Re: consensus on SPF

2004-12-16 Thread Codger
I like to think of SPF as my 'license' to use my domain or the domains that I host to send email as though it is from one of my users. If I have SPF records, I WANT other mail servers to respect that it is my wish that ONLY MY authenticated users send email marked as such with my permission.

Re: consensus on SPF

2004-12-16 Thread Codger
Sorry, but this is not true. Eudora uses also 465. On Dec 15, 2004, at 4:58 PM, Morris Jones wrote: David B Funk wrote: Eudora will not let you set any port other than 25 for outgoing SMTP. Hopefully these will be fixed soon. I just guessed at the configuration for my wife's Mac running Eudora,

Re: sa-stats error

2004-12-16 Thread Chris
On Wednesday 15 December 2004 02:53 am, Ronan wrote: Ronan wrote: I actually never knew about this until i was having a hoke around... anyway cant get it to run.. ./sa-stats.pl -l /var/log/syslog -H -T 5 -u Error in option spec: top|T:25 Error in option spec: SCALAR(0x4c9a68)

Re: Bypassing spam checking when using Postfix

2004-12-16 Thread Daryl C. W. O'Shea
Gareth wrote: I use Suse Openexchange as our mail server and I have amavis installed for virus scanning and spamassassin. I have a problem where when people send mail using SMTP Auth spamassassin penalises them because they are sending from a dynamic IP address etc... Currently I am having to

Re: A change in tact

2004-12-16 Thread Brett Cove
Chris Santerre wrote: [snip] I've been given a small corpa of this kind of spam. I'm trugging thru it slowly. But I think I might be able to come up with a SA rule for it. Not sure yet. I've noticed much of the spam containing geocities urls contain a query string at the end. Example:

cannot write and parse errors

2004-12-16 Thread David Newman
Greetings. I'm seeing two problems with SA 3.0.1_2 on a FreeBSD 5.2.1 system running Postfix 2.1.5,1 and procmail 3.22_5. All are installed via ports. Problem 1: The mail log has lots of entries like this: Dec 15 00:42:53 mailman spamd[2224]: Cannot write to /nonexistent/.spamassassin/user_

RE: SA 3.01

2004-12-16 Thread Gary W. Smith
Tweak it down to something like -m 6 and see what happens. There was a thread about this about 6 weeks ago. Search for SA 3.01 memory in the archives. After tweaking it, watch the processes to see if any grow. Tweak it up from there. My spamd processes take about 45mb each. For you that

SOLVED -- Re: Error Message -- uninitialized value

2004-12-16 Thread Dan Mahoney, System Admin
On Wed, 15 Dec 2004, Dan Mahoney, System Admin wrote: Well, a quick perl script solved it for me: #!/usr/bin/perl use Mail::SPF::Query; if ($Mail::SPF::Query::VERSION 1.996) { print version is lower; } elsif ($Mail::SPF::Query::VERSION 1.996) { print version $Mail::SPF::Query::VERSION is higher;

Re: Bypassing spam checking when using Postfix

2004-12-16 Thread Gareth
On Thu, 2004-12-16 at 02:48, Daryl C. W. O'Shea wrote: Gareth wrote: I use Suse Openexchange as our mail server and I have amavis installed for virus scanning and spamassassin. I have a problem where when people send mail using SMTP Auth spamassassin penalises them because they are

Re: Custom rules in SA 3.x

2004-12-16 Thread Loren Wilton
I now use SA 2.64 with lots of custom rules, most of them from SARE. I've read in a post here (can't find the posting) that in SA 3.x some of the custom rules are included. Whcih rules are included and which should I continue using i SA 3.x? The simple answer is look at the SARE rules page

Re: SA 3.01

2004-12-16 Thread Loren Wilton
I suspect that its my setup the system passes any message it recieves through and SA and passes it onto the next mailserver. I think the way im running child processes is part of the problem, I'm running 50 and having to get the system to restart each child after processes 2 messages to keep

Re: cannot write and parse errors

2004-12-16 Thread Loren Wilton
interested in particular in four parse errors: debug: config: SpamAssassin failed to parse line, skipping: rewrite_subject 1 debug: config: SpamAssassin failed to parse line, skipping: subject_tag $ *SPAM* debug: config: SpamAssassin failed to parse line, skipping: use_terse_report

