Re: PYZOR_CHECK always have zero score, why?

2016-10-24 Thread Matus UHLAR - fantomas

The 'net' tflag exists to allow SA to know what tests to disable when it 
is told to run only local tests. That is usually done when messages are
being checked well after their arrival, because network-dependent tests
are generally dynamic. There are also places where policy or network
architecture prohibit the use of external services.


On 24.10.16 03:56, Pedro David Marco wrote:

if i set a rule like this:
urirhssub       TEST_URIBL_BLACK  multi.uribl.com.        A   2header           
TEST_URIBL_BLACK  eval:check_uridnsbl('URIBL_BLACK')describe        
TEST_URIBL_BLACK  Contains an URL listed in the URIBL blacklistscore            
 TEST_URIBL_BLACK  3
where tflag is not set... the rule does not run when in local mode..


urirhssub is network rule by definition.
try with another rule.

btw. you still have not answered my question:

how do you run spamassassin?
Aren't you using local tests only by any chance?

--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
"Two words: Windows survives." - Craig Mundie, Microsoft senior strategist
"So does syphillis. Good thing we have penicillin." - Matthew Alton


Re: PYZOR_CHECK always have zero score, why?

2016-10-23 Thread Pedro David Marco
Thanks!
>The 'net' tflag exists to allow SA to know what tests to disable when it 
>is told to run only local tests. That is usually done when messages are 
>being checked well after their arrival, because network-dependent tests 
>are generally dynamic. There are also places where policy or network 
>architecture prohibit the use of external services.
if i set a rule like this:
urirhssub       TEST_URIBL_BLACK  multi.uribl.com.        A   2header           
TEST_URIBL_BLACK  eval:check_uridnsbl('URIBL_BLACK')describe        
TEST_URIBL_BLACK  Contains an URL listed in the URIBL blacklistscore            
 TEST_URIBL_BLACK  3
where tflag is not set... the rule does not run when in local mode..
-Pedro
   

Re: PYZOR_CHECK always have zero score, why?

2016-10-23 Thread John Hardin

On Sun, 23 Oct 2016, Bill Cole wrote:


On 23 Oct 2016, at 1:01, Pedro David Marco wrote:


 This takes me to and old question: How does SA know which are network
 rules and which are not?


tflags


 because it does itright even if "tflag net" is not set for the rule...


The 'net' tflag exists to allow SA to know what tests to disable when it is 
told to run only local tests.


And which score set to use.


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  USMC Rules of Gunfighting #12: Have a plan.
  USMC Rules of Gunfighting #13: Have a back-up plan, because the
  first one won't work.
---
 306 days since the first successful real return to launch site (SpaceX)


Re: PYZOR_CHECK always have zero score, why?

2016-10-23 Thread Bill Cole

On 23 Oct 2016, at 1:01, Pedro David Marco wrote:



I have tested it in a new Debian box and as expected PYZOR_CHECK 
worked. So it is obvious that i have something odd  in my Debibox.

Thanks to all who helped me gently!!
This takes me to and old question: How does SA know which are network 
rules and which are not?


tflags


because it does itright even if "tflag net" is not set for the rule...


The 'net' tflag exists to allow SA to know what tests to disable when it 
is told to run only local tests. That is usually done when messages are 
being checked well after their arrival, because network-dependent tests 
are generally dynamic. There are also places where policy or network 
architecture prohibit the use of external services.


Re: PYZOR_CHECK always have zero score, why?

2016-10-22 Thread Pedro David Marco

I have tested it in a new Debian box and as expected PYZOR_CHECK worked. So it 
is obvious that i have something odd  in my Debibox.
Thanks to all who helped me gently!!
This takes me to and old question: How does SA know which are network rules and 
which are not? because it does itright even if "tflag net" is not set for the 
rule...
Thanks in advance
-Pedro



Re: PYZOR_CHECK always have zero score, why?

