Logcheck messages

I am now getting loads of these: Jul 24 08:46:57 d_baron spamd[5965]: spamd: still running as root: user not specified with -u, not found, or set to root, falling back to nobody scantime=7.6,size=1901,user=root,uid=65534,required_score=5.0,rhost=ip6- localhost,raddr=127.0.0.1,rport=36060,mid=<[EM

Re: GPG Signature Validation Failure

On Saturday 14 June 2008 23:50:33 Sahil Tandon wrote: > David Baron <[EMAIL PROTECTED]> wrote: > > Download succeeded but this failed. > > (mind the wrapping below) > > http://wiki.apache.org/spamassassin/SaUpdateKeyNotCrossCertified?highlight= >%28 update%29 Thanks. Did the trick.

GPG Signature Validation Failure

Download succeeded but this failed. Fix?

Re: PUPPIES FOR SALE

On Wednesday 30 January 2008, [EMAIL PROTECTED] wrote: > > First of all, let me say a big thank you, as it proves that my spamfilter > > is not yet filtering out spam from the Debian mailing list. > > I'd be interested in a filter that would work on a message like that.. Not > sure what the differ

Re: Huge server load problem with Exim and SpamAssassin

In a "split" configuration, where would these warn sets be placed? The sections of the combined "exim4.conf.template" also correspond to the individual files for splits. So ... where did you do this? Note that I am not using the 850_exim4-config_spamcheck_router but currently using procmail to r

Re: Greeting card

On Tuesday 31 July 2007, Rocco Scappatura wrote: > It is possible to block the spam sent by GreetingCards.com which invites > the receiver to access an URL and browse the ecard? > > I mean that spam which has subject similar to: > > You've received a greeting ecard from a Colleague! Mine stops it

Re: Stuff getting through

On Wednesday 25 July 2007, Bob Proulx wrote: > David Baron wrote: > > >   /etc/rc0.d/S35networking > > >   /etc/rc6.d/S35networking > > >   /etc/rcS.d/S40networking > > > > Is not the final run level 5. > > The default runlevel is 2 in Debian. Unl

Re: Stuff getting through

On Tuesday 24 July 2007, Bob Proulx wrote: > Those init.d files are not stock Debian.  They have been modified. > > However since the rc0.d and rcS.d files still exists with low numbers > then networking will start very early.  Those S99 files are simply red > herrings for you distracting you from

Re: Stuff getting through

On Tuesday 24 July 2007, Gene Heskett wrote: > On Tuesday 24 July 2007, David Baron wrote: > >> >> Humm, with my lashup here that Joanne helped me setup, > >> >> S78spamassassin starts a few copies of spamd, and fetchmail is > >> >> started m

Re: Stuff getting through

>> >Problem is that the S78 will start spamassassin but that start does not >> >necessarily get a valid rule-set. For that, the internet connection must >> > be up at the time. >> >> And why would it not be when the network start is S10network? > >I have: >/etc/rc0.d/S35networking >/etc/rc2.d/S99ne

Re: Stuff getting through

> >> Humm, with my lashup here that Joanne helped me setup, S78spamassassin > >> starts a few copies of spamd, and fetchmail is started much later in > >> S99local. Its fetchmail that calls procmail, and its procmail that > >> calls the spamd's, so there is no time that SA can be bypassed. > >> >

Re: Stuff getting through

On Monday 23 July 2007, Gene Heskett wrote: > On Monday 23 July 2007, David Baron wrote: > >>I mean the obvious stuff like "viagra" and such. Usually the spam is > >> caught but sporadically it does get through. > >> > >>What is happening. > &g

Re: Stuff getting through

>I mean the obvious stuff like "viagra" and such. Usually the spam is caught >but sporadically it does get through. >What is happening. Simply, there are no X-Spam headers on these (and none or some of the "ham" as well). In other words, messages are being delivered before sa is running! Origi

copy_config timeout?

Saw this in my logcheck: Jul 18 22:28:55 ip6-localhost spamd[10008]: spamd: copy_config timeout, respawning child process after 114 messages at /usr/sbin/spamd line 1130. Latest and greatest from Debian Sid. What's happening?

Stuff getting through

I mean the obvious stuff like "viagra" and such. Usually the spam is caught but sporadically it does get through. What is happening.

