Re: Auto Training Filtering Gateway

2004-09-24 Thread Kelson
David Brodbeck wrote: Kelson wrote: Mail sent from to a few addresses that we never use for outgoing mail is rejected with an Invalid bounce explanation. (Don't do this with postmaster or abuse, or you'll probably end up listed on RFC-ignorant.) AFAIK you won't unless someone decides to report

ALL_TRUSTED

2004-09-24 Thread Ray
I see this is already in bugzilla. Should we just depreciate that rule for now? It is really screwing up my scores. Ray Dzek Network Operations Supervisor Specialized Bicycle Components PH: 408-782-5420 FX: 408-782-5421

Re: ALL_TRUSTED

2004-09-24 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ray writes: I see this is already in bugzilla. Should we just depreciate that rule for now? It is really screwing up my scores. As the bz bug says -- it's a symptom as much as anything else. so adding support for the Received header format it

Whitelist_from_rcvd and multiple DNS resolvers causing problems?

2004-09-24 Thread Joe Smith
*This message was transferred with a trial version of CommuniGate(tm) Pro* I'm using SpamAssassin 3.0 when I use whitelist_from_rcvd with domain names that reverse to only one possible domain it works just as it should. When the domain name is one that has multiple possibilities that it can

Re: Redhat / Fedora RPMs?

2004-09-24 Thread Jon
On Thu, September 23, 2004 10:47, jenni baier [EMAIL PROTECTED] said: Does anyone have 3.0 in RPM form? I can't find any links to RPM versions on the site... Thanks in advance... http://ftp.freshrpms.net/pub/fedora/linux/core/development/i386/Fedora/RPMS/spamassassin-3.0-10.i386.rpm or

Re[2]: spamassassin --lint fails on OS X using SA 3.0.0

2004-09-24 Thread Robert Menschel
Thursday, September 23, 2004, 2:01:58 PM, Theo responded: TVD On Thu, Sep 23, 2004 at 09:35:39AM -0400, Rob Kudyba wrote: /etc/mail/spamassassin root# /usr/bin/spamassassin --lint -D debug: config: read file //etc/mail/spamassassin/70_sare_html.cf debug: config: read file

SA-3.0.0 for FBSD Ports

2004-09-24 Thread Jack L. Stone
Does anyone know who is handling the update of the FBSD ports for the new SA-3 release? Or better yet, when it is scheduled? Thanks! Best regards, Jack L. Stone, Administrator Sage American http://www.sage-american.com [EMAIL PROTECTED]

Deep Recursion warning then out of memory error

2004-09-24 Thread David Highley
I do not think this is directly related to spamassassin, but googling has produced hits all over the map from perl, to Berkeley DB, and none seem to be recient. I noticed that spamassassin was not learning after I did an upgrade to perl 5.8.5. In running sa-learn with a -D I found that DB_File.pm

Re: [sa-list] SA-3.0.0 for FBSD Ports

2004-09-24 Thread Dan Mahoney, System Admin
On Thu, 23 Sep 2004, Jack L. Stone wrote: Does anyone know who is handling the update of the FBSD ports for the new SA-3 release? Or better yet, when it is scheduled? The ports tree is currently frozen in preparation for Freebsd 5.3-Release, so it may be a while. (I recently asked when bind

Re: SA 3.0 bugs ? no header rewriting

2004-09-24 Thread Thomas Richter
Hi Theo Van Dinter [EMAIL PROTECTED], you wrote on Thursday, 2004-09-23 17:00:08 -0400: NoMailAudit doesn't exist in 3.0. It looks like you're using old modules and/or old scripts. Nuke anything spamassassin related, then install 3.0.0. I renamed ~/.spamassassin/user_prefs and

FreeBSD port

2004-09-24 Thread Dan Mahoney, System Admin
I am working on creating a drop-in replacement for the FreeBSD port, although it is likely the committers will create their own in due time. -Dan -- I want to see how you see. -SK, 6/2/99, 4:30 AM Dan Mahoney Techie, Sysadmin, WebGeek Gushi on efnet/undernet IRC ICQ: 13735144

SA 3.0 TRAP

2004-09-24 Thread John Andersen
If you are thinking about installing Spamassasin 3.0 PAY ATTENTION: If you haven't been reading this list carefully you will have missed the fact that spamd has been moved from /usr/sbin/ to /usr/bin . However, the old version remains in /usr/sbin which is often where your scripts expect to

