Re: bayes sync is hogging cpu

2006-09-26 Thread Fabien GARZIANO
Ok, I may say something dumb, but have you tried to clear the bayes db with : sa-learn --clear --dbpath -- Fab

Re: SA gone mad, times out and stucks

2006-09-26 Thread Jürgen Herz
Loren Wilton wrote: warn: bayes: expire_old_tokens: child processing timeout at /usr/sbin/spamd line 1086. (Spamd then takes very long to scan a mail: info: spamd: clean message (0.0/5.0) for Debian-exim:106 in 305.0 seconds, 3781 bytes.) The child is trying to run a Bayes expire,

RE: SA gone mad, times out and stucks

2006-09-26 Thread Bowie Bailey
Jürgen Herz wrote: Loren Wilton wrote: warn: bayes: expire_old_tokens: child processing timeout at /usr/sbin/spamd line 1086. (Spamd then takes very long to scan a mail: info: spamd: clean message (0.0/5.0) for Debian-exim:106 in 305.0 seconds, 3781 bytes.) The child is

Spamassassin headers

2006-09-26 Thread KimSorensen
Hi, I have searched almost every where to solve this problem: I cant change the spam headers from ***SPAM[score]*** to SPAM: I am using Spamassassin 3.1.3 on perl 5.8.8 amavisd-new version: 2.3.3 SUSE SLES 10 My local.cf looks like this: # Add your own customisations to this file. See 'man

Re: Spamassassin headers

2006-09-26 Thread Matt Kettler
KimSorensen wrote: Hi, I have searched almost every where to solve this problem: I cant change the spam headers from ***SPAM[score]*** to SPAM: I am using Spamassassin 3.1.3 on perl 5.8.8 amavisd-new version: 2.3.3 SUSE SLES 10 amavis makes it's own markups.. check you amavis config,

Re: bayes sync is hogging cpu

2006-09-26 Thread Andreas Pettersson
Bret Miller wrote: I used to have problems with bayes locking and journaling. When it finally corrupted the database, I decided it was time to put it into a real SQL database instead of using DB_File. Haven't had a single problem with bayes CPU or locking since.

RE: Spamassassin headers

2006-09-26 Thread Email Lists
Kim Please forgive, I had my email client set wrong and it didn't wrap your .cf file in the email so... it was uncommented. My fault. Interesting though... maybe you just didn't stop and restart the service? :-) -rh -- Robert - Abba Communications Computer Internet Services (509)

RE: Spamassassin headers

2006-09-26 Thread Email Lists
- - I have searched almost every where to solve this problem: - - I cant change the spam headers from ***SPAM[score]*** to SPAM: - I am using Spamassassin 3.1.3 on perl 5.8.8 - amavisd-new version: 2.3.3 - SUSE SLES 10 - - My local.cf looks like this: - - # Add your own customisations to this

header attached

2006-09-26 Thread Toll, Eric
Greetings list, I have: SpamAssassin version 3.1.5 running on Perl version 5.8.3 And would like the header to be inline instead of an attachment (like it used to be with older versions of SA) E.g. When I have the notification emails sent to me when a spam is placed in quarantine, I want to

Infuriating gif spam...

2006-09-26 Thread Steve [Spamassasin]
I've been getting a _lot_ of spam recently which has been defeating my spamassassin configuration - all of it has the same general form... A message with auto-generated prose and an image. I installed FuzzyOCR and this helped, but one particular variant still slips through. The problematic spams

Re: Infuriating gif spam...

2006-09-26 Thread Jorge Valdes
Steve [Spamassasin] wrote: I've been getting a _lot_ of spam recently which has been defeating my spamassassin configuration - all of it has the same general form... A message with auto-generated prose and an image. I installed FuzzyOCR and this helped, but one particular variant still slips

Earthlink emails

2006-09-26 Thread bryan haase
Iam getting a lot of earthlink.net emails with 4-5 random words in the body. I am at a lost how to prevent these. Anysuggestions?? Thanks Bryan Subject: axiom closure advocacy From: Blair [EMAIL PROTECTED] Date: Mon, 25 Sep 2006 22:17:02 -0500 To: "[EMAIL PROTECTED]" [EMAIL

Re: Earthlink emails

2006-09-26 Thread Martin Hepworth
bryan haase wrote: I am getting a lot of earthlink.net emails with 4-5 random words in the body. I am at a lost how to prevent these. Any suggestions?? Thanks Bryan Subject: axiom closure advocacy may I suggest you start with upgrading your SA to 3.1.5 which will solve security issues

