[AMaViS-user] OT amavis-stats numbers

2006-10-23 Thread Peter Huetmannsberger
Hello, Sorry to ask here, but it seems to be the most appropriate place for it. When looking at my statistics I noticed that the number of spams is always lower than the number of passed clean emails. I was happy with this fo rthe longest time, despite the feeling that something is not

Re: [AMaViS-user] Tagging image spam

2006-10-23 Thread Hanne Moa
On 10/22/06, techlist06 [EMAIL PROTECTED] wrote: I am already tagging potential spam. Is there a relatively easy way I can tag messages with the image spam, specifically the gif/animated gif's as spam? I considered blocking them altogether, but figured that might be too drastic. I'd like to

[AMaViS-user] Can't update rules for spamassassin

2006-10-23 Thread Rocco Scappatura
/RulesDuJour/99_FVGT_Tripwire.cf.2; mv -f /tmp/RulesDuJour/tripwire.cf.20061023-1005 /etc/mail/spamassassin/tripwire.cf; mv -f /etc/mail/spamassassin/bogus-virus-warnings.cf /tmp/RulesDuJour/bogus-virus-warnings.cf.2; mv -f /tmp/RulesDuJour/bogus-virus-warnings.cf.20061023-1005 /etc/mail/spamassassin

[AMaViS-user] R: Can't update rules for spamassassin

2006-10-23 Thread Rocco Scappatura
failed. Rolling configuration files back, not restarting SpamAssassin. Rollback command is: mv -f /etc/mail/spamassassin/tripwire.cf /tmp/RulesDuJour/99_FVGT_Tripwire.cf.2; mv -f /tmp/RulesDuJour/tripwire.cf.20061023-1005 /etc/mail/spamassassin/tripwire.cf; mv -f /etc/mail/spamassassin/bogus

Re: [AMaViS-user] R: Can't update rules for spamassassin

2006-10-23 Thread Matthias Haegele
Rocco Scappatura schrieb: Hello, I have tried to run SA with debug option to get some further insight, but commands does not return: /etc/mail/spamassassin # spamassassin -D -lint [28005] warn: The -l option has been deprecated and is no longer supported, ignoring. spamassassin -D

Re: [AMaViS-user] Tagging image spam

2006-10-23 Thread Mark Martinec
Voytek, FWIW, I've installed FuzzyOCR maybe 2 or 3 weeks ago, I think... it sometimes works, though, I don't get the same results as README/samples suggest so, perhaps, GIF block is a better alternative... Hard blocking may be too harsh, some mailing lists and company mail add logos and

Re: [AMaViS-user] OT amavis-stats numbers

2006-10-23 Thread albi albinootje
On 10/23/06, Peter Huetmannsberger [EMAIL PROTECTED] wrote: My question is therefore. Is there a way to leave the mails form spamalert to spam-police out of the statistics, to create a truer picture of the ratio spam:ham mails? are you talking about this amavis-stats ?

[AMaViS-user] R: Can't update rules for spamassassin

2006-10-23 Thread Rocco Scappatura
-f /etc/mail/spamassassin/tripwire.cf /tmp/RulesDuJour/99_FVGT_Tripwire.cf.2; mv -f /tmp/RulesDuJour/tripwire.cf.20061023-1005 /etc/mail/spamassassin/tripwire.cf; mv -f /etc/mail/spamassassin/bogus-virus-warnings.cf /tmp/RulesDuJour/bogus-virus-warnings.cf.2; mv -f /tmp/RulesDuJour/bogus

[AMaViS-user] R: R: Can't update rules for spamassassin

2006-10-23 Thread Rocco Scappatura
Sorry, /etc/mail/spamassassin # spamassassin -D -lint [28005] warn: The -l option has been deprecated and is no longer supported, ignoring. spamassassin -D --lint ^^ u forgot one - You're right.. Here my output.. /etc/mail/spamassassin #

