Problems after recent upgrade

2005-06-20 Thread Jim Hatfield
After a recent upgrade of MIMEDefang and SpamAssassin I get this: Jun 20 11:43:18 highland mimedefang-multiplexor[89044]: Slave 1 stderr: Failed to run DNS_FROM_AHBL_RHSBL RBL SpamAssassin test, skipping: (Can't call method bgsend on an undefined value at

Re: autolearn=disabled why?

2005-06-20 Thread Bill Taroli
Theo Van Dinter wrote: On Fri, Jun 17, 2005 at 01:01:11PM -0500, Kyle Wheeler wrote: Is it disabling the autolearning because it already autolearned it, maybe? Or is it disabling the autolearning because of something else that might be going wrong? It's disabled because you've

spamd mem usage

2005-06-20 Thread Chris Knipe
Lo all, Uhm... I'm a bit worried about the below The 5 processes are also utilising close to 400MB of my swap space USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMANDspamd 7167 0.0 13.5 140664 140020 ?? I 2:03PM 0:03.36 spamd child (perl5.8.6)spamd 7162 0.0 12.6 130604

Scoreproblem: AWL, HTML_MESSAGE = 17

2005-06-20 Thread joeber
Hi! A Mail is identified as spam with a score of 17 but I don't know how and why. It is autowhitelisted and the only other score is from the rule HTML_MESSAGE witch defaults to 0.001 points. After all the identified spam is learned as ham ?! Jun 18 21:01:35 fw spamd[31276]: identified

report settings

2005-06-20 Thread Ron McKeating
Is it possible to have a standard setting that does not put a full report in the header for normal users, but does for one or 2 selected users? Ron -- Ron McKeating Senior IT Services Specialist Computing Services Loughborough University 01509 222329

Re: report settings

2005-06-20 Thread Rakesh
Ron McKeating wrote: Is it possible to have a standard setting that does not put a full report in the header for normal users, but does for one or 2 selected users? Ron Are you directly using Spamc or using Amavis or MailScanner or something else as a wrapper. If you are using MailScanner

RE: SpamAssassin 3.1.0pre1 PRERELEASE available!

2005-06-20 Thread Ben Hanson
I get 139 errors regarding the 70_sare_whitelist.cf entries. from 3.1pre. Has the syntax for whitelist_from_rcvd changed? Ben

Bayes learning error

2005-06-20 Thread Robert Swan
I am getting an error when I run manual learning sa-learn ham . Has anyone seen this before or have a clue how to fix it debug: bayes: DB_File module not installed, cannot use Bayes I am using Redhat, spamassassin 3.03 spamd,spamc, postfix thanks Robert Swan

RE: Bayes learning error

2005-06-20 Thread Chris Russell
Hi Robert, You need to install the DB_File perl module. Do the following: perl -eshell -MCPAN install DB_File Cheers, Chris From: Robert Swan [mailto:[EMAIL PROTECTED] Sent: 20 June 2005 14:53To: users@spamassassin.apache.orgSubject: Bayes learning error I am getting an error when

SA round-robin in exim ~ BAYES

2005-06-20 Thread Ronan
Further to my last post regarding the Mysql Backend to multiple Spamd servers. How much difference would there be if I ran the (in this case ) 2 servers on a round robin basis from exim. So over time they would both recieve a fair enough diverse amount of mail to make them practically

RE: SpamAssassin 3.1.0pre1 PRERELEASE available!

2005-06-20 Thread Andy Jezierski
Larry Rosenman ler@lerctr.org wrote on 06/19/2005 01:46:41 PM: Another one you might want to add to that list: Crypt::OpenSSL::Bignum The pre-req chain for Mail::DomainKeys doesn't req it, but apparently SA 3.1.0pre1 does. LER Yep, ditto here. This was with the last SVN build

Re: report settings

2005-06-20 Thread Ron McKeating
On Mon, 2005-06-20 at 18:51 +0530, Rakesh wrote: Ron McKeating wrote: Is it possible to have a standard setting that does not put a full report in the header for normal users, but does for one or 2 selected users? Ron Are you directly using Spamc or using Amavis or MailScanner or

Re: spamd mem usage

2005-06-20 Thread Matt Kettler
At 08:18 AM 6/20/2005, Chris Knipe wrote: Uhm... I'm a bit worried about the below The 5 processes are also utilising close to 400MB of my swap space USER PID %CPU %MEM VSZ RSS TT STAT STARTED TIME COMMAND spamd7167 0.0 13.5 140664 140020 ?? I 2:03PM

Re: SA round-robin in exim ~ BAYES

2005-06-20 Thread Nigel Frankcom
I've used local MySQL on several SA servers before now (without a cluster). It worked well. I used the same bayes database to 'seed' all of the servers so they at least started with the same data. I didn't notice any huge differences in scores and on the whole it worked well - if inelegantly.

