Help with Bayes auto-learn

2005-05-12 Thread Geoff Sweet
I would like to enable the Bayes system with auto-learning. I thought that I had my config setup correctly but apparently I don't. My config looks like this: ## # How we want to modify the email rewrite_header subject [**SPAM**] report_safe 0 #Bayes learning system use_bayes 1 bayes_au

Re: Suddenly load average of 15-18???

2005-05-12 Thread jdow
From: "Thomas Cameron" <[EMAIL PROTECTED]> > On Thu, 2005-05-12 at 09:31 -0700, Loren Wilton wrote: > > > Is there something I should/could do about these expiry runs? It seems > > > odd that it's been like this for a couple of days now... How could I > > > know that this was the issue? > > > >

Re: Suddenly load average of 15-18???

2005-05-12 Thread jdow
From: "Thomas Cameron" <[EMAIL PROTECTED]> > On Thu, 2005-05-12 at 08:31 -0700, Loren Wilton wrote: > > Usually a high load average means that a spamd child suddenly (or possibly > > slowly) got fat, and you are out of memory and thrashing to beat the band. > > The two most common causes of this s

Re: Subscribing to spam lists

2005-05-12 Thread jdow
From: "David Brodbeck" <[EMAIL PROTECTED]> > Johnson, S wrote: > > Anyone know the best way to subscribe to receive all the spam I can > > possibly get? > > A post to the "alt.test" newsgroup used to be highly effective; don't > know if it still is today. > > Subscribing to Ameritech DSL might

Re: Atomic Grouping but not Possessive Quantifiers?

2005-05-12 Thread Rocky Olsen
Hehe, yeah, (?>) is atomic grouping ;) On Thu, May 12, 2005 at 10:21:57PM -0400, Keith Ivey wrote: > Rocky Olsen wrote: > >no, possessive quantifiers/atomic grouping discard saved states to back > >tracking will not occur for what was matched. > > Sounds like you might be able to use (?>pattern)

[SARE] Whitelist validation

2005-05-12 Thread Robert Menschel
I've received some whitelist submissions for 70_sare_whitelist.cf, from a mailing service used by several retailers. I've checked over these entries, and verified that nobody on my email server is receiving spam from them. But before they get added to the next release of the whitelist rule set, I

Re: Atomic Grouping but not Possessive Quantifiers?

2005-05-12 Thread Keith Ivey
Rocky Olsen wrote: no, possessive quantifiers/atomic grouping discard saved states to back tracking will not occur for what was matched. Sounds like you might be able to use (?>pattern) to do what you want. See perldoc perlre. -- Keith C. Ivey <[EMAIL PROTECTED]> Washington, DC

Re[2]: Uncatched spam and rules weith modification..

2005-05-12 Thread Robert Menschel
Hello Frederic, Thursday, May 12, 2005, 8:40:17 AM, you wrote: >>FG> X-spam-status: No, hits=5.312 tagged_above=-999 required=6.31 FG> tests=BAYES_99, >>FG> RCVD_HELO_IP_MISMATCH, RCVD_NUMERIC_HELO >>that does score high enough to be classified as spam, but you or your >>administrator have raise

Re[2]: [SARE] obfu rule set update

2005-05-12 Thread Robert Menschel
Hello Jack, Chris, Thursday, May 12, 2005, 8:46:40 AM, you wrote: JLS> At 09:19 AM 5.12.2005 +0100, Chris Russell wrote: >>Trying to Update this morning gives: >>Lint output: warning: description exists for non-existent rule JLS> SARE_OBFU_SPL_ORDERING >>lint: 1 issues detected. please rerun wit

Re: [SARE] obfu rule set update

2005-05-12 Thread Jack L. Stone
At 09:23 AM 5.12.2005 -0700, Loren Wilton wrote: >> Am running FBSD-4.11 and SA-3.03_3 >> I find that same problem. Also, when I open the rule with an editor, I see >> the file is filled with those DOS carriage returns - ^M >> >> When I remove them, then the --lint sees 9 problems. > >Strange. SA

