Can't get sa-learn to work

Since upgrading to 3.1.5, I get this when trying to use sa-learn: # sa-learn --showdots --spam --mbx spam archive-iterator: unable to open spam.spam: No such file or directory archive-iterator: unable to open spam.spam: No such file or directory archive-iterator: unable to open spam.spam: No such

Which DB is actually used?

I have SA 3.1.4 configured and running on Debian Sarge using apt-get. I'm finding it hard to know what directory is actually used for the bayes-database: max:~# ls /root/.spamassassin/ -al total 2344 drwx-- 2 root root4096 Sep 8 07:52 . drwxr-xr-x 12 root root4096 Sep 5 09:37 ..

Re: Can't get sa-learn to work

Theo Van Dinter skrev: On Thu, Sep 07, 2006 at 11:27:36AM +0200, Bo Mellberg wrote: max:/#sa-learn -D --sync which would upgrade the db from version 0 to version 2. FWIW, the upgrade occurs anytime a DB write is attempted, --sync just forces a write. OK. Got it. [25567] dbg: bayes: foun

site-wide config?

Sorry if this is covered somewhere in the documentation, and if so can someone be nice enough to point it to me :) I can't seem to locate it.   I would like to set spamassassin to use a site-wide configuration, so that when I tell it to sa-learn, it will apply what it learns to every single

Re: Everything is being filtered

From: "John D. Hardin" <[EMAIL PROTECTED]> On Thu, 7 Sep 2006, Poohba wrote: I don't know if this is the right place but I followed instructions from http://www.atlantawebhost.com/articles/evolution_spamassassin.php and everything is going to my spam folder. The one difference is that this ve

Re: Quarantined Spam.

At 08:50 PM 9/7/2006, you wrote: Hi, Is there anyway I can resend the emails which have been quarantined. as some of the emails should not have been quarantined. I'm using plesk 7.5 reloaded with spam assassin. I don't know what Plesk is, but is plesk doing the quarantining? Spamassassin isn

Quarantined Spam.

Hi,   Is there anyway I can resend the emails which have been quarantined. as some of the emails should not have been quarantined.   I'm using plesk 7.5 reloaded with spam assassin.   Thanks in advance.      

Some Spam getting through

I am having an issue with spam not getting caught by the filter.   The spam will score low initially but when I run it on the quarantined message a minute later the message will score well over the threshold.   I am using spamassassin 3.1.4 and it is being called through mimedefang. I q

Re: [Bump] No log to syslog after upgrade

Kurt Buff wrote: I've requested an account, and am waiting for the password. I understand about command line tools and their use, but SA is a bit of a special case, as it's used as more than simply a command line tool - especially when you consider its use with Amavis, etc. amavisd-new has its

RE: [Bump] No log to syslog after upgrade

Entered as # 5093. | -Original Message- | From: Kurt Buff | Sent: Thursday, September 07, 2006 14:27 | To: users@spamassassin.apache.org | Subject: RE: [Bump] No log to syslog after upgrade | | | I've requested an account, and am waiting for the password. | | I understand about command

Re: Whitelist ebay

steven, Lint keeps throwing out this line: whitelist_from_rcvd [EMAIL PROTECTED] Is there something special about ebay? you need a second parameter on that line. from the man page ... "whitelist_from_rcvd [EMAIL PROTECTED] sourceforge.net Use this to supplement the whitelist_from addre

Re: Whitelist ebay

On Thu, Sep 07, 2006 at 04:48:02PM -0500, Steven Stern wrote: > Lint keeps throwing out this line: > > whitelist_from_rcvd [EMAIL PROTECTED] > > Is there something special about ebay? No, but you're missing the rest of the line. perldoc Mail::SpamAssassin::Conf -- Randomly Generated Tagline:

Whitelist ebay

Lint keeps throwing out this line: whitelist_from_rcvd [EMAIL PROTECTED] Is there something special about ebay?