2016-10-20 Thread Bill Cole

On 19 Oct 2016, at 23:23, Pedro David Marco wrote:




Hmmm... Relevant context of those lines is lost with grep, but they
confirm something odd is going on.
Bill, your remark is welcome, what lines/info should i pay attention 
to or event post here?


The full output of the Dumper. As John said, pastebin or a similar site 
can be useful for this.


Each of those lines with 'pyzor' in them is part of some larger data 
structure, and it would help to know what those structures are.


Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread John Hardin

On Wed, 19 Oct 2016, Bill Cole wrote:


 This is a print Dumper of permsgstatus with a grep -i PYZOR:


[snip]
Hmmm... Relevant context of those lines is lost with grep, but they confirm 
something odd is going on.


Perhaps dump the entire thing to a text file and post it (gzipped if 
large) to pastebin?


--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  A well educated Electorate, being necessary to the liberty of a
  free State, the Right of the People to Keep and Read Books,
  shall not be infringed.
---
 302 days since the first successful real return to launch site (SpaceX)


Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread Pedro David Marco


>Hmmm... Relevant context of those lines is lost with grep, but they 
>confirm something odd is going on.
Bill, your remark is welcome, what lines/info should i pay attention to or 
event post here?
Pedro

   

   

Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread Pedro David Marco
Thanks in any case Bill...
Really appreciate all your help and time... Bill, John, Matus...

Pedro
  From: Bill Cole <sausers-20150...@billmail.scconsult.com>
 To: "users@spamassassin.apache.org" <users@spamassassin.apache.org> 
Cc: Pedro David Marco <pedrod_ma...@yahoo.com>
 Sent: Thursday, October 20, 2016 5:03 AM
 Subject: Re: PYZOR_CHECK always have zero score, why?
   
On 19 Oct 2016, at 22:41, Pedro David Marco wrote:

> Thanks Bill...

I wish it had been more helpful.

> tested...
>> 1. Add to local.cf, along with the other PYZOR_CHECK_2 lines you 
>> had:>>    tflags PYZOR_CHECK_2 net>>Does that change whether the 
>> rule is hit?>>>2. Change the PYZOR_CHECK score line in 50_scores.cf 
>> to:>>    score PYZOR_CHECK 0.001 1.985 0.001 1.392>>Does that quiet 
>> the warning about the meta rule?>>>>If Test #1 makes PYZOR_CHECK_2 
>> NOT match a message that matched without >it, then something is 
>> disabling 'net' rules and you need to find and >correct whatever is 
>> doing that if you want SA to work well.
> PYZOR_CHECK_2 works well when tflag  net is set...
>> If Test #2 silences the warning, you've found what is PROBABLY a 
>> minor >cosmetic bug in SpamAssassin but MAY be a substantive one if 
>> it means >that meta rule is being skipped as a result of having 
>> detected the wrong >score in that line. Opening a bug report 
>> at >https://bz.apache.org/SpamAssassin/ would be helpful.
> warning still present... :-(

Color me entirely mystified.

> This is a print Dumper of permsgstatus with a grep -i PYZOR:

[snip]
Hmmm... Relevant context of those lines is lost with grep, but they 
confirm something odd is going on.

> so still wondering  about the Dumper line:  'PYZOR_CHECK' => 
> '0',

That is strange, but it's not clear which hash that is from.

> i have even performed a ext4 fs deep check to discard any drive 
> corruption issue

I'm all out of ideas grounded in sanity.


   

Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread Bill Cole

On 19 Oct 2016, at 22:41, Pedro David Marco wrote:


Thanks Bill...


I wish it had been more helpful.


tested...
1. Add to local.cf, along with the other PYZOR_CHECK_2 lines you 
had:>>    tflags PYZOR_CHECK_2 net>>Does that change whether the 
rule is hit?>>>2. Change the PYZOR_CHECK score line in 50_scores.cf 
to:>>    score PYZOR_CHECK 0.001 1.985 0.001 1.392>>Does that quiet 
the warning about the meta rule?If Test #1 makes PYZOR_CHECK_2 
NOT match a message that matched without >it, then something is 
disabling 'net' rules and you need to find and >correct whatever is 
doing that if you want SA to work well.

