Re: Seeing "check: exceeded time limit in ..." and need to resolve it

2021-11-12 Thread Henrik K
On Fri, Nov 12, 2021 at 07:49:00PM -0800, John Hardin wrote: > > What would be helpful here would be logging of when a rule *starts* > evaluation. Normally that would be painful, but for tracking a runaway it > would be useful. Perhaps I can code up something to capture that and log it > on a time

Re: Seeing "check: exceeded time limit in ..." and need to resolve it

2021-11-12 Thread John Hardin
On Fri, 12 Nov 2021, Philip Prindeville wrote: I got the message, saved it to a flat file, and ran "spamassassin -t -D rules < netdev.eml" and saw: ... Nov 12 11:45:38.048 [36367] dbg: rules: ran eval rule __ANY_TEXT_ATTACH_DOC ==> got hit (1) ... Nov 12 11:45:38.063 [36367] dbg: rules: r

Re: Fw: spam from gmail.com

2021-11-12 Thread Ɓukasz Michalski
On 11/12/21 00:43, Loren Wilton wrote: I have to admit I'd never paid much attention to the RCVD_IN_DNSWL_* scores on spam before. Looking at spam for last month, I don't have a single RCVD_IN_DNSWL_MED. But I do have 12 pretty blatent spams that hit RCVD_IN_DNSWL_HI. It makes me wonder just ho

Re: spam from gmail.com

2021-11-12 Thread Philip Prindeville
> On Nov 9, 2021, at 6:49 AM, Jared Hall wrote: > > On 11/8/2021 11:36 PM, Peter wrote: >> It seems that people aren't taking google as seriously any more. > First came Freemail. Then came SpamAssassin. I DO think that people take > Google seriously. There are just so many ways to deal wit

Seeing "check: exceeded time limit in ..." and need to resolve it

2021-11-12 Thread Philip Prindeville
Hi, I got an email from net...@vger.kernel.org that was a lengthy (422K) regression test report from a patch someone had submitted. I got the message, saved it to a flat file, and ran "spamassassin -t -D rules < netdev.eml" and saw: ... Nov 12 11:45:38.048 [36367] dbg: rules: ran eval rule __A

Re: MIME_BASE64_TEXT only on us-ascii

2021-11-12 Thread Bill Cole
On 2021-11-12 at 04:33:34 UTC-0500 (Fri, 12 Nov 2021 10:33:34 +0100) Philipp Ewald is rumored to have said: Hi folks, it's seems to be that spamassins dont check non ASCII Base64 decodes Mails. I cannot make that line of text into a coherent English sentence. Content-Type: text/html; cha

Re: Fw: spam from gmail.com

2021-11-12 Thread Greg Troxel
Arne Jensen writes: > Den 11-11-2021 kl. 20:21 skrev Greg Troxel: >> It's a really interesting question what DNSWL_MED ought to be for score. >> Given what MED is supposed to be: >> >>MediumRare spam occurrences, corrected promptly. >> >> -2.3 points seems entirely reasonable. >> >> But

Re: Fw: spam from gmail.com

2021-11-12 Thread Greg Troxel
Arne Jensen writes: > Den 12-11-2021 kl. 00:43 skrev Loren Wilton: >> I have to admit I'd never paid much attention to the RCVD_IN_DNSWL_* >> scores on spam before. > [...] >> Looking at spam for last month, [...] >> >> But I do have 12 pretty blatent spams that hit RCVD_IN_DNSWL_HI. >> It makes

MIME_BASE64_TEXT only on us-ascii

2021-11-12 Thread Philipp Ewald
Hi folks, it's seems to be that spamassins dont check non ASCII Base64 decodes Mails. Content-Type: text/html; charset="utf-8" Content-Transfer-Encoding: base64 [BAYES_99=3.5, BAYES_999=5, HTML_FONT_LOW_CONTRAST=0.001, HTML_MESSAGE=0.001, MIME_HTML_ONLY=0.723, RCVD_IN_BL_SPAMCOP_NET=1.347, RCVD