Re: Spam from .br TLDs
On Tue, 18 Apr 2017, Heinrich Boeder wrote: I am getting a lot of Brazilian/Portuguese Spam lately and I was wondering if it is just me or if you guys noticed an increase in Spam from .br TLD Domains, too. I've *always* gotten a lot of that. I don't speak Portuguese, so it gets trained as Spam, and hits BAYES_999 along with enough other rules to always be quarantined. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- Ten-millimeter explosive-tip caseless, standard light armor piercing rounds. Why? --- Tomorrow: the 242nd anniversary of The Shot Heard 'Round The World
Re: Spam from .br TLDs
Hi Robert, thanks for your quick reply. I will give those rules a try. Thanks buddy! - heinrich key: 0xC15DAD56 -- 363D 5BC3 9C45 9D09 3D78 1C28 DB68 F047 C15D AD56 Robert Schetterer schrieb: > Am 18.04.2017 um 21:32 schrieb Heinrich Boeder: >> Hi Folks, >> >> I am getting a lot of Brazilian/Portuguese Spam lately and I was >> wondering if it is just me or if you guys noticed an increase in Spam >> from .br TLD Domains, too. The text in those emails is in Portuguese or >> Spanish Language (sorry but I cant really tell) so my SA doesnt really >> work well because it is trained mostly for German and English language >> mails (Most Spam is filtered by Postscreen but the ones which pass >> postscreen usually pass SA also). Anyone any good ruleset for Mails in >> Portuguese Language? >> >> Cheers, >> >> - heinrich >> >> key: 0xC15DAD56 -- 363D 5BC3 9C45 9D09 3D78 1C28 DB68 F047 C15D AD56 >> > > http://www.lafraia.com.br/spambr/ > > no idea if they are working fine > > > Best Regards > MfG Robert Schetterer >
Re: Spam from .br TLDs
Am 18.04.2017 um 21:32 schrieb Heinrich Boeder: > Hi Folks, > > I am getting a lot of Brazilian/Portuguese Spam lately and I was > wondering if it is just me or if you guys noticed an increase in Spam > from .br TLD Domains, too. The text in those emails is in Portuguese or > Spanish Language (sorry but I cant really tell) so my SA doesnt really > work well because it is trained mostly for German and English language > mails (Most Spam is filtered by Postscreen but the ones which pass > postscreen usually pass SA also). Anyone any good ruleset for Mails in > Portuguese Language? > > Cheers, > > - heinrich > > key: 0xC15DAD56 -- 363D 5BC3 9C45 9D09 3D78 1C28 DB68 F047 C15D AD56 > http://www.lafraia.com.br/spambr/ no idea if they are working fine Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
Spam from .br TLDs
Hi Folks, I am getting a lot of Brazilian/Portuguese Spam lately and I was wondering if it is just me or if you guys noticed an increase in Spam from .br TLD Domains, too. The text in those emails is in Portuguese or Spanish Language (sorry but I cant really tell) so my SA doesnt really work well because it is trained mostly for German and English language mails (Most Spam is filtered by Postscreen but the ones which pass postscreen usually pass SA also). Anyone any good ruleset for Mails in Portuguese Language? Cheers, - heinrich key: 0xC15DAD56 -- 363D 5BC3 9C45 9D09 3D78 1C28 DB68 F047 C15D AD56
Re: sa-compile will not configure
Ian Zimmerman wrote: On 2017-04-18 10:17, Robert Steinmetz wrote: tty is in /usr/bin But it is stty, not tty, which fails to be found. And stty is (normally) in /bin. So it looks a lot like /bin (and probably /sbin) is missing from the PATH. Yes thanks stty is in /bin This could be related to the long-advertised switch to a unified /usr tree. Perhaps Ubuntu went ahead with that switch but some packages haven't been updated to reflect it? I'm not familiar with that. One other thing which springs to mind is the distinction between login, interactive, and other shells. Double-check in which shell startup file you set the PATH. The users login shell is /bin/sh I often sudo bash if I am doing a lot of admin work, rather that typing sudo for each command The script begins with #!/usr/bin/perl -T -w which invokes perl when I invoke sudo sh I get the same results although every interactive shell I have tried includes /bin /sbin /usr/bin and /usr/sbin /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin Some have a couple more options. BTW, plain text (not HTML) would be appreciated. I wasn't sure of the protocol here but I thought I had. I'll try to remember. -- Robert Steinmetz, AIA Principal Steinmetz & Associates Signature
Re: sa-compile will not configure
On 2017-04-18 10:17, Robert Steinmetz wrote: > tty is in /usr/bin But it is stty, not tty, which fails to be found. And stty is (normally) in /bin. So it looks a lot like /bin (and probably /sbin) is missing from the PATH. This could be related to the long-advertised switch to a unified /usr tree. Perhaps Ubuntu went ahead with that switch but some packages haven't been updated to reflect it? One other thing which springs to mind is the distinction between login, interactive, and other shells. Double-check in which shell startup file you set the PATH. BTW, plain text (not HTML) would be appreciated. -- Please *no* private Cc: on mailing lists and newsgroups Personal signed mail: please _encrypt_ and sign Don't clear-text sign: http://primate.net/~itz/blog/the-problem-with-gpg-signatures.html
Re: sa-compile will not configure
Title: Signature
RW wrote:
On Mon, 17 Apr 2017 16:37:35 -0400
Robert Steinmetz wrote:
I upgrades my working Ubuntu 14.04 LTS to 16.04 LTS SpamAssassin
version 3.4.1.
