test=none
Hi! I am using spamassassin with amavis. I sometimes get mails (Spam Mails) - not tagged with ***SPAM*** but tagged with the following header: No, score=0 tagged_above=-999 required=1.7 tests=[none] What does tests=[none] mean? lg Martin
USER_IN_WHITELIST
Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the variable is used but does not seem to get set anywhere ? -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 (0) 845 869 2749 SIP: [EMAIL PROTECTED] -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Re: USER_IN_WHITELIST
--[ UxBoD ]-- a écrit : Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the variable is used but does not seem to get set anywhere ? Hi, Have a look in /usr/share/spamassassin. There is 60_whitelist.cf for rules and about scores it s in 50_scores.cf BUT it's better to overwrite these parameters upadating the local.cf instead. What is the problem ? I may have the same !! Cedric --
Re: USER_IN_WHITELIST
I have just performed a brand new server install with SA 3.2.0 and I noticed a email this morning that had scored -94. I do not know the sender domain, so looked at how it had been scored and noticed that the rule USER_IN_WHITELIST had been hit with a -100. On Tue, 15 May 2007 10:35:35 +0200, Cedric BUSCHINI [EMAIL PROTECTED] wrote: --[ UxBoD ]-- a écrit : Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the variable is used but does not seem to get set anywhere ? Hi, Have a look in /usr/share/spamassassin. There is 60_whitelist.cf for rules and about scores it s in 50_scores.cf BUT it's better to overwrite these parameters upadating the local.cf instead. What is the problem ? I may have the same !! Cedric -- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 (0) 845 869 2749 SIP: [EMAIL PROTECTED] -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Re: USER_IN_WHITELIST
ok - not the same problem I have is -100 too high for you ? --[ UxBoD ]-- a écrit : I have just performed a brand new server install with SA 3.2.0 and I noticed a email this morning that had scored -94. I do not know the sender domain, so looked at how it had been scored and noticed that the rule USER_IN_WHITELIST had been hit with a -100. On Tue, 15 May 2007 10:35:35 +0200, Cedric BUSCHINI [EMAIL PROTECTED] wrote: --[ UxBoD ]-- a écrit : Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the variable is used but does not seem to get set anywhere ? Hi, Have a look in /usr/share/spamassassin. There is 60_whitelist.cf for rules and about scores it s in 50_scores.cf BUT it's better to overwrite these parameters upadating the local.cf instead. What is the problem ? I may have the same !! Cedric -- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- Cedric BUSCHINI - CARAX - IT Department Phone : + 33 1 4006 9864 fax : + 33 1 4006 9865
Re: USER_IN_WHITELIST
It wouldn't be if we had any user whitelists set up ! Thats the problem. This is a vanilla installation and we have no individual user preferences setup. All is controlled by a single account, as the mail is then passed onto a Notes server. I have looked at that rule and can see that it uses the function eval:check_from_in_whitelist(), but need to see how that works. On Tue, 15 May 2007 10:48:47 +0200, Cedric BUSCHINI [EMAIL PROTECTED] wrote: ok - not the same problem I have is -100 too high for you ? --[ UxBoD ]-- a écrit : I have just performed a brand new server install with SA 3.2.0 and I noticed a email this morning that had scored -94. I do not know the sender domain, so looked at how it had been scored and noticed that the rule USER_IN_WHITELIST had been hit with a -100. On Tue, 15 May 2007 10:35:35 +0200, Cedric BUSCHINI [EMAIL PROTECTED] wrote: --[ UxBoD ]-- a écrit : Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the variable is used but does not seem to get set anywhere ? Hi, Have a look in /usr/share/spamassassin. There is 60_whitelist.cf for rules and about scores it s in 50_scores.cf BUT it's better to overwrite these parameters upadating the local.cf instead. What is the problem ? I may have the same !! Cedric -- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- Cedric BUSCHINI - CARAX - IT Department Phone : + 33 1 4006 9864 fax : + 33 1 4006 9865 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 (0) 845 869 2749 SIP: [EMAIL PROTECTED] -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Re: SA and Amavisd-new 2.5.0
Jerry, I understand they're not true virus files, but the default value of 0.1 is way low and was causing them to be passed on to users. It seems the SA rules to catch these should be in the standard set. Release notes suggest a set of SA rules to match these. Although high scores can be given in @virus_name_to_spam_score_maps, it is better to keep them low and let an AV finding just contribute to other SA scores. This way SA has a chance to counterbalance some false positives as given by ClamAV rules (especially the Sanesecurity rules have a tendency to be trigger happy) or push the score even higher for a clean discard (bounce suppression). It also behaves better in case the checking results are cached and reused. I just set the maps to undef, it was easier than writing a bunch of rules. Now they all skip delivery again. ...but are treated as viruses unconditionally. It may be acceptable (this was a behaviour until 2.5.0), although it has its deficiencies (like unconditional false positives and quarantining with viruses). Is there any reason SA needs to see these messages? Seems simply deleting them before they even get to SA is faster and does the same thing. I get about 3.8% of messages matching ClamAV spam rules at our site. If this extra load (by not skipping a SA call) poses a problem, I'd say you have other things to worry about. I've noticed several false positives in the first two weeks of May, saved by other SA rules. These are usually mail with images or bounces, blocked by MSRBL-Images, MSRBL-SPAM.SpamBlowBack, Email.Hdr.Sanesecurity, Email.Spam.Gen*.Sanesecurity. At least for images I'd say a couple of our users would be quite unhappy if they were blocked (serious mail, not just some jokes being passed around). Mark
no loaded plugin implements
Hello, I just got finished the install from here: http://www.flakshack.com/anti-spam/wiki/index.php . When i start amavis in debug mode and it runs through its check I get the following error: ### May 14 21:29:21 MARTINI.happynetworks.net /usr/local/sbin/amavisd[23697]: (!!)TROUBLE in pre_loop_hook: check: no loaded plugin implements 'check_main': cannot scan! at /usr/local/libdata/perl5/site_perl/Mail/SpamAssassin/PerMsgStatus.pm line 164. Suicide () TROUBLE in pre_loop_hook: check: no loaded plugin implements 'check_main': cannot scan! at /usr/local/libdata/perl5/site_perl/Mail/SpamAssassin/PerMsgStatus.pm line 164. ## Now line 164 of this file: /usr/local/libdata/perl5/site_perl/Mail/SpamAssassin/PerMsgStatus.pm reads die check: no loaded plugin implements 'check_main': cannot scan!; My v320.pre file has: # Check - Provides main check functionality # loadplugin Mail::SpamAssassin::Plugin::Check Googling didnt bring up anything in particular.. anyone have any ideas? Thanks!
Re: USER_IN_WHITELIST
Resolved :) Thanks. On Tue, 15 May 2007 10:48:47 +0200, Cedric BUSCHINI [EMAIL PROTECTED] wrote: ok - not the same problem I have is -100 too high for you ? --[ UxBoD ]-- a écrit : I have just performed a brand new server install with SA 3.2.0 and I noticed a email this morning that had scored -94. I do not know the sender domain, so looked at how it had been scored and noticed that the rule USER_IN_WHITELIST had been hit with a -100. On Tue, 15 May 2007 10:35:35 +0200, Cedric BUSCHINI [EMAIL PROTECTED] wrote: --[ UxBoD ]-- a écrit : Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the variable is used but does not seem to get set anywhere ? Hi, Have a look in /usr/share/spamassassin. There is 60_whitelist.cf for rules and about scores it s in 50_scores.cf BUT it's better to overwrite these parameters upadating the local.cf instead. What is the problem ? I may have the same !! Cedric -- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- Cedric BUSCHINI - CARAX - IT Department Phone : + 33 1 4006 9864 fax : + 33 1 4006 9865 -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8 // Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8 // Phone: +44 (0) 845 869 2749 SIP: [EMAIL PROTECTED] -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.
Re: test=none
Martin Hochreiter wrote: Hi! I am using spamassassin with amavis. I sometimes get mails (Spam Mails) - not tagged with ***SPAM*** but tagged with the following header: No, score=0 tagged_above=-999 required=1.7 tests=[none] What does tests=[none] mean? That's generated by amavis, not spamassassin. My guess, based on my limited knowledge of amavis, is that message means one of the following: Amavis did run the message through SA, but no rules matched at all. Amavis timed out the spamassassin run. Amavis chose not to run spamassassin on the message due to some amavis level whitelisting. However, I don't know enough about amavis to tell you which of these that header means. If you don't get better help here, you might want to ask on the amavis list and/or check your mail logs for that message.
