postfix - disable spamassassin for outgoing mail
how would i disable spamassassin for outgoing emails? # cat /etc/redhat-release Red Hat Enterprise Linux Server release 6.5 (Santiago) # rpm -q postfix spamassassin postfix-2.6.6-6.el6_5.x86_64 spamassassin-3.3.1-3.el6.x86_64 #
Re: .qmail
On Thu, Feb 25, 2010 at 2:57 AM, Toni Mueller support-spamassas...@oeko.net wrote: Hi, On Wed, 24.02.2010 at 22:18:04 -0500, alexus ale...@gmail.com wrote: On Wed, Feb 24, 2010 at 4:49 AM, Toni Mueller support-spamassas...@oeko.net wrote: On Tue, 23.02.2010 at 14:08:30 -0500, alexus ale...@gmail.com wrote: is there a way to put sa-learn --spam inside of .qmail? -bash-3.2# man preline No manual entry for preline -bash-3.2# look for the man pages included with your qmail* package. $ cat .qmail | /var/qmail/bin/preline /usr/bin/procmail Kind regards, --Toni++ -bash-3.2# man -M /var/qmail/man/ preline okay, i found man for preline... -- http://alexus.org/
Re: .qmail
On Wed, Feb 24, 2010 at 4:49 AM, Toni Mueller support-spamassas...@oeko.net wrote: On Tue, 23.02.2010 at 14:08:30 -0500, alexus ale...@gmail.com wrote: is there a way to put sa-learn --spam inside of .qmail? man preline HTH, --Toni++ -bash-3.2# man preline No manual entry for preline -bash-3.2# -- http://alexus.org/
Re: .qmail
On Tue, Feb 23, 2010 at 2:34 PM, Martin Gregorie mar...@gregorie.org wrote: On Tue, 2010-02-23 at 14:08 -0500, alexus wrote: is there a way to put sa-learn --spam inside of .qmail? one more my emails getting spam'd big time... i get nothin' but spam at this email so i'd like to redirect all of that to sa-learn --spam as soon as it arrives, and then get rid of it after its done processing Sounds like a job for procmail to me. Put a procmail recipe in the target user that learns messages as ham or spam then bins them. If you're using spamd rather than vanilla spamassassin you may find it easier to set up if you use spamc --ham/spam rather than sa_learn. Martin i have maildrop installed, and any of my attempt to get it to work didn't work out... can you provide some example? or if anyone else have it in place maybe? -- http://alexus.org/
.qmail
is there a way to put sa-learn --spam inside of .qmail? one more my emails getting spam'd big time... i get nothin' but spam at this email so i'd like to redirect all of that to sa-learn --spam as soon as it arrives, and then get rid of it after its done processing -- http://alexus.org/
Re: Use of uninitialized value $dir in scalar chomp at /usr/local/bin/spamd line 2118, GEN103 line 2.
On Thu, Apr 23, 2009 at 4:08 PM, alexusale...@gmail.com wrote: On Wed, Apr 8, 2009 at 12:50 AM, Matt Kettler mkettler...@verizon.net wrote: alexus wrote: I keep getting this line in my logs everytime there is a spamd calles Apr 8 03:55:15 mx1 spamd[36109]: Use of uninitialized value $dir in scalar chomp at /usr/local/bin/spamd line 2118, GEN103 line 2. i dont suppose this is normal Are you using the -v parameter when you start spamd, but are passing a username that's not a vpopmail user with working vuserinfo? Code: - if ( $opt{'vpopmail'} ) { my $vpopdir = $dir; $dir = `$vpopdir/bin/vuserinfo -d \Q$username\E`; if ($? != 0) { # # If vuserinfo failed $username could be an alias # $dir = `$vpopdir/bin/valias \Q$username\E`; if ($? == 0 $dir !~ /.+ - /) { $dir =~ s,.+ - (/.+)/Maildir/,$1,; } else { undef($dir); } } chomp($dir); } -- i even tried with vpopmail user instead of spamd user, I still get this warning -- http://alexus.org/ sorry for getting back for older post, but i never got around to fix this issue, and I think it should be fixed... can someone suggest me how to resolve this issue? let me recap every time an email comes in, I get following line in my syslog spamd[30649]: Use of uninitialized value $dir in scalar chomp at /usr/local/bin/spamd line 2118, GEN990 line 2. that's how I run spamd root 1736 0.0 0.5 70044 40568 ?? SsJ 23May09 3:53.05 /usr/local/bin/spamd --allow-tell --daemonize --vpopmail --username=spamd --socketpath=/tmp/spamd.sock --pidfile /usr/local/var/run/spamd.pid (perl) -- http://alexus.org/
Re: BOTNET plugin download
whats botnet plugin? On Mon, Jun 8, 2009 at 7:23 PM, John Ruddjr...@ucsc.edu wrote: On Mon, Jun 8, 2009 at 09:55, Jari Fredrikssonja...@iki.fi wrote: The BOTNET plugin isn't covered in the CustomPlugins wiki page. When I Googled it I found this: http://people.ucsc.edu/~jrudd/spamassassin/Botnet.tar but it's a bit old. Is there a later version? That's 0.8 which is AFAIK the latest. Yes, 0.8 is the latest, and it's ... 2 years old now? or just 1.5? somewhere around there. I haven't really needed to do an update, though there are some things I want to re-work once I get some spare time (mostly, how it does DNS lookups, to use SA internals more). -- http://alexus.org/
Re: Use of uninitialized value $dir in scalar chomp at /usr/local/bin/spamd line 2118, GEN103 line 2.