Re: A change in tact

2004-12-16 Thread Rakesh
Brett Cove wrote: I've noticed much of the spam containing geocities urls contain a query string at the end. Example: www.geocities.com/giovanni_campos_42/?s=lexim=ZVQcj.RhhQfY,hVX Is this something that occurs often in 'non-spam' geocities links? I have even recieved spam without the

can any body help me understand this

2004-12-16 Thread Rakesh
These days my bayesian engine is giving me a lots of false positive, although i keep on having a periodic expiry of my bayes database, still my bayes_seen is growing large (about which i read in Matt's post in th forum some time back). However now i am trying to investigate whether my Bayes is

spamd with vpopmail config

2004-12-16 Thread Andryan
Hello list, I noticed there's a possible bug in SA when running with vpopmail config (-v flag). I did spend some time googling but couldn't find any solution (yet). My spamd runs with flags -d -v -u vpopmail, when invoking spamc in maildrop, I use spamc -u [EMAIL PROTECTED]. If the email address

Re: sa-stats error

2004-12-16 Thread Stephan Paukner
On Wed, December 15, 2004 9:53, Ronan said: I actually never knew about this until i was having a hoke around... anyway cant get it to run.. ./sa-stats.pl -l /var/log/syslog -H -T 5 -u Error in option spec: top|T:25 Error in option spec: SCALAR(0x4c9a68) bash-2.03$ i presume this is to do

Re: bayes_seen file size becoming large : 160 MB

2004-12-16 Thread BCC
On Wed, 2004-12-15 at 20:46, Matt Kettler wrote: At 02:05 PM 12/15/2004, BCC wrote: The file size of the bayes database on a server is becoming large : bayes_seen is 160 MB and bayes_toks is 8 MB. This mail server processes around 3 mails a day, as a relay. snip Is it normal to have

Re: Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Kenneth Porter
--On Wednesday, December 15, 2004 4:27 PM -0600 Chris Barnes [EMAIL PROTECTED] wrote: warning: Installed (but unpackaged) file(s) found: /usr/lib/perl5/5.8.3/i386-linux-thread-multi/perllocal.pod I'm guessing the make install step in the RPM spec file did this. It shouldn't touch the live

Re: Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Kenneth Porter
--On Wednesday, December 15, 2004 4:27 PM -0600 Chris Barnes [EMAIL PROTECTED] wrote: No dice - downloaded and when I ran the: rpmbuild -tb Mail-SpamAssassin-3.0.1.tar.gz I got: warning: Installed (but unpackaged) file(s) found: /usr/lib/perl5/5.8.3/i386-linux-thread-multi/perllocal.pod

Re: consensus on SPF

2004-12-16 Thread Christopher X. Candreva
On Wed, 15 Dec 2004, David B Funk wrote: Total agreement with this, but try to actually deploy it, client issues galore. Eudora will not let you set any port other than 25 for outgoing SMTP. Technically you can, but effectively you are right since they make you jump through hoops to do so.

sa-learn and out of memory error

2004-12-16 Thread Rich
I have just upgraded to 3.01 from 2.53 (on an SGI IRIX machine) and after getting all of that completed nicely I decided to retrain the bayesian engine, so I first gave sa-learn about a thousand spam messages and the only complaint from sa-learn was about 10 lines of: Parsing of undecoded UTF-8

Re: cannot write and parse errors

2004-12-16 Thread David Newman
On Thu, 16 Dec 2004, Loren Wilton wrote: interested in particular in four parse errors: debug: config: SpamAssassin failed to parse line, skipping: rewrite_subject 1 debug: config: SpamAssassin failed to parse line, skipping: subject_tag $ *SPAM* debug: config: SpamAssassin failed to parse

Re: Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Chris Barnes
Kenneth Porter [EMAIL PROTECTED] wrote: --On Wednesday, December 15, 2004 4:27 PM -0600 Chris Barnes [EMAIL PROTECTED] wrote: warning: Installed (but unpackaged) file(s) found: /usr/lib/perl5/5.8.3/i386-linux-thread-multi/perllocal.pod I'm guessing the make install step in the RPM spec

Re: Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Theo Van Dinter
On Thu, Dec 16, 2004 at 08:49:01AM -0600, Chris Barnes wrote: warning: Installed (but unpackaged) file(s) found: /usr/lib/perl5/5.8.3/i386-linux-thread-multi/perllocal.pod I'm guessing the make install step in the RPM spec file did this. It shouldn't touch the live system, though, so

