Re: [toaster] simscan-1.3.1.shupp2: spam_hits NOT working ???

2007-06-22 Thread Bill Shupp
Bill Shupp wrote:
 Michael D Schleif wrote:
   
 We did NOT change spamassassin.

 Other than --enable-spam-hits=6 -- which nullifies
 --enable-spam-passthru=y , doesn't it? -- I do NOT find any clues in
 your config.

 What else ought I to investigate?
   
 

 I'm seeing the same problem.  I have not had time yet to track it down,
 but will report back when I do.
   

Ok, I simply had not configured it with spam-hits when I upgraded (look
for unimplemented flag spam_hits = ... when debugging).  I now have
simscan 1.3.1shupp2 compiled thusly:

./configure --enable-user=clamav \
--enable-spam-hits=10 \
--enable-clamav=y \
--enable-spam=y \
--enable-spam-passthru=y \
--enable-per-domain=y \
--enable-ripmime \
--enable-attach=y \
--enable-custom-smtp-reject=y \
--enable-received=y

Debug now shows this:

simscan:[15929]:SPAM REJECT (38.10/10.00):...

Which means 10 is overriding 5 in local.cf.  And a spam_hits=3 override
is working as expected:

simscan:[16535]:SPAM REJECT (23.70/3.00): ...

Regards,

Bill Shupp


Re: [toaster] simscan-1.3.1.shupp2: spam_hits NOT working ???

2007-06-21 Thread Michael D Schleif
Roman =

* Roman Bělonohý [EMAIL PROTECTED] [2007:06:20:21:10:58+0200] scribed:
 Do you have option which tells to include header about spam score to
 every message enabled?

Which option would that be?  Where would it be?  I did the following
exactly as specified at shupp.org:

./configure --enable-user=clamav \
--enable-clamav=y \
--enable-spam=y \
--enable-spam-passthru=y \
--enable-per-domain=y \
--enable-ripmime \
--enable-attach=y \
--enable-received=y


 Roman
 
 
 
 Michael D Schleif napsal(a):
  Last week, we upgraded the toaster, including simscan.
 
  Now, spam_hits=10.1 on a domain basis is NOT passing spamassassin tagged
  messages between 3.5 and 10 -- which several customers want, and WAS
  previously working.
 
  Example:
 
  
  platinumaire.net:clam=yes,spam=yes,spam_hits=10.1,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif
 
  What am I missing?


-- 
Best Regards,

mds
mds resource
877.596.8237
-
Dare to fix things before they break . . .
-
Our capacity for understanding is inversely proportional to how much
we think we know.  The more I know, the more I know I don't know . . .
--


signature.asc
Description: Digital signature


Re: [toaster] simscan-1.3.1.shupp2: spam_hits NOT working ???

2007-06-21 Thread Roman Bělonohý
My config:

./configure --enable-user=clamav --enable-clamav=y --enable-spam=y
--enable-spam-passthru=y --enable-per-domain=y --enable-ripmime
--enable-attach=y --enable-received=y
 --enable-custom-smtp-reject=y --enable-spam-hits=6
--enable-quarantinedir=/var/qmail/quarantine

Maybe you should have
report_safe 1
in /etc/mail/spamassassin/local.cf

?

Roman


Michael D Schleif napsal(a):
 Roman =

 * Roman Bělonohý [EMAIL PROTECTED] [2007:06:20:21:10:58+0200] scribed:
   
 Do you have option which tells to include header about spam score to
 every message enabled?
 

 Which option would that be?  Where would it be?  I did the following
 exactly as specified at shupp.org:

 ./configure --enable-user=clamav \
 --enable-clamav=y \
 --enable-spam=y \
 --enable-spam-passthru=y \
 --enable-per-domain=y \
 --enable-ripmime \
 --enable-attach=y \
 --enable-received=y


   
 Roman



 Michael D Schleif napsal(a):
 
 Last week, we upgraded the toaster, including simscan.

 Now, spam_hits=10.1 on a domain basis is NOT passing spamassassin tagged
 messages between 3.5 and 10 -- which several customers want, and WAS
 previously working.

 Example:

 
 platinumaire.net:clam=yes,spam=yes,spam_hits=10.1,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif

 What am I missing?
   


   


Re: [toaster] simscan-1.3.1.shupp2: spam_hits NOT working ???

2007-06-21 Thread Michael D Schleif
We did NOT change spamassassin.

Other than --enable-spam-hits=6 -- which nullifies
--enable-spam-passthru=y , doesn't it? -- I do NOT find any clues in
your config.

What else ought I to investigate?


* Roman Bělonohý [EMAIL PROTECTED] [2007:06:21:15:37:27+0200] scribed:
 My config:
 
 ./configure --enable-user=clamav --enable-clamav=y --enable-spam=y
 --enable-spam-passthru=y --enable-per-domain=y --enable-ripmime
 --enable-attach=y --enable-received=y
  --enable-custom-smtp-reject=y --enable-spam-hits=6
 --enable-quarantinedir=/var/qmail/quarantine
 
 Maybe you should have
 report_safe 1
 in /etc/mail/spamassassin/local.cf
 
 ?
 