Re: spammer is using html code for spamming

2005-05-12 Thread Loren Wilton
> He is using html codes to generate his page > Each row of text is composed of word segments generated from many table row Nasty little guy, isn't he? > Is there some rule who can catch this kind of spammers ? The new SARE obfu rules have some good ones for this guy, but there is currently a p

Re: Navigating the node tree

2005-05-12 Thread Theo Van Dinter
On Thu, May 12, 2005 at 04:36:47PM -0700, Bret Miller wrote: > Anyone have any sample code for walking the message node tree and > looking at the properties on each node? find_parts() basically does this, but it only looks at the content-type, but you can use it as a basis. -- Randomly Generated

Navigating the node tree

2005-05-12 Thread Bret Miller
Anyone have any sample code for walking the message node tree and looking at the properties on each node?

Re: Error starting spamd (v3.000002, but using modules v3.000003!)

2005-05-12 Thread Kevin W. Gagel
> On Thu, May 12, 2005 at 02:45:56PM -0700, Kevin W. Gagel > > wrote: I've just installed spamassassin on this new > > server and have tried to launch spamd using the > > /etc/init.d/spamassassin script but I get this error: > > Starting spamd: ERROR! spamassassin script is v3.02, > > but using

Re: Error starting spamd (v3.000002, but using modules v3.000003!)

2005-05-12 Thread Theo Van Dinter
On Thu, May 12, 2005 at 02:45:56PM -0700, Kevin W. Gagel wrote: > I've just installed spamassassin on this new server and have > tried to launch spamd using the /etc/init.d/spamassassin > script but I get this error: > Starting spamd: ERROR! spamassassin script is v3.02, but > using modules v3.

Re: SA Performance under Solaris -w- Sendmail

2005-05-12 Thread Alex S Moore
[EMAIL PROTECTED] wrote: The production server we are trying to run on only has 128mb of memory. I can't believe we got a machine with that little, but it happened. I might try running only 2 children of SPAMD, refreshing the processes every 5 messages or so to see if that will work, but I'd s

URIDNSBL Scores

2005-05-12 Thread Scott Schaffer
Hi. I am migrating spamassassin from my perimeter firewall to another server to lighten the load on the firewall. I have installed SA3.0 on the new machine and have done some testing. I am getting different results on each SA install. Configuration for both machines: Windows 2000 all hotfixes a

Re: Atomic Grouping but not Possessive Quantifiers?

2005-05-12 Thread Rocky Olsen
no, possessive quantifiers/atomic grouping discard saved states to back tracking will not occur for what was matched. -Rocky On Thu, May 12, 2005 at 03:00:18PM -0700, Mike Jackson wrote: > >AFAIK Perl doesn't support possessive Quantifiers, therefore SA does > >not. > > Is this the same as "gre

Re: Atomic Grouping but not Possessive Quantifiers?

2005-05-12 Thread Rocky Olsen
Ah crap, you are right, perl doesn't have possessive quantifiers. thx -Rocky On Thu, May 12, 2005 at 05:56:01PM -0400, Matt Kettler wrote: > Rocky Olsen wrote: > > >i tried writing a couple of regexps using the possessive quantifiers '++' > >and '*+' and spamassassin --lint threw up the error

Re: Atomic Grouping but not Possessive Quantifiers?

2005-05-12 Thread Mike Jackson
AFAIK Perl doesn't support possessive Quantifiers, therefore SA does not. Is this the same as "greedy"? Aren't Perl regexes always greedy unless you use +?, *?, or ??

Re: Atomic Grouping but not Possessive Quantifiers?

2005-05-12 Thread Matt Kettler
Rocky Olsen wrote: >i tried writing a couple of regexps using the possessive quantifiers '++' >and '*+' and spamassassin --lint threw up the error "invalid regexp for >rule", but was fine when i switched it to use atomic grouping. Does SA not >support possessive quantifiers? or was it just a mist

Error starting spamd (v3.000002, but using modules v3.000003!)