Tim Jackson -- bogus virus warnings --lint problem

2004-12-16 Thread Richard Ozer
-warnings.cf /etc/mail/spamassassin/RulesDuJour/bogus-virus-warnings.cf.2; mv -f /etc/mail/spamassassin/RulesDuJour/bogus-virus-warnings.cf.20041216-0300 /etc/mail/spamassassin/bogus-virus-warnings.cf; Lint output: warning: description for VIRUS_WARNING428 is over 50 chars lint: 1 issues detected. please

Re: can any body help me understand this

2004-12-16 Thread Robert Menschel
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello Rakesh, Thursday, December 16, 2004, 2:59:52 AM, you wrote: R These days my bayesian engine is giving me a lots of false R positive, ... R However now i am trying to investigate whether my Bayes is really R poisoned or not. ... R Also if my

Re: can any body help me understand this

2004-12-16 Thread Matt Kettler
At 04:29 PM 12/16/2004 +0530, Rakesh wrote: did a sa-learn --dump data and got an output of the following kind. Can any one please help me understand the output. The dump output is pretty simple.. The token format gets a bit complicated, but even that isn't too bad. As for the dump output..

RE: can any body help me understand this

2004-12-16 Thread Kang, Joseph S.
As for the dump output.. 0.000 0108 1103190407 N:H*i:sk:NNfNNNc [snipped for brevity] The fourth is the token itself. SA uses some prefix characters for encoding things, but without any prefix, a token is a word in the body of the message. I think you meant the FIFTH

Re: cannot write and parse errors

2004-12-16 Thread Matt Kettler
At 08:50 PM 12/15/2004 -0800, David Newman wrote: Dec 15 00:42:53 mailman spamd[2224]: Cannot write to /nonexistent/.spamassassin/user_ prefs: No such file or directory There's no such user as nonexistent on this system. Where do you get the idea there might be a user nonexistent? That's the

Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Ben Hanson
When SA 3.0 became available, I upgraded from the Redhat RPM's, and had various problems with versions and functionality. I removed the RPM and upgraded via CPAN with absolutely no issues. Ben Hanson I.S. MGR Transprint USA Inc.

Re: cannot write and parse errors

2004-12-16 Thread Matt Kettler
At 06:17 AM 12/16/2004 -0800, David Newman wrote: The docs cover some of these but not all. Neither the USAGE nor the UPGRADE files describe what to use in place of use_terse_report in 3.0. Yes, it's not in there because it's been dead for a long time. It wasn't something that was dropped in

Re: cannot write and parse errors

2004-12-16 Thread Richard Ozer
It looks like your port had a 2.x local.cf file. To fix this, comment out rewrite_subject, comment out subject_tag, comment out use_terse_report, and change auto_learn to bayes_auto_learn Also be sure you have something like the following section... (replace amavis with whatever you prefer or

some messages just arent scanned

2004-12-16 Thread Ronan McGlue
Hi I have a situation where some of the time some messages get through without being scanned at all, and some other get through but without specific headers... eg X-Spam-Score-Int: 174 X-Spam-Report: Start SpamAssassin results ... but not X-Spam-Score: + (17.4)or whatever

Re: Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Kenneth Porter
--On Thursday, December 16, 2004 10:16 AM -0500 Theo Van Dinter [EMAIL PROTECTED] wrote: I don't think there's a way to avoid the perllocal.pod bit (if there is, somebody tell me!) The real lesson here is: don't build RPMs as root if you want to make sure nothing on the system will be modified

Re: consensus on SPF

2004-12-16 Thread Tony Finch
On Wed, 15 Dec 2004, David B Funk wrote: On Wed, 15 Dec 2004, Christopher X. Candreva wrote: Depoly SPF, use the submission port to talk to your own mail server, problem solved. Although that allows you to support roaming users, SPF still breaks mail forwarding. It's usable as a

Re: Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Chris Barnes
Chris Barnes [EMAIL PROTECTED] wrote: So how do I go about resurrecting SA so that it runs now? Just for grins, I downloaded the CPAN version (which shows to be 3.0.2) and used the instructions there. The install went off without any error messages, but I get the same results as before.

