Re: Could not create inet socket

2014-06-20 Thread Mark Martinec
Buzz, When I try to run spamassassin I get the following error: Starting SpamAssassin Mail Filter Daemon: Jun 18 05:08:09.140 [21543] warn: server socket setup failed, retry 1: spamd: could not create INET socket on 127.0.0.1:783: Cannot assign requested address Looks like SpamAssassin

Re: Determining svn version

2014-06-18 Thread Mark Martinec
Alex, Perhaps a question for the dev list, but I've just pulled the latest version from svn, r1603656, according to the output of svn. Should be alright. The Subversion database of ASF is common to multiple projects, so revision numbers do monotonically increase, but not every number

Re: No DNS available

2014-06-17 Thread Mark Martinec
Walter, I'm getting this: eval failed: available_nameservers: No DNS servers available! I do have nameservers available, and Net::DNS is installed, so I'm a bit stuck. Is the file /etc/resolv.conf readable by user running spamd? Does it contain valid 'nameserver' entries? Running spamd (or

Re: No DNS available

2014-06-17 Thread Mark Martinec
Walter, Thanks for the response. I'm actually not using spamc/spamd; just running spamassassin from procmail. But anyway, /etc/resolv.conf is world readable and contains valid nameserver entries. No, I'm not running it in a chrooted environment of any kind. There are no dns directive in my

Re: No DNS available

2014-06-17 Thread Mark Martinec
Jun 17 21:10:28.016 [832] dbg: dns: servers obtained from Net::DNS : Jun 17 21:10:28.016 [832] dbg: dns: eval failed: available_nameservers: No DNS servers available! This is the crux. I can now reproduce the problem, checking ... Mark

Re: No DNS available

2014-06-17 Thread Mark Martinec
I can now reproduce the problem, checking ... Mark Looks like a change in Net::DNS 0.76, which no longer has a field $res-{nameserver}, but has now fields nameserver4 and nameserver6, with an official access method $res-nameservers. --- Mail/SpamAssassin/DnsResolver.pm.orig 2014-05-07

Re: 60_adsp_override_dkim.cf (was: Plans for a DMARC plugin ???)

2014-05-01 Thread Mark Martinec
If you want to implement a similar effect to the new yahoo and aol DMARC policy by SpamAssassin, use rules similar to the default rules in 60_adsp_override_dkim.cf: adsp_override yahoo.com custom_med adsp_override yahoo.com.ar custom_med adsp_override yahoo.com.au custom_med

Re: SA Info: dns: randomly showing up

2014-05-01 Thread Mark Martinec
Quanah Gibson-Mount wrote: Periodically, I'm finding dns: SA info lines coming from Amavis via SA. I'm not clear why these are triggered, and only for a few of the many thousands of emails processed per day. Insight appreciated, I'm running 3.4.0. An example: May 1 04:13:15 edge01

Re: SA Info: dns: randomly showing up

2014-05-01 Thread Mark Martinec
https://rt.cpan.org/Public/Bug/Display.html?id=83451 Thanks! I see your suggested fix was rejected. :/ My takeaway from the comment is that SA needs to handle the alarms better when it comes to Net::DNS? I think they just didn't fully understand the issue, or they don't care. The only thing

Re: Plans for a DMARC plugin ???

2014-04-30 Thread Mark Martinec
On 04/30/2014 10:10 AM, Michael Storz wrote: Are there any plans for a DMARC plugin for SpamAssassin? Reacting to a DMARC policy of reject (AOL/Yahoo) seems only feasible with SpamAssassin because so many exceptions are needed for software which destryes DKIM signatures: I

Re: Plans for a DMARC plugin ???

2014-04-30 Thread Mark Martinec
I agree that a DMARC SpamAssassin plugin would be valuable. Michael Storz wrote: How about implementing it in Amavisd-new in addition (I couldn't resist to ask here too :-) I think it more naturally fits into SpamAssassin, contributing to the final score on equal terms with other rules. Also,

Re: Differences b/w 3.3.0 and 3.4.0?

2014-04-11 Thread Mark Martinec
Robert Nicholson wrote: My first attempt an integrating 3.4.0 (hopefully to solve the DnsResolver.pm Invalid Argument issue) ends up with Subroutine NetAddr::IP::STORABLE_freeze redefined at /usr/local/lib64/perl5/NetAddr/IP.pm line 362. at /usr/local/lib64/perl5/NetAddr/IP.pm line 362.

Re: sa-update fails - bug 6702 reappearing?