PYZOR_CHECK_2 works well when tflag  net is set...
If Test #2 silences the warning, you've found what is PROBABLY a 
minor >cosmetic bug in SpamAssassin but MAY be a substantive one if 
it means >that meta rule is being skipped as a result of having 
detected the wrong >score in that line. Opening a bug report 
at >https://bz.apache.org/SpamAssassin/ would be helpful.

warning still present... :-(


Color me entirely mystified.


This is a print Dumper of permsgstatus with a grep -i PYZOR:


[snip]
Hmmm... Relevant context of those lines is lost with grep, but they 
confirm something odd is going on.


so still wondering  about the Dumper line:  'PYZOR_CHECK' => 
'0',


That is strange, but it's not clear which hash that is from.

i have even performed a ext4 fs deep check to discard any drive 
corruption issue


I'm all out of ideas grounded in sanity.


Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread Pedro David Marco
Thanks Bill...
tested...
>1. Add to local.cf, along with the other PYZOR_CHECK_2 lines you had:>>    
>tflags PYZOR_CHECK_2 net>>Does that change whether the rule is hit?>>>2. 
>Change the PYZOR_CHECK score line in 50_scores.cf to:>>    score PYZOR_CHECK 
>0.001 1.985 0.001 1.392>>Does that quiet the warning about the meta 
>rule?If Test #1 makes PYZOR_CHECK_2 NOT match a message that matched 
>without >it, then something is disabling 'net' rules and you need to find and 
>>correct whatever is doing that if you want SA to work well.
PYZOR_CHECK_2 works well when tflag  net is set...
>If Test #2 silences the warning, you've found what is PROBABLY a minor 
>>cosmetic bug in SpamAssassin but MAY be a substantive one if it means >that 
>meta rule is being skipped as a result of having detected the wrong >score in 
>that line. Opening a bug report at >https://bz.apache.org/SpamAssassin/ would 
>be helpful.
warning still present... :-(


This is a print Dumper of permsgstatus with a grep -i PYZOR:

  'pyzor_available' => 1,   }, 'Mail::SpamAssassin::Plugin::Pyzor' ),           
                           'PYZOR_CHECK_2' => '2',                              
        'PYZOR_CHECK' => '0',                                                   
'PYZOR_CHECK_2' => 'check_pyzor',                                               
    'PYZOR_CHECK' => 'check_pyzor',                                           
'PYZOR_CHECK_2' => '/etc/mail/spamassassin/local.cf',                           
                'PYZOR_CHECK' => 
'/var/lib/spamassassin/3.004001/updates_spamassassin_org/25_pyzor.cf',          
              'pyzor_timeout' => '3.5',                                         
     'Mail::SpamAssassin::Plugin::Pyzor' => 1,                                  
          'check_pyzor' => $VAR1->{'async'}{'main'}{'plugins'}{'plugins'}[6],   
                                           
'updates_spamassassin_org/25_pyzor.cf' => 
'updates_spamassassin_org/25_pyzor.cf',                                         
   'PYZOR_CHECK' => 'Listed in Pyzor (http://pyzor.sf.net/)',                   
                         'PYZOR_CHECK_2' => 'Listed in Pyzor 
(http://pyzor.sf.net/)'                        'pyzor_path' => undef,           
                                          'DIGEST_MULTIPLE' => 'RAZOR2_CHECK + 
DCC_CHECK + PYZOR_CHECKA > 1',                                                  
   'setting' => 'use_pyzor'                                                     
'setting' => 'pyzor_max'                                                     
'setting' => 'pyzor_timeout'                                                    
 'setting' => 'pyzor_options',                                                  
   'setting' => 'pyzor_path',                                          
'PYZOR_CHECK_2' => 13,                                          'PYZOR_CHECK' 
=> 13,                        'pyzor_options' => '',                        
'use_pyzor' => 1,                                          'PYZOR_CHECK_2' => 
'2',                                          'PYZOR_CHECK' => '0',             
                             'PYZOR_CHECK_2' => '2',                            
              'PYZOR_CHECK' => '0',                                          
'PYZOR_CHECK_2' => '2',                                          'PYZOR_CHECK' 
=> '0',                                                                         
         'pyzor_timeout' => 
$VAR1->{'async'}{'main'}{'plugins'}{'plugins'}[17]{'conf'}{'registered_commands'}[157],
                                                                                
