Re: [AMaViS-user] Own filter

2007-01-04 Thread Nikola Milutinovic
> I use amavisd-new and sendmail under opensuse 10.1 > > A sender should receive a copy of the email, if the header contains > a string. > Before I run postfix and was able to use a simple bashscript. > Data was piped to the script. > Now I have to use sendmail :( Sendmail is OK, I've used it on T

Re: [AMaViS-user] maRBL on Debian

2007-01-04 Thread grant maxwell
Henrik The patch did not fully work for me. Hunk 2 failed with: patching file policyd-weight-devel Hunk #1 succeeded at 322 (offset -16 lines). Hunk #2 FAILED at 1379. Hunk #3 succeeded at 2173 (offset -101 lines). Hunk #4 succeeded at 2342 (offset -26 lines). Hunk #5 succeeded at 2876 (offset -13

Re: [AMaViS-user] What is SPAMMY again?

2007-01-04 Thread Gary V
Peter wrote: > I don't remember what SPAMMY refers to.  I saw it pass by my screen and > had to find out: > Passed SPAMMY, -> , Hits: 12.061, tag=-, tag2=6.3, > kill=16, queued_as: DFE87A156, L/Y/Y/0 > Peter http://marc.theaimsgroup.com/?l=amavis-user&m=116377724706591 Essentially between

Re: [AMaViS-user] amavis: SA TIMED OUT

2007-01-04 Thread Gary V
Oliver wrote: > Otavio: >> Do you use some other applications whit SpamAssassin, like Razor2, >> Pyzor and/or DCC ? > No I am not using any other software. >> Because in my servers I had the same problems, and >> it's happen because this softwares need to access some external server >> with dif

[AMaViS-user] What is SPAMMY again?

2007-01-04 Thread Peter Matulis
I don't remember what SPAMMY refers to.  I saw it pass by my screen and had to find out: Passed SPAMMY, -> , Hits: 12.061, tag=-, tag2=6.3, kill=16, queued_as: DFE87A156, L/Y/Y/0 Peter - Take Surveys. Earn Cash. Influen

Re: [AMaViS-user] amavis: SA TIMED OUT

2007-01-04 Thread Oliver Gros
Otavio: > Do you use some other applications whit SpamAssassin, like Razor2, > Pyzor and/or DCC ? No I am not using any other software. > Because in my servers I had the same problems, and > it's happen because this softwares need to access some external server > with diferent ports (e.g.: TCP

[AMaViS-user] amavis: SA TIMED OUT

2007-01-04 Thread Oliver Gros
Hi Recently I get the following error message in my mail logs stating that SA TIMED OUT. Googeling for it I found messages dating from late 2005 mentioning a performance issue with the default database and they recommend a switch to mysql. Is this still the case? What are other solutions/workaroun

Re: [AMaViS-user] maRBL on Debian

2007-01-04 Thread Gary V
mouss wrote: > Henrik Krohns wrote: >> On Thu, Jan 04, 2007 at 01:43:27AM +0100, mouss wrote: >> >>> grant maxwell wrote: >>> > It would be very simple to add "greylist command" support to policyd- > weight. > Used when you match only one RBL or get over some specific score. An

Re: [AMaViS-user] maRBL on Debian

2007-01-04 Thread mouss
Henrik Krohns wrote: > On Thu, Jan 04, 2007 at 01:43:27AM +0100, mouss wrote: > >> grant maxwell wrote: >> It would be very simple to add "greylist command" support to policyd- weight. Used when you match only one RBL or get over some specific score. And p0f support cont

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Gary V
sasa wrote: > "Gary V" wrote: >> You very much need to get rid of (never ever use): >> /etc/mail/spamassassin/sa-blacklist.current.cf >> /etc/mail/spamassassin/sa-blacklist.current.uri.cf > .. >> If you get rid of those two rule sets it's possible you will be Ok. > ..yes, this is problem !, I hav

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Gary V" wrote: > You very much need to get rid of (never ever use): > /etc/mail/spamassassin/sa-blacklist.current.cf > /etc/mail/spamassassin/sa-blacklist.current.uri.cf .. > If you get rid of those two rule sets it's possible you will be Ok. ..yes, this is problem !, I have deleted: /etc/mail/sp

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Gary V
sasa wrote: > "Micke Andersson" wrote: >> Might be so that you'll need to upgrade dependent Perl modules as well! >> Check the INSTALL file from source tar, and try to re-install/upgrade >> all dependent Perl modules as for AmavisD-new, >> and check if there is any problems with running "spammassa

