Re: Spamassassin Timeout error

ill supported/maintained. This link may be more useful: http://www.exim.org/exim-html-current/doc/html/spec_html/ch-content_scanning_at_acl_time.html Typically we limit the resources SA uses by message size (done by Exim), and set a timeout for SA (done by SA using 'time_limit' in our local.c

Re: Spamassassin Timeout error

it. You might want to check the SA and exim logs to see what is going on, and run 'top' to see how busy the servers get. John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001

Re: Rules not working

#x27; file and see the flow of the message through exim. In particular what happens to it when SA is called (if it is called). (I assume you are using 'spam' in some ACL to call spamassassin.) John. -- John Horne Tel: +44 (0)1752 587287 Plymouth University, UK Fax: +44 (0)1752 587001

Re: Using sa-compile are local rules compiled?

On Thu, 2013-04-18 at 14:08 +0100, RW wrote: > On Wed, 17 Apr 2013 21:40:33 +0100 > John Horne wrote: > > > Hello, > > > > We are running SpamAssassin 3.3.2 on a CentOS 5.9 server. sa-update > > runs via a daily cron job, and we have modified that to run >

Using sa-compile are local rules compiled?

e we would have to re-compile all the rules before restarting SpamAssassin? Thanks, John. -- John Horne, Plymouth University, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001

Checking Received headers

Thanks, John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001

Re: New plugin: DecodeShortURLs

On Mon, 2010-10-04 at 22:55 +0100, John Horne wrote: > > I grabbed a copy of the above plugin and tried it this afternoon (on a > CentOS 5.5 system). We log all our spamd messages to /var/log/maillog > via syslog. For the plugin I disabled all the options except > 'url_shorten

Re: New plugin: DecodeShortURLs

|mail' and that made no difference. I also tried commenting out the 'syslog' calls, and used backtick calls to '/usr/bin/logger' instead. The same problem happened. If I take the plugin out, then all messages from spamd go to /var/log/maillog as before. Anyone any ideas as

Re: Problem matching newline in body

On Fri, 2010-05-21 at 06:53 -0700, John Hardin wrote: > On Fri, 21 May 2010, John Horne wrote: > > > Hello, > > > > Can you tell it's Friday afternoon? What should be a simple problem > > always seems to become a nightmare on Friday afternoons! :-) > >

Re: Problem matching newline in body

On Fri, 2010-05-21 at 15:51 +0200, Yet Another Ninja wrote: > On 2010-05-21 15:40, John Horne wrote: > If I send a message containing: > > some text > userid: > some more text ... > > > > Can someone show me how to match a newline character in the above

Problem matching newline in body

that too didn't work. Can someone show me how to match a newline character in the above rule please? John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001

Re: Yahoo/URL spam

n|ru)\/?[^ > ]{0,20}[a-z]{0,10}$/msi ^ The original had [^a-z] John. -- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287Fax: +44 (0)1752 587001

Re: spams to abuse@ id

those scoring over 18). It makes it manageable. John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: john.ho...@plymouth.ac.uk Fax: +44 (0)1752 587001

Re: Malware list Q

warepatrol with our central squid web caches. Not sure about effectiveness of it though, really should dig out some stats for it perhaps! John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: john.ho.

Re: SA report header added to ham mail

On Wed, 2009-07-01 at 01:14 +0200, Karsten Bräckelmann wrote: > On Tue, 2009-06-30 at 21:57 +0100, John Horne wrote: > > However, as far as I can tell, the X-Spam-Report header gets added to > > ham mail as well as spam. For example: > > > >X-spam-report: Sc

SA report header added to ham mail

te is seeming to happen anyway)? Thanks, John. -- ------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: john.ho...@plymouth.ac.uk Fax: +44 (0)1752 587001

Spamd crash - redhat startup script problem?

bit more aggressive in its checking that SA has actually stopped before trying to start it again? I think I would rather that more time was spent on ensuring that SA was stopped, so that it could then start, rather than it completely failing and the server being left without SA running. Joh