2005-05-12 Thread Kevin W. Gagel
I've just installed spamassassin on this new server and have tried to launch spamd using the /etc/init.d/spamassassin script but I get this error: Starting spamd: ERROR! spamassassin script is v3.02, but using modules v3.03! What is causing this? Redhat Enterprise Linux SA installed using

Atomic Grouping but not Possessive Quantifiers?

2005-05-12 Thread Rocky Olsen
i tried writing a couple of regexps using the possessive quantifiers '++' and '*+' and spamassassin --lint threw up the error "invalid regexp for rule", but was fine when i switched it to use atomic grouping. Does SA not support possessive quantifiers? or was it just a mistake in the lint checking

RE: [SPAM-TAG] RE: SpamCopURI not working, was RE: More Messed Up www URLs

2005-05-12 Thread Stewart, John
> However, when querying > achat-montre-rolex.net.multi.surbl.org, the firewall > appears to decide that the answer is within a zone it has > authority over, > and rejects it (returning NXDOMAIN to the internal DNS servers). > > I'm going to look into figuring out how to allow these queries thr

Re: Subscribing to spam lists

2005-05-12 Thread David Brodbeck
Johnson, S wrote: Anyone know the best way to subscribe to receive all the spam I can possibly get? A post to the "alt.test" newsgroup used to be highly effective; don't know if it still is today. Subscribing to Ameritech DSL might work. ;) My [EMAIL PROTECTED] email account gets more spam tha

Re: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread David Brodbeck
Thomas Cameron wrote: On Thu, 2005-05-12 at 12:20 -0500, Jon Dossey wrote: I'd go through your maillog, and check the spamassassin processing times, and see if you can pinpoint where the processing time shoots up. Then, go through your mqueue and take a look at the offending message. It wasn't jus

RE: [OT]Appropriate OS and other software to work with SA

2005-05-12 Thread George Breahna
I would recommend FreeBSD + Qmail as MTA. My company runs an e-mail outsourcing business and this combination has done wonders for us. -George On 5/12/2005 12:54 PM, Ben Wylie wrote: > Currently I am running my mailserver on a windows box. > would like to migrate my mailserver onto this linux

Re: "Transport endpoint is not connected"?

2005-05-12 Thread David Gibbs
David Gibbs wrote: > I ran spamd in debug mode for a while, hoping that I could catch one of > the messages slipping by ... and I did. Anyone? This is happening more frequently ... and I can't find a pattern. david

Re: SA 3.0.3 SURBL problem - resolved

2005-05-12 Thread Loren Wilton
> If this is documented somewhere, I couldn't find it. Seems that the RPM > I'm running from didn't include init.pre, though the tarball > distribution does. init.pre is a standard part of the distro. If the RPM is missing it, it is broken, and you should probably point that out to the maintaine

Re: SQL Question

2005-05-12 Thread Alan Munday
Kevin Peuhkurinen wrote the following on 12/05/2005 18:12: Actually, scratch that. Those are not the documents I was thinking they were.Instead, download the latest copy of SA and you will find a folder in the distribution called "sql". In there, there is some README files that describe ho

Re: [OT]Appropriate OS and other software to work with SA

2005-05-12 Thread Eric A. Hall
On 5/12/2005 12:54 PM, Ben Wylie wrote: > Currently I am running my mailserver on a windows box. > would like to migrate my mailserver onto this linux box so that hopefully I > will be able to get a faster, more stable system. > Is there a standard combination programs used as a mailserver as I

Re: spammer is using html code for spamming

2005-05-12 Thread Eddy Beliveau
Many thanks, I'll give it a try Thanks again Eddy - Original Message - From: "martin smith" <[EMAIL PROTECTED]> To: "Spamassassin" ; "'Eddy Beliveau'" <[EMAIL PROTECTED]> Sent: Thursday, May 12, 2005 12:30 PM Subject: RE: spammer is using html code for spamming Whoops outlook capitalised

Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
On Thu, 2005-05-12 at 09:31 -0700, Loren Wilton wrote: > > Is there something I should/could do about these expiry runs? It seems > > odd that it's been like this for a couple of days now... How could I > > know that this was the issue? > > Um, this isn't my area of expertise. I suspect Matt or

RE: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
On Thu, 2005-05-12 at 12:20 -0500, Jon Dossey wrote: > This may only be a temporary fix. Personally, rebooting a linux machine > to solve a problem just isn't acceptable. Did you try restarting spamd > before rebooting? Several times. I restarted the entire mail suite - sendmail, clam, SA, mil

Re: Suddenly load average of 15-18???

