Compiling re2c with gcc 2.95

2009-04-02 Thread Mark
Has anyone been able to compile re2c with a gcc 2.95 compiler? I have a gcc43 also, but Perl was compiled with 2.95, so the Rule2XSBody stuff needs to be compiled with 2.95, too, right? Now I get this weird error: == Building for re2c-0.13.5 make all-am source='code.cc'

Re: [OT] Re: SpamAssassin is EXTREMLY slow

2009-04-02 Thread Benny Pedersen
On Wed, April 1, 2009 23:22, alexus wrote: loadplugin Mail::SpamAssassin::Plugin::DNSEval I had to disable it, if someone can suggest something in order to make it work faster i'm all ears apt-get install bind change /etc/resolv.conf to have just nameserver 127.0.0.1 restart bind test with

Re: [OT] Re: SpamAssassin is EXTREMLY slow

2009-04-02 Thread John Hardin
On Thu, 2 Apr 2009, Benny Pedersen wrote: On Wed, April 1, 2009 23:22, alexus wrote: loadplugin Mail::SpamAssassin::Plugin::DNSEval I had to disable it, if someone can suggest something in order to make it work faster i'm all ears apt-get install bind change /etc/resolv.conf to have just

Re: [OT] Re: SpamAssassin is EXTREMLY slow

2009-04-02 Thread John Hardin
On Wed, 1 Apr 2009, Chris wrote: Using a local caching nameserver with 127.0.0.1 as my nameserver, BIND 9.5.0-P2, Net::DNS 0.65. I notice that the slowest one shows: [14035] dbg: dns: Net::DNS version: 0.63 and the faster one shows: [17352] dbg: dns: Net::DNS version: 0.65 Why the

Re: Spam from an odd alias

2009-04-02 Thread McDonald, Dan
On Thu, 2009-04-02 at 00:11 +0100, Martin Gregorie wrote: Has anybody else noticed spam coming from dmulk.com? yes, but with a comma instead of a period. At least it was a link to www.dmulk,com -- Daniel J McDonald, CCIE #2495, CISSP #78281, CNX Austin Energy http://www.austinenergy.com

Re: quirks with bayes ?

2009-04-02 Thread LuKreme
On 1-Apr-2009, at 04:04, Lucio Chiappetti wrote: On Tue, 31 Mar 2009, LuKreme wrote: On 31-Mar-2009, at 11:13, Lucio Chiappetti wrote: And even resetting the AWL ... Why would you reset the AWL? I can't see any circumstance on which that would be a good idea. I had the impression that the

Using Mail::SpamAssassin::Client

2009-04-02 Thread Mark
As long as I can recall, SA has always had Mail::SpamAssassin::Client say: NOTE: This interface is alpha at best... I've examined and used it, though, and I must say it feels pretty 'beta' already to me. :) And it just feels a lot cleaner than shelling out to spamc from within a Perl daemon

Re: Using Mail::SpamAssassin::Client

2009-04-02 Thread Justin Mason
we should probably remove that warning. it's been stable (at least in the sense of the code not changing) for a long time now! --j. On Thu, Apr 2, 2009 at 13:46, Mark ad...@asarian-host.net wrote: As long as I can recall, SA has always had Mail::SpamAssassin::Client say: NOTE: This interface

Re: Spam from an odd alias

2009-04-02 Thread McDonald, Dan
On Thu, 2009-04-02 at 14:36 +0100, Martin Gregorie wrote: On Thu, 2009-04-02 at 08:11 -0500, McDonald, Dan wrote: On Thu, 2009-04-02 at 00:11 +0100, Martin Gregorie wrote: Has anybody else noticed spam coming from dmulk.com? yes, but with a comma instead of a period. indeed and with no

Re: RFC's suck

2009-04-02 Thread John Rudd
There are some interesting thoughts here about how to solve email's problems ... but I'd like to put forward some thoughts... I believe it was Cantor, of Cantor and Siegel, the first big and _well_known_ spammer of Usenet and the Internet (but not the first outright spammer of the internet), who

Re: RFC's suck

2009-04-02 Thread Joe Vieira
Seriously guys, Not to sound like a total jerk, but this is REALLY far OT, it is certainly interesting, but it's not appropriate for the SA list.. Joe Vieira John Rudd wrote: There are some interesting thoughts here about how to solve email's problems ... but I'd like to put forward

RE: Using Mail::SpamAssassin::Client

2009-04-02 Thread Mark
-Original Message- From: jma...@gmail.com [mailto:jma...@gmail.com] On Behalf Of Justin Mason Sent: donderdag 2 april 2009 16:03 To: Mark Cc: users@spamassassin.apache.org Subject: Re: Using Mail::SpamAssassin::Client we should probably remove that warning. it's been stable (at least

Re: user-db size, excess growth...limits ignored

2009-04-02 Thread LuKreme
On 1-Apr-2009, at 13:27, Linda Walsh wrote: *ouch* -- you mean each message writes out an 80MB white-list file? That's alot of I/O per message, no wonder spamd seems to be slowing down... No these are DB files. Data is added to them, this does not necessitate rewriting the entire

update Re: quirks with bayes ?