[AMaViS-user] R: Can't update rules for spamassassin

2006-10-23 Thread Rocco Scappatura
Hello, failed to parse line, skipping: body id=pg1 a guess: it seems u have copied and pasted some wrong lines, your config is broken? It does not seem to me.. Can someone give me an hint about how to solve this problem? Show your rulesdujour config? Here my simple

Re: [AMaViS-user] Can't update rules for spamassassin

2006-10-23 Thread Daniel J McDonald
On Mon, 2006-10-23 at 11:01 +0200, Rocco Scappatura wrote: Hello, It's many days that rule do jour try to update rules of spamassassin bat without success.. rulesemporium.com let their domain lapse, and you have probably cached bad data before they got their domain re-registered. I find

Re: [AMaViS-user] No tag for forwarded mails

2006-10-23 Thread Mark Martinec
Christophe, I use amavis-new-2.4.3 on a classic postfix-linux box, all SPAM are well tagged and combination with DCC, razor, and pyzor works fine too. All Works fine except mails which are rewritted ( in case of forwarding mail which postfix canonical) are not tagged, and so I relay some spam

Re: [AMaViS-user] OT amavis-stats numbers

2006-10-23 Thread Mark Martinec
Peter, This morning it dawned on me, that every rejected spam creates a legitimate (passed clean) mail, i.e. the one sent to the spam-admin notifying me of spam being quarantined. This changes the picture completely and makes the numbers look more than 80% spam and 20 % real mails. My

Re: [AMaViS-user] OT amavis-stats numbers

2006-10-23 Thread Peter Huetmannsberger
Hmm, thank you for your help, but I am afraid, I am still using sendmail with the milter setup, so that doesn't do it for me. Thanks again, .peter On Mon, 23 Oct 2006, Mark Martinec wrote: Peter, This morning it dawned on me, that every rejected spam creates a legitimate (passed

Re: [AMaViS-user] can't keep up...

2006-10-23 Thread Ricardo Stella
Tapani Tarvainen wrote: On Fri, Oct 20, 2006 at 02:50:21PM -0400, Ricardo Stella ([EMAIL PROTECTED]) wrote: I've been pushing for some time to get up-to-date and valid user listsings autoupdated for some time, but it's been way to slow... The thing was that allowing only valid users

[AMaViS-user] Amavisd-new Spamassassin sa-updata interaction

2006-10-23 Thread John
Hello list, I'm confused on how Amavisd-new and Spamassassin sa-update interact. There are several previous posts that didn't clear things by me. Versions: SA 3.1.7 Amavisd-new 2.3.3 Should I include the updated rules in /etc/spamassasin/local.cf as mentioned in the SA website? include

Re: [AMaViS-user] Amavisd-new Spamassassin sa-updata interaction

2006-10-23 Thread John
Peter Huetmannsberger [EMAIL PROTECTED] schreef in bericht news:[EMAIL PROTECTED] On Mon, 23 Oct 2006, John wrote: Hello list, I'm confused on how Amavisd-new and Spamassassin sa-update interact. There are several previous posts that didn't clear things by me. Versions: SA 3.1.7

Re: [AMaViS-user] Amavisd-new Spamassassin sa-updata interaction

2006-10-23 Thread Mark Martinec
John, I'm confused on how Amavisd-new and Spamassassin sa-update interact. There are several previous posts that didn't clear things by me. Versions: SA 3.1.7, Amavisd-new 2.3.3 These versions are fine, sa-update should work out of the box, no special options or actions are needed, just let

Re: [AMaViS-user] Amavisd-new Spamassassin sa-updata interaction

2006-10-23 Thread Mark Martinec
Peter, I am not sure, taht what I do is correct, but then who cares if it works. I run a daily cronjob as user amavis with the following command line: /usr/bin/sa-update --updatedir /usr/share/spamassassin/ --gpghomedir \ /var/amavis/ I've been doing this initially, but people on SA list

Re: [AMaViS-user] Amavisd-new Spamassassin sa-updata interaction

2006-10-23 Thread John
Mark Martinec [EMAIL PROTECTED] schreef in bericht news:[EMAIL PROTECTED] John, Mark, Thanx for the quick response I'm confused on how Amavisd-new and Spamassassin sa-update interact. There are several previous posts that didn't clear things by me. Versions: SA 3.1.7, Amavisd-new 2.3.3