  'pyzor_path' => 
$VAR1->{'async'}{'main'}{'plugins'}{'plugins'}[17]{'conf'}{'registered_commands'}[159],
                                                                                
  'pyzor_options' => 
$VAR1->{'async'}{'main'}{'plugins'}{'plugins'}[17]{'conf'}{'registered_commands'}[158],
                                                                                
  'use_pyzor' => 
$VAR1->{'async'}{'main'}{'plugins'}{'plugins'}[17]{'conf'}{'registered_commands'}[155],
                                                                                
  'pyzor_max' => 
$VAR1->{'async'}{'main'}{'plugins'}{'plugins'}[17]{'conf'}{'registered_commands'}[156],
                        'pyzor_max' => 5,
 It seems PYZOR_CHECK is taken from file 
/var/lib/spamassassin/3.004001/updates_spamassassin_org/25_pyzor.cf  that looks 
like:
 ifplugin Mail::SpamAssassin::Plugin::Pyzor  full     PYZOR_CHECK    
eval:check_pyzor() describe PYZOR_CHECK    Listed in Pyzor 
(http://pyzor.sf.net/) tflags   PYZOR_CHECK    net reuse    PYZOR_CHECK 
 endif

and 50_scores.cf looks as suggested by Bill:
 score PYZOR_CHECK 0.001 1.985 0.001 1.392  so still wondering  about the 
Dumper line:  'PYZOR_CHECK' => '0', i have even performed a ext4 fs deep 
check to discard any drive corruption issue






   

Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread Bill Cole

On 19 Oct 2016, at 12:16, Pedro David Marco wrote:




IIRC I've seen this warning on meta rule dependencies with a non-zero
scores. Unless you have a better reason to think Pyzor isn't working,

I>'d just ignore it.
Well... you are right, in fact i have no problem in ignoring it, but i 
do not like tohave unresolved issues in something that is going to be 
in production.

---Pedro.


OK, since nothing is re-scoring PYZOR_CHECK to 0 or otherwise acting on 
it specifically, there are some other possibilities. Try these 2 tests:


1. Add to local.cf, along with the other PYZOR_CHECK_2 lines you had:

   tflags PYZOR_CHECK_2 net

Does that change whether the rule is hit?


2. Change the PYZOR_CHECK score line in 50_scores.cf to:

   score PYZOR_CHECK 0.001 1.985 0.001 1.392

Does that quiet the warning about the meta rule?



If Test #1 makes PYZOR_CHECK_2 NOT match a message that matched without 
it, then something is disabling 'net' rules and you need to find and 
correct whatever is doing that if you want SA to work well.


If Test #2 silences the warning, you've found what is PROBABLY a minor 
cosmetic bug in SpamAssassin but MAY be a substantive one if it means 
that meta rule is being skipped as a result of having detected the wrong 
score in that line. Opening a bug report at 
https://bz.apache.org/SpamAssassin/ would be helpful.


Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread Pedro David Marco



>IIRC I've seen this warning on meta rule dependencies with a non-zero
>scores. Unless you have a better reason to think Pyzor isn't working,
I>'d just ignore it.
Well... you are right, in fact i have no problem in ignoring it, but i do not 
like tohave unresolved issues in something that is going to be in production.
---Pedro.