On Wed, Apr 8, 2009 at 12:50 AM, Matt Kettler mkettler...@verizon.net wrote: alexus wrote: I keep getting this line in my logs everytime there is a spamd calles Apr 8 03:55:15 mx1 spamd[36109]: Use of uninitialized value $dir in scalar chomp at /usr/local/bin/spamd line 2118, GEN103 line 2. i dont suppose this is normal Are you using the -v parameter when you start spamd, but are passing a username that's not a vpopmail user with working vuserinfo? Code: - if ( $opt{'vpopmail'} ) { my $vpopdir = $dir; $dir = `$vpopdir/bin/vuserinfo -d \Q$username\E`; if ($? != 0) { # # If vuserinfo failed $username could be an alias # $dir = `$vpopdir/bin/valias \Q$username\E`; if ($? == 0 $dir !~ /.+ - /) { $dir =~ s,.+ - (/.+)/Maildir/,$1,; } else { undef($dir); } } chomp($dir); } -- i even tried with vpopmail user instead of spamd user, I still get this warning -- http://alexus.org/
Re: sa-learn
On Tue, Apr 21, 2009 at 1:21 AM, Gene Heskett gene.hesk...@verizon.net wrote: On Monday 20 April 2009, alexus wrote: i'm trying to teach my SA whats spam it's a brand new out of box SA, i have few domains that i dont get anything but a spam and on the top seems like from same spamers as they picked emails that they thought would be good to spam and keep on spaming them so i do sa-learn --spam * after a while it saying something like Learned tokens from 52 message(s) (52 message(s) examined) yet, when more of some what same email comes in it still can't determinate if its spam or not... am i doing something wrong? or is sa-learn isn't suppose to work as i thought it would.. You need to have it learn at least 200 messages of both 'ham' and 'spam' before it has enough data to switch to working mode. So sort them into separate directories, and have it learn both a clean inbox as ham, and an all spam directory. When it has learned those, it keep track and will not learn those particular emails again, so clean the spam box, just delete its contents. I even use a cleaned up, sorted to separate directories mailing list as ham just so it knows stuff from that list is generally ham. I had one list that I never figured out what was spammy about it, and since the corpus of that list went back several years, I fed the whole thing to SA as ham. Took it several hours but no more problems with that lists messages now. Now, the spam that does get through goes into a spam dir, and a cron job learns it, then deletes it daily. I'm lazy, and repetitive tasks are to be done by a cron fired script around this camp. :) -- Cheers, Gene There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) Any two philosophers can tell each other all they know in two hours. -- Oliver Wendell Holmes, Jr. how do I change my SA from learning mode to working mode? -- http://alexus.org/
Re: sa-learn
On Tue, Apr 21, 2009 at 3:58 PM, Gene Heskett gene.hesk...@verizon.net wrote: On Tuesday 21 April 2009, alexus wrote: On Tue, Apr 21, 2009 at 1:21 AM, Gene Heskett gene.hesk...@verizon.net wrote: On Monday 20 April 2009, alexus wrote: i'm trying to teach my SA whats spam it's a brand new out of box SA, i have few domains that i dont get anything but a spam and on the top seems like from same spamers as they picked emails that they thought would be good to spam and keep on spaming them so i do sa-learn --spam * after a while it saying something like Learned tokens from 52 message(s) (52 message(s) examined) yet, when more of some what same email comes in it still can't determinate if its spam or not... am i doing something wrong? or is sa-learn isn't suppose to work as i thought it would.. You need to have it learn at least 200 messages of both 'ham' and 'spam' before it has enough data to switch to working mode. So sort them into separate directories, and have it learn both a clean inbox as ham, and an all spam directory. When it has learned those, it keep track and will not learn those particular emails again, so clean the spam box, just delete its contents. I even use a cleaned up, sorted to separate directories mailing list as ham just so it knows stuff from that list is generally ham. I had one list that I never figured out what was spammy about it, and since the corpus of that list went back several years, I fed the whole thing to SA as ham. Took it several hours but no more problems with that lists messages now. Now, the spam that does get through goes into a spam dir, and a cron job