Re: white_list is not working.....HELP!

2007-08-29 Thread Matt Kettler
Tony Guadagno wrote: > Bowie, > thanks for your response. Here is the test message > > > MAIL FROM:<[EMAIL PROTECTED]> SIZE=3803 > RCPT TO:<[EMAIL PROTECTED]> > Received: from smtpgw02.fujifilmesys.net ([65.249.152.151]) > by mail.guadagno.org with ESMTP; Tue, 28 Aug 2007 21:13:23 -0400 >

Re: spamd keeps haning on win32

2007-08-29 Thread Daryl C. W. O'Shea
MacDonald, Mike wrote: Im new at this so please bear with me. Im running windows 2003 r2 sp1 with dual xeon 3.4 ghz processors and 3 gb of ram The software is Mdaemon 9.6.2 running the latest version of spammassissin. When I look at the performance, spamd is using 100 megs or ram and cpu usage is

spamd keeps haning on win32

2007-08-29 Thread MacDonald, Mike
Im new at this so please bear with me. Im running windows 2003 r2 sp1 with dual xeon 3.4 ghz processors and 3 gb of ram The software is Mdaemon 9.6.2 running the latest version of spammassissin. When I look at the performance, spamd is using 100 megs or ram and cpu usage is almost nil My spamd kee

Re: Occasional spamassassin: Connection refused

2007-08-29 Thread mouss
Simon wrote: On 8/29/07, Mark Martinec <[EMAIL PROTECTED]> wrote: Simon, connect to transport spamassassin: Connection refused You do not have a transport named 'spamassassin' in Postfix master.cf file. The name of a transport comes from a content_filter setting, a FILTER acti

Re: SARE fraud ruleset rotted?

2007-08-29 Thread John D. Hardin
On Wed, 29 Aug 2007, Doc Schneider wrote: > John, > > I'm pretty much the maintainer of all the old rules for SARE. > > I think most of the 419 rules should be pretty much now in SA 3.2.x they > are called ADVANCED_FEE* and something like NIGERIAN_419* or something > like that. What about peopl

Re: Occasional spamassassin: Connection refused

2007-08-29 Thread Simon
On 8/29/07, Mark Martinec <[EMAIL PROTECTED]> wrote: > Simon, > > > connect to transport spamassassin: Connection refused > > You do not have a transport named 'spamassassin' in Postfix master.cf file. > > The name of a transport comes from a content_filter setting, a FILTER > action in an access m

Re: SARE fraud ruleset rotted?

2007-08-29 Thread Doc Schneider
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John D. Hardin wrote: > SARE ninjas lurking about: > > I tried to send the following to Matt Yackley via > [EMAIL PROTECTED], but that address bounced. Is Matt (or anyone > else) still maintaining the SARE fraud rulesets? > > Matt: > > I'm getting

SARE fraud ruleset rotted?

2007-08-29 Thread John D. Hardin
SARE ninjas lurking about: I tried to send the following to Matt Yackley via [EMAIL PROTECTED], but that address bounced. Is Matt (or anyone else) still maintaining the SARE fraud rulesets? Matt: I'm getting a lot of 419 spams that aren't hitting fraud rules in 99_sare_fraud_post25x.cf at all.

Re: spam reports

2007-08-29 Thread Michael Grant
Never mind. My problems were not coming from spamd at all. They were coming from milter-spamc which was calling spamd. Michael Grant On 8/29/07, Jari Fredriksson <[EMAIL PROTECTED]> wrote: > > I'm trying to create my own spam report template. > > > > spamassassin seems to be putting in an extra

Re: spam reports

2007-08-29 Thread Jari Fredriksson
> I'm trying to create my own spam report template. > > spamassassin seems to be putting in an extra return or > linefeed when I do this: > > clear_report_template > report _REPORT_ > > What I get in the headers is this: > > X-Spam-Report: \r\n * 0.6 NO_REAL_NAME From: does > not include

RE: white_list is not working.....HELP!

2007-08-29 Thread SM
At 08:32 29-08-2007, Tony Guadagno wrote: whitelist_from [EMAIL PROTECTED] Don't whitelist your own domain. It's better to use whitelist_from_rcvd instead of whitelist_from. Regards, -sm

Whitelist for misconfigured mail servers (was: Posioned MX is a bad idea)

2007-08-29 Thread Kenneth Porter
--On Wednesday, August 29, 2007 1:58 AM -0400 Aaron Wolfe <[EMAIL PROTECTED]> wrote: The first 24 hours seemed promising. However today (tues) we have two false positives, including one of their banks (!) and a small business that is their long time customer. It's scary that a bank has such a

spam reports

2007-08-29 Thread Michael Grant
I'm trying to create my own spam report template. spamassassin seems to be putting in an extra return or linefeed when I do this: clear_report_template report _REPORT_ What I get in the headers is this: X-Spam-Report: \r\n * 0.6 NO_REAL_NAME From: does not include a real name\r\n * -0.0

RE: white_list is not working.....HELP!

