Re: [AMaViS-user] Stock tips emails

2006-11-02 Thread Jakob Curdes
>> I beg to differ with you. On the contrary, there have been a number >>of recent posts to the SA list from admins all of whose spam is now >>identified as BAYES_00 and AWL, because they enabled autolearn and let >>it run on its own while a lot of spam was slipping through. >> >> > >This wa

Re: [AMaViS-user] another sa-update question

2006-11-02 Thread Henrik Krohns
On Thu, Nov 02, 2006 at 03:32:27PM -0800, Jo Rhett wrote: > MrC wrote: > > The && is a short-circuting AND; it will only perform the next command *iff* > > the previous command succeeds. Since 1 is a failure, the amavisd reload > > does not occur. > > yeah, but it doesn't do anything intelligent

Re: [AMaViS-user] X-Spam-Report headers missing

2006-11-02 Thread Miles Fidelman
Gary V wrote: > Hans wrote: > >> I'm running Debian Sarge with amavisd-new-2.4.2-3 from the Etch >> repositry. For some reason I don't get the spamsassin report in my >> headers. >> >> And from my amavis configs: >> >> mail:/etc/amavis/conf.d# grep sa_spam_report_header * >> 30-user:#

Re: [AMaViS-user] X-Spam-Report headers missing

2006-11-02 Thread Gary V
Hans wrote: > Hi guys, > I'm running Debian Sarge with amavisd-new-2.4.2-3 from the Etch > repositry. For some reason I don't get the spamsassin report in my > headers. > And from my amavis configs: > mail:/etc/amavis/conf.d# grep sa_spam_report_header * > 30-user:#$sa_spam_report_header = 0;

Re: [AMaViS-user] msgs table full?

2006-11-02 Thread Gary V
Benny wrote: > On Thu, November 2, 2006 15:01, Alberto D'Ambrosio wrote: >> In general, which kind of housekeeping should be done >> on awl & bayes MySQL DB's? > default will work with sql, eg it will expire on its own when the sql limith > is reached >> For example, for awl, I previously (pre-M

Re: [AMaViS-user] SpamAssAssin Header question

2006-11-02 Thread Matt Linzbach
> From: Mark Martinec <[EMAIL PROTECTED]> > Subject: Re: [AMaViS-user] SpamAssassin Header question > To: amavis-user@lists.sourceforge.net > Message-ID: <[EMAIL PROTECTED]> > Content-Type: text/plain; charset="us-ascii" > > Matt, > > > read_hash(\%local_domains, '/etc/postfix/relay_domains'); #

Re: [AMaViS-user] question re. SPF checks

2006-11-02 Thread Miles Fidelman
Mark, Thanks! (particularly for the links!) Miles Mark Martinec wrote: > Miles, > > >> But... for the other two email accounts, mail originates from desktop >> clients (Thunderbird). And here's the rub: >> - I want to apply virus and spam checks to incoming mail, but... >> - for SPF purposes

Re: [AMaViS-user] msgs table full?

2006-11-02 Thread Benny Pedersen
On Thu, November 2, 2006 15:01, Alberto D'Ambrosio wrote: > In general, which kind of housekeeping should be done > on awl & bayes MySQL DB's? default will work with sql, eg it will expire on its own when the sql limith is reached > For example, for awl, I previously (pre-MySQL) used: > /path/to

Re: [AMaViS-user] how to modify amavisd-new message header

2006-11-02 Thread Mark Martinec
vincenzo, > is possible customize the header rows: > X-Spam-Flag: > X-Spam-Score: > X-Spam-Level: > X-Spam-Status: > as the header X-Virus-Scanned: > (with the $X_HEADER_TAG directive in amavisd-new.conf file)? > I.E. How i can put in the header mail > X-mystring-SPAM-Flag in place of X-SPAM-Flag

Re: [AMaViS-user] another sa-update question

2006-11-02 Thread Jo Rhett
MrC wrote: > The && is a short-circuting AND; it will only perform the next command *iff* > the previous command succeeds. Since 1 is a failure, the amavisd reload > does not occur. yeah, but it doesn't do anything intelligent in the case that the update fails either, which is why you shouldn't

[AMaViS-user] X-Spam-Report headers missing

2006-11-02 Thread Hans du Plooy
Hi guys, I'm running Debian Sarge with amavisd-new-2.4.2-3 from the Etch repositry. For some reason I don't get the spamsassin report in my headers. And from my amavis configs: mail:/etc/amavis/conf.d# grep sa_spam_report_header * 30-user:#$sa_spam_report_header = 0; # insert X-Spam-Report head