learns it, then deletes it daily. I'm lazy, and repetitive tasks are to be done by a cron fired script around this camp. :) -- Cheers, Gene There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) Any two philosophers can tell each other all they know in two hours. -- Oliver Wendell Holmes, Jr. how do I change my SA from learning mode to working mode? I believe that is automatic once it has enough data. See above, 200 msgs of each type required IIRC. Understand that SA only rates the email, and puts its findings in the header. It is up to you to determine what is done with mail that is too spammy. I use procmail as the MTA from fetchmail, and procmail is configured to send anything that SA labels with 5 stars or over to /dev/null. -- Cheers, Gene There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) Delta: The kids will love our inflatable slides. -- David Letterman an example Received: by simscan 1.4.0 ppid: 97779, pid: 97780, t: 3.8809s scanners: regex: 1.4.0 clamav: 0.95/m:50/d:9252 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx1.alexus.biz X-Spam-Level: X-Spam-Status: No, score=4.9 required=5.0 tests=BAYES_99,HTML_MESSAGE, MIME_HTML_ONLY,SPF_HELO_PASS autolearn=no version=3.2.5 it gave BAYES_99, yet it still think it's autolearn=no, and it still doesnt think this is SPAM -- http://alexus.org/
Re: sa-learn
On Tue, Apr 21, 2009 at 4:03 PM, alexus ale...@gmail.com wrote: On Tue, Apr 21, 2009 at 3:58 PM, Gene Heskett gene.hesk...@verizon.net wrote: On Tuesday 21 April 2009, alexus wrote: On Tue, Apr 21, 2009 at 1:21 AM, Gene Heskett gene.hesk...@verizon.net wrote: On Monday 20 April 2009, alexus wrote: i'm trying to teach my SA whats spam it's a brand new out of box SA, i have few domains that i dont get anything but a spam and on the top seems like from same spamers as they picked emails that they thought would be good to spam and keep on spaming them so i do sa-learn --spam * after a while it saying something like Learned tokens from 52 message(s) (52 message(s) examined) yet, when more of some what same email comes in it still can't determinate if its spam or not... am i doing something wrong? or is sa-learn isn't suppose to work as i thought it would.. You need to have it learn at least 200 messages of both 'ham' and 'spam' before it has enough data to switch to working mode. So sort them into separate directories, and have it learn both a clean inbox as ham, and an all spam directory. When it has learned those, it keep track and will not learn those particular emails again, so clean the spam box, just delete its contents. I even use a cleaned up, sorted to separate directories mailing list as ham just so it knows stuff from that list is generally ham. I had one list that I never figured out what was spammy about it, and since the corpus of that list went back several years, I fed the whole thing to SA as ham. Took it several hours but no more problems with that lists messages now. Now, the spam that does get through goes into a spam dir, and a cron job learns it, then deletes it daily. I'm lazy, and repetitive tasks are to be done by a cron fired script around this camp. :) -- Cheers, Gene There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) Any two philosophers can tell each other all they know in two hours. -- Oliver Wendell Holmes, Jr. how do I change my SA from learning mode to working mode? I believe that is automatic once it has enough data. See above, 200 msgs of each type required IIRC. Understand that SA only rates the email, and puts its findings in the header. It is up to you to determine what is done with mail that is too spammy. I use procmail as the MTA from fetchmail, and procmail is configured to send anything that SA labels with 5 stars or over to /dev/null. -- Cheers, Gene There are four boxes to be used in defense of liberty: soap, ballot, jury, and ammo. Please use in that order. -Ed Howdershelt (Author) Delta: The kids will love our inflatable slides. -- David Letterman an example Received: by simscan 1.4.0 ppid: 97779, pid: 97780, t: 3.8809s scanners: regex: 1.4.0 clamav: 0.95/m:50/d:9252 spam: 3.2.5 X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx1.alexus.biz X-Spam-Level: X-Spam-Status: No, score=4.9 required=5.0 tests=BAYES_99,HTML_MESSAGE, MIME_HTML_ONLY,SPF_HELO_PASS autolearn=no version=3.2.5 it gave BAYES_99, yet it still think it's autolearn=no, and it still