Re: X-Spam-Status: No, hits=? required=?
ip guy wrote: Hi all Anyone know why see X-Spam-Status: No, hits=? required=? in the email header after delivery and spam scanning ? My local.cf http://local.cf file looks like this required_score 8.0 report_safe 1 rewrite_header Subject *SPAM* Do you use spamc? Was the message larger than the -s parameter to spamc (default 500k)? If yes to both, then spamc skipped scanning the message because it was too large. There are some large spams out there, but there are relatively few of them. On the other hand, there are lots of large nonspam mails (attachments), and scanning large messages consumes a lot of CPU and memory. You can raise your -s to make spamc feed larger messages to spamd, but be aware that this comes at a price of increased resource usage, so choose a balance that fits your traffic load.
Tag Level for spam
Hi! Is there something like a recommended tag level when to treat a mail as spam? (I actually use 1.7 as tag level for amavis/spamassassin) lg martin
Re: test=none
No, score=0 tagged_above=-999 required=1.7 tests=[none]
What does tests=[none] mean?
Matt Kettler wrote:
That's generated by amavis, not spamassassin.
My guess, based on my limited knowledge of amavis, is that message means
one of the following:
Amavis did run the message through SA, but no rules matched at all.
Amavis timed out the spamassassin run.
Amavis chose not to run spamassassin on the message due to some amavis
level whitelisting.
However, I don't know enough about amavis to tell you which of these...
Actually the [none] comes directly from SpamAssassin, amavisd just
reports what it gets after calling SA.
The relevant code is in SpamAssassin/PerMsgStatus.pm, sub _get_tag:
TESTSSCORES = sub {
my $arg = (shift || ,);
my $line = '';
foreach my $test (sort @{$self-{test_names_hit}}) {
if (!$line) {
$line .= $test . = . $self-{conf}-{scores}-{$test};
} else {
$line .= $arg . $test . = . $self-{conf}-{scores}-{$test};
}
}
return $line ? $line : 'none';
},
It seems that really no rules matched.
Mark
Re: test=none
Actually the [none] comes directly from SpamAssassin, amavisd just
reports what it gets after calling SA.
The relevant code is in SpamAssassin/PerMsgStatus.pm, sub _get_tag:
TESTSSCORES = sub {
my $arg = (shift || ,);
my $line = '';
foreach my $test (sort @{$self-{test_names_hit}}) {
if (!$line) {
$line .= $test . = . $self-{conf}-{scores}-{$test};
} else {
$line .= $arg . $test . = . $self-{conf}-{scores}-{$test};
}
}
return $line ? $line : 'none';
},
It seems that really no rules matched.
Mark
Hi!
I updated my rules to the latest ones - maybe I get now less of these
test=[none]
(Actually 2-3 mails out of 60 spammails in one account are affected)
lg
Martin
Re: test=none
On Tue, 15 May 2007, Mark Martinec wrote:
No, score=0 tagged_above=-999 required=1.7 tests=[none]
What does tests=[none] mean?
Matt Kettler wrote:
That's generated by amavis, not spamassassin.
My guess, based on my limited knowledge of amavis, is that message means
one of the following:
Amavis did run the message through SA, but no rules matched at all.
Amavis timed out the spamassassin run.
Amavis chose not to run spamassassin on the message due to some amavis
level whitelisting.
However, I don't know enough about amavis to tell you which of these...
Actually the [none] comes directly from SpamAssassin, amavisd just
reports what it gets after calling SA.
The relevant code is in SpamAssassin/PerMsgStatus.pm, sub _get_tag:
TESTSSCORES = sub {
my $arg = (shift || ,);
my $line = '';
foreach my $test (sort @{$self-{test_names_hit}}) {
if (!$line) {
$line .= $test . = . $self-{conf}-{scores}-{$test};
} else {
$line .= $arg . $test . = . $self-{conf}-{scores}-{$test};
}
}
return $line ? $line : 'none';
},
It seems that really no rules matched.
Some messages here get tests=none. The two conditions I've found here are
1) like Matt already mentioned, a timeout in communication using spamc, or
2) the message was received totally within our network (trusted/internal).
Perhaps maybe you don't have the trusted/internal networks set up
correctly. Just speculating as I don't know much about Amavis to know
exactly how much SA tweaking you can do to make a difference.
Re: Tag Level for spam
Martin Hochreiter schrieb: Hi! Hello! Is there something like a recommended tag level when to treat a mail as spam? perhaps the default is recommended? (I actually use 1.7 as tag level for amavis/spamassassin) I think that ... strongly depends. e.g.: What rules you use, which blacklists, how well adjusted your SA is. (Some rules (rarely) produce FPs here). Your (companys) policy ... and last what you do with spam tagged mails, only mark them or quarantine them ... Would suggest to set it to a high score first (if quarantined or rejected at tagging level). And to adjust it slowly down if it works well and the rules meet your requirements. btw: Personally i adjusted it to 3.5, which is aggressive, i can afford some FPs (since its my private Mailserver) ... (bayes_100 is 3.5 and i never got a FP for bayes 100 and if bayes is sure its spam i am too, besides i control manually through quarantine (and grep) for FPs ...) $sa_tag2_level_deflt = 3.5; # add 'spam detected' headers at that level $sa_kill_level_deflt = $sa_tag2_level_deflt; lg martin -- Grüsse/Greetings MH Dont send mail to: [EMAIL PROTECTED] --
Re: test=none
Some messages here get tests=none. The two conditions I've found here are 1) like Matt already mentioned, a timeout in communication using spamc, or 2) the message was received totally within our network (trusted/internal). Perhaps maybe you don't have the trusted/internal networks set up correctly. Just speculating as I don't know much about Amavis to know exactly how much SA tweaking you can do to make a difference. I get now hints from the logfiles concerning a timeout, my trusted/internal networks in local.cf are set as follwing --- trusted_networks 80.123.XXX.XXX trusted_networks 80.122.XXX.XXX internal_networks 192.168.1.0/24 internal_networks 192.168.2.0/24 internal_networks 127.0.0.1 ---
RE: perl version
Is there a standard perl version that the SA team aspires to and uses as a baseline or some sort? If so, is it the 5.8.8 or newer or ??? For running on Windows, 5.8.8 is highly recommended. 5.6.1 can work, but it is rather unstable. Can't really comment on what runs best for other environments. Bret
RE: /etc/mail/spamassassin files
Someone mentioned issues with config files in /etc/mail/spamassassin in regards to the newer 3.2.0 I understand what you mentioned about what should be in .pre files and .cf files Did you find any other issues with just general alternatively named .cf files or problems with them? It's just a way to order the loading as I understand. .pre files are all read and processed before any .cf files. It insures that any plugins can be loaded and initialized prior to any rules that use the plugins. Bret
Re: Problem upgrading from 3.1.8 to 3.1.20, check.pm
On Wed, May 09, 2007 at 12:14:24AM -0500, Gabriel Millerd wrote: Beyond the s/3.1.20/v3.2.0/ issue that some people cannot get past. I have the same issue. I had to juggle my cf/pre files entries for quite some time to get past the check_scan problem you describe for spamd to run peachy. I, like you I suspect, loaded up one single file with all my config entries. The v3.2 suite seems to want these in a number of files. Where v3.1.x was forgiving I guess. The config code didn't really change between 3.1 and 3.2. 3.2 doesn't care if you have one pre file or twenty. However, what does matter is that you have all the loadplugin lines that you need to have. In 3.2, the check() function was pluginized, and so you need to load a plugin that implements the function or else you don't have a check() function. Without that function, SA can't scan anything, and so it helpfully alerts you to the fact that you don't have this functionality. There is 1 configuration change, and that is the directory the updates are store in. The installation process failed to update the sa-update in my local bin directory, so it was using the old 3.001... directory, instead of the 3.002... one. I manually copied the sa-update program over, and the problem is gone. . -- View this message in context: http://www.nabble.com/Problem-upgrading-from-3.1.8-to-3.1.20%2C-check.pm-tf3702543.html#a10622653 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: SA and Amavisd-new 2.5.0
On May 15, 2007, at 2:44 AM, Mark Martinec wrote: Release notes suggest a set of SA rules to match these. ok, I put the maps back to 0.1 and put those rules in local.cf
RelayCountry Issues
I am running SA 3.1.8, and I'm having issues implementing the RelayCountry plugin. I followed the Wiki/PerlDoc page, but have not had any success. I have the IP::Country::Fast /usr/lib/perl5/vendor_perl/5.8.8/IP/Country /usr/lib/perl5/vendor_perl/5.8.8/IP/Country.pm /usr/lib/perl5/vendor_perl/5.8.8/IP/Country/Fast /usr/lib/perl5/vendor_perl/5.8.8/IP/Country/Fast.pm /usr/lib/perl5/vendor_perl/5.8.8/IP/Country/Fast/cc.gif /usr/lib/perl5/vendor_perl/5.8.8/IP/Country/Fast/ip.gif /usr/lib/perl5/vendor_perl/5.8.8/IP/Country/MaxMind.pm /usr/lib/perl5/vendor_perl/5.8.8/IP/Country/Medium.pm /usr/lib/perl5/vendor_perl/5.8.8/IP/Country/Slow.pm When running spamassassin at the command-line in debug mode I see: snip [26693] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from @INC [26693] dbg: plugin: registered Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x1fa3c520) snip [26693] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0x1fa3c520) implements 'extract_metadata' [26693] dbg: metadata: X-Relay-Countries: US snip However, the header is never added. In init.pre, I have individually tried each: add_header all Relay _RELAYCOUNTRY_ add_header all Relay_Country _RELAYCOUNTRY_ add_header all Relay-Country _RELAYCOUNTRY_ add_header all X-Relay-Countries _RELAYCOUNTRY_ I tried each of the above, following posts I found online. I got the impression it varried depending on the version you wer running. The wiki references SA 3.1.0. Regardless, none of them added the header. I'm sure I'm missing something simple. Any input is appreciated. Thanks, Dave
