Re: [Razor-users] connect1: nextserver: No Razor servers available at this time

2006-12-12 Thread Ger Apeldoorn 
Hi,

I've solved the problem. Although I was convinced to the bone that the servers 
in the DMZ had full internet acces, some rules applied. 

After the kolab update, the ipaddress of the Razor servers was changed so the 
agent did not have a connection. However, I could register with the razor 
servers. (Probably another port)

Many thanks,

Ger.


Op dinsdag 12 december 2006 09:39, schreef Ger Apeldoorn:
 Hi,

 I'm having troubles connecting to the cloudmark servers with Razor2.

 Does anyone know what this problem might be?

 I've followed this guide: http://wiki.kolab.org/index.php/Razor2

 This is the output from the testprogram:
 [EMAIL PROTECTED]
 razor-check -d -home=/kolab/var/amavisd/.razor
 -config=/kolab/var/amavisd/.razor/razor-agent.confEOF

  asldjf
  ksa
  EOF

  Razor-Log: read_file: 16 items read
 from /kolab/var/amavisd/.razor/razor-agent.conf
 Dec 08 12:53:00.103537 check[27664]: [ 2] [bootup] Logging initiated
 LogDebugLevel=9 to stdout
 Dec 08 12:53:00.103948 check[27664]: [ 5] computed
 razorhome=/kolab/var/amavisd/.razor,
 conf=/kolab/var/amavisd/.razor/razor-agent.conf,
 ident=/kolab/var/amavisd/.razor/[EMAIL PROTECTED]
 Dec 08 12:53:00.104028 check[27664]: [ 2]  Razor-Agents v2.82 starting
 razor-check -d -home=/kolab/var/amavisd/.razor
 -config=/kolab/var/amavisd/.razor/razor-agent.conf Dec 08 12:53:00.106253
 check[27664]: [ 9] uname -a: Linux sputnik.argoss.nl 2.6.9-34.ELsmp #1 SMP
 Fri Feb 24 16:54:53 EST 2006 i686 i686 i386 GNU/Linux Dec 08
 12:53:00.106565 check[27664]: [ 8] reading straight RFC822 mail from
 stdin
 Dec 08 12:53:00.106727 check[27664]: [ 6] read 1 mail
 Dec 08 12:53:00.106945 check[27664]: [ 8] Client supported_engines: 4 8
 Dec 08 12:53:00.107259 check[27664]: [ 8]  prep_mail done: mail 1
 headers=37, mime0=40
 Dec 08 12:53:00.107435 check[27664]: [ 6] skipping whitelist file
 (empty?): /kolab/var/amavisd/.razor/razor-whitelist
 Dec 08 12:53:00.107688 check[27664]: [ 5] read_file: 1 items read
 from /kolab/var/amavisd/.razor/servers.discovery.lst
 Dec 08 12:53:00.107924 check[27664]: [ 5] read_file: 2 items read
 from /kolab/var/amavisd/.razor/servers.nomination.lst
 Dec 08 12:53:00.108114 check[27664]: [ 5] read_file: 1 items read
 from /kolab/var/amavisd/.razor/servers.catalogue.lst
 Dec 08 12:53:00.108404 check[27664]: [ 9] Assigning defaults to
 folly.cloudmark.com
 Dec 08 12:53:00.108539 check[27664]: [ 9] Assigning defaults to
 joy.cloudmark.com
 Dec 08 12:53:00.108670 check[27664]: [ 9] Assigning defaults to
 c101.cloudmark.com
 Dec 08 12:53:00.109244 check[27664]: [ 5] read_file: 18 items read
 from /kolab/var/amavisd/.razor/server.joy.cloudmark.com.conf
 Dec 08 12:53:00.109629 check[27664]: [ 5] read_file: 18 items read
 from /kolab/var/amavisd/.razor/server.joy.cloudmark.com.conf
 Dec 08 12:53:00.110002 check[27664]: [ 5] read_file: 17 items read
 from /kolab/var/amavisd/.razor/server.folly.cloudmark.com.conf
 Dec 08 12:53:00.110341 check[27664]: [ 5] read_file: 17 items read
 from /kolab/var/amavisd/.razor/server.folly.cloudmark.com.conf
 Dec 08 12:53:00.110516 check[27664]: [ 5] 166756 seconds before closest
 server discovery
 Dec 08 12:53:00.110663 check[27664]: [ 6] c101.cloudmark.com is a
 Unknown-Type:  Server srl -1; computed min_cf=0, Server se: C8
 Dec 08 12:53:00.110806 check[27664]: [ 8] Computed supported_engines: 4 8
 Dec 08 12:53:00.110948 check[27664]: [ 8] Using next closest server
 c101.cloudmark.com:2703, cached info srl -1
 Dec 08 12:53:00.111049 check[27664]: [ 8] mail 1 has no subject
 Dec 08 12:53:00.111297 check[27664]: [ 6] preproc: mail 1.0 went from 40
 bytes to 3
 Dec 08 12:53:00.111392 check[27664]: [ 6] computing sigs for mail 1.0, len
 3 Dec 08 12:53:00.112830 check[27664]: [ 6] Engine (8) didn't produce a
 signature for mail 1.0
 Dec 08 12:53:00.113009 check[27664]: [ 5] 168103 seconds before closest
 server discovery
 Dec 08 12:53:00.113151 check[27664]: [ 5] 155326 seconds before closest
 server discovery
 Dec 08 12:53:00.113220 check[27664]: [ 5] forcing discovery
 Dec 08 12:53:00.113324 check[27664]: [ 8] already have 1 discovery servers
 Dec 08 12:53:00.113408 check[27664]: [ 8] Checking with Razor Discovery
 Server discovery.spamnet.com
 Dec 08 12:53:00.113532 check[27664]: [ 5] Connecting to
 discovery.spamnet.com ...
 Dec 08 12:53:00.476782 check[27664]: [ 8] Connection established
 Dec 08 12:53:00.476912 check[27664]: [ 4] discovery.spamnet.com  35
 server greeting: sn=Dsrl=519a=la=cgep4=7542-10
 Dec 08 12:53:00.477079 check[27664]: [ 4] discovery.spamnet.com  12
 Dec 08 12:53:00.477149 check[27664]: [ 6] a=gpm=csl
 Dec 08 12:53:00.654663 check[27664]: [ 4] discovery.spamnet.com  31
 Dec 08 12:53:00.654732 check[27664]: [ 6] response to sent.1
 -csl=?
 c101.cloudmark.com
 .
 Dec 08 12:53:00.654912 check[27664]: [ 8] Discovery Server
 discovery.spamnet.com replying with csl=c101.cloudmark.com
 Dec 08 12:53:00.655038 check[27664]: [ 4] discovery.spamnet.com  12
 Dec 08 12:53:00.655104 check[27664]: [ 6]