   

Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread Matus UHLAR - fantomas

On 19.10.16 08:47, Pedro David Marco wrote:

Thanks Matus..

you should also check homedir of user spamassassin runs under (e.g. amavis)


i already looked for the string PYZOR_CHECK trhougout the full system (homes 
included) with no luck..

where on hell is it overwriting  the local.cf line???
score         PYZOR_CHECK         2
and sets score 0? 


you haven't answered my question, see below.


 From: Matus UHLAR - fantomas <uh...@fantomas.sk>
To: users@spamassassin.apache.org
Sent: Wednesday, October 19, 2016 9:42 AM
Subject: Re: PYZOR_CHECK always have zero score, why?

On 19.10.16 04:28, Pedro David Marco wrote:

i already did but still no clues...
Files in my Debian SA package (3.4.1) containing the string PYZOR_CHECK:
# for i in `dpkg -L spamassassin`; do grep -l PYZOR_CHECK $i 2>/dev/null ; 
done/usr/share/spamassassin/30_text_fr.cf/usr/share/spamassassin/30_text_pl.cf/usr/share/spamassassin/25_pyzor.cf/usr/share/spamassassin/50_scores.cf/usr/share/spamassassin/30_text_pt_br.cf/usr/share/spamassassin/20_net_tests.cf/usr/share/spamassassin/30_text_nl.cf/usr/share/spamassassin/30_text_de.cf
25_pyzor.cf contains:


grep -r PYZOR_CHECK /etc/spamassassin/

you should also check homedir of user spamassassin runs under (e.g. amavis)


i have even looked for the string PYZOR_CHECK throughout the full system... and 
no more files contain that string.


how do you run spamassassin?


so, how do you run spamassassin?
Aren't you by any change only using local tests?


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
The early bird may get the worm, but the second mouse gets the cheese. 


Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread RW
On Wed, 19 Oct 2016 03:22:13 + (UTC)
Pedro David Marco wrote:

> Hi!
> 
> It seems PYZOR_CHECK rule is not being used in my SA Just
> installed SA and Pyzor in a Debian and executed  "pyzor discover."In
> Debian pyzor is enabled by default so nothing to add in
> local.cf. Command "pyzor check < emailfile.eml" works ok. .. now i
> try to test SA in debug mode like this: # spamassassin  -D  2>&1
>  04:48:28.562 [9566] dbg: plugin: loading
> Mail::SpamAssassin::Plugin::Pyzor from @INC Oct 19 04:48:28.564
> [9566] dbg: pyzor: network tests on, attempting Pyzor. Oct 19
> 04:48:29.711 [9566] info: rules: meta test DIGEST_MULTIPLE has
> dependency 'PYZOR_CHECK' with a zero score 

IIRC I've seen this warning on meta rule dependencies with a non-zero
scores. Unless you have a better reason to think Pyzor isn't working,
I'd just ignore it.








Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread Pedro David Marco
Thanks Matus..
>you should also check homedir of user spamassassin runs under (e.g. amavis)

i already looked for the string PYZOR_CHECK trhougout the full system (homes 
included) with no luck..

where on hell is it overwriting  the local.cf line???
score         PYZOR_CHECK         2
and sets score 0? 

i am stuck... 

-Pedro

  From: Matus UHLAR - fantomas <uh...@fantomas.sk>
 To: users@spamassassin.apache.org 
 Sent: Wednesday, October 19, 2016 9:42 AM
 Subject: Re: PYZOR_CHECK always have zero score, why?
   
On 19.10.16 04:28, Pedro David Marco wrote:
>i already did but still no clues...
>Files in my Debian SA package (3.4.1) containing the string PYZOR_CHECK:
># for i in `dpkg -L spamassassin`; do grep -l PYZOR_CHECK $i 2>/dev/null ; 
>done/usr/share/spamassassin/30_text_fr.cf/usr/share/spamassassin/30_text_pl.cf/usr/share/spamassassin/25_pyzor.cf/usr/share/spamassassin/50_scores.cf/usr/share/spamassassin/30_text_pt_br.cf/usr/share/spamassassin/20_net_tests.cf/usr/share/spamassassin/30_text_nl.cf/usr/share/spamassassin/30_text_de.cf
>25_pyzor.cf contains:

grep -r PYZOR_CHECK /etc/spamassassin/

you should also check homedir of user spamassassin runs under (e.g. amavis)

>i have even looked for the string PYZOR_CHECK throughout the full system... 
>and no more files contain that string.

how do you run spamassassin?