Re: [AMaViS-user] Stock tips emails

2006-11-02 Thread Ed W
> Greylisting is a doubled edged sword, although beneficial in defering > illegitimate messages it also breaks misconfigured mail servers and the > users scream bloody murder when they dont get email at the speed of IM. > Sad to say this is my case here. We did however have it turned on > (SQ

Re: [AMaViS-user] another sa-update question

2006-11-02 Thread MrC
> Gary V wrote: > > Myself, I would be more inclined modify amavisd and run > this once a day: > > > > sa-update --nogpg --updatedir \ > > /var/amavisd/var/lib/spamassassin/3.001004 && amavisd reload > > > Jo Rhett wrote: > SA-Update returns with code 1 when there are no new rules. > Do you w

Re: [AMaViS-user] another sa-update question

2006-11-02 Thread Jo Rhett
Peter Huetmannsberger wrote: > thanks for pointing out the warning. I am just wondering if this is still > the case though. My setup is excactly like the one, which the warning > warns about, however the sa-update creates its own directory > "updates_spamassassin_org" with /usr/share/spamassassi

Re: [AMaViS-user] another sa-update question

2006-11-02 Thread Jo Rhett
Gary V wrote: > Myself, I would be more inclined modify amavisd and run this once a day: > > sa-update --nogpg --updatedir \ > /var/amavisd/var/lib/spamassassin/3.001004 && amavisd reload SA-Update returns with code 1 when there are no new rules. Do you want to restart amavisd when there are n

Re: [AMaViS-user] Stock tips emails

2006-11-02 Thread CRivera
[EMAIL PROTECTED] wrote on 11/02/2006 02:48:03 PM: > On Thu, Nov 02, 2006 at 03:38:11PM +0100, Jakob Curdes wrote: > > Do you use Bayes in spamassassin ? Without a self-adapting filter such > > as bayes or dspam a lot of stuff will slip through nowadays.You can tell > > SA to train bayes from

Re: [AMaViS-user] SpamAssassin Header question

2006-11-02 Thread Mark Martinec
Matt, > read_hash(\%local_domains, '/etc/postfix/relay_domains'); > # cat /etc/postfix/relay_domains merchant-gould.com OK > merchantgould.com OK > > $mydomain = 'merchantgould.com'; > $myhostname = 'mailgw3.merchantgould.com'; > Nov 2 11:32:27 mailgw3 amavis[31474]: (31474-07) Passed SPAMMY, >

Re: [AMaViS-user] Stock tips emails

2006-11-02 Thread Clifton Royston
On Thu, Nov 02, 2006 at 03:38:11PM +0100, Jakob Curdes wrote: > Do you use Bayes in spamassassin ? Without a self-adapting filter such > as bayes or dspam a lot of stuff will slip through nowadays.You can tell > SA to train bayes from the rule-based score. Then you get a quite good > database wi

Re: [AMaViS-user] another sa-update question

2006-11-02 Thread Mark Martinec
Gary, > Thanks for the correction, and new feature reminder. As you can see, > I will immediately put it to good use on my system: > > Oct 31 16:03:23 mail amavis[9634]: (09634-03) extra modules loaded: > /etc/mail/spamassassin/WebRedirect.pm, > /usr/share/perl5/Mail/SpamAssassin/Plugin/FuzzyOc

[AMaViS-user] SpamAssassin Header question

2006-11-02 Thread Matt Linzbach
Long-time amavisd-new user here. Recently put in a new server based upon Ubuntu 6.06LTS and since doing that I'm not seeing the system operate the way I'd like. I'd appreciate any input you could provide. First some background info. --- SpamAssas

Re: [AMaViS-user] amavisd-new not seeing a couple of perl modules.

2006-11-02 Thread Mark Martinec
Shaun, > It says it can't find: > Mail::DKIM > Mail::DKIM::Verifier > Mail::SpamAssassin::BayesStore::PgSQL > Mail::SpamAssassin::Plugin::DKIM > Mail::SpamAssassin::Plugin::URIDetail > > Yet two of them exist on my system: > /usr/lib/perl5/vendor_perl/5.8.5/Mail/SpamAssassin/BayesStore/PgSQL.pm >

Re: [AMaViS-user] question re. SPF checks

2006-11-02 Thread Mark Martinec
Miles, > But... for the other two email accounts, mail originates from desktop > clients (Thunderbird). And here's the rub: > - I want to apply virus and spam checks to incoming mail, but... > - for SPF purposes, the envelope sender is now the dynamic IP of the > desktop clients, so it's hard/imp