RE: /etc/mail/spamassassin files
It's just a way to order the loading as I understand. .pre files are all read and processed before any .cf files. It insures that any plugins can be loaded and initialized prior to any rules that use the plugins. Bret Thank you - rh -- Abba Communications Spokane, WA www.abbacomm.net
plugin for use of spamc -d
Hello All, I would like to ask for help ;) I have relay server which is overloaded already and I have second server which is powerfull. I want to use spamc -d ... used as plugin so score which SA get from this (conenct to powerfull server to get score) will be added to score from relay server. Basically I have idea of simple plugin which call spamc -c -d x.x.x. |cut -d/ -f 1 which get some number and set it as score for rule external_regexp . Can anyone help me , or pointing me somewhere ? Im not programmer so if someone has plugin which is using external script plz let me know. thnx a lot ps: I cannot move SA on second machine for various reasons -- Best regards, Peter mailto:[EMAIL PROTECTED]
Re: plugin for use of spamc -d
Peter Mikeska (MiKi) wrote: Hello All, I would like to ask for help ;) I have relay server which is overloaded already and I have second server which is powerfull. I want to use spamc -d ... used as plugin so score which SA get from this (conenct to powerfull server to get score) will be added to score from relay server. Basically I have idea of simple plugin which call spamc -c -d x.x.x. |cut -d/ -f 1 which get some number and set it as score for rule external_regexp . Can anyone help me , or pointing me somewhere ? Im not programmer so if someone has plugin which is using external script plz let me know. thnx a lot ps: I cannot move SA on second machine for various reasons If the weaker machine has network access to the more powerful machine, then you could run SA on the powerful machine and the weaker machine just uses spamc... You don't really give any indication as to what mail server software you are running, but quite a few people do this very thing you are trying to do. Send on what mail software you are running and we can get a better picture. You also may want to consult that piece of software's documentation and or mailing list for more info. If spamc can not connect to the remote spamd server, you may need to examine your spamd startup params or firewall settings. -- Thanks, James
Re: no loaded plugin implements
[EMAIL PROTECTED] wrote: ### May 14 21:29:21 MARTINI.happynetworks.net /usr/local/sbin/amavisd[23697]: (!!)TROUBLE in pre_loop_hook: check: no loaded plugin implements 'check_main': cannot scan! at /usr/local/libdata/perl5/site_perl/Mail/SpamAssassin/PerMsgStatus.pm line 164. My v320.pre file has: # Check - Provides main check functionality # loadplugin Mail::SpamAssassin::Plugin::Check Googling didnt bring up anything in particular.. anyone have any ideas? Run 'spamassassin -D --lint' to make sure SA is loading your config from where you think it should be. For whatever reason it's not reading your v320.pre file (probably due to location or permissions). Daryl
Re: no loaded plugin implements
Run 'spamassassin -D --lint' to make sure SA is loading your config from
where you think it should be. For whatever reason it's not reading your
v320.pre file (probably due to location or permissions).
Daryl
Thanks Daryl,
Here is the output and the config file is being read where i edited and
expect. Any ideas from the output?
# spamassassin -D --lint
[28524] dbg: logger: adding facilities: all
[28524] dbg: logger: logging level is DBG
[28524] dbg: generic: SpamAssassin version 3.2.0
[28524] dbg: config: score set 0 chosen.
[28524] dbg: util: running in taint mode? yes
[28524] dbg: util: taint mode: deleting unsafe environment variables,
resetting PATH
[28524] dbg: util: PATH included '/sbin', keeping
[28524] dbg: util: PATH included '/usr/sbin', keeping
[28524] dbg: util: PATH included '/bin', keeping
[28524] dbg: util: PATH included '/usr/bin', keeping
[28524] dbg: util: PATH included '/usr/X11R6/bin', which doesn't exist,
dropping
[28524] dbg: util: PATH included '/usr/local/sbin', keeping
[28524] dbg: util: PATH included '/usr/local/bin', keeping
[28524] dbg: util: final PATH set to:
/sbin:/usr/sbin:/bin:/usr/bin:/usr/local/sbin:/usr/local/bin
[28524] dbg: dns: is Net::DNS::Resolver available? yes
[28524] dbg: dns: Net::DNS version: 0.59
[28524] dbg: diag: perl platform: 5.008008 openbsd
[28524] dbg: diag: module installed: Digest::SHA1, version 2.11
[28524] dbg: diag: module installed: HTML::Parser, version 3.56
[28524] dbg: diag: module installed: Net::DNS, version 0.59
[28524] dbg: diag: module installed: MIME::Base64, version 3.07
[28524] dbg: diag: module installed: DB_File, version 1.814
[28524] dbg: diag: module installed: Net::SMTP, version 2.29
[28524] dbg: diag: module not installed: Mail::SPF ('require' failed)
[28524] dbg: diag: module installed: Mail::SPF::Query, version 1.999001
[28524] dbg: diag: module installed: IP::Country::Fast, version 604.001
[28524] dbg: diag: module installed: Razor2::Client::Agent, version 2.82
[28524] dbg: diag: module not installed: Net::Ident ('require' failed)
[28524] dbg: diag: module installed: IO::Socket::INET6, version 2.51
[28524] dbg: diag: module installed: IO::Socket::SSL, version 1.06
[28524] dbg: diag: module installed: Compress::Zlib, version 2.004
[28524] dbg: diag: module installed: Time::HiRes, version 1.9707
[28524] dbg: diag: module not installed: Mail::DomainKeys ('require' failed)
[28524] dbg: diag: module not installed: Mail::DKIM ('require' failed)
[28524] dbg: diag: module not installed: DBI ('require' failed)
[28524] dbg: diag: module installed: Getopt::Long, version 2.36
[28524] dbg: diag: module installed: LWP::UserAgent, version 2.033
[28524] dbg: diag: module installed: HTTP::Date, version 1.47
[28524] dbg: diag: module installed: Archive::Tar, version 1.30
[28524] dbg: diag: module installed: IO::Zlib, version 1.05
[28524] dbg: diag: module not installed: Encode::Detect ('require' failed)
[28524] dbg: ignore: using a test message to lint rules
[28524] dbg: config: using /etc/mail/spamassassin for site rules pre files
[28524] dbg: config: read file /etc/mail/spamassassin/init.pre
[28524] dbg: config: read file /etc/mail/spamassassin/v310.pre
[28524] dbg: config: read file /etc/mail/spamassassin/v312.pre
[28524] dbg: config: read file /etc/mail/spamassassin/v320.pre
[28524] dbg: config: using /usr/local/share/spamassassin for sys rules
pre files
[28524] dbg: config: using /usr/local/share/spamassassin for default
rules dir
[28524] dbg: config: read file
/usr/local/share/spamassassin/10_default_prefs.cf
[28524] dbg: config: read file
/usr/local/share/spamassassin/20_advance_fee.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_body_tests.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_compensate.cf
[28524] dbg: config: read file
/usr/local/share/spamassassin/20_dnsbl_tests.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_drugs.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_dynrdns.cf
[28524] dbg: config: read file
/usr/local/share/spamassassin/20_fake_helo_tests.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_head_tests.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_html_tests.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_imageinfo.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_meta_tests.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_net_tests.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_phrases.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_porn.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_ratware.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_uri_tests.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/20_vbounce.cf
[28524] dbg: config: read file /usr/local/share/spamassassin/23_bayes.cf
[28524] dbg: config: read file
Re[2]: plugin for use of spamc -d
Hello JamesDR, Tuesday, May 15, 2007, 7:08:53 PM, you wrote: Peter Mikeska (MiKi) wrote: Hello All, I would like to ask for help ;) I have relay server which is overloaded already and I have second server which is powerfull. I want to use spamc -d ... used as plugin so score which SA get from this (conenct to powerfull server to get score) will be added to score from relay server. Basically I have idea of simple plugin which call spamc -c -d x.x.x. |cut -d/ -f 1 which get some number and set it as score for rule external_regexp . Can anyone help me , or pointing me somewhere ? Im not programmer so if someone has plugin which is using external script plz let me know. thnx a lot ps: I cannot move SA on second machine for various reasons If the weaker machine has network access to the more powerful machine, then you could run SA on the powerful machine and the weaker machine just uses spamc... You don't really give any indication as to what mail server software you are running, but quite a few people do this very thing you are trying to do. Send on what mail software you are running and we can get a better picture. You also may want to consult that piece of software's documentation and or mailing list for more info. If spamc can not connect to the remote spamd server, you may need to examine your spamd startup params or firewall settings. Hi, ok, so Im running qmail with SA 3.1.8 on rhel problem is that power machine is in someway blocked to access outside world, so on relay I can use DCC/rbl/razor ... but machine cannot handle sufficient bayes and regex queries, so basically relay can connect to power machine to let it run regex over message and return score, but power machine cannot connect to outside world as it use for specific purpose, so on that machine I cannot use network tests. I need just lower load on relay for some time until it get better server. Thnx for reply anyway ;) -- Best regards, Petermailto:[EMAIL PROTECTED]