Re: [Razor-users] Reporting randomly created image-spam

2006-12-12 Thread Furnish, Trever G 
Lucky you.  I get thousands a day, many of which still get through --
the only SA rules that typically hit are the DNSBL rules.

And in my case Matt's statement are accurate -- the entire image is
modified.  Before they started doing that, they also were randomizing
the image dimensions, which I *think* are stored near the start of the
file.

:-(

 -Original Message-
 From: [EMAIL PROTECTED] 
 [mailto:[EMAIL PROTECTED] On Behalf 
 Of John Andersen
 Sent: Monday, December 11, 2006 8:08 PM
 To: razor-users@lists.sourceforge.net
 Subject: Re: [Razor-users] Reporting randomly created image-spam
 
 On Monday 11 December 2006 09:34, Matt Kettler wrote:
  've repeatedly had multiple system accounts receive the 
 same message 
  at more-or-less the same time, but with a separate 
 connection, each is 
  really completely different. Take a close look at your 
 image spam sometime.
 
 What ever you say.  The ones I've seen just had their bottem 
 edge tampered with.
 
 Spamassassin is so efficient at weeding these out I hardly 
 get any of them anymore.  Less than 2 a week.
 
 --
 _
 John Andersen
 

-
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT  business topics through brief surveys - and earn cash
http://www.techsay.com/default.php?page=join.phpp=sourceforgeCID=DEVDEV
___
Razor-users mailing list
Razor-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/razor-users