Couple of questions with SA 3.0

2004-09-24 Thread Chris Connell
Hi, I have installed spamassassin 3.0 on an email gateway, I noticed on a debug it threw out an error with the line check_mx_attempts 0 config: SpamAssassin failed to parse line, skipping: check_mx_attempts 0 Is this option disabled or removed in 3.0? Secondly, I have installed pyzor 0.4.0

Re: SA 3.0 TRAP

2004-09-24 Thread Anthony Edwards
On Fri, Sep 24, 2004 at 01:30:19AM -0800, John Andersen wrote: If you are thinking about installing Spamassasin 3.0 PAY ATTENTION: If you haven't been reading this list carefully you will have missed the fact that spamd has been moved from /usr/sbin/ to /usr/bin . However, the old

Re: SA 3.0 TRAP

2004-09-24 Thread Bob Apthorpe
On Fri, 24 Sep 2004 01:30:19 -0800 John Andersen [EMAIL PROTECTED] wrote: If you are thinking about installing Spamassasin 3.0 PAY ATTENTION: If you haven't been reading this list carefully you will have missed the fact that spamd has been moved from /usr/sbin/ to /usr/bin . However,

Re: Couple of questions with SA 3.0

2004-09-24 Thread Matt Kettler
At 07:41 AM 9/24/2004, Chris Connell wrote: Hi, I have installed spamassassin 3.0 on an email gateway, I noticed on a debug it threw out an error with the line check_mx_attempts 0 config: SpamAssassin failed to parse line, skipping: check_mx_attempts 0 Is this option disabled or removed in 3.0?

Re: [OT] I love tech people! First SARE Donation!

2004-09-24 Thread Jeff Chan
On Friday, September 24, 2004, 6:59:37 AM, Chris Santerre wrote: Just got an email from our Host of SARE. They got their first donation and wait for it..yes.it ended in .37 cents!! Wooot! LOL!!! A.C. made the donataion. You rock bro! Shows you paid attention ;) Our hosts

Re: [OT] I love tech people! First SARE Donation!

2004-09-24 Thread jdow
Gee, Chris, you're still sending to incubator. Spamassassin graduated! Congratulations on the donation. {^_-} - Original Message - From: Chris Santerre [EMAIL PROTECTED] Just got an email from our Host of SARE. They got their first donation and wait for it..yes.it ended

Windows, pop3proxy, Spamassassin v. 3.0.0

2004-09-24 Thread Paolo Zucchia
Hi! I'm trying to use pop3proxy with SA3, but I cannot see the x-spam headers. Here is some more info. I did a clean install of Activestate Perl 5.8.4.810 and SA3, following instructions at http://www.openhandhome.com/howtosa300.html . Spamassassin works: if I fire up a command prompt and

Spammers using my server

2004-09-24 Thread Jay Ehrhart
This morning I had over 7000 emails in my Linux server's outbound queue which I deleted. My firewall log shows over 20,000 emails went out with a SunTrust bank announce saying to login and enter your username and password. I do not see the emails coming in like I would in a relay. How can I stop

Re: Auto Training Filtering Gateway

2004-09-24 Thread Gary Buckmaster
I feel like I need to add, for the sake of others, that its a bad idea to allow outside access to these two email addresses. Internal users, or perhaps even just a few trusted individuals should be able to send to these two addresses, but not the general internet population. I'm guessing the

Re: Spammers using my server

2004-09-24 Thread Kevin Peuhkurinen
This question isn't really appropriate to a SpamAssassin forum. For what it's worth, it sounds like someone exploited an Apache vuln on your system and installed a mail generator. Given the severity of this (ie you are sending out thousands of email phishing frauds) you should probably take

Re: Spammers using my server

2004-09-24 Thread Ralf Hildebrandt
* Jay Ehrhart [EMAIL PROTECTED]: This morning I had over 7000 emails in my Linux server's outbound queue which I deleted. My firewall log shows over 20,000 emails went out with a SunTrust bank announce saying to login and enter your username and password. I do not see the emails coming in

Re: Spammers using my server

2004-09-24 Thread Matt Kettler
At 10:39 AM 9/24/2004, Jay Ehrhart wrote: This morning I had over 7000 emails in my Linux server's outbound queue which I deleted. My firewall log shows over 20,000 emails went out with a SunTrust bank announce saying to login and enter your username and password. I do not see the emails coming

reporting errors

2004-09-24 Thread David Gibbs
I have a number of email addresses that get only spam, so I've set them up as spamtraps. They are simply sendmail aliases that send to | /usr/bin/spamassassin -r. When I manually run the spamassassin -r command, however, I get the following... $cat sample-spam.txt | spamassassin -r Pyzor -

Re: Whitelist_from_rcvd and multiple DNS resolvers causing problems?

