sa-compile after sa-update

[Kenneth Porter]

I'm experimenting with the Rule2XSBody plugin and I've figured out that I 
have to run sa-compile after sa-update to create the compiled versions of 
local rules. I don't see anything in either sa-update or the Red 
Hat-supplied sa-update.cronscript invoked from cron (or a systemd timer) 
that invokes sa-compile. Where the logical place to hook this? (It should 
only be invoked if the plugin is loaded in /etc/mail/spamassassin 
somewhere.) Should I open an enhancement request against Red Hat's package? 
What are other distros doing with sa-compile? 

Re: Using SpamAssassin 3.4.2 Fedora 29 package on CentOS 7

[Henrik K]

On Wed, Oct 10, 2018 at 10:27:01PM -0700, Kenneth Porter wrote:
> On 10/10/2018 9:43 PM, Henrik K wrote:
> >There's no need to avoid editing .pre files.  They are versioned for reason
> >and old ones are never changed after release.
> 
> The SPF plugin is enabled in init.pre, so it isn't versioned. But it's
> marked as a config file in RPM so it won't be overwritten by a package
> update. Any replacement will be written as init.pre.rpmnew.

init.pre is the ancient original SpamAssassin file before versioning was
implemented, makes no difference, same applies.  SpamAssassin installer
never overwrites these, so any package installed would not either, unless
packager is doing something on his own.

Re: Using SpamAssassin 3.4.2 Fedora 29 package on CentOS 7

[Henrik K]

On Wed, Oct 10, 2018 at 06:41:21PM -0700, Kenneth Porter wrote:
> (I'd wanted to avoid editing the distro-supplied file and change the
> setting in a subsequent site file but that's not possible to opt out of a
> loadplugin.)

There's no need to avoid editing .pre files.  They are versioned for reason
and old ones are never changed after release.

Using SpamAssassin 3.4.2 Fedora 29 package on CentOS 7

[Kenneth Porter]

I'm trying to update my CentOS 7 distro 3.4.0 package to the 3.4.2 source 
package in the Fedora 29 repo and wanted to alert others to possible issues.




(Why is there a Fedora 29 package but not one in the Rawhide directory? I 
usually go to Rawhide so I'm debugging the forward edge.)


I installed the build dependencies and added re2c so I could try the 
compiled regex feature before issuing "rpmbuild --rebuild" on the SRPM. I 
then ran yum update on the resulting RPM.


First, spamd kept restarting. It turns out my old 
/etc/sysconfig/spamassassin file was running spamd as a daemon and there 
was a .rpmnew file without -d, so I needed to copy that over the old file. 
Change in systemd file, I guess.


Next, the new sysconfig file had --razor-home-dir=/var/lib/razor and no 
such directory exists on an RHEL-based system. So I removed the razor 
parameters from the sysconfig file. (Does this prevent spamd from using 
razor? I do have perl-Razor-Agent-2.85 installed.)


I got a bunch of warnings about the SPF_ rule scores set to zero. It turned 
out I'd set them to 0 in local.cf as I don't want SPF. (It's an internal 
server.) So instead I commented out the loadplugin in init.pre. (I'd wanted 
to avoid editing the distro-supplied file and change the setting in a 
subsequent site file but that's not possible to opt out of a loadplugin.)


I tried enabling compiled regex support (I installed the re2c package and 
added loadplugin Mail::SpamAssassin::Plugin::Rule2XSBody to a .pre file) 
and get this warning in maillog:


Can't locate Mail/SpamAssassin/CompiledRegexps/body_0.pm in @INC (@INC 
contains: /var/lib/spamassassin/compiled/5.016/3.004002 
/var/lib/spamassassin/compiled/5.016/3.004002/auto lib 
/usr/share/perl5/vendor_perl /usr/local/lib64/perl5 /usr/local/share/perl5 
/usr/lib64/perl5/vendor_perl /usr/lib64/perl5 /usr/share/perl5) at (eval 
1213) line 1.


I've run sa-update so when should the rules get compiled and where should 
the result go?

Re: RBL

[David Jones]

On 10/10/18 3:12 PM, Kevin Miller wrote:
> I may be wrong, as I haven't implemented it yet, but postscreen may give you 
> that same functionality at the MTA level.
> 
> ...Kevin
> --
> Kevin Miller
> Network/email Administrator, CBJ MIS Dept.
> 155 South Seward Street
> Juneau, Alaska 99801
> Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357
> 
> -Original Message-
> From: Grant Taylor [mailto:gtay...@tnetconsulting.net]
> Sent: Wednesday, October 10, 2018 12:09 PM
> To: users@spamassassin.apache.org
> Subject: Re: RBL
> 
> On 10/10/2018 01:56 PM, Tom Hendrikx wrote:
>> However, in general it's better to use DNSBLs at the MTA level, which
>> uses a lot less resources than implementing them in Spamassassin. So
>> try and set them up in postfix first.
> 
> I conceptually agree.
> 
> However, I prefer to do some RBL testing in SpamAssassin because I can
> easily check multiple RBLs and tag messages as spam, or reject, based on
> spam score.  Conversely, most MTA's implement RBLs as a binary pass /
> fail situation.  Thus SpamAssassin gives more flexibility and provides a
> configurable gray area that MTA's can't do themselves.
> 
> 
> 

Yes.  Search the SA archive lists for postscreen.  There was a thread a 
couple of years ago where we listed a good weighted list to allow 
combining the power of multiple RBLs for better results.