2014-03-04 Thread Mark Martinec
Dieter Braun wrote: # sa-update rules: failed to run T_HEADER_FROM_DIFFERENT_DOMAINS test, skipping: (Can't locate object method check_equal_from_domains via package Mail::SpamAssassin::PerMsgStatus at (eval 1008) line 97. You are missing a line: loadplugin

Re: Can't get started with SpamAssassin

2014-02-26 Thread Mark Martinec
Walter Hurry wrote: I'm trying to get started with SpamAssassin on FreeBSD 9.2. This is SpamAssassin 3.3.2, as that's the version in the FreeBSD ports. SpamAssassin is installed with all its dependencies, but when I run sa-update (as root), I get the following output: Can't load

Re: Can't use CONF_TYPE_IPADDRLIST in custom plugin

2014-02-20 Thread Mark Martinec
psychobyte, I'm trying to do some filtering on the originating IP address of a message using a custom plugin on SA-3.3.2-r1 I have this variable set in my .cf file(same as trusted networks var): awl_ignore_networks143.31/16 69.21/16 10.0.1/24 I've declared my awl_ignore_networks like

Re: SA 3.4.0 and Redis

2014-02-17 Thread Mark Martinec
2014-02-18, Jason Haar wrote: We have a geographically distributed edge mail relay network (some in the US and some in Europe) and I'm wondering if the new REDIS support could be used to centralize our Bayes? If you have a fast and reliable connection between the two, then in principle it

Re: ANNOUNCE: Apache SpamAssassin 3.4.0 available

2014-02-12 Thread Mark Martinec
On 2/12/2014 11:53 AM, jpff wrote: I got the same error installing via cpan. Trouble is I do not know where the other system is or how to find it. There are a number of Util.pm files ll over the place. This is on a debian system but not really using their package This should get rid of

Re: ANNOUNCE: Apache SpamAssassin 3.4.0 available

2014-02-11 Thread Mark Martinec
Benny Pedersen wrote: On 2014-02-12 02:33, Jim Knuth wrote: Util.pm and AskDNS.pm both are available. What must I do? Any ideas or solution greatly appreciated. Thanks. https://issues.apache.org/SpamAssassin/show_bug.cgi?id=7007 as i read it you have found a bug, with i created a ticket for

Re: Hint needed for Troubleshooting

2014-01-28 Thread Mark Martinec
I have a Debian-System on Jessie/Sid and sa-update is not working root@falstaff:~# su debian-spamd -c sa-update -D --gpghomedir /var/lib/spamassassin/sa-update-keys Jan 28 09:30:32.570 [27955] dbg: generic: SpamAssassin version 3.3.2 Jan 28 09:30:32.570 [27955] dbg: generic: Perl 5.018002,

Re: sa-learn error

2014-01-21 Thread Mark Martinec
Inkove it the same as I've done for years: sa-learn --spam -f spambox --mbox $ sa-learn --help -f file Read list of files/directories from file so what is in your file 'spambox' ? Mark

Re: sa-learn error

2014-01-21 Thread Mark Martinec
$ sa-learn --help -f file Read list of files/directories from file so what is in your file 'spambox' ? That contains the mailbox file with about 30 spam messages I'm trying to learn. So you get what you asked for. Use --mbox instead of -f. Mark

Re: sa-learn error

2014-01-20 Thread Mark Martinec
Andy Jezierski wrote: Tried doing an sa-learn on some spam messages that didn't get flagged as such and am receiving the following error: archive-iterator: no access to ... : File name too long at /usr/local/lib/perl5/site_perl/5.18/Mail/SpamAssassin/ArchiveIterator.pm line 891. Learned

Re: tons of forged bills in german

2014-01-18 Thread Mark Martinec
Michael Monnerie wrote: Dear list, since this week there are tons of very good forged bills that look like real, from big companies like telekom, vodafone, etc. They look like the original, and just the link in the middle, where it says download your bill here, goes to a site containing trojans.

Re: SA 3.4.0rc5 Redis DB Help

2014-01-16 Thread Mark Martinec
Andy Jezierski writes: Are there any instructions in setting up the Bayes DB using a Redis server? Yes, in release notes (currently also in build/announcements/PROPOSED-3.4.0.txt in svn). Pretty much exactly as you already have it. I've installed the server, took the sample config options

Re: SA 3.4.0rc5 Redis DB Help

2014-01-16 Thread Mark Martinec
me writes: Note that bayes_token_ttl and bayes_seen_ttl have no effect on entries loaded from a backup dump, they are all given a 'current' timestamp (with some random offset so that they will not expire at exactly the same time). But for a steady-state, with these *_ttl settings you can

Re: Availability of 3.4.0 release candidate 5

2014-01-13 Thread Mark Martinec
2014-01-13 08:49, Andreas Schulze wrote: thanks for that great software. The only problem I found is an issue with sa-update: My network require to use a http proxy incl. authentication. To load updates I currently (sa-3.3.2) set HTTP_PROXY=... for sa-update. That does not work anymore in 3.4

Re: Availability of 3.4.0 release candidate 5

2014-01-12 Thread Mark Martinec
Wolfgang writes: what would be the minimum version of perl required to upgrade? For features that already existed in 3.3 I believe the requirement for version of perl has not changed, should work with 5.8.2 or later, possibly even with 5.8.0 (perhaps with some Unicode-related problems). If

Re: Huh? Variable length lookbehind?