2009-04-02 Thread Lucio Chiappetti
We did something yesterday in the lines I described, which sort-of improved the situation. Also there was a mistake in one of the things I said: When I reported sa-learn -magic saying 30,000 spam 300,000 ham, it occurred that I was quoting the value for our secondary MX. The primary MX has a

Re: Using Mail::SpamAssassin::Client

2009-04-02 Thread Justin Mason
nope ;) On Thu, Apr 2, 2009 at 16:36, Mark ad...@asarian-host.net wrote: -Original Message- From: jma...@gmail.com [mailto:jma...@gmail.com] On Behalf Of Justin Mason Sent: donderdag 2 april 2009 16:03 To: Mark Cc: users@spamassassin.apache.org Subject: Re: Using

Re: Best practices and procedures for good results?

2009-04-02 Thread LuKreme
On 1-Apr-2009, at 18:23, Aran wrote: SpamAssassin version 3.1.7-deb3 This is not even close to being the latest version. This is *years* old. Still, like Karsten said, your problem is likely something else. Have you provided a pastebin of any false negatives yet? -- Ah, you're a

Re: RFC's suck

2009-04-02 Thread LuKreme
On 1-Apr-2009, at 01:55, John GALLET wrote: [repost from yesterday, I was not using the correct From address for this list...] Yes, it means that every Received: header in an email is valid with a valid IP, valid configuration (whatever that is deemed to be), and valid DNS. Only servers

Re: RFC's suck

2009-04-02 Thread LuKreme
On 1-Apr-2009, at 16:53, mouss wrote: do you guys know that designing a protocole is at least as hard as writing code? now, is there still anyone around who does believe in perfect code? protocol design is actually harder: This is precisely why it hasn't happened, and why the mail system is,

Re: update Re: quirks with bayes ?

2009-04-02 Thread LuKreme
On 2-Apr-2009, at 11:17, Lucio Chiappetti wrote: - clean the AWL of all entries with a single occurrence (including those u...@ourdomain|x.y where x.y is NOT our IP) Probably not a good idea. I would think a lot of those would be SPAM indicators you flushed out of your AWL. However:

Re: user-db size, excess growth...limits ignored

2009-04-02 Thread Linda Walsh
LuKreme wrote: On 1-Apr-2009, at 13:27, Linda Walsh wrote: *ouch* -- you mean each message writes out an 80MB white-list file? That's alot of I/O per message, no wonder spamd seems to be slowing down... No these are DB files. Data is added to them, this does not necessitate

spam from valid spammer domains

2009-04-02 Thread jp
We're receiving a bunch of mail from domains that appear built for spamming. Here's an example. pastelmedal.com spam comes from 66.132.203.125. This address isn't listed by spamhaus, surbl, or any of 122 blacklists at mxtoolbox.com. The email is here: http://www.midcoast.com/~jp/p.txt I get

OpenDNS and Spamassassin

2009-04-02 Thread Mike Bostock
Since starting to use OpenDNS and using their servers as forwarders for my server at home I am seeing loads of this below in the logs. named[]: unexpected RCODE (SERVFAIL) resolving 'btinternet.com.multi.uribl.com/A/IN': 208.67.220.220#53 I am assuming it is SpamAssassin causing this but I could

Re: spam from valid spammer domains

2009-04-02 Thread McDonald, Dan
On Thu, 2009-04-02 at 16:20 -0400, jp wrote: We're receiving a bunch of mail from domains that appear built for spamming. Here's an example. pastelmedal.com spam comes from 66.132.203.125. This address isn't listed by spamhaus, surbl, or any of 122 blacklists at mxtoolbox.com. Yup.