doesnt think this is SPAM -- http://alexus.org/ this is from another email X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mx1.alexus.biz X-Spam-Level: * X-Spam-Status: Yes, score=5.6 required=5.0 tests=BAYES_99,HTML_MESSAGE, MIME_HTML_ONLY,SPF_HELO_PASS,SPF_SOFTFAIL autolearn=no version=3.2.5 X-Spam-Report: * 3.5 BAYES_99 BODY: Bayesian spam probability is 99 to 100% * [score: 1.] * -0.0 SPF_HELO_PASS SPF: HELO matches SPF record * 0.6 SPF_SOFTFAIL SPF: sender does not match SPF record (softfail) * 0.0 HTML_MESSAGE BODY: HTML included in message * 1.5 MIME_HTML_ONLY BODY: Message only has text/html MIME parts how can I put X-Spam-Report into every email? because this was generated manually via spamassassin -t email -- http://alexus.org/
sa-learn
i'm trying to teach my SA whats spam it's a brand new out of box SA, i have few domains that i dont get anything but a spam and on the top seems like from same spamers as they picked emails that they thought would be good to spam and keep on spaming them so i do sa-learn --spam * after a while it saying something like Learned tokens from 52 message(s) (52 message(s) examined) yet, when more of some what same email comes in it still can't determinate if its spam or not... am i doing something wrong? or is sa-learn isn't suppose to work as i thought it would.. -- http://alexus.org/
Re: sa-learn
On Mon, Apr 20, 2009 at 10:27 PM, Evan Platt e...@espphotography.com wrote: At 07:20 PM 4/20/2009, you wrote: i'm trying to teach my SA whats spam it's a brand new out of box SA, i have few domains that i dont get anything but a spam and on the top seems like from same spamers as they picked emails that they thought would be good to spam and keep on spaming them so i do sa-learn --spam * after a while it saying something like Learned tokens from 52 message(s) (52 message(s) examined) yet, when more of some what same email comes in it still can't determinate if its spam or not... am i doing something wrong? or is sa-learn isn't suppose to work as i thought it would.. I could be wrong, but I believe you need to teach sa-learn ham too, otherwise if you only feed it one or the other, it doesn't 'know' what the difference is between ham and spam. i don't remember how but last time i was able to pull some sort of stats and it had plenty of ham emails as well -- http://alexus.org/
Re: sa-learn
On Mon, Apr 20, 2009 at 11:01 PM, alexus ale...@gmail.com wrote: On Mon, Apr 20, 2009 at 10:27 PM, Evan Platt e...@espphotography.com wrote: At 07:20 PM 4/20/2009, you wrote: i'm trying to teach my SA whats spam it's a brand new out of box SA, i have few domains that i dont get anything but a spam and on the top seems like from same spamers as they picked emails that they thought would be good to spam and keep on spaming them so i do sa-learn --spam * after a while it saying something like Learned tokens from 52 message(s) (52 message(s) examined) yet, when more of some what same email comes in it still can't determinate if its spam or not... am i doing something wrong? or is sa-learn isn't suppose to work as i thought it would.. I could be wrong, but I believe you need to teach sa-learn ham too, otherwise if you only feed it one or the other, it doesn't 'know' what the difference is between ham and spam. i don't remember how but last time i was able to pull some sort of stats and it had plenty of ham emails as well -- http://alexus.org/ 0.000 0 3 0 non-token data: bayes db version 0.000 0 5603 0 non-token data: nspam 0.000 0 1066 0 non-token data: nham 0.000 0 146370 0 non-token data: ntokens 0.000 0 1239464082 0 non-token data: oldest atime 0.000 0 1240284572 0 non-token data: newest atime 0.000 0 1240280535 0 non-token data: last journal sync atime 0.000 0 1240154929 0 non-token data: last expiry atime 0.000 0 691200 0 non-token data: last expire atime delta 0.000 0 31166 0 non-token data: last expire reduction count -- http://alexus.org/
Re: sa-learn