Re: Earthlink emails

2006-09-26 Thread Benny Pedersen
On Tue, September 26, 2006 18:24, bryan haase wrote: I am getting a lot of earthlink.net emails with 4-5 random words in the body. I am at a lost how to prevent these. Any suggestions?? http://openspf.org/wizard.html?mydomain=earthlink.net SpamAssassin 3.0.1 (2004-10-22) on

Re: Earthlink emails

2006-09-26 Thread Gino Cerullo
On 26-Sep-06, at 12:43 PM, Benny Pedersen wrote: On Tue, September 26, 2006 18:24, bryan haase wrote: I am getting a lot of earthlink.net emails with 4-5 random words in the body. I am at a lost how to prevent these. Any suggestions?? http://openspf.org/wizard.html?mydomain=earthlink.net

Re: Infuriating gif spam...

2006-09-26 Thread Steve [Spamassasin]
Jorge Valdes wrote: There are multiple images in these gifs, and because the first image is 'junk', sending this image through gocr will yield no results. The problem is that you have to scan all images to find the text. Try this with each image: convert -append News.gif pnm:- | gocr -

bayes lock buildup

2006-09-26 Thread John Goubeaux
Folks, (SA ver 3.1.5) I have a situation where bayes.lock and bayes_toks files begin to build up. This usually takes about 24hrs. My spamd processes begin to work harder and take more cpu, Eventually a large number of these files build up and i have a max number of spamd processes running.

Received header unparseable

2006-09-26 Thread benthere-nine
My firewall puts a received header on every e-mail it forwards to SA 3.1.5: Received: from f66108.upc-f.chello.nl ([80.56.66.108]) by myfirewall; Tue, 26 Sep 2006 12:35:52 -0500 (Central Daylight Time) But when my firewall can't find a DNS entry for the e-mail's last relay IP address, it just

Stats of rules ?

2006-09-26 Thread Noc Phibee
Hi on my spamassassin server, i use a lot of rules .. personnal and downloaded. Anyone know if they have a tools for know in 24h or 48h if a rules are used or not ? thanks bye

New RPM builds for SUSE 10.1

2006-09-26 Thread Anders Norrbring
I've made new builds for SUSE 10.1 of SpamAssassin 3.1.5, please test them if you have a chance, and send me any relevant feedback. You'll find them at http://www.norrbring.com/SuSE -- Anders Norrbring Norrbring Consulting

can't get Bayesian to work when invoked from postfix

2006-09-26 Thread Peter Teunissen
Hi All, After having trained SA with sufficient amounts of ham spam, I have bayesian testing working. When I test it with spamassassin -D testmessage as root it works flawlessly. But, when postfix invokes spamc with user filter, bayes always fails. I tested this by running

Re: Earthlink emails

2006-09-26 Thread Benny Pedersen
On Tue, September 26, 2006 18:44, Gino Cerullo wrote: update to 3.1.5 if posible and enable spf check How does this help? Earthlink does not publish SPF records. sorry i was to fast here :/ -- This message was sent using 100% recycled spam mails.

RE: Stats of rules ?

2006-09-26 Thread Bowie Bailey
Noc Phibee wrote: Hi on my spamassassin server, i use a lot of rules .. personnal and downloaded. Anyone know if they have a tools for know in 24h or 48h if a rules are used or not ? If you just want to know if the rule is getting hits, you can do a simple grep against your maillog file.

Re: Stats of rules ?

2006-09-26 Thread John D. Hardin
On Tue, 26 Sep 2006, Noc Phibee wrote: Anyone know if they have a tools for know in 24h or 48h if a rules are used or not ? Depending on how your SA is set up, you may be able to see the rules that are hit in /var/log/maillog -- John Hardin KA7OHZICQ#15735746

Re: duplicate emails

2006-09-26 Thread SM
At 08:53 26-09-2006, Steve Ingraham wrote: I need help with a problem. Our users are seeing some multiple duplicate emails coming from the same sender. This is not occurring with every email so there does not seem to be any pattern to which incoming emails will be duplicated and which ones

Re: duplicate emails

2006-09-26 Thread Rick Macdougall
SM wrote: At 08:53 26-09-2006, Steve Ingraham wrote: I need help with a problem. Our users are seeing some multiple duplicate emails coming from the same sender. This is not occurring with every email so there does not seem to be any pattern to which incoming emails will be duplicated and