2013-12-27 Thread Mark Martinec
Mike, I have a problem with a rule on a newly installed relay on which --lint throws a warning on an old local rule, squawking about Variable length lookbehind not implemented. I simplified the rule trying to discover the problem and it seems to be with the /i modifier: This rule does

Using bgp-spamd DNSBL with SpamAssassin

2013-12-27 Thread Mark Martinec
OpenBSD's spamd(8) is a SPAM deferral daemon, implementing greylisting, DNS-based RBL lists, tarpitting etc ( http://www.openbsd.org/spamd/ ). It is commonly deployed along with a pf packet filter (OpenBSD's firewall), adjusting its tables dynamically. Despite its name, spamd is not related or

Re: Available of 3.4.0 Release Candidate 3

2013-10-14 Thread Mark Martinec
On 10/14/2013 03:31 PM, Kai Schaetzl wrote: Kevin A. McGrail wrote on Sun, 13 Oct 2013 14:14:02 -0400: Preferably a perl module IO::Socket::IP is used (if it is available) for network communication regardless of a protocol family - for DNS queries, by spamd server side, and by a client code in

Re: Available of 3.4.0 Release Candidate 3

2013-10-14 Thread Mark Martinec
Andreas Schulze wrote: thanks for that great software first! I found two minor issues in perl documentation and attach a patch. There is an other documentation issue in Conf.pm (found by debian lintian): W: spamassassin: manpage-has-errors-from-man

Re: Available of 3.4.0 Release Candidate 3

2013-10-13 Thread Mark Martinec
On Sunday 13 October 2013 15:17:40 Kai Schaetzl wrote: There doesn't seem to be a package perl-IO-Socket-IP available from any repo. On Debian (and raspbian) it's called libio-socket-ip-perl, on FreeBSD it is net/p5-IO-Socket-IP. Don't know about others. I don't know where the program fetch

Re: SPF failure very low score (DKIM whitelisting and ADSP rules)

2013-08-09 Thread Mark Martinec
On Friday 09 August 2013 00:26:09 Quanah Gibson-Mount wrote: Ok, so I imagine I want to do something like: header DKIM_ADSP_DISCARD eval:check_dkim_adsp('D') but only for facebook.com... I don't see exactly how I tie those two together? == To add POSITIVE spam score

Re: uridnsbl does not work with idn domains

2013-08-09 Thread Mark Martinec
On Friday 09 August 2013 01:13:38 Benny Pedersen wrote: seen idn spamming urls here that is not tested in uridnsbl, have spamassassin 3.4.0 not idn support yet ? is it just missing tld defines for idn domains ? should it be filled a bug ? There is currently (3.4.0) no specific IDN support

Re: Piping to sa-learn

2013-07-24 Thread Mark Martinec
On Wednesday 24 July 2013 17:48:47 Kareem Dana wrote: I am using SpamAssassin 3.3.2 on FreeBSD 9.1. I'd just like to confirm that I can pipe messages to sa-learn. The following commands should do the same thing, correct? # cat spammail | sa-learn --spam # sa-learn --spam spammail Yes, it

Re: Apache SpamAssassin 3.4.0 release candidate 2 - invitation to testers

2013-06-22 Thread Mark Martinec
On Saturday 22 June 2013 07:06:43 The Doctor wrote: Tweaking needed Test Summary Report t/bayesdbm_flock.t (Wstat: 0 Tests: 48 Failed: 1) Failed test: 39 t/sa_check_spamd.t (Wstat: 0 Tests: 7 Failed: 5) Failed tests: 1, 3-6 t/spamc_B.t

Re: Apache SpamAssassin 3.4.0 release candidate 2 - invitation to testers

2013-06-22 Thread Mark Martinec
On Saturday 22 June 2013 15:15:20 The Doctor wrote: So how can we test on such platform? 2) NetBSD, FreeBSD and OpenBSD are akin so some testers might be available. It is regularly in use on FreeBSD (7.2, 8.2, and 9.1), it has been tested on OpenBSD 5.2, and some time ago on NetBSD

Apache SpamAssassin 3.4.0 release candidate 2 - invitation to testers

2013-06-21 Thread Mark Martinec
This is not a formal announcement, but an invitation to a broader users community to try the release candidate of the coming release of Apache SpamAssassin version 3.4.0 . Preliminary release notes and a link to the package was published in a posting to the d...@spamassassin.apache.org mailing

Re: CLAMAV skipped on same email when sent from spamd, yet not skipped when sent from spamc.

2013-05-29 Thread Mark Martinec
Simon, I looked at scoring for an email on an SA installation and noticed differences between hand scanning with spamc and scanning with spamd. My manually scanned email hit CLAMAV sane security, (ignore Bayes because the user had Bayes process this and then asked me about this), whilst this

Re: Reducing SPAMD memory size?