On Mon, Apr 20, 2009 at 11:37 PM, alexus ale...@gmail.com wrote: On Mon, Apr 20, 2009 at 11:01 PM, alexus ale...@gmail.com wrote: On Mon, Apr 20, 2009 at 10:27 PM, Evan Platt e...@espphotography.com wrote: At 07:20 PM 4/20/2009, you wrote: i'm trying to teach my SA whats spam it's a brand new out of box SA, i have few domains that i dont get anything but a spam and on the top seems like from same spamers as they picked emails that they thought would be good to spam and keep on spaming them so i do sa-learn --spam * after a while it saying something like Learned tokens from 52 message(s) (52 message(s) examined) yet, when more of some what same email comes in it still can't determinate if its spam or not... am i doing something wrong? or is sa-learn isn't suppose to work as i thought it would.. I could be wrong, but I believe you need to teach sa-learn ham too, otherwise if you only feed it one or the other, it doesn't 'know' what the difference is between ham and spam. i don't remember how but last time i was able to pull some sort of stats and it had plenty of ham emails as well -- http://alexus.org/ 0.000 0 3 0 non-token data: bayes db version 0.000 0 5603 0 non-token data: nspam 0.000 0 1066 0 non-token data: nham 0.000 0 146370 0 non-token data: ntokens 0.000 0 1239464082 0 non-token data: oldest atime 0.000 0 1240284572 0 non-token data: newest atime 0.000 0 1240280535 0 non-token data: last journal sync atime 0.000 0 1240154929 0 non-token data: last expiry atime 0.000 0 691200 0 non-token data: last expire atime delta 0.000 0 31166 0 non-token data: last expire reduction count -- http://alexus.org/ i trained it some more... 0.000 0 3 0 non-token data: bayes db version 0.000 0 5604 0 non-token data: nspam 0.000 0 9924 0 non-token data: nham 0.000 0 572242 0 non-token data: ntokens 0.000 0 1008017988 0 non-token data: oldest atime 0.000 0 1240285316 0 non-token data: newest atime 0.000 0 0 0 non-token data: last journal sync atime 0.000 0 1240285336 0 non-token data: last expiry atime 0.000 0 691200 0 non-token data: last expire atime delta 0.000 0 104929 0 non-token data: last expire reduction count -- http://alexus.org/
Re: [OT] Re: SpamAssassin is EXTREMLY slow
On Sat, Apr 4, 2009 at 5:48 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Wed, Apr 1, 2009 at 5:52 PM, John Hardin jhar...@impsec.org wrote: How fast are non-SA DNS queries on that box? If they take ten seconds to return an answer, SA is not the culprit. On 01.04.09 17:53, alexus wrote: without dns they are 0.1 - 1.5s, with DNS they are ~7s by non-SA DNS he did not mean SA without DNS, but DNS without SA... just FYI. what I meant is SA without this: v320.pre:loadplugin Mail::SpamAssassin::Plugin::DNSEval -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. There's a long-standing bug relating to the x86 architecture that allows you to install Windows. -- Matthew D. Fuller -- http://alexus.org/
Re: Use of uninitialized value $dir in scalar chomp at /usr/local/bin/spamd line 2118, GEN103 line 2.
I do run spamd as a spamd user with a flag --vpopmail $ ~vpopmail/bin/vuserinfo postmas...@xxx.xxx Error: unable to setuid $ I even tried with following, still same thing $ chmod u+s vuserinfo $ ls -ld ~vpopmail/bin/vuserinfo -rws--x--x 1 vpopmail vchkpw 225377 Mar 25 01:15 /home/vpopmail/bin/vuserinfo $ On Wed, Apr 8, 2009 at 12:50 AM, Matt Kettler mkettler...@verizon.net wrote: alexus wrote: I keep getting this line in my logs everytime there is a spamd calles Apr 8 03:55:15 mx1 spamd[36109]: Use of uninitialized value $dir in scalar chomp at /usr/local/bin/spamd line 2118, GEN103 line 2. i dont suppose this is normal Are you using the -v parameter when you start spamd, but are passing a username that's not a vpopmail user with working vuserinfo? Code: - if ( $opt{'vpopmail'} ) { my $vpopdir = $dir; $dir = `$vpopdir/bin/vuserinfo -d \Q$username\E`; if ($? != 0) { # # If vuserinfo failed $username could be an alias # $dir = `$vpopdir/bin/valias \Q$username\E`; if ($? == 0 $dir !~ /.+ - /) { $dir =~ s,.+ - (/.+)/Maildir/,$1,; } else { undef($dir); } } chomp($dir); } -- -- http://alexus.org/
Re: [OT] Re: SpamAssassin is EXTREMLY slow
On Wed, Apr 8, 2009 at 11:21 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Sat, Apr 4, 2009 at 5:48 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Wed, Apr 1, 2009 at 5:52 PM, John Hardin jhar...@impsec.org wrote: How fast are non-SA DNS queries on that box? If they take ten seconds to return an answer, SA is not the culprit. On 01.04.09 17:53, alexus wrote: without dns they are 0.1 - 1.5s, with DNS they are ~7s by non-SA DNS he did not mean SA without DNS, but DNS without SA... just FYI. On 08.04.09 10:21, alexus wrote: what I meant is SA without this: v320.pre:loadplugin Mail::SpamAssassin::Plugin::DNSEval what HE (Josh Hardin) meant, is: dig www.microsoft.com. dig 66.36.168.195.zen.spamhaus.org dig mx surbl.org and look at the Query time result. r...