Re: Spamasssassin 3.2.1 fun

2007-06-12 Thread Raymond Dijkxhoorn
Hi! My question was: Where to listen for the announcements? Here on this list? Some other channel? I've been getting RDJ updates via cron once a week for a while now. I don't see how that can be construed as abusive, but I'm game to unhook it while they figure out what to do. I'm not wanting

How to decrease the bayes database size

2007-06-12 Thread Richard Smits
Hello, We realy need some help here. It has come to our attention that our bayes database is 2.4 GB big. It is really slowing down our servers and they have a big cpu load. Now we have tried the trick with the sa-learn --force-expire , and it deletes a lot of entrys, but the file is not

RE: How to decrease the bayes database size

2007-06-12 Thread Stéphane LEPREVOST
Hi, Same problem here with a 1.3G bayes_seen file. No CPU load linked to this but a too big file is never good... Can someone help to deal with this ? As long as I remember this problem were discussed a lot of time here but I never saw a trick for this -Message d'origine- De :

RE: How to decrease the bayes database size

2007-06-12 Thread Randal, Phil
bayes_seen just grows like topsy. All you need to do is delete it and let SA recreate it. Stop spamd / MailScanner / whatever. check permissions on bayes_seen rm bayes_seen restart do an sa-learn to make sure it still works (if it doesn't, reset permissions on the newly created bayes_seen).

RE: How to decrease the bayes database size

2007-06-12 Thread Stéphane LEPREVOST
Hi Phil, Thanks for this tip but what about the efficiency of the Bayes Database after this operation ? I was thinking that the most this file can remember, the most the bayes filtering is efficient... In the limit of a reasonable file size of course ! As Richard said, with the sa-learn

Sa-

2007-06-12 Thread Emre BALCI
Hi All I have to make something after sa-update ? like copy files to anywhere ? Bored stiff? Loosen up... Download and play hundreds of games for free on Yahoo! Games. http://games.yahoo.com/games/front

how to configure spamassassin in MS Exchange 2003 server

2007-06-12 Thread sg
hi We are using MS Exchange 2003 server on windows 2003 server. We have registered with domain service and using 50 mail users. We are getting lot of spam mails. I want to know the configuring details of Mail-spamassassin-3.1.7 and how to control the spam mails.. -- View this message in

Re: These are getting through SA...

2007-06-12 Thread Mark Martinec
Luis, I don't have any URIBL rules firing up (SA 3.2.0 from source here, most of the other relevant info is in the header of the mail I sent before to test). Where did you get them? [...] But the main difference between the live run and the ones I did with SA by itself (both as root and as

RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available

2007-06-12 Thread Daniel J McDonald
On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: I'm seeing the same kind of messages mentioned after compiling from source on Redhat ES4 and running make test. I'm wondering if this is the reason: + make FULLPERL=/usr/bin/perl test /usr/bin/perl5.8.7 build/mkrules --exit_on_no_src --src

Re: ANNOUNCE: Apache SpamAssassin 3.2.1 available

2007-06-12 Thread Justin Mason
Daniel J McDonald writes: On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: I'm seeing the same kind of messages mentioned after compiling from source on Redhat ES4 and running make test. I'm wondering if this is the reason: + make FULLPERL=/usr/bin/perl test /usr/bin/perl5.8.7

RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available

2007-06-12 Thread Stein, Mr. Fred
-Original Message- From: Daniel J McDonald [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 12, 2007 7:29 AM To: users@spamassassin.apache.org Subject: RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: I'm seeing the same kind of

Re: ANNOUNCE: Apache SpamAssassin 3.2.1 available

2007-06-12 Thread Daniel J McDonald
On Tue, 2007-06-12 at 12:45 +0100, Justin Mason wrote: Daniel J McDonald writes: On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: I'm seeing the same kind of messages mentioned after compiling from source on Redhat ES4 and running make test. I'm wondering if this is the reason:

Re: ANNOUNCE: Apache SpamAssassin 3.2.1 available

2007-06-12 Thread Justin Mason
Daniel J McDonald writes: On Tue, 2007-06-12 at 12:45 +0100, Justin Mason wrote: Daniel J McDonald writes: On Mon, 2007-06-11 at 21:09 -0400, Rose, Bobby wrote: I'm seeing the same kind of messages mentioned after compiling from source on Redhat ES4 and running make test. I'm