2013-05-23 Thread Mark Martinec
My spamd tasks are using 100M to 300M each. Seems excessive. That's about normal for a 64-bit perl with current rulesets plus some additions. The in-memory (RSS) footprint is propbably 1/2 to 2/3 of that. What can I do to reduce this? On a 32-bit platform the virtual memory requirement is

Re: Weighted MIRRORED.BY files?

2013-03-24 Thread Mark Martinec
On Sunday March 24 2013 05:57:49 Dan Mahoney, System Admin wrote: sa-update also uses a mirror file which lists all of the URLs where the update can be downloaded from, optionally including weights for different mirrors. But there's no documentation or examples given for weighting. Anyone

Re: Several rules not hitting on 3.4 that do hit on 3.3.2

2013-03-07 Thread Mark Martinec
Missing the {hosts} part, which is now required in 3.4.0: --- DecodeShortURLs.pm~ 2011-07-25 17:56:57.0 +0200 +++ DecodeShortURLs.pm 2013-03-07 03:27:24.0 +0100 What version of the plugin are you patching? The last I could find in one of my old directories, it

Re: Several rules not hitting on 3.4 that do hit on 3.3.2

2013-03-06 Thread Mark Martinec
Yes, I am using DecodeShortURLs I have it on both the 3.3.2 and 3.4 systems Both show: 0.0 HAS_SHORT_URL Message contains one or more shortened URLs So I guess the question is which one is running DecodeShortURLs correctly 3.4 or 3.3.2 Missing the {hosts} part, which is now

Re: X-Relay-Countries on 3.3.2 vs 3.4

2013-03-05 Thread Mark Martinec
On Wednesday March 6 2013 01:06:22 Scott Ostrander wrote: cd /usr/share/GeoIP wget -N http://geolite.maxmind.com/download/geoip/database/GeoLiteCountry/GeoIP.dat.gz gunzip GeoIP.dat.gz Not to forget to download its IPv6 counterpart:

Re: Rule to check To and/or CC headers

2013-03-01 Thread Mark Martinec
Another thing I'd like to do, if possible, is check to see if the From address matches the return path and add to the spam score if they do not match. The inverse rule is already there (just use a meta rule negation of it): header RP_MATCHES_RCVD eval:check_mailfrom_matches_rcvd() describe

Re: NJABL is history

2013-03-01 Thread Mark Martinec
Axb wrote: If you're using SA 3.4 trunk: as temporary entry in local.cf # ONLY FOR SA 3.4 or higher!! dns_query_restriction deny njabl.org Thanks for reminding us of the new feature! Wrapped up in a conditional, for those wishing to switch between versions while keeping the same .cf

Re: sa-learn splice() offset past end of array at /usr/share/perl5/Mail/SpamAssassin/HTML.pm line 492 and 502.

2013-02-27 Thread Mark Martinec
Simon Loewenthal wrote: Just notcied sa-learn kick up a fuss with some files fed into it from a user's HAM directory in a dovecot directory. I put a copy of the ham on http://pastebin.com/MLEhYsG7 Could you go to the SpamAssassin bugzilla and open a bug for this, and attach the

Re: SA failed: Can't locate object method get_tag via package Mail::SpamAssassin::PerMsgStatus at (eval 86) line 425

2013-02-12 Thread Mark Martinec
Anirudha, So what should be the ideal setup of running binaries. I want Amavis running both Spamprotection and ANtivirus protection, hence i have below process running in current production 1. Postfix MTA 2. Amavisd 3. Clamd Should the spamd be running for spamprotection via amavis-new?

Re: SA failed: Can't locate object method get_tag via package Mail::SpamAssassin::PerMsgStatus at (eval 86) line 425

2013-02-12 Thread Mark Martinec
Anirudha, I have a stable running setup of postfix after-queue using amavis-new [currently using for content inspection and antivirus only] and would like to use this for additional spam protection. As i understand from the above comments to my query, i dont need to run the 'spamd' as

Re: SA failed: Can't locate object method get_tag via package Mail::SpamAssassin::PerMsgStatus at (eval 86) line 425

2013-02-11 Thread Mark Martinec
Anirudha Patil wrote: I have a MTA setup of [Postfix + Amavis-new + ClamAV + Spamassasin] of which only the spamassasin part is disabled. Now i wish to enable the Spamcontrol part. But after enabling the spamassasin option in amavis-new, it shows the below mentioned error. *(!!)SA

Re: SA failed: Can't locate object method get_tag via package Mail::SpamAssassin::PerMsgStatus at (eval 86) line 425

2013-02-11 Thread Mark Martinec
Anirudha, My Setup details: Postfix version: 2.7.3 Amavis-new version : 2.6.4-4 Spamassasin version : SpamAssassin version 3.0.1 running on Perl version 5.8.5 The get_tag method was only made public with version of SpamAssassin 3.0.3, which was about 8 years ago! You need a

Re: SA failed: Can't locate object method get_tag via package Mail::SpamAssassin::PerMsgStatus at (eval 86) line 425

2013-02-11 Thread Mark Martinec
Anirudha, Thank you Mark for the nice explanation. Just one question, can i upgrade my spamassasin to latest and still use it with amavis-new 2.6.4 version or does it also needs to be upgraded. Just that amavis required lots of depencies. Yes, I believe amavis-new 2.6.4 should be able to use

Re: what are these spamassain messages?

