Re: [AMaViS-user] SA persistent DB connection help?
On Fri, Apr 11, 2008 at 03:59:24PM -0400, Michael Scheidell wrote: Wondering, for SA (awl, bayes?) how valuable is the DBI persistent plugin? http://wiki.apache.org/spamassassin/DBIPlugin I have no idea, but I've been using it for a year without problems. I guess it should help. - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] howto get spam alert for spammails from MYNETS?
On 2008-04-11, 13:28, Gary V wrote: Because the message scored less than your kill_level: http://www.ijs.si/software/amavisd/amavisd-new-docs.html#tagkill ... The admin will not be notified unless the message scores at kill_level or higher. For MYNETS I don't want to tag or block any mails at all. However, I do want to alert the spam-admin whenever there are spammy mails leaving my network. Is there any way to accomplish that? Thanks, Andy. -- Don't hate yourself in the morning -- sleep till noon. - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] SA persistent DB connection help?
Michael, Wondering, for SA (awl, bayes?) how valuable is the DBI persistent plugin? http://wiki.apache.org/spamassassin/DBIPlugin Don't know how valuable it would be, but you'll have to wait until amavisd-new-2.6.0-rc2 for the DBIPlugin to have any connection caching effect, as current versions of amavisd don't call SA methods: $as_obj-call_plugins(spamd_child_init); $sa_obj-call_plugins(spamd_child_post_connection_close); I'll fix that. Mark - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] howto get spam alert for spammails from MYNETS?
On 4/14/08, Andy Spiegl wrote:
On 2008-04-11, 13:28, Gary V wrote:
Because the message scored less than your kill_level:
http://www.ijs.si/software/amavisd/amavisd-new-docs.html#tagkill
...
The admin will not be notified unless the message scores at kill_level
or higher.
For MYNETS I don't want to tag or block any mails at all.
However, I do want to alert the spam-admin whenever there
are spammy mails leaving my network.
Is there any way to accomplish that?
Thanks,
Andy.
What you have here will allow delivery of these items:
final_spam_destiny = D_PASS,
final_bad_header_destiny = D_PASS,
bypass_banned_checks_maps = [1],
Maybe a better option for header checks:
bypass_header_checks_maps = [1],
It appears this will disable the X-Virus-Scanned: header (if desired):
X_HEADER_TAG = undef,
And it appears this will disable spam quarantine (no need to quarantine if
spam is passed):
quarantine_method_by_ccat = {CC_SPAM, undef},
I have not tested to see if this syntax affects other quarantines (like virus).
In my tests, setting this high:
spam_tag_level_maps = 5000,
did prevent X-Spam headers on mail delivered to recipients, but it did
not appear to have an effect on spam quarantined to SQL (which is how
my test machine is set up).
Testing is in order.
Gary V
-
This SF.net email is sponsored by the 2008 JavaOne(SM) Conference
Don't miss this year's exciting event. There's still time to save $100.
Use priority code J8TL2D2.