Re: [AMaViS-user] Courier, FC2, and socket permissions

2006-11-02 Thread Bill Taroli
Mark Martinec wrote: > Bill, > > >> As soon as I would chmod g+w on the socket, non-root users could use >> sendmail locally without any trouble at all. >> > > Try uncommenting a call to umask in file amavisd in sub post_configure_hook: > > sub post_configure_hook { > umask(0007); # affe

Re: [AMaViS-user] Courier, FC2, and socket permissions

2006-11-02 Thread Mark Martinec
Bill, > My Courier server runs as user courier and group courier. Amavisd is > configured as a global filter (gets launched by Courier at startup and > filters every message in and out). The socket that gets created at > amavisd startup has the same user/group, and by default has perms > srwxr-x--

[AMaViS-user] Courier, FC2, and socket permissions

2006-11-02 Thread Bill Taroli
I ran into an odd problem on FC2 with Courier 0.53.2 after upgrading to amavsid-new 2.4.3 and wanted to ping the list to see if anyone else has seen something like this or might have other solutions to the issue. My Courier server runs as user courier and group courier. Amavisd is configured as a

Re: [AMaViS-user] another sa-update question

2006-11-02 Thread Gary V
Mark wrote: > Running amavisd chrooted should not be a problem, SA loads > its rules files at startup time before chroot takes place. > It should not be necessary to provide a copy of rules files > in chroot jail. > This may not be a case with some additional custom SA plugins > which come with t

[AMaViS-user] amavisd-new / amavisnewsql and banned_files_lovers problem

2006-11-02 Thread Hank
Hello All I'm currently using amavisnewsql-0.8.0-1.4, and I'm having trouble with allowing banned files to a single domain. I've tried the following in /etc/amavisd.conf @bypass_banned_checks_maps = ( [qw( myrealdomain.com )] ); @banned_files_lovers_maps = ( [qw( myrealdomain.com )] ); Sending a

Re: [AMaViS-user] Stock tips emails

2006-11-02 Thread amavis-user
-- Jakob Curdes said the following on 11/2/06 8:38 AM: > Do you use Bayes in spamassassin ? Without a self-adapting filter such > as bayes or dspam a lot of stuff will slip through nowadays. So, roughly speaking, how do folks think DSPAM compares to Bayes within SpamAssassin? Amos -

Re: [AMaViS-user] Stock tips emails

2006-11-02 Thread Jakob Curdes
Do you use Bayes in spamassassin ? Without a self-adapting filter such as bayes or dspam a lot of stuff will slip through nowadays.You can tell SA to train bayes from the rule-based score. Then you get a quite good database without much manual traiing. Every spam case with slightly varying text

[AMaViS-user] Stock tips emails

2006-11-02 Thread CRivera
Lately we seem to have a pretty good handle on all spam threats except for the same old stock tip emails. The format of the email is: 1. Ramdom subject, but usually with "you have to read." somewhere in there (not always though). 2. Talks about the stock, great volume, projected increase, per q

Re: [AMaViS-user] another sa-update question

2006-11-02 Thread Mark Martinec
Gary V wrote: > If using sa-update to download SARE rules, it follows along to the > newest directory, but it is a problem when running chrooted as I > would image you would have to script something like this: Running amavisd chrooted should not be a problem, SA loads its rules files at startup ti

Re: [AMaViS-user] msgs table full?

2006-11-02 Thread Alberto D'Ambrosio
On Thu, 2 Nov 2006, Mark Martinec wrote: > Kenneth, > > > We've suddenly had a weird issue with out amavis installation, where > > DBD::mysql reports our tables in the amavisd db as being 'full'. I > > . . . > > Hm, googling for: mysql table full > gives: > MySQL AB :: MySQL 5.0 Reference Manua

Re: [AMaViS-user] skipped check of .gif.exe attachment

2006-11-02 Thread Mark Martinec
Patrick, > Content-Disposition: attachment; filename="picture8090..gif. exe" This regexp should do it: # block certain double extensions in filenames qr'\.[^./]*[A-Za-z][^./]*\.\s*(exe|vbs|pif|scr|bat|cmd|com|cpl|dll)[.\s]*$'i, Mark

Re: [AMaViS-user] approaches to wiring in list managers?

2006-11-02 Thread Mark Martinec
Miles, > My machine is used primarily for email list management. [...] > Every message is scanned on it's way into to the system, before being > passed on for delivery - i.e., the messages that reach the list manager > are already scanned. As already said, the easiest is to turn off content_filte

Re: [AMaViS-user] msgs table full?

2006-11-02 Thread Mark Martinec
Kenneth, > We've suddenly had a weird issue with out amavis installation, where > DBD::mysql reports our tables in the amavisd db as being 'full'. I > cannot understand we on earth it would do this, granted that users on > this list have reported database size in excess of 60GB. > > Nov 1 20:09:3