2012-12-28 Thread Mark Martinec
On Friday December 28 2012 10:47:58 john ffitch wrote: Not sure I understand. As far as I am away I am running the latest release SpamAssassin version 3.2.5 running on Perl version 5.10.1 If it matters, Debian i486, installed from CPAN Kevin What version of Net::DNS are you using?

Re: sa-update has not updated anything since SpamAssassin was installed several weeks ago

2012-12-19 Thread Mark Martinec
Ralph, Am I perhaps experiencing DNS issues? BTW, I'm using dev-perl/Net-DNS-0.700.0, so the thread sa-update don't update of 2012-12-13 probably does not apply? It does apply. Go for Net::DNS 0.71, or stick with 0.68. Net::DNS 0.69 and 0.70 are incompatible with sa-update from SpamAssassin

Re: sa-update generates errors

2012-12-17 Thread Mark Martinec
Illegal octal digit '8' ignored at /usr/share/perl5/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm line 1083 This is more likely a bug 6336: https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6336 fixed in 3.3.2. Mark

Re: sa-update generates errors

2012-12-17 Thread Mark Martinec
On Mon, 17 Dec 2012, Mark Martinec wrote: Illegal octal digit '8' ignored at /usr/share/perl5/Mail/SpamAssassin/Plugin/BodyRuleBaseExtractor.pm line 1083 This is more likely a bug 6336: https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6336 fixed in 3.3.2. Oops, sorry, apparently

Re: sa-update don't update

2012-12-13 Thread Mark Martinec
Victor, I just installed spamassassin on FreeBSD FreeBSD Kratos.strelna 9.0-RELEASE-p3 FreeBSD 9.0-RELEASE-p3 Dec 13 12:14:49.560 [78833] dbg: generic: SpamAssassin version 3.3.2 Dec 13 12:14:49.560 [78833] dbg: generic: Perl 5.014002, Dec 13 12:14:49.579 [78833] dbg: dns: Net::DNS version:

Re: sa-update don't update - FreeBSD ports patch

2012-12-13 Thread Mark Martinec
Michael, could you please fold-in the above (or similar) patch to FreeBSD port mail/p5-Mail-SpamAssassin Here is the 'patch-bug6872' patch file, suitable for inclusion in the /usr/ports/mail/p5-Mail-SpamAssassin/files/ directory of FreeBSD ports: --- sa-update.raw (revision 1421187) +++

Re: sa-update... perhaps not working

2012-12-13 Thread Mark Martinec
Dec 13 12:29:40.402 [22852] dbg: *dns: 2.3.3.updates.spamassassin.org = 3.3, parsed as 3* See the other thread of today: sa-update don't update. Mark

Re: Can't locate object method check_body_length via package Mail::SpamAssassin::PerMsgStatus

2012-09-06 Thread Mark Martinec
Help. sa-update is jammed. What should I do? rules: failed to run __KAM_BODY_LENGTH_LT_256 test, skipping: (Can't locate object method check_body_length via package Mail::SpamAssassin::PerMsgStatus at (eval 1114) line 419. etc. etc. Just got a report from another source, fixed it

Re: High CPU utilization and performance decrease after recent sa-update.

2012-09-06 Thread Mark Martinec
Piotr, We noticed a big increase in user CPU utilization on our MX servers since Sep 2nd sa-update. On a typical day we process over 2 million emails on our mail cluster. Our debugging has so far isolated the problem to: 1) iXhash was a problem module, so we disabled it (the remote location

Re: When force-expire doesn't work...