http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Customizing the Amavis' header tag names
Jose Hales-Garcia escreveu: In some backscatter messages I'm finding these header tag names appearing in the body of the message (Amavis is increasingly popular) which then causes problems in my scripts when I want to identify the correct headers. I'd think the solution would be to customize our headers so they're unique to something like: X-UCLAStat-Spam-Flag, X-UCLAStat-Spam-Hits, X-UCLAStat-Spam-Score, X-UCLAStat-Spam-Status. what about adjusting your scripts and get them doing the right thing, which would be evaluate headers and not body when looking for amavis headers ??? -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email [EMAIL PROTECTED] My SPAMTRAP, do not email it - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Customizing the Amavis' header tag names
On Apr 14, 2008, at 11:39 AM, Leonardo Rodrigues Magalhães wrote: what about adjusting your scripts and get them doing the right thing, which would be evaluate headers and not body when looking for amavis headers ??? I'm looking at that possibility. The library I'm using (Ruby's Tmail) retains the last header found, instead of the first one (which is the one I need). I agree, that would be preferable. Jose - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Customizing the Amavis' header tag names
Jose, Where do I override the header tag names used by Amavis? That is, the tag names: X-Spam-Flag, X-Spam-Hits, X-Spam-Score, X-Spam-Status. In some backscatter messages I'm finding these header tag names appearing in the body of the message (Amavis is increasingly popular) which then causes problems in my scripts when I want to identify the correct headers. I'd think the solution would be to customize our headers so they're unique to something like: X-UCLAStat-Spam-Flag, X-UCLAStat-Spam-Hits, X-UCLAStat-Spam-Score, X-UCLAStat-Spam-Status. Where would I make these changes? It is not configurable, you need to find strings X-Spam-Flag, X-Spam-Hits, X-Spam-Score and X-Spam-Status in amavisd and replace them with header field names of your liking (add_forwarding_header_edits_per_recip is the main routine adding such headers to passing mail). Note tahat amavisd is already removing these headers from received mail if spam checking is enabled, unless you turned off the setting $remove_existing_spam_headers (which is true by default, i.e. it removes such foreign headers). Is this a good idea? If your software is finding such strings in a _body_ of a mail, it is seriously flawed and needs to be fixed. If it is only looking at the header, you are already on the safe side by default. Mark - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Customizing the Amavis' header tag names
On Apr 14, 2008, at 12:38 PM, Mark Martinec wrote: Is this a good idea? If your software is finding such strings in a _body_ of a mail, it is seriously flawed and needs to be fixed. If it is only looking at the header, you are already on the safe side by default. The duplicate header tags are in the header of the file (sorry for the misinformed comment about the body). Also, the $remove_existing_spam_headers variable is undefined in my configuration file. I should be getting the default behavior but duplicate header tags are appearing. Below is an example. The TMail library keeps header info in a hash, so it's retaining the last 'X-Spam-Score' header encountered with a value of '*', instead of the one with '16.06'. If duplicate headers shouldn't exist then maybe I won't waste my time getting TMail to use an array instead of a hash. Can you tell from this example why the duplicates would be occurring? Jose Return-Path: Delivered-To: spam-quarantine X-Envelope-From: [EMAIL PROTECTED] X-Envelope-To: [EMAIL PROTECTED] X-Quarantine-ID: u79lpchtlym0 X-Spam-Flag: YES X-Spam-Score: 16.07 X-Spam-Level: X-Spam-Status: Yes, score=16.07 tag=-1000 tag2=6.31 kill=6.31 tests=[BAYES_50=4, HTML_MESSAGE=0.001, NORMAL_HTTP_TO_IP=0.001, RCVD_IN_DNSWL_MED=2, RCVD_NUMERIC_HELO=2.067, URIBL_RED=0.001, URIBL_SC_SURBL=4, URIBL_WS_SURBL=4] Received: from smtp.stat.ucla.edu ([127.0.0.1]) by localhost (mta.stat.ucla.edu [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id u79lpchtlym0 for [EMAIL PROTECTED]; Mon, 14 Apr 2008 11:43:15 -0700 (PDT) Received: from smtp-13.smtp.ucla.edu (smtp-13.smtp.ucla.edu [169.232.46.249]) by smtp.stat.ucla.edu (Postfix) with ESMTP id E8037C42DB2 for [EMAIL PROTECTED]; Mon, 14 Apr 2008 11:43:15 -0700 (PDT) Received: from dino.ess.ucla.edu (dino.ess.ucla.edu [128.97.31.199]) by smtp-13.smtp.ucla.edu (8.14.2/8.14.2) with ESMTP id m3EIhFZM010543 for [EMAIL PROTECTED]; Mon, 14 Apr 2008 11:43:15 -0700 X-geo_ess_ucla_edu_-MailScanner-Watermark: [EMAIL PROTECTED] Received: from