Re: no loaded plugin implements
[EMAIL PROTECTED] wrote: Run 'spamassassin -D --lint' to make sure SA is loading your config from where you think it should be. For whatever reason it's not reading your v320.pre file (probably due to location or permissions). Daryl Thanks Daryl, Here is the output and the config file is being read where i edited and expect. Any ideas from the output? # spamassassin -D --lint [28524] dbg: plugin: Mail::SpamAssassin::Plugin::Check=HASH(0x813b0fdc) implements 'check_main', priority 0 On its own SA appears to be working. I'd check to make sure that whatever user amavisd runs as (or at least starts as) can read your config files. If that looks good and it still doesn't work I'd check with the folks on the amavisd list. Daryl
Solved X-SPam different info
Hello, I Solved the problem by adding following rule in my local.cf file add_header all Status _YESNO_, score=_SCORE_ required=_REQD_ tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_ regards Patrick Slokker -- Hello, After a Spamassassin update from 3.1.5 to 3.2.0 my Spam reports are different. in 3.1.5: X-Spam-Checker-Version: SpamAssassin 3.1.5 (2006-08-29) X-Spam-Level: X-Spam-Status: No, score=-2.6 required=2.9 tests=BAYES_00 autolearn=ham version=3.1.5 now it is: X-Spam-Checker-Version: SpamAssassin 3.2.0 (2007-05-01) X-Spam-Report: * 1.0 MIME_QP_LONG_LINE RAW: MIME_QP_LONG_LINE * 1.9 SARE_OEM_POP_PRICES3 SARE_OEM_POP_PRICES3 * 0.8 SARE_OEM_PRODS_1 SARE_OEM_PRODS_1 * 0.9 SARE_OEM_PRODS_FEW SARE_OEM_PRODS_FEW * 0.9 SARE_PRODUCTS_03 SARE_PRODUCTS_03 * 0.4 SARE_PRODUCTS_02 SARE_PRODUCTS_02 * 1.3 SARE_OEM_AND_OTHER SARE_OEM_AND_OTHER My procmail.rc is checking on X-Spam-Status: Yes How can I set the message header back as it was in version 3.1.5 ---
Re: no loaded plugin implements
On Tue, May 15, 2007 at 01:23:08PM -0400, [EMAIL PROTECTED] wrote: Here is the output and the config file is being read where i edited and expect. Any ideas from the output? [...] [28524] dbg: config: read file /etc/mail/spamassassin/v320.pre [...] [28524] dbg: plugin: loading Mail::SpamAssassin::Plugin::Check from @INC It appears that SA is working fine and loads the plugin. You said you were running through amavis though, which is something completely different. If there's a debug option there, you'd want to check it that way. -- Randomly Selected Tagline: ...Unix, MS-DOS, and Windows NT (also known as the Good, the Bad, and the Ugly). (By Matt Welsh) pgpG04HZjcGeG.pgp Description: PGP signature
Re: no loaded plugin implements
Run 'spamassassin -D --lint' to make sure SA is loading your config from where you think it should be. For whatever reason it's not reading your v320.pre file (probably due to location or permissions). Daryl Thanks Daryl, Here is the output and the config file is being read where i edited and expect. Any ideas from the output? # spamassassin -D --lint ... [28524] dbg: config: read file /etc/mail/spamassassin/v320.pre [28524] dbg: config: using /usr/local/share/spamassassin for sys rules pre files [28524] dbg: config: using /usr/local/share/spamassassin for default rules dir Now run amavisd -d config debug-sa Amavisd-new may disagree on where it looks for SA stuff. Gary V _ More photos, more messages, more storageget 2GB with Windows Live Hotmail. http://imagine-windowslive.com/hotmail/?locale=en-usocid=TXT_TAGHM_migration_HM_mini_2G_0507
Setting up an email rule for these posts
Hi all, I'm new to this board, so please go easy on me ;-) I can see that this forum is an excellent source of useful information with some very helpful members, but am having a bit of a problem at my end, with organising the emails coming in from the forum. Been using message boards and forums for about 6 years, on all sorts of subjects, and usually setup my email program to put posts from certain groups into certain folders - normally, there's rules setup in the email program to filter to the various folders, based on either the from field, or the subject field, but I'm noticing that the emails coming in don't have anything consistent with them ;-( How do the others here do it please ? Is there anyway, that perhaps every email/post that goes out, has the word Spamassassin in the subject line ? Any help appreciated. Chris.
Re: Setting up an email rule for these posts
On Tue, May 15, 2007 at 07:54:24PM +0200, Chris wrote: How do the others here do it please ? Use the List-Id header (it's actually the standard way to filter lists in general). -- Randomly Selected Tagline: Any fool can criticize and complain - and most do. pgpHXi1SzGKn7.pgp Description: PGP signature
Re: Setting up an email rule for these posts
Chris wrote: Hi all, I'm new to this board, so please go easy on me ;-) I can see that this forum is an excellent source of useful information with some very helpful members, but am having a bit of a problem at my end, with organising the emails coming in from the forum. Been using message boards and forums for about 6 years, on all sorts of subjects, and usually setup my email program to put posts from certain groups into certain folders - normally, there's rules setup in the email program to filter to the various folders, based on either the from field, or the subject field, but I'm noticing that the emails coming in don't have anything consistent with them ;-( How do the others here do it please ? Is there anyway, that perhaps every email/post that goes out, has the word Spamassassin in the subject line ? Any help appreciated. Chris. List-Id: users.spamassassin.apache.org -- Thanks, James Rallo Trusswood Inc. [EMAIL PROTECTED] www.Trusswood.Net Tele: (321) 383-0366 Fax: (321) 383-0362
Re: Setting up an email rule for these posts
Chris wrote: Hi all, I'm new to this board, so please go easy on me ;-) I can see that this forum is an excellent source of useful information with some very helpful members, but am having a bit of a problem at my end, with organising the emails coming in from the forum. Been using message boards and forums for about 6 years, on all sorts of subjects, and usually setup my email program to put posts from certain groups into certain folders - normally, there's rules setup in the email program to filter to the various folders, based on either the from field, or the subject field, but I'm noticing that the emails coming in don't have anything consistent with them ;-( How do the others here do it please ? Is there anyway, that perhaps every email/post that goes out, has the word Spamassassin in the subject line ? Hi Chris and welcome Filter by this header: List-Id: users.spamassassin.apache.org Matt
Re: RelayCountry Issues
Big Wave Dave wrote: I am running SA 3.1.8, and I'm having issues implementing the RelayCountry plugin. I followed the Wiki/PerlDoc page, but have not had any success. However, the header is never added. In init.pre, I have individually tried each: add_header all Relay _RELAYCOUNTRY_ add_header all Relay_Country _RELAYCOUNTRY_ add_header all Relay-Country _RELAYCOUNTRY_ add_header all X-Relay-Countries _RELAYCOUNTRY_ I tried each of the above, following posts I found online. I got the impression it varried depending on the version you wer running. The wiki references SA 3.1.0. Regardless, none of them added the header. I'm sure I'm missing something simple. Any input is appreciated. That doesn't pass a lint check, does it? The first thing to do when debugging a problem is to run 'spamassassin --lint'. Move the config to local.cf and you'll be all set. Daryl
Re: Setting up an email rule for these posts
On Tue, May 15, 2007 at 07:54:24PM +0200, Chris wrote: Hi all, I'm new to this board, so please go easy on me ;-) I can see that this forum is an excellent source of useful information with some very helpful members, but am having a bit of a problem at my end, with organising the emails coming in from the forum. Been using message boards and forums for about 6 years, on all sorts of subjects, and usually setup my email program to put posts from certain groups into certain folders - normally, there's rules setup in the email program to filter to the various folders, based on either the from field, or the subject field, but I'm noticing that the emails coming in don't have anything consistent with them ;-( How do the others here do it please ? Is there anyway, that perhaps every email/post that goes out, has the word Spamassassin in the subject line ? Turn on full headers and you will see a line: List-Id: users.spamassassin.apache.org Filter on that. That works with many lists. Any help appreciated. Chris. Cheers, -- Bob McClure, Jr. Bobcat Open Systems, Inc. [EMAIL PROTECTED] http://www.bobcatos.com Pride only breeds quarrels, but wisdom is found in those who take advice. Proverbs 13:10 (NIV)
Re: no loaded plugin implements