2012-08-29 Thread Mark Martinec
Rob, Because bayes_seen was also quite big I read up on that too. Since the table doesn't include any age information and (most) everything I found says just delete it, I emptied the table. Although I think it's strange to just throw away information about previous seen messages that have

Re: Rules Needed to verify bank fraud

2012-08-23 Thread Mark Martinec
I guess what we are looking for is a plugin that can take a list of commonly abused domains known to have valid SPF records or valid DKIM signatures, and to be able to apply a (stronger) score to those messages that fail the SPF and/or DKIM test. Several common domains that do provide a

Re: Received header syntax

2012-08-16 Thread Mark Martinec
Ori, RFC 5321, section 4.4 has a BNF description of a Received: header. http://tools.ietf.org/html/rfc5321#section-4.4 Thank you, although I wonder where the definition of Protocol With = CFWS WITH FWS Protocol Protocol = ESMTP / SMTP / Attdl-Protocol

Re: ALL_TRUSTED does not disable DKIM_ADSP_ALL

2012-08-09 Thread Mark Martinec
Benny, X-Spam-Status: No, score=1.1 tagged_above=-999 required=5 tests=[ALL_TRUSTED=-0.1, DKIM_ADSP_ALL=1.1, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, NO_X_MAILER=0.1] autolearn=no ALL_TRUSTED does not disable DKIM_ADSP_ALL Why would an ALL_TRUSTED be disabling an ADSP test??? Trust

Re: ADSP entry for survey.ebay.com in 60_adsp_override_dkim.cf

2012-06-26 Thread Mark Martinec
Franz Schwartau writes: Yesterday we received an e-mail which hits DKIM_ADSP_DISCARD, DKIM_SIGNED and DKIM_VALID from ebay_inv...@survey.ebay.com. 60_adsp_override_dkim.cf lists: adsp_override *.ebay.com survey.ebay.com signs their e-mails with ebay.com (please see the attachments for

Re: User Preferences on SQL with Amavis, in Multi-Server Environment

2012-02-07 Thread Mark Martinec
Mozafar, Spamassassin version: 3.3.0 OS: Debian Lenny SA called by Amavis through its command, so NOT using spamc/spamd. I've two separate servers: One contains SMTP/IMAP/POP3 servers and (virtual) user maildirs. And another has Amavisd-new along with SpamAssassin and anti-virus

Re: ACL vs. TRANSPORT styles

2012-02-03 Thread Mark Martinec
Hello SpamAssassin users, Does anyone out there have any information regarding two purported styles for SpamAssassin operation - ACL and TRANSPORT? I was recently made aware of this distinction but after searching for a couple days, I am unable to find any further details nor any

Re: ACL vs. TRANSPORT styles

2012-02-03 Thread Mark Martinec
Antonio, Hi Mark - you guessed… So SpamAssassin was working great - still does actually - except that for some reason, about 2 weeks ago, the subject line rewrite stopped working. I then embarked on a journey to figure out why. Here's what I've learned\been told thus far: 1) This change

Re: ham marked as spam: bogus IP in report

2012-01-25 Thread Mark Martinec
Toni, recently, my spamassassin started to score system messages as spam, mentioning IP numbers not in the email: [...] * 2.0 CHECK_SPAMHAUS_ZEN RBL: SPAMHAUS_ZEN: IP is listed in Spamhaus' * ZEN list * [91.0.104.164 listed in zen.spamhaus.org] * 0.0 RCVD_IN_SORBS_DUL RBL:

BusinessWeek infographic: economics of spam (URL)

2011-12-09 Thread Mark Martinec
BusinessWeek infographic: Behind the drug advertisements in your inbox is a multimillion-dollar mail-order pharmaceutical business; By Karen Weise http://www.businessweek.com/magazine/spam-works-12082011-gfx.html

Re: p5-Mail-SpamAssassin-3.3.2_2 error

2011-12-01 Thread Mark Martinec
Felipe, FreeBSD + Qmail + Vpopmail maillog: Dec 1 10:40:46 mail spamd[67490]: spamd: got connection over /var/run/spamd.socket *Dec 1 10:40:46 mail spamd[67490]: spamd: handle_user unable to find user: 'x...@xxx.com'* Dec 1 10:40:46 mail spamd[67490]: spamd: checking message

Re: p5-Mail-SpamAssassin-3.3.2_2 error

2011-12-01 Thread Mark Martinec
Felipe, FreeBSD + Qmail + Vpopmail *Dec 1 10:40:46 mail spamd[67490]: spamd: handle_user unable to find user: 'x...@xxx.com'* A username 'x...@xxx.com' does not exist. Either you should not pass the full recipient's e-mail address in the -u argument to spamc but use a localpart

Re: T_DKIM_INVALID DKIM-Signature header exists but is not valid

2011-11-30 Thread Mark Martinec
I have set up DKIM on our corporate mail hosted by GMail. Google assigned a TXT record and our DNS-provider set it. I send a mail from GMail from the Web UI and from my Thunderbird to myself, and SA always triggers that rule. What does it mean? Is not valid? Whatever of mail reaches

Re: new paradigm

2011-11-23 Thread Mark Martinec
A concept of 'ongoing conversation' or 'replied to' is implemented as a 'pen pals' feature in amavisd, when it is used in place of spamd to call SpamAssassin. The idea is to automatically contribute some negative spam score points to ongoing conversations - based on envelope sender and recipients,