Re: sought rules updates

On Tue, 2008-12-09 at 22:54 -0700, LuKreme wrote: > On 9-Dec-2008, at 17:09, John Horne wrote: > > Try: > > > >sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org > > Ok, that gives me no error (where did you find/get the 6C6191E3?). It > sits for abou

Re: sought rules updates

-:-- --:--:-- > --:--:-- 1291k > $ sa-update --import GPG.KEY > $ sa-update --channel sought.rules.yerp.org > error: GPG validation failed! > Try: sa-update --gpgkey 6C6191E3 --channel sought.rules.yerp.org John. -- -

Logging additional info on rule matches

ave things such as the Subject line and the sender logged. Is this possible - perhaps by invoking 'logger'? Thanks, John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 587287 E-mail: [EMAIL PROTECTED]

Re: pyzor: check failed: internal error

e of your running version to see if it has the patches applied. Having said all that, under FC4 pyzor (patched) still seems to show these errors. John. -- ------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [E

Re: Spamd child states?

On Wed, 2006-09-06 at 17:17 +0100, John Horne wrote: > > > I get the feeling that something is wrong here. I have restarted SA, and > grepped the log file. It shows: > > === > prefork: child states: BI &g

Re: Spamd child states?

John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839

Re: Spamd child states?

=== The process just sits there in this loop of some sort, and never seems to do any actual spam processing. Any ideas about this? Thanks, John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839

RE: Spamd child states?

On Wed, 2006-09-06 at 16:03 +0100, John Horne wrote: > > > The server has 2GB of ram. It runs an MTA and SA, but does not do virus > checking. I only installed 3.1.4 yesterday, so it is a little early to > say if there are problems. However, I am seeing in the logs messag

RE: Spamd child states?

On Wed, 2006-09-06 at 09:35 -0400, Bowie Bailey wrote: > John Horne wrote: > > Hello, > > > > Running SA 3.1.4, I see messages such as these in the log file: > > > > Sep 6 00:05:21 tracy spamd[1710]: prefork: child states: KKI > > > > > Fr

Spamd child states?

Are they something I need to take note of or monitor? Thanks, John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839

Re: Incorrect message-id logged?

On Tue, 2006-08-29 at 10:25 -0400, Theo Van Dinter wrote: > On Tue, Aug 29, 2006 at 03:06:54PM +0100, John Horne wrote: > > scantime=5.2,size=3097,mid=,bayes=1, > > > > I have searched through the MTA logs for the past month, and used a > > shortened part of the above

Incorrect message-id logged?

his? Thanks, John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839

Re: Whitelist_subject and Blacklist_Subject

on't care about the message just let it through. It seems a waste of the servers (and network) resources to carry out a load of tests when we know, by doing the whitelist tests first, that we want the message delivered unmarked. Regards, John. -- ---

Missing msgid check?

it should), or do I need to create an actual rule to check for a missing Message-Id header? We are using SA version 3.0.6. Thanks, John. -- ------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTE

Re: iXhash plugin docs updated, version for 3.0.x added.

d some spam mail already! John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839

Re: How does SA detect non-english language?

s about this. I have now removed the specific ENG rules, and the mangled.cf. Unfortunately I cannot send you a copy of the message itself since I do not have it. I have asked the student for a copy of the full message, but so far have received nothing. Thanks, John. --

How does SA detect non-english language?

mixture of HTML and Japanese in the body is causing the message to be scored high - I am assuming here that SA doesn't realise that the body is Japanese and so treats it as nonsensical English? Thanks, John. -- --- John Horne, Uni

RE: RDJ from cron - is it safe?

ferently, and so not see this problem. Many thanks for all the replies. Now we have sorted this 'bug' out, I'll see about automating RDJ :-) John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839

Re: RDJ from cron - is it safe?

On Thu, 2005-06-23 at 14:13 -0700, Ed Kasky wrote: > At 09:54 AM Thursday, 6/23/2005, John Horne wrote -=> > >Hello, > > > >We have been running RDJ manually, but are now considering running it > >via cron. The problem is what if something 'goes wrong'? Th

RDJ from cron - is it safe?

there been problems doing this? Thanks, John. -- --- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: [EMAIL PROTECTED] Fax: +44 (0)1752 233839