FuzzyOCR errors

Rarely hear from this utility since it only kicks in for marginal cases. This is what I got yesterday: Jun 18 22:55:53 d_baron spamd[5673]: FuzzyOcr: Errors in Scanset "ocrad" Jun 18 22:55:53 d_baron spamd[5673]: FuzzyOcr: Return code: 512, Error: ocrad: maxval > 255 in ppm "P6" file. Jun 18 22:

Re: Woke up one morning and found

>> David Baron wrote: >> > FuzzyOcr prep missing from its normal location and a few other errors as >> > well. What would cause this? >> > >> > Had the patched and ready originals available to restore the FuzzyOcr >> > stuff. However, I am st

Re: Woke up one morning and found

On Sunday 27 May 2007, Matt Kettler wrote: > David Baron wrote: > > FuzzyOcr prep missing from its normal location and a few other errors as > > well. What would cause this? > > > > Had the patched and ready originals available to restore the FuzzyOcr > > stuff.

Woke up one morning and found

FuzzyOcr prep missing from its normal location and a few other errors as well. What would cause this? Had the patched and ready originals available to restore the FuzzyOcr stuff. However, I am still getting this error: SpamAssassin Mail Filter Daemon: [13544] info: config: failed to parse line,

Re: Pamditherbw gone, but no pamthreshhold (REPOST)

On Tuesday 27 March 2007, Leon Kolchinsky wrote: > > -Original Message- > > From: David Baron [mailto:[EMAIL PROTECTED] > > Sent: Monday, March 26, 2007 5:31 PM > > To: users@spamassassin.apache.org > > Subject: Pamditherbw gone, but no pamthreshhold (REPOST)

Pamditherbw gone, but no pamthreshhold (REPOST)

Got no advice on this so reposting: Now getting loads of FuzzyOcr failed to execute pamditherbw. I have ppmtopgm but no pamtopnm and no pamthreshold. I have netpbm 2.10.0-11 from Debian Sid. So I commented out the missing stuff in FuzzyOcr.scansets, but in FuzzyOcr.preps, this was an either or

Pamditherbw gone, but no pamthreshhold

Now getting loads of FuzzyOcr failed to execute pamditherbw. I have ppmtopgm but no pamtopnm and no pamthreshold. I have netpbm 2.10.0-11 from Debian Sid. So I commented out the missing stuff in FuzzyOcr.scansets, but in FuzzyOcr.preps, this was an either or situfation. I do have a ppmdither.

netpbm 2.10

This version is now on Debian Sid. Do I go over to the newer function calls for FuzzyOcr or is they still not available (or does this matter)?

RE: FuzzyOcr Log Entries

>2007-01-09 08:47:15 [6426] Cannot find executable for pamthreshold >2007-01-09 08:47:15 [6426] Cannot find executable for pamtopnm >2007-01-09 08:47:15 [6426] Cannot find executable for tesseract >These are listed as helpers to the program. What needs to be installed to make >use of them and wh

Deleting SA headers on ham (SOLVED)

>Occasionally, I get false positives. I run the sa_learn to mark as ham. The >spamassassin spam headings remain. Is there a script or optiont that I might >use to remove them (restore message to original form) ? I am using kmail and have a "filter" rule for marking as ham. So .. 1. sa_learn 2 p

Re: FuzzyOcr 3.5.1 released

On Tuesday 09 January 2007 23:39, Dan Horne wrote: > > -Original Message- > > From: decoder [mailto:[EMAIL PROTECTED] > > Sent: Sunday, January 07, 2007 9:17 AM > > To: [EMAIL PROTECTED]; users@spamassassin.apache.org > > Subject: FuzzyOcr 3.5.1 released > > > > -BEGIN PGP SIGNED MESSAG

FuzzyOcr Log Entries

2007-01-09 08:47:15 [6426] Cannot find executable for pamthreshold 2007-01-09 08:47:15 [6426] Cannot find executable for pamtopnm 2007-01-09 08:47:15 [6426] Cannot find executable for tesseract These are listed as helpers to the program. What needs to be installed to make use of them and what is

Re: FuzzyOcr -- how do I know it is working?

