothing has changed.

--  
Gianluca Furnarotto  

Da: Groach 
(mailto:groachmail-stopspammin...@yahoo.com)
Rispondi: Groach 
(mailto:groachmail-stopspammin...@yahoo.com)
Data: 18 febbraio 2018 at 11:57:44
A: users@spamassassin.apache.org 
(mailto:users@spamassassin.apache.org)
Oggetto: Re: problem with spamassassin for WIndows

> Gianluca
>  
> 1, Your .PRE files are (by default) in:
>  
> %ProgramFiles(x86)%\JAM Software\SpamAssassin for Windows\etc\spamassassin
>  
> You will find the 'AutoLearnThreshold' plugin you need in v310.pre.
> You will find the BAYES and SHORTCIRCUIT plugins you need in v320.pre (they 
> may already be enabled - but if not just removed the #)
>  
> Then remove the loading of them from your Local.cf.
>  
> 2,
> To make them useful, your LOCAL.CF should read something like:
>  
> (Example)
>  
> > ifplugin Mail::SpamAssassin::Plugin::Shortcircuit
> >  
> > # default: strongly-whitelisted mails are *really* whitelisted now, if the
> > # shortcircuiting plugin is active, causing early exit to save CPU load.
> > # Uncomment to turn this on
> > #
> > shortcircuit USER_IN_WHITELIST on
> > shortcircuit USER_IN_DEF_WHITELIST on
> >  
> > endif # Mail::SpamAssassin::Plugin::Shortcircuit
>  
>  
>  
>  
> On 18/02/2018 01:21, John Hardin wrote:
> > On Sun, 18 Feb 2018, Gianluca Furnarotto wrote:
> >  
> > > I’ve done this modifications in local.cf:
> > >  
> > > # ifplugin
> > >  
> > > loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
> > > loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
> > > loadplugin Mail::SpamAssassin::Plugin::Bayes
> > >  
> > > #ok_languages en it
> > >  
> > > ok_locales en
> > >  
> > > # endif
> > >  
> > > And command spamassassin —lint doesn’t show any errors. Tomorrow I will 
> > > continue
> > > the debugging. It seems it doesn’t agree ifplugin-endif and also 
> > > ok_languages
> >  
> > Three points:
> >  
> > (1) the syntax for "ifplugin" is:
> >  
> > ifplugin Mail::SpamAssassin::Plugin::whatever
> >  
> > It's a test to see whether that plugin is loaded, so that you can write 
> > plugin-dependent rules without generating lint errors when the plugin isn't 
> > loaded.
> >  
> > (2) "ifplugin" only accepts one plugin name.
> >  
> > (3) "loadplugin" commands should be in your v340.pre file, so that they get 
> > loaded before any rules.
> >  
> >  
> > If you added that "ifplugin" block to your config file, what exactly were 
> > you trying to achieve with that block?
> >  
> >  
>  

Re: problem with spamassassin for WIndows

[Groach]

Gianluca

1,  Your .PRE files are (by default) in:

%ProgramFiles(x86)%\JAM Software\SpamAssassin for Windows\etc\spamassassin

You will find the 'AutoLearnThreshold' plugin you need in v310.pre.
You will find the BAYES and SHORTCIRCUIT plugins you need in v320.pre  
(they may already be enabled - but if not just removed the #)


Then remove the loading of them from your Local.cf.

2,
To make them useful, your LOCAL.CF should read something like:

(Example)

   ifplugin Mail::SpamAssassin::Plugin::Shortcircuit

   #   default: strongly-whitelisted mails are *really* whitelisted
   now, if the
   #   shortcircuiting plugin is active, causing early exit to save CPU
   load.
   #   Uncomment to turn this on
   #
 shortcircuit USER_IN_WHITELIST   on
 shortcircuit USER_IN_DEF_WHITELIST   on

   endif # Mail::SpamAssassin::Plugin::Shortcircuit





On 18/02/2018 01:21, John Hardin wrote:

On Sun, 18 Feb 2018, Gianluca Furnarotto wrote:


I’ve done this modifications in local.cf:

#  ifplugin

loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
loadplugin Mail::SpamAssassin::Plugin::Bayes

#ok_languages en it

ok_locales en

#   endif

And command spamassassin —lint doesn’t show any errors. Tomorrow I 
will continue
the debugging. It seems it doesn’t agree ifplugin-endif and also 
ok_languages


Three points:

(1) the syntax for "ifplugin" is:

ifplugin Mail::SpamAssassin::Plugin::whatever

It's a test to see whether that plugin is loaded, so that you can 
write plugin-dependent rules without generating lint errors when the 
plugin isn't loaded.


(2) "ifplugin" only accepts one plugin name.

(3) "loadplugin" commands should be in your v340.pre file, so that 
they get loaded before any rules.



If you added that "ifplugin" block to your config file, what exactly 
were you trying to achieve with that block?

Re: problem with spamassassin for WIndows

[Benny Pedersen]

Gianluca Furnarotto skrev den 2018-02-18 00:48:

I’ve done this modifications in local.cf:

#  ifplugin

loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
loadplugin Mail::SpamAssassin::Plugin::Bayes


loadplugin must not be in a cf file, it should be keeped in pre file

ifplugin can be in anyfile that ends in cf :=)

i know plenti of badly writed wiki and users maillist says it works, but 
its fake news

Re: problem with spamassassin for WIndows

[John Hardin]

On Sun, 18 Feb 2018, Gianluca Furnarotto wrote:


I’ve done this modifications in local.cf:

#  ifplugin

loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
loadplugin Mail::SpamAssassin::Plugin::Bayes

#ok_languages en it

ok_locales en

#   endif

And command spamassassin —lint doesn’t show any errors. Tomorrow I will continue
the debugging. It seems it doesn’t agree ifplugin-endif and also ok_languages


Three points:

(1) the syntax for "ifplugin" is:

ifplugin Mail::SpamAssassin::Plugin::whatever

It's a test to see whether that plugin is loaded, so that you can write 
plugin-dependent rules without generating lint errors when the plugin 
isn't loaded.


(2) "ifplugin" only accepts one plugin name.

(3) "loadplugin" commands should be in your v340.pre file, so that they 
get loaded before any rules.



If you added that "ifplugin" block to your config file, what exactly were 
you trying to achieve with that block?



--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  USMC Rules of Gunfighting #6: If you can choose what to bring
  to a gunfight, bring a long gun and a friend with a long gun.
---
 5 days until George Washington's 286th Birthday

Re: problem with spamassassin for WIndows

[Gianluca Furnarotto]

I’ve done this modifications in local.cf:

#  ifplugin

loadplugin Mail::SpamAssassin::Plugin::Shortcircuit
loadplugin Mail::SpamAssassin::Plugin::AutoLearnThreshold
loadplugin Mail::SpamAssassin::Plugin::Bayes

#ok_languages en it

ok_locales en

#   endif

And command spamassassin —lint doesn’t show any errors. Tomorrow I will continue
the debugging. It seems it doesn’t agree ifplugin-endif and also ok_languages

On 17 febbraio 2018 a 22:28:03, Bill Cole 
(sausers-20150...@billmail.scconsult.com) scritto:

On 17 Feb 2018, at 14:48 (-0500), Kevin A. McGrail wrote:  

> I gave you a suggestion the other day. Your configuration is wrong.   
> You aren't passing lint  
>  
> Look at that line 717 or if that's not the right line number, look at  
> your configuration around your DB for Bayes.  

I'm not sure that Bayes has anything to do with it specifically. To get  
to Parser.pm line 571, it seems to me that the Parser needs to read a  
line that starts with "ifplugin" (or "if plugin") and that it is  
expecting a plugin name argument on that line. I can reproduce the base  
error by adding these 2 lines to any of the .pre or .cf files in the  
site preferences directory or to the active user_prefs file:  

ifplugin  
endif  

The one oddity is that I don't get any ' line [number]' clause in  
the error message from creating that broken config. This may be a  
Windows-specific quirk (I don't have a Windows machine for testing) or  
it may indicate some more arcane issue in how the configuration is being  
parsed.  

So the thing to look for is 'ifplugin' in local.cf, any other *.pre or  
*.cf file in the same directory as local.cf, or your user_prefs file. It  
should be followed by the name of a plugin, a block of lines defining  
rules or setting configuration parameters, and an "endif" line.  


>  
> On 2/17/2018 2:31 PM, Gianluca Furnarotto wrote:  
>> So, anyone can't give me a suggestion?  
>>  
>>  
>> On 16 febbraio 2018 a 08:24:04, Gianluca Furnarotto  
>> (keyst...@libero.it ) scritto:  
>>  
>>> Hi Bill,  
>>>  
>>> this is the result of the command you suggested to type:  
>>>  
>>> feb 16 07:21:09.678 [21824] warn: Use of uninitialized value $_[1]  
>>> in hash eleme  
>>> nt at Mail/SpamAssassin/Conf/Parser.pm line 571,  line 717.  



--  
Bill Cole  
b...@scconsult.com or billc...@apache.org  
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)  
Currently Seeking Steady Work: https://linkedin.com/in/billcole  

Re: problem with spamassassin for WIndows

[Gianluca Furnarotto]

I confirm you that problem is in local.cf, into these lines:

ifplugin

Mail::SpamAssassin::Plugin::Shortcircuit
Mail::SpamAssassin::Plugin::AutoLearnThreshold
Mail::SpamAssassin::Plugin::Bayes

ok_languages en it

endif 

If I comment all these lines, I don’t have any warning error.
I don’t understand why.
On 17 febbraio 2018 a 22:28:03, Bill Cole 
(sausers-20150...@billmail.scconsult.com) scritto:

On 17 Feb 2018, at 14:48 (-0500), Kevin A. McGrail wrote:  

> I gave you a suggestion the other day. Your configuration is wrong.   
> You aren't passing lint  
>  
> Look at that line 717 or if that's not the right line number, look at  
> your configuration around your DB for Bayes.  

I'm not sure that Bayes has anything to do with it specifically. To get  
to Parser.pm line 571, it seems to me that the Parser needs to read a  
line that starts with "ifplugin" (or "if plugin") and that it is  
expecting a plugin name argument on that line. I can reproduce the base  
error by adding these 2 lines to any of the .pre or .cf files in the  
site preferences directory or to the active user_prefs file:  

ifplugin  
endif  

The one oddity is that I don't get any ' line [number]' clause in  
the error message from creating that broken config. This may be a  
Windows-specific quirk (I don't have a Windows machine for testing) or  
it may indicate some more arcane issue in how the configuration is being  
parsed.  

So the thing to look for is 'ifplugin' in local.cf, any other *.pre or  
*.cf file in the same directory as local.cf, or your user_prefs file. It  
should be followed by the name of a plugin, a block of lines defining  
rules or setting configuration parameters, and an "endif" line.  


>  
> On 2/17/2018 2:31 PM, Gianluca Furnarotto wrote:  
>> So, anyone can't give me a suggestion?  
>>  
>>  
>> On 16 febbraio 2018 a 08:24:04, Gianluca Furnarotto  
>> (keyst...@libero.it ) scritto:  
>>  
>>> Hi Bill,  
>>>  
>>> this is the result of the command you suggested to type:  
>>>  
>>> feb 16 07:21:09.678 [21824] warn: Use of uninitialized value $_[1]  
>>> in hash eleme  
>>> nt at Mail/SpamAssassin/Conf/Parser.pm line 571,  line 717.  



--  
Bill Cole  
b...@scconsult.com or billc...@apache.org  
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)  
Currently Seeking Steady Work: https://linkedin.com/in/billcole  

Re: problem with spamassassin for WIndows

[Bill Cole]

On 17 Feb 2018, at 14:48 (-0500), Kevin A. McGrail wrote:

I gave you a suggestion the other day. Your configuration is wrong.  
You aren't passing lint


Look at that line 717 or if that's not the right line number, look at 
your configuration around your DB for Bayes.


I'm not sure that Bayes has anything to do with it specifically. To get 
to Parser.pm line 571, it seems to me that the Parser needs to read a 
line that starts with "ifplugin" (or "if plugin") and that it is 
expecting a plugin name argument on that line. I can reproduce the base 
error by adding these 2 lines to any of the .pre or .cf files in the 
site preferences directory or to the active user_prefs file:


  ifplugin
  endif

The one oddity is that I don't get any ' line [number]' clause in 
the error message from creating that broken config. This may be a 
Windows-specific quirk (I don't have a Windows machine for testing) or 
it may indicate some more arcane issue in how the configuration is being 
parsed.


So the thing to look for is 'ifplugin' in local.cf, any other *.pre or 
*.cf file in the same directory as local.cf, or your user_prefs file. It 
should be followed by the name of a plugin, a block of lines defining 
rules or setting configuration parameters, and an "endif" line.





On 2/17/2018 2:31 PM, Gianluca Furnarotto wrote:

So, anyone can't give me a suggestion?


On 16 febbraio 2018 a 08:24:04, Gianluca Furnarotto 
(keyst...@libero.it ) scritto:



Hi Bill,

this is the result of the command you suggested to type:

feb 16 07:21:09.678 [21824] warn: Use of uninitialized value $_[1] 
in hash eleme

nt at Mail/SpamAssassin/Conf/Parser.pm line 571,  line 717.




--
Bill Cole
b...@scconsult.com or billc...@apache.org
(AKA @grumpybozo and many *@billmail.scconsult.com addresses)
Currently Seeking Steady Work: https://linkedin.com/in/billcole

Re: problem with spamassassin for WIndows

[Kevin A. McGrail]

I gave you a suggestion the other day. Your configuration is wrong.  You 
aren't passing lint


Look at that line 717 or if that's not the right line number, look at 
your configuration around your DB for Bayes.


On 2/17/2018 2:31 PM, Gianluca Furnarotto wrote:

So, anyone can't give me a suggestion?


On 16 febbraio 2018 a 08:24:04, Gianluca Furnarotto 
(keyst...@libero.it ) scritto:



Hi Bill,

this is the result of the command you suggested to type:

feb 16 07:21:09.678 [21824] warn: Use of uninitialized value $_[1] in 
hash eleme

nt at Mail/SpamAssassin/Conf/Parser.pm line 571,  line 717.

Re: problem with spamassassin for WIndows

[Gianluca Furnarotto]

So, anyone can't give me a suggestion?


On 16 febbraio 2018 a 08:24:04, Gianluca Furnarotto (keyst...@libero.it) 
scritto:

Hi Bill,

this is the result of the command you suggested to type:

feb 16 07:21:09.678 [21824] warn: Use of uninitialized value $_[1] in hash eleme
nt at Mail/SpamAssassin/Conf/Parser.pm line 571,  line 717.


On 16 febbraio 2018 a 02:06:40, Bill Cole 
(sausers-20150...@billmail.scconsult.com) scritto:

On 15 Feb 2018, at 15:33, Gianluca Furnarotto wrote:

> Hi,
>
> I am trying to use Bayes with spamassassin, now it seems stop to
> learn, and
> when I use a command as "sa-learn --dump magic", or "sa-learn --sync",
> or other sa-learn commands,
> it appears this error:
> "Use of uninitialized value $_[1] in hash element at
> Mail/SpamAssassin/Conf/Parser.pm line 571."
>
> Line 571 is this:
> " } "
> inside these lines.
> " elsif ($type == $Mail::SpamAssassin::Conf::CONF_TYPE_ADDRLIST) {
> $cmd->{code} = \&set_addrlist_value;
> }" <--- line 571

That absolutely IS NOT line 571 of Mail/SpamAssassin/Conf/Parser.pm in
SA version 3.4.1. That's line 685.