Something happened during the upgrade and I ma now unable to get
sa-compile to configure properly.
Here is the message
root@thelma:~# dpkg --configure sa-compile
Setting up sa-compile (3.4.1-3) ...
Running sa-compile (may take a long time)
Can't exec "rm": No such file or directory at /usr/bin/sa-compile
line 374, <$fh> line 1.
make: chmod: Command not found
This is likely an Ubuntu/Debian problem. On the face of it it look like
sa-compile is being run without a properly set PATH variable.
Note that you do need to run sa-update after changing versions of
spamassassin as it will be looking for rules in a 3.4.1 specific
directory.
Thanks for the response.
It is a problem of a failed upgrade. I posted the problem on the
Ubuntu forum so far not response.
I agree it looks like the $PATH is not set correctly, where in
spamassassin of sa-compile would that be set?
I ran the command as superuser. I would expect that sa-compile would
use the user's $PATH which definitely includes "rm" and "chmod", sso
somewhere sa-compile or spamassassin must reser the $PATH or run as
another user with an incorrect $PATH.
I found the entry below in /etc/passwd
debian-spamd:x:136:144::/var/lib/spamassassin:/bin/sh
I ran sa-update it ran without error.
I ran sa-compile again and this was the output;
root@thelma:~# sa-update
root@thelma:~# sa-compile
Apr 18 09:27:38.942 [8741] info: generic: base extraction
starting. this can take a while...
Apr 18 09:27:38.942 [8741] info: generic: extracting from rules of
type body_0
Can't exec "stty": No such file or directory at
/usr/share/perl5/Mail/SpamAssassin/Util/Progress.pm line 158.
100% [===] 1246.47
rules/sec 00m00s DONE
Can't exec "stty": No such file or directory at
/usr/share/perl5/Mail/SpamAssassin/Util/Progress.pm line 158.
100% [===] 254.60
bases/sec 00m09s DONE
Apr 18 09:27:48.738 [8741] info: body_0: 1146 base strings
extracted in 10 seconds
cd /tmp/.spamassassin8741LlVWi0tmp
reading bases_body_0.in
Can't exec "rm": No such file or directory at /usr/bin/sa-compile
line 374, <$fh> line 1.
cd Mail-SpamAssassin-CompiledRegexps-body_0
re2c -i -b -o scanner1.c scanner1.re
re2c -i -b -o scanner2.c scanner2.re
re2c -i -b -o scanner3.c scanner3.re
re2c -i -b -o scanner4.c scanner4.re
re2c -i -b -o scanner5.c scanner5.re
re2c -i -b -o scanner6.c scanner6.re
/usr/bin/perl Makefile.PL
PREFIX=/tmp/.spamassassin8741LlVWi0tmp/ignored
INSTALLSITEARCH=/var/lib/spamassassin/compiled/5.022/3.004001
Generating a Unix-style Makefile
Writing Makefile for Mail::SpamAssassin::CompiledRegexps::body_0
Writing MYMETA.yml and MYMETA.json
make
make: chmod: Command not found
Makefile:400: recipe for target
'blib/lib/Mail/SpamAssassin/CompiledRegexps/.exists' failed
make: *** [blib/lib/Mail/SpamAssassin/CompiledRegexps/.exists]
Error 127
command failed: exit 2
root@thelma:~#
tty is in /usr/bin
rm is in /bin
chmod is in /bin
sa-complie is in /usr/bin
root@thelma:/usr/bin# ls -ld sa-compile
-rwxr-xr-x 1 root root 22014 Nov 10 2015 sa-compile
Looking at sa-compile it seems $PATH is set this looks to me like it
overwrites the search path.
if (!$modname) {
$modname =
"Mail::SpamAssassin::CompiledRegexps::$ruleset_name";
}
our $PATH = $modname;
$PATH =~ s/::/-/g;
$PATH =~ s/[^-_A-Za-z0-9\.]/_/g;
rm seems to be used without an absolute path at line 374 below.
$force and system("rm -rf $PATH");
I am not a perl expert, I hardly know anything about it.
Perhaps someone can shed some light on this.
I could edit sa-compile and add /bin/rm, /usr/.bin/tty
then
track down the chmod and add /bin/chmod where it occurs later.
somehow that seems the wrong way to fix it.
--
Robert Steinmetz, AIA
Principal
Steinmetz & Associates
<>
Re: sa-compile will not configure
On Mon, 17 Apr 2017 16:37:35 -0400 Robert Steinmetz wrote: > I upgrades my working Ubuntu 14.04 LTS to 16.04 LTS SpamAssassin > version 3.4.1. > Something happened during the upgrade and I ma now unable to get > sa-compile to configure properly. > > Here is the message > > > root@thelma:~# dpkg --configure sa-compile > > Setting up sa-compile (3.4.1-3) ... > > Running sa-compile (may take a long time) > > Can't exec "rm": No such file or directory at /usr/bin/sa-compile > > line 374, <$fh> line 1. > > make: chmod: Command not found This is likely an Ubuntu/Debian problem. On the face of it it look like sa-compile is being run without a properly set PATH variable. Note that you do need to run sa-update after changing versions of spamassassin as it will be looking for rules in a 3.4.1 specific directory.