 Roman
 
 
 Michael D Schleif napsal(a):
  Roman =
 
  * Roman Bělonohý [EMAIL PROTECTED] [2007:06:20:21:10:58+0200] scribed:

  Do you have option which tells to include header about spam score to
  every message enabled?
  
 
  Which option would that be?  Where would it be?  I did the following
  exactly as specified at shupp.org:
 
  ./configure --enable-user=clamav \
  --enable-clamav=y \
  --enable-spam=y \
  --enable-spam-passthru=y \
  --enable-per-domain=y \
  --enable-ripmime \
  --enable-attach=y \
  --enable-received=y
 
  Michael D Schleif napsal(a):
  
  Last week, we upgraded the toaster, including simscan.
 
  Now, spam_hits=10.1 on a domain basis is NOT passing spamassassin tagged
  messages between 3.5 and 10 -- which several customers want, and WAS
  previously working.
 
  Example:
 
  
  platinumaire.net:clam=yes,spam=yes,spam_hits=10.1,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif
 
  What am I missing?


-- 
Best Regards,

mds
mds resource
877.596.8237
-
Dare to fix things before they break . . .
-
Our capacity for understanding is inversely proportional to how much
we think we know.  The more I know, the more I know I don't know . . .
--


signature.asc
Description: Digital signature


Re: [toaster] simscan-1.3.1.shupp2: spam_hits NOT working ???

2007-06-21 Thread Bill Shupp
Michael D Schleif wrote:
 We did NOT change spamassassin.

 Other than --enable-spam-hits=6 -- which nullifies
 --enable-spam-passthru=y , doesn't it? -- I do NOT find any clues in
 your config.

 What else ought I to investigate?
   

I'm seeing the same problem.  I have not had time yet to track it down,
but will report back when I do.

Regards,

Bill


[toaster] simscan-1.3.1.shupp2: spam_hits NOT working ???

2007-06-20 Thread Michael D Schleif
Last week, we upgraded the toaster, including simscan.

Now, spam_hits=10.1 on a domain basis is NOT passing spamassassin tagged
messages between 3.5 and 10 -- which several customers want, and WAS
previously working.

Example:


platinumaire.net:clam=yes,spam=yes,spam_hits=10.1,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif

What am I missing?

-- 
Best Regards,

mds
mds resource
877.596.8237
-
Dare to fix things before they break . . .
-
Our capacity for understanding is inversely proportional to how much
we think we know.  The more I know, the more I know I don't know . . .
--


signature.asc
Description: Digital signature


Re: [toaster] simscan-1.3.1.shupp2: spam_hits NOT working ???

2007-06-20 Thread Roman Bělonohý
Do you have option which tells to include header about spam score to
every message enabled?

Roman



Michael D Schleif napsal(a):
 Last week, we upgraded the toaster, including simscan.

 Now, spam_hits=10.1 on a domain basis is NOT passing spamassassin tagged
 messages between 3.5 and 10 -- which several customers want, and WAS
 previously working.

 Example:

 
 platinumaire.net:clam=yes,spam=yes,spam_hits=10.1,attach=.vbs:.lnk:.scr:.wsh:.hta:.pif

 What am I missing?

   


Re: [toaster] Simscan 1.3.1.shupp2

2007-05-07 Thread Shane Chrisp
On Mon, 2007-05-07 at 13:58 +0800, Shane Chrisp wrote:

 Well I can confirm that raising the score to 10 as below fixed the
issue. It would appear that if SA marks the message as spam, then
simscan would bounce it regardless of the score in the simcontrol file.
Im using a score of 10 as none of the domains are using a score higher
than this, but you would probably be able to set the required_hits to
100 if you wanted to.

Spamd:
2007-05-07 21:08:06.336703500 [678] info: spamd: clean message
(8.6/10.0) for clamav:89 in 6.9 seconds, 18645 bytes.

simscan:
2007-05-07 21:08:06.448404500 simscan:[2406]:SPAM REJECT
(8.60/5.50):9.3654s:Any idea:...

Shane


 On Mon, 2007-05-07 at 13:25 +0800, Shane Chrisp wrote:
 
 In reply to my own message, I thought about the fact that I updated
 spamassassin to version 3.2.0 the other day so I added 
 
 required_hits 10.0
 
 to spamassassin's local.cf and now the spamd logs are showing that the
 tests are being compared against the score of 10. Im yet to see a
 message which is above one of the client domains scores and below the
 10.0 threshold so im not sure if it fixes the issue yet. I will let you
 know when it happens.
 
 Shane
 
  Bill, (and others)
  
  Ive compiled the 1.3.1.shupp2 from your site and im noticind that the
  spamd logs show all messages testing against a score of 5.0 regardless
  of what the score is assigned to the domain or user in the simcontrol
  file. 
  
  eg:
  2007-05-07 13:01:29.778242500 [1621] info: spamd: identified spam
  (5.7/5.0) for clamav:89 in 7.5 seconds, 15920 bytes.
  
  and the message was rejected, yet the domain in question has a score of
  6.8 in the simcontrol file.
  
