Re: Multiple test failures

2024-04-24 Thread Sidney Markowitz
usr  0.22 sys + 280.71 cusr 26.08 csys = 308.25 CPU) Result: FAIL Failed 1/217 test programs. 0/3765 subtests failed. make: *** [test_dynamic] Error 255 Tuc On Tue, Apr 9, 2024 at 4:03 PM Sidney Markowitz mailto:sid...@sidney.com>> wrote: Scott Ellentuch wr

Re: SA 4.0.1 - DMARC plugin

2024-04-20 Thread Sidney Markowitz
which installs perl 5.16. Upgrading to a more recent perl will make the problem go away, or updating SpamAssassin from trunk, or for a minimal change, apply the patch that I committed to close the bug at https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8245 Sidney Sidney Markowitz wrote

Re: SA 4.0.1 - DMARC plugin

2024-04-19 Thread Sidney Markowitz
As a practical matter, the message appears to be a warning in the log, but the results would be correct, so it can be ignored. Sidney Markowitz wrote on 20/04/24 9:55 am: I've open a bug in which I noted my suspicion of what is happening. https://bz.apache.org/SpamAssassin/show_bug.cgi?id

Re: SA 4.0.1 - DMARC plugin

2024-04-19 Thread Sidney Markowitz
I've open a bug in which I noted my suspicion of what is happening. https://bz.apache.org/SpamAssassin/show_bug.cgi?id=8245 If you have a sanitized email that consistently causes this to happen, please attach it to the bug report. As I said in the bug report, I suspect that an email that

Re: Multiple test failures

2024-04-09 Thread Sidney Markowitz
Scott Ellentuch wrote on 10/04/24 5:15 am: Apologies, but I don't understand. I am running "make test" as the AWS user "ec2-user" when getting these errors. Are you saying that its an acceptable error right now, and I can just do the "sudo make install"? If you ran "make test" as user

Re: Multiple test failures

2024-04-05 Thread Sidney Markowitz
Scott Ellentuch wrote on 4/04/24 9:43 am: File attached. However, I don't see any smoking gun. I've verified the problem. I ran sudo make test in a directory tree in /tmp with world r-x access, and got the error in t/spamd_client.t as well as in t/spamc_optL.t. I don't know why you didn't

Re: Multiple test failures

2024-04-04 Thread Sidney Markowitz
Loren Wilton wrote on 4/04/24 9:26 pm: Would it be worth adding some sort of test for this kind of thing I started to look at where in SATest.pm it ought to go, and I found https://bz.apache.org/SpamAssassin/show_bug.cgi?id=5529 I think from the comments I left there 17 years ago that is is

Re: Multiple test failures

2024-04-03 Thread Sidney Markowitz
I haven't had a chance yet to read this thread carefully, but spamd when run as root in tests will, at least in some cases, set itself to run as user "nobody". If you do that in a subdirectory of your non-nobody user's HOME, the usual permission configuration will not provide read access to

[ANNOUNCE] Apache SpamAssassin 4.0.1 available

2024-03-29 Thread Sidney Markowitz
cial users to easily deploy Apache software; the Foundation's intellectual property framework limits the legal exposure of its 2,500+ contributors. For more information, visit https://www.apache.org/ -- Sidney Markowitz Chair, Apache SpamAssassin PMC sid...@apache.org

Re: Doesn't spamc/spamd need block/welcomeliist support???

2024-03-21 Thread Sidney Markowitz
Bill Cole wrote on 22/03/24 8:36 am: It seems to me that it would require extension of the spamc/spamd protocol and cargo-culting some code from spamassassin to spamd. Doesn't look like much cargo-culting to do. The spamassassin script just calls a function in Mail::SpamAssassin.pm for each

Re: Getting error 74

2023-11-01 Thread Sidney Markowitz
Cecil Westerhof wrote on 2/11/23 4:02 am: And when I run that from the command line I get: gpg: WARNING: unsafe ownership on homedir '/etc/spamassassin/sa-update-keys' That is referring to the owner of the directory /etc/spamassassin/sa-update-keys not the permissions. ls -al

Re: DecodeShortURL fails with postgresql

2023-01-25 Thread Sidney Markowitz
Benny Pedersen wrote on 19/01/23 10:47 +13:00: https://github.com/apache/spamassassin/blob/trunk/lib/Mail/SpamAssassin/Plugin/DecodeShortURLs.pm#L594-L601 only me testing postgresql ? As I discovered from a recently discovered postgres-only bug, there must not have been much use of postgres

Re: awl postgresql

2023-01-04 Thread Sidney Markowitz
Sidney Markowitz wrote on 4/01/23 8:47 pm: There's a typo, which must just be in your email since postgres won't accept it, that should be =+ not += I am not expert it SQL :) Further testing