Re: [AMaViS-user] Amavisd-new Spamassassin sa-updata interaction

2006-10-23 Thread Mark Martinec
John, So after sa-update I should also execute an /etc/init.d/amavisd restart and I'm fine? Yes. (or 'amavisd reload') Mark - Using Tomcat but need to do more? Need to support web services, security? Get stuff done

Re: [AMaViS-user] R: Can't update rules for spamassassin

2006-10-23 Thread Matthias Haegele
Rocco Scappatura schrieb: I don't understand. Could you explain better? Tnx --- error-message: Lint output: [6587] warn: config: failed to parse line, skipping: !DOCTYPE HTML PUBLIC -//W3C//DTD HTML 4.01

Re: [AMaViS-user] Spam lover's emails get filtered

2006-10-23 Thread Mark Martinec
Jose, By filtering I mean the spam lover's messages are being deposited in the quarantine directory. I've spoken with the person involved and they say they're receiving more spam (and loving it). But I haven't compared his messages in the quarantine directory to his delivered messages yet.

Re: [AMaViS-user] amavisd-new 2.4.3, postfix, lmtp, bounce messages

2006-10-23 Thread Mark Martinec
Wayne, I ran into the lmtp bug with 2.4.2 (and hence had a lot of spam messages queued for bouncing). Upgraded to 2.4.3 and that issue is gone Yes, there was a bug in LMTP processing in 2.4.2. but it would appear now that the folks who score low enough for us to send the extremely rare

[AMaViS-user] Error amavis-milter

2006-10-23 Thread Rocco Scappatura
Hello, Amavisd-new goes in error after a few time that it starts.. After raising verbosity of amavis-milter I have seen the following entries in milter logs: Oct 23 18:59:51 av3 amavis-milter[4149]: amavis-milter: thread_create() failed: 11, try again What it means? It is this the cause of my

[AMaViS-user] BAD-HEADER no attachment trouble

2006-10-23 Thread Johan
Hi all, Running: SuSE10.0 Postfix 2.2.5-5 Amavis-new 2.3.3-5 ClamAv 0.88.5-0.1 Lately very often our users complain that they have received an email without an attachment. When i check the logs i can't find any error/warning messages except for a BAD-HEADER message (which i let pass by

Re: [AMaViS-user] BAD-HEADER no attachment trouble

2006-10-23 Thread Mark Martinec
Johan, Lately very often our users complain that they have received an email without an attachment. When i check the logs i can't find any error/warning messages except for a BAD-HEADER message (which i let pass by default). In the beginning i told the users that the email arrived with a bad

[AMaViS-user] Amavis-milter does'n start

2006-10-23 Thread Rocco Scappatura
Hello, I get the following error.. Oct 23 20:08:36 av3 sendmail[30415]: k9NI8aeJ030415: Milter (milter-amavis): local socket name /var/amavis/amavis-milter.sock unsafe Oct 23 20:08:36 av3 sendmail[30415]: k9NI8aeJ030415: Milter (milter-amavis): to error state What I can be? Thanks, rocsca

[AMaViS-user] R: Amavis-milter does'n start

2006-10-23 Thread Rocco Scappatura
Sorry.. It Was a my error while starting amavisd-new (I've commented the name of socket where amavis-milter have to bind..) Sorry again.. rocsca -Messaggio originale- Da: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Per conto di Rocco Scappatura Inviato: lunedì 23 ottobre 2006

Re: [AMaViS-user] BAD-HEADER no attachment trouble

2006-10-23 Thread Johan
Op maandag 23 oktober 2006 20:08, schreef Mark Martinec: Johan, Lately very often our users complain that they have received an email without an attachment. When i check the logs i can't find any error/warning messages except for a BAD-HEADER message (which i let pass by default). In

Re: [AMaViS-user] bad headers with html_mail plugin and amavisd-new

2006-10-23 Thread Mike Husmann
Mark, On Mon, October 23, 2006 11:54 am, Mark Martinec wrote: Jo Rhett writes: Your first sample came across somewhat mangled (adjecent header fields joined and wrapped), but as far I can tell, it is missing the final --=_20061019092239_46584-- line. Here is another bad-header message -

[AMaViS-user] From address spoofed as being from recipient system?