  Has anyone else seen this and do you know of a fix for it at all?
  
  cheers
  Shane
  
 



Re: [toaster] Simscan 1.3.1.shupp2

2007-05-07 Thread Bill Shupp
Shane Chrisp wrote:
 On Mon, 2007-05-07 at 13:58 +0800, Shane Chrisp wrote:

  Well I can confirm that raising the score to 10 as below fixed the
 issue. It would appear that if SA marks the message as spam, then
 simscan would bounce it regardless of the score in the simcontrol file.
 Im using a score of 10 as none of the domains are using a score higher
 than this, but you would probably be able to set the required_hits to
 100 if you wanted to.

 Spamd:
 2007-05-07 21:08:06.336703500 [678] info: spamd: clean message
 (8.6/10.0) for clamav:89 in 6.9 seconds, 18645 bytes.

 simscan:
 2007-05-07 21:08:06.448404500 simscan:[2406]:SPAM REJECT
 (8.60/5.50):9.3654s:Any idea:...

 Shane

   

I thought spam_hits was to be used with spam_passthru.  So you would not
rely on rejecting spam via spam_assassin's threshold, but only spam_hits
in simcontrol.  So that the point of spam_hits is so you can allow spam
in under a certain threshold, say for going through an optional spam
folder, rather than SMTP rejection.  This is the only way that I've used
spam_hits in the past rather than just turning off passthru.

Regards,

Bill


Re: [toaster] Simscan 1.3.1.shupp2

2007-05-07 Thread Shane Chrisp
On Mon, 2007-05-07 at 11:51 -0700, Bill Shupp wrote:
 Shane Chrisp wrote:
  On Mon, 2007-05-07 at 13:58 +0800, Shane Chrisp wrote:
 
   Well I can confirm that raising the score to 10 as below fixed the
  issue. It would appear that if SA marks the message as spam, then
  simscan would bounce it regardless of the score in the simcontrol file.
  Im using a score of 10 as none of the domains are using a score higher
  than this, but you would probably be able to set the required_hits to
  100 if you wanted to.
 
  Spamd:
  2007-05-07 21:08:06.336703500 [678] info: spamd: clean message
  (8.6/10.0) for clamav:89 in 6.9 seconds, 18645 bytes.
 
  simscan:
  2007-05-07 21:08:06.448404500 simscan:[2406]:SPAM REJECT
  (8.60/5.50):9.3654s:Any idea:...
 
  Shane
 

 
 I thought spam_hits was to be used with spam_passthru.  So you would not
 rely on rejecting spam via spam_assassin's threshold, but only spam_hits
 in simcontrol.  So that the point of spam_hits is so you can allow spam
 in under a certain threshold, say for going through an optional spam
 folder, rather than SMTP rejection.  This is the only way that I've used
 spam_hits in the past rather than just turning off passthru.
 
 Regards,
 
 Bill

I tried using spam_passthru but had too many issues with maildrop that
in the end I just stuck with this setup and it worked well until this I
recompiled. 

My compile options for simscan are

./configure --enable-user=clamav --enable-clamav=y --enable-spam=y
--enable-spam-hits=10 --enable-per-domain=y
--enable-custom-smtp-reject=y --enable-attach=y --enable-ripmime
--enable-received=y --enable-spam-auth-user=y
--enable-spamassassin-path=/usr/local/bin/spamassassin
--enable-spamc=/usr/local/bin/spamc

According to the wiki if you want to use the options --enable-spam and 
 --enable-spam-hits=number you should not use --enable-spam-passthru.

Although reading the wiki it would appear that this is not happening as the 
description says:
quote:
 Perhaps the most popular method is a mix of the others. Which is to reject 
email that scores 
very high and to pass through other email to the user even if it is marked as 
spam. This seems 
to help with the false positive issue; email marked as spam but not really 
spam. Use these options:
 --enable-spam
 --enable-spam-hits=number
   where number is the spamassassin score at which you want to reject the email

Anyway this is working well for me now, so no need to change anything. I can 
live with simply 
telling SA that spam has an incredibly high score and letting simscan work it 
out from there.

cheers
Shane




[toaster] Simscan 1.3.1.shupp2

2007-05-06 Thread Shane Chrisp
Bill, (and others)

Ive compiled the 1.3.1.shupp2 from your site and im noticind that the
spamd logs show all messages testing against a score of 5.0 regardless
of what the score is assigned to the domain or user in the simcontrol
file. 

eg:
2007-05-07 13:01:29.778242500 [1621] info: spamd: identified spam
(5.7/5.0) for clamav:89 in 7.5 seconds, 15920 bytes.

and the message was rejected, yet the domain in question has a score of
6.8 in the simcontrol file.

Has anyone else seen this and do you know of a fix for it at all?

cheers
Shane