Re: Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Kenneth Porter
--On Thursday, December 16, 2004 11:19 AM -0600 Chris Barnes [EMAIL PROTECTED] wrote: Just for grins, I downloaded the CPAN version (which shows to be 3.0.2) and used the instructions there. The install went off without any error messages, but I get the same results as before. IOW, sa-learn

Re: Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Chris Barnes
Kenneth Porter [EMAIL PROTECTED] wrote: IOW, sa-learn still fails? What about SA itself? Does it work against the sample messages? Nope. [EMAIL PROTECTED] Mail-SpamAssassin-3.0.2]# spamassassin sample-nonspam.txt Created user preferences file: /root/.spamassassin/user_prefs Use of

SA does bayes every 1 of 2 mails only

2004-12-16 Thread Maarten de Boer
Hello, (I repost this message because I have not been able to solve the problem, and it is becoming very noticable that more SPAM is entering our Inboxes...) I have been running SA succesfully for quite some time now, but lately I am experiencing a strange problem: only every second mail that is

Re: can any body help me understand this

2004-12-16 Thread snowjack
Kang, Joseph S. wrote: As for the dump output.. 0.000 0108 1103190407 N:H*i:sk:NNfNNNc [snipped for brevity] The fourth is the token itself. SA uses some prefix characters for encoding things, but without any prefix, a token is a word in the body of the message. I think you

Re: Yum update of SA from 2.63 to 3.0x

2004-12-16 Thread Michael Parker
On Thu, Dec 16, 2004 at 11:42:29AM -0600, Chris Barnes wrote: Kenneth Porter [EMAIL PROTECTED] wrote: IOW, sa-learn still fails? What about SA itself? Does it work against the sample messages? Nope. [EMAIL PROTECTED] Mail-SpamAssassin-3.0.2]# spamassassin sample-nonspam.txt Created

SpamAssassin 3.0.2 is released!

2004-12-16 Thread Michael Parker
SpamAssassin 3.0.2 is released! 3.0.2 contains some important bugfixes, and is recommended. Highlights: - Detect legitimate SMTP AUTH submission, to avoid false positives on Dynablock-style rules - Fix URIDNSBL plugin to honor uridnsbl_max_domains config option - Various documentation

Re: Bypassing spam checking when using Postfix

2004-12-16 Thread Daryl C. W. O'Shea
Gareth wrote: On Thu, 2004-12-16 at 02:48, Daryl C. W. O'Shea wrote: If Postfix can be made to add, or already does add, RFC 3848 header 'with' tokens, new versions of SA (3.0.2 and on) will fix your problem. Until then you can use this patch:

Re: Yum update of SA from 2.63 to 3.0x (SOLVED)

2004-12-16 Thread Chris Barnes
I went ahead and filed a bugzilla report and there Theo made the comment: At first glance, it looks like you have a bad configuration. This was probably and off-handed remark, but for me it provided a good clue. I renamed my old /etc/mail/spamassassin/local.cf to .old and copied the

spamd not respawning on FreeBSD/Alpha

2004-12-16 Thread David Brodbeck
This is kind of an odd problem and I'm not sure what to do. For quite a while I had apparent Perl signal-handling problems -- in particular, I couldn't kill spamd, I had to use kill -9. Recently I recompiled Perl in an effort to fix this. I'm using the same Perl version (5.6.1), however I

RE: can any body help me understand this

2004-12-16 Thread Chris Santerre
-Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Thursday, December 16, 2004 10:33 AM To: Rakesh; users@spamassassin.apache.org Subject: Re: can any body help me understand this At 04:29 PM 12/16/2004 +0530, Rakesh wrote: did a sa-learn --dump data and got an

Re: SA does bayes every 1 of 2 mails only

2004-12-16 Thread Morris Jones
Maarten de Boer wrote: And what is very strange as well is that is says both: debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB 200 Maarten, it appears that you trained your bayes database with a corpus of email and told it that it was all ham, that it, not spam. Assuming you

Re: SA does bayes every 1 of 2 mails only

2004-12-16 Thread Morris Jones
Forgive me, I completely misread your post. You're right, you should be getting bayes tests. I wonder if it's picking up the wrong bayes database ... Mojo Morris Jones wrote: [ the wrong answer ] -- Morris Jones Monrovia, CA http://www.whiteoaks.com Old Town Astronomers:

RE: can any body help me understand this

2004-12-16 Thread Matt Kettler
At 02:55 PM 12/16/2004, Chris Santerre wrote: YAMPTSBOTW! Yet Another Matt Post That Should Be On The Wiki!! Not really... as of SA 3.0 you can't read the tokens anymore.. they are SHA1 hashed before dumping into the database. Higher privacy, and faster searching, but less useful for