Re: OpenDNS and Spamassassin

2009-04-02 Thread Yet Another Ninja
On 4/2/2009 10:34 PM, Mike Bostock wrote: Since starting to use OpenDNS and using their servers as forwarders for my server at home I am seeing loads of this below in the logs. named[]: unexpected RCODE (SERVFAIL) resolving 'btinternet.com.multi.uribl.com/A/IN': 208.67.220.220#53 I am assuming

Re: spam from valid spammer domains

2009-04-02 Thread Karsten Bräckelmann
body AE_STOP_REMOVE5/\bwish\bto\bend\b.{0,20}(?: ... )/i I guess you don't get a lot of hits for that one. ;) \b is a zero-width assertion, matching a word boundary, but not matching an actual character. /wish\bto/ will never match... -- char

Re: user-db size, excess growth...limits ignored

2009-04-02 Thread Jonas Eckerman
Linda Walsh skrev: Yeah -- then this refers back to the bug about there being no way to prune that file -- it just slowly grows and needs to be read in when spamd starts(?) No. The AWL is stored in a database, and spamd does not read the whole database into memory. It just looks up and

Re: spam from valid spammer domains

2009-04-02 Thread McDonald, Dan
On Thu, 2009-04-02 at 23:08 +0200, Karsten Bräckelmann wrote: body AE_STOP_REMOVE5/\bwish\bto\bend\b.{0,20}(?: ... )/i I guess you don't get a lot of hits for that one. ;) \b is a zero-width assertion, matching a word boundary, but not matching an actual character. /wish\bto/

FW: OpenDNS and Spamassassin

2009-04-02 Thread Michael Scheidell
http://forums.opendns.com/comments.php?DiscussionID=3423page=1 Uribl should probaly get an rsync of the zones, if they are doing 50mm queries a day, imagine what will hit urlbl servers directly, since opendns caches the queries. (I think a opendns does this with some of the more

Re: OpenDNS and Spamassassin

2009-04-02 Thread RW
On Thu, 2 Apr 2009 21:34:26 +0100 Mike Bostock spamt...@yew-tree.co.uk wrote: Since starting to use OpenDNS and using their servers as forwarders for my server at home I am seeing loads of this below in the logs. named[]: unexpected RCODE (SERVFAIL) resolving

Re: OpenDNS and Spamassassin

2009-04-02 Thread Evan Platt
At 02:52 PM 4/2/2009, you wrote: Personally I wouldn't use OpenDNS on a server (except maybe for squid). It's not a normal DNS server, it does things that are aimed at browsers like spelling correction, and redirecting failures to it's own web servers. The latter presumably breaks the

Re: spam from valid spammer domains

2009-04-02 Thread John Hardin
On Thu, 2 Apr 2009, jp wrote: I get email from lots of different domains that have the same USPS mailing address(es) listed, either in Denver CO or Wilmington DE. Some specific rules for those addresses, perhaps? Which leads to the question: would having something analogous to URIBL for

RE: Annoying -w errors in syslog

2009-04-02 Thread Mark
From: Mark [mailto:ad...@asarian-host.net] Sent: donderdag 2 april 2009 21:14 To: users@spamassassin.apache.org Subject: Annoying -w errors in syslog To answer my own question, in log_message, in Logger.pm, I added this, prior to when the message is being written: return if

Re: FW: OpenDNS and Spamassassin

2009-04-02 Thread Rob McEwen
Michael Scheidell wrote: Uribl should probaly get an rsync of the zones, if they are doing 50mm queries a day, imagine what will hit urlbl servers directly, since opendns caches the queries. (I think a opendns does this with some of the more popular zones anyway) This would be good for

Re: OpenDNS and Spamassassin

2009-04-02 Thread Mike Bostock
In your message regarding Re: OpenDNS and Spamassassin dated 02/04/2009, Evan Platt said ... EP- At 02:52 PM 4/2/2009, you wrote:  Personally I wouldn't use OpenDNS on a server (except maybe for  squid). It's not a normal DNS server, it does things that are aimed at  browsers like spelling

Re: OpenDNS and Spamassassin

2009-04-02 Thread John Hardin
On Thu, 2 Apr 2009, Mike Bostock wrote: Noted the stuff about OpenDNS being not a proper DNS and, as I have squid set up but not in use, I may just point squid at it and go back to using my ISP's DNS servers as forwarders. You still need to keep an eye on it. Several (larger) ISPs have

Re: user-db size, excess growth...limits ignored

2009-04-02 Thread LuKreme
On 2-Apr-2009, at 14:10, Linda Walsh wrote: LuKreme wrote: On 1-Apr-2009, at 13:27, Linda Walsh wrote: *ouch* -- you mean each message writes out an 80MB white-list file? That's alot of I/O per message, no wonder spamd seems to be slowing down... No these are DB files. Data is

