RE: Load balancing spamd

2005-08-03 Thread Gary W. Smith
How do you (make and) balance the calls to the AV servers? How do you (make and) balance the calls to the spamd machines? I am very interested in these details! We just call them in order case on the connection line. On two of the 4 SMTP gateways we use node 1 as the primary and node

Question regarding meta rule handling

2005-08-03 Thread Sven Riedel
Hi, a while back someone kindly posted a rule here that matches on empty mails: header __X Content-Type =~ /^(message|multipart)/i rawbody __Y /\S/ meta Z ( !X !Y ) Now I find that Z matches on all mails - investigation shows that Y matches on all non-whitespaces as it should, and X doesn't

Re: Question regarding meta rule handling

2005-08-03 Thread Theo Van Dinter
On Wed, Aug 03, 2005 at 08:18:16AM +0200, Sven Riedel wrote: header __X Content-Type =~ /^(message|multipart)/i rawbody __Y /\S/ meta Z ( !X !Y ) and yet the rule triggers for me. Doing a Of course. __X != X ... :) -- Randomly Generated Tagline: The question is to what extent parasites

RE: Question regarding meta rule handling

2005-08-03 Thread Sven Riedel
Title: RE: Question regarding meta rule handling Hi, On Wed, Aug 03, 2005 at 08:18:16AM +0200, Sven Riedel wrote: header __X Content-Type =~ /^(message|multipart)/i rawbody __Y /\S/ meta Z ( !X !Y ) and yet the rule triggers for me. Doing a Of course. __X != X ... :) D'oh.

Re: Question regarding meta rule handling

2005-08-03 Thread Ilan Aisic
Don't know. This meta rule seems to work fine for me. Perhaps one of __X, __Y or Z is defined another rule. SA wouldn't warn you on it. Try changing their names to something longer and unique. On 8/3/05, Sven Riedel [EMAIL PROTECTED] wrote: Hi, On Wed, Aug 03, 2005 at 08:18:16AM

RE: generating rule stats from spamd logs

2005-08-03 Thread Matthew Yette
No one has any thoughts on this? It's not a quick fix? :( -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Matthew Yette Sent: Friday,

Re: Question regarding meta rule handling

2005-08-03 Thread Matt Kettler
Sven Riedel wrote: Hi, a while back someone kindly posted a rule here that matches on empty mails: header __X Content-Type =~ /^(message|multipart)/i rawbody __Y /\S/ meta Z ( !X !Y ) Now I find that Z matches on all mails - investigation shows that Y matches on all non-whitespaces

RE: generating rule stats from spamd logs

2005-08-03 Thread Dallas L. Engelken
v1.0 now has per-user and per-domain support http://www.rulesemporium.com/programs/sa-stats.txt # Per User and Per Domain Statistics... # -- # # ./sa-stats.pl -r postmaster #- this would give all stats for postmaster users, # regardless of

sa-stats.pl generates a zero report

2005-08-03 Thread Mike Pepe
Hi all, Any pointers on how to make sa-stats.pl work? I ran it in debug mode and it's scanning the right log, but at the end I get a report with all zeros. Maybe I'm missing a perl module? sample report: Report Title : SpamAssassin - Spam Statistics Report Date : 2005-08-03 Period

RE: sa-stats.pl generates a zero report

2005-08-03 Thread Matthew Yette
I'm having the same problem. I was having a bit of dialouge with Dallas - Glad to see I'm not the only one. This script is great - can't wait until 1.01 ;) -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo:

Re: sa-stats.pl generates a zero report

2005-08-03 Thread jdow
It has not worked for several releases now. I have utterly given up on it. I bet this is why the SARE version was invented. {^_^} - Original Message - From: Matthew Yette [EMAIL PROTECTED] I'm having the same problem. I was having a bit of dialouge with Dallas - Glad to see I'm not the

RE: sa-stats.pl generates a zero report

2005-08-03 Thread Dallas L. Engelken
I'm having the same problem. I was having a bit of dialouge with Dallas - Glad to see I'm not the only one. This script is great - can't wait until 1.01 ;) Matt, he's talking about the distro sa-stats.pl... Look closer at this sample. d

RE: sa-stats.pl generates a zero report

2005-08-03 Thread Matthew Yette
My fault - I saw the subject and immediately assumed it was the same. Whoops :( -- Matthew Yette Senior Engineer - NOC/Operations MA Polce Consulting, Inc. [EMAIL PROTECTED] 315-838-1644 (w) 315-356-0597 (f) AIM/Yahoo: MAPolceNOC MSN: [EMAIL PROTECTED] -Original Message- From: Dallas L.