Re: can any body help me understand this

2004-12-16 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris Santerre writes: As for the dump output.. YAMPTSBOTW! Yet Another Matt Post That Should Be On The Wiki!! ;) I know, the man's a one-man FAQ ;) - --j. -BEGIN PGP SIGNATURE- Version: GnuPG v1.2.4 (GNU/Linux) Comment: Exmh

Re: spamd not respawning on FreeBSD/Alpha

2004-12-16 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Brodbeck writes: This is kind of an odd problem and I'm not sure what to do. For quite a while I had apparent Perl signal-handling problems -- in particular, I couldn't kill spamd, I had to use kill -9. Recently I recompiled Perl in an

Re: cannot write and parse errors

2004-12-16 Thread Stuart Johnston
Matt Kettler wrote: auto_learn has NEVER been valid. It's bayes_auto_learn. It also should only contain a 1 or a 0 after it. No $ I've seen a lot of people with auto_learn in their configs. Where'd you get that? did you use some config auto generator? http://www.yrex.com/spam/spamconfig.php -

RE: Upgrade my rules to Steroid Strength?

2004-12-16 Thread Chris Santerre
-Original Message- From: Rob Blomquist [mailto:[EMAIL PROTECTED] Sent: Wednesday, December 15, 2004 9:46 PM Hallujah! For the first time in months, I batted 1000! :) Thanks to all that helped. I will also be putting it all on Mandrake's Wiki, as there are many who dislike

RE: can any body help me understand this

2004-12-16 Thread Chris Santerre
-Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Thursday, December 16, 2004 3:32 PM To: Chris Santerre; users@spamassassin.apache.org Subject: RE: can any body help me understand this At 02:55 PM 12/16/2004, Chris Santerre wrote: YAMPTSBOTW! Yet Another Matt

Non-trusted IP

2004-12-16 Thread Warren Robinson
How can I correct this problem of not allowing a non-trusted IP ('218.153.91.6') through this check:- debug: MX lookup of yahoo.com succeeded = Dns available (set dns_available to hardcode) debug: is DNS available? 1 debug: looking up PTR record for '218.153.91.6' debug: PTR for '218.153.91.6':

Re: Non-trusted IP

2004-12-16 Thread Matt Kettler
At 03:40 PM 12/16/2004, Warren Robinson wrote: How can I correct this problem of not allowing a non-trusted IP ('218.153.91.6') through this check:- debug: MX lookup of yahoo.com succeeded = Dns available (set dns_available to hardcode) debug: is DNS available? 1 debug: looking up PTR record for

Re: cannot write and parse errors

2004-12-16 Thread Matt Kettler
At 03:18 PM 12/16/2004, Stuart Johnston wrote: Matt Kettler wrote: auto_learn has NEVER been valid. It's bayes_auto_learn. It also should only contain a 1 or a 0 after it. No $ I've seen a lot of people with auto_learn in their configs. Where'd you get that? did you use some config auto

Ready for Production Use

2004-12-16 Thread Jeff Koch
Two months ago when we tried upgrading one of our production mailservers to SA v3 we had a complete disaster - numerous processes spawning, heavy load factors, high memory usage. I was wondering whether now that SA 3.02 has been released whether it is now time to try the upgrade again. What

Re: cannot write and parse errors

2004-12-16 Thread Jim Maul
Stuart Johnston wrote: Matt Kettler wrote: auto_learn has NEVER been valid. It's bayes_auto_learn. It also should only contain a 1 or a 0 after it. No $ I've seen a lot of people with auto_learn in their configs. Where'd you get that? did you use some config auto generator?

RE: Bayes lock failed

2004-12-16 Thread Tim A
-Original Message- From: Matt Kettler [EMAIL PROTECTED] Date: Mon, 06 Dec 2004 20:53:14 -0500 Subject: Re: Bayes lock failed To: [EMAIL PROTECTED], users@spamassassin.apache.org At 08:02 PM 12/6/2004, Tim A wrote: I've read a number of people having problems with an error similar

RE: Ready for Production Use

2004-12-16 Thread Jon Dossey
Two months ago when we tried upgrading one of our production mailservers to SA v3 we had a complete disaster - numerous processes spawning, heavy load factors, high memory usage. I was wondering whether now that SA 3.02 has been released whether it is now time to try the upgrade again. You