RE: [Bump] No log to syslog after upgrade

I've requested an account, and am waiting for the password. I understand about command line tools and their use, but SA is a bit of a special case, as it's used as more than simply a command line tool - especially when you consider its use with Amavis, etc. Kurt | -Original Message- | Fr

Re: [Bump] No log to syslog after upgrade

On Thu, Sep 07, 2006 at 01:26:08PM -0700, Kurt Buff wrote: > Perhaps an invocation flag could be added? You can feel free to open an enhancement BZ ticket if you like. Generally speaking commandline tools don't log to syslog though. -- Randomly Generated Tagline: If ignorance is bliss, why aren'

RE: [Bump] No log to syslog after upgrade

| From: Theo Van Dinter [mailto:[EMAIL PROTECTED] | On Thu, Sep 07, 2006 at 09:11:22AM -0700, John D. Hardin wrote: | > > [server]spamassassin --lint -D | > > [22110] dbg: logger: adding facilities: all | > > [22110] dbg: logger: logging level is DBG | > > | > | > Is your syslog daemon configured

Re: sa-learn question

On Thu, Sep 07, 2006 at 02:19:25PM -0500, EviL_SmUrF wrote: > Quick question about spamassassin's sa-learn feature. I am running > spamassassin on a semi-large webhosting server, and I can't seem to find > rather or not when I run sa-learn, if what it learns it will apply to only > that email ad

Re: Inconsistent Rules Firing

Bowie Bailey wrote: > > Are you sure these messages are being scanned? Take a look at the > headers and see if there are X-Spam headers in both the marked and > unmarked messages. If so, post those headers here so we can see what > is hitting. > As I inidcated in the original mail... th

sa-learn question

Heya guys! (and girls!)   Quick question about spamassassin's sa-learn feature. I am running spamassassin on a semi-large webhosting server, and I can't seem to find rather or not when I run sa-learn, if what it learns it will apply to only that email address it was ran on, or the entire doma

Re: Everything is being filtered

On Thu, 7 Sep 2006, Poohba wrote: > I am not sure what's not working right. I am using /usr/bin/spamc -e > > /dev/null The flag is "-c" if you are using spamc. > That is actually the problem now that I looked at it and > what you stated at the end. when I changed it to -c I think it will > wor

Re: Everything is being filtered

On Thu, Sep 07, 2006 at 02:43:00PM -0400, Poohba wrote: > $ spamassassin -e < spam2.txt > /dev/null; echo $? > 0 > > $ spamassassin -t < spam2.txt > X-Spam-Status: Yes, score=29.7 required=5.0 tests=FORGED_HOTMAIL_RCVD, > autolearn=unavailable version=3.1.3 Yeah, that's the bug I was men

Re: Everything is being filtered

On Thu, Sep 07, 2006 at 11:44:36AM -0700, John D. Hardin wrote: > But if it's always returning zero (not spam) that still doesn't > explain why they are all being filed as spam... I didn't say it did, just that there was a -e related bug. I know nothing about Evolution. > Did that bug also affec

Re: Everything is being filtered

On Thu, 7 Sep 2006, Theo Van Dinter wrote: > On Thu, Sep 07, 2006 at 02:27:02PM -0400, Poohba wrote: > > I did your email, another email that should be spam and another that is > > spam and they all returned 0. > > You haven't mentioned what version of SA you're running. There was > a bug introd

Re: Everything is being filtered

On Thu, 7 Sep 2006, Poohba wrote: > I did your email, another email that should be spam and another > that is spam and they all returned 0. Verify this bit of your Evolution rule: d. Select "returns greater than" from the return drop down list. e. Set 0 to the number box. Assuming SA is wor

Re: Everything is being filtered

I am not sure what's not working right. I am using /usr/bin/spamc -e > /dev/null That is actually the problem now that I looked at it and what you stated at the end. when I changed it to -c I think it will work because when I did it on the commandline I got a 0 for you and 1 for the spam. Atte

Re: Everything is being filtered

On Thu, Sep 07, 2006 at 02:27:02PM -0400, Poohba wrote: > I did your email, another email that should be spam and another that is > spam and they all returned 0. You haven't mentioned what version of SA you're running. There was a bug introducted in 3.1.2 and fixed in 3.1.4 which caused -e to not