Re: Phishing: My rule and thoughts

2005-06-20 Thread Kenneth Porter
--On Sunday, June 19, 2005 8:16 PM -0400 Theo Van Dinter [EMAIL PROTECTED] wrote: OVERALL% SPAM% HAM% S/ORANK SCORE NAME How does one read this chart? (Ideally I'm looking for an answer in the wiki, but I couldn't find one there. I thought it might be in the FAQ or under

How to block this email??

2005-06-20 Thread Bryan Haase
Does anyone have a rule that will score foreign characters or characters with the dashes on top? Below is example email that is not scoring at all for me. Thanks Bryan berton laurence [EMAIL PROTECTED] 6/18/2005 7:52 PM ТРАНСБЛОК XXI Наша компания оказывает юридические

Re: Scoreproblem: AWL, HTML_MESSAGE = 17

2005-06-20 Thread Matt Kettler
[EMAIL PROTECTED] wrote: Hi! A Mail is identified as spam with a score of 17 but I don't know how and why. It is autowhitelisted and the only other score is from the rule HTML_MESSAGE witch defaults to 0.001 points. First, ignore the white in autowhitelist. It's a score averager. It

Re: report settings

2005-06-20 Thread Matthew Newton
On Mon, Jun 20, 2005 at 02:06:11PM +0100, Ron McKeating wrote: Is it possible to have a standard setting that does not put a full report in the header for normal users, but does for one or 2 selected users? If it is exiscan you are currently using, then I guess you currently have something

Re: AWL Question

2005-06-20 Thread Matt Kettler
First, the AWL isn't a whitelist. Period. It's a score averager. http://wiki.apache.org/spamassassin/AutoWhitelist I have a particular address whitelisted via spamassassin [EMAIL PROTECTED] No, that command does not whitelist a sender. It adds ONE message scored at -100 to the sender's

Re: How to block this email??

2005-06-20 Thread Joe Zitnik
I know some of the rules at SARE: http://www.rulesemporium.com/rules.htmare aimed at English only environments, and will score non English e-mail higher. Look for the .cf files with _eng in the names. "Bryan Haase" [EMAIL PROTECTED] 6/20/2005 11:30 AM Does anyone have a rule that will score

Re: SpamAssassin 3.1.0pre1 PRERELEASE available!

2005-06-20 Thread Theo Van Dinter
On Mon, Jun 20, 2005 at 09:43:05AM +0200, Bart Verwilst wrote: Does SA 3.1.0 have support for expiring bayes and AWL data? SA 3.0 just keeps filling the mysql databases containing this data endlessly.. My db has a couple of million entries now and still growing, and there is no way to clean em

Re: Problems after recent upgrade

2005-06-20 Thread Jim Hatfield
On Mon, 20 Jun 2005 11:50:09 +0100, in local.spamassassin you wrote: Jun 20 11:43:18 highland mimedefang-multiplexor[89044]: Slave 1 stderr: Failed to run DNS_FROM_AHBL_RHSBL RBL SpamAssassin test, skipping: (Can't call method bgsend on an undefined value at

Spamassassin milter-spamc ...interdependencies?

2005-06-20 Thread Dr Robert Young
We are looking at upgrading from V2 to V3 of Spamassassin. The previous system person installed milter-spamc to link into sendmail with the v2 product (v2.6'ish I think). Since we are looking at the Spamassassin upgrade, are there any corresponding upgrades mandatory for milter ? Since the

Re: Listening on local interface

2005-06-20 Thread Matt Kettler
Marco Herrn wrote: Hi, I am using spamd and told it to listen only on the local interface: [EMAIL PROTECTED]:~$ ps aux|grep spamd root 1764 0.0 3.0 34456 30672 ? SNs Jun01 0:00 /usr/bin/perl -T -w /usr/sbin/spamd --create-prefs --max-children 5 --helper-home-dir

Re: Listening on local interface

2005-06-20 Thread Theo Van Dinter
On Mon, Jun 20, 2005 at 06:17:25PM +0200, Marco Herrn wrote: udp 368 0 *:34602 *:* 10608/spamd child udp 368 0 *:34603 *:* 10608/spamd child udp 368 0 *:34604

Re: Spamassassin milter-spamc ...interdependencies?

