Re: Mac OS X Install broken

2005-08-03 Thread Matt Kettler
At 10:22 PM 8/3/2005, John Rudd wrote: When I install SpamAssassin on OS X, I notice a few oddities: 1) /usr/bin/spamassassin says its prefix is / 2) the rules are in /share/spamassassin instead of /usr/share or /usr/local/share Well, those are at least consistent with each other. If prefix

RE: spamd and exim

2005-08-03 Thread Herb Martin
> -Original Message- > From: Steven Dickenson [mailto:[EMAIL PROTECTED] > On Aug 3, 2005, at 9:52 PM, Herb Martin wrote: > > >> The message I am seeing in /var/log/exim_main.log is: > >> spam acl condition: cannot parse spamd output > >> H=(mailservername) [IP] F= temporarily rejected aft

Re: sa-stats.pl generates a zero report

2005-08-03 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris writes: > #Authors : Brad Rathbun <[EMAIL PROTECTED]> > http://www.computechnv.com/ > # : Bob Apthorpe <[EMAIL PROTECTED]> > http://www.cynistar.net/~apthorpe/ > # : Duncan Findlay <[EMAIL PROTECTED]> > > Can't re

Re: sa-stats.pl generates a zero report

2005-08-03 Thread jdow
From: "Chris" <[EMAIL PROTECTED]> As a side note the first scrip was written by: #Authors : Brad Rathbun <[EMAIL PROTECTED]> http://www.computechnv.com/ # : Bob Apthorpe <[EMAIL PROTECTED]> http://www.cynistar.net/~apthorpe/ # : Duncan Findlay <[EMAIL PROTECTED]> #

Re: spamd and exim

2005-08-03 Thread Steven Dickenson
On Aug 3, 2005, at 9:52 PM, Herb Martin wrote: The message I am seeing in /var/log/exim_main.log is: spam acl condition: cannot parse spamd output H=(mailservername) [IP] F= temporarily rejected after DATA I am seeing a LOT of these but have been watching for them in the Panic Log as they are

Mac OS X Install broken

2005-08-03 Thread John Rudd
When I install SpamAssassin on OS X, I notice a few oddities: 1) /usr/bin/spamassassin says its prefix is / 2) the rules are in /share/spamassassin instead of /usr/share or /usr/local/share 3) the new modules are in /Library/Perl instead of /System/Library/Perl (OS X's equiv. of /usr/libexe

Re: sa-stats.pl generates a zero report

2005-08-03 Thread Chris
On Wednesday 03 August 2005 08:50 pm, jdow wrote: > > The sa-stats.pl I run works quite well, maybe your configuration is not > > quite > > > right? Below is mine: > > > > # Configuration section > > my %opt = (); > > $opt{'logfile'} = '/var/log/mail/info';# Log file > > $opt{'sendmail'}

RE: spamd and exim

2005-08-03 Thread Herb Martin
> -Original Message- > From: Jonathan Guthrie [mailto:[EMAIL PROTECTED] > The message I am seeing in /var/log/exim_main.log is: > spam acl condition: cannot parse spamd output > H=(mailservername) [IP] F= temporarily rejected after DATA I am seeing a LOT of these but have been watching fo

Re: sa-stats.pl generates a zero report

2005-08-03 Thread jdow
From: "Chris" <[EMAIL PROTECTED]> > On Wednesday 03 August 2005 12:51 pm, Mike Pepe wrote: > > Hi all, > > > > Any pointers on how to make sa-stats.pl work? > > > > I ran it in debug mode and it's scanning the right log, but at the end I > > get a report with all zeros. > > > > Maybe I'm missing a

Re: sa-stats.pl generates a zero report

2005-08-03 Thread Chris
On Wednesday 03 August 2005 12:51 pm, Mike Pepe wrote: > Hi all, > > Any pointers on how to make sa-stats.pl work? > > I ran it in debug mode and it's scanning the right log, but at the end I > get a report with all zeros. > > Maybe I'm missing a perl module? > > sample report: > > Report Title

Re: spamd and exim

2005-08-03 Thread Steven Dickenson
On Aug 3, 2005, at 6:46 PM, Jonathan Guthrie wrote: The message I am seeing in /var/log/exim_main.log is: spam acl condition: cannot parse spamd output H=(mailservername) [IP] F= temporarily rejected after DATA This topic has come up a number of times on the Exim mailing list, but the answer

spamd and exim

2005-08-03 Thread Jonathan Guthrie
Hi there, I've been using SA for a while but not at a particularly technical level, and the answer has not leapt out at me from searching the list archives. I installed SA as part of a mail server for a client and he's seeing a problem I have not come across on my own server to date. Exim