Now run amavisd -d config debug-sa Amavisd-new may disagree on where it looks for SA stuff. Gary V Thanks all for the help .. Here is the output to Gary's suggeston .. Seems all the same .. Again thank you everyone. # amavisd -d config debug-sa ps: pid: No such file or directory Pid_file /var/amavisd/amavisd.pid already exists. Overwriting! [13583] dbg: config: score set 0 chosen. [13583] dbg: config: using /etc/mail/spamassassin for site rules pre files [13583] dbg: config: read file /etc/mail/spamassassin/init.pre [13583] dbg: config: read file /etc/mail/spamassassin/v310.pre [13583] dbg: config: using /usr/local/share/spamassassin for sys rules pre files [13583] dbg: config: using /usr/local/share/spamassassin for default rules dir [13583] dbg: config: read file /usr/local/share/spamassassin/10_default_prefs.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_advance_fee.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_body_tests.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_compensate.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_dnsbl_tests.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_drugs.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_dynrdns.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_fake_helo_tests.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_head_tests.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_html_tests.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_imageinfo.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_meta_tests.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_net_tests.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_phrases.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_porn.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_ratware.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_uri_tests.cf [13583] dbg: config: read file /usr/local/share/spamassassin/20_vbounce.cf [13583] dbg: config: read file /usr/local/share/spamassassin/23_bayes.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_accessdb.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_antivirus.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_asn.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_dcc.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_dkim.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_domainkeys.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_hashcash.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_pyzor.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_razor2.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_replace.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_spf.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_textcat.cf [13583] dbg: config: read file /usr/local/share/spamassassin/25_uribl.cf [13583] dbg: config: read file /usr/local/share/spamassassin/30_text_de.cf [13583] dbg: config: read file /usr/local/share/spamassassin/30_text_fr.cf [13583] dbg: config: read file /usr/local/share/spamassassin/30_text_it.cf [13583] dbg: config: read file /usr/local/share/spamassassin/30_text_nl.cf [13583] dbg: config: read file /usr/local/share/spamassassin/30_text_pl.cf [13583] dbg: config: read file /usr/local/share/spamassassin/30_text_pt_br.cf [13583] dbg: config: read file /usr/local/share/spamassassin/50_scores.cf [13583] dbg: config: read file /usr/local/share/spamassassin/60_awl.cf [13583] dbg: config: read file /usr/local/share/spamassassin/60_shortcircuit.cf [13583] dbg: config: read file /usr/local/share/spamassassin/60_whitelist.cf [13583] dbg: config: read file /usr/local/share/spamassassin/60_whitelist_dk.cf [13583] dbg: config: read file /usr/local/share/spamassassin/60_whitelist_dkim.cf [13583] dbg: config: read file /usr/local/share/spamassassin/60_whitelist_spf.cf [13583] dbg: config: read file /usr/local/share/spamassassin/60_whitelist_subject.cf [13583] dbg: config: read file /usr/local/share/spamassassin/72_active.cf [13583] dbg: config: using /etc/mail/spamassassin for site rules dir [13583] dbg: config: read file /etc/mail/spamassassin/local.cf [13583] dbg: config: using /var/amavisd/.spamassassin/user_prefs for user prefs file [13583] dbg: config: score set 1 chosen. Suicide () TROUBLE in pre_loop_hook: check: no loaded plugin implements 'check_main': cannot scan! at /usr/local/libdata/perl5/site_perl/Mail/SpamAssassin/PerMsgStatus.pm line 164. #
Re: no loaded plugin implements
On its own SA appears to be working. I'd check to make sure that whatever user amavisd runs as (or at least starts as) can read your config files. If that looks good and it still doesn't work I'd check with the folks on the amavisd list. Daryl BTW the permissions for the spamassassin directory is: drwxr-xr-x 2 root wheel512 May 13 14:02 spamassassin Thanks again ..
Re: Setting up an email rule for these posts
At 10:54 AM 5/15/2007, Chris wrote: How do the others here do it please ? I filter on List-Id: users.spamassassin.apache.org I hate these lists where I have to remember to hit REPLY-ALL instead of REPLY, I often wind up having to go send a message again. The only thing worse is one list where I have to use REPLY-ALL and also delete my SIG (posting a sig is grounds for being ejected from that list). I know, some of you love this format, to each his/her own. -- Jerry Durand, Durand Interstellar, Inc. www.interstellar.com tel: +1 408 356-3886, USA toll free: 1 866 356-3886 Skype: jerrydurand
Re: test=none
Martin Hochreiter wrote: Some messages here get tests=none. The two conditions I've found here are 1) like Matt already mentioned, a timeout in communication using spamc, or 2) the message was received totally within our network (trusted/internal). Perhaps maybe you don't have the trusted/internal networks set up correctly. Just speculating as I don't know much about Amavis to know exactly how much SA tweaking you can do to make a difference. I get now hints from the logfiles concerning a timeout, my trusted/internal networks in local.cf are set as follwing --- trusted_networks 80.123.XXX.XXX trusted_networks 80.122.XXX.XXX internal_networks 192.168.1.0/24 internal_networks 192.168.2.0/24 internal_networks 127.0.0.1 --- That doesn't pass a lint check, does it? If it does you're using a really old version of SpamAssassin. If it doesn't it's because internal_networks must also be trusted and if you're using 3.2, 127.0.0.1 is always trusted+internal (so it'll warn about it already being configured). Assuming you're running a recent version of SA your effective config is: trusted_networks 80.123.XXX.XXX trusted_networks 80.122.XXX.XXX Daryl
Re: no loaded plugin implements
[EMAIL PROTECTED] wrote: Now run amavisd -d config debug-sa Amavisd-new may disagree on where it looks for SA stuff. Gary V Thanks all for the help .. Here is the output to Gary's suggeston .. Seems all the same .. Again thank you everyone. # amavisd -d config debug-sa ps: pid: No such file or directory Pid_file /var/amavisd/amavisd.pid already exists. Overwriting! [13583] dbg: config: score set 0 chosen. [13583] dbg: config: using /etc/mail/spamassassin for site rules pre files [13583] dbg: config: read file /etc/mail/spamassassin/init.pre [13583] dbg: config: read file /etc/mail/spamassassin/v310.pre [13583] dbg: config: using /usr/local/share/spamassassin for sys rules pre files It's not using v320.pre. Make sure the permissions for that file are the same as init.pre or v310.pre. Daryl
Re: RelayCountry Issues
On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: I am running SA 3.1.8, and I'm having issues implementing the RelayCountry plugin. I followed the Wiki/PerlDoc page, but have not had any success. However, the header is never added. In init.pre, I have individually tried each: add_header all Relay _RELAYCOUNTRY_ add_header all Relay_Country _RELAYCOUNTRY_ add_header all Relay-Country _RELAYCOUNTRY_ add_header all X-Relay-Countries _RELAYCOUNTRY_ I tried each of the above, following posts I found online. I got the impression it varried depending on the version you wer running. The wiki references SA 3.1.0. Regardless, none of them added the header. I'm sure I'm missing something simple. Any input is appreciated. That doesn't pass a lint check, does it? The first thing to do when debugging a problem is to run 'spamassassin --lint'. Move the config to local.cf and you'll be all set. Daryl It passes 'spamassassin --lint' with the config in init.pre or local.cf. The original email show snippets of the debugging when I ran 'spamassassin -D' against a real message. I figured lint may not work since it may not have a relay IP to check against. Even when I run 'spamassassin -D --lint' I see: [31258] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xee86aa0) implements 'extract_metadata' [31258] dbg: metadata: X-Relay-Countries: It seems like the plugin is loading properly... the piece requesting it added to the headers it where my config is broken. Dave
Re: no loaded plugin implements
# amavisd -d config debug-sa ps: pid: No such file or directory Pid_file /var/amavisd/amavisd.pid already exists. Overwriting! [13583] dbg: config: score set 0 chosen. [13583] dbg: config: using /etc/mail/spamassassin for site rules pre files [13583] dbg: config: read file /etc/mail/spamassassin/init.pre [13583] dbg: config: read file /etc/mail/spamassassin/v310.pre [13583] dbg: config: using /usr/local/share/spamassassin for sys rules pre files It's not using v320.pre. Make sure the permissions for that file are the same as init.pre or v310.pre. Daryl Thanks guys.. You were right .. It was file location. I looked over the docs again and its referring to /var/amavisd/etc/mail/spamassassin .. So after copying over the files from /etc/mail/spamassassin .. All is well now. Thank you.