2007-08-29 Thread Tony Guadagno
YEP! that did it i will have to work around that. thanks VERY MUCH!! *** Tony Guadagno Guadagno Consulting [EMAIL PROTECTED] 585.703.6700 *** >>> Bowie Bailey <[EMAIL PROTECTED]> 8/29/2007 12:11 PM

Re: spamd keeps running at 99% CPU until i kill the process

2007-08-29 Thread John D. Hardin
On Wed, 29 Aug 2007, Richard Hobbs wrote: > Would you guys also recommend putting the command "/usr/bin/sa-update" > in the crontab as well? > > If so, should i be using any particular parameters? And how often should > it be run to be worthwhile? I run it weekly... /etc/cron.weekly/spamassassi

RE: white_list is not working.....HELP!

2007-08-29 Thread Bowie Bailey
Found it. Your test message starts with these two lines: MAIL FROM:<[EMAIL PROTECTED]> SIZE=3803 RCPT TO:<[EMAIL PROTECTED]> These are not valid header lines, so this messes up the header parsing. If you fix these headers to be formatted properly or do SA parsing before adding these headers, the

R: YAGI: Yet Another Great Idea - Some findings

2007-08-29 Thread Giampaolo Tomassoni
To whom it may concern. I had some test with this Great Idea and the TextCat plugin. I found that TextCat is a YAGP (Yet Another Great Plugin): it can be easily configured to detect the text language from up to 47 languages, can report the most probable ones and eventually can even not report anyt

Re: spamd keeps running at 99% CPU until i kill the process

2007-08-29 Thread Richard Hobbs
Hello, Would you guys also recommend putting the command "/usr/bin/sa-update" in the crontab as well? If so, should i be using any particular parameters? And how often should it be run to be worthwhile? Thanks again, Richard. Richard Hobbs wrote: > Hello, > > Thank you - this is now done! :-)

RE: white_list is not working.....HELP!

2007-08-29 Thread Tony Guadagno
Bowie, I did not include all the whitelistshere they are...also, do you see why I am getting all the header issues? whitelist_from smtpgw01.fujifilmesys.net whitelist_from [EMAIL PROTECTED] whitelist_from [EMAIL PROTECTED] whitelist_from [EMAIL PROTECTED] whitelist_from [EMAIL PROTECTED]

RE: white_list is not working.....HELP!

2007-08-29 Thread Bowie Bailey
The test message you included did not contain any of your whitelist addresses. If you want to test the whitelist, you have to use a message that will match. Bowie Tony Guadagno wrote: > Bowie, > thanks for your response. Here is the test message > > > > > > *

RE: white_list is not working.....HELP!

2007-08-29 Thread Tony Guadagno
Bowie, thanks for your response. Here is the test message MAIL FROM:<[EMAIL PROTECTED]> SIZE=3803 RCPT TO:<[EMAIL PROTECTED]> Received: from smtpgw02.fujifilmesys.net ([65.249.152.151]) by mail.guadagno.org with ESMTP; Tue, 28 Aug 2007 21:13:23 -0400 X-IronPort-AV: E=Sophos;i="4.19,319

Re: InnoDB as storage engine for sa_bayes

2007-08-29 Thread Alex Woick
> -rw-rw 1 mysql mysql 1010M Aug 28 08:25 ibdata1 > -rw-rw 1 mysql mysql 264M Aug 27 17:09 awl.ibd > -rw-rw 1 mysql mysql 112K Aug 28 08:25 bayes_expire.ibd > -rw-rw 1 mysql mysql 96K Aug 27 17:09 bayes_global_vars.ibd > -rw-rw 1 mysql mysql 468M Aug 27 21:11 bayes_seen.ibd >

RE: white_list is not working.....HELP!

2007-08-29 Thread Bowie Bailey
Tony Guadagno wrote: > Ok, > I am a little frustrated. I am missing something and I don't see > it. > > All I am trying to do is > > whitelist_from [EMAIL PROTECTED] > whitelist_from [EMAIL PROTECTED] > whitelist_from [EMAIL PROTECTED] > etc > > but it seems that there are no whitelist test

white_list is not working.....HELP!