2005-06-20 Thread Andy Jezierski
Dr Robert Young [EMAIL PROTECTED] wrote on 06/20/2005 12:48:21 PM: We are looking at upgrading from V2 to V3 of Spamassassin. The previous system person installed milter-spamc to link into sendmail with the v2 product (v2.6'ish I think). Since we are looking at the Spamassassin upgrade,

Problem with 3.1.0pre and Razor

2005-06-20 Thread Rosenbaum, Larry M.
I have installed SpamAssassin v3.1.0pre on a test system running Solaris 8, Perl 5.8.5, and Razor 2.67. I got the following message when I lint: # spamassassin --lint [15182] warn: razor2: razor2 check failed: No such file or directory Can't use an undefined value as a SCALAR reference at

Re: How to block this email??

2005-06-20 Thread Shelley Waltz
I had good luck eliminating this by using sa-learn. It took about 15 messages before the score went high enough to register as spam. Shelley Waltz Bryan Haase said: Does anyone have a rule that will score foreign characters or characters with the dashes on top? Below is example email that is

Re: possible wish list item

2005-06-20 Thread Matt Kettler
Craig Jackson wrote: Regarding the report that is made part of the header, instead of a summary of the email (which makes downloading tiresomely long even on a high speed connection), I would like to see only the text that tripped each particular test. Users often want to know what exactly in

RE: shared SQL DB

2005-06-20 Thread Matthew Yette
Hey Michael (or anyone else who sees this) - I'm in the process of switching over spamd to use mysql instead of flat files for user preferences - here's my dilemma: The doc for 2.6 (I'm using 3.04 but in principle I believe it's the same) makes not of making sure the correct username (email

RE: SA 3.1 SpamdForkScaling.pm Error

2005-06-20 Thread Jason Brunette
Yeah, I'm seeing that too, see the bug here: http://bugzilla.spamassassin.org/show_bug.cgi?id=4410 * Jason Brunette ([EMAIL PROTECTED]) * Excel.Net,Inc. - http://www.excel.net/ * (920) 452-0455 - Sheboygan/Plymouth area * (888) 489-9995 - Other areas, toll-free

Re: dynamic IP range and good RBL?

2005-06-20 Thread jpff
Ryan == Ryan L Sun [EMAIL PROTECTED] writes: Ryan Does dul.dnsbl.sorbs.net list all the dynamic IPs? Ryan Or just the dynamic IPs which fall in spamtrap? It includes IP addresses that are not dynamic as well. It seems to make unintelligent guesses as well ==John ffitch

Re: SA3.1 spamd userid

2005-06-20 Thread Theo Van Dinter
On Mon, Jun 20, 2005 at 11:34:26AM -0500, Andy Jezierski wrote: I've noticed that when starting up SA 3.1 the main spamd process doesn't change userid's like 3.0.x did. It stays as root but the child processes do switch over. Is this normal? Yes. The parent now stays as root so that

Re: How to block this email??

2005-06-20 Thread Sean Sowell
Bryan Haase asked Monday, June 20, 2005 0830: Does anyone have a rule that will score foreign characters or characters with the dashes on top? Below is example email that is not scoring at all for me. Thanks Bryan berton laurence [EMAIL PROTECTED] 6/18/2005 7:52 PM

Re: SpamAssassin 3.1.0pre1 PRERELEASE available!

2005-06-20 Thread Daryl C. W. O'Shea
Ben Hanson wrote: I get 139 errors regarding the 70_sare_whitelist.cf entries. from 3.1pre. Has the syntax for whitelist_from_rcvd changed? Ben This is due to the comments Bob had at the end of each entry, without a # before them. He was going to correct this prior to the 3.1 release. I

RE: SpamAssassin 3.1.0pre1 PRERELEASE available!