>i have tried sa-compile of course but... is there maybe any cache i can delete 
>manually? not to my knowledge but...

sa-compile only compiles regular expressions AFAIK.


-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Atheism is a non-prophet organization. 


   

Re: PYZOR_CHECK always have zero score, why?

2016-10-19 Thread Matus UHLAR - fantomas

On 19.10.16 04:28, Pedro David Marco wrote:

i already did but still no clues...
Files in my Debian SA package (3.4.1) containing the string PYZOR_CHECK:
# for i in `dpkg -L spamassassin`; do grep -l PYZOR_CHECK $i 2>/dev/null ; 
done/usr/share/spamassassin/30_text_fr.cf/usr/share/spamassassin/30_text_pl.cf/usr/share/spamassassin/25_pyzor.cf/usr/share/spamassassin/50_scores.cf/usr/share/spamassassin/30_text_pt_br.cf/usr/share/spamassassin/20_net_tests.cf/usr/share/spamassassin/30_text_nl.cf/usr/share/spamassassin/30_text_de.cf
25_pyzor.cf contains:


grep -r PYZOR_CHECK /etc/spamassassin/

you should also check homedir of user spamassassin runs under (e.g. amavis)


i have even looked for the string PYZOR_CHECK throughout the full system... and 
no more files contain that string.


how do you run spamassassin?


i have tried sa-compile of course but... is there maybe any cache i can delete 
manually? not to my knowledge but...


sa-compile only compiles regular expressions AFAIK.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Atheism is a non-prophet organization. 


Re: PYZOR_CHECK always have zero score, why?

2016-10-18 Thread Pedro David Marco
Thanks John...
this is the list:
Oct 19 06:58:33.422 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/50_scores.cf" for 
included fileOct 19 06:58:33.437 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_adsp_override_dkim.cf"
 for included fileOct 19 06:58:33.439 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_awl.cf" for 
included fileOct 19 06:58:33.440 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_shortcircuit.cf" 
for included fileOct 19 06:58:33.440 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_txrep.cf" for 
included fileOct 19 06:58:33.441 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_whitelist.cf" for 
included fileOct 19 06:58:33.442 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_whitelist_dkim.cf" 
for included fileOct 19 06:58:33.445 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_whitelist_spf.cf" 
for included fileOct 19 06:58:33.446 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/60_whitelist_subject.cf"
 for included fileOct 19 06:58:33.447 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/72_active.cf" for 
included fileOct 19 06:58:33.573 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/72_scores.cf" for 
included fileOct 19 06:58:33.577 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/73_sandbox_manual_scores.cf"
 for included fileOct 19 06:58:33.577 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/local.cf" for included 
fileOct 19 06:58:33.578 [28083] dbg: config: using 
"/var/lib/spamassassin/3.004001/updates_spamassassin_org/regression_tests.cf" 
for included file
only 50_scores.cf contains string PYZOR_CHECK
--Pedro


  From: John Hardin <jhar...@impsec.org>
 To: SA Mailing List <users@spamassassin.apache.org> 
 Sent: Wednesday, October 19, 2016 6:41 AM
 Subject: Re: PYZOR_CHECK always have zero score, why?
   
On Wed, 19 Oct 2016, Pedro David Marco wrote:

> Files in my Debian SA package (3.4.1) containing the string PYZOR_CHECK:

Run debug mode and look for the list of config files it's actually 
reading. What comes after the default 50_scores.cf?

> i have even looked for the string PYZOR_CHECK throughout the full 
> system... and no more files contain that string.