[AMaViS-user] Own filter

2007-01-04 Thread Tilo Lutz
Hi I use amavisd-new and sendmail under opensuse 10.1 A sender should receive a copy of the email, if the header contains a string. Before I run postfix and was able to use a simple bashscript. Data was piped to the script. Now I have to use sendmail :( I read a lot about sendmail and I think I h

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Micke Andersson" wrote: > Might be so that you'll need to upgrade dependent Perl modules as well! > Check the INSTALL file from source tar, and try to re-install/upgrade > all dependent Perl modules as for AmavisD-new, > and check if there is any problems with running "spammassassin --lint -D" >

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Micke Andersson
sasa wrote: > I have this problem with Amavisd-new after SA upgrade from 3.0.4 to 3.1.7, a > solution can be to install SA 3.0.4 again ? > thanks. > > -- > Salvatore. > > > > Might be so that you'll need to upgrade dependent Perl modules as well! Check the INSTALL file from source tar, and

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Ralf Hildebrandt" wrote: > You need to keep amavisd-new running in debug mode. ..but now I have amavisd-new running in debug mode, now I must started amavisd-new in this mode: [EMAIL PROTECTED] ~]# su - amavis -c '/usr/sbin/amavisd debug' -- Salvatore. --

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Ralf Hildebrandt
* sasa <[EMAIL PROTECTED]>: > "Mark Martinec" wrote: > > So far so good. What happens next when a message arrives? > > ..when arrived a message in log file I have: > > Jan 4 17:05:46 mail postfix/qmgr[3380]: 947E52F0B05: > from=<[EMAIL PROTECTED]>, size=5548, nrcpt=2 (queue active) > Jan 4 17:

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Mark Martinec" wrote: > So far so good. What happens next when a message arrives? ..when arrived a message in log file I have: Jan 4 17:05:46 mail postfix/qmgr[3380]: 947E52F0B05: from=<[EMAIL PROTECTED]>, size=5548, nrcpt=2 (queue active) Jan 4 17:05:46 mail postfix/smtpd[5884]: disconnect f

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Mark Martinec
Salvatore, > ..this is output: > [EMAIL PROTECTED] ~]# su - amavis -c '/usr/sbin/amavisd debug' > Jan 4 16:29:21 mail /usr/sbin/amavisd[5336]: starting. /usr/sbin/amavisd > at mail amavisd-new-2.3.1 (20050509), Unicode aware, LANG=it_IT.UTF-8 ... > Jan 4 16:29:22 mail /usr/sbin/amavisd[5336]: C

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
..this is output: [EMAIL PROTECTED] ~]# su - amavis -c '/usr/sbin/amavisd debug' Jan 4 16:29:21 mail /usr/sbin/amavisd[5336]: starting. /usr/sbin/amavisd at mail amavisd-new-2.3.1 (20050509), Unicode aware, LANG=it_IT.UTF-8 Jan 4 16:29:21 mail /usr/sbin/amavisd[5336]: user=100, EUID: 100 (100)

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
- Original Message - From: "Mark Martinec" <[EMAIL PROTECTED]> To: Sent: Thursday, January 04, 2007 4:21 PM Subject: Re: [AMaViS-user] Connection refused (no pid problem) > Salvatore, > >> # su - amavis -c /usr/sbin/amavisd >> I haven't anybody error message but in log file I have alwa

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Mark Martinec
Salvatore, > # su - amavis -c /usr/sbin/amavisd > I haven't anybody error message but in log file I have always: > (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]: > Connection refused) > ..and after a few seconds: > [EMAIL PROTECTED] ~]# ps -ax|grep amavisd # su - amavis -c '/us

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Mark Martinec" wrote: > Should be: > # su - amavis -c /usr/sbin/amavisd ..with: # su - amavis -c /usr/sbin/amavisd # I haven't anybody error message but in log file I have always: (delivery temporarily suspended: connect to 127.0.0.1[127.0.0.1]: Connection refused) ..and after a few seconds: [E

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Mark Martinec
> # su - amavis /usr/sbin/amavisd Should be: # su - amavis -c /usr/sbin/amavisd Mark - Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinio

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Mark Martinec" wrote: > Your Perl is not at the location specified on the first line > of file /usr/sbin/amavisd. A soft link makes a quick fix. ..now in /usr/sbin/amavisd, on first line I have: #!/usr/bin/perl -T ..and my Perl is in: [EMAIL PROTECTED] ~]#ls /usr/bin /usr/bin/perl ..the Perl