Re: Everything is being filtered

On Thu, 7 Sep 2006, Poohba wrote: > I don't know if this is the right place but I followed instructions from > http://www.atlantawebhost.com/articles/evolution_spamassassin.php and > everything is going to my spam folder. The one difference is that this > version of Evolution has "Pipe to program

Re: Everything is being filtered

I did your email, another email that should be spam and another that is spam and they all returned 0. On Thu, 2006-09-07 at 11:20 -0700, John D. Hardin wrote: > On Thu, 7 Sep 2006, Poohba wrote: > > > I don't know if this is the right place but I followed instructions from > > http://www.atlantaw

Everything is being filtered

I don't know if this is the right place but I followed instructions from http://www.atlantawebhost.com/articles/evolution_spamassassin.php and everything is going to my spam folder. The one difference is that this version of Evolution has "Pipe to program" but other than that everything is the sam

Re: RPM -vs- CPAN install

Ah, I see you opened an issue against this:

Re: RPM -vs- CPAN install

--On Thursday, September 07, 2006 11:38 AM -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote: To be honest, I'd be more partial to removing tools and contrib (and masses and ...) from the tarball and make them available separately. It'd be pretty easy IMO. I believe that the vast majority of peo

Re: [Bump] No log to syslog after upgrade

On Thu, Sep 07, 2006 at 09:11:22AM -0700, John D. Hardin wrote: > > [server]spamassassin --lint -D > > [22110] dbg: logger: adding facilities: all > > [22110] dbg: logger: logging level is DBG > > > > Is your syslog daemon configured to discard debug-level messages? [...] At last check, spamassa

RE: Inconsistent Rules Firing

Michel Vaillancourt wrote: > Recently several IMG spams and plain-text stock spams have been > making it in unmarked. However, they'll be right beside two more > correctly identified. What seems to be happening is that spamd isn't > always firing all the rules that apply to the message, res

Re: [Bump] No log to syslog after upgrade

On Thu, 7 Sep 2006, Thomas Ericsson wrote: > [server]spamassassin --lint -D > [22110] dbg: logger: adding facilities: all > [22110] dbg: logger: logging level is DBG > Is your syslog daemon configured to discard debug-level messages? Are the messages being logged to /var/log/message (or whateve

Re: Can't get sa-learn to work

On Thu, Sep 07, 2006 at 11:27:36AM +0200, Bo Mellberg wrote: > max:/#sa-learn -D --sync > > which would upgrade the db from version 0 to version 2. FWIW, the upgrade occurs anytime a DB write is attempted, --sync just forces a write. > [25567] dbg: bayes: found bayes db version 0 > [25567] dbg:

Inconsistent Rules Firing

Recently several IMG spams and plain-text stock spams have been making it in unmarked. However, they'll be right beside two more correctly identified. What seems to be happening is that spamd isn't always firing all the rules that apply to the message, resulting in a score 8 or 9 spam

Re: RPM -vs- CPAN install

On Thu, Sep 07, 2006 at 06:08:27AM -0700, Kenneth Porter wrote: > How about adding a -contrib or -tools sub-package to the "official" spec > file? If they're included in the tarball, then they should make it out to > an RPM binary. To be honest, I'd be more partial to removing tools and contrib

Re: URIBL false matches

On Thu, 7 Sep 2006, Mark G. Thomas wrote: > Does anyone have suggestions other than discontinuing use of the > URIBL or using a much lower score? Is there some way to fix this > code to make it more resilient to Lotus Notes text mangling? Is > there some easy way I can exclude just the one domai

RE: URIBL false matches

On Thu, 7 Sep 2006, Rosenbaum, Larry M. wrote: > uridnsbl_skip_domain ng.com {raspberry} -- John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873

Re: RPM -vs- CPAN install

On Thu, 7 Sep 2006, Kenneth Porter wrote: > --On Wednesday, September 06, 2006 9:53 PM -0400 Theo Van Dinter > <[EMAIL PROTECTED]> wrote: > > > If you modify the spec file it can, but generally speaking you can just > > grab the tools out of the tarball. IMO, the tools should end up in > > cont

RE: URIBL false matches

> From: Mark G. Thomas [mailto:[EMAIL PROTECTED] > > Hi, > > I have a problem with incorrect URIBL hits on incoming forwarded messages > that have been mangled by Lotus Notes. > > I have a customer with the domain name "Yimaging.com". > (Not really "Y"). > > "ng.com" is on the URIBL bla

URIBL false matches

Hi, I have a problem with incorrect URIBL hits on incoming forwarded messages that have been mangled by Lotus Notes. I have a customer with the domain name "Yimaging.com". (Not really "Y"). "ng.com" is on the URIBL blacklist. I think for awhile it has been removed, but it's there again

Re: Spamd child states?