2005-06-20 Thread Larry Rosenman
The current one from SARE works fine :) And, the latest RDJ has support for all the SARE rules. LER -- Larry Rosenman http://www.lerctr.org/~ler Phone: +1 972-414-9812 E-Mail: ler@lerctr.org US Mail: 3535 Gaspar Drive, Dallas, TX 75220-3611 US

Re: SpamAssassin 3.1.0pre1 PRERELEASE available!

2005-06-20 Thread Kai Schaetzl
I installed on CentOS which I have never done before. Everything is okay except for one thing. I get [28414] warn: config: warning: description exists for non-existent rule HASHCASH_HIGH + 7 ever HASHCASH rule warnings in --lint all the other output is exactly like on my other non-CentOS

RE: SpamAssassin 3.1.0pre1 PRERELEASE available!

2005-06-20 Thread Matthew.van.Eerde
Kai Schaetzl wrote: 30_text_de.cf:lang de describe HASHCASH_HIGH Enthält korrekte Hashcash-Kennzeichnung ( 25 bits) 50_scores.cf:score HASHCASH_HIGH -5.000 Where's that warning coming from? Perhaps the ä? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic

Re: possible wish list item

2005-06-20 Thread cjackson
Justin Mason wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Kettler writes: Craig Jackson wrote: Regarding the report that is made part of the header, instead of a summary of the email (which makes downloading tiresomely long even on a high speed connection), I would like

Re[2]: SpamAssassin 3.1.0pre1 PRERELEASE available!

2005-06-20 Thread Robert Menschel
Hello Ben, Monday, June 20, 2005, 6:50:46 AM, you wrote: BH I get 139 errors regarding the 70_sare_whitelist.cf entries. from BH 3.1pre. Has the syntax for whitelist_from_rcvd changed? BH Ben Which version of 70_sare_whitelist.cf? What are the errors? Yes, the syntax for whitelist_from_rcvd

How to get sa-learn the original message of application/ms-tnef email?

2005-06-20 Thread Christian Purnomo
Hello All. We have a smarthost running spamassassin in the permiter, this host relays email for our internal domains to an M$ Exchange server in our private LAN. Spamassassin is doing a great job in filtering most spams. I get my MS Exchange users to drop any 'Undetected SPAM' to a folder

Re: Spamassassin milter-spamc ...interdependencies?

2005-06-20 Thread Dr Robert Young
I'll be using the SA 3.0.4 and not the pre version. Hopefully that will help. I'll have to check to see which version of milter-spamc they are using however. I was afraid the the products had to be built with version specific libraries, or something similar, that would make a simple

Re: Phishing: My rule and thoughts

2005-06-20 Thread Murty Rompalli
Thank you for the report but is it fair to run masses for filtering phishing emails ? Phishing emails are not sent using the same bulk mailing software spammers use. Spammers most of the time dont even understand SMTP 451 retry but phishermen do. Also, phish doesn't go with spam and ham..its

Re: Phishing: My rule and thoughts

2005-06-20 Thread jdow
From: Murty Rompalli [EMAIL PROTECTED] Quite fair - look at all the ham the rules hit. They are not very good rules. {^_^} Thank you for the report but is it fair to run masses for filtering phishing emails ? Phishing emails are not sent using the same bulk mailing software spammers use.

Re: Phishing: My rule and thoughts

2005-06-20 Thread Murty Rompalli
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi I did get this and other replies from list users! My rule does not assign a score of 5.0 (threshold to call it spam for sure). So, an email can still get a score of 4.0 from my phish block rule and still go through unless ofcourse you changed the

Re: Phishing: My rule and thoughts

2005-06-20 Thread Theo Van Dinter
On Mon, Jun 20, 2005 at 08:01:15PM -0400, Murty Rompalli wrote: Thank you for the report but is it fair to run masses for filtering phishing emails ? Sure, why not? Phish mails are spam. -- Randomly Generated Tagline: Special? Our longest phone conversation is 'Get over here.' - Ross on ER

Re: Phishing: My rule and thoughts

2005-06-20 Thread Theo Van Dinter
On Mon, Jun 20, 2005 at 08:05:32PM -0400, Murty Rompalli wrote: Also, I believe PGP signed messages cause a negative score. Can someone confirm this one, I am lazy after a long day. I know TRUSTED_HOSTS has a negative score to compensate, just dont know if PGP signed carries negative score

spamassassin smtp domino exchange passthru

2005-06-20 Thread SSK1
Our inbound/outbound SMTP mail is traversing via MessageLabs..   Cut a long story stort - I want to bypass messagelabs (costs) and implement an (in-house) Antispam solution.   (domain1.com) I have 12 (W2K/Linux) Domino Servers including the (w2k) Passthru Server. (domain2.com) I have 1 2003