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Mark Martinec
> [EMAIL PROTECTED] ~]# su - amavis /usr/sbin/amavisd > /usr/sbin/amavisd: line 105: package: command not found > /usr/sbin/amavisd: line 106: use: command not found > /usr/sbin/amavisd: line 107: use: command not found > /usr/sbin/amavisd: line 114: syntax error near unexpected token `(' > /usr/sb

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
I have this problem with Amavisd-new after SA upgrade from 3.0.4 to 3.1.7, a solution can be to install SA 3.0.4 again ? thanks. -- Salvatore. >> >> > Which version of SpamAssassin are you on? > Might be some version compatibility problem. > You should be on 3.1.7 or newer (if there is a ne

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Micke Andersson" wrote: > Which version of SpamAssassin are you on? > Might be some version compatibility problem. > You should be on 3.1.7 or newer (if there is a newer one) > > Try to run "amavisd" as "su - amavis" and see if you get any further > errors. > There are not any strange loggings in

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Micke Andersson
sasa wrote: > > ..now amavisd is run with root user but also with: > > [EMAIL PROTECTED] ~]# ls -l /var/amavis/.spamassassin/ > totale 8300 > -rwxr-x--- 1 amavis amavis 45056 4 gen 11:52 auto-whitelist > -rwxr-x--- 1 amavis amavis 5214208 2 gen 11:01 bayes_seen > -rw--- 1 amavis amavis

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Patrick Ben Koetter" wrote: > There's a user 'amavis' that wants to read a file > /var/amavis/.spamassassin/bayes_toks that is owned by 'root' and may only > be > read by 'root'. > > When you start amavisd, which user does it run as? Does it run as > 'amavis'? Is > 'amavis' allowed to read /var

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Patrick Ben Koetter
* sasa <[EMAIL PROTECTED]>: > "Ralf Hildebrandt" wrote: > > Run amavisd-new in debug mode: > > > > > > % amavisd-new debug > > #amavisd debug > ... > Jan 4 13:23:46 mail /usr/sbin/amavisd[3788]: SpamControl: initializing > Mail::SpamAssassin > bayes: cannot open bayes databases /var/amavis/.spam

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Ralf Hildebrandt" wrote: > Run amavisd-new in debug mode: > > > % amavisd-new debug #amavisd debug ... Jan 4 13:23:46 mail /usr/sbin/amavisd[3788]: SpamControl: initializing Mail::SpamAssassin bayes: cannot open bayes databases /var/amavis/.spamassassin/bayes_* R/O: tie failed: Permission deni

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Micke Andersson
sasa wrote: > ..yes, the configuration is: > > [EMAIL PROTECTED] ~]# postconf -n > alias_database = hash:/etc/aliases > alias_maps = hash:/etc/aliases > broken_sasl_auth_clients = yes > command_directory = /usr/sbin > config_directory = /etc/postfix > content_filter = smtp-amavis:[127.0.0.1]:10024

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Ralf Hildebrandt
* sasa <[EMAIL PROTECTED]>: > ..and I must restart amavisd service ! why amavisd service have this > behavior ?? Run amavisd-new in debug mode: % amavisd-new debug -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Micke Andersson" wrote: > Just a quick check more, it is not so that you have IPTABLES enabled on > you server? > Check "iptables-save" > And really, make sure that AmavisD deamon really is running, and actually > answering on TCP:10024 > Check "netstat -nap | grep ':1002'" > You should get some

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread Ralf Hildebrandt
* sasa <[EMAIL PROTECTED]>: > "Ralf Hildebrandt" wrote: > > And is it running now? > > > > please show your "postconf -n" output > > ..yes, the configuration is: > > [EMAIL PROTECTED] ~]# postconf -n > alias_database = hash:/etc/aliases > alias_maps = hash:/etc/aliases > broken_sasl_auth_clients

Re: [AMaViS-user] Connection refused (no pid problem)

2007-01-04 Thread sasa
"Ralf Hildebrandt" wrote: > And is it running now? > > please show your "postconf -n" output ..yes, the configuration is: [EMAIL PROTECTED] ~]# postconf -n alias_database = hash:/etc/aliases alias_maps = hash:/etc/aliases broken_sasl_auth_clients = yes command_directory = /usr/sbin config_directo

[AMaViS-user] REGEX bad on p0f rules. Causes FP

2007-01-04 Thread Michael Scheidell
P0f is right, but regexp on sample rule causes false positive. Number is high enough that it almost always pushes total score > 5. X-Amavis-OS-Fingerprint: Windows XP SP1+, 2000 SP3, (distance 11, link: System is confirmed to be a windows 2000 server, SP3. This rule is too broad: header L_P0F_W