Re: no loaded plugin implements
# amavisd -d config debug-sa ps: pid: No such file or directory Pid_file /var/amavisd/amavisd.pid already exists. Overwriting! [13583] dbg: config: score set 0 chosen. [13583] dbg: config: using /etc/mail/spamassassin for site rules pre files [13583] dbg: config: read file /etc/mail/spamassassin/init.pre [13583] dbg: config: read file /etc/mail/spamassassin/v310.pre [13583] dbg: config: using /usr/local/share/spamassassin for sys rules pre files It's not using v320.pre. Make sure the permissions for that file are the same as init.pre or v310.pre. Daryl Thanks guys.. You were right .. It was file location. I looked over the docs again and its referring to /var/amavisd/etc/mail/spamassassin .. So after copying over the files from /etc/mail/spamassassin .. All is well now. Thank you. Ah, running amavisd-new chrooted, yes? Gary V _ More photos, more messages, more storageget 2GB with Windows Live Hotmail. http://imagine-windowslive.com/hotmail/?locale=en-usocid=TXT_TAGHM_migration_HM_mini_2G_0507
Re: no loaded plugin implements
Ah, running amavisd-new chrooted, yes? Gary V Yes Sir! I had copy all files over but I guess some way some how that 320 file didnt copy over. Now to sort through the rest of the setup and get it to start filtering :) Thanks!
tracking down problem messages
Hi everyone, I'm seeing by the output of message analysis time that some messages must be hanging up SA; Total number of emails processed by the spam filter : 2019 Number of spams : 1108 ( 54.88%) Number of clean messages: 911 ( 45.12%) Average message analysis time : 26.26 seconds Average spam analysis time : 21.65 seconds Average clean message analysis time : 31.86 seconds Average message score : 4.71 Average spam score : 23.39 Average clean message score :-18.02 How can I track the messages that are causing this to happen? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]
Re: tracking down problem messages
How are you calling SA? procmail? Amavis? plugins? Which version are you running? Most likely, the RBL checks are the reason for that delays. Try setting skip_rbl_checks 1 in the local.cf, then look over the statistics again. If scan times go down, blame your nameserver... Luix! 2007/5/15, Jean-Paul Natola [EMAIL PROTECTED]: Hi everyone, I'm seeing by the output of message analysis time that some messages must be hanging up SA; Total number of emails processed by the spam filter : 2019 Number of spams : 1108 ( 54.88%) Number of clean messages: 911 ( 45.12%) Average message analysis time : 26.26 seconds Average spam analysis time : 21.65 seconds Average clean message analysis time : 31.86 seconds Average message score : 4.71 Average spam score : 23.39 Average clean message score :-18.02 How can I track the messages that are causing this to happen? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED] -- - GNU-GPL: May The Source Be With You... Linux Registered User #448382. -
Re: RelayCountry Issues
Big Wave Dave wrote: On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: I am running SA 3.1.8, and I'm having issues implementing the RelayCountry plugin. I followed the Wiki/PerlDoc page, but have not had any success. However, the header is never added. In init.pre, I have individually tried each: add_header all Relay _RELAYCOUNTRY_ add_header all Relay_Country _RELAYCOUNTRY_ add_header all Relay-Country _RELAYCOUNTRY_ add_header all X-Relay-Countries _RELAYCOUNTRY_ I tried each of the above, following posts I found online. I got the impression it varried depending on the version you wer running. The wiki references SA 3.1.0. Regardless, none of them added the header. I'm sure I'm missing something simple. Any input is appreciated. That doesn't pass a lint check, does it? The first thing to do when debugging a problem is to run 'spamassassin --lint'. Move the config to local.cf and you'll be all set. Daryl It passes 'spamassassin --lint' with the config in init.pre or local.cf. The original email show snippets of the debugging when I ran 'spamassassin -D' against a real message. I figured lint may not work since it may not have a relay IP to check against. Even when I run 'spamassassin -D --lint' I see: [31258] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xee86aa0) implements 'extract_metadata' [31258] dbg: metadata: X-Relay-Countries: This debug output has nothing to do with add_header. Even without the plugin loaded the header would still be added if add_header was working/configured correctly. It seems like the plugin is loading properly... the piece requesting it added to the headers it where my config is broken. Ah, yeah, add_header lines in a pre file wouldn't cause a lint error since they don't need a plugin to be loaded in order to be parsed. Of course you won't get the desired effect if you place the add_header lines in a pre file since the settings will be cleared by the clear_headers directive in 10_default_prefs.cf. I fail to see why it didn't work when you placed the add_header directive in your local.cf file (unless your local.cf is unreadable for whatever reason). You did check the output with add_header in local.cf, right? Perhaps full debug output would make things clear as to what is going on. Daryl
RE: tracking down problem messages
Ok I was able to track them and found that they are timing out after about 5 mins- spamd is timing them out- I'm assuming its large messages that it is timing out on- what rule/acl would I need and WHERE would I enter it to tell SA to ignore or not to scan anything over 1 meg. Running FreeBSD EXIM SA Hi everyone, I'm seeing by the output of message analysis time that some messages must be hanging up SA; Total number of emails processed by the spam filter : 2019 Number of spams : 1108 ( 54.88%) Number of clean messages: 911 ( 45.12%) Average message analysis time : 26.26 seconds Average spam analysis time : 21.65 seconds Average clean message analysis time : 31.86 seconds Average message score : 4.71 Average spam score : 23.39 Average clean message score :-18.02 How can I track the messages that are causing this to happen? Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY 10012 Phone:212-941-5300 xt 36 Fax: 212-941-5563 Mailto: [EMAIL PROTECTED]
Re: RelayCountry Issues
On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: I am running SA 3.1.8, and I'm having issues implementing the RelayCountry plugin. I followed the Wiki/PerlDoc page, but have not had any success. However, the header is never added. In init.pre, I have individually tried each: add_header all Relay _RELAYCOUNTRY_ add_header all Relay_Country _RELAYCOUNTRY_ add_header all Relay-Country _RELAYCOUNTRY_ add_header all X-Relay-Countries _RELAYCOUNTRY_ I tried each of the above, following posts I found online. I got the impression it varried depending on the version you wer running. The wiki references SA 3.1.0. Regardless, none of them added the header. I'm sure I'm missing something simple. Any input is appreciated. That doesn't pass a lint check, does it? The first thing to do when debugging a problem is to run 'spamassassin --lint'. Move the config to local.cf and you'll be all set. Daryl It passes 'spamassassin --lint' with the config in init.pre or local.cf. The original email show snippets of the debugging when I ran 'spamassassin -D' against a real message. I figured lint may not work since it may not have a relay IP to check against. Even when I run 'spamassassin -D --lint' I see: [31258] dbg: plugin: Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xee86aa0) implements 'extract_metadata' [31258] dbg: metadata: X-Relay-Countries: This debug output has nothing to do with add_header. Even without the plugin loaded the header would still be added if add_header was working/configured correctly. It seems like the plugin is loading properly... the piece requesting it added to the headers it where my config is broken. Ah, yeah, add_header lines in a pre file wouldn't cause a lint error since they don't need a plugin to be loaded in order to be parsed. Of course you won't get the desired effect if you place the add_header lines in a pre file since the settings will be cleared by the clear_headers directive in 10_default_prefs.cf. I fail to see why it didn't work when you placed the add_header directive in your local.cf file (unless your local.cf is unreadable for whatever reason). You did check the output with add_header in local.cf, right? Perhaps full debug output would make things clear as to what is going on. Daryl Do you want to see the full debug with --lint or a real message? Should I send it to the list as well? Thanks for your assistance. Dave
Re: RelayCountry Issues
Big Wave Dave wrote: Do you want to see the full debug with --lint or a real message? Should I send it to the list as well? Thanks for your assistance. Either would probably do, might as well use a real message. Sending to the list is fine. Daryl
Re: RelayCountry Issues