The relevant lines in Mail/SpamAssassin/Conf/Parser.pm:

568
569 # functions supported in the "if" eval:
570 sub cond_clause_plugin_loaded {
571 return $_[0]->{conf}->{plugins_loaded}->{$_[1]};
572 }
573

My first guess on this is that your configuration has a typo. Try
running 'spamassassin --lint' to check it.

The error message indicates that something is calling the subroutine
'cond_clause_plugin_loaded' in a way that gives it only one parameter
where it is expecting 2, the first of which is an object reference.

Re: problem with spamassassin for WIndows

[Kevin A. McGrail]

On 2/16/2018 1:24 AM, Gianluca Furnarotto wrote:

Hi Bill,

this is the result of the command you suggested to type:

feb 16 07:21:09.678 [21824] warn: Use of uninitialized value $_[1] in 
hash eleme

nt at Mail/SpamAssassin/Conf/Parser.pm line 571,  line 717.


Good call, Bill.  Sounds like a misconfiguration on line 717.  Not sure 
if that's easy to figure out but you are looking for problems if I had 
to guess around your bayesian configuration stuff.





On 16 febbraio 2018 a 02:06:40, Bill Cole 
(sausers-20150...@billmail.scconsult.com 
) scritto:



On 15 Feb 2018, at 15:33, Gianluca Furnarotto wrote:

> Hi,
>
> I am trying to use Bayes with spamassassin, now it seems stop to
> learn, and
> when I use a command as "sa-learn --dump magic", or "sa-learn --sync",
> or other sa-learn commands,
> it appears this error:
> "Use of uninitialized value $_[1] in hash element at
> Mail/SpamAssassin/Conf/Parser.pm line 571."
>
> Line 571 is this:
> " } "
> inside these lines.
> " elsif ($type == $Mail::SpamAssassin::Conf::CONF_TYPE_ADDRLIST) {
> $cmd->{code} = \&set_addrlist_value;
> }" <--- line 571

That absolutely IS NOT line 571 of Mail/SpamAssassin/Conf/Parser.pm in
SA version 3.4.1. That's line 685.

The relevant lines in Mail/SpamAssassin/Conf/Parser.pm:

568
569 # functions supported in the "if" eval:
570 sub cond_clause_plugin_loaded {
571 return $_[0]->{conf}->{plugins_loaded}->{$_[1]};
572 }
573

My first guess on this is that your configuration has a typo. Try
running 'spamassassin --lint' to check it.

The error message indicates that something is calling the subroutine
'cond_clause_plugin_loaded' in a way that gives it only one parameter
where it is expecting 2, the first of which is an object reference.

Re: problem with spamassassin for WIndows

[Gianluca Furnarotto]

Hi Bill,

this is the result of the command you suggested to type:

feb 16 07:21:09.678 [21824] warn: Use of uninitialized value $_[1] in hash eleme
nt at Mail/SpamAssassin/Conf/Parser.pm line 571,  line 717.


On 16 febbraio 2018 a 02:06:40, Bill Cole 
(sausers-20150...@billmail.scconsult.com) scritto:

On 15 Feb 2018, at 15:33, Gianluca Furnarotto wrote: 

> Hi, 
> 
> I am trying to use Bayes with spamassassin, now it seems stop to 
> learn, and 
> when I use a command as "sa-learn --dump magic", or "sa-learn --sync", 
> or other sa-learn commands, 
> it appears this error: 
> "Use of uninitialized value $_[1] in hash element at 
> Mail/SpamAssassin/Conf/Parser.pm line 571." 
> 
> Line 571 is this: 
> " } " 
> inside these lines. 
> " elsif ($type == $Mail::SpamAssassin::Conf::CONF_TYPE_ADDRLIST) { 
> $cmd->{code} = \&set_addrlist_value; 
> }" <--- line 571 

That absolutely IS NOT line 571 of Mail/SpamAssassin/Conf/Parser.pm in 
SA version 3.4.1. That's line 685. 

The relevant lines in Mail/SpamAssassin/Conf/Parser.pm: 

568 
569 # functions supported in the "if" eval: 
570 sub cond_clause_plugin_loaded { 
571 return $_[0]->{conf}->{plugins_loaded}->{$_[1]}; 
572 } 
573 

My first guess on this is that your configuration has a typo. Try 
running 'spamassassin --lint' to check it. 

The error message indicates that something is calling the subroutine 
'cond_clause_plugin_loaded' in a way that gives it only one parameter 
where it is expecting 2, the first of which is an object reference. 

Re: problem with spamassassin for WIndows

[Bill Cole]

On 15 Feb 2018, at 15:33, Gianluca Furnarotto wrote:


Hi,

I am trying to use Bayes with spamassassin, now it seems stop to 
learn, and
when I use a command as "sa-learn --dump magic", or "sa-learn --sync", 
or other sa-learn commands,

it appears this error:
"Use of uninitialized value $_[1] in hash element at 
Mail/SpamAssassin/Conf/Parser.pm line 571."


Line 571 is this:
" } "
inside these lines.
" elsif ($type == $Mail::SpamAssassin::Conf::CONF_TYPE_ADDRLIST) {
$cmd->{code} = \&set_addrlist_value;
}" <--- line 571


That absolutely IS NOT line 571 of Mail/SpamAssassin/Conf/Parser.pm in 
SA version 3.4.1. That's line 685.


The relevant lines in Mail/SpamAssassin/Conf/Parser.pm:

   568  
   569  # functions supported in the "if" eval:
   570  sub cond_clause_plugin_loaded {
   571return $_[0]->{conf}->{plugins_loaded}->{$_[1]};
   572  }
   573  

My first guess on this is that your configuration has a typo. Try 
running 'spamassassin --lint' to check it.


The error message indicates that something is calling the subroutine 
'cond_clause_plugin_loaded' in a way that gives it only one parameter 
where it is expecting 2, the first of which is an object reference.

Re: problem with spamassassin for WIndows

[Groach]

 Thanks for your non contribution again harald. On point as ever.  Hope you 
feel better now that you have again broadcast your irrelevant thoughts. (Your 
opinion of windows servers does not represent the world nor does it help the 
poster with his problem).

(Did I say "on point"? Oops, it seems I can talk sh1t too).

Helpful responses only please, team. 

On 15 February 2018 22:22:01 GMT+00:00, Reindl Harald  
wrote:
>nobody seriously cares ablut windows if it comes to servers - it's that
>
>easy - period
>
>Am 15.02.2018 um 23:17 schrieb Groach:
>> I originally guided Gianluca you this list for help because as a user
>i 
>> know that the jam port of spamassassin makes an almost identical 
>> function of the software which, as you know, operates mainly on these
>
>> plug ins. Everything you do in Linux you also do in the Windows
>version. 
>> I also know that as a user I personally don't have the problem he is 
>> reporting. This problem he has is with a plug in. (Perl is non
>platform 
>> specific usually).
>> 
>> Every time I had a problem in the past and reported it to Jam support
>
>> for help, it was ALWAYS due to something (bugs) existing in base 
>> spamassassin and not platform specific.
>> 
>> Therefore i ask the readers to consider this report generally and
>ignore 
>> the platform it is run on.
>> 
>> Can any one offer more help please.
>> 
>> On 15 February 2018 21:37:05 GMT+00:00, "Kevin A. McGrail" 
>> 

Re: problem with spamassassin for WIndows

[Kevin A. McGrail]

On 2/15/2018 5:17 PM, Groach wrote:
I originally guided Gianluca you this list for help because as a user 
i know that the jam port of spamassassin makes an almost identical 
function of the software which, as you know, operates mainly on these 
plug ins. Everything you do in Linux you also do in the Windows 
version. I also know that as a user I personally don't have the 
problem he is reporting. This problem he has is with a plug in. (Perl 
is non platform specific usually).


Every time I had a problem in the past and reported it to Jam support 
for help, it was ALWAYS due to something (bugs) existing in base 
spamassassin and not platform specific.


Therefore i ask the readers to consider this report generally and 
ignore the platform it is run on.


Can any one offer more help please.
Can you provide any steps to replicate the issue?  You might have to 
submit your bayesian db to pastebin or similar.

Re: problem with spamassassin for WIndows

[Groach]

I originally guided Gianluca you this list for help because as a user i know 
that the jam port of spamassassin makes an almost identical function of the 
software which, as you know, operates mainly on these plug ins. Everything you 
do in Linux you also do in the Windows version.  I also know that as a user I 
personally don't have the problem he is reporting.  This problem he has is with 
a plug in. (Perl is non platform specific usually).

Every time I had a problem in the past and reported it to Jam support for help, 
it was ALWAYS  due to something (bugs) existing in base spamassassin and not 
platform specific. 

Therefore i ask the readers to consider this report generally and ignore the 
platform it is run on. 

Can any one offer more help please.

On 15 February 2018 21:37:05 GMT+00:00, "Kevin A. McGrail" 
 wrote:
>On 2/15/2018 3:33 PM, Gianluca Furnarotto wrote:
>> I am trying to use Bayes with spamassassin, now it seems stop to 
>> learn, and
>> when I use a command as "sa-learn --dump magic", or "sa-learn
>--sync", 
>> or other sa-learn commands,
>> it appears this error:
>> "Use of uninitialized value $_[1] in hash element at 
>> Mail/SpamAssassin/Conf/Parser.pm line 571."
>>
>> Line 571 is this:
>> " } "
>> inside these lines.
>> " elsif ($type == $Mail::SpamAssassin::Conf::CONF_TYPE_ADDRLIST) {
>> $cmd->{code} = \&set_addrlist_value;
>> }" <--- line 571
>>
>> I'm not a perl programmer, so I need help to understand what is
>wrong.
>> Thanks.
>>
>> p.s.: this is the Jam Software Spamassassin version for Windows
>>
>You should likely ask JAM Software if they don't respond on list.
>
>
>Regards,
>KAM

Re: problem with spamassassin for WIndows

[Kevin A. McGrail]

On 2/15/2018 3:33 PM, Gianluca Furnarotto wrote:
I am trying to use Bayes with spamassassin, now it seems stop to 
learn, and
when I use a command as "sa-learn --dump magic", or "sa-learn --sync", 
or other sa-learn commands,

it appears this error:
"Use of uninitialized value $_[1] in hash element at 
Mail/SpamAssassin/Conf/Parser.pm line 571."


Line 571 is this:
" } "
inside these lines.
" elsif ($type == $Mail::SpamAssassin::Conf::CONF_TYPE_ADDRLIST) {
$cmd->{code} = \&set_addrlist_value;
}" <--- line 571

I'm not a perl programmer, so I need help to understand what is wrong.
Thanks.

p.s.: this is the Jam Software Spamassassin version for Windows


You should likely ask JAM Software if they don't respond on list.


Regards,
KAM

problem with spamassassin for WIndows

[Gianluca Furnarotto]

Hi,

I am trying to use Bayes with spamassassin, now it seems stop to learn, and
when I use a command as "sa-learn --dump magic", or "sa-learn --sync", or other 
sa-learn commands,
it appears this error:
"Use of uninitialized value $_[1] in hash element at 
Mail/SpamAssassin/Conf/Parser.pm line 571."

Line 571 is this:
" } "
inside these lines.
" elsif ($type == $Mail::SpamAssassin::Conf::CONF_TYPE_ADDRLIST) {
$cmd->{code} = \&set_addrlist_value;
}" <--- line 571

I'm not a perl programmer, so I need help to understand what is wrong.
Thanks.

p.s.: this is the Jam Software Spamassassin version for Windows

Re: Problem with Spamassassin

[Kevin A. McGrail]

On 6/20/2015 4:08 AM, Antony Stone wrote:

RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_RP_RNBL=1.31,
>RCVD_IN_SORBS_DUL=0.001, RDNS_DYNAMIC=0.982,
>SHORT_HELO_AND_INLINE_IMAGE=1.39] autolearn=no
>
>Can anyone explain me what does this mean?


These are the most important:

The IP address of the person sending to you is on a Barracuda blacklist 
and is also reported to SORBS as a Dial-up, non static IP address, and 
it has a reverse DNS record that corroborates the dynamic nature of the IP.


Finally, it sounds like the HELO string is also not a fully qualified 
domain name (FQDN).


All in all, a poor setup for a mail server.  Get a Static IP address, 
get a reverse pointer, set the name of the server to a FQDN and that 
will likely be a very good start.


Regards,
KAM

Re: Problem with Spamassassin

[Matus UHLAR - fantomas]

On 20.06.15 09:39, Simone Vassili wrote:

one of my customer had a trouble with spamassassin on my server.
He sent me a mail but this mail was recognized by sa as spam!

X-Spam-Status: Yes, score=5.417 tagged_above=4 required=4.5
tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX_IMAGE=0.001,
DYN_RDNS_AND_INLINE_IMAGE=1.168, DYN_RDNS_SHORT_HELO_HTML=0.001,
DYN_RDNS_SHORT_HELO_IMAGE=1.013, FSL_HELO_NON_FQDN_1=0.001,
HTML_MESSAGE=0.001, RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_RP_RNBL=1.31,
RCVD_IN_SORBS_DUL=0.001, RDNS_DYNAMIC=0.982,
SHORT_HELO_AND_INLINE_IMAGE=1.39] autolearn=no


this looks like our customer is using your server as mail relay, without
using SMTP autehntication.
--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
WinError #9: Out of error messages.

Re: Problem with Spamassassin

[Reindl Harald]

Am 20.06.2015 um 09:39 schrieb Simone Vassili:

Hi,
one of my customer had a trouble with spamassassin on my server.
He sent me a mail but this mail was recognized by sa as spam!

X-Spam-Status: Yes, score=5.417 tagged_above=4 required=4.5
 tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX_IMAGE=0.001,
 DYN_RDNS_AND_INLINE_IMAGE=1.168, DYN_RDNS_SHORT_HELO_HTML=0.001,
 DYN_RDNS_SHORT_HELO_IMAGE=1.013, FSL_HELO_NON_FQDN_1=0.001,
 HTML_MESSAGE=0.001, RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_RP_RNBL=1.31,
 RCVD_IN_SORBS_DUL=0.001, RDNS_DYNAMIC=0.982,
 SHORT_HELO_AND_INLINE_IMAGE=1.39] autolearn=no

Can anyone explain me what does this mean?


tell him he should do his homework and ask his ISP to set a PTR record 
matching his servername http://www.emailtalk.org/ptr.aspx and the same 
goes for his helo name, a dynamic PTR and a non-full-qualified HELO 
would make it here not so far to touch SpamAssassin and get rejected before




signature.asc
Description: OpenPGP digital signature

Re: Problem with Spamassassin

[Antony Stone]

On Saturday 20 June 2015 at 09:39:19 (EU time), Simone Vassili wrote:

> Hi,
> one of my customer had a trouble with spamassassin on my server.
> He sent me a mail but this mail was recognized by sa as spam!
> 
> X-Spam-Status: Yes, score=5.417 tagged_above=4 required=4.5
>   tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX_IMAGE=0.001,
>   DYN_RDNS_AND_INLINE_IMAGE=1.168, DYN_RDNS_SHORT_HELO_HTML=0.001,
>   DYN_RDNS_SHORT_HELO_IMAGE=1.013, FSL_HELO_NON_FQDN_1=0.001,
>   HTML_MESSAGE=0.001, RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_RP_RNBL=1.31,
>   RCVD_IN_SORBS_DUL=0.001, RDNS_DYNAMIC=0.982,
>   SHORT_HELO_AND_INLINE_IMAGE=1.39] autolearn=no
> 
> Can anyone explain me what does this mean?