2004-09-24 Thread Kris Deugau
Joe Smith wrote: I'm using SpamAssassin 3.0 when I use whitelist_from_rcvd with domain names that reverse to only one possible domain it works just as it should. When the domain name is one that has multiple possibilities that it can reverse dns to then it doesn't work unless it happens to

Re: Whitelist_from_rcvd and multiple DNS resolvers causing problems?

2004-09-24 Thread Dan Mahoney, System Admin
On Thu, 23 Sep 2004, Joe Smith wrote: *This message was transferred with a trial version of CommuniGate(tm) Pro* I'm using SpamAssassin 3.0 when I use whitelist_from_rcvd with domain names that reverse to only one possible domain it works just as it should. When the domain name is one that has

Re: Speakeasy just implemented SPF records - badly

2004-09-24 Thread Kenneth Porter
--On Friday, September 24, 2004 11:33 AM -0400 Steve Prior [EMAIL PROTECTED] wrote: In case anyone else is going to run into this, sometime yesterday speakeasy.net implemented default SPF records for all of their DNS hosting customers. I don't see it for the two domains they host for me. I did a

Re: Whitelist_from_rcvd and multiple DNS resolvers causing problems?

2004-09-24 Thread Bob Apthorpe
On Fri, 24 Sep 2004 11:36:27 -0400 (EDT) Dan Mahoney, System Admin [EMAIL PROTECTED] wrote: [snip] The person running 1.2.3.4 has NO CLUE what they are doing. 1.2.3.4 should RDNS to whatever the hostname value of that machine is. This should be the same as the HELO the machine uses when

clear_headers does not remove X-Spam-Report

2004-09-24 Thread Matt Garretson
With SA 3.0, using clear_headers in local.cf does not prevent the X-Spam-Report: header from being inserted into spam messages. Is this a bug or a feature? Below is my local.cf. ### +++ required_score 8.0 clear_headers report_safe 0 use_dcc 0 use_pyzor 0 use_razor2 0 dns_available yes

Re: Spammers using my server

2004-09-24 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jay Ehrhart writes: The non-deliverable reports are coming from my Linux apache user. Non-deliverables usually come from root. I am running apache on the server with forms. The forms software is the latest version and patches. Can anybody

Re: SA 3.0 upgrade bug and fix (spamd reporting to log, but not tagging messages)

2004-09-24 Thread Anthony Edwards
On Fri, Sep 24, 2004 at 03:04:58AM +0100, Anthony Edwards wrote: I removed all SpamAssassin files earlier this evening and re-installed using cpan. With hindsight, I believe I could have simply done what you have suggested above. I run a SuSE 8.2 system, and persuading manual configuration

spamd dying?

2004-09-24 Thread Will Yardley
Has anyone else seen a problem w/ spamd dying sometimes (after working for a while)? I have been seeing this in the 3.0 rcs. I'm about to upgrade to 3.0 release, but I'm wondering if anyone else has seen this. Much more detailed information in bug #3667 (bugzilla.spamassassin.org)

Re: spamd dying?

2004-09-24 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Will Yardley writes: Has anyone else seen a problem w/ spamd dying sometimes (after working for a while)? I have been seeing this in the 3.0 rcs. I'm about to upgrade to 3.0 release, but I'm wondering if anyone else has seen this. Much more

Looking for Advice - setting up a SA/MD gateway server

2004-09-24 Thread Scot Desort
We run a bunch of Win32 mail servers on our network. These servers already have spam and virus filtering for local email delivery. However, when a mailbox has it's mail forwarded off-net, the mail is not filtered. As such, when a local users forwards their mailbox to AOL, they then read their

Re: Whitelist_from_rcvd and multiple DNS resolvers causingproblems?