On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: Do you want to see the full debug with --lint or a real message? Should I send it to the list as well? Thanks for your assistance. Either would probably do, might as well use a real message. Sending to the list is fine. Daryl It does show X-Spam-Relay-Countries: US in the debug... but in the actual messages flowing in, it isn't appeneded to the message. I have sanitized things a little [EMAIL PROTECTED] ~]# spamassassin -D /home/username/samplemail.txt [32611] dbg: logger: adding facilities: all [32611] dbg: logger: logging level is DBG [32611] dbg: generic: SpamAssassin version 3.1.8 [32611] dbg: config: score set 0 chosen. [32611] dbg: util: running in taint mode? yes [32611] dbg: util: taint mode: deleting unsafe environment variables, resetting PATH [32611] dbg: util: PATH included '/usr/kerberos/sbin', keeping [32611] dbg: util: PATH included '/usr/kerberos/bin', keeping [32611] dbg: util: PATH included '/usr/local/sbin', keeping [32611] dbg: util: PATH included '/usr/local/bin', keeping [32611] dbg: util: PATH included '/sbin', keeping [32611] dbg: util: PATH included '/bin', keeping [32611] dbg: util: PATH included '/usr/sbin', keeping [32611] dbg: util: PATH included '/usr/bin', keeping [32611] dbg: util: PATH included '/root/bin', keeping [32611] dbg: util: final PATH set to: /usr/kerberos/sbin:/usr/kerberos/bin:/usr/local/sbin:/usr/local/bin:/sbin:/bin:/usr/sbin:/usr/bin:/root/bin [32611] dbg: message: MIME PARSER START [32611] dbg: message: main message type: text/plain [32611] dbg: message: parsing normal part [32611] dbg: message: added part, type: text/plain [32611] dbg: message: MIME PARSER END [32611] dbg: dns: is Net::DNS::Resolver available? yes [32611] dbg: dns: Net::DNS version: 0.59 [32611] dbg: config: using /etc/mail/spamassassin for site rules pre files [32611] dbg: config: read file /etc/mail/spamassassin/init.pre [32611] dbg: config: read file /etc/mail/spamassassin/v310.pre [32611] dbg: config: read file /etc/mail/spamassassin/v312.pre [32611] dbg: config: using /var/lib/spamassassin/3.001008 for sys rules pre files [32611] dbg: config: read file /var/lib/spamassassin/3.001008/updates_spamassassin_org.pre [32611] dbg: config: using /var/lib/spamassassin/3.001008 for default rules dir [32611] dbg: config: read file /var/lib/spamassassin/3.001008/updates_spamassassin_org.cf [32611] dbg: config: using /etc/mail/spamassassin for site rules dir [32611] dbg: config: read file /etc/mail/spamassassin/FuzzyOcr.cf [32611] dbg: config: read file /etc/mail/spamassassin/local.cf [32611] dbg: config: read file /etc/mail/spamassassin/wrongmx.cf [32611] dbg: config: using /root/.spamassassin for user state dir [32611] dbg: config: using /root/.spamassassin/user_prefs for user prefs file [32611] dbg: config: read file /root/.spamassassin/user_prefs [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::RelayCountry from @INC [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::RelayCountry=HASH(0xbae65d0) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0xbb77fc0) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0xbb9afc0) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0xbbe0ab0) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::Pyzor from @INC [32611] dbg: pyzor: network tests on, attempting Pyzor [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::Pyzor=HASH(0xbc02f00) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC [32611] dbg: razor2: razor2 is available, version 2.82 [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::Razor2=HASH(0xbc410e0) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::SpamCop from @INC [32611] dbg: reporter: network tests on, attempting SpamCop [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::SpamCop=HASH(0xc13c180) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::AWL from @INC [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::AWL=HASH(0xc16cb70) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::AutoLearnThreshold from @INC [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::AutoLearnThreshold=HASH(0xc180520) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::WhiteListSubject from @INC [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::WhiteListSubject=HASH(0xc193490) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::MIMEHeader from @INC [32611] dbg: plugin: registered Mail::SpamAssassin::Plugin::MIMEHeader=HASH(0xc1a0890) [32611] dbg: plugin: loading Mail::SpamAssassin::Plugin::ReplaceTags from @INC [32611] dbg: plugin: registered
Re: RelayCountry Issues
Big Wave Dave wrote the following on 5/15/2007 12:54 PM -0800: On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: Do you want to see the full debug with --lint or a real message? Should I send it to the list as well? Thanks for your assistance. Either would probably do, might as well use a real message. Sending to the list is fine. Daryl It does show X-Spam-Relay-Countries: US in the debug... but in the actual messages flowing in, it isn't appeneded to the message. If you are using amavisd-new, you can still score the with relay countries, amavisd just doesn't add the SA header for this. I believe you can have amavisd-new add the full SA header report by setting: $sa_spam_report_header = 1; # insert X-Spam-Report header field? default false The default is false 0. Setting this to 1 will allow SA headers to be added. Bill
Re: RelayCountry Issues
Big Wave Dave wrote: On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: Do you want to see the full debug with --lint or a real message? Should I send it to the list as well? Thanks for your assistance. Either would probably do, might as well use a real message. Sending to the list is fine. Daryl It does show X-Spam-Relay-Countries: US in the debug... but in the actual messages flowing in, it isn't appeneded to the message. It's actually present in the message returned by spamassassin, not the debug. So SA is working as it should. From [EMAIL PROTECTED] Wed Apr 25 22:25:54 2007 Return-Path: [EMAIL PROTECTED] X-Spam-Relay-Countries: US X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on thor.domainname.net X-Spam-Level: X-Spam-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00,SPF_PASS autolearn=unavailable version=3.1.8 Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.247]) by thor.domainname.net (8.13.8/8.13.8) with ESMTP id l3Q5PQZH021682 for [EMAIL PROTECTED]; Wed, 25 Apr 2007 22:25:52 -0700 Received: by an-out-0708.google.com with SMTP id c36so111669ana for [EMAIL PROTECTED]; Wed, 25 Apr 2007 22:25:24 -0700 (PDT) So... either you're using a milter (perhaps milter-spamc or spamass-milter?) that probably doesn't support anything but the default X-Spam headers or, and this is nowhere as likely, whatever user is running spamd (or whatever program you're using) in your normal mail flow doesn't have rights to the file containing the add_header lines. Daryl
Re: RelayCountry Issues
On 5/15/07, Bill Landry [EMAIL PROTECTED] wrote: Big Wave Dave wrote the following on 5/15/2007 12:54 PM -0800: On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: Do you want to see the full debug with --lint or a real message? Should I send it to the list as well? Thanks for your assistance. Either would probably do, might as well use a real message. Sending to the list is fine. Daryl It does show X-Spam-Relay-Countries: US in the debug... but in the actual messages flowing in, it isn't appeneded to the message. If you are using amavisd-new, you can still score the with relay countries, amavisd just doesn't add the SA header for this. I believe you can have amavisd-new add the full SA header report by setting: $sa_spam_report_header = 1; # insert X-Spam-Report header field? default false The default is false 0. Setting this to 1 will allow SA headers to be added. Bill Bill, Thanks for the input. I'm not currently using amavisd-new. I'm using spamass-milter-0.3.1. Thanks, Dave
Re: RelayCountry Issues
On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: On 5/15/07, Daryl C. W. O'Shea [EMAIL PROTECTED] wrote: Big Wave Dave wrote: Do you want to see the full debug with --lint or a real message? Should I send it to the list as well? Thanks for your assistance. Either would probably do, might as well use a real message. Sending to the list is fine. Daryl It does show X-Spam-Relay-Countries: US in the debug... but in the actual messages flowing in, it isn't appeneded to the message. It's actually present in the message returned by spamassassin, not the debug. So SA is working as it should. That is extremely odd. From [EMAIL PROTECTED] Wed Apr 25 22:25:54 2007 Return-Path: [EMAIL PROTECTED] X-Spam-Relay-Countries: US X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on thor.domainname.net X-Spam-Level: X-Spam-Status: No, score=-1.8 required=5.0 tests=AWL,BAYES_00,SPF_PASS autolearn=unavailable version=3.1.8 Received: from an-out-0708.google.com (an-out-0708.google.com [209.85.132.247]) by thor.domainname.net (8.13.8/8.13.8) with ESMTP id l3Q5PQZH021682 for [EMAIL PROTECTED]; Wed, 25 Apr 2007 22:25:52 -0700 Received: by an-out-0708.google.com with SMTP id c36so111669ana for [EMAIL PROTECTED]; Wed, 25 Apr 2007 22:25:24 -0700 (PDT) So... either you're using a milter (perhaps milter-spamc or spamass-milter?) that probably doesn't support anything but the default X-Spam headers or, and this is nowhere as likely, whatever user is running spamd (or whatever program you're using) in your normal mail flow doesn't have rights to the file containing the add_header lines. Daryl I am indeed using spamass-milter-0.3.1. I also verified the local.cf is readable by everyone. I guess I'll need to investigate an alternative to spamass-milter-0.3.1. Thanks for the help. Dave
Re: tracking down problem messages
Jean-Paul Natola wrote: Ok I was able to track them and found that they are timing out after about 5 mins- spamd is timing them out- I'm assuming its large messages that it is timing out on- what rule/acl would I need and WHERE would I enter it to tell SA to ignore or not to scan anything over 1 meg. This is a parameter to spamc, the -s parameter does this, and by default spamc will not send anything over 500k to spamd.