Are you asking us to tell you the definition of each of the tests listed above?

Or maybe you're asking us to see if we can guess why each of them was 
triggered by the email you refer to?

Or perhaps you're wondering what sort of trouble your customer had?


Please re-phrase your question so that we know what you're asking for.


Regards,

Antony.

-- 
Most people are aware that the Universe is big.

 - Paul Davies, Professor of Theoretical Physics

   Please reply to the list;
 please *don't* CC me.

Problem with Spamassassin

[Simone Vassili]

Hi,
one of my customer had a trouble with spamassassin on my server.
He sent me a mail but this mail was recognized by sa as spam!

X-Spam-Status: Yes, score=5.417 tagged_above=4 required=4.5
tests=[BAYES_00=-1.9, DOS_OUTLOOK_TO_MX_IMAGE=0.001,
DYN_RDNS_AND_INLINE_IMAGE=1.168, DYN_RDNS_SHORT_HELO_HTML=0.001,
DYN_RDNS_SHORT_HELO_IMAGE=1.013, FSL_HELO_NON_FQDN_1=0.001,
HTML_MESSAGE=0.001, RCVD_IN_BRBL_LASTEXT=1.449, RCVD_IN_RP_RNBL=1.31,
RCVD_IN_SORBS_DUL=0.001, RDNS_DYNAMIC=0.982,
SHORT_HELO_AND_INLINE_IMAGE=1.39] autolearn=no

Can anyone explain me what does this mean?
Thank you.

Linux 3.2.0-4-686-pae #1 SMP Debian 3.2.68-1+deb7u1 i686 GNU/Linux
Spamassassin 3.3.2-5

--
Simone Vassili
System Administrator
sim...@simonevassili.it

Problem with SpamAssassin wiki formatting

[Jeremy Morton]

It looks like there's a problem with the SpamAssassin wiki when trying 
to get it to format bash scripts.  It's meant to format it properly if 
you start the script:


{{{#!/bin/sh
...
}}}

but it doesn't; it just omits all formatting.  In fact, you can't get it 
to display the shebang line at all; see here where I had to replace the 
exclamation mark to get that line to appear:

http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix

Any chance this could be fixed, or a tip as to how I might get it to work?

--
Best regards,
Jeremy Morton (Jez)

Re: problem with spamassassin and sql

[Kristian Kirilov]

Ok, now my local.cf looking as follow:

ifplugin Mail::SpamAssassin::Plugin::Shortcircuit

rewrite_header Subject [* SPAM _SCORE_ *]
required_score   5.0
report_safe 0

use_bayes   1
use_bayes_rules 1
bayes_auto_learn1

skip_rbl_checks 0
use_razor2  1
use_dcc 0
use_pyzor   1

user_scores_dsn DBI:mysql:spamassassin:127.0.0.1
user_scores_sql_passwordspamassassin
user_scores_sql_usernamespamassassin
user_scores_sql_custom_querySELECT preference, value FROM _TABLE_
WHERE username = _USERNAME_ OR username = '@GLOBAL' OR username =
concat('@', _DOMAIN_) ORDER BY username ASC

But the result is the same:

root@mail:~# grep prefs /var/lib/spamassassin/spamd.log
Wed Jul 13 12:57:09 2011 [12013] dbg: config: retrieving prefs for spamd
from SQL server
Wed Jul 13 12:57:09 2011 [12014] dbg: config: retrieving prefs for spamd
from SQL server

SpamAssassin only check prefs for real users on the system.

> Wednesday, July 13, 2011, 3:14:53 AM, Kristian wrote:
>
>> Is it nessacary needed? When i start spamd in debug mode saw the
>> /usr/share/spamassassin/10_default_prefs.cf is proceeded.
>
> You shouldn't make any changes in the /usr/share/spamassassin
> directory as they could be overwritten when you upgrade SpamAssassin.
> I believe by default, the user_scores_* settings are commented out.
> The default SpamAssassin stores userprefs in individual user
> directories within the file system. Any changes to the config should
> be done within the local.cf config file.
>
>>> Wednesday, July 13, 2011, 1:23:51 AM, Kristian wrote:
>>>
 Hello im using spamassassin and user prefs in mysql database, i have
 successfully setting up mysql table and all about correct work of
 squirelmail plugin and from client site everything is ok. The problem
 is
 spamassassin can't handle username & domain variables..
>>>
 I mean this:
>>>
 /usr/share/spamassassin/10_default_prefs.cf
>>>
 user_scores_dsn DBI:mysql:spamassassin:localhost:3306
 user_scores_sql_passwordspamassassin
 user_scores_sql_usernamespamassassin
>>>
>>> Do you have anything defined in your local.cf file? This is what I
>>> have:
>>>
>>> user_scores_dsn DBI:mysql:spamass:127.0.0.1:3306
>>> user_scores_sql_usernamespamass
>>> user_scores_sql_passwordpassword
>>> user_scores_sql_custom_querySELECT preference, value FROM _TABLE_
>>> WHERE username = _USERNAME_ OR username = '@GLOBAL' OR username =
>>> concat('@', _DOMAIN_) ORDER BY username ASC
>>>
>>>
 but when i started spamassassin with debug in the logs i watching
 this:
>>>
 Tue Jul 12 18:54:12 2011 [10110] dbg: config: Conf::SQL: executing
 SQL:
 select preference, value from userpref where username = 'spamd' or
 username = '@GLOBAL' order by username asc
>>>
 which is incorrect rule, because i need to replace username with
 virtual
 user and domain. The problem is spamassassin not recognize variables
 like
 _USERNAME_ or _DOMAIN_.
>>>
 What is the problem and what i should do to fix is?
 Thanks.
>
> --
> Best regards,
>  Duanemailto:du...@duanemail.org
>
>

Re: problem with spamassassin and sql

[Duane Hill]

Wednesday, July 13, 2011, 3:14:53 AM, Kristian wrote:

> Is it nessacary needed? When i start spamd in debug mode saw the
> /usr/share/spamassassin/10_default_prefs.cf is proceeded.

You shouldn't make any changes in the /usr/share/spamassassin
directory as they could be overwritten when you upgrade SpamAssassin.
I believe by default, the user_scores_* settings are commented out.
The default SpamAssassin stores userprefs in individual user
directories within the file system. Any changes to the config should
be done within the local.cf config file.

>> Wednesday, July 13, 2011, 1:23:51 AM, Kristian wrote:
>>
>>> Hello im using spamassassin and user prefs in mysql database, i have
>>> successfully setting up mysql table and all about correct work of
>>> squirelmail plugin and from client site everything is ok. The problem is
>>> spamassassin can't handle username & domain variables..
>>
>>> I mean this:
>>
>>> /usr/share/spamassassin/10_default_prefs.cf
>>
>>> user_scores_dsn DBI:mysql:spamassassin:localhost:3306
>>> user_scores_sql_passwordspamassassin
>>> user_scores_sql_usernamespamassassin
>>
>> Do you have anything defined in your local.cf file? This is what I
>> have:
>>
>> user_scores_dsn DBI:mysql:spamass:127.0.0.1:3306
>> user_scores_sql_usernamespamass
>> user_scores_sql_passwordpassword
>> user_scores_sql_custom_querySELECT preference, value FROM _TABLE_
>> WHERE username = _USERNAME_ OR username = '@GLOBAL' OR username =
>> concat('@', _DOMAIN_) ORDER BY username ASC
>>
>>
>>> but when i started spamassassin with debug in the logs i watching this:
>>
>>> Tue Jul 12 18:54:12 2011 [10110] dbg: config: Conf::SQL: executing SQL:
>>> select preference, value from userpref where username = 'spamd' or
>>> username = '@GLOBAL' order by username asc
>>
>>> which is incorrect rule, because i need to replace username with virtual
>>> user and domain. The problem is spamassassin not recognize variables
>>> like
>>> _USERNAME_ or _DOMAIN_.
>>
>>> What is the problem and what i should do to fix is?
>>> Thanks.

-- 
Best regards,
 Duanemailto:du...@duanemail.org

Re: problem with spamassassin and sql

[Kristian Kirilov]

Is it nessacary needed? When i start spamd in debug mode saw the
/usr/share/spamassassin/10_default_prefs.cf is proceeded.

> Wednesday, July 13, 2011, 1:23:51 AM, Kristian wrote:
>
>> Hello im using spamassassin and user prefs in mysql database, i have
>> successfully setting up mysql table and all about correct work of
>> squirelmail plugin and from client site everything is ok. The problem is
>> spamassassin can't handle username & domain variables..
>
>> I mean this:
>
>> /usr/share/spamassassin/10_default_prefs.cf
>
>> user_scores_dsn DBI:mysql:spamassassin:localhost:3306
>> user_scores_sql_passwordspamassassin
>> user_scores_sql_usernamespamassassin
>
> Do you have anything defined in your local.cf file? This is what I
> have:
>
> user_scores_dsn DBI:mysql:spamass:127.0.0.1:3306
> user_scores_sql_usernamespamass
> user_scores_sql_passwordpassword
> user_scores_sql_custom_querySELECT preference, value FROM _TABLE_
> WHERE username = _USERNAME_ OR username = '@GLOBAL' OR username =
> concat('@', _DOMAIN_) ORDER BY username ASC
>
>
>> but when i started spamassassin with debug in the logs i watching this:
>
>> Tue Jul 12 18:54:12 2011 [10110] dbg: config: Conf::SQL: executing SQL:
>> select preference, value from userpref where username = 'spamd' or
>> username = '@GLOBAL' order by username asc
>
>> which is incorrect rule, because i need to replace username with virtual
>> user and domain. The problem is spamassassin not recognize variables
>> like
>> _USERNAME_ or _DOMAIN_.
>
>> What is the problem and what i should do to fix is?
>> Thanks.
>
> --
> Best regards,
>  Duanemailto:du...@duanemail.org
>
>

Re: problem with spamassassin and sql

[Duane Hill]

Wednesday, July 13, 2011, 1:23:51 AM, Kristian wrote:

> Hello im using spamassassin and user prefs in mysql database, i have
> successfully setting up mysql table and all about correct work of
> squirelmail plugin and from client site everything is ok. The problem is
> spamassassin can't handle username & domain variables..

> I mean this:

> /usr/share/spamassassin/10_default_prefs.cf

> user_scores_dsn DBI:mysql:spamassassin:localhost:3306
> user_scores_sql_passwordspamassassin
> user_scores_sql_usernamespamassassin

Do you have anything defined in your local.cf file? This is what I
have:

user_scores_dsn DBI:mysql:spamass:127.0.0.1:3306
user_scores_sql_usernamespamass
user_scores_sql_passwordpassword
user_scores_sql_custom_querySELECT preference, value FROM _TABLE_ WHERE 
username = _USERNAME_ OR username = '@GLOBAL' OR username = concat('@', 
_DOMAIN_) ORDER BY username ASC


> but when i started spamassassin with debug in the logs i watching this:

> Tue Jul 12 18:54:12 2011 [10110] dbg: config: Conf::SQL: executing SQL:
> select preference, value from userpref where username = 'spamd' or
> username = '@GLOBAL' order by username asc

> which is incorrect rule, because i need to replace username with virtual
> user and domain. The problem is spamassassin not recognize variables like
> _USERNAME_ or _DOMAIN_.

> What is the problem and what i should do to fix is?
> Thanks.

-- 
Best regards,
 Duanemailto:du...@duanemail.org

problem with spamassassin and sql

[Kristian Kirilov]

Hello im using spamassassin and user prefs in mysql database, i have
successfully setting up mysql table and all about correct work of
squirelmail plugin and from client site everything is ok. The problem is
spamassassin can't handle username & domain variables..

I mean this:

/usr/share/spamassassin/10_default_prefs.cf

user_scores_dsn DBI:mysql:spamassassin:localhost:3306
user_scores_sql_passwordspamassassin
user_scores_sql_usernamespamassassin

but when i started spamassassin with debug in the logs i watching this:

Tue Jul 12 18:54:12 2011 [10110] dbg: config: Conf::SQL: executing SQL:
select preference, value from userpref where username = 'spamd' or
username = '@GLOBAL' order by username asc

which is incorrect rule, because i need to replace username with virtual
user and domain. The problem is spamassassin not recognize variables like
_USERNAME_ or _DOMAIN_.

What is the problem and what i should do to fix is?
Thanks.

Re: Weird problem with Spamassassin and Net::DNS, using ipv6 and failing - more info

[Luigi Lauro]

BTW: https://rt.cpan.org/Public/Bug/Display.html?id=55278

Re: Weird problem with Spamassassin and Net::DNS, using ipv6 and failing - more info

[Luigi Lauro]

On Fri, Mar 5, 2010 at 16:46, Mark Martinec  wrote:
> Your options are:
> - contact the maintainer of IO::Socket::INET6 and sort out the problem;

I just did and filed a bug report. Let's hope they can treat
127.0.0.1/0.0.0.0 as special cases and NOT query them against local
domain.

No one but insane people would ever give 127.0.0.1.mydomain.com or
0.0.0.0.mydomain.com as valid DNS names...

> - avoid mapping  127.0.0.1 query into an IPv6 address of your
>  nonrecursive DNS server.

I just did... I left the * wildcarding, but added explicitly 0.0.0.0
and 127.0.0.1 on my domain, resolving them only as A to 127.0.0.1.

Ugly, crazy and unneeded, but harmless and it's the only stop gap
solution I can do while waiting for the real fix on the perl library.

> - allow your IPv6 DNS server to answer recursive queries from inside;

If DNS history teaches us something (=BIND security notices), it's
that having a DNS server which is both authoritative and recursive is
wrong and it's asking for security troubles.

I would never ever have an authoritative DNS server as a caching
recursive server. They are very different thing with very different
uses and policies.

I personally use djbdns dnscache as my local recursive cache, and
MaraDNS as my authoritative DNS, compiled as auth only.

> - use option --ipv4 on spamd or deinstall IO::Socket::INET6

I really cannot, i need and want IPV6 ;-)

Thank you Mark, you solved my problem for what it could be done, now
it's up to perl mantainer to fix the bug for real ;-)

-- 
Luigi Lauro

Re: Weird problem with Spamassassin and Net::DNS, using ipv6 and failing - more info

[Mark Martinec]

myself wrote:
> - contact the maintainer of IO::Socket::INET6 and sort out the problem;
> - avoid mapping  127.0.0.1 query into an IPv6 address of your
>   nonrecursive DNS server.
> (preferably both).

