Problem with sa-compile

2009-03-24 Thread JC Putter
hi i am trying to compile my rules but i am getting the following error Wide character in print at /usr/bin/sa-compile line 385, $fh line 3490. Wide character in print at /usr/bin/sa-compile line 385, $fh line 6690. re2c -i -b -o scanner1.c scanner1.re re2c -i -b -o scanner2.c scanner2.re re2c

USER_IN_WHITELIST problem.

2009-03-24 Thread Bug
Dear users ! I`m using exim + spamd + user_prefs in mysql. All works fine. But I found a bug, when I`m using whitelist, and header rcpt to: have address with character description, whitelist failed to catch it in database. For example: 1st message: spamd: clean message (-91.7/10.0) for

Re: USER_IN_WHITELIST problem.

2009-03-24 Thread Matt Kettler
Bug wrote: Dear users ! I`m using exim + spamd + user_prefs in mysql. All works fine. But I found a bug, when I`m using whitelist, and header rcpt to: have address with character description, whitelist failed to catch it in database. For example: 1st message: spamd: clean message

RE: Server overload, queuing for SA possible?

2009-03-24 Thread Bowie Bailey
Monky wrote: Hallo list, receiving a bunch of obvious spam emails without the SA tags in it made me look at my logfiles and I found out - thats what I guess - that for a short time my server was reaching his limits. Short grep extracts from my logfile: Mar 21 11:14:48 h1306680 spamd[9247]:

Re: Server overload, queuing for SA possible?

2009-03-24 Thread Henrik K
On Sat, Mar 21, 2009 at 07:20:52AM -0700, Monky wrote: What I make of this is that when my server is using his maximum of 5 spamd children he hits the RAM limit and starts paging (the explosion of scanning time). Is this a sensible assessment? How can we assess anything if you keep the

ruleset

2009-03-24 Thread JC Putter
where can i find more rulesets? using openprotect sare rules and sought rulesets __ Information from ESET NOD32 Antivirus, version of virus signature database 3957 (20090324) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com -- This message has been

lookup user_prefs in SQL database (not using spamc)

2009-03-24 Thread Guido
Hi, I am trying to configure my system that it can assign user specific scores. I therefore set up a table like described in [1]. This runs fine, as long as I use spamc to scan mails. But actually I want to use Amavisd-new using spamassassin. Here spamassassin complety ignores the sql settings.

Re: Trying to understand scoring discrepancy

2009-03-24 Thread Matus UHLAR - fantomas
On 23.03.09 09:43, mkellogg wrote: Running spamc from the command line and generating the full report. 0.0 TVD_RCVD_IP4 TVD_RCVD_IP4 0.0 TVD_RCVD_IPTVD_RCVD_IP However, my score file has the following lines: score TVD_RCVD_IP4 4.099 3.344 2.901 3.183 # n=2 score

Re: Spam Assassin White List

2009-03-24 Thread Matus UHLAR - fantomas
On 23.03.09 21:58, dsh979 wrote: I did not realise that items listed on the white list or the black list would still be subject to the operation/analysis of the SpamAssassin Rules. all rules are processed unless you play with ShortCircuit plugin. Beware of that: It may render the SA useless

Re: ruleset

2009-03-24 Thread Matus UHLAR - fantomas
On 24.03.09 15:59, JC Putter wrote: where can i find more rulesets? using openprotect sare rules and sought rulesets build your own rulesets? SARE rulesets aren't updated anymore afaik (and thus number of false-positives is increasing). Do you have any problem that can't be solved by

Re: Using SpamAssassin for just the Bayesian filtering?

2009-03-24 Thread Matt Garretson
Randy J. Ray wrote: filtering on other content, filtering that isn't the same as spam-testing. In a nutshell, we currently use the bogofilter application to classify messages, and invoke it with different word-list files to represent different filtering requirements. But this isn't going

Re[2]: USER_IN_WHITELIST problem. SOLVED

2009-03-24 Thread Bug
Thank you Matt! Your letter helped me to understand my problem better. I`m not using sa-spamc, my exim using ACL spam, that connects directly to spamd ip/port. My founded solution was described in Exim FAQ: A0512: Envelope-To: is added at delivery time, by the transport. Therefore, the

Re: Spam Assassin White List

2009-03-24 Thread John Hardin
On Mon, 23 Mar 2009, dsh979 wrote: Q:How can I list items/users on a white list or a black list without the lists (and items) being the subject of further analysis by the SpamAssassin Rules That has to be done outside SA. Basically (modulo shortcuts, which you shouldn't be playing with) SA

RE: lookup user_prefs in SQL database ( not using spamc)

2009-03-24 Thread Bowie Bailey
Guido wrote: Hi, I am trying to configure my system that it can assign user specific scores. I therefore set up a table like described in [1]. This runs fine, as long as I use spamc to scan mails. But actually I want to use Amavisd-new using spamassassin. Here spamassassin complety

Re: Spam Assassin White List

2009-03-24 Thread Jeff Mincy
From: Matus UHLAR - fantomas uh...@fantomas.sk Date: Tue, 24 Mar 2009 15:30:23 +0100 On 23.03.09 21:58, dsh979 wrote: I did not realise that items listed on the white list or the black list would still be subject to the operation/analysis of the SpamAssassin Rules.

