[Mimedefang] Adding new From: variable

2007-04-11 Thread Philip Prindeville
Is it worth adding From:fullname and From:comment to handle the "Full Name" and (comment) fields of the From: line? I'm thinking something like: header L_LUX_CAPITALFrom:fullname =~ /^The Lux Capital$/ ... might be handy, in addition to From:raw and From:addr. File a bug for the enhanceme

Botnet 0.7: ipinhostname hit when no rdns

2007-04-11 Thread Matthias Keller
Hi I've got a problem with botnet. First of all, it seems to fail to resolve this IP even tough if I run host 194.145.123.133 on this server, it resolves correctly to dmserver04.dannemann.com But then it assumes the rdns is the ip itself and hits the ipinhostname which is totally inappropriate.

Re: whitelisting X-X-Sender Mail address

2007-04-11 Thread Matt Kettler
sushma wrote: > > Hi All, > Could we whitelist X-X-Sender mail ID in local.cf, like what we do > for To and From mail ID (whitelist_to and whitelist_from). > You could set your envelope_sender_header to X-X-Sender, then whitelist_from should match it. By default SA honors X-Sender, but AFAIK i

RE: sa-update question

2007-04-11 Thread Kurt Buff
From: Daryl C. W. O'Shea [mailto:[EMAIL PROTECTED] > > 1) My install of FreeBSD 6.2 doesn't have /var/lib, let along > > /var/lib/spamassassin, so I used an --updatedir of > > /usr/local/etc/mail/spamassassin/sa-updates, which seems to > work. Is this > > reasonable, or will it conflict with anyth

Vpopmail + qmail_scanner + SA

2007-04-11 Thread Cosmosis
I am also seeing a lot of this in the logs: Apr 11 15:32:02 localhost spamd[553]: spamd: handle_user unable to find user: '[EMAIL PROTECTED]' I assume the problem is that the way spamc is called by qmail_Scanner it doesnt know how to look at vpopmail and check for user lists. Anyone know how I

Qmail_scanner + SA - spf.pm error

2007-04-11 Thread Cosmosis
I am seeing a lot of the following in my log files: Apr 11 15:45:21 localhost spamd[553]: Use of uninitialized value in concatenation (.) or string at /usr/local/perl/lib/site_perl/5.8.8/Mail/SpamAssassin/Plugin/SPF.pm line 289, line 49. I have the most recent version of Mail::SPF::Query (1.999

REW: sa-update question

2007-04-11 Thread Kurt Buff
Nuts. Didn't send this to the list. Sorry. Kurt From: Daryl C. W. O'Shea: > Kurt Buff wrote: > > > 3) Lastly, what is this line all about?: > > Can't locate object method "finish" via package > > "Mail::SpamAssassin::Timeout" at > > > /usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Pl

Low Scoring MC/MS scam spam

2007-04-11 Thread LuKreme
Only scored 2.4 ?? I'm amazed it only hit BAYES_50 my MTA did not add the following headers: X-Status: X-Keywords: NotJunk $NotJunk X-UID: 4570 -- You try to shape the world to what you want the world to be. Carving your name a thousand times won'

Re: sa-update question

2007-04-11 Thread Daryl C. W. O'Shea
Kurt Buff wrote: From: Daryl C. W. O'Shea: Kurt Buff wrote: 3) Lastly, what is this line all about?: Can't locate object method "finish" via package "Mail::SpamAssassin::Timeout" at /usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PluginH andler.pm line 187. I'm running SA 3.1.8. IIR

whitelisting X-X-Sender Mail address

2007-04-11 Thread sushma
Hi All, Could we whitelist X-X-Sender mail ID in local.cf, like what we do for To and From mail ID (whitelist_to and whitelist_from).

Re: sa-update question

2007-04-11 Thread Theo Van Dinter
On Wed, Apr 11, 2007 at 09:58:58AM -0700, Kurt Buff wrote: > New installation on FreeBSD 6.2, ran 'sa-update -D', got the following > output, which I've snipped to highlight the questions I have: > > 1) I've added this from ports with pkg_add: > [11431] dbg: diag: module not installed: Net::Ident

Re: sa-update question

2007-04-11 Thread Daryl C. W. O'Shea
Kurt Buff wrote: 3) Lastly, what is this line all about?: Can't locate object method "finish" via package "Mail::SpamAssassin::Timeout" at /usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PluginHandler.pm line 187. I'm running SA 3.1.8. IIRC old versions of the FuzzyOCR plugin cause thi

RE: sa-update question

2007-04-11 Thread Kurt Buff
> -Original Message- > From: Robert Fitzpatrick [mailto:[EMAIL PROTECTED] > Sent: Wednesday, April 11, 2007 10:08 > To: Kurt Buff > Cc: 'users@spamassassin.apache.org' > Subject: Re: sa-update question > > > On Wed, 2007-04-11 at 09:58 -0700, Kurt Buff wrote: > > New installation on FreeB

Undefined dependency when using OpenProtect sa-update channel?