zephyr.ess.ucla.edu (zephyr [128.97.31.1]) by dino.ess.ucla.edu (8.13.8+Sun/8.13.8) with ESMTP id m3EIhFhq010692 for [EMAIL PROTECTED]; Mon, 14 Apr 2008 11:43:15 -0700 (PDT) Received: from 79.26.30.109 (host109-30-dynamic.26-79- r.retail.telecomitalia.it [79.26.30.109]) by zephyr.ess.ucla.edu (8.12.10+Sun/8.12.10) with ESMTP id m3EIkj1l010876 for [EMAIL PROTECTED]; Mon, 14 Apr 2008 11:46:46 -0700 (PDT) Message-ID: [EMAIL PROTECTED] From: hobard leanne [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: *'s hidden cam video Date: Mon, 14 Apr 2008 16:55:27 + MIME-Version: 1.0 Content-Type: multipart/alternative; boundary==_NextPart_000_0004_01C89E5F.0478ED4C X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2900.3138 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.3198 X-geo_ess_ucla_edu_-MailScanner-Information: Please contact the ISP for more information X-geo_ess_ucla_edu_-MailScanner: Found to be clean X-geo_ess_ucla_edu_-MailScanner-From: [EMAIL PROTECTED] X-Spam-Status: No X-Probable-Spam: no X-Spam-Hits: 4.702 X-Spam-Score: * X-Spam-Report: HTML_MESSAGE ,NORMAL_HTTP_TO_IP,RCVD_NUMERIC_HELO,URIBL_RED,URIBL_WS_SURBL X-Scanned-By: smtp.ucla.edu on 169.232.46.249 - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Customizing the Amavis' header tag names
Jose Hales-Garcia escreveu: On Apr 14, 2008, at 11:39 AM, Leonardo Rodrigues Magalhães wrote: what about adjusting your scripts and get them doing the right thing, which would be evaluate headers and not body when looking for amavis headers ??? I'm looking at that possibility. The library I'm using (Ruby's Tmail) retains the last header found, instead of the first one (which is the one I need). I agree, that would be preferable. No that would be the only CORRECT choice, not preferable one. -- Atenciosamente / Sincerily, Leonardo Rodrigues Solutti Tecnologia http://www.solutti.com.br Minha armadilha de SPAM, NÃO mandem email [EMAIL PROTECTED] My SPAMTRAP, do not email it - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Customizing the Amavis' header tag names
On Apr 14, 2008, at 1:21 PM, Jose Hales-Garcia wrote: The TMail library keeps header info in a hash, so it's retaining the last 'X-Spam-Score' header encountered with a value of '*', instead of the one with '16.06'. There is a typo. It is supposed to be '16.07'. Jose - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Customizing the Amavis' header tag names
On Mon, Apr 14, 2008 at 01:21:57PM -0700, Jose Hales-Garcia wrote: On Apr 14, 2008, at 12:38 PM, Mark Martinec wrote: Is this a good idea? If your software is finding such strings in a _body_ of a mail, it is seriously flawed and needs to be fixed. If it is only looking at the header, you are already on the safe side by default. The duplicate header tags are in the header of the file (sorry for the misinformed comment about the body). Also, the $remove_existing_spam_headers variable is undefined in my configuration file. When you say undefined, do you mean never defined, or set to undef? If the latter, try setting it to 1. I should be getting the default behavior but duplicate header tags are appearing. Below is an example. The TMail library keeps header info in a hash, so it's retaining the last 'X-Spam-Score' header encountered with a value of '*', instead of the one with '16.06'. If duplicate headers shouldn't exist then maybe I won't waste my time getting TMail to use an array instead of a hash. Can you tell from this example why the duplicates would be occurring? IIRC, as regards most mail headers, there is no definition stating that they can occur only a single time, and hence they really should be arrays. However, I think a lot of software which processes mail headers assumes that only a single occurrence will be present; the Ruby package is not the only one at fault. If you want to brute-force the solution, while you look for the true reason amavisd is failing to strip the previous headers, you could add a Postfix header_checks rule to be run on the pre-amavisd instance such as (with PCRE): /^X-Spam-Score:/IGNORE /^X-Spam-Hits:/ IGNORE /^X-Spam-Level:/IGNORE /^X-Spam-Flag:/ IGNORE etc. This would wipe out the headers in question prior to feeding them into amavisd-new. I do this in my configuration, just to be on the safe side. -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] / [EMAIL PROTECTED] President - I and I Computing * http://www.iandicomputing.com/ Custom programming, network design, systems and network consulting services - This SF.net email is sponsored by the 2008 JavaOne(SM) Conference Don't miss this year's exciting event. There's still time to save $100. Use priority code J8TL2D2. http://ad.doubleclick.net/clk;198757673;13503038;p?http://java.sun.com/javaone ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