@mx1 ~ 503$ time dig www.microsoft.com. ; DiG 9.4.2-P2 www.microsoft.com. ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 61055 ;; flags: qr rd ra; QUERY: 1, ANSWER: 5, AUTHORITY: 9, ADDITIONAL: 4 ;; QUESTION SECTION: ;www.microsoft.com. IN A ;; ANSWER SECTION: www.microsoft.com. 3586IN CNAME toggle.www.ms.akadns.net. toggle.www.ms.akadns.net. 287 IN CNAME g.www.ms.akadns.net. g.www.ms.akadns.net.287 IN CNAME lb1.www.ms.akadns.net. lb1.www.ms.akadns.net. 287 IN A 207.46.19.254 lb1.www.ms.akadns.net. 287 IN A 207.46.19.190 ;; AUTHORITY SECTION: akadns.net. 172786 IN NS use3.akadns.net. akadns.net. 172786 IN NS zc.akadns.org. akadns.net. 172786 IN NS use4.akadns.net. akadns.net. 172786 IN NS usw2.akadns.net. akadns.net. 172786 IN NS za.akadns.org. akadns.net. 172786 IN NS asia9.akadns.net. akadns.net. 172786 IN NS zd.akadns.org. akadns.net. 172786 IN NS zb.akadns.org. akadns.net. 172786 IN NS eur1.akadns.net. ;; ADDITIONAL SECTION: za.akadns.org. 21587 IN A 213.254.204.197 zb.akadns.org. 21587 IN A 12.183.125.5 zc.akadns.org. 21587 IN A 124.40.52.133 zd.akadns.org. 21587 IN A 204.2.178.133 ;; Query time: 0 msec ;; SERVER: 64.237.55.72#53(64.237.55.72) ;; WHEN: Wed Apr 8 15:38:53 2009 ;; MSG SIZE rcvd: 377 real0m0.006s user0m0.000s sys 0m0.006s r...@mx1 ~ 504$ time dig 66.36.168.195.zen.spamhaus.org ; DiG 9.4.2-P2 66.36.168.195.zen.spamhaus.org ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NXDOMAIN, id: 34009 ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 ;; QUESTION SECTION: ;66.36.168.195.zen.spamhaus.org.IN A ;; AUTHORITY SECTION: zen.spamhaus.org. 150 IN SOA need.to.know.only. hostmaster.spamhaus.org. 2009040862 3600 600 432000 150 ;; Query time: 288 msec ;; SERVER: 64.237.55.72#53(64.237.55.72) ;; WHEN: Wed Apr 8 15:38:58 2009 ;; MSG SIZE rcvd: 112 real0m0.294s user0m0.000s sys 0m0.006s r...@mx1 ~ 505$ time dig mx surbl.org ; DiG 9.4.2-P2 mx surbl.org ;; global options: printcmd ;; Got answer: ;; -HEADER- opcode: QUERY, status: NOERROR, id: 48545 ;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 4, ADDITIONAL: 1 ;; QUESTION SECTION: ;surbl.org. IN MX ;; ANSWER SECTION: surbl.org. 3600IN MX 10 mx1.prolexic.com. surbl.org. 3600IN MX 20 mx2.prolexic.com. surbl.org. 3600IN MX 30 mx3.prolexic.com. ;; AUTHORITY SECTION: surbl.org. 45747 IN NS ns201.surbl.org. surbl.org. 45747 IN NS ns200.surbl.org. surbl.org. 45747 IN NS ns101.surbl.org. surbl.org. 45747 IN NS ns100.surbl.org. ;; ADDITIONAL SECTION: ns201.surbl.org.45747 IN A 192.42.119.21 ;; Query time: 80 msec ;; SERVER: 64.237.55.72#53(64.237.55.72) ;; WHEN: Wed Apr 8 15:39:05 2009 ;; MSG SIZE rcvd: 195 real0m0.086s user0m0.000s sys 0m0.006s r...@mx1 ~ 506$ -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. One World. One Web. One Program. - Microsoft promotional advertisement Ein Volk, ein Reich, ein Fuhrer! - Adolf Hitler -- http://alexus.org/
Re: [OT] Re: SpamAssassin is EXTREMLY slow
On Wed, Apr 8, 2009 at 12:04 PM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Wed, Apr 8, 2009 at 11:21 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Sat, Apr 4, 2009 at 5:48 AM, Matus UHLAR - fantomas uh...@fantomas.sk wrote: On Wed, Apr 1, 2009 at 5:52 PM, John Hardin jhar...@impsec.org wrote: How fast are non-SA DNS queries on that box? If they take ten seconds to return an answer, SA is not the culprit. On 01.04.09 17:53, alexus wrote: without dns they are 0.1 - 1.5s, with DNS they are ~7s by non-SA DNS he did not mean SA without DNS, but DNS without SA... just FYI. On 08.04.09 10:21, alexus wrote: what I meant is SA without this: v320.pre:loadplugin Mail::SpamAssassin::Plugin::DNSEval what HE (Josh Hardin) meant, is: dig www.microsoft.com. dig 66.36.168.195.zen.spamhaus.org dig mx surbl.org and look at the Query time result. On 08.04.09 11:40, alexus wrote: r...@mx1 ~ 503$ time dig www.microsoft.com. ;; Query time: 0 msec r...@mx1 ~ 504$ time dig 66.36.168.195.zen.spamhaus.org ;; Query time: 288 msec r...@mx1 ~ 505$ time dig mx surbl.org ;; Query time: 80 msec seems good. But I think that your problem has been solved or am I wrong? At least you have learned what means dns without spamassassin :-)-- yeah, my spam assassin seems to be acting up all right go figure ;-) Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. Fighting for peace is like fucking for virginity... -- http://alexus.org/