2005-05-12 Thread Loren Wilton
> Is there something I should/could do about these expiry runs? It seems > odd that it's been like this for a couple of days now... How could I > know that this was the issue? Um, this isn't my area of expertise. I suspect Matt or Justin will be along with a workable suggestion fairly soon. I'

RE: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread Jon Dossey
> From: Thomas Cameron [mailto:[EMAIL PROTECTED] > To: spamassassin-users > Subject: RE: [SOLVED] Re: Suddenly load average of 15-18??? > > On Thu, 2005-05-12 at 11:46 -0500, Jon Dossey wrote: > > > From: Thomas Cameron [mailto:[EMAIL PROTECTED] > > > Sent: Thursday, May 12, 2005 11:38 AM > > > To

Re: Suddenly load average of 15-18???

2005-05-12 Thread Loren Wilton
> symptom. Anyone have any ideas why this would suddenly start? Running Awl? Running Bayes? Since it starts immediately, it sounds like a large expiry run for one or the other of them. If you aren't running either, then this may be the area where nobody really knows what is going wrong.

Re: SA Performance under Solaris -w- Sendmail

2005-05-12 Thread leonard . gray
Thanks for your efforts and tests.  I think I found the problem. The production server we are trying to run on only has 128mb of memory.  I can't believe we got a machine with that little, but it happened.  I might try running only 2 children of SPAMD, refreshing the processes every 5 messages or

Re: SQL Question

2005-05-12 Thread Kevin Peuhkurinen
Kevin Peuhkurinen wrote: Look at http://spamassassin.apache.org/full/3.0.x/dist/doc/ for file names that end in SQL. Kevin Actually, scratch that. Those are not the documents I was thinking they were.Instead, download the latest copy of SA and you will find a folder in the distribution cal

Re: SQL Question

2005-05-12 Thread Michael Parker
On Thu, May 12, 2005 at 05:47:26PM +0100, Alan Munday wrote: > > Thanks, though I can't seem to find the Docs that cover bayes/AWL setup on > the Wiki or apache site. > > Are there any docs that are considered definitive around? > sql/README.bayes sql/README.awl is the definitive documentation

Re: SQL Question

2005-05-12 Thread Alan Munday
Kevin Peuhkurinen wrote the following on 12/05/2005 18:03: Alan Munday wrote: Look at http://spamassassin.apache.org/full/3.0.x/dist/doc/ for file names that end in SQL. Kevin Thanks, they did not come up when googling. Alan

Re: [OT]Appropriate OS and other software to work with SA

2005-05-12 Thread James R
Ben Wylie wrote: Currently I am running my mailserver on a windows box. I have just bought a new server and will probably be running CentOS on it. I would like to migrate my mailserver onto this linux box so that hopefully I will be able to get a faster, more stable system. I'm looking for advice a

Re: SQL Question

2005-05-12 Thread Kevin Peuhkurinen
Alan Munday wrote: Thanks, though I can't seem to find the Docs that cover bayes/AWL setup on the Wiki or apache site. Are there any docs that are considered definitive around? Look at http://spamassassin.apache.org/full/3.0.x/dist/doc/ for file names that end in SQL. Kevin

Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
On Thu, 2005-05-12 at 10:53 -0500, Dan Nelson wrote: > In the last episode (May 12), Thomas Cameron said: > > spamc is suddenly bringing my mail server to its knees. > > > > Running RHEL 4 with the spamassassin-3.0.1-0.EL4 (supplied by Red Hat) and > > spamass-milter-0.3.0-3 (I made that RPM) alo