2007-08-29 Thread Tony Guadagno
Ok, I am a little frustrated. I am missing something and I don't see it. All I am trying to do is whitelist_from [EMAIL PROTECTED] whitelist_from [EMAIL PROTECTED] whitelist_from [EMAIL PROTECTED] etc but it seems that there are no whitelist test running why? Content analysis details

SA locked up and seemingly dumped the DB we've been building

2007-08-29 Thread FH
When I got in Monday morning our mail server was almost completely locked up. I wasn't able to login remotely, I was eventually able to login on the terminal but that was only after pulling the network connection and giving it a little time. Once I got on I found a bunch of out of memory/swap spa

R: two supposedly identical SA boxes, with slightly different report output -- help find the diff?

2007-08-29 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: Dan Barker [mailto:[EMAIL PROTECTED] > > > > The main purpose of the FuzzyOcr's db was of course to avoid computing > the > OCR passes needed to decode the image text for known images. The > problem is > that the cache content is not searched for an exact ma

RE: two supposedly identical SA boxes, with slightly different report output -- help find the diff?

2007-08-29 Thread Dan Barker
The main purpose of the FuzzyOcr's db was of course to avoid computing the OCR passes needed to decode the image text for known images. The problem is that the cache content is not searched for an exact match of the key values (which are image type, width, height, number of colors and color frequ

Re: Re: integration with domino....linux

2007-08-29 Thread vitas1
richard venne <[EMAIL PROTECTED]> wrote on 29.08.2007 12:54:50: > Ok, so the next question would be how to make sure that thoses MTA > have the same valid mailboxse lists? > Domino could export the list under standard formats? openldap? text > plain files? > by the way, I've only one server,

Re: spamd keeps running at 99% CPU until i kill the process

2007-08-29 Thread Richard Hobbs
Hello, Thank you - this is now done! :-) I shall see how it goes... Richard. Anthony Peacock wrote: > Hi, > > Richard Hobbs wrote: >> Hello, > > Is this all correct? >>> Yes. Set up expiration in a cron job, once per day is usually fine. >> >> OK, will do - i assume "sa-learn --f

Re: Occasional spamassassin: Connection refused

2007-08-29 Thread Mark Martinec
Simon, > connect to transport spamassassin: Connection refused You do not have a transport named 'spamassassin' in Postfix master.cf file. The name of a transport comes from a content_filter setting, a FILTER action in an access map or header/body checks, or a transport map entry. The name of a

R: two supposedly identical SA boxes, with slightly different report output -- help find the diff?

2007-08-29 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Per conto di > snowcrash+sa > > hi andy, > > > For what it's worth, the fuzzyocr hashing is of very limited value, > and in > > many cases is a severe performance hit. I found that scanning the > hashes, > > due to

Re: two supposedly identical SA boxes, with slightly different report output -- help find the diff?

2007-08-29 Thread Mark Martinec
Andy Dills wrote: > For what it's worth, the fuzzyocr hashing is of very limited value, and in > many cases is a severe performance hit. I found that scanning the hashes, > due to the "fuzzy" nature, is more costly than just rescanning the file > with OCR, as *each* *and* *every* hash must be chec

Re: integration with domino....linux

2007-08-29 Thread richard venne
Ok, so the next question would be how to make sure that thoses MTA have the same valid mailboxse lists? Domino could export the list under standard formats? openldap? text plain files? by the way, I've only one server, so that I've to modify domino's port. Matthias Leisi a écrit : -B

Re: spamd keeps running at 99% CPU until i kill the process

2007-08-29 Thread Anthony Peacock
Hi, Richard Hobbs wrote: Hello, Is this all correct? Yes. Set up expiration in a cron job, once per day is usually fine. OK, will do - i assume "sa-learn --force-expire" is the command to run via cron, right? Yup! This is my crontab line: 00 22 * * * /usr/local/bin/sa-learn --force-e

Re: spamd keeps running at 99% CPU until i kill the process

2007-08-29 Thread Richard Hobbs
Hello, Anthony Peacock wrote: > Hi, > > Richard Hobbs wrote: >> Hello, >> >> John D. Hardin wrote: >>> On Tue, 28 Aug 2007, Richard Hobbs wrote: >>> Could the size of "bayes_seen" and "bayes_toks" be causing this timeout? >>> Yes. >>> If so, what can i do about this? >>> Disable au