2004-09-24 Thread Kris Deugau
On Fri, 24 Sep 2004 11:36:27 -0400 (EDT) Dan Mahoney, System Admin The person running 1.2.3.4 has NO CLUE what they are doing. 1.2.3.4 should RDNS to whatever the hostname value of that machine is. This should be the same as the HELO the machine uses when talking out to the outside

RE: Looking for Advice - setting up a SA/MD gateway server

2004-09-24 Thread Greg Deputy
I just started using a postfix/mailscanner/SA setup to filter outbound and inbound mail. Currently scanning about 35k messages per day. I'm a long time windows user / short time linux user, but had no problem getting it setup and running. I'm happy with the results, that's for sure.

Re: SA 3.0 TRAP

2004-09-24 Thread Kris Deugau
Justin Mason wrote: Yeah -- this is almost definitely something to do with SuSE's packaging of either perl (if it uses the defaults from ExtUtils::MakeMaker) or SpamAssassin itself (if its rpm spec moves the file around as Debian does). Actually, for any real package manager (ie, rpm or

Re: SA 3.0 TRAP

2004-09-24 Thread John Andersen
On Friday 24 September 2004 08:52 am, Justin Mason wrote: Bob Apthorpe writes: On Fri, 24 Sep 2004 01:30:19 -0800 John Andersen [EMAIL PROTECTED] wrote: If you are thinking about installing Spamassasin 3.0 PAY ATTENTION: If you haven't been reading this list carefully you will

Re: SA 3.0 TRAP

2004-09-24 Thread Anthony Edwards
On Fri, Sep 24, 2004 at 02:37:31PM -0400, Kris Deugau wrote: Justin Mason wrote: Yeah -- this is almost definitely something to do with SuSE's packaging of either perl (if it uses the defaults from ExtUtils::MakeMaker) or SpamAssassin itself (if its rpm spec moves the file around as

Problem with Bayes and AutoLearning

2004-09-24 Thread Thomas Bolioli
I am having a problem with 2.63 not using bayes. (NB: setup is using individual data and triggering using .4ward, procmail and postfix with no individual .sa and .procmail files) I have trained each of three accounts with over 1000 ham and some 48K spam messages. SA is working and tagging spam

Re: Problem with Bayes and AutoLearning

2004-09-24 Thread Thomas Bolioli
I do not believe that is an issue. It only puts the bayes databases at ~/.spammer_toks and ~/.spammer_seen. sa-learn has not had a problem loading the databases. They have grown everytime I have used it. I can't see why spamd would have a problem with it. Tom Matt Kettler wrote: At 03:40 PM

Re: auto learn in 3.0

2004-09-24 Thread John Andersen
On Friday 24 September 2004 03:52 am, Alex S Moore wrote: Since upgrading to 3.0, which is the greatest BTW, I have not had any spam auto-learned. The keywords are correct and running spamassassin with --lint reveals all is ok. Is anyone else seeing this? Alex It seems to be working here

Re: Problem with Bayes and AutoLearning

2004-09-24 Thread Matt Kettler
At 04:10 PM 9/24/2004, Thomas Bolioli wrote: I do not believe that is an issue. It only puts the bayes databases at ~/.spammer_toks and ~/.spammer_seen. sa-learn has not had a problem loading the databases. They have grown everytime I have used it. I can't see why spamd would have a problem

Re: Spammers using my server

2004-09-24 Thread Lucas Albers
As a another good step, just SA scan ALL incoming and outgoing mail. Run a vulnerability scan against your server, nessus or sara against your machine to find what is being exploited. -- Luke Computer Science System Administrator Security Administrator,College of Engineering Montana State

Re: Problem with Bayes and AutoLearning

2004-09-24 Thread Thomas Bolioli
I changed the path just in case. It was that way as a mistake anyhow. Here is the output of lint. (it is exactly the same as with the other paths so I am sure that is not the issue.) Note that it works there. Although not when run through procmail. I think your idea about users is on to

Re: auto learn in 3.0

2004-09-24 Thread Alex S Moore
On Fri, 2004-09-24 at 15:17, John Andersen wrote: It seems to be working here Alex: ... Are you sure it was started with autolearn support turned on? (I think it is the default)... Yes, it is turned on. Normally, learning from my

Re: pine folder internal data and sa-learn

2004-09-24 Thread jdow
From: Gregory Zornetzer [EMAIL PROTECTED] Hi all, I recently installed spamcop 3.0.0 onto my unix account on an SGI IRIX 6.5 box. I'm using perl 5.8.5, and I generally read my email with pine, though sometimes I'll remotely view it using Evolution through the machine's IMAP server. The