Re: trusted_networks setup not working

2011-11-07 Thread Mark Martinec
For some reason, spamassassin thinks that 0/0 is trusted, even after my most strenuous attempts to dissuade it: $ grep _networks /etc/spamassassin/* /etc/spamassassin/local.cf:# trusted_networks 212.17.35. /etc/spamassassin/local.cf:clear_trusted_networks

Re: Whitelisting with DKIM

2011-11-01 Thread Mark Martinec
Alex, No, the DKIM_VERIFIED (or rather: DKIM_VALID, as it is now called) Shouldn't then L_UNVERIFIED_GMAIL be updated to rely upon DKIM_VALID instead of the deprecated DKIM_VERIFIED? Yes, definitely, if still in use. Where did you find it, it's not one of the stock rules. Probably posted

Re: Whitelisting with DKIM

2011-10-31 Thread Mark Martinec
Alex, Then shouldn't it just be eliminated as a rule entirely? There are also rules that apparently depend on it: Oct 31 14:22:58.055 [2067] info: rules: meta test L_UNVERIFIED_GMAIL has dependency 'DKIM_VERIFIED' with a zero score It looks like perhaps it's there for legacy reasons? From

Re: Whitelisting with DKIM

2011-10-31 Thread Mark Martinec
Alex, (sorry for my previous post, sent prematurely) Then shouldn't it just be eliminated as a rule entirely? There are also rules that apparently depend on it: No, the DKIM_VERIFIED (or rather: DKIM_VALID, as it is now called) (with a near-zero score) is valuable for two reasons: in

Re: Upgraded to new spamassassin(3.3.2(, and now it won't work (no rules.....ran sa-update, nada...

2011-10-20 Thread Mark Martinec
I did run sa-update, all it says (put it in verbose mode) is that the rules are up to date. Initially it did download the rules into /var/lib/spamassassin/version/more subdirs. Those files are still there, but spamd is, apparently, not seeing them. Start 'spamassassin' from a command

Re: spamassassin does not log to syslog

2011-09-14 Thread Mark Martinec
On Wednesday August 10 2011 21:49:41 tonjg wrote: I'm running spamassassin.i386 version 3.3.1-3.el4.rf on centos 4.8 (raq4 server) and I can't get SA to log to syslog. I understand the SA log defaults to mail but my mail log doesn't show any SA activity. # spamd -s /var/log/spamd.log Aug 10

Re: Curious phenomenon with 9-repetitions of each spam...

2011-09-08 Thread Mark Martinec
Steve, I'm using a (mostly vanilla) Postfix/Amvisd configuration... [...] If you look at your mail logs, do you actually see 9 messages being received? I thought I did, but - now - I'm not so sure... because the log doesn't match the messages I find via IMAP. (Really!) I've attached a

Re: pilot error? or idiots at microsoft?

2011-08-11 Thread Mark Martinec
On Wednesday August 10 2011 16:40:26 Michael Scheidell wrote: So, we open a bugzilla and put 169.254* addresses into 'local_networks' by default? like rfc1918? it the example, sa sees the internal (trusted) 172* ip, and sees 'first untrusted' (the 169* address!) spf fails, rbls are consulted.

Re: RFE: high, med and low whitelist_from_dkim and whitelist_from_spf

2011-08-01 Thread Mark Martinec
Ned, On the same basis that some DNSWLs have high, medium and low scores depending upon the level of trust, I'm wondering if it would be useful to have user defined high, medium and low scores available to rules such as whitelist_from_dkim and whitelist_from_spf so mail admins can score

Re: slow bayes queries using innodb

2011-07-28 Thread Mark Martinec
On Thursday July 28 2011 11:30:33 Jason Ede wrote: Even with auto_expiry off the system is still running really slow for a remote server... The local server bayes updates go through really quickly, but the remote servers queries are still backing up... i.e. from slow query log just now...

Re: slow bayes queries using innodb

2011-07-28 Thread Mark Martinec
Jason, Yes I have 3.3.2 so I've made that change as it seems to make a lot of sense to me. However, I think that will just slow down the rate of learns and it will still snarl up at busy times? True. I don't have a better answer for your original question on a slowdown. There may be some

Re: little off topic monitoring question

2011-07-21 Thread Mark Martinec
Shane, Thanks Mark, We are using Amavisd to call SpamAssassin. Cacti looks great, we hope to implement Cacti soon. Thanks for the info, and many thanks for Amavisd. Btw, for more info search the release notes (the feature was introduced in 2.6.4) for the following text: - newly supplied

Re: Q about unwhitelist from:

2011-07-20 Thread Mark Martinec
Michael, since hotels.com has started to dkim sign their spam, email, I would like to unwhitelist their 'spam' from lines. Yes, it is nice to get hotels.com reservation acks without them being marked as spam, but maybe if they abuse the privledge, we revoke it. found this in sa 3.3.2