On Wed, 2006-09-06 at 17:17 +0100, John Horne wrote: > > > I get the feeling that something is wrong here. I have restarted SA, and > grepped the log file. It shows: > > === > prefork: child states: BI > prefork: child states: BB

Re: RPM -vs- CPAN install

From: "Bart Schaefer" <[EMAIL PROTECTED]> On 9/6/06, jdow <[EMAIL PROTECTED]> wrote: From: "Bart Schaefer" <[EMAIL PROTECTED]> > The rpmforge project packages the tools as a separate RPM, named, > surprisingly enough, spamassassin-tools. And then one distro spamassassin-tools was no longer pr

Re: RPM -vs- CPAN install

--On Wednesday, September 06, 2006 1:46 PM -0400 Joey <[EMAIL PROTECTED]> wrote: is there any real advantage to using cpan or source code over rpms, if I don't really do any code modifications etc to spamassasin? RPM and CPAN are packaging systems, and each uses its own database to remember

Re: RPM -vs- CPAN install

--On Wednesday, September 06, 2006 9:53 PM -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote: If you modify the spec file it can, but generally speaking you can just grab the tools out of the tarball. IMO, the tools should end up in contrib since we don't actually support them. How about addin

RE: RBL Rules Misfiring

Daryl C. W. O'Shea wrote: > [sent to just me, BTW] Must have hit the wrong reply button... > Bowie Bailey wrote: > > Daryl C. W. O'Shea wrote: > > > Bowie Bailey wrote: > > > > > > > You should also list any other mail servers that accept mail for > > > > your domain. This includes email gatewa

Re: How remove vigra gif message ?

On Thu, 24 Aug 2006, Philippe Couas wrote: > How could i remover theses messages ? Sorry for the late reply, I just received notice from the list today that we had been 'bouncing' messages. We rejected this because I have a ClamAV MD5 signature for this image. While most images morph, this par

[Bump] No log to syslog after upgrade

Still not resolved. Any help appreciated. Could this be of help? [server]spamassassin --lint -D [22110] dbg: logger: adding facilities: all [22110] dbg: logger: logging level is DBG TIA Thomas After our upgrade from SA 2.6.3 to SA 3.1.3 we do not get any logs written to /var/log/mail.log

Re: Where to install imageinfo.pm?

On Thu, September 7, 2006 12:09, BG Mahesh wrote: > Line 141 reads, > dbg("imageinfo: gif image ".($part->{'name'} ? $part->{'name'} : '')." is > $height x $width pixels ($area pixels sq.), with $c > olor_table_size color table"); unwrap this line so its just one line > What could I be doing wr

Re: Where to install imageinfo.pm?

On 8/25/06, Kenneth Porter <[EMAIL PROTECTED]> wrote: --On Thursday, August 24, 2006 2:12 PM +0530 BG Mahesh <[EMAIL PROTECTED]>wrote:> I am using SA-3.1.4. I am in the process of installing> http://www.rulesemporium.com/plugins.htm> Where do I install> ImageInfo.pm

Can't get sa-learn to work

Hi all! New to SA and to this list, I have a problem with the bayes DB learning process. I'm running Debian Sarge, with the latest sa-exim and spamassassin 3.1.4 from apt-get. I first tried: max:/#sa-learn --spam ~/Maildir/.MissedSpam/cur but it complained on the db version. Reading up on t

Re: I'm a bit confused on this one

On Thursday 07 September 2006 01:58, Chris wrote: > See the headers below, it 'appears' to me that this message went through > the spammers isp before being sent to me or is this just another spammers > 'game'? More inclined to think it's a botnet, and that the bot was either forced to use the re