Actually there are more options:
- allow your IPv6 DNS server to answer recursive queries from inside;
- use option --ipv4 on spamd or deinstall IO::Socket::INET6

Mark

Re: Weird problem with Spamassassin and Net::DNS, using ipv6 and failing - more info

[Mark Martinec]

Luigi,

> 127.0.0.1.53 > 127.0.0.1.15896: [udp sum ok] 12915 q: ?
> 0.0.0.0.luigilauro.it. 1/0/0 0.0.0.0.luigilauro.it. 
> 2002:4e2e:3890::1 (67)

> 127.0.0.1.53 > 127.0.0.1.24312: [udp sum ok] 12919 q: ?
> 127.0.0.1.luigilauro.it. 1/0/0 127.0.0.1.luigilauro.it. 
> 2002:4e2e:3890::1 (69)


> > Why does your resolver map an  query 0.0.0.0.luigilauro.it to
> > 2002:4e2e:3890::1 ?
> 
> This is perfectly fine, my authoritative DNS is set up for resolving
> any *.luigilauro.it to my A and  public addresses (78.46.56.144
> and 2002:4e2e:3890::1).
> 
> This is what I want and need and have been using with no problems with
> any software for years, not to mention it's a 'standard' widely
> used... ;-)

> I wish I could just make spamassassin do what he should do: query the
> dns on the IPv4 127.0.0.1 for the needed addresses, not try to resolve
> 127.0.0.1 as a name against my domain or other weird, wrong and
> unneeded things :-)

> It's not a MISconfiguration, really :-)
> It's a wanted, needed, standard DNS configuration, to use wildcard in
> domains.
> 
> What is a 'misconfiguration' is spamassassin trying to resolve
> 127.0.0.1 as a domain name instead of treating it for what it is: an
> ipv4 to call for DNS requests :-)

Well, you are asking for trouble with that wildcarding!

The actual bug lies in module IO::Socket::INET6 in sub configure.
Your nameserver entry in /etc/resolv.conf is 127.0.0.1 .
The configure() is trying to figure out which protocol family to use,
so it tries both, the AF_INET6, then AF_INET. Code near line 192 is:

192:  @rres = getaddrinfo(
193:$raddr,$rport,$fam,$type,$proto,AI_PASSIVE
194:  );

Since getaddrinfo is told to try AF_INET6 first but is given 127.0.0.1
as $raddr, it decides it is not an IPv6 address, and tries to resolve it!
Instead of receiving a usual NXDOMAIN, you are supplying it with an
address 2002:4e2e:3890::1, letting all hell break loose from here on.

I don't think there is anything the Net::DNS or SpamAssassin can do
about it. Your options are:
- contact the maintainer of IO::Socket::INET6 and sort out the problem;
- avoid mapping  127.0.0.1 query into an IPv6 address of your
  nonrecursive DNS server.

(preferably both).

  Mark

Re: Weird problem with Spamassassin and Net::DNS, using ipv6 and failing - more info

[Luigi Lauro]

> Forgot option -n, makes it unknown whether 'localhost' is 127.0.0.1 or ::1.

13:57:40.287618 IP (tos 0x0, ttl 64, id 30469, offset 0, flags [none],
proto UDP (17), length 66, bad cksum 0 (->5a4)!)
127.0.0.1.36192 > 127.0.0.1.53: [udp sum ok] 45090+ A?
marvin.luigilauro.it. (38)
13:57:40.287817 IP (tos 0x0, ttl 64, id 30470, offset 0, flags [none],
proto UDP (17), length 66, bad cksum 0 (->5a3)!)
127.0.0.1.53 > 127.0.0.1.36192: [udp sum ok] 45090 q: A?
marvin.luigilauro.it. 0/0/0 (38)
13:57:40.287992 IP (tos 0x0, ttl 64, id 30471, offset 0, flags [none],
proto UDP (17), length 66, bad cksum 0 (->5a2)!)
127.0.0.1.36488 > 127.0.0.1.53: [udp sum ok] 45091+ ?
marvin.luigilauro.it. (38)
13:57:40.288120 IP (tos 0x0, ttl 64, id 30472, offset 0, flags [none],
proto UDP (17), length 94, bad cksum 0 (->585)!)
127.0.0.1.53 > 127.0.0.1.36488: [udp sum ok] 45091 q: ?
marvin.luigilauro.it. 1/0/0 marvin.luigilauro.it. 
2002:4e2e:3890::1 (66)
13:57:40.582706 IP (tos 0x0, ttl 64, id 30473, offset 0, flags [none],
proto UDP (17), length 51, bad cksum 0 (->5af)!)
127.0.0.1.32588 > 127.0.0.1.53: [udp sum ok] 12906+ A? 256.1. (23)
13:57:40.582774 IP (tos 0x0, ttl 64, id 30474, offset 0, flags [none],
proto UDP (17), length 51, bad cksum 0 (->5ae)!)
127.0.0.1.53 > 127.0.0.1.32588: [udp sum ok] 12906 NXDomain* q: A?
256.1. 0/0/0 (23)
13:57:40.582856 IP (tos 0x0, ttl 64, id 30475, offset 0, flags [none],
proto UDP (17), length 65, bad cksum 0 (->59f)!)
127.0.0.1.39760 > 127.0.0.1.53: [udp sum ok] 12907+ A?
256.1.luigilauro.it. (37)
13:57:40.582907 IP (tos 0x0, ttl 64, id 30476, offset 0, flags [none],
proto UDP (17), length 81, bad cksum 0 (->58e)!)
127.0.0.1.53 > 127.0.0.1.39760: [udp sum ok] 12907 q: A?
256.1.luigilauro.it. 1/0/0 256.1.luigilauro.it. A 78.46.56.144 (53)
13:57:40.774019 IP (tos 0x0, ttl 64, id 30490, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->59c)!)
127.0.0.1.55919 > 127.0.0.1.53: [udp sum ok] 12908+ ? 0.0.0.0. (25)
13:57:40.774079 IP (tos 0x0, ttl 64, id 30491, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->59b)!)
127.0.0.1.53 > 127.0.0.1.55919: [udp sum ok] 12908 q: ?
0.0.0.0. 0/0/0 (25)
13:57:40.774131 IP (tos 0x0, ttl 64, id 30492, offset 0, flags [none],
proto UDP (17), length 67, bad cksum 0 (->58c)!)
127.0.0.1.49922 > 127.0.0.1.53: [udp sum ok] 12909+ ?
0.0.0.0.luigilauro.it. (39)
13:57:40.774178 IP (tos 0x0, ttl 64, id 30493, offset 0, flags [none],
proto UDP (17), length 95, bad cksum 0 (->56f)!)
127.0.0.1.53 > 127.0.0.1.49922: [udp sum ok] 12909 q: ?
0.0.0.0.luigilauro.it. 1/0/0 0.0.0.0.luigilauro.it. 
2002:4e2e:3890::1 (67)
13:57:40.774313 IP (tos 0x0, ttl 64, id 30494, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->598)!)
127.0.0.1.22170 > 127.0.0.1.53: [udp sum ok] 12910+ ? 0.0.0.0. (25)
13:57:40.774349 IP (tos 0x0, ttl 64, id 30495, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->597)!)
127.0.0.1.53 > 127.0.0.1.22170: [udp sum ok] 12910 q: ?
0.0.0.0. 0/0/0 (25)
13:57:40.774397 IP (tos 0x0, ttl 64, id 30496, offset 0, flags [none],
proto UDP (17), length 67, bad cksum 0 (->588)!)
127.0.0.1.19121 > 127.0.0.1.53: [udp sum ok] 12911+ ?
0.0.0.0.luigilauro.it. (39)
13:57:40.774439 IP (tos 0x0, ttl 64, id 30497, offset 0, flags [none],
proto UDP (17), length 95, bad cksum 0 (->56b)!)
127.0.0.1.53 > 127.0.0.1.19121: [udp sum ok] 12911 q: ?
0.0.0.0.luigilauro.it. 1/0/0 0.0.0.0.luigilauro.it. 
2002:4e2e:3890::1 (67)
13:57:41.685514 IP (tos 0x0, ttl 64, id 30568, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->54e)!)
127.0.0.1.52521 > 127.0.0.1.53: [udp sum ok] 12912+ ? 0.0.0.0. (25)
13:57:41.685564 IP (tos 0x0, ttl 64, id 30569, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->54d)!)
127.0.0.1.53 > 127.0.0.1.52521: [udp sum ok] 12912 q: ?
0.0.0.0. 0/0/0 (25)
13:57:41.685607 IP (tos 0x0, ttl 64, id 30570, offset 0, flags [none],
proto UDP (17), length 67, bad cksum 0 (->53e)!)
127.0.0.1.61587 > 127.0.0.1.53: [udp sum ok] 12913+ ?
0.0.0.0.luigilauro.it. (39)
13:57:41.685664 IP (tos 0x0, ttl 64, id 30571, offset 0, flags [none],
proto UDP (17), length 95, bad cksum 0 (->521)!)
127.0.0.1.53 > 127.0.0.1.61587: [udp sum ok] 12913 q: ?
0.0.0.0.luigilauro.it. 1/0/0 0.0.0.0.luigilauro.it. 
2002:4e2e:3890::1 (67)
13:57:41.685741 IP (tos 0x0, ttl 64, id 30572, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->54a)!)
127.0.0.1.26792 > 127.0.0.1.53: [udp sum ok] 12914+ ? 0.0.0.0. (25)
13:57:41.685767 IP (tos 0x0, ttl 64, id 30573, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->549)!)
127.0.0.1.53 > 127.0.0.1.26792: [udp sum ok] 12914 q: ?
0.0.0.0. 0/0/0 (25)
13:57:41.685799 IP (tos 0x0, ttl 64, id 30574, offset 0, flags [none],
proto UDP (17), length 67, bad cksum 0 (->53a)!)
127.0.0.1.15896 > 127.0.0.1.5

Re: Weird problem with Spamassassin and Net::DNS, using ipv6 and failing - more info

[Mark Martinec]

Luigi,

> marvin% perl -le 'use IO::Socket::INET6; print IO::Socket::INET6->VERSION'
> 2.57

Good.

> > Try capturing your traffic on a loopback interface for port 53:
> 
> This is the output with -vv for protocol decode with my recursive
> local DNS on 127.0.0.1 and my authorative DNS on listening on
> 2002:4e2e:3890::1 and 78.46.56.144

Forgot option -n, makes it unknown whether 'localhost' is 127.0.0.1 or ::1.

> localhost.domain > localhost.52422: [udp sum ok] 32762 q: ?
> 0.0.0.0.luigilauro.it. 1/0/0 0.0.0.0.luigilauro.it. 
> 2002:4e2e:3890::1 (67)

Why does your resolver map an  query 0.0.0.0.luigilauro.it to 
2002:4e2e:3890::1 ?

> localhost.13073 > localhost.domain: [udp sum ok] 32771+ ?
> 127.0.0.1. (27)

Where does this query for  on 127.0.0.1 come from?

> localhost.domain > localhost.52409: [udp sum ok] 32772 q: ?
> 127.0.0.1.luigilauro.it. 1/0/0 127.0.0.1.luigilauro.it. 
> 2002:4e2e:3890::1 (69)

This one above is probably the most bizarre, and possibly a cause
of all the remaining trouble. Do you have some DNS wildcarding
or other misconfiguration in your DNS server?

Check also your /etc/hosts file.

> > then we can decide whether the fault lies with SpamAssassin and
> > its underlying inet sockets module, or with your DNS server(s),
> > or even with your TCP stack implementation. Btw, what OS is that?
>
> Stack implementation I seriously doubt, this is one of the most solid ones.
> It's a FreeBSD 8.0-STABLE, so serious business ;-)

Good, one thing less to worry about :)

  Mark

Re: Weird problem with Spamassassin and Net::DNS, using ipv6 and failing - more info

[Luigi Lauro]

> Weird indeed. Which version of IO::Socket::INET6 do you have?

marvin% perl -le 'use IO::Socket::INET6; print IO::Socket::INET6->VERSION'
2.57


> Try capturing your traffic on a loopback interface for port 53:

This is the output with -vv for protocol decode with my recursive
local DNS on 127.0.0.1 and my authorative DNS on listening on
2002:4e2e:3890::1 and 78.46.56.144

marvin% cat logtcp.log
08:12:36.235450 IP (tos 0x0, ttl 64, id 40217, offset 0, flags [none],
proto UDP (17), length 51, bad cksum 0 (->df9e)!)
localhost.45390 > localhost.domain: [udp sum ok] 32759+ A? 256.1. (23)
08:12:36.235511 IP (tos 0x0, ttl 64, id 40218, offset 0, flags [none],
proto UDP (17), length 51, bad cksum 0 (->df9d)!)
localhost.domain > localhost.45390: [udp sum ok] 32759 NXDomain*
q: A? 256.1. 0/0/0 (23)
08:12:36.235571 IP (tos 0x0, ttl 64, id 40219, offset 0, flags [none],
proto UDP (17), length 65, bad cksum 0 (->df8e)!)
localhost.55868 > localhost.domain: [udp sum ok] 32760+ A?
256.1.luigilauro.it. (37)
08:12:36.235606 IP (tos 0x0, ttl 64, id 40220, offset 0, flags [none],
proto UDP (17), length 81, bad cksum 0 (->df7d)!)
localhost.domain > localhost.55868: [udp sum ok] 32760 q: A?
256.1.luigilauro.it. 1/0/0 256.1.luigilauro.it. A 78.46.56.144 (53)
08:12:36.370027 IP (tos 0x0, ttl 64, id 40240, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->df85)!)
localhost.20826 > localhost.domain: [udp sum ok] 32761+ ? 0.0.0.0. (25)
08:12:36.370079 IP (tos 0x0, ttl 64, id 40241, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->df84)!)
localhost.domain > localhost.20826: [udp sum ok] 32761 q: ?
0.0.0.0. 0/0/0 (25)
08:12:36.370121 IP (tos 0x0, ttl 64, id 40242, offset 0, flags [none],
proto UDP (17), length 67, bad cksum 0 (->df75)!)
localhost.52422 > localhost.domain: [udp sum ok] 32762+ ?
0.0.0.0.luigilauro.it. (39)
08:12:36.370173 IP (tos 0x0, ttl 64, id 40243, offset 0, flags [none],
proto UDP (17), length 95, bad cksum 0 (->df58)!)
localhost.domain > localhost.52422: [udp sum ok] 32762 q: ?
0.0.0.0.luigilauro.it. 1/0/0 0.0.0.0.luigilauro.it. 
2002:4e2e:3890::1 (67)
08:12:36.370264 IP (tos 0x0, ttl 64, id 40244, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->df81)!)
localhost.24531 > localhost.domain: [udp sum ok] 32763+ ? 0.0.0.0. (25)
08:12:36.370293 IP (tos 0x0, ttl 64, id 40245, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->df80)!)
localhost.domain > localhost.24531: [udp sum ok] 32763 q: ?
0.0.0.0. 0/0/0 (25)
08:12:36.370329 IP (tos 0x0, ttl 64, id 40246, offset 0, flags [none],
proto UDP (17), length 67, bad cksum 0 (->df71)!)
localhost.26186 > localhost.domain: [udp sum ok] 32764+ ?
0.0.0.0.luigilauro.it. (39)
08:12:36.370361 IP (tos 0x0, ttl 64, id 40247, offset 0, flags [none],
proto UDP (17), length 95, bad cksum 0 (->df54)!)
localhost.domain > localhost.26186: [udp sum ok] 32764 q: ?
0.0.0.0.luigilauro.it. 1/0/0 0.0.0.0.luigilauro.it. 
2002:4e2e:3890::1 (67)
08:12:37.290121 IP (tos 0x0, ttl 64, id 40435, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->dec2)!)
localhost.50361 > localhost.domain: [udp sum ok] 32765+ ? 0.0.0.0. (25)
08:12:37.290171 IP (tos 0x0, ttl 64, id 40436, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->dec1)!)
localhost.domain > localhost.50361: [udp sum ok] 32765 q: ?
0.0.0.0. 0/0/0 (25)
08:12:37.290209 IP (tos 0x0, ttl 64, id 40437, offset 0, flags [none],
proto UDP (17), length 67, bad cksum 0 (->deb2)!)
localhost.24761 > localhost.domain: [udp sum ok] 32766+ ?
0.0.0.0.luigilauro.it. (39)
08:12:37.290242 IP (tos 0x0, ttl 64, id 40438, offset 0, flags [none],
proto UDP (17), length 95, bad cksum 0 (->de95)!)
localhost.domain > localhost.24761: [udp sum ok] 32766 q: ?
0.0.0.0.luigilauro.it. 1/0/0 0.0.0.0.luigilauro.it. 
2002:4e2e:3890::1 (67)
08:12:37.290316 IP (tos 0x0, ttl 64, id 40439, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->debe)!)
localhost.57357 > localhost.domain: [udp sum ok] 32767+ ? 0.0.0.0. (25)
08:12:37.290342 IP (tos 0x0, ttl 64, id 40440, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->debd)!)
localhost.domain > localhost.57357: [udp sum ok] 32767 q: ?
0.0.0.0. 0/0/0 (25)
08:12:37.290377 IP (tos 0x0, ttl 64, id 40441, offset 0, flags [none],
proto UDP (17), length 67, bad cksum 0 (->deae)!)
localhost.14897 > localhost.domain: [udp sum ok] 32768+ ?
0.0.0.0.luigilauro.it. (39)
08:12:37.290430 IP (tos 0x0, ttl 64, id 40442, offset 0, flags [none],
proto UDP (17), length 95, bad cksum 0 (->de91)!)
localhost.domain > localhost.14897: [udp sum ok] 32768 q: ?
0.0.0.0.luigilauro.it. 1/0/0 0.0.0.0.luigilauro.it. 
2002:4e2e:3890::1 (67)
08:12:37.291147 IP (tos 0x0, ttl 64, id 40443, offset 0, flags [none],
proto UDP (17), length 53, bad cksum 0 (->deba)!)
localhost.19958 > local