RE: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
On Thu, 2005-05-12 at 11:46 -0500, Jon Dossey wrote: > > From: Thomas Cameron [mailto:[EMAIL PROTECTED] > > Sent: Thursday, May 12, 2005 11:38 AM > > To: spamassassin-users; spamass-milt-list@nongnu.org > > Subject: [SOLVED] Re: Suddenly load average of 15-18??? > > > > OK, this is a weird solutio

[OT]Appropriate OS and other software to work with SA

2005-05-12 Thread Ben Wylie
Currently I am running my mailserver on a windows box. I have just bought a new server and will probably be running CentOS on it. I would like to migrate my mailserver onto this linux box so that hopefully I will be able to get a faster, more stable system. I'm looking for advice as to what the 's

Re: SQL Question

2005-05-12 Thread Alan Munday
Michael Parker wrote the following on 12/05/2005 17:37: On Thu, May 12, 2005 at 05:16:19PM +0100, Alan Munday wrote: I've been looking through the SA SQL docs and can only see references to spamc/spamd use of SQL. Can I just confirm that SQL can be used with spamassassin as well? Only for Bayes

RE: [SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread Jon Dossey
> From: Thomas Cameron [mailto:[EMAIL PROTECTED] > Sent: Thursday, May 12, 2005 11:38 AM > To: spamassassin-users; spamass-milt-list@nongnu.org > Subject: [SOLVED] Re: Suddenly load average of 15-18??? > > OK, this is a weird solution... I rebooted the server and all the > problems went away. It

Re: SQL Question

2005-05-12 Thread Michael Parker
On Thu, May 12, 2005 at 05:16:19PM +0100, Alan Munday wrote: > > I've been looking through the SA SQL docs and can only see references to > spamc/spamd use of SQL. > > Can I just confirm that SQL can be used with spamassassin as well? Only for Bayes and AWL, userprefs in SQL requires the use of

[SOLVED] Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
OK, this is a weird solution... I rebooted the server and all the problems went away. It's chuffing along happily now. Memory leak, maybe? Thomas

Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
On Thu, 2005-05-12 at 18:10 +0200, Christoph Petersen wrote: > Hi, > > Thomas Cameron schrieb: > > I just tried that and as soon as I restarted everything the load shot up > > to ~ 6. I had to kill everything and remove the SA milter. > > > > I'd like to figure out what the root cause is rather

RE: spammer is using html code for spamming

2005-05-12 Thread martin smith
Whoops outlook capitalised this wrong with an I instead of i at the end. This is what it should have been; body MS_Body_Hide_DRUG /\b(?:R[!a-z]?eta il|P[!a-z]?ri ces|V.?I RA|C[!a-z]?I S|(?:V|U)L AM|U[!a-z]?LTRAM|S[!a-z]?MA)\b/i

Re: [SARE] obfu rule set update

2005-05-12 Thread Loren Wilton
> Am running FBSD-4.11 and SA-3.03_3 > I find that same problem. Also, when I open the rule with an editor, I see > the file is filled with those DOS carriage returns - ^M > > When I remove them, then the --lint sees 9 problems. Strange. SA normally doesn't care beans about dos CRs in the rules f

SQL Question

2005-05-12 Thread Alan Munday
I've been looking through the SA SQL docs and can only see references to spamc/spamd use of SQL. Can I just confirm that SQL can be used with spamassassin as well? Thanks Alan

RE: spammer is using html code for spamming

2005-05-12 Thread martin smith
M>-Original Message- M>From: Eddy Beliveau [mailto:[EMAIL PROTECTED] M>Sent: 12 May 2005 16:49 M>To: users@spamassassin.apache.org M>Subject: spammer is using html code for spamming M> M>Hi! M> M>I'm using spamassassin 2.64 with success M> M>I'm having problem catching some specific spamme

Re: Suddenly load average of 15-18???