RE: generating rule stats from spamd logs

2005-08-03 Thread Dallas L. Engelken
This would explain it. result: . 3 - AWL,BAYES_50,DNS_FROM_AHBL_RHSBL,HTML_90_100,HTML_IMAGE_RATIO_02,HTML_ME SSAGE,HTML_TAG_EXIST_TBODY,MIME_HTML_ONLY,SARE_OEM_S_PRICE,SARE_SUBLRNMR scantime=1.9,size=14453,mid=[EMAIL PROTECTED] m,bayes=0.515278005793156,autolearn=no Its looking for something

RE: Load balancing spamd

2005-08-03 Thread email builder
How do you (make and) balance the calls to the AV servers? How do you (make and) balance the calls to the spamd machines? I am very interested in these details! We just call them in order case on the connection line. On two of the 4 SMTP gateways we use node 1 as the primary

Re: sa-stats.pl generates a zero report

2005-08-03 Thread Chris
On Wednesday 03 August 2005 12:51 pm, Mike Pepe wrote: Hi all, Any pointers on how to make sa-stats.pl work? I ran it in debug mode and it's scanning the right log, but at the end I get a report with all zeros. Maybe I'm missing a perl module? sample report: Report Title :

RE: spamd and exim

2005-08-03 Thread Herb Martin
-Original Message- From: Jonathan Guthrie [mailto:[EMAIL PROTECTED] The message I am seeing in /var/log/exim_main.log is: spam acl condition: cannot parse spamd output H=(mailservername) [IP] F=address temporarily rejected after DATA I am seeing a LOT of these but have been watching

Re: sa-stats.pl generates a zero report

2005-08-03 Thread Chris
On Wednesday 03 August 2005 08:50 pm, jdow wrote: The sa-stats.pl I run works quite well, maybe your configuration is not quite right? Below is mine: # Configuration section my %opt = (); $opt{'logfile'} = '/var/log/mail/info';# Log file $opt{'sendmail'} =

Re: spamd and exim

2005-08-03 Thread Steven Dickenson
On Aug 3, 2005, at 9:52 PM, Herb Martin wrote: The message I am seeing in /var/log/exim_main.log is: spam acl condition: cannot parse spamd output H=(mailservername) [IP] F=address temporarily rejected after DATA I am seeing a LOT of these but have been watching for them in the Panic Log as

Re: sa-stats.pl generates a zero report

2005-08-03 Thread jdow
From: Chris [EMAIL PROTECTED] As a side note the first scrip was written by: #Authors : Brad Rathbun [EMAIL PROTECTED] http://www.computechnv.com/ # : Bob Apthorpe [EMAIL PROTECTED] http://www.cynistar.net/~apthorpe/ # : Duncan Findlay [EMAIL PROTECTED] # Can't

Re: sa-stats.pl generates a zero report

2005-08-03 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Chris writes: #Authors : Brad Rathbun [EMAIL PROTECTED] http://www.computechnv.com/ # : Bob Apthorpe [EMAIL PROTECTED] http://www.cynistar.net/~apthorpe/ # : Duncan Findlay [EMAIL PROTECTED] Can't really

RE: spamd and exim

2005-08-03 Thread Herb Martin
-Original Message- From: Steven Dickenson [mailto:[EMAIL PROTECTED] On Aug 3, 2005, at 9:52 PM, Herb Martin wrote: The message I am seeing in /var/log/exim_main.log is: spam acl condition: cannot parse spamd output H=(mailservername) [IP] F=address temporarily rejected after