Re: Weird problem with Spamassassin and Net::DNS, using ipv6 and failing - more info

[Mark Martinec]

Luigi,

> Mar  4 21:14:52.177 [4180] dbg: dns: no packet! err=Connection refused
> packet=undef
> Mar  4 21:14:55.196 [4180] dbg: dns: NS lookup of apache.org using
> 127.0.0.1 failed, no results found

Weird indeed. Which version of IO::Socket::INET6 do you have?

$ perl -le 'use IO::Socket::INET6; print IO::Socket::INET6->VERSION'
2.57

Try capturing your traffic on a loopback interface for port 53:

  tcpdump -i lo0 -s 0 -w 0.log 'port 53'

then we can decide whether the fault lies with SpamAssassin and
its underlying inet sockets module, or with your DNS server(s),
or even with your TCP stack implementation. Btw, what OS is that?

  Mark

Weird problem with Spamassassin and Net::DNS, using ipv6 and failing

[Luigi Lauro]

My spamassassin is failing DNS query with a very curious output, as if
he's trying ipv6 despite the fact my resolv.conf give a correct
127.0.0.1 nameserver (im running I'm running a local resolver on
127.0.0.1 and an authorative nameserver on public IPs)

Some info

marvin% uname -a
FreeBSD marvin.luigilauro.it 8.0-STABLE FreeBSD 8.0-STABLE #6 r204039:
Thu Feb 18 13:42:04 CET 2010
r...@marvin.luigilauro.it:/usr/obj/usr/src/sys/MARVIN  amd64

marvin% spamassassin -V
SpamAssassin version 3.3.0
  running on Perl version 5.10.1

marvin% sockstat -4 -l
USER COMMANDPID   FD PROTO  LOCAL ADDRESS FOREIGN ADDRESS
bind zoneserver 8257  5  tcp4   78.46.56.157:53   *:*
bind zoneserver 8256  3  tcp4   78.46.56.144:53   *:*
bind maradns.au 8228  3  udp4   78.46.56.144:53   *:*
bind maradns.au 8228  5  udp4   78.46.56.157:53   *:*
Gdnscache dnscache  1060  3  udp4   127.0.0.1:53  *:*
Gdnscache dnscache  1060  4  tcp4   127.0.0.1:53  *:*

marvin% sockstat -6 -l
USER COMMANDPID   FD PROTO  LOCAL ADDRESS FOREIGN ADDRESS
bind maradns.au 8228  6  udp6   2002:4e2e:3890::1:53  *:*

marvin% cat /etc/resolv.conf
domain luigilauro.it
nameserver 127.0.0.1

marvin% sudo spamassassin -D < /home/omero/sample-spam.txt
Mar  4 20:58:03.718 [2784] dbg: logger: adding facilities: all
Mar  4 20:58:03.718 [2784] dbg: logger: logging level is DBG
Mar  4 20:58:03.718 [2784] dbg: generic: SpamAssassin version 3.3.0
Mar  4 20:58:03.718 [2784] dbg: generic: Perl 5.010001,
PREFIX=/usr/local, DEF_RULES_DIR=/usr/local/share/spamassassin,
LOCAL_RULES_DIR=/usr/local/etc/mail/spamassassin,
LOCAL_STATE_DIR=/var/db/spamassassin
Mar  4 20:58:03.718 [2784] dbg: config: timing enabled
Mar  4 20:58:03.719 [2784] dbg: config: score set 0 chosen.
Mar  4 20:58:03.720 [2784] dbg: util: running in taint mode? yes
Mar  4 20:58:03.720 [2784] dbg: util: taint mode: deleting unsafe
environment variables, resetting PATH
Mar  4 20:58:03.720 [2784] dbg: util: PATH included
'/usr/local/libexec/ccache', keeping
Mar  4 20:58:03.720 [2784] dbg: util: PATH included
'/usr/local/libexec/ccache', keeping
Mar  4 20:58:03.720 [2784] dbg: util: PATH included '/sbin', keeping
Mar  4 20:58:03.720 [2784] dbg: util: PATH included '/bin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/sbin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/bin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/games', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/local/sbin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/local/bin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/home/omero/bin',
which is unusable, dropping: No such file or directory
Mar  4 20:58:03.721 [2784] dbg: util: final PATH set to:
/usr/local/libexec/ccache:/usr/local/libexec/ccache:/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin
Mar  4 20:58:03.725 [2784] dbg: dns: is Net::DNS::Resolver available? yes
Mar  4 20:58:03.725 [2784] dbg: dns: Net::DNS version: 0.66
Mar  4 20:58:03.725 [2784] dbg: config: using
"/usr/local/etc/mail/spamassassin" for site rules pre files
Mar  4 20:58:03.726 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/init.pre
Mar  4 20:58:03.726 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/v310.pre
Mar  4 20:58:03.726 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/v312.pre
Mar  4 20:58:03.726 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/v320.pre
Mar  4 20:58:03.726 [2784] dbg: config: using
"/var/db/spamassassin/3.003000" for sys rules pre files
Mar  4 20:58:03.726 [2784] dbg: config: using
"/var/db/spamassassin/3.003000" for default rules dir
Mar  4 20:58:03.726 [2784] dbg: config: read file
/var/db/spamassassin/3.003000/updates_spamassassin_org.cf
Mar  4 20:58:03.727 [2784] dbg: config: using
"/usr/local/etc/mail/spamassassin" for site rules dir
Mar  4 20:58:03.727 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/FuzzyOcr.cf
Mar  4 20:58:03.727 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/local.cf
Mar  4 20:58:03.727 [2784] dbg: config: using
"/home/omero/.spamassassin" for user state dir
Mar  4 20:58:03.727 [2784] dbg: config: using
"/home/omero/.spamassassin/user_prefs" for user prefs file
Mar  4 20:58:03.727 [2784] dbg: config: read file
/home/omero/.spamassassin/user_prefs
Mar  4 20:58:03.728 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::RelayCountry from @INC
Mar  4 20:58:03.729 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::URIDNSBL from @INC
Mar  4 20:58:03.732 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::Hashcash from @INC
Mar  4 20:58:03.738 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::SPF from @INC
Mar  4 20:58:03.741 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::DCC from @INC
Mar  4 20:58:03.746 [2784] dbg: dcc: network tests on, registering 

Weird problem with Spamassassin and Net::DNS, using ipv6 and failing - more info

[Luigi Lauro]

Since it seems spamassassin was querying wrongly my authoritative DNS
server on ipv6, i tried disabling it for a few minutes, and ran again
spamassassin -D.

More weird output:

Mar  4 21:14:52.174 [4180] dbg: dns: is_dns_available() last checked
1267733692.2 seconds ago; re-checking
Mar  4 21:14:52.175 [4180] dbg: dns: is Net::DNS::Resolver available? yes
Mar  4 21:14:52.175 [4180] dbg: dns: Net::DNS version: 0.66
Mar  4 21:14:52.176 [4180] dbg: dns: name server: 127.0.0.1, LocalAddr: 0.0.0.0
Mar  4 21:14:52.176 [4180] dbg: dns: resolver socket rx buffer size is
42080 bytes
Mar  4 21:14:52.176 [4180] dbg: dns: testing resolver nameservers: 127.0.0.1
Mar  4 21:14:52.176 [4180] dbg: dns: trying (3) apache.org...
Mar  4 21:14:52.176 [4180] dbg: dns: looking up NS for 'apache.org'
Mar  4 21:14:52.177 [4180] dbg: dns: providing a callback for id:
16745/apache.org/NS/IN
Mar  4 21:14:52.177 [4180] dbg: dns: no packet! err=Connection refused
packet=undef
Mar  4 21:14:55.196 [4180] dbg: dns: NS lookup of apache.org using
127.0.0.1 failed, no results found
Mar  4 21:14:55.196 [4180] dbg: dns: trying (2) gmx.net...
Mar  4 21:14:55.196 [4180] dbg: dns: looking up NS for 'gmx.net'
Mar  4 21:14:55.196 [4180] dbg: dns: providing a callback for id:
48738/gmx.net/NS/IN
Mar  4 21:14:55.196 [4180] dbg: dns: no packet! err=Connection refused
packet=undef
Mar  4 21:14:58.214 [4180] dbg: dns: NS lookup of gmx.net using
127.0.0.1 failed, no results found
Mar  4 21:14:58.214 [4180] dbg: dns: trying (1) msn.com...
Mar  4 21:14:58.214 [4180] dbg: dns: looking up NS for 'msn.com'
Mar  4 21:14:58.215 [4180] dbg: dns: providing a callback for id:
51608/msn.com/NS/IN
Mar  4 21:14:58.215 [4180] dbg: dns: no packet! err=Connection refused
packet=undef
Mar  4 21:15:01.234 [4180] dbg: dns: NS lookup of msn.com using
127.0.0.1 failed, no results found
Mar  4 21:15:01.235 [4180] dbg: dns: name server: 127.0.0.1, LocalAddr: 0.0.0.0
Mar  4 21:15:01.235 [4180] dbg: dns: resolver socket rx buffer size is
42080 bytes
Mar  4 21:15:01.235 [4180] dbg: dns: all NS queries failed => DNS
unavailable (set dns_available to override)
Mar  4 21:15:01.235 [4180] dbg: dns: is DNS available? 0

As I already said, dig is working:

marvin% dig -t NS apache.org @127.0.0.1

; <<>> DiG 9.6.1-P3 <<>> -t NS apache.org @127.0.0.1
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58735
;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;apache.org.IN  NS

;; ANSWER SECTION:
apache.org. 1800IN  NS  ns1.us.bitnames.com.
apache.org. 1800IN  NS  ns2.no-ip.com.
apache.org. 1800IN  NS  ns2.surfnet.nl.
apache.org. 1800IN  NS  ns1.eu.bitnames.com.

;; Query time: 522 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Thu Mar  4 21:17:39 2010
;; MSG SIZE  rcvd: 134


-- 
Luigi Lauro

Weird problem with Spamassassin and Net::DNS, using ipv6 and failing

[Luigi Lauro]

My spamassassin is failing DNS query with a very curious output, as if
he's trying ipv6 despite the fact my resolv.conf give a correct
127.0.0.1 nameserver (im running I'm running a local resolver on
127.0.0.1 and an authorative nameserver on public IPs)

Some info

marvin% uname -a
FreeBSD marvin.luigilauro.it 8.0-STABLE FreeBSD 8.0-STABLE #6 r204039:
Thu Feb 18 13:42:04 CET 2010
r...@marvin.luigilauro.it:/usr/obj/usr/src/sys/MARVIN  amd64

marvin% spamassassin -V
SpamAssassin version 3.3.0
 running on Perl version 5.10.1

marvin% sockstat -4 -l
USER     COMMAND    PID   FD PROTO  LOCAL ADDRESS         FOREIGN ADDRESS
bind     zoneserver 8257  5  tcp4   78.46.56.157:53       *:*
bind     zoneserver 8256  3  tcp4   78.46.56.144:53       *:*
bind     maradns.au 8228  3  udp4   78.46.56.144:53       *:*
bind     maradns.au 8228  5  udp4   78.46.56.157:53       *:*
Gdnscache dnscache  1060  3  udp4   127.0.0.1:53          *:*
Gdnscache dnscache  1060  4  tcp4   127.0.0.1:53          *:*

marvin% sockstat -6 -l
USER     COMMAND    PID   FD PROTO  LOCAL ADDRESS         FOREIGN ADDRESS
bind     maradns.au 8228  6  udp6   2002:4e2e:3890::1:53  *:*

marvin% cat /etc/resolv.conf
domain luigilauro.it
nameserver 127.0.0.1

marvin% sudo spamassassin -D < /home/omero/sample-spam.txt
Mar  4 20:58:03.718 [2784] dbg: logger: adding facilities: all
Mar  4 20:58:03.718 [2784] dbg: logger: logging level is DBG
Mar  4 20:58:03.718 [2784] dbg: generic: SpamAssassin version 3.3.0
Mar  4 20:58:03.718 [2784] dbg: generic: Perl 5.010001,
PREFIX=/usr/local, DEF_RULES_DIR=/usr/local/share/spamassassin,
LOCAL_RULES_DIR=/usr/local/etc/mail/spamassassin,
LOCAL_STATE_DIR=/var/db/spamassassin
Mar  4 20:58:03.718 [2784] dbg: config: timing enabled
Mar  4 20:58:03.719 [2784] dbg: config: score set 0 chosen.
Mar  4 20:58:03.720 [2784] dbg: util: running in taint mode? yes
Mar  4 20:58:03.720 [2784] dbg: util: taint mode: deleting unsafe
environment variables, resetting PATH
Mar  4 20:58:03.720 [2784] dbg: util: PATH included
'/usr/local/libexec/ccache', keeping
Mar  4 20:58:03.720 [2784] dbg: util: PATH included
'/usr/local/libexec/ccache', keeping
Mar  4 20:58:03.720 [2784] dbg: util: PATH included '/sbin', keeping
Mar  4 20:58:03.720 [2784] dbg: util: PATH included '/bin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/sbin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/bin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/games', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/local/sbin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/usr/local/bin', keeping
Mar  4 20:58:03.721 [2784] dbg: util: PATH included '/home/omero/bin',
which is unusable, dropping: No such file or directory
Mar  4 20:58:03.721 [2784] dbg: util: final PATH set to:
/usr/local/libexec/ccache:/usr/local/libexec/ccache:/sbin:/bin:/usr/sbin:/usr/bin:/usr/games:/usr/local/sbin:/usr/local/bin
Mar  4 20:58:03.725 [2784] dbg: dns: is Net::DNS::Resolver available? yes
Mar  4 20:58:03.725 [2784] dbg: dns: Net::DNS version: 0.66
Mar  4 20:58:03.725 [2784] dbg: config: using
"/usr/local/etc/mail/spamassassin" for site rules pre files
Mar  4 20:58:03.726 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/init.pre
Mar  4 20:58:03.726 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/v310.pre
Mar  4 20:58:03.726 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/v312.pre
Mar  4 20:58:03.726 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/v320.pre
Mar  4 20:58:03.726 [2784] dbg: config: using
"/var/db/spamassassin/3.003000" for sys rules pre files
Mar  4 20:58:03.726 [2784] dbg: config: using
"/var/db/spamassassin/3.003000" for default rules dir
Mar  4 20:58:03.726 [2784] dbg: config: read file
/var/db/spamassassin/3.003000/updates_spamassassin_org.cf
Mar  4 20:58:03.727 [2784] dbg: config: using
"/usr/local/etc/mail/spamassassin" for site rules dir
Mar  4 20:58:03.727 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/FuzzyOcr.cf
Mar  4 20:58:03.727 [2784] dbg: config: read file
/usr/local/etc/mail/spamassassin/local.cf
Mar  4 20:58:03.727 [2784] dbg: config: using
"/home/omero/.spamassassin" for user state dir
Mar  4 20:58:03.727 [2784] dbg: config: using
"/home/omero/.spamassassin/user_prefs" for user prefs file
Mar  4 20:58:03.727 [2784] dbg: config: read file
/home/omero/.spamassassin/user_prefs
Mar  4 20:58:03.728 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::RelayCountry from @INC
Mar  4 20:58:03.729 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::URIDNSBL from @INC
Mar  4 20:58:03.732 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::Hashcash from @INC
Mar  4 20:58:03.738 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::SPF from @INC
Mar  4 20:58:03.741 [2784] dbg: plugin: loading
Mail::SpamAssassin::Plugin::DCC from @INC
Mar  4 20:58:03.746 [2784] dbg: dcc: network tests on, registering D