2005-05-12 Thread Christoph Petersen
Hi, Thomas Cameron schrieb: > I just tried that and as soon as I restarted everything the load shot up > to ~ 6. I had to kill everything and remove the SA milter. > > I'd like to figure out what the root cause is rather than band-aid the > symptom. Anyone have any ideas why this would suddenly

Re: SA 3.0.3 SURBL problem - resolved

2005-05-12 Thread Mick Szucs
Mick Szucs wrote: SpamAssassin 3.0.3 on Fedora Core 2. I'm trying to set up SURBL from the instructions at www.surbl.org Thank you to Martin Hepworth who pointed out that the plugin needs to be loaded via /etc/mail/spamassassin/init.pre: $ cat /etc/mail/spamassassin/init.pre # URIDNSBL - look up

Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
On Thu, 2005-05-12 at 08:31 -0700, Loren Wilton wrote: > Usually a high load average means that a spamd child suddenly (or possibly > slowly) got fat, and you are out of memory and thrashing to beat the band. > The two most common causes of this seem to be Bayes expiry runs and Awl > expiry runs.

Re: SA Performance under Solaris -w- Sendmail

2005-05-12 Thread Alex S Moore
[EMAIL PROTECTED] wrote: I've been experiencing and documenting a pretty severe performance problem with SA versions 3.0.1 through 3.1x (nightly) under Solaris 8 and 9, Perl 5.8.3. Ran the test differently and got different results. I sent the 573 messages from a different host. Both the send

Re: Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
On Thu, 2005-05-12 at 11:19 -0400, Stephen M. Przepiora wrote: > Take a look at the switches you have in /etc/init.d/spamassassin change > them to only run 5 processess and to die off after 15 or twenty scans. > -m5 --max-conn-per-child=5 > Steve I just tried that and as soon as I restarted every

RE: [SARE] obfu rule set update

2005-05-12 Thread Jack L. Stone
At 09:19 AM 5.12.2005 +0100, Chris Russell wrote: > > >Trying to Update this morning gives: > >Lint output: warning: description exists for non-existent rule SARE_OBFU_SPL_ORDERING >lint: 1 issues detected. please rerun with debug enabled for more information. > >Cheers, > >Chris > Am running FB

Re: Uncatched spam and rules weith modification..

2005-05-12 Thread Frederic Goudal
Robert Menschel <[EMAIL PROTECTED]> > Cc: SPAMassassin Users > Date: Wed, 11 May 2005 19:07:50 PDT > Subject: Re: Uncatched spam and rules weith modification.. >Hello Frederic, >FG> X-spam-status: No, hits=5.312 tagged_above=-999 required=6.31 tests=BAYES_99, >FG> RCVD_HELO_IP_MISMATCH, RCVD_

RE: [SPAM-TAG] RE: SpamCopURI not working, was RE: More Messed Up www URLs

2005-05-12 Thread Stewart, John
> Your configuration and installation are fine. multi.surbl.org is > the only list that should be checked, as it's the combined list > with all other SURBL lists included: > > http://www.surbl.org/lists.html#multi Aha! I think I've found the problem. The behaviour for SpamCopURI must have ch

Re: Suddenly load average of 15-18???

2005-05-12 Thread Loren Wilton
Usually a high load average means that a spamd child suddenly (or possibly slowly) got fat, and you are out of memory and thrashing to beat the band. The two most common causes of this seem to be Bayes expiry runs and Awl expiry runs. Sometimes though it can seemingly happen from some unknown sequ

Re: SA Performance under Solaris -w- Sendmail

2005-05-12 Thread Alex S Moore
[EMAIL PROTECTED] wrote: I've been experiencing and documenting a pretty severe performance problem with SA versions 3.0.1 through 3.1x (nightly) under Solaris 8 and 9, Perl 5.8.3. This may not be much help. I put 573 messages in a subfolder and ran the following script. I watched `prstat -n

SA 3.0.3 SURBL problem

2005-05-12 Thread Mick Szucs
Hello, SpamAssassin 3.0.3 on Fedora Core 2. I'm trying to set up SURBL from the instructions at www.surbl.org I've added: urirhssub URIBL_JP_SURBL multi.surbl.org.A 64 body URIBL_JP_SURBL eval:check_uridnsbl('URIBL_JP_SURBL') describe URIBL_JP_SURBL Has URI in JP at http://www.su

Re: Suddenly load average of 15-18???