On Monday 08 January 2007 18:34, Gary V wrote: > >Installed the Debian package. How do I know it is working? Are all those > >"SPAMMY" rules its? > > I looks like you are using amavisd-new. SPAMMY essentially means a message > scored between tag2_level and kill_level and is not directly related to

FuzzyOcr -- how do I know it is working?

Installed the Debian package. How do I know it is working? Are all those "SPAMMY" rules its?

Re: Deleting SA headers on ham

On Saturday 23 December 2006 20:39, Bob Proulx wrote: > David Baron wrote: > > Occasionally, I get false positives. I run the sa_learn to mark as ham. > > The spamassassin spam headings remain. Is there a script or optiont that > > I might use to remove them (restore mes

Deleting SA headers on ham

Occasionally, I get false positives. I run the sa_learn to mark as ham. The spamassassin spam headings remain. Is there a script or optiont that I might use to remove them (restore message to original form) ?

Re: White listing yahoo groups

On Tuesday 14 November 2006 17:01, Bill Moseley wrote: > I keep getting my yahoo groups account shut down because of too many > bounces. For one thing, their mail server is listed: > > Blocked - see > > Is there a recommended method for dealing w

Sa_learn and razor-report

Does sa_lean -spam ... feed razor report if installed? If not, does either feed their stdin message input back to stdout to enable chaining?

Re: How to set up Razor (SOLVED)

On Tuesday 07 November 2006 17:24, Gary V wrote: > > >Installed it off Debian Sid. > > >How do I get SA to make use of it? > > > >Thanks for all the helpful responses. > > > >I have it working fine, here is the idea: > >1. Most of the documentation is out of date! One needs do absolutely > >nothing

How to set up Razor (SOLVED)

>Installed it off Debian Sid. >How do I get SA to make use of it? Thanks for all the helpful responses. I have it working fine, here is the idea: 1. Most of the documentation is out of date! One needs do absolutely nothing. SA tests for an will use Razor, Phyzor, etc., if they be installed. 2. A

How to set up Razor

Installed it off Debian Sid. How do I get SA to make use of it?

Re: Webmin Ate My Rules

On Saturday 28 October 2006 19:46, David Baron wrote: > Regular expression body rules that I made in webmin-spamassassin were duely > devoured after I edited one of the scores. All the scorings are there but > none of the rules. Any way to get the back or must I start from scratch (or

Webmin Ate My Rules

Regular expression body rules that I made in webmin-spamassassin were duely devoured after I edited one of the scores. All the scorings are there but none of the rules. Any way to get the back or must I start from scratch (or simply trust in Bayes)?

Re: Anyone had the pleasure of this one?

got was missed by all 3 AV products I use (clam, bitdefender, > command). I submitted it to clamav and it's now caught as a variant of > trojan-small. > > David Baron wrote: > > (Virus attachment removed) > > > > -- Forwarded Message -- > >

Anyone had the pleasure of this one?

(Virus attachment removed) -- Forwarded Message -- Subject: Mail server report. Date: Saturday 21 October 2006 18:42 From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Mail server report. Our firewall determined the e-mails containing worm copies are being sent from your computer.

Re: postcard exploit email

On Monday 11 September 2006 18:12, John D. Hardin wrote: > Maybe we need a base rule for URL links directly to executable > content... > > href="http://www.canaltv.org/postcard.gif.exe";>http://www.e-cards.com/view/ >CR3090Ztyw5g527673XzW > Any virus checkers pick this up? Been getting a lot of "

Re: פריצת דרך מאתגרת

Local for HEBREW is not in this list. > Windows-1255 > > and apparently with locales > > DB<6> x @locales > 0 'en' > 1 'th' > 2 'it' > 3 'en_US' > > Mail::SpamAssassin::Locales::is_charset_ok_for_locales($1, @locales) > > returns true > > Mail::SpamAssassin::Locales::is_charset_ok_for_locales(

Re: users@spamassassin.apache.org

On Sunday 13 August 2006 18:44, Theo Van Dinter wrote: > On Sun, Aug 13, 2006 at 09:08:50AM -0400, Michael Di Martino wrote: > > So how does razor differ over SA's ruleset? > > Razor compares MIME part hashes and URI domain hashes to a central > database where people have reported that "this is spa

Razor vs Pyzor

Which is best and what do these actauly offer over spamassassin's own rulesets?