SA + maildrop
I have maildrop installed on my system and I was thinking to enable a global rule among of all my maildrop users where all emails that have score 5.0 and higher would move into junk e-mail folder, and rest should go to INBOX as it was in the past can someone help me out with this? -- http://alexus.org/
Use of uninitialized value $dir in scalar chomp at /usr/local/bin/spamd line 2118, GEN103 line 2.
I keep getting this line in my logs everytime there is a spamd calles Apr 8 03:55:15 mx1 spamd[36109]: Use of uninitialized value $dir in scalar chomp at /usr/local/bin/spamd line 2118, GEN103 line 2. i dont suppose this is normal -- http://alexus.org/
Re: [OT] Re: SpamAssassin is EXTREMLY slow
On Wed, Apr 1, 2009 at 4:49 PM, David Morton morto...@dgrmm.net wrote: Karsten Bräckelmann wrote: On Fri, 2009-03-27 at 23:59 +0200, Jari Fredriksson wrote: I just hope that as good as SA is will be written in some programming language, and not scripting language. Even Java would be better. Dude, you just lost a credit point... ;) Everyone, if you feel the urge to contribute to this thread any further, please first *do* check the list archives -- this pointless thread comes up like once a year. If you believe you can come up with a convincing argument that has *not* been mentioned and turned down before, and which takes active contributors code Perl into account... please try. Agreed. Anytime anyone starts talking about speed and languages, I roll my eyes. Seriously, unless you are a developer and have actually run code through a profiler to know what areas are running slow, you are not qualified to make such statements. If you *have* run the code through a profiler and can prove that a majority of time is spent inside a language construct and not on I/O or a bad algorithm, then you are qualified... to submit a bug report to the language developers so they can fix it. Anything else is just bogus. okay, we like really far away from original thread, i said that SpamAssassin runs really slow for me and on top of that I even found which plugin causing that, which is this: loadplugin Mail::SpamAssassin::Plugin::DNSEval I had to disable it, if someone can suggest something in order to make it work faster i'm all ears -- http://alexus.org/
Re: [OT] Re: SpamAssassin is EXTREMLY slow
On Wed, Apr 1, 2009 at 5:52 PM, John Hardin jhar...@impsec.org wrote: On Wed, 1 Apr 2009, alexus wrote: okay, we like really far away from original thread, i said that SpamAssassin runs really slow for me and on top of that I even found which plugin causing that, which is this: loadplugin Mail::SpamAssassin::Plugin::DNSEval I had to disable it, if someone can suggest something in order to make it work faster i'm all ears How fast are non-SA DNS queries on that box? If they take ten seconds to return an answer, SA is not the culprit. without dns they are 0.1 - 1.5s, with DNS they are ~7s Review your /etc/resolv.conf to see if the first resolver listed is responding quickly. You may want to rearrange them. I use local caching, so it's as fast as it gets It's good practice to use a local caching DNS server. Are you resolving via a caching DNS server on your local network, or is the SA box resolving directly via your ISP DNS servers or other public DNS servers? If the latter, consider installing a caching DNS server on the SA box and use that for name resolution. -- John Hardin KA7OHZ http://www.impsec.org/~jhardin/ jhar...@impsec.org FALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- ...in the 2nd amendment the right to arms clause means you have the right to choose how many arms you want, and the militia clause means that Congress can punish you if the answer is none. -- David Hardy, 2nd Amendment scholar --- Today: April Fools' day -- http://alexus.org/
Re: SpamAssassin is EXTREMLY slow
On Fri, Mar 27, 2009 at 5:59 PM, Jari Fredriksson ja...@iki.fi wrote: Yes, it is terribly slow. I just hope that as good as SA is will be written in some programming language, and not scripting language. Even Java would be better. C?:) I wouldn't count on that anytime soon... -- http://alexus.org/
SpamAssassin is EXTREMLY slow