I also mentioned implementing postwhite at the same time to bypass 
postscreen for some senders so you can increase the sensitivity of your 
postscreen_dnsbl_sites safely.

https://github.com/stevejenkins/postwhite

-- 
David Jones

RE: RBL

[Kevin Miller]

I may be wrong, as I haven't implemented it yet, but postscreen may give you 
that same functionality at the MTA level.

...Kevin
--
Kevin Miller
Network/email Administrator, CBJ MIS Dept.
155 South Seward Street
Juneau, Alaska 99801
Phone: (907) 586-0242, Fax: (907) 586-4588 Registered Linux User No: 307357

-Original Message-
From: Grant Taylor [mailto:gtay...@tnetconsulting.net] 
Sent: Wednesday, October 10, 2018 12:09 PM
To: users@spamassassin.apache.org
Subject: Re: RBL

On 10/10/2018 01:56 PM, Tom Hendrikx wrote:
> However, in general it's better to use DNSBLs at the MTA level, which 
> uses a lot less resources than implementing them in Spamassassin. So 
> try and set them up in postfix first.

I conceptually agree.

However, I prefer to do some RBL testing in SpamAssassin because I can 
easily check multiple RBLs and tag messages as spam, or reject, based on 
spam score.  Conversely, most MTA's implement RBLs as a binary pass / 
fail situation.  Thus SpamAssassin gives more flexibility and provides a 
configurable gray area that MTA's can't do themselves.



-- 
Grant. . . .
unix || die

Re: RBL

[Grant Taylor]

On 10/10/2018 01:56 PM, Tom Hendrikx wrote:
However, in general it's better to use DNSBLs at the MTA level, which 
uses a lot less resources than implementing them in Spamassassin. So 
try and set them up in postfix first.


I conceptually agree.

However, I prefer to do some RBL testing in SpamAssassin because I can 
easily check multiple RBLs and tag messages as spam, or reject, based on 
spam score.  Conversely, most MTA's implement RBLs as a binary pass / 
fail situation.  Thus SpamAssassin gives more flexibility and provides a 
configurable gray area that MTA's can't do themselves.




--
Grant. . . .
unix || die



smime.p7s
Description: S/MIME Cryptographic Signature

Re: RBL

[Tom Hendrikx]

On 10-10-18 21:51, Tom Hendrikx wrote:
> On 10-10-18 21:05, Gokan Atmaca wrote:
>> Hello
>>
>> I'm using Postfix and Dovecot. I use Spamassassin as an antispam
>> service. I don't know how to do RBL checks.
>> How do I control RBL? (I don't want to do it with Postfix, because I
>> don't want to do two different whitelists.)
>>
>> Thanks.
>>
> 
> Hi,
> 
> See: http://lmgtfy.com/?q=postfix+rbl
> 
> Please ask further questions on the Postfix mailinglist, as you have a
> postfix question, and this is the spamassassin list.
> 

Excuse me, that was read and replied too quick. You can find more
information about using DNSBLs in spamassasin at:
https://wiki.apache.org/spamassassin/DnsBlocklists.

However, in general it's better to use DNSBLs at the MTA level, which
uses a lot less resources than implementing them in Spamassassin. So try
and set them up in postfix first.


Kind regards,
Tom

Re: RBL

[John Hardin]

On Wed, 10 Oct 2018, Gokan Atmaca wrote:


Hello

I'm using Postfix and Dovecot. I use Spamassassin as an antispam
service. I don't know how to do RBL checks.
How do I control RBL? (I don't want to do it with Postfix, because I
don't want to do two different whitelists.)


Search the mailing list archives for Postfix and RBL, there have been 
discussions and good suggestions for weighted multi-RBL checks before.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Therapeutic Phrenologist - send email for affordable rate schedule.
---
 559 days since the first commercial re-flight of an orbital booster (SpaceX)

Re: RBL

[Tom Hendrikx]

On 10-10-18 21:05, Gokan Atmaca wrote:
> Hello
> 
> I'm using Postfix and Dovecot. I use Spamassassin as an antispam
> service. I don't know how to do RBL checks.
> How do I control RBL? (I don't want to do it with Postfix, because I
> don't want to do two different whitelists.)
> 
> Thanks.
> 

Hi,

See: http://lmgtfy.com/?q=postfix+rbl

Please ask further questions on the Postfix mailinglist, as you have a
postfix question, and this is the spamassassin list.

Kind regards,

Tom

RBL

[Gokan Atmaca]

Hello

I'm using Postfix and Dovecot. I use Spamassassin as an antispam
service. I don't know how to do RBL checks.
How do I control RBL? (I don't want to do it with Postfix, because I
don't want to do two different whitelists.)

Thanks.

Re: Spamassassin 3.4.2 RPM for CentOS 6

[Ricky Gutierrez]

Thnk.

El El mié, oct. 10, 2018 a las 1:40 a. m., Alessio Cecchi 
escribió:

> Hi,
>
> if someone, like me, is interesting into spamassassin 3.4.2 rpm for CentOS
> 6 here you can find the right repo:
>
> https://copr.fedorainfracloud.org/coprs/kevin/spamassassin-el/packages/
>
> Ciao
>
>
> --
> Alessio Cecchi
> Postmaster @ http://www.qboxmail.ithttps://www.linkedin.com/in/alessice
>
> --
rickygm

http://gnuforever.homelinux.com

Spamassassin 3.4.2 RPM for CentOS 6

[Alessio Cecchi]

Hi,

if someone, like me, is interesting into spamassassin 3.4.2 rpm for 
CentOS 6 here you can find the right repo:


https://copr.fedorainfracloud.org/coprs/kevin/spamassassin-el/packages/

Ciao

--
Alessio Cecchi
Postmaster @ http://www.qboxmail.it
https://www.linkedin.com/in/alessice