2005-05-12 Thread Stephen M. Przepiora
Take a look at the switches you have in /etc/init.d/spamassassin change them to only run 5 processess and to die off after 15 or twenty scans. -m5 --max-conn-per-child=5 Steve Thomas Cameron wrote: All - spamc is suddenly bringing my mail server to its knees. Running RHEL 4 with the spamassassin-

Re: my internal server is making records in the AWL

2005-05-12 Thread James R
Arvinn Løkkebakken wrote: James R wrote: Arvinn Løkkebakken wrote: Arvinn Løkkebakken wrote: How can that happen? Anybody else here with the same experience? Are we talking about a bug here? I would really like to know if this is a problem in my setup or if others are experiencing the same..

Suddenly load average of 15-18???

2005-05-12 Thread Thomas Cameron
All - spamc is suddenly bringing my mail server to its knees. Running RHEL 4 with the spamassassin-3.0.1-0.EL4 (supplied by Red Hat) and spamass-milter-0.3.0-3 (I made that RPM) along with razor-agents-2.67-0, dcc-1.3.0-0 and pyzor-0.4.0-0. All of a sudden about two days ago spamc processes were

Re: my internal server is making records in the AWL

2005-05-12 Thread Arvinn Løkkebakken
James R wrote: Arvinn Løkkebakken wrote: Arvinn Løkkebakken wrote: How can that happen? Anybody else here with the same experience? Are we talking about a bug here? I would really like to know if this is a problem in my setup or if others are experiencing the same.. Arvinn What's the problem

Re: [SPAM-TAG] Re: SpamCopURI not working

2005-05-12 Thread Jeff Chan
On Thursday, May 12, 2005, 7:02:47 AM, John Stewart wrote: > This is killing me here dozens of spams this morning getting through > (with bayes, RDJ+SARE, razor, dcc). Without the SpamCopURI working, my > detection rate plummets. > Any ideas why SpamCopURI would only be querying multi.surbl.o

Re: SpamCopURI not working

2005-05-12 Thread Stewart, John
This is killing me here dozens of spams this morning getting through (with bayes, RDJ+SARE, razor, dcc). Without the SpamCopURI working, my detection rate plummets. Any ideas why SpamCopURI would only be querying multi.surbl.org even though all of them are configured in my spamcop_uri.cf? I'

Re: SA Performance under Solaris -w- Sendmail

2005-05-12 Thread Alex S Moore
[EMAIL PROTECTED] wrote: I've been experiencing and documenting a pretty severe performance problem with SA versions 3.0.1 through 3.1x (nightly) under Solaris 8 and 9, Perl 5.8.3. What is the simplest way for me to see this problem? I use CSW packages for sendmail, MD, SA, perl and others. R

RE: rule edit

2005-05-12 Thread Robert Swan
Thanks all   Robert             Peace he would say instead of goodbyepeace my brother. From: Robert Swan Sent: Thursday, May 12, 2005 9:00 AM To: spamassassin-users@incubator.apache.org Subject: rule edit   I am having trouble with a custom rule and wonder

Re: SA/RDJ/Bogus Virus Warnings Problem

2005-05-12 Thread Dimitri Yioulos
On Thursday May 12 2005 8:20 am, Tim Jackson wrote: > On Thu, 12 May 2005 07:48:40 -0400 > > Dimitri Yioulos <[EMAIL PROTECTED]> wrote: > > I've had RDJ fetching rules updates successfully until just > > recently. It seems that some part of my set-up now chokes on > > downloading and installing Ti

Re: rule edit

2005-05-12 Thread wolfgang
hi Robert, In an older episode (Thursday 12 May 2005 15:00), Robert Swan wrote: > I am having trouble with a custom rule and wondered if anyone know why > this didn't work. I have pasted an error from sa-learn and also the rule > below. I am running Redhat 9 and Spamassassin 3.0.3 > > > > >