Re: OpenDNS and Spamassassin

2009-04-02 Thread Benny Pedersen
On Fri, April 3, 2009 00:31, Mike Bostock wrote: Noted the stuff about OpenDNS being not a proper DNS and, as I have squid set up but not in use, I may just point squid at it and go back to using my ISP's DNS servers as forwarders. bind works better without forwarders, it common error to

Re: OpenDNS and Spamassassin

2009-04-02 Thread RW
On Fri, 3 Apr 2009 01:12:17 +0200 (CEST) Benny Pedersen m...@junc.org wrote: On Fri, April 3, 2009 00:31, Mike Bostock wrote: Noted the stuff about OpenDNS being not a proper DNS and, as I have squid set up but not in use, I may just point squid at it and go back to using my ISP's DNS

Re: OpenDNS and Spamassassin

2009-04-02 Thread LuKreme
On 2-Apr-2009, at 15:52, RW wrote: On Thu, 2 Apr 2009 21:34:26 +0100 Mike Bostock spamt...@yew-tree.co.uk wrote: Since starting to use OpenDNS and using their servers as forwarders for my server at home I am seeing loads of this below in the logs. named[]: unexpected RCODE (SERVFAIL)

Re: OpenDNS and Spamassassin

2009-04-02 Thread LuKreme
On 2-Apr-2009, at 15:56, Evan Platt wrote: I logged into our server, and saw the OpenDNS was resolving EVERYTHING - blah.blah , nothing.nothing, etc. This is not a OpenDNS problem, this is a problem with the know-nothing who set it up for their system. I used OpenDNS for quite a while on

Re: RFC's suck

2009-04-02 Thread Kenneth Porter
On Thursday, April 02, 2009 12:13 PM -0600 LuKreme krem...@kreme.com wrote: You should be sending mail out through your ISP which should be accepting your outbound mail as from you since they know who you are. Once your ISP (with their correctly configured SASL enabled mailserver) passes it

Re: OpenDNS and Spamassassin

2009-04-02 Thread Benny Pedersen
On Fri, April 3, 2009 02:24, LuKreme wrote: Or am I wrong? I could be wrong. Bittorrent is slow to :) firefox with proxy to squid on a host with multi-isp uplinks is bad also, since it just use one isp lines that are slow dns is udp, and works very fast if one let it, what uribl can do is to

question please

2009-04-02 Thread Gary
Hi all, curious, is there any way to add a header showing the RelayCountries? Any help would be appreciated. TIA -- Gary

Re: One BUG found: userpref whitelist pattern BUG/DOC prob;

2009-04-02 Thread LuKreme
On 1-Apr-2009, at 13:12, Linda Walsh wrote: I found, BURIED, in the doc Mail::SpamAssassin::Conf the broken, primitive rules for white/black list patterns allowed: Whitelist and blacklist addresses are now file-glob-style patterns, so fri...@somewhere.com,

Re: OpenDNS and Spamassassin

2009-04-02 Thread Aaron Wolfe
On Thu, Apr 2, 2009 at 8:32 PM, LuKreme krem...@kreme.com wrote: On 2-Apr-2009, at 15:56, Evan Platt wrote: I logged into our server, and saw the OpenDNS was resolving EVERYTHING - blah.blah , nothing.nothing, etc. This is not a OpenDNS problem, this is a problem with the know-nothing who

Re: One BUG found: userpref whitelist pattern BUG/DOC prob;

2009-04-02 Thread LuKreme
On 1-Apr-2009, at 22:00, Matt Kettler wrote: white/blacklist entries can be created by untrusted end users, who could abuse them to DoS your mailserver. then it should be an option. Only TRUSTED end-users have access to a shell and to user_prefs on my system (and I suspect on lots of other

Re: OpenDNS and Spamassassin

2009-04-02 Thread Evan Platt
At 05:32 PM 4/2/2009, you wrote: On 2-Apr-2009, at 15:56, Evan Platt wrote: I logged into our server, and saw the OpenDNS was resolving EVERYTHING - blah.blah , nothing.nothing, etc. This is not a OpenDNS problem, this is a problem with the know-nothing who set it up for their system. I used

Re: question please

2009-04-02 Thread Matt Kettler
Gary wrote: Hi all, curious, is there any way to add a header showing the RelayCountries? Any help would be appreciated. TIA In reasonably recent versions of SA: add_header all Relay-Country _RELAYCOUNTRY_