Re: A lot of this going around

On Monday 07 August 2006 21:34, Theo Van Dinter wrote: > On Mon, Aug 07, 2006 at 09:28:12PM +0300, David Baron wrote: > > >Aug  7 18:04:30 d_baron spamd[28549]: bayes: write failed to Bayes > > >journal /home/david/.spamassassin/bayes_journal (0 of 3624)! > > > >

A lot of this going around

Aug  7 18:04:30 d_baron spamd[28549]: bayes: write failed to Bayes journal /home/david/.spamassassin/bayes_journal (0 of 3624)! Getting numerous messages of this form. Things seem to be working normally! (Note that sa-update failed this morning due to problems at the site.)

RE: A lot of this going around

>Aug  7 18:04:30 d_baron spamd[28549]: bayes: write failed to Bayes >journal /home/david/.spamassassin/bayes_journal (0 of 3624)! >Getting numerous messages of this form. Things seem to be working normally! >(Note that sa-update failed this morning due to problems at the site.) Also these: Aug

Re: Am I wasting my time with SpamCop?

On Saturday 05 August 2006 20:24, Benny Pedersen wrote: > On Thu, August 3, 2006 16:13, David Baron wrote: > > SpamCop has disabled subscriptions to mailing lists several times because > > of erroneous alerting. I have reported them to my provider's "abuse" &g

Re: Am I wasting my time with SpamCop?

On Wednesday 02 August 2006 23:09, Zinski, Steve wrote: > I use SpamCop to report my spam. > > I use the SpamHaus RBL as a first line of defense then I use > SpamAssassin to catch the rest of the spam coming to my server. > > Am I wasting my time? Should I just delete low-scoring spam and let the >

Getting a lot of these despite "flock"

>From logcheck: un 29 15:08:41 d_baron spamd[5955]: bayes: cannot open bayes databases /home/david/.spamassassin/bayes_* R/W: lock failed: Interrupted system call Jun 29 15:09:07 d_baron spamd[5955]: bayes: cannot open bayes databases /home/david/.spamassassin/bayes_* R/W: lock failed: Interrupt

Orphaned Bayes Lock File

This occurs from time to time so bayes databases cannot be opened. Is there an option to remove any locks on startup or after idle period?

Re: A lot of these going around

>On Thursday 18 May 2006 16:36, Ronald Nsubuga wrote: >> check the retry time and what os are u running pliz and the version you are >> using for spamassasin? >> >retries less than 1 minute. Debian Sid, SA 3.1.1 Bunch of these error messages seem to happening every few (five?) hours.

Re: A lot of these going around

On Thursday 18 May 2006 16:36, Ronald Nsubuga wrote: > check the retry time and what os are u running pliz and the version you are > using for spamassasin? > retries less than 1 minute. Debian Sid, SA 3.1.1

Re: A lot of these going around

On Thursday 18 May 2006 22:50, Matt Kettler wrote: > David Baron wrote: > > On Thursday 18 May 2006 20:40, Matt Kettler wrote: > >> David Baron wrote: > >>> May 18 11:50:22 d_baron spamc[5797]: connect(AF_INET) to spamd at > >>> 127.0.0.1 fail

Re: A lot of these going around

On Thursday 18 May 2006 20:40, Matt Kettler wrote: > David Baron wrote: > > May 18 11:50:22 d_baron spamc[5797]: connect(AF_INET) to spamd at > > 127.0.0.1 failed, retrying (#1 of 3): Connection refused > > > > Seems harmless though annoying. > > Fix? > > Is spamd running? Of course.

A lot of these going around

May 18 11:50:22 d_baron spamc[5797]: connect(AF_INET) to spamd at 127.0.0.1 failed, retrying (#1 of 3): Connection refused Seems harmless though annoying. Fix?

Re: Increase overall preformance

On Tuesday 16 May 2006 18:50, Theo Van Dinter wrote: > On Tue, May 16, 2006 at 11:42:56AM -0400, Benjamin Adams wrote: > > Spamassasin marked 1477 messages and missed 755 that where spam. > > Seems unusual. > > > what is the variable to drop the required in 3.1? > > I is it still required_score? >

Sa-update working, but spams getting through

It seems that my regexp rules are not being hit, once more. I am running with --siteconfigpath /etc/mail/spamassassin which has locat.cf which has these rules. This worked yesterday and earlier today.