Re: [qmailtoaster] duplicate emails

2006-09-26 Thread Daryl C. W. O'Shea
Steve Ingraham wrote: If anyone has a simple way of updating rules for spamassassin I would welcome your input. I still need to update the rules as I have been getting a great number of emails coming through to users. Specifically, we are getting a lot of the pharmaceutical spam and the

Re: header attached

2006-09-26 Thread Matt Kettler
Toll, Eric wrote: Greetings list, I have: SpamAssassin version 3.1.5 running on Perl version 5.8.3 And would like the header to be inline instead of an attachment (like it used to be with older versions of SA) E.g. When I have the notification emails sent to me when a spam is

[no subject]

2006-09-26 Thread Peter Smith
Hi, Over the last week, my machine (Fedora, SA 3.1.3, qmail, qmail-scanner-queue.pl) has been recieving a fair amount of junk mail which is not being tagged as spam; in fact the total scores are negative. The messages are simply a random stream of words, with punctuation scattered in them. No

Re: Earthlink emails

2006-09-26 Thread Loren Wilton
Received: from SHERI-PTIN5DJM8 (cpe-74-71-30-143.twcny.res.rr.com [74.71.30.143]) That mail came from a RoadRunner zombie account in Minnesota, has nothing to do with Earthlink other than the forged headers. If that is the entire message, and there isn't an image attached, they might be

Re: [qmailtoaster] duplicate emails

2006-09-26 Thread Loren Wilton
I want to thank everyone who posted a reply on my inquiry. I believe Jake Vickers was right about the problem. The RAM on the email server was bogged down since yesterday when I updated the various .cf files using rules_du_jour. I had included just a handful of rules from RDJ but it appears

Re:

2006-09-26 Thread Loren Wilton
Start by training bayes that these are bad things, it will eventually get the idea and start helping rather than hurting. Are you runing net tests? It sounds like someone has a broken zombie net that is supposed to be sending out gif spams, but they forgot the images. Net tests would

Re: [qmailtoaster] duplicate emails

2006-09-26 Thread jdow
Steve, it might help if you listed which rule sets. There are some which are obscenely large and others that are obsolete. Maybe we can prune the list for you a little. {^_^} - Original Message - From: Steve Ingraham [EMAIL PROTECTED] Steve Ingraham wrote: I need help with a

Re: duplicate emails

2006-09-26 Thread jdow
For what it is worth, Steve, the duplicate of this message below to this list has a different message ID field and was marked as received by two mxi2.occa.state.ok.us 1 and a half hours earlier. The message I am replying to is marked as being sent by your email program: Date: Tue, 26 Sep 2006

Re: Earthlink emails

2006-09-26 Thread jdow
Easy to detect. If these lines are missing it isn't from Earthlink: X-ELNK-Trace: 969e0f2de935a8bcd780f4a490ca69563f9fea00a6dd62bcb02f9df018f210f4f21462a4fe5b44a8350badd9bab72f9c350badd9bab72f9c350badd9bab72f9c X-Originating-IP: 71.116.187.9 X-ELNK-AV: 0 X-ELNK-Info: sbv=0; sbrc=.0; sbf=00;

Re: Infuriating gif spam...

2006-09-26 Thread Bill Landry
- Original Message - From: Steve [Spamassasin] [EMAIL PROTECTED] Jorge Valdes wrote: There are multiple images in these gifs, and because the first image is 'junk', sending this image through gocr will yield no results. The problem is that you have to scan all images to find the text.

duplicate emails

2006-09-26 Thread Steve Ingraham
I need help with a problem. Our users are seeing some multiple duplicate emails coming from the same sender. This is not occurring with every email so there does not seem to be any pattern to which incoming emails will be duplicated and which ones wont. They are also reporting that

duplicate emails

2006-09-26 Thread Steve Ingraham
I need help with a problem. Our users are seeing some multiple duplicate emails coming from the same sender. This is not occurring with every email so there does not seem to be any pattern to which incoming emails will be duplicated and which ones wont. They are also reporting that

RE: [qmailtoaster] duplicate emails

2006-09-26 Thread Steve Ingraham
Steve Ingraham wrote: I need help with a problem. Our users are seeing some multiple duplicate emails coming from the same sender. This is not occurring with every email so there does not seem to be any pattern to which incoming emails will be duplicated and which ones wont. They are