Re: ANNOUNCE: Apache SpamAssassin 3.2.1 available

2007-06-12 Thread Duncan Hill
On Tue, June 12, 2007 13:33, Justin Mason wrote: Daniel J McDonald writes: So, you can't build the RPM as root. I just added all of the various groups to my user, set up a user build directory tree, compiled it under my username and it tested fine, at least to the point that it normally

Re: How to decrease the bayes database size

2007-06-12 Thread Matt Kettler
Richard Smits wrote: Hello, We realy need some help here. It has come to our attention that our bayes database is 2.4 GB big. It is really slowing down our servers and they have a big cpu load. Now we have tried the trick with the sa-learn --force-expire , and it deletes a lot of entrys,

Re: Sa-

2007-06-12 Thread Daniel J McDonald
On Tue, 2007-06-12 at 02:17 -0700, Emre BALCI wrote: Hi All I have to make something after sa-update ? only if you used sa-compile, then you would have to run sa-compile again. like copy files to anywhere ? Nope. sa-update puts them in the correct place. If you are using a daemonized

Re: Sa-

2007-06-12 Thread Matt Kettler
Emre BALCI wrote: Hi All I have to make something after sa-update ? like copy files to anywhere ? If you use spamd, it needs to be restarted, but you don't need to copy the files.

Re: how to configure spamassassin in MS Exchange 2003 server

2007-06-12 Thread Matt Kettler
sg wrote: hi We are using MS Exchange 2003 server on windows 2003 server. We have registered with domain service and using 50 mail users. We are getting lot of spam mails. I want to know the configuring details of Mail-spamassassin-3.1.7 and how to control the spam mails.. I'd offer to

AW: how to configure spamassassin in MS Exchange 2003 server

2007-06-12 Thread Starckjohann, Ove
i would also agree with Matt, to add a dedicated server running SpamAssassin and tunnel all incoming mail through it, OR: we're are using a proxy-Server: NoSpamProxy (NSP) (http://www.nospamproxy.com/) to check all incoming and outgoing mails. Incoming mails are also send to a dedicated

No buffer space available

2007-06-12 Thread Mike Fahey
I am seeing this error. Any Idea how to fix this? Freebsd 6.2 SpamAssassin-3.2.0 spamd[46771]: bayes: cannot open bayes databases /usr/local/share/spamassassin/bayes_* R/W: lock failed: No buffer space available Thanks. -- With best regards, Mike Fahey - Systems Administration

DUL Lists? - OT

2007-06-12 Thread Dan Barker
I'm receiving a lot of 421 rejects with: Unexpected connection response from server: 421 mails from 74.254.46.133 refused: local dynamic IP address 74.254.46.133 Does anybody recognize the text of the message? I'd like to confirm that there are no popular DUL lists showing 74.254.46.133 as

Re: These are getting through SA...

2007-06-12 Thread Luis Hernán Otegui
Well, I dint't have rbl_timeout set, but after your mail, I did. The DNSs I have set in resolv.conf are mine, they both cache and work as internal and external resolvers. But the UNLP NOC got screwed in the last days, so setting the timeout a little higher wont't hurt. Thanks for the suggestion.

Re: DUL Lists? - OT

2007-06-12 Thread arni
Dan Barker schrieb: I'm receiving a lot of 421 rejects with: Unexpected connection response from server: 421 mails from 74.254.46.133 refused: local dynamic IP address 74.254.46.133 Does anybody recognize the text of the message? I'd like to confirm that there are no popular DUL lists showing

Re: No buffer space available

2007-06-12 Thread -- [ UxBoD ] --
What O/S ? What kernel release ? Have you tuned any system parameters for TCP buffers ? Is there high traffic on the server ? Somebody isn't trying to DDoS your server are they ? On Tue, 12 Jun 2007 10:26:40 -0400, Mike Fahey [EMAIL PROTECTED] wrote: I am seeing this error. Any Idea how to fix

Re: How to decrease the bayes database size

2007-06-12 Thread Theo Van Dinter
On Tue, Jun 12, 2007 at 10:07:15AM +0200, Stéphane LEPREVOST wrote: Thanks for this tip but what about the efficiency of the Bayes Database after this operation ? The _seen database just tracks which mails have been learned from, and has no effect on the ratings coming out of the Bayes system.