RE: Load balancing spamd

2005-08-03 Thread email builder
> > > > How do you (make and) balance the calls to the AV servers? How do you > > (make > > and) balance the calls to the spamd machines? I am very interested in > > these > > details! > > We just call them in order case on the connection line. On two of the 4 > SMTP gateways we use node 1 as

RE: generating rule stats from spamd logs

2005-08-03 Thread Dallas L. Engelken
This would explain it. result: . 3 - AWL,BAYES_50,DNS_FROM_AHBL_RHSBL,HTML_90_100,HTML_IMAGE_RATIO_02,HTML_ME SSAGE,HTML_TAG_EXIST_TBODY,MIME_HTML_ONLY,SARE_OEM_S_PRICE,SARE_SUBLRNMR scantime=1.9,size=14453,mid=<[EMAIL PROTECTED] m>,bayes=0.515278005793156,autolearn=no Its looking for somethin

RE: sa-stats.pl generates a zero report

2005-08-03 Thread Matthew Yette
My fault - I saw the subject and immediately assumed it was the same. Whoops :( -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Dallas L.

RE: sa-stats.pl generates a zero report

2005-08-03 Thread Dallas L. Engelken
> > I'm having the same problem. I was having a bit of dialouge > with Dallas > - Glad to see I'm not the only one. This script is great - > can't wait until 1.01 ;) > Matt, he's talking about the distro sa-stats.pl... Look closer at this sample. d

Re: sa-stats.pl generates a zero report

2005-08-03 Thread jdow
It has not worked for several releases now. I have utterly given up on it. I bet this is why the SARE version was invented. {^_^} - Original Message - From: "Matthew Yette" <[EMAIL PROTECTED]> I'm having the same problem. I was having a bit of dialouge with Dallas - Glad to see I'm not

RE: sa-stats.pl generates a zero report

2005-08-03 Thread Matthew Yette
I'm having the same problem. I was having a bit of dialouge with Dallas - Glad to see I'm not the only one. This script is great - can't wait until 1.01 ;) -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAP

sa-stats.pl generates a zero report

2005-08-03 Thread Mike Pepe
Hi all, Any pointers on how to make sa-stats.pl work? I ran it in debug mode and it's scanning the right log, but at the end I get a report with all zeros. Maybe I'm missing a perl module? sample report: Report Title : SpamAssassin - Spam Statistics Report Date : 2005-08-03 Period

RE: generating rule stats from spamd logs

2005-08-03 Thread Dallas L. Engelken
v1.0 now has per-user and per-domain support http://www.rulesemporium.com/programs/sa-stats.txt # Per User and Per Domain Statistics... # -- # # ./sa-stats.pl -r postmaster #- this would give all stats for postmaster users, # regardless of w

Re: Question regarding meta rule handling

2005-08-03 Thread Matt Kettler
Sven Riedel wrote: > Hi, > > a while back someone kindly posted a rule here that matches on > empty mails: > > header __X Content-Type =~ /^(message|multipart)/i > rawbody __Y /\S/ > meta Z ( !X && !Y ) > > Now I find that Z matches on all mails - investigation shows > that Y matches on all non

RE: generating rule stats from spamd logs

2005-08-03 Thread Matthew Yette
No one has any thoughts on this? It's not a quick fix? :( -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Matthew Yette Sent: Friday, July

Re: Question regarding meta rule handling

2005-08-03 Thread Ilan Aisic
Don't know. This meta rule seems to work fine for me. Perhaps one of __X, __Y or Z is defined another rule. SA wouldn't warn you on it. Try changing their names to something longer and unique. > On 8/3/05, Sven Riedel <[EMAIL PROTECTED]> wrote: > > > > > > Hi, > > > > > On Wed, Aug 03, 2005 at

RE: Question regarding meta rule handling

2005-08-03 Thread Sven Riedel
Title: RE: Question regarding meta rule handling Hi, > On Wed, Aug 03, 2005 at 08:18:16AM +0200, Sven Riedel wrote: > > header __X Content-Type =~ /^(message|multipart)/i > > rawbody __Y /\S/ > > meta Z ( !X && !Y ) > > > > and yet the rule triggers for me. Doing a > Of course.  __X != X ..