2006-10-23 Thread Mark Burdick
Hi, all... I have been having an odd problem with a couple of servers running AMAVISD, and am looking for some insight/guidance. I have been receiving (intermittently, but often in bunches) SPAM that *claims* to be from a user on the host that is actually processing the mail. This supposed

Re: [AMaViS-user] From address spoofed as being from recipient system?

2006-10-23 Thread Clifton Royston
On Mon, Oct 23, 2006 at 03:09:07PM -0400, Mark Burdick wrote: When message is finally delivered to jsmith, it *appears* to be from something like [EMAIL PROTECTED]. Yet, this information isn't inside the message itself. This sounds like a common MTA configuration issue. The mail comes in

Re: [AMaViS-user] bad headers with html_mail plugin and amavisd-new

2006-10-23 Thread Mark Martinec
Mike, Here is another bad-header message - hopefully in one piece and complete. This one looks fine (after unfolding the two wrapped header lines), and doesn't bring any complaints from my amavisd/MIME::Parser (version 5.420). Which version of MIME::Parser do you have (it is logged at amavisd

Re: [AMaViS-user] Error amavis-milter

2006-10-23 Thread Mark Martinec
Rocco, Amavisd-new goes in error after a few time that it starts.. Process amavisd or process amavis-milter? Looks like the later. After raising verbosity of amavis-milter I have seen the following entries in milter logs: Oct 23 18:59:51 av3 amavis-milter[4149]: amavis-milter:

[AMaViS-user] Perl::Net::Server requirements for Amavisd-new-2.4.3

2006-10-23 Thread john
Hello list, I'm preparing a specfile for amavisd-new 2.4.3 on SuSE and I not sure what the minimal requirement of Perl::Net::Server is for use with Amavisd-new-2.4.3. My current 2.3.3 setup is running happely with perl::Net::Server 0.88. Is this suffient for Amavisd-new 2.4.3 (Postfix / non

Re: [AMaViS-user] Perl::Net::Server requirements for Amavisd-new-2.4.3

2006-10-23 Thread Mark Martinec
John, I'm preparing a specfile for amavisd-new 2.4.3 on SuSE and I not sure what the minimal requirement of Perl::Net::Server is for use with Amavisd-new-2.4.3. My current 2.3.3 setup is running happely with perl::Net::Server 0.88. Is this suffient for Amavisd-new 2.4.3 (Postfix / non milter

Re: [AMaViS-user] Amavisd-new Spamassassin sa-updata interaction

2006-10-23 Thread Jo Rhett
On Oct 23, 2006, at 7:12 AM, Peter Huetmannsberger wrote: I run a daily cronjob as user amavis with the following command line: /usr/bin/sa-update --updatedir /usr/share/spamassassin/ --gpghomedir \ /var/amavis/ You have to make sure that amvais can write in /usr/share/ spamassassin, so

Re: [AMaViS-user] bad headers with html_mail plugin and amavisd-new

2006-10-23 Thread Jo Rhett
On Oct 23, 2006, at 9:54 AM, Mark Martinec wrote: Jo Rhett writes: By default the configuration says that x-msdownload is a bad header. Comment out that line from the configuration. Wrong answer. x-msdownload could be a banned component of a message, but is not a bad header. Bad headers

[AMaViS-user] 127.0.0.1 read timeout error

2006-10-23 Thread Tony Rodasta
We have been having an issue with our Postfix mail server running amavis-new with SpamAssassin and ClamAV, in that mail is either not delivered or seriously delayed (more than 3 days at times). I noticed the following error in my mail log: Oct 23 22:24:12 dencoit03 postfix/smtp[13567] : connect