RE: lookup user_prefs in SQL database (not using spamc)

2009-03-24 Thread Guido
- How can I convince spamassassin (used by amavisd-new) to care about my user_prefs in the database? Amavisd-new scans everything as a single user. It has no concept of per-user settings. What I mean is per recipient settings. And if that's the case, at least the default settings

Re: Trying to understand scoring discrepancy

2009-03-24 Thread mkellogg
facepalm/ That was indeed the case. Thank you. Matt Matus UHLAR - fantomas wrote: you apparently have a score line in user_prefs, or in system-wide directory, which prevails over those in SA rules dirs. -- View this message in context:

RE: Server overload, queuing for SA possible?

2009-03-24 Thread Brian J. Murrell
On Tue, 2009-03-24 at 08:10 -0500, Bowie Bailey wrote: Your assessment sounds right to me. I would make two suggestions. 1) Memory is cheap these days. Add some more RAM. That's a mitigation strategy, yes, but it doesn't really answer OP's question about how to make spamd stop trying to

Re: Using SpamAssassin for just the Bayesian filtering?

2009-03-24 Thread Justin Mason
hi -- This would indeed be possible -- just take the contents of the ruleset dir in /usr/share/spamassassin , throw out most of it, and keep just 23_bayes.cf . Then when you run spamd, tell it to use that rules dir instead of the default. You should probably also add a 99_local.cf which contains

RE: lookup user_prefs in SQL database (not using spamc)

2009-03-24 Thread McDonald, Dan
On Tue, 2009-03-24 at 16:30 +0100, Guido wrote: - How can I convince spamassassin (used by amavisd-new) to care about my user_prefs in the database? Amavisd-new scans everything as a single user. It has no concept of per-user settings You probably need to read the sql

RE: Server overload, queuing for SA possible?

2009-03-24 Thread Bowie Bailey
Brian J. Murrell wrote: On Tue, 2009-03-24 at 08:10 -0500, Bowie Bailey wrote: Your assessment sounds right to me. I would make two suggestions. 1) Memory is cheap these days. Add some more RAM. That's a mitigation strategy, yes, but it doesn't really answer OP's question about

spam assassin: default scores for URIBL_.._SURBL seem low to me

2009-03-24 Thread Dennis German
It seems to me that the default score of from 1.2 to 1.9, for messages originating from URIs which are Black listed in any of the various JP, AB, OB, PH, SC, ... lists, should be significantly higher, perhaps nearly the default required score of 5.0 Some information is at

Re: spam assassin: default scores for URIBL_.._SURBL seem low to me

2009-03-24 Thread John Hardin
On Tue, 24 Mar 2009, Dennis German wrote: It seems to me that the default score of from 1.2 to 1.9, for messages originating from URIs which are Black listed in any of the various JP, AB, OB, PH, SC, ... lists, should be significantly higher, perhaps nearly the default required score of 5.0

Re: ruleset

2009-03-24 Thread Matt Kettler
JC Putter wrote: where can i find more rulesets? using openprotect sare rules and sought rulesets That's about all there are... A few folks have odds and ends rules posted on their webpages/blogs/etc, but they're of mixed quality. Is there a particular reason your looking for more rulesets?

Re: Using SpamAssassin for just the Bayesian filtering?

2009-03-24 Thread Benny Pedersen
On Tue, March 24, 2009 01:54, mouss wrote: if you want to fight spam, ask open questions. SA is a good filter. Bayes isn't as perfect as you might think. reminds me of 3660 secs for one hour :) -- http://localhost/ 100% uptime and 100% mirrored :)

Re: What is AWL: _Average-Whitelister_....

2009-03-24 Thread Linda Walsh
John Hardin wrote: What is AWL rule? Why it gives so different amount of points? Auto Whitelist is a misleading name. It is actually a score averager. Since the points it applies are based on the historical scoring from that sender, the score will vary by who the sender is and when the

Re: Spam Assassin White List

2009-03-24 Thread Benny Pedersen
On Tue, March 24, 2009 03:34, dsh979 wrote: blacklist_from *...@blacklist1.com blacklist_from *...@blacklist2.com blacklist_from *...@blacklist3.com required_score 100 whitelist_from *...@whitelist1.com whitelist_from *...@whitelist2.com whitelist_from *...@whitelist3.com forged senders

Spam from windows live

2009-03-24 Thread jcputter
i am receiving spam all the time from windows live accounts, spamassassin doesnt even have one hit.. i am using sought rule with openprotects sare rules with dcc,pyzor,razor2 and iXhash. i create a rule to stop spam containing windows live spaces but spam like this one doesnt even get a hit.

Re: Spam Assassin White List

2009-03-24 Thread RW
On Wed, 25 Mar 2009 01:35:53 +0100 (CET) Benny Pedersen m...@junc.org wrote: On Tue, March 24, 2009 03:34, dsh979 wrote: whitelist_from *...@whitelist3.com forged senders welcome :) hope *_from will be removed in next sa, its the badest check in current sa of all tests :/ change

Re: Spam from windows live

2009-03-24 Thread Benny Pedersen
On Wed, March 25, 2009 01:59, jcput...@centreweb.co.za wrote: i am receiving spam all the time from windows live accounts, spamassassin doesnt even have one hit.. i am using sought rule with openprotects sare rules with dcc,pyzor,razor2 and iXhash. i create a rule to stop spam containing

New kind of spam

2009-03-24 Thread Jack Raats
Today I received two messages with a kinds of new(?) spam. The messages, html ones, contained the word viagra made by colouring cells in a table. The message also contained a link to a blog (live.com). The rest of the message contained a text to mislead the bayes filtering. How to stop these