Bizarre.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhar...@impsec.org    FALaholic #11174    pgpk -a jhar...@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  The yardstick you should use when considering whether to support a
  given piece of legislation is "what if my worst enemy is chosen to
  administer this law?"
---
  301 days since the first successful real return to launch site (SpaceX)


   

Re: PYZOR_CHECK always have zero score, why?

2016-10-18 Thread John Hardin

On Wed, 19 Oct 2016, Pedro David Marco wrote:


Files in my Debian SA package (3.4.1) containing the string PYZOR_CHECK:


Run debug mode and look for the list of config files it's actually 
reading. What comes after the default 50_scores.cf?


i have even looked for the string PYZOR_CHECK throughout the full 
system... and no more files contain that string.


Bizarre.

--
 John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
 jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org
 key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  The yardstick you should use when considering whether to support a
  given piece of legislation is "what if my worst enemy is chosen to
  administer this law?"
---
 301 days since the first successful real return to launch site (SpaceX)


Re: PYZOR_CHECK always have zero score, why?

2016-10-18 Thread Pedro David Marco
Thanks Bill..
i already did but still no clues...
Files in my Debian SA package (3.4.1) containing the string PYZOR_CHECK:
# for i in `dpkg -L spamassassin`; do grep -l PYZOR_CHECK $i 2>/dev/null ; 
done/usr/share/spamassassin/30_text_fr.cf/usr/share/spamassassin/30_text_pl.cf/usr/share/spamassassin/25_pyzor.cf/usr/share/spamassassin/50_scores.cf/usr/share/spamassassin/30_text_pt_br.cf/usr/share/spamassassin/20_net_tests.cf/usr/share/spamassassin/30_text_nl.cf/usr/share/spamassassin/30_text_de.cf
25_pyzor.cf contains:

 ifplugin Mail::SpamAssassin::Plugin::Pyzor full PYZOR_CHECK        
eval:check_pyzor()  
 describe PYZOR_CHECK    Listed in Pyzor (http://pyzor.sf.net/) tflags 
PYZOR_CHECK      net reuse  PYZOR_CHECK endif

and 50_scores.cf contains:
 ifplugin Mail::SpamAssassin::Plugin::Pyzor score PYZOR_CHECK 0 1.985 0 1.392 # 
n=0 n=2 endif # Mail::SpamAssassin::Plugin::Pyzor

i have even looked for the string PYZOR_CHECK throughout the full system... and 
no more files contain that string.
i have tried sa-compile of course but... is there maybe any cache i can delete 
manually? not to my knowledge but...
---Pedro.

  From: Bill Cole <sausers-20150...@billmail.scconsult.com>
 To: SA Mailing List <users@spamassassin.apache.org> 
 Sent: Wednesday, October 19, 2016 6:04 AM
 Subject: Re: PYZOR_CHECK always have zero score, why?
   
On 18 Oct 2016, at 23:22, Pedro David Marco wrote:

> So Pyzor seems to be OK!... the problem is somehow related to 
> PYZOR_CHECK rule but why??? 

Some config file is being loaded that sets the score of PYZOR_CHECK to 
0. It is NOT 0 in the current default ruleset:

50_scores.cf:score PYZOR_CHECK 0 1.985 0 1.392 # n=0 n=2

Examine the unfiltered debug output for what config files are actually 
being loaded. My suspicion is that this is some Debian modification.


   

Re: PYZOR_CHECK always have zero score, why?

2016-10-18 Thread Bill Cole

On 18 Oct 2016, at 23:22, Pedro David Marco wrote:

So Pyzor seems to be OK!... the problem is somehow related to 
PYZOR_CHECK rule but why??? 


Some config file is being loaded that sets the score of PYZOR_CHECK to 
0. It is NOT 0 in the current default ruleset:


50_scores.cf:score PYZOR_CHECK 0 1.985 0 1.392 # n=0 n=2

Examine the unfiltered debug output for what config files are actually 
being loaded. My suspicion is that this is some Debian modification.