Re: test=none
Daryl C. W. O'Shea wrote: I get now hints from the logfiles concerning a timeout, my trusted/internal networks in local.cf are set as follwing --- trusted_networks 80.123.XXX.XXX trusted_networks 80.122.XXX.XXX internal_networks 192.168.1.0/24 internal_networks 192.168.2.0/24 internal_networks 127.0.0.1 --- That doesn't pass a lint check, does it? If it does you're using a really old version of SpamAssassin. If it doesn't it's because internal_networks must also be trusted and if you're using 3.2, 127.0.0.1 is always trusted+internal (so it'll warn about it already being configured). Interesting.. How does 3.2 deal with a trusted MX that must accept mail directly from dialup nodes without SMTP AUTH? In older versions, you'd configure that server to be trusted but make it not a member of internal_networks to avoid the DUL tests being applied to it.
Re: Tag Level for spam
Martin Hochreiter wrote: Hi! Is there something like a recommended tag level when to treat a mail as spam? (I actually use 1.7 as tag level for amavis/spamassassin) 5.0 is the recommended default. This level will tune SA to treat false positives (nonspam tagged as spam) as roughly 100 times worse than false negatives (spam that isn't tagged). Lowering the threshold will reduce the false negatives, thus catching more spam, but will also increase your false positive rate. If you look at the STATISTICS*.txt files, you can see what kind of effects lowering the threshold should have on these numbers. For example, set3 (bayes and network tests enabled) on SA 3.2: http://svn.apache.org/repos/asf/spamassassin/branches/3.2/rules/STATISTICS-set3.txt Shows these numbers for 5.0: # SUMMARY for threshold 5.0: # Correctly non-spam: 67508 99.94% # Correctly spam: 117303 98.51% # False positives:42 0.06% # False negatives: 1780 1.49% But these for 2.0: # SUMMARY for threshold 2.0: # Correctly non-spam: 66745 98.81% # Correctly spam: 118903 99.85% # False positives: 805 1.19% # False negatives: 180 0.15% Note that at 2.0, the number of missed spams has gone down by a factor of almost 10, from 1780 to 180. However, the number of false positives has increased by a factor of more than 19, from 42 to 805. Your exact results might be a little better, or rarely a little worse, depending on your use of whitelists, how aggressively you train bayes, what add-on rules you have, etc. However, these results should be typical for a stock config with no use of manual whitelists, no AWL, and relatively light bayes training.
Re: test=none
Matt Kettler wrote: Daryl C. W. O'Shea wrote: I get now hints from the logfiles concerning a timeout, my trusted/internal networks in local.cf are set as follwing --- trusted_networks 80.123.XXX.XXX trusted_networks 80.122.XXX.XXX internal_networks 192.168.1.0/24 internal_networks 192.168.2.0/24 internal_networks 127.0.0.1 --- That doesn't pass a lint check, does it? If it does you're using a really old version of SpamAssassin. If it doesn't it's because internal_networks must also be trusted and if you're using 3.2, 127.0.0.1 is always trusted+internal (so it'll warn about it already being configured). Interesting.. How does 3.2 deal with a trusted MX that must accept mail directly from dialup nodes without SMTP AUTH? In older versions, you'd configure that server to be trusted but make it not a member of internal_networks to avoid the DUL tests being applied to it. Nevermind.. I wrapped my brain around it backwards..
SpamAssassin timed out and was killed
Hello, The following package for my company mail-gateway: Centos 4.4 spamassassin-3.2.0-1.el4.rf clamd-0.90.2-1.el4.rf MailScanner-perl-MIME-Base64-3.05-5 postfix-2.2.10-1.RHEL4.2 I was checked the maillog that always show the following message: May 16 10:29:01 mailgateway MailScanner[7437]: SpamAssassin timed out and was killed, failure 6 of 10 Is my computer not enough RAM to process spamassassin ? Thanks -- View this message in context: http://www.nabble.com/SpamAssassin-timed-out-and-was-killed-tf3762251.html#a10634766 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: SpamAssassin timed out and was killed
leiw wrote: Hello, The following package for my company mail-gateway: Centos 4.4 spamassassin-3.2.0-1.el4.rf clamd-0.90.2-1.el4.rf MailScanner-perl-MIME-Base64-3.05-5 postfix-2.2.10-1.RHEL4.2 I was checked the maillog that always show the following message: May 16 10:29:01 mailgateway MailScanner[7437]: SpamAssassin timed out and was killed, failure 6 of 10 Is my computer not enough RAM to process spamassassin ? Odds are Mailscanner killed it during bayes expiry. Check for several left over bayes_*.expire file in your bayes directory. My suggestion would be to increase your spamassassin timeout in your mailscanner.conf. Personally, I've got mine set to 15 minutes (900 seconds), largely because I have *never* run into an instance where spamassassin really got hung up in such a way that MailScanner had to kill it. Every such timeout has been an error on MailScanner's part, not SA's. In lieu of that, or perhaps in addition, you can try disabling bayes_auto_expire in your local.cf file, then run sa-learn --force-expire a couple times a day from a cronjob.
Re: test=none
Matt Kettler wrote: Matt Kettler wrote: Daryl C. W. O'Shea wrote: I get now hints from the logfiles concerning a timeout, my trusted/internal networks in local.cf are set as follwing --- trusted_networks 80.123.XXX.XXX trusted_networks 80.122.XXX.XXX internal_networks 192.168.1.0/24 internal_networks 192.168.2.0/24 internal_networks 127.0.0.1 --- That doesn't pass a lint check, does it? If it does you're using a really old version of SpamAssassin. If it doesn't it's because internal_networks must also be trusted and if you're using 3.2, 127.0.0.1 is always trusted+internal (so it'll warn about it already being configured). Interesting.. How does 3.2 deal with a trusted MX that must accept mail directly from dialup nodes without SMTP AUTH? In older versions, you'd configure that server to be trusted but make it not a member of internal_networks to avoid the DUL tests being applied to it. Nevermind.. I wrapped my brain around it backwards.. Yeah. FWIW, though, for net checks to be useful you always want your MX to be trusted+internal. If your MX also acts as an MSA you'll still want it to be trusted+internal and have your users use some sort of auth that shows up in the Received header. If the relay is just an MSA, then yeah, trusted and not internal is workable and possibly advisable (although I'd use msa_networks instead). Daryl
Re: X-Spam-Status: No, hits=? required=?
Maybe i wasn't clear. i guess it was the way i asked. Anyone know why I'd keep seeing this in the mail herders of email scanner for spam X-Spam-Status: No, hits=? required=? My setup currently uses spamc v2.40 on hostA to forward to spamd v3.1.8 on hostB My local.cf on hostB is setup with... required_hits 8.0 rewrite_header Subject *SPAM* It's only temporary setup until i can upgrade the primary MX on hostA On 5/15/07, Matt Kettler [EMAIL PROTECTED] wrote: ip guy wrote: Hi all Anyone know why see X-Spam-Status: No, hits=? required=? in the email header after delivery and spam scanning ? My local.cf http://local.cf file looks like this required_score 8.0 report_safe 1 rewrite_header Subject *SPAM* Do you use spamc? Was the message larger than the -s parameter to spamc (default 500k)? If yes to both, then spamc skipped scanning the message because it was too large. There are some large spams out there, but there are relatively few of them. On the other hand, there are lots of large nonspam mails (attachments), and scanning large messages consumes a lot of CPU and memory. You can raise your -s to make spamc feed larger messages to spamd, but be aware that this comes at a price of increased resource usage, so choose a balance that fits your traffic load.
Re: X-Spam-Status: No, hits=? required=?
On Wed, May 16, 2007 at 02:45:54PM +1000, ip guy wrote: Anyone know why I'd keep seeing this in the mail herders of email scanner for spam X-Spam-Status: No, hits=? required=? Whatever you have calling SA is adding markup. SA won't ever put in question marks. My guess is that it's timing out or something, but you'd have to figure that out. -- Randomly Selected Tagline: You will gain money by a speculation or lottery. pgp4mlq6ykfZt.pgp Description: PGP signature
Re: test=none
Daryl C. W. O'Shea schrieb: --- trusted_networks 80.123.XXX.XXX trusted_networks 80.122.XXX.XXX internal_networks 192.168.1.0/24 internal_networks 192.168.2.0/24 internal_networks 127.0.0.1 --- I am using the SuSE rpm spamassassin-3.1.8-9.2 (OpenSuSE 10.1) - I am really not a specialist in configuring spamassassin so I am using almost the default values from the SuSE config. I inserted those trusted/internal networks lines because I get often these ALL_TRUSTED Headers - maybe thats the wrong solution for it. I printed a little network topology of my net - can anybody tell me please, what really should be mentioned in local.conf (trusted_networks, internal_networks)? 192.168.2.0(net) --- 80.123.XXX.XXX ~~~VPN~~~ 80.122.XXX.XXX --- 192.168.1.0 (net)- 192.168.1.104 (mailserver) Imap4-SSL and Smtp is portforwarded from the firewall to the mailserver. lg Martin