Re: little off topic monitoring question

2011-07-20 Thread Mark Martinec
Shane, We would like to start monitoring our two smtp servers. They are fairly busy boxes, maybe 100,000 messages a day, give or take several thousand. They of course run Spamassassin, Postfix is also used. We use MRTG to monitor internal servers and switches, and would really like something

Re: Amavis

2011-07-19 Thread Mark Martinec
On Mon, 18 Jul 2011 15:40:51 -0500, Max Dunlap wrote: Hey guys, I followed https://help.ubuntu.com/community/PostfixAmavisNew to get Spamassasin working with some virus checking. I'm getting X-Virus-Scanned: Debian amavisd-new in my headers but no X-Spam-Status: No Any ideas? Benny Pedersen

Re: BOTNET IPv6 patch

2011-06-30 Thread Mark Martinec
Yves, Btw, this Cc should be arriving over IPv6 too... Sorry, it's here indeed. And Botnet has caught it again. :( Some of the headers: Received: from mail.ijs.si ([2001:1470:ff80::25]) by dotforward.de with esmtp (Exim 4.71) (envelope-from mark.martinec...@ijs.si)

Re: Issuing rollback() due to DESTROY without explicit disconnect() of DBD::mysql::db handle

2011-06-29 Thread Mark Martinec
On 28/06/2011 11:20 PM, Marc Perkel wrote: Now I'm seeing these error messages in the logs: Issuing rollback() due to DESTROY without explicit disconnect() of DBD::mysql::db handle I'm beginning to wonder if MySQL bays actually works. I'm just geeing too many strange errors. Which

Re: BOTNET IPv6 patch

2011-06-29 Thread Mark Martinec
On Wednesday June 29 2011 21:59:52 Yves Goergen wrote: On 29.06.2011 21:03 CE(S)T, Yves Goergen wrote: Could somebody please just send me a message from an IPv6 mail server to my address? (Preferably from a host that should not be caught by Botnet...) [...] Doesn't seem to work. It's a

Re: Migrating bayes to mysql fails with parsing errors

2011-06-24 Thread Mark Martinec
Dave, [Bug 6624] BayesStore/MySQL.pm fails to update tokens due to MySQL server bug (wrong count of rows affected) https://issues.apache.org/SpamAssassin/show_bug.cgi?id=6624 [Bug 6625] Bayes SQL schema treats bayes_token.token as char instead of binary, fails chset checks

Re: Test port for SpamAssassin for Freebsd

2011-06-24 Thread Mark Martinec
Michael, I have uploaded a test port for anyone who wants to try it. http://www.secnap.com/downloads/sa332_unofficial.tgz Great, thanks! anyone think of any other critical patches (as long as they are not documentation, or os specific), let me know. Yes, I believe the Bug 6624:

Re: Test port for SpamAssassin for Freebsd

2011-06-24 Thread Mark Martinec
Michael, I can prepare a minimalistic workaround patch, the basic idea is to just treat a row count 3 the same as count value 2. i put the official patch in place at 1:46pm edt. so, I think I am good to go, and will be sending this to freebsd ports maintainers. Too late, but no

Re: Migrating bayes to mysql fails with parsing errors

2011-06-23 Thread Mark Martinec
Dave (and others), dbg: bayes: error inserting token for line: t 1 0 1308114254 4fd2b3f2f0 dbg: bayes: _put_token: Updated an unexpected number of rows. I have opened three bug entries, the first one is directly in response to this problem report and brings a fix: [Bug 6624]

Re: Migrating bayes to mysql fails with parsing errors

2011-06-22 Thread Mark Martinec
On Wednesday June 22 2011 01:25:36 Benny Pedersen wrote: since so many have problems i share my mysql shemas :=) `token` binary(5) NOT NULL, Yes, the binary or varbinary is the key to a solution here. Mucking with utf-8 vs latin-1 is just covering but not solving the most glaring problem

Re: Migrating bayes to mysql fails with parsing errors

2011-06-21 Thread Mark Martinec
Dave, dbg: bayes: error inserting token for line: t 1 0 1308114254 4fd2b3f2f0 dbg: bayes: _put_token: Updated an unexpected number of rows. [repeats ...] Which version of MySQL? Did you remember to replace TYPE=MyISAM with TYPE=InnoDB in the schema (according to README.bayes) if you are

Re: DKIM_ADSP_ALL=0.8, DKIM_SIGNED=0.1, DKIM_VALID=-0.1 bug ?

2011-06-14 Thread Mark Martinec
Benny, missing meta on DKIM_VALID when DKIM_ADSP_ALL ? header testing ___DKIM_ADSP_ALL eval:test() meta DKIM_ADSP_ALL (__DKIM_ADSP_ALL !DKIM_VALID) or is it just checking with DKIM_VALID_AU ? how to solve it ? Not sure I understand the question. The DKIM_ADSP_ALL rule as distributed

<    1   2   3   4   5   6   7   8   >