Problems after update SA 2.64 = 3.0.4

2005-06-20 Thread Jim Knuth
Hallo und guten Morgen List, I`ve updated from SA 2.64 to 3.0.4. I use SA with amavisd-new 2.3.1. When I try spamassassin --lint -D comes: --snip warning: description for HTML_SHOUTING4 is over 50 chars warning: description for CLICK_TO_REMOVE_1 is over 50 chars warning: description for

Re: spamassassin smtp domino exchange passthru

2005-06-20 Thread Theo Van Dinter
On Tue, Jun 21, 2005 at 11:31:01AM +1000, SSK1 wrote: Basically I would like to know if it's possible to have a linux/SpamAssassin server receive smtp traffic and then pass it on to the passthru/exchange server once checked. If it is possible, apart from Spamassassin, what other ingredients do

Re: Problems after update SA 2.64 = 3.0.4

2005-06-20 Thread Theo Van Dinter
On Tue, Jun 21, 2005 at 03:41:41AM +0200, Jim Knuth wrote: I`ve updated from SA 2.64 to 3.0.4. I use SA with amavisd-new 2.3.1. When I try spamassassin --lint -D comes: warning: description exists for non-existent rule T_RCVD_IN_IADB_LIST_T Hrm. You seem to have some development rule files

Re: Problems after update SA 2.64 = 3.0.4

2005-06-20 Thread Jim Knuth
Hallo und guten Morgen Theo, Heute (am 21.06.2005 - 04:33 Uhr) schriebst Du: On Tue, Jun 21, 2005 at 03:41:41AM +0200, Jim Knuth wrote: I`ve updated from SA 2.64 to 3.0.4. I use SA with amavisd-new 2.3.1. When I try spamassassin --lint -D comes: warning: description exists for

Re: Problems after update SA 2.64 = 3.0.4

2005-06-20 Thread Theo Van Dinter
On Tue, Jun 21, 2005 at 04:59:30AM +0200, Jim Knuth wrote: warning: description exists for non-existent rule T_RCVD_IN_IADB_LIST_T Mmh. wget from http://www.apache.de/dist/spamassassin/source/Mail-SpamAssassin-3.0.4.tar.gz I`ts no development. Aha. So there are three things here. First,

Re: Problems after update SA 2.64 = 3.0.4

2005-06-20 Thread Jim Knuth
Hallo und guten Morgen Theo, Heute (am 21.06.2005 - 05:28 Uhr) schriebst Du: lang de describe T_RCVD_IN_IADB_LIST_T Senderechner in IADB-Liste (www.isipp.com) sorry, but that`s not all. lint has 187 issues detected. Which is (see attachment warning.txt) -- Viele Grüße, Kind regards,

Re: Problems after update SA 2.64 = 3.0.4

2005-06-20 Thread Theo Van Dinter
On Tue, Jun 21, 2005 at 06:05:10AM +0200, Jim Knuth wrote: sorry, but that`s not all. lint has 187 issues detected. Which is (see attachment warning.txt) The warnings are all covered by my previous message. The description over 50 chars warning is known and apparently unavoidable for German.

Re: Problems after update SA 2.64 = 3.0.4

2005-06-20 Thread Loren Wilton
Theo, I thought the warning on rule name length and description length had either been eliminated to drastically lengthened for non-English rules. Or was this only in the 3.1 stream? I know there was work done on this somewhere. Loren

Re: Phishing: My rule and thoughts

2005-06-20 Thread hamann . w
Thank you for the report but is it fair to run masses for filtering phishing emails ? Phishing emails are not sent using the same bulk mailing software spammers use. Spammers most of the time dont even understand SMTP 451 retry but phishermen do. Also, phish doesn't go with spam and ham..its

SA 3.04 and RHEL4, Net::DNS isn't working

2005-06-20 Thread Steven Stern
On a brand new RHEL4 installation, I've having problems with Net::DNS: debug: is Net::DNS::Resolver available? yes debug: Net::DNS version: 0.51 debug: trying (3) apache.org... debug: looking up NS for 'apache.org' debug: NS lookup of apache.org failed horribly = Perhaps your resolv.conf isn't