[SAtalk] spamd only forking single child

2003-01-06 Thread Neulinger, Nathan
Anyone know of any reason that spamd would only for a single child? stracing the process I'm seeing it spin in wait4, but it's not ever forking more than one child process to handle incoming requests. Needless to say this is having a bad impact on performance. Running with 2.50-cvs. -- Nathan

[SAtalk] pyzor_path and dcc_path not privileged?, others questionable...

2003-01-02 Thread Neulinger, Nathan
Looking at the current docs, pyzor_path and dcc_path appear to be listed in the non-privileged section of the config. I surely hope that is just a documentation typo as it is a gaping hole otherwise. Some others that seem to me like they should be considered privileged: *_timeout

[SAtalk] Combination scoring?

2002-09-24 Thread Neulinger, Nathan
Does SA do any scoring based on the combination of rules? Seems like this would be a good way to handle some of the mutations and avoid SA changes that some spams are using. Basically, add some extra small number of positive/negative points based on messages that include combinations of rules.

[SAtalk] fyi - new tactic on subjects

2002-06-04 Thread Neulinger, Nathan
Just got a penis enlargement spam with Time - 1:57:19 pm in the subject. Might be a pattern worth matching on worth an extra half-point or so. -- Nathan Nathan Neulinger EMail: [EMAIL PROTECTED] University of

[SAtalk] spamass-milter, spamc/d, per-user prefs

2002-05-30 Thread Neulinger, Nathan
I've got SA up and running wonderfully with razor, dcc, and SQL based per-user config on our qmail server. I have another serer elsewhere that is running sendmail that I'm planning on testing out SA on. (Separate organization.) First question - can someone send me a copy of the generated

RE: [SAtalk] problem with load of triplets.txt?

2002-05-22 Thread Neulinger, Nathan
NN This code: NN NN if (!$triplets_loaded) { NN my $filename = $self-{main}-{rules_filename} . NN /triplets.txt; NN NN if (!open (TRIPLETS, $filename)) { NN dbg (failed to open '$filename', cannot check dictionary); NN return 1; NN } NN NN

[SAtalk] problem with load of triplets.txt?

2002-05-21 Thread Neulinger, Nathan
This code: if (!$triplets_loaded) { my $filename = $self-{main}-{rules_filename} . /triplets.txt; if (!open (TRIPLETS, $filename)) { dbg (failed to open '$filename', cannot check dictionary); return 1; } is giving me this output from spamd: debug: checking RBL

RE: [SAtalk] Weird false negative...

2002-05-15 Thread Neulinger, Nathan
Seems to me that coming up with rules to match on multiple received lines would be the key... Although it's still forgeable you can probably do quite a bit of analysis on it, such as it having to go through two of ebays servers for an ebay email, and the dates/etc. These rules could be even more

RE: [SAtalk] X-Spam-Status: No, hits=5.0 required=5.0

2002-05-02 Thread Neulinger, Nathan
Might be worth doing the check on the rounded number, just to eliminate the visual confusion. -- Nathan Nathan Neulinger EMail: [EMAIL PROTECTED] University of Missouri - Rolla Phone: (573) 341-4841

RE: [SAtalk] AWL verses early-terminate

2002-05-02 Thread Neulinger, Nathan
The biggest problem with -S is due to the ordering of the rule checks. If all of the negative rules (or at least the _large_ negative rules) were processed first, it would probably be ok, but right now (or at least with 2.20) - if you enabled it, the whitelisting would never get used, since it

RE: [SAtalk] Selective site-wide usage?

2002-05-01 Thread Neulinger, Nathan
We have our wrapper script (replacement hook in qmail) check to see if a trigger file/marker exists on the user's account. If not, it gets passed through without ever touching SA. Otherwise, depending on which marker was found, different behavior can occur. -- Nathan

[SAtalk] Problem with sql user config - some not being used?

2002-04-18 Thread Neulinger, Nathan
I just started looking at sql based user configs, and noticed that it seems to not completely work. I've been testing with spamc -c. I have two entries in userpref user whitelist_from someaddr user required_hits 6 the required_hits one is working (I see the output change from

RE: [SAtalk] Problem with sql user config - some not being used?

2002-04-18 Thread Neulinger, Nathan
: [EMAIL PROTECTED] University of Missouri - Rolla Phone: (573) 341-4841 Computing Services Fax: (573) 341-4216 -Original Message- From: Neulinger, Nathan Sent: Thursday, April 18, 2002 11:57 AM To: Spam Assassin Subject: [SAtalk] Problem with sql user