Re: Spamasssassin 3.2.1 fun

2007-06-12 Thread Theo Van Dinter
On Tue, Jun 12, 2007 at 03:45:25AM +0200, Raymond Dijkxhoorn wrote: If you want to use SARE rules, just take it easy with the frequency you are getting the files with. Or use sa-update instead of RDJ. :) -- Randomly Selected Tagline: Advice is a dangerous commodity. pgp7JBmuFyEWS.pgp

Re: Selectively disabling RBL services in SpamAssassin

2007-06-12 Thread Theo Van Dinter
On Mon, Jun 11, 2007 at 09:25:32PM -0500, Lindsay Haisley wrote: The Mail::SpamAssassin::Conf is silent on this issue. Is there a way to do this? Set the scores for all rules querying the RBLs you want to disable to 0. -- Randomly Selected Tagline: He was like Tigger on 'ludes. - Carol Herre

RE: DUL Lists? - OT

2007-06-12 Thread Dan Barker
Dan Barker schrieb: I'm receiving a lot of 421 rejects with: Unexpected connection response from server: 421 mails from 74.254.46.133 refused: local dynamic IP address 74.254.46.133 Does anybody recognize the text of the message? I'd like to confirm that there are no popular DUL

Re: DUL Lists? - OT

2007-06-12 Thread arni
Dan Barker schrieb: Dan Barker follows up: I think you confirmed that my delegated rDNS is proper and that the 421 message is in error. But I'm not certain. Can you please confirm your assessment? My ISP provides me a /26 subnet out of the 74.254.46.0 class C, so the rDNS delegation is done with

RE: Overriding Scores

2007-06-12 Thread Bowie Bailey
susan barnes wrote: Theo Van Dinter wrote: Susan Barnes wrote: The site rules should be in /etc/mail/spamassassin/ with a file updates_spamassassin_org.cf including the sets in /etc/mail/spamassassin/updates_spamassassin_org Also, updates don't live there, at least by default.

Use of uninitialized value in hash element at Received.pm line 357

2007-06-12 Thread Andy Millar
Hi there, I get the following error when trying to use sa-learn. SA Learn: Use of uninitialized value in hash element at /usr/share/perl5/Mail/SpamAssassin/Message/Metadata/Received.pm line 357., Use of uninitialized value in hash element at

Re: DUL Lists? - OT

2007-06-12 Thread SM
At 07:42 12-06-2007, Dan Barker wrote: I'm receiving a lot of 421 rejects with: Unexpected connection response from server: 421 mails from 74.254.46.133 refused: local dynamic IP address 74.254.46.133 That IP address is not dynamic. The reverse DNS is correct. Does anybody recognize the

Re: These are getting through SA...

2007-06-12 Thread Mark Martinec
Luis, Namely with 22 RBL results coming back, the last one (which was the crucial URIBL test) had a timeout of 0 and was ignored even though dns result did arrive. Moreover, there is a bug in Mail::SpamAssassin::Dns, where a late-spawned URIBL queries (which only start after Razor,

emails to non existent recipients -- forward to spam honey pot.

2007-06-12 Thread mbano
Hallo all, is there a way to higher score the email sent to non-existent local recipient (detected via ldap) and even so collect them to honex pot, smamaccount for re-feed the bayes. especially if the sender is the same .. thanks for ideas... cheers Marco -- View this message in context:

Re: emails to non existent recipients -- forward to spam honey pot.

2007-06-12 Thread Ralf Hildebrandt
* mbano [EMAIL PROTECTED]: Hallo all, is there a way to higher score the email sent to non-existent local recipient (detected via ldap) and even so collect them to honex pot, smamaccount for re-feed the bayes. especially if the sender is the same .. Depends on your MTA, with postfix

Re: DUL Lists? - OT

2007-06-12 Thread John Rudd
Dan Barker wrote: I'm receiving a lot of 421 rejects with: Unexpected connection response from server: 421 mails from 74.254.46.133 refused: local dynamic IP address 74.254.46.133 In case there's any doubt about whether or not the Botnet plugin tripped up on the PTR record situation (and

Spamasssassin 3.2.1 not yet on CPAN

2007-06-12 Thread Marc Perkel
Just wondering how long it's going to take to get SA 3.2.1 into CPAN?

RE: DUL Lists? - OT

2007-06-12 Thread Dan Barker
Thanks for yet _more_ confirmation. However, if botnet is depending on DNS pulling the right stuff, and someone's DNS is pulling the wrong stuff, then it still could be botnet; just not directly. Definitions: right: follow the CNAME to get a PTR wrong: return the CNAME as an answer. I'm trying

Re: DUL Lists? - OT

2007-06-12 Thread arni
Dan Barker schrieb: Definitions: right: follow the CNAME to get a PTR wrong: return the CNAME as an answer. Yes thats what I meant, the script on the other side seems to be to stupid to realise that the first lookup isnt the final answer, in this wrong answer it finds the own ip and

Re: Spamasssassin 3.2.1 not yet on CPAN

2007-06-12 Thread Justin Mason
Marc Perkel writes: Just wondering how long it's going to take to get SA 3.2.1 into CPAN? oops. forgot to upload it. ;) --j.