2007-04-11 Thread Paul Hutchings
As subject really, running 3.1.7 with latest spamassassin rules via sa-update, when I subscribe/download the channel at saupdates.openprotect.com and lint (which sa-update appears to do in debug mode) I get: [20029] info: rules: meta test __SARE_HEAD_FALSE has undefined dependency '__FROM_AOL_COM'

Re: sa-update question

2007-04-11 Thread Robert Fitzpatrick
On Wed, 2007-04-11 at 09:58 -0700, Kurt Buff wrote: > New installation on FreeBSD 6.2, ran 'sa-update -D', got the following > output, which I've snipped to highlight the questions I have: > > 1) I've added this from ports with pkg_add: > [11431] dbg: diag: module not installed: Net::Ident ('requi

Botnet jr_rfc1912.cf

2007-04-11 Thread Robert Fitzpatrick
Are these rules found in the Botnet source folder additional rules that can be used or is this what Botnet is based on? http://people.ucsc.edu/~jrudd/spamassassin/jr_rfc1912.cf Also, I posted a response to an earlier thread, is there a way to bypass Botnet for a destination mail server or domain

sa-update question

2007-04-11 Thread Kurt Buff
New installation on FreeBSD 6.2, ran 'sa-update -D', got the following output, which I've snipped to highlight the questions I have: 1) I've added this from ports with pkg_add: [11431] dbg: diag: module not installed: Net::Ident ('require' failed) 2) I'm assuming that I'll have to add this via CP

Re: Spamassassin and memory utilization

2007-04-11 Thread maillist
Joey Davis wrote: Sorry, I intended to included this entry from the messages log: Apr 10 00:00:02 msop sendmail[1622]: unable to dlopen /usr/lib/sasl2/libcrammd5.so.2: /usr/lib/sasl2/libcrammd5.so.2: failed to map segment from shared object: Cannot allocate memory Thanks, Joey -Origina

Re: Bypassing BOTNET rules

2007-04-11 Thread Robert Fitzpatrick
On Tue, 2007-04-10 at 07:18 -0700, John Rudd wrote: > > Depending on which bypass/exemption you're going to use, either > 4servers\.com or the IP address are what you want to use. > > The "bluehill.com" part is the smtp HELO argument, and botnet currently > ignores that. > > Thanks! Is there

RE: OEM software spam-

2007-04-11 Thread Jean-Paul Natola
> > I'm getting killed with a slew of "OEM SOFTWARE" spams > > I'm trying to add scores to these as they are not scoring anything at all > > 0.0 HTML_MESSAGE BODY: HTML included in message > Not a direct indicator as spam. A ton of ham hits this rule > 0.0 RCVD_IN_PBLRBL

RE: Spamassassin and memory utilization

2007-04-11 Thread Joey Davis
Sorry, I intended to included this entry from the messages log: Apr 10 00:00:02 msop sendmail[1622]: unable to dlopen /usr/lib/sasl2/libcrammd5.so.2: /usr/lib/sasl2/libcrammd5.so.2: failed to map segment from shared object: Cannot allocate memory Thanks, Joey -Original Message- From:

Re: Spamassassin and memory utilization

2007-04-11 Thread Richard Frovarp
Joey Davis wrote: I am running into memory allocation problems and am not sure how to resolve it. My question: Is it advisable to limit the number of child processes started by spamassassin in my situation. I'm green and not sure how to handle this. I am on a VPS with thirty email users.

Spamassassin and memory utilization

2007-04-11 Thread Joey Davis
I am running into memory allocation problems and am not sure how to resolve it. My question: Is it advisable to limit the number of child processes started by spamassassin in my situation. I'm green and not sure how to handle this. I am on a VPS with thirty email users. Tasks: 21 total,