mx1# /usr/local/bin/spamd --allow-tell --vpopmail --username=spamd --socketpath=/tmp/spamd.sock --debug all [96985] dbg: logger: adding facilities: all [96985] dbg: logger: logging level is DBG [96985] dbg: logger: trying to connect to syslog/unix... [96985] dbg: logger: opening syslog with unix socket [96985] dbg: logger: successfully connected to syslog/unix [96985] dbg: logger: successfully added syslog method [96985] dbg: spamd: will perform setuids? 0 [96985] dbg: spamd: creating UNIX socket: [96985] dbg: spamd: Listen: 128 [96985] dbg: spamd: Local: /tmp/spamd.sock [96985] dbg: spamd: Type: 1 [96985] dbg: logger: adding facilities: all [96985] dbg: logger: logging level is DBG [96985] dbg: generic: SpamAssassin version 3.2.5 [96985] dbg: config: score set 0 chosen. [96985] dbg: dns: no ipv6 [96985] dbg: dns: is Net::DNS::Resolver available? yes [96985] dbg: dns: Net::DNS version: 0.65 [96985] dbg: spamd: Preloading modules with HOME=/tmp/spamd-96985-init [96985] dbg: ignore: test message to precompile patterns and load modules [96985] dbg: config: using /etc/mail/spamassassin for site rules pre files [96985] dbg: config: read file /etc/mail/spamassassin/init.pre [96985] dbg: config: read file /etc/mail/spamassassin/v310.pre [96985] dbg: config: read file /etc/mail/spamassassin/v312.pre [96985] dbg: config: read file /etc/mail/spamassassin/v320.pre [96985] dbg: config: using /usr/local/share/spamassassin for sys rules pre files [96985] dbg: config: using /usr/local/share/spamassassin for default rules dir [96985] dbg: config: read file /usr/local/share/spamassassin/10_default_prefs.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_advance_fee.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_body_tests.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_compensate.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_dnsbl_tests.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_drugs.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_dynrdns.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_fake_helo_tests.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_head_tests.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_html_tests.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_imageinfo.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_meta_tests.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_net_tests.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_phrases.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_porn.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_ratware.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_uri_tests.cf [96985] dbg: config: read file /usr/local/share/spamassassin/20_vbounce.cf [96985] dbg: config: read file /usr/local/share/spamassassin/23_bayes.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_accessdb.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_antivirus.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_asn.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_dcc.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_dkim.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_domainkeys.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_hashcash.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_pyzor.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_razor2.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_replace.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_spf.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_textcat.cf [96985] dbg: config: read file /usr/local/share/spamassassin/25_uribl.cf [96985] dbg: config: read file /usr/local/share/spamassassin/30_text_de.cf [96985] dbg: config: read file /usr/local/share/spamassassin/30_text_fr.cf [96985] dbg: config: read file /usr/local/share/spamassassin/30_text_it.cf [96985] dbg: config: read file /usr/local/share/spamassassin/30_text_nl.cf [96985] dbg: config: read file /usr/local/share/spamassassin/30_text_pl.cf [96985] dbg: config: read file /usr/local/share/spamassassin/30_text_pt_br.cf [96985] dbg: config: read file /usr/local/share/spamassassin/50_scores.cf [96985] dbg: config: read file /usr/local/share/spamassassin/60_awl.cf [96985] dbg: config: read file /usr/local/share/spamassassin/60_shortcircuit.cf [96985] dbg: config: read file /usr/local/share/spamassassin/60_whitelist.cf [96985] dbg: config: read file /usr/local/share/spamassassin/60_whitelist_dk.cf [96985] dbg: config: read file /usr/local/share/spamassassin/60_whitelist_dkim.cf [96985] dbg: config: read file /usr/local/share/spamassassin/60_whitelist_spf.cf [96985] dbg: config: read file