HELP!!! SA timing out after 3.2 upgrade

2007-06-12 Thread Jean-Paul Natola
Hi all I just upgraded to 3.2 Now every message is timing out- If anyone has any ideas can you CC me at [EMAIL PROTECTED] As no messages are coming in THANKS Jean-Paul Natola Network Administrator Information Technology Family Care International 588 Broadway Suite 503 New York, NY

RE: HELP!!! SA timing out after 3.2 upgrade-FIXED

2007-06-12 Thread Jean-Paul Natola
Sorry all I just panicked - I didn't know that upgrading would replace my startup script - So I just added the arguments back into the startup script. -Original Message- From: Jean-Paul Natola [mailto:[EMAIL PROTECTED] Sent: Tuesday, June 12, 2007 2:41 PM To:

Re: HELP!!! SA timing out after 3.2 upgrade-FIXED

2007-06-12 Thread Kris Deugau
Jean-Paul Natola wrote: I didn't know that upgrading would replace my startup script - So I just added the arguments back into the startup script. Most distro packages include a place for you to put startup options that override the default ones, and don't get overwritten on upgrades. This

Errors in logs after upgrade from debian sarge to etch

2007-06-12 Thread LESOUEF Emmanuel
Hello, After upgrading SA from 3.0 to 3.1, I get the attached logs when I restart spamd. This seems to be a configuration error. In fact, the local.cf file has been wrote for the 3.0 version. Can someone help me with it ? Thanks. -- Emmanuel Lesouef DSI | CRBN t : 0231069671 m : [EMAIL

RE: HELP!!! SA timing out after 3.2 upgrade-NOT

2007-06-12 Thread Jean-Paul Natola
Sorry all I just panicked - I didn't know that upgrading would replace my startup script - So I just added the arguments back into the startup script. -Original Message- Now that I added the arguments back to my startup script for SA my CPU usage is getting nailed 43

RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available

2007-06-12 Thread Rosenbaum, Larry M.
From: Duncan Hill [mailto:[EMAIL PROTECTED] On Tue, June 12, 2007 13:33, Justin Mason wrote: Daniel J McDonald writes: So, you can't build the RPM as root. I just added all of the various groups to my user, set up a user build directory tree, compiled it under my username and it

RE: ANNOUNCE: Apache SpamAssassin 3.2.1 available

2007-06-12 Thread Daniel J McDonald
On Tue, 2007-06-12 at 16:07 -0400, Rosenbaum, Larry M. wrote: From: Duncan Hill [mailto:[EMAIL PROTECTED] On Tue, June 12, 2007 13:33, Justin Mason wrote: Daniel J McDonald writes: So, you can't build the RPM as root. Very interesting, but I ran into this problem on a Solaris

Re: These are getting through SA...

2007-06-12 Thread Bill Landry
Mark Martinec wrote the following on 6/12/2007 3:53 AM -0800: Luis, I don't have any URIBL rules firing up (SA 3.2.0 from source here, most of the other relevant info is in the header of the mail I sent before to test). Where did you get them? [...] But the main difference between the live

RE: These are getting through SA...

2007-06-12 Thread Randal, Phil
Well caught, Mark! I'd come to similar conclusions even without digging into the code when I saw DNS-related strangeness when I was testing SA 3.2.0 a few weeks back. I'll second your request that SA process all results it has collected on timeout, instead of discarding them. Cheers, Phil

Re: These are getting through SA...

2007-06-12 Thread Mark Martinec
Bill, Mark, just curious if you are running Botnet? I found that some messages cause the Botnet RDNS test to timeout after hanging for about 30 seconds, and then network test randomly fail (primarily URIBL tests). I found that if I disable Botnet, then all network tests will run fine on

RE: These are getting through SA...

2007-06-12 Thread Randal, Phil
Bill, I was getting this sort of symptom without using Botnet. It's almost as if something's deadlocking somewhere in SA (until the timeout kicks in). Phil -Original Message- From: Bill Landry [mailto:[EMAIL PROTECTED] Sent: 12 June 2007 22:47 To: users@spamassassin.apache.org

Re: Spamasssassin 3.2.1 not yet on CPAN

2007-06-12 Thread Jerry Durand
At 11:04 AM 6/12/2007, Justin Mason wrote: Marc Perkel writes: Just wondering how long it's going to take to get SA 3.2.1 into CPAN? oops. forgot to upload it. ;) --j. This it? We going back in versions?