Re: URI-DNSBL problem with spamassassin 3.2.5

[Eddy Beliveau]

 Message original 
Sujet : Re: URI-DNSBL problem with spamassassin 3.2.5
De : Dan Schaefer 

Dan Schaefer wrote:
Please, can someone feed http://pastebin.ca/1495707 into 
spamassassin 3.3.0 and see how it works ?

Hi!
pts rule name  description
 -- 
--

0.0 HTML_MESSAGE   BODY: HTML included in message
-4.0 BAYES_00   BODY: Bayesian spam probability is 0 to 1%

Sorry that's 3.2.5

Hi! Dan,

Many thanks for your reply.

I'm also having 3.2.5 but spamassassin freeze when processing this email,
it just freeze during 20 minutes and then give the same rule as you 
mentionned.


I also try to use the plugin HitFreqsRuleTiming (see this thread) 
without any success with 3.2.5


I'm trying to find which rule is the culprit one !

Any hint ?

Thanks,
Eddy

Re: URI-DNSBL problem with spamassassin 3.2.5

[Dan Schaefer]

Dan Schaefer wrote:



Hi!

Please, can someone feed http://pastebin.ca/1495707 into spamassassin 
3.3.0 and see how it works ?


Many thanks for your help
Eddy


pts rule name  description
 -- 
--

0.0 HTML_MESSAGE   BODY: HTML included in message
-4.0 BAYES_00   BODY: Bayesian spam probability is 0 to 1%


Sorry that's 3.2.5

--
Dan Schaefer
Web Developer/Systems Analyst
Performance Administration Corp.

Re: URI-DNSBL problem with spamassassin 3.2.5

[Dan Schaefer]

Hi!

Please, can someone feed http://pastebin.ca/1495707 into spamassassin 
3.3.0 and see how it works ?


Many thanks for your help
Eddy


pts rule name  description
 -- 
--

0.0 HTML_MESSAGE   BODY: HTML included in message
-4.0 BAYES_00   BODY: Bayesian spam probability is 0 to 1%

--
Dan Schaefer
Web Developer/Systems Analyst
Performance Administration Corp.

Re: URI-DNSBL problem with spamassassin 3.2.5

[Eddy Beliveau]

 Message original 
Sujet : Re: URI-DNSBL problem with spamassassin 3.2.5
Date : 2009-07-14 11:07
but Ido not find any timing.log file on my current directory or 
anywhere on my system!!

Did I missed something ?
I doubt all the necessary hooks are in place for that plugin to work 
in 3.2.5, you'd need to run 3.3 to make use of that plugin.

Michael

On Jul 9, 2009, at 1:40 PM, Eddy Beliveau wrote:
Hi! Michael,

Many thanks for the hint.

The current devel version is 3.3.0-alpha1 (dated 2 weeks ago)

Do you know when the production release will be available ?

I do not want to put non-production version on my academic server.

Maybe I can send you the culprit email if you have 3.3 installed and 
see how it reacts on your location !


Is there a web page where I can inject the email to have it analysed 
by some SA version ?
I tried my 250KB message with http://flashmarketing.com/spam-check.htm 
but it said that my message is too big


Thanks,
Eddy


Hi!

Please, can someone feed http://pastebin.ca/1495707 into spamassassin 
3.3.0 and see how it works ?


Many thanks for your help
Eddy

--
Eddy Beliveau
HEC Montreal
Montreal (Quebec)
Canada

Re: URI-DNSBL problem with spamassassin 3.2.5

[Eddy Beliveau]

 Message original 
Sujet : Re: URI-DNSBL problem with spamassassin 3.2.5
De : Michael Parker 
Pour : Eddy Beliveau 
Copie à : users@spamassassin.apache.org, Mark Martinec 


Date : 2009-07-09 19:37


On Jul 9, 2009, at 1:40 PM, Eddy Beliveau wrote:


but Ido not find any timing.log file on my current directory or 
anywhere on my system!!


Did I missed something ?



I doubt all the necessary hooks are in place for that plugin to work 
in 3.2.5, you'd need to run 3.3 to make use of that plugin.


Michael



Hi! Michael,

Many thanks for the hint.

The current devel version is 3.3.0-alpha1 (dated 2 weeks ago)

Do you know when the production release will be available ?

I do not want to put non-production version on my academic server.

Maybe I can send you the culprit email if you have 3.3 installed and see 
how it reacts on your location !


Is there a web page where I can inject the email to have it analysed by 
some SA version ?
I tried my 250KB message with http://flashmarketing.com/spam-check.htm 
but it said that my message is too big


Thanks,
Eddy

Re: URI-DNSBL problem with spamassassin 3.2.5

[Michael Parker]

On Jul 9, 2009, at 1:40 PM, Eddy Beliveau wrote:


but Ido not find any timing.log file on my current directory or  
anywhere on my system!!


Did I missed something ?



I doubt all the necessary hooks are in place for that plugin to work  
in 3.2.5, you'd need to run 3.3 to make use of that plugin.


Michael

Re: URI-DNSBL problem with spamassassin 3.2.5

[Eddy Beliveau]

Is there some way to find the culprit rule ?
other that removing all rules and adding them one at the time.



Perhaps the best timing tool for rules is the HitFreqsRuleTiming
plugin, which can be found in masses/plugins/HitFreqsRuleTiming.pm
in the distribution. Should work with 3.2.5 and with 3.3.0.
It is quite primitive in that it does not have any configurables,
but just dumps its results to a file 'timing.log' in the current
working directory (make sure it is writable for the UID under
which SA is running, no error is issued if it can not write there).

To activate it, copy it to some place, then add a loadplugin
command to one of your .pre files, such as a local.pre, providing
the path to the .pm file, e.g.:

loadplugin HitFreqsRuleTiming /etc/mail/spamassassin/HitFreqsRuleTiming.pm

Then run a command line spamassassin giving it a sample message, e.g.:

$ spamassassin -t   

Hi! Mark,

Many thanks for your reply.

I'm using SpamAssassin version 3.2.5 running on Perl version 5.8.5

I did extract HitFreqsRuleTiming.pm from spamassassin_20090708151200.tar.gz,
move it to /etc/mail/spamassassin
then create the /etc/mail/spamassassin/local.pre file with the following 
line

loadplugin HitFreqsRuleTiming /etc/mail/spamassassin/HitFreqsRuleTiming.pm

Now, on /tmp directory,  I execute "spamassassin --lint -t -D" which 
correctly said:

...cut...
[24936] dbg: plugin: loading HitFreqsRuleTiming from 
/etc/mail/spamassassin/HitFreqsRuleTiming.pm

...cut...
[27955] dbg: plugin: HitFreqsRuleTiming=HASH(0x114a8588) implements 
'start_rules', priority 0

[27955] dbg: rules: compiled one_line_body tests
[27955] dbg: plugin: 
Mail::SpamAssassin::Plugin::Rule2XSBody=HASH(0x1197b19c) implements 
'run_body_fast_scan', priority 0

[27955] dbg: rules: running head tests; score so far=0
[27955] dbg: rules: compiled head tests
[27955] dbg: plugin: HitFreqsRuleTiming=HASH(0x114a8588) implements 
'ran_rule', priority 0

...cut...
[27955] dbg: check: is spam? score=4.205 required=5
[27955] dbg: check: 
tests=MISSING_DATE,MISSING_HEADERS,MISSING_SUBJECT,NO_RECEIVED,NO_RELAYS
[27955] dbg: check: 
subtests=__BOTNET_NOTRUST,__HAS_MSGID,__HAVE_BOUNCE_RELAYS,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__SANE_MSGID,__SARE_WHITELIST_FLAG,__TVD_BODY,__UNUSABLE_MSGID


but Ido not find any timing.log file on my current directory or anywhere 
on my system!!


Did I missed something ?

Thanks,
Eddy

Re: URI-DNSBL problem with spamassassin 3.2.5

[Mark Martinec]

Eddy,

> So I spin it again with "-L -D"

> 09:24:10.109 16.022 0.036 [20476] dbg: rules: ran rawbody rule
> __SARE_HAS_FG_COLOR ==> got hit: ""color:"

> 09:45:09.826 1275.740 1259.717 [20476] dbg: rules: ran eval rule
> __SARE_HTML_HAS_BR ==> got hit (1)


> So, after the 20 minutes delay, it says:
> 09:45:09.826 1275.740 1259.717 [20476] dbg: rules: ran eval rule
> __SARE_HTML_HAS_BR ==> got hit (1)
>
> Can I assume that the 20 minutes delay is caused by the
> __SARE_HTML_HAS_BR rule ?

More likely some other rule inbetween the __SARE_HAS_FG_COLOR
and the __SARE_HTML_HAS_BR, which didn't produce any hits and
was therefore not logged.

> Is there some way to find the culprit rule ?
> other that removing all rules and adding them one at the time.

Perhaps the best timing tool for rules is the HitFreqsRuleTiming
plugin, which can be found in masses/plugins/HitFreqsRuleTiming.pm
in the distribution. Should work with 3.2.5 and with 3.3.0.
It is quite primitive in that it does not have any configurables,
but just dumps its results to a file 'timing.log' in the current
working directory (make sure it is writable for the UID under
which SA is running, no error is issued if it can not write there).

To activate it, copy it to some place, then add a loadplugin
command to one of your .pre files, such as a local.pre, providing
the path to the .pm file, e.g.:

loadplugin HitFreqsRuleTiming /etc/mail/spamassassin/HitFreqsRuleTiming.pm

Then run a command line spamassassin giving it a sample message, e.g.:

$ spamassassin -t 

Re: URI-DNSBL problem with spamassassin 3.2.5

[Eddy Beliveau]

 Message original 
Sujet : Re: URI-DNSBL problem with spamassassin 3.2.5
De : John Hardin 
Pour : Eddy Beliveau 
Copie à : SpamAssassin Users List 
Date : 2009-07-07 16:49

On Tue, 7 Jul 2009, Mark Martinec wrote:


It is not the DNS query that is a problem here.


Eddy:

What happens when you run the test using -L (no network tests)? Does 
it still take as long?



Hi!

Mark & John, many thanks for your replies

So I spin it again with "-L -D"

...cut...
09:24:09.030 14.943 0.217 [20476] dbg: rules: running uri tests; score 
so far=0

09:24:09.058 14.971 0.028 [20476] dbg: rules: compiled uri tests
09:24:09.078 14.991 0.020 [20476] dbg: rules: ran uri rule 
__DOS_HAS_ANY_URI ==> got hit: "h"
09:24:09.099 15.012 0.020 [20476] dbg: rules: ran uri rule 
__LOCAL_PP_NONPPURL ==> got hit: "http://www.davekeller.com";
09:24:09.220 15.133 0.121 [20476] dbg: pdfinfo: Identified 0 possible 
mime parts that need checked for PDF content
09:24:09.220 15.133 0.000 [20476] dbg: pdfinfo: set_tag called for 
PDFCOUNT 0
09:24:09.220 15.133 0.000 [20476] dbg: pdfinfo: set_tag called for 
PDFIMGCOUNT 0

09:24:09.378 15.291 0.158 [20476] dbg: eval: stock info total: 0
09:24:09.379 15.293 0.002 [20476] dbg: rules: ran eval rule 
__SARE_BODY_BLANKS_5_100 ==> got hit (1)
09:24:09.380 15.294 0.001 [20476] dbg: rules: ran eval rule 
__TAG_EXISTS_BODY ==> got hit (1)
09:24:09.431 15.344 0.051 [20476] dbg: eval: text words: 2280, html 
words: 2257
09:24:09.438 15.351 0.007 [20476] dbg: eval: madiff: left: 22, orig: 
2257, max-difference: 0.97%
09:24:09.446 15.359 0.008 [20476] dbg: rules: ran eval rule __MIME_HTML 
==> got hit (1)
09:24:09.529 15.443 0.084 [20476] dbg: rules: ran eval rule HTML_MESSAGE 
==> got hit (1)
09:24:09.532 15.445 0.002 [20476] dbg: rules: ran eval rule 
__TAG_EXISTS_HTML ==> got hit (1)
09:24:09.546 15.460 0.015 [20476] dbg: rules: ran eval rule 
__TVD_MIME_ATT_TP ==> got hit (1)
09:24:09.561 15.474 0.014 [20476] dbg: rules: ran eval rule 
__HAVE_BOUNCE_RELAYS ==> got hit (1)
09:24:09.563 15.476 0.002 [20476] dbg: rules: running rawbody tests; 
score so far=0.001

09:24:09.602 15.515 0.039 [20476] dbg: rules: compiled rawbody tests
09:24:09.778 15.691 0.175 [20476] dbg: rules: ran rawbody rule 
__SARE_HTML_SINGLET2 ==> got hit: ">o<"
09:24:09.817 15.730 0.040 [20476] dbg: rules: ran rawbody rule 
__SARE_BLACK_FG_COLOR ==> got hit: ""color: black"
09:24:10.073 15.986 0.256 [20476] dbg: rules: ran rawbody rule 
__TVD_BODY ==> got hit: "vers"
09:24:10.109 16.022 0.036 [20476] dbg: rules: ran rawbody rule 
__SARE_HAS_FG_COLOR ==> got hit: ""color:"
09:45:09.826 1275.740 1259.717 [20476] dbg: rules: ran eval rule 
__SARE_HTML_HAS_BR ==> got hit (1)
09:45:09.827 1275.741 0.001 [20476] dbg: rules: ran eval rule 
__SARE_HTML_HAS_DIV ==> got hit (1)
09:45:09.828 1275.741 0.000 [20476] dbg: rules: ran eval rule __MIME_QP 
==> got hit (2)
09:45:09.828 1275.741 0.000 [20476] dbg: rules: ran eval rule 
__SARE_HTML_HAS_P ==> got hit (1)
09:45:09.829 1275.742 0.000 [20476] dbg: rules: ran eval rule 
__SARE_HTML_HAS_A ==> got hit (1)
09:45:09.829 1275.742 0.001 [20476] dbg: rules: running full tests; 
score so far=0.001

09:45:09.838 1275.751 0.009 [20476] dbg: rules: compiled full tests
09:45:10.002 1275.915 0.164 [20476] dbg: rules: running meta tests; 
score so far=0.001

09:45:10.003 1275.916 0.001 [20476] dbg: rules: compiled meta tests
09:45:10.003 1275.916 0.000 [20476] dbg: check: running tests for 
priority: 500

09:45:10.003 1275.916 0.000 [20476] dbg: dns: harvest_dnsbl_queries
...cut...