Re: rule edit

2005-05-12 Thread Tim Jackson
On Thu, 12 May 2005 09:00:10 -0400 "Robert Swan" <[EMAIL PROTECTED]> wrote: > I am having trouble with a custom rule and wondered if anyone know why > this didn't work. I have pasted an error from sa-learn and also the > rule below. > body VIRUS_SOBER5 /*** Attachment-Scanner: Status

RE: rule edit

2005-05-12 Thread Gray, Richard
you'll need to escape the * so body VIRUS_SOBER5 /\*\*\* Attachment-Scanner: Status OK/I HTH Richard From: Robert Swan [mailto:[EMAIL PROTECTED] Sent: 12 May 2005 14:00 To: spamassassin-users@incubator.apache.org

SA Performance under Solaris -w- Sendmail

2005-05-12 Thread leonard . gray
I've been experiencing and documenting a pretty severe performance problem with SA versions 3.0.1 through 3.1x (nightly)  under Solaris 8 and 9, Perl 5.8.3. We're running Sendmail 8.12.11, and I've tried milters MimeDefang and Spamass-milter. I initially thought this problem was related to the

rule edit

2005-05-12 Thread Robert Swan
I am having trouble with a custom rule and wondered if anyone know why this didn’t work. I have pasted an error from sa-learn and also the rule below. I am running Redhat 9 and Spamassassin 3.0.3     invalid regexp for rule VIRUS_SOBER5: /*** Attachment-Scanner: Status OK/i     body V

Re: SA/RDJ/Bogus Virus Warnings Problem

2005-05-12 Thread Tim Jackson
On Thu, 12 May 2005 07:48:40 -0400 Dimitri Yioulos <[EMAIL PROTECTED]> wrote: > I've had RDJ fetching rules updates successfully until just > recently. It seems that some part of my set-up now chokes on > downloading and installing Tim Jackson's Bogus Virus Warnings > ruleset. Please feel free

Re: SA/RDJ/Bogus Virus Warnings Problem

2005-05-12 Thread Nick Leverton
On Thu, May 12, 2005 at 07:48:40AM -0400, Dimitri Yioulos wrote: > If I take Bogus Virus Warnings out of my RDJ config file (ie. I don't use RDJ > to download and install), I have no problems. > > I recently sent a message to Tim, but haven't gotten a response. > > Does anyone have any idea wh

SA/RDJ/Bogus Virus Warnings Problem

2005-05-12 Thread Dimitri Yioulos
ARNING***: spamassassin --lint failed. Rolling configuration files back, not restarting SpamAssassin. Rollback command is: mv -f /etc/mail/spamassassin/blacklist.cf /etc/mail/spamassassin/RulesDuJour/sa-blacklist.current.2; mv -f /etc/mail/spamassassin/RulesDuJour/blacklist.cf.2005051

Re: my internal server is making records in the AWL

2005-05-12 Thread James R
Arvinn Løkkebakken wrote: Arvinn Løkkebakken wrote: How can that happen? Anybody else here with the same experience? Are we talking about a bug here? I would really like to know if this is a problem in my setup or if others are experiencing the same.. Arvinn What's the problem? Looks like, in

Re: spamd - limiting processes

2005-05-12 Thread Marco Herrn
> At 05:51 AM 5/11/2005, Marco Herrn wrote: >>It seems that the --max-children option doesn't do as one expects, since >>spamd now uses a preforking. And it seems that the processes are not >>limited at all. > > Are you sure? Are there more than 5 spamd's in ps ax? You are right. There are only 5

Re: my internal server is making records in the AWL

2005-05-12 Thread Arvinn Løkkebakken
Arvinn Løkkebakken wrote: How can that happen? Anybody else here with the same experience? Are we talking about a bug here? I would really like to know if this is a problem in my setup or if others are experiencing the same.. Arvinn

RE: [SARE] obfu rule set update

2005-05-12 Thread Chris Russell
Trying to Update this morning gives: Lint output: warning: description exists for non-existent rule SARE_OBFU_SPL_ORDERING lint: 1 issues detected. please rerun with debug enabled for more information. Cheers, Chris -Original Message- From: Robert Menschel [mailto:[EMAIL PROTECTED]