Re: These are getting through SA...

2007-06-12 Thread Bill Landry
Mark Martinec wrote the following on 6/12/2007 3:05 PM -0800: Bill, Mark, just curious if you are running Botnet? I found that some messages cause the Botnet RDNS test to timeout after hanging for about 30 seconds, and then network test randomly fail (primarily URIBL tests). I found that

Re: Spamasssassin 3.2.1 not yet on CPAN

2007-06-12 Thread John D. Hardin
On Tue, 12 Jun 2007, Jerry Durand wrote: This it? We going back in versions? Spam detector and markup engine Mail-SpamAssassin-3.1.9 Nope. Bugfix release for 3.1.x series. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174

Rejecting spam during SMTP session

2007-06-12 Thread arni
Hi, for a while i've been watching my spamassassin perform great on almost all spam - i've never had any false positives and also a very low count of false negatives. So I thought about rejecting sure spam during the SMTP session and came up with a few bits of shellscript code thats rejecting

Re: These are getting through SA...

2007-06-12 Thread Mark Martinec
Bill, Mark, I patched Dns.pm but this didn't resolve the issue for me. You can test with the sample messages I posted to bugzilla: http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5506 Yes, it is the same problem as I describe in

Re: No buffer space available

2007-06-12 Thread Matt Kettler
That wouldn't be TCP buffers. It's doing file I/O not network I/O. Since it's file buffers, which on nearly every OS are dynamic, it implies Mike's machine is out-of-memory. --[ UxBoD ]-- wrote: What O/S ? What kernel release ? Have you tuned any system parameters for TCP buffers ? Is there

Re: Rejecting spam during SMTP session

2007-06-12 Thread Matt Kettler
arni wrote: Hi, for a while i've been watching my spamassassin perform great on almost all spam - i've never had any false positives and also a very low count of false negatives. So I thought about rejecting sure spam during the SMTP session and came up with a few bits of shellscript code

Embarq/Synacor's SA Setup

2007-06-12 Thread Chris
Before I put my foot in my mouth to my ISP, I'd like to make sure I'm right. From the headers below, what does Embarq/Synacor consider to be ALL_TRUSTED? Received: from localhost (localhost.localdomain [127.0.0.1]) by smtp.embarq.synacor.com (Postfix) with ESMTP id 3ECA115F5EC

Freebsd Port of SA 3.2.1

2007-06-12 Thread Michael Scheidell
If anyone wants a 'pre release' of the Freebsd sa 3.2.1 portfile, you can download it here: http://www.secnap.com/downloads/sa321.tgz Instructions: rm everything in /usr/ports/mail/p5-Mail-SpamAssassin, untar above there, make or portupgrade it. Some dependencies that have not been committed to

sa-update claims it's up to date

2007-06-12 Thread Hans Holt
I've installed spamassassin 3.1.8 as distributed with opensuse linux 10.2. Following the installation, I used sa-update to download what I thought were the latest updates available in the default updates.spamassassin.org channel. These were downloaded to /var/lib/spamassassin/3.001008. The

Re: Rejecting spam during SMTP session

2007-06-12 Thread hamann . w
Hi arni, once you are reading the .qmail file, the mail message has been accepted and queued. You can use qmail-scanner (which runs before queuing the message) to reject Wolfgang Hamann Hi, for a while i've been watching my spamassassin perform great on almost all spam - i've never

Re: sa-update claims it's up to date

2007-06-12 Thread Theo Van Dinter
On Wed, Jun 13, 2007 at 01:44:43PM +1000, Hans Holt wrote: I've been running sa-update daily ever since, sa-update claims that no newer updates are available. The version sa-update downloaded the There haven't been 3.1 updates in a while, fwiw. first time was 507739 but on

SARE -- rulesemporium.com

2007-06-12 Thread Chuck Payne
Hi, I been using a script to pull updates from SARE, but it seem to be stuck every night for a night now I am see wget process stuck on www.rulesemporium.com. Are they just down? Or gone for the count? www.britishscifiexchange.com

Problems with Received: header checks and ALL_TRUSTED rule...

2007-06-12 Thread Anthony Kamau
All, I have several remote users in a country well known to inject spam mail. These users are connected via dialup links to our backend Exchange Server and they are able to send email. The Exchange Server relays all email to the front end mail server running Red Hat Enterprise Linux AS 4 and