So, after the 20 minutes delay, it says:
09:45:09.826 1275.740 1259.717 [20476] dbg: rules: ran eval rule 
__SARE_HTML_HAS_BR ==> got hit (1)


Can I assume that the 20 minutes delay is caused by the 
__SARE_HTML_HAS_BR rule ?


If so, it is used by one of those 2 rules:
/var/lib/spamassassin/3.002005/70_sare_html0_cf_sare_sa-update_dostech_net/200606040500.cf:
rawbody   __SARE_HTML_HAS_BR   eval:html_tag_exists('br')
/var/lib/spamassassin/3.002005/70_sare_html1_cf_sare_sa-update_dostech_net/200606040500.cf:
rawbody   __SARE_HTML_HAS_BR   eval:html_tag_exists('br')

I then just add the following line to my local.cf file
score   __SARE_HTML_HAS_BR   0

and re-test it with "-L -D" but I'm having the same result !!

Is there some way to find the culprit rule ?
other that removing all rules and adding them one at the time.

For testing purposes, can I reduce the 20 minutes delay variable to 1 
minute ?


Any help will be appreciated.

Many thanks,
Eddy







--
Eddy Beliveau
HEC Montreal
Montreal (Quebec)
Canada

Re: URI-DNSBL problem with spamassassin 3.2.5

[John Hardin]

On Tue, 7 Jul 2009, Mark Martinec wrote:


It is not the DNS query that is a problem here.


Eddy:

What happens when you run the test using -L (no network tests)? Does it 
still take as long?


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  End users want eye candy and the "ooo's and hhh's" experience
  when reading mail. To them email isn't a tool, but an entertainment
  form. -- Steve Lake
---
 Today: Robert Heinlein's 102nd birthday

Re: URI-DNSBL problem with spamassassin 3.2.5

[Mark Martinec]

Eddy,

> I'm using spamassassin 3.2.5 on my academic RHEL server and it works
> well  :-)
> I'm also using Net::DNS version: 0.65, amavisd-new 2.6.4, postfix 2.5.6
>
> I'm receiving an email which take too much time to process.
> I have to remove it from my postfix's mail queue
>
> here is part of the spamassassin debug run:
> ...cut...
> 13:31:25.577 13.621 0.002 [28208] dbg: rules: running rawbody tests;
> score so far=0.001
> 13:31:25.617 13.661 0.039 [28208] dbg: rules: compiled rawbody tests
> 13:31:25.794 13.839 0.178 [28208] dbg: rules: ran rawbody rule
> __SARE_HTML_SINGLET2 ==> got hit: ">o<"
> 13:31:25.836 13.880 0.042 [28208] dbg: rules: ran rawbody rule
> __SARE_BLACK_FG_COLOR ==> got hit: ""color: black"
> 13:31:26.093 14.137 0.257 [28208] dbg: rules: ran rawbody rule
> __TVD_BODY ==> got hit: "vers"
> 13:31:26.129 14.173 0.036 [28208] dbg: rules: ran rawbody rule
> __SARE_HAS_FG_COLOR ==> got hit: ""color:"
> 13:51:46.568 1234.612 *1220.439* [28208] dbg: async: select found 17
> responses ready (t.o.=0.0)
> 13:51:46.568 1234.612 0.000 [28208] dbg: async: completed in 1221.532 s:
> URI-A, A:dns3.nettica.com.

> The async step takes 1220 seconds to complete !!
>
> It happend everytime I'm processing manually that specific message
[...]
> I do not understand how it can take 1220 seconds to complete when it
> said timeout=15s

It is not the DNS query that is a problem here. Most likely some regexp
rules are taking that long. Async DNS queries are fired off at the beginning,
then most other rules are evaluated, giving DNS resolver opportunity
to do its job during that time. Only after most rules have been evaluated
are the DNS responses collected. There is no point in enforcing a timeout
on DNS responses when we have to wait for other computations anyway.

  Mark

URI-DNSBL problem with spamassassin 3.2.5

[Eddy Beliveau]

Hi! Netfriends,

I'm using spamassassin 3.2.5 on my academic RHEL server and it works 
well  :-)


I'm also using Net::DNS version: 0.65, amavisd-new 2.6.4, postfix 2.5.6

I'm receiving an email which take too much time to process.

I have to remove it from my postfix's mail queue

here is part of the spamassassin debug run:
...cut...
13:31:25.577 13.621 0.002 [28208] dbg: rules: running rawbody tests; 
score so far=0.001

13:31:25.617 13.661 0.039 [28208] dbg: rules: compiled rawbody tests
13:31:25.794 13.839 0.178 [28208] dbg: rules: ran rawbody rule 
__SARE_HTML_SINGLET2 ==> got hit: ">o<"
13:31:25.836 13.880 0.042 [28208] dbg: rules: ran rawbody rule 
__SARE_BLACK_FG_COLOR ==> got hit: ""color: black"
13:31:26.093 14.137 0.257 [28208] dbg: rules: ran rawbody rule 
__TVD_BODY ==> got hit: "vers"
13:31:26.129 14.173 0.036 [28208] dbg: rules: ran rawbody rule 
__SARE_HAS_FG_COLOR ==> got hit: ""color:"
13:51:46.568 1234.612 *1220.439* [28208] dbg: async: select found 17 
responses ready (t.o.=0.0)
13:51:46.568 1234.612 0.000 [28208] dbg: async: completed in 1221.532 s: 
URI-A, A:dns3.nettica.com.
13:51:46.569 1234.614 0.001 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:13.136.94.64 (timeout 15.0s, min 3.0s)
13:51:46.570 1234.614 0.001 [28208] dbg: async: completed in 1221.538 s: 
URI-A, A:ns2.planetmind.net.
13:51:46.571 1234.615 0.001 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:122.236.168.205 (timeout 15.0s, min 3.0s)
13:51:46.572 1234.616 0.001 [28208] dbg: async: completed in 1221.538 s: 
URI-A, A:ns2.accountsupport.com.
13:51:46.573 1234.617 0.002 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:105.254.254.65 (timeout 15.0s, min 3.0s)
13:51:46.574 1234.618 0.000 [28208] dbg: async: completed in 1221.539 s: 
URI-A, A:ns1.planetmind.net.
13:51:46.575 1234.619 0.002 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:69.236.168.205 (timeout 15.0s, min 3.0s)
13:51:46.576 1234.620 0.000 [28208] dbg: async: completed in 1221.532 s: 
URI-A, A:dns2.nettica.com.
13:51:46.577 1234.621 0.001 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:34.45.237.64 (timeout 15.0s, min 3.0s)
13:51:46.577 1234.621 0.000 [28208] dbg: async: completed in 1221.524 s: 
URI-DNSBL, DNSBL:sbl.spamhaus.org.:130.240.6.64
13:51:46.578 1234.622 0.000 [28208] dbg: async: completed in 1221.556 s: 
URI-DNSBL, DNSBL:sbl.spamhaus.org.:178.161.72.69
13:51:46.578 1234.622 0.000 [28208] dbg: async: completed in 1221.526 s: 
URI-DNSBL, DNSBL:sbl.spamhaus.org.:1.5.84.66
13:51:46.578 1234.622 0.000 [28208] dbg: async: completed in 1221.530 s: 
URI-A, A:dns1.nettica.com.
13:51:46.579 1234.624 0.001 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:11.136.94.64 (timeout 15.0s, min 3.0s)
13:51:46.580 1234.624 0.000 [28208] dbg: async: completed in 1221.554 s: 
URI-DNSBL, DNSBL:sbl.spamhaus.org.:197.68.20.69
13:51:46.580 1234.624 0.000 [28208] dbg: async: completed in 1221.553 s: 
URI-DNSBL, DNSBL:sbl.spamhaus.org.:242.210.124.74
13:51:46.580 1234.624 0.000 [28208] dbg: async: completed in 1221.528 s: 
URI-A, A:ns2.musearts.com.
13:51:46.582 1234.626 0.001 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:231.42.34.72 (timeout 15.0s, min 3.0s)
13:51:46.582 1234.626 0.000 [28208] dbg: async: completed in 1221.527 s: 
URI-A, A:ns3.musearts.com.
13:51:46.583 1234.627 0.001 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:232.42.34.72 (timeout 15.0s, min 3.0s)
13:51:46.584 1234.628 0.000 [28208] dbg: async: completed in 1221.530 s: 
URI-A, A:dns5.nettica.com.
13:51:46.585 1234.629 0.001 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:15.247.100.212 (timeout 15.0s, min 3.0s)
13:51:46.585 1234.629 0.000 [28208] dbg: async: completed in 1221.531 s: 
URI-A, A:dns4.nettica.com.
13:51:46.586 1234.630 0.001 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:223.170.41.69 (timeout 15.0s, min 3.0s)
13:51:46.587 1234.631 0.000 [28208] dbg: async: completed in 1221.542 s: 
URI-DNSBL, DNSBL:sbl.spamhaus.org.:112.7.117.66
13:51:46.587 1234.631 0.000 [28208] dbg: async: completed in 1221.539 s: 
URI-A, A:ns1.accountsupport.com.
13:51:46.588 1234.632 0.001 [28208] dbg: async: starting: URI-DNSBL, 
DNSBL:sbl.spamhaus.org.:104.254.254.65 (timeout 15.0s, min 3.0s)
13:51:46.589 1234.633 0.001 [28208] dbg: async: queries completed: 17, 
started: 11
13:51:46.589 1234.633 0.000 [28208] dbg: async: queries active: 
URI-DNSBL=11 at Tue Jul 7 13:51:46 2009

13:51:46.589 1234.633 0.000 [28208] dbg: dns: harvested completed queries

The async step takes 1220 seconds to complete !!

It happend everytime I'm processing manually that specific message

I tried to add the following lines in my /etc/mail/spamassassin/local.cf 
file, with no success

uridnsbl_skip_domain nettica.com
uridnsbl_skip_domain sbl.spamhaus.org

I do not understand how it can take 1220 seconds to complete when it 
said timeout

Re: Problem with spamassassin not finding razor-agent.conf

[mouss]

Johan Borch a écrit :
> Hi all,
> 
> I have a problem with getting spamassassin to find the razor-agent.conf
> 
> When running "spamassassin -D < testmail.txt" it says:
> 
> .
> .
> .
> [22640] warn: razor2: razor2 check failed: No such file or directory razor2:
> Can't read conf file: = /etc/razor/razor-agent.conf at
> /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/Razor2.pm line 326.
> .
> .
> .
> 
> The config exists and I have been running -create, register & discover, the
> permissions is correct, I'm running the latest razor2-version. What could 
> cause
> this? The system is running centos 5.2.
> 

either it's a permission problem. do not forget to check the permissions
of all the parent directories.

# ls -l / |grep /etc
# ls -l /etc |grep razor
# ls -l /etc/razor/razor-agent.conf

or it's a SELINUX issue (check /var/log/messages).

Re: Problem with spamassassin not finding razor-agent.conf

[Theo Van Dinter]

On Thu, Dec 11, 2008 at 05:33:36PM +, Johan Borch wrote:
> [22640] warn: razor2: razor2 check failed: No such file or directory razor2:
> Can't read conf file: = /etc/razor/razor-agent.conf at
> /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/Razor2.pm line 326.

Do you have a "razor_config" config line somewhere, perhaps that looks like:

razor_config = /etc/razor/razor-agent.conf

?

-- 
Randomly Selected Tagline:
"I won't be made useless, or be idle with despair." - Jewel, "Hands"


pgpy64WsDGqqu.pgp
Description: PGP signature

Problem with spamassassin not finding razor-agent.conf

[Johan Borch]

Hi all,

I have a problem with getting spamassassin to find the razor-agent.conf

When running "spamassassin -D < testmail.txt" it says:

.
.
.
[22640] warn: razor2: razor2 check failed: No such file or directory razor2:
Can't read conf file: = /etc/razor/razor-agent.conf at
/usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/Razor2.pm line 326.
.
.
.

The config exists and I have been running -create, register & discover, the
permissions is correct, I'm running the latest razor2-version. What could cause
this? The system is running centos 5.2.

Best regards
Johan Borch

RE: I have a problem with spamassassin

[Masoumeh Izadi]

It is comment.
Can anyone help me?

On Mon, 12 Mar 2007 14:43:22 +0100 (CET), night duke wrote
> Try to comment # lock line at local.cf
> Restart spamassassin
> 
> Masoumeh Izadi <[EMAIL PROTECTED]> escribió: 
> Hi;
> 
> I installed spamassassin 3.1.8 on freebsd 6.2 with qmail and qmail-scanner.
> my machine is gateway for passing email to destination machine on my domains.
> but I found following error in maillog:
> 
> spamd[27473]: spamd: handle_user unable to find user: [EMAIL PROTECTED]' 
> Mar 12 02:17:57 spark spamd[27473]: spamd: still running as root: user not
> specified with -u, not found, or se
> t to root, falling back to nobody at /usr/local/bin/spamd line 1147, 
> line 4
> spamd[31701]: locker: safe_lock: cannot create tmp lockfile
> /home/qscand/.spamassassin/auto-whitelist.lock.spark.iranet.ir.31701 for
> /home/qscand/.spamassassin/auto-whitelist.lock: Permission denied
> 
> Mar 1200:01:35 spark spamd[31701]: auto-whitelist: open of auto-whitelist
> file failed: locker: safe_lock: cannot create tmp lockfile
> /home/qscand/.spamassassin/autowhitelist.lock.spark.iranet.ir.31701 for
> /home/qscand/
> .spamassassin/auto-whitelist.lock: Permission denied
> 
> Please help me :)
> Masoumeh Izadi
> 
> www.iranet.ir
> 
> -- 
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
> 
> 
> 
> 
---

> LLama Gratis a cualquier PC del Mundo.
> Llamadas a fijos y móviles desde 1 céntimo por minuto.
> MailScanner has detected a possible fraud attempt from "us.rd.yahoo.com" 
> claiming to be http://es.voice.yahoo.com
> -- 
> This message has been scanned for viruses and
> dangerous content byMailScanner, and is
> believed to be clean.