Another New Problem, cannot open bayes databases

spamd[1697]: bayes: cannot open bayes databases .../.spamassassin/bayes_* R/W: lock failed: File exists. I get a bunch of these now. The ~/.spamassassin directory has:ls auto-whitelist bayes_seen bayes_toks.expire6293 bayes_journal bayes_toks user_prefs They are NOT in the locate database.

Re: Even More Sa-update Problems

On Sunday 14 May 2006 21:24, Andrew wrote: > > I have this working fine. However, once that 0300011 directory > > exists, all my custom rules (i.e. bayes, regex tests, etc) are no longer > > working and most all spams get through! > > > > Took it off once again. Something needs be modified

Re: Even More Sa-update Problems

> > > > I have this working fine. However, once that 0300011 > > > > directory exists, all my custom rules (i.e. bayes, regex tests, etc) > > > > are no longer working and most all spams get through! > > > > > > Your custom rules are all located in /etc/mail/spamassassin and not > > > /usr/

Re: Even More Sa-update Problems

On Sunday 14 May 2006 20:15, Theo Van Dinter wrote: > > I have this working fine. However, once that 0300011 directory > > exists, all my custom rules (i.e. bayes, regex tests, etc) are no longer > > working and most all spams get through! > > Your custom rules are all located in /etc/mail/

Even More Sa-update Problems

I have this working fine. However, once that 0300011 directory exists, all my custom rules (i.e. bayes, regex tests, etc) are no longer working and most all spams get through! Took it off once again. Something needs be modified before this can be used.

Re: A few more sa-update questions

That empty .../rules000300010001 directory will prevent Spamassassin from working so removing it if it be empty is a needed fix. I did so manually. Enabling port 8090 allowed sa_update to work correctly so all's well that ends well. I would want to place spamassassin.org IP into my DMZ rather t

Re: WebGUI for Spamassassin?

On Friday 12 May 2006 11:47, Patrick Baeumel wrote: > Hi Folks, > > is there any WebGUI for training and managing Spamassassin like DSPAM uses > one? > > Anyone got any Links for me? ;) Webmin. Lets you enter rules as well.

Re: The New SpamAssassin sa-update

> David Baron wrote: > > 1. Depends on some PERL packages: libarchive-tar-perl, libio-zlib-perl. > > Debian > > also should depend on libwww-perl > > Did you file a bug report? No, I did not. If Debian maintainers are responsible for this, I will. Easy enough. Poster

Re: The New SpamAssassin sa-update

On Wednesday 10 May 2006 23:04, Matt Kettler wrote: > David Baron wrote: > > 1. Depends on some PERL packages: libarchive-tar-perl, libio-zlib-perl. > > Debian packages did not enforce this dependency. I installed them > > manually. > > > > 2. Fails after several

The New SpamAssassin sa-update

1. Depends on some PERL packages: libarchive-tar-perl, libio-zlib-perl. Debian packages did not enforce this dependency. I installed them manually. 2. Fails after several time outs with: http: request failed: 500 read timeout: 500 read timeout error: no mirror data available for channel updates.s

Re: Spamassassin spamming system?

On Monday 08 May 2006 18:18, Chris Santerre wrote: > > > No hang up but it does load a lot of plugins. If all this stuff must > > > be loaded for each message, this could bog things down, > > > > 'twould seem. > > > > It will load for each message if you are calling the "spamassassin" > > program d

Re: Spamassassin spamming system?

On Monday 08 May 2006 17:06, Richard Collyer wrote: > David Baron wrote: > > Not really, but lots of nice instances are really bogging down the system > > when a lot of emails are being processed. They are run nice 15. How might > > I reduce this problem? > > > >

Spamassassin spamming system?

Not really, but lots of nice instances are really bogging down the system when a lot of emails are being processed. They are run nice 15. How might I reduce this problem? Using a debian Sid, exim4, mail retrieved by fetchmail. Spamassassin and clamd run through procmail.