Masoumeh Izadi

www.iranet.ir

 

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

I have a problem with spamassassin

[Masoumeh Izadi]

Hi;

I installed spamassassin 3.1.8 on freebsd 6.2 with qmail and qmail-scanner.
my machine is gateway for passing email to destination machine on my domains.
but I found following error in maillog:

spamd[27473]: spamd: handle_user unable to find user: [EMAIL PROTECTED]' 
Mar 12 02:17:57 spark spamd[27473]: spamd: still running as root: user not
specified with -u, not found, or se
t to root, falling back to nobody at /usr/local/bin/spamd line 1147, 
line 4
spamd[31701]: locker: safe_lock: cannot create tmp lockfile
/home/qscand/.spamassassin/auto-whitelist.lock.spark.iranet.ir.31701 for
/home/qscand/.spamassassin/auto-whitelist.lock: Permission denied
 
Mar 12 00:01:35 spark spamd[31701]: auto-whitelist: open of auto-whitelist
file failed: locker: safe_lock: cannot create tmp lockfile
/home/qscand/.spamassassin/autowhitelist.lock.spark.iranet.ir.31701 for
/home/qscand/
.spamassassin/auto-whitelist.lock: Permission denied

Please help me :)
Masoumeh Izadi

www.iranet.ir


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

Re: problem with spamassassin

[Daryl C. W. O'Shea]

Matt Kettler wrote:

[EMAIL PROTECTED] wrote:

Thanks.
I've found a possible answer.

Spamassassin works with only 1 child.
Now I have add another child, 2.

And now all my mails have the header.

Is possible that spamassassin couldn't process all mails because has
only one child... so I have some mails with no header and much spam???

I believe that's true.. in spamd the first instance only serves to
replicate itself and manage the others. If that instance gets counted by
the code as a "child" then you wouldn't have any working instances. In
that case you always want at least spamd -m 2 and  -m 1 might break things.


-m num or --max-children=num only counts the children, so -m1 is fine if 
you only need one child.


Daryl

Re: problem with spamassassin

[Matt Kettler]

[EMAIL PROTECTED] wrote:
> Thanks.
> I've found a possible answer.
>
> Spamassassin works with only 1 child.
> Now I have add another child, 2.
>
> And now all my mails have the header.
>
> Is possible that spamassassin couldn't process all mails because has
> only one child... so I have some mails with no header and much spam???
I believe that's true.. in spamd the first instance only serves to
replicate itself and manage the others. If that instance gets counted by
the code as a "child" then you wouldn't have any working instances. In
that case you always want at least spamd -m 2 and  -m 1 might break things.

Re: problem with spamassassin

[François Rousseau]

Yes, it is possible.  If you use spamc/spamd:A simple way to see this is to check the log file of spamassassin (spamd).In my case, I have redirect the syslog channel to a separate file.  Make a script with those line or run in manually... I have test it for SA 
3.1.4 thru 3.1.7 but it will probably work whit all the 3.1.x and maybe 3.0.x =echo SpamAssassin Checkupecho ***Number of mail: `grep "second" /var/log/spamassassin -c`
echo ***Number of SPAM: `grep "identified" /var/log/spamassassin -c`echo ***Max child reach: `grep "raising" /var/log/spamassassin -c`=If "Max child reach:" is greater then 0 , consider raising the number of possible child.  (--max-children=num)
Sorry for my english too.Francois Rousseau2006/10/30, [EMAIL PROTECTED] <[EMAIL PROTECTED]
>:Thanks.I've found a possible answer.Spamassassin works with only 1 child.
Now I have add another child, 2.And now all my mails have the header.Is possible that spamassassin couldn't process all mails because hasonly one child... so I have some mails with no header and much spam???
sorry for my englishfraskaIl giorno 30/ott/06, alle ore 12:11, Loren Wilton ha scritto:> SA always adds information the header I believe.  Although what you> get depends on the "report_safe" option value in 
local.cf.>> Many of the mail tools that use SA will process the message through> SA and then discard the result if it isn't marked as spam.  So you> don't see SA's markup in these tools unless SA said it was spam.
> Sometimes there is an option to override this and always return the> result SA generated.>> Here are some typical headers from a mail message that is NOT spam:>> X-Spam-Checker-Version: SpamAssassin 
3.1.4 (2006-07-25) on xxx.com> X-Spam-Level: **> X-Spam-Status: No, score=2.3 required=4.6> tests=BAYES_50,DK_POLICY_SIGNSOME,> FH_RELAY_NODNS,HELO_MISMATCH_COM,HTML_FONT_BIG,HTML_MESSAGE
> autolearn=disabled version=3.1.4>>>Loren>

Re: problem with spamassassin

[[EMAIL PROTECTED]]

Thanks.
I've found a possible answer.

Spamassassin works with only 1 child.
Now I have add another child, 2.

And now all my mails have the header.

Is possible that spamassassin couldn't process all mails because has  
only one child... so I have some mails with no header and much spam???


sorry for my english

fraska

Il giorno 30/ott/06, alle ore 12:11, Loren Wilton ha scritto:

SA always adds information the header I believe.  Although what you  
get depends on the "report_safe" option value in local.cf.


Many of the mail tools that use SA will process the message through  
SA and then discard the result if it isn't marked as spam.  So you  
don't see SA's markup in these tools unless SA said it was spam.   
Sometimes there is an option to override this and always return the  
result SA generated.


Here are some typical headers from a mail message that is NOT spam:

X-Spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-25) on xxx.com
X-Spam-Level: **
X-Spam-Status: No, score=2.3 required=4.6  
tests=BAYES_50,DK_POLICY_SIGNSOME,

FH_RELAY_NODNS,HELO_MISMATCH_COM,HTML_FONT_BIG,HTML_MESSAGE
autolearn=disabled version=3.1.4


   Loren

Re: problem with spamassassin

[Loren Wilton]

SA always adds information the header I believe.  Although what you get 
depends on the "report_safe" option value in local.cf.


Many of the mail tools that use SA will process the message through SA and 
then discard the result if it isn't marked as spam.  So you don't see SA's 
markup in these tools unless SA said it was spam.  Sometimes there is an 
option to override this and always return the result SA generated.


Here are some typical headers from a mail message that is NOT spam:

X-Spam-Checker-Version: SpamAssassin 3.1.4 (2006-07-25) on xxx.com
X-Spam-Level: **
X-Spam-Status: No, score=2.3 required=4.6 tests=BAYES_50,DK_POLICY_SIGNSOME,
FH_RELAY_NODNS,HELO_MISMATCH_COM,HTML_FONT_BIG,HTML_MESSAGE
autolearn=disabled version=3.1.4


   Loren 

problem with spamassassin

[[EMAIL PROTECTED]]

Hello,
I'm newbie...
I have a debian server with qmail e spamassassin 3.1.4
I've a lot of spam.
I begin with only one question: how can I add in the header of my  
mail the result of scan also if the message is clean?

Now spamassassin add header only if the mail is a spam mail.
I need to read also the header for clean message, also for message  
with score 0.


How can I do?

thanks
fraska

Net-DNS problem with SpamAssassin.

[Piyush Panchal]

I have SpamAssassin-3.1.7 with Postfix MTA  on 
RHEL 3.0. 
 
I have found following failure message in my 
postfix log file. I believe that problem is happened when i updated 
Net::DNS perl module from CPAN. Yet SpamAssassin is working perfectly with 
postfix MTA without any problem
 
Oct 23 11:07:10 linux spamd[16790]: Can't use 
string ("Net::DNS::RR::MX") as a HASH ref while "strict refs" in use at 
/usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi/Net/DNS/RR.pm line 
724.Oct 23 11:07:10 linux spamd[16790]: Can't use string 
("Net::DNS::RR::MX") as a HASH ref while "strict refs" in use at 
/usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi/Net/DNS/RR.pm line 
724.Oct 23 11:07:10 linux spamd[16790]: Compilation failed in require at 
(eval 225) line 3.Oct 23 11:07:10 linux spamd[16790]: Can't use string 
("Net::DNS::RR::MX") as a HASH ref while "strict refs" in use at 
/usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi/Net/DNS/RR.pm line 
724.Oct 23 11:07:10 linux spamd[16790]: Compilation failed in require at 
(eval 225) line 3.Oct 23 11:07:10 linux spamd[16790]: plugin: eval failed: 
Can't use string ("Net::DNS::RR::MX") as a HASH ref while "strict refs" in use 
at /usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi/Net/DNS/RR.pm line 
724.Oct 23 11:07:10 linux spamd[16790]: Compilation failed in require at 
(eval 225) line 3.
 
Oct 23 11:04:37 linux spamd[15293]: spf: lookup failed: Can't use 
string ("Net::DNS::RR::MX") as a HASH ref while "strict refs" in use at 
/usr/lib/perl5/site_perl/5.8.0/i386-linux-thread-multi/Net/DNS/RR.pm line 724, 
 line 132.
 
Thanks,
Piyush Panchal

Problem with spamassassin skipping messages and sa-learn coredumps on sync

[marijane white]

Greetings all,

I am having a problem where spamassassin is not running on all my messages 
and a bunch of spam is slipping into my inbox as a result.  I would say 
this has been going on for about a month, but it took me a few weeks to 
notice the lack of spamassassin headers in the skipped mail.  I am not 
having any luck figuring out why this happening or how to fix it; I hope 
someone on this list can help.


I'm running version 3.1.0 (Perl 5.8.7) and the platform it's running on is 
NetBSD 3.0.  I invoke it via procmail, with the recipe suggested at the 
spamassassin wiki.



I turned on procmail logging this morning and I am seeing a number of 
potentially troubling messages.


For example, I've got a couple of thes failure messages:

procmail: Match on "< 256000"
procmail: Locking "spamassassin.lock"
procmail: Executing "spamassassin"
procmail: [7638] Wed May 10 10:29:40 2006
procmail: Program failure (-11) of "spamassassin"
procmail: Rescue of unfiltered data succeeded
procmail: [7638] Wed May 10 10:29:40 2006
procmail: Unlocking "spamassassin.lock"


And I see several of these:

procmail: [2585] Wed May 10 10:59:53 2006
procmail: Locking "spamassassin.lock"
[8699] warn: bayes: unknown packing format for bayes db, please re-learn: 
138 at
 /usr/pkg/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/BayesStore/DBM.pm 
line 1874.

procmail: [2585] Wed May 10 11:00:01 2006
procmail: Locking "spamassassin.lock"
[8699] warn: bayes: unknown packing format for bayes db, please re-learn: 
68 at
/usr/pkg/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/BayesStore/DBM.pm 
line 1874.
[8699] warn: bayes: expire_old_tokens: panic: sv_setpvn called with 
negative strlen at 
/usr/pkg/lib/perl5/vendor_perl/5.8.0/Mail/SpamAssassin/BayesStore/DBM.pm

line 624.


I notice the warnings mention re-learning. Unfortunately I am also having 
problems with sa-learn --sync dumping core on most of my attempts to train 
the classifier.



Does anyone have any idea what causes these errors and how I might fix 
them?



Thanks,
marijane

Re: problem with spamassassin 3.0 / amavisd-new on Debian

[Iain Pople]

Replying to myself for the sake of others with this problem. Please seem 
post here:

http://marc.theaimsgroup.com/?l=amavis-user&m=109604895419150&w=2
Iain Pople wrote:
Hi,
I am using amavisd-new version 20030616p10 and Spam Assassin 3.0 debian
packages from backports.org. The MTA is postfix 2.1.1
I get the following error messages if I enable spam filtering:
Oct 12 11:53:06 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: \tby
aladdin.webcentre.unimelb.edu.au (Postfix) with ESMTP id 08BD123D6F\n
Oct 12 11:53:11 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: \tfor <[EMAIL PROTECTED]>; Tue, 12
Oct 2004 11:52:28 +1000 (EST)\n
Oct 12 11:53:16 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: Received: from
aladdin.webcentre.unimelb.edu.au ([127.0.0.1])\n
Oct 12 11:53:21 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: \tby localhost (aladdin
[127.0.0.1]) (amavisd-new, port 10024)\n
Oct 12 11:53:26 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: \twith ESMTP id 32293-07 for
<[EMAIL PROTECTED]>;\n
This goes on for every line (including headers) of the email.
I have seen a similar report here:
http://lists.backports.org/pipermail/backports/2004-October/001121.html
but no resolution to date.
Does anyone have any idea what could be causing this?
thanks, Iain.

problem with spamassassin 3.0 / amavisd-new on Debian

[Iain Pople]

Hi,
I am using amavisd-new version 20030616p10 and Spam Assassin 3.0 debian
packages from backports.org. The MTA is postfix 2.1.1
I get the following error messages if I enable spam filtering:
Oct 12 11:53:06 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: \tby
aladdin.webcentre.unimelb.edu.au (Postfix) with ESMTP id 08BD123D6F\n
Oct 12 11:53:11 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: \tfor <[EMAIL PROTECTED]>; Tue, 12
Oct 2004 11:52:28 +1000 (EST)\n
Oct 12 11:53:16 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: Received: from
aladdin.webcentre.unimelb.edu.au ([127.0.0.1])\n
Oct 12 11:53:21 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: \tby localhost (aladdin
[127.0.0.1]) (amavisd-new, port 10024)\n
Oct 12 11:53:26 stan.brunny.com amavisd-new[23072]: (22857-01) ESMTP:
500 5.5.2 Error: bad syntax; PENALIZE: \twith ESMTP id 32293-07 for
<[EMAIL PROTECTED]>;\n
This goes on for every line (including headers) of the email.
I have seen a similar report here:
http://lists.backports.org/pipermail/backports/2004-October/001121.html
but no resolution to date.
Does anyone have any idea what could be causing this?
thanks, Iain.

problem with spamassassin, courier-mta on fedora core 1

[gillian bennett]

hi,

I have recently installed spamassassin 2.64, with courier-mta. This is
some of the errors I am seeing in /var/log/maillog.

Sep 22 11:03:15 ver-arc-ms1 spamd[24898]: Argument "" isn't numeric in
scalar assignment at /usr/bin/spamd line 942.
Sep 22 11:03:15 ver-arc-ms1 spamd[24898]: Argument "" isn't numeric in
numeric ne (!=) at /usr/bin/spamd line 943.
Sep 22 11:03:15 ver-arc-ms1 spamd[24898]: info: setuid to root succeeded
Sep 22 11:03:16 ver-arc-ms1 spamd[24898]: Use of uninitialized value in
concatenation (.) or string at /usr/bin/spamd line 958.
Sep 22 11:03:16 ver-arc-ms1 spamd[24898]: Creating default_prefs
[/.spamassassin/user_prefs]
Sep 22 11:03:16 ver-arc-ms1 spamd[24898]: Cannot write to
/.spamassassin/user_prefs: No such file or directory
Sep 22 11:03:16 ver-arc-ms1 spamd[24898]: Couldn't create readable
default_prefs for [/.spamassassin/user_prefs]
Sep 22 11:03:16 ver-arc-ms1 spamd[24898]: Still running as root: user
not specified with -u, not found, or set to root.  Fall back to nobody.
Sep 22 11:03:16 ver-arc-ms1 spamd[24898]: processing message (unknown)
for root:99.
Sep 22 11:03:17 ver-arc-ms1 spamd[24898]: clean message (2.9/3.0) for
root:99 in 1.2 seconds, 261 bytes.

I feel like I have missed something out, although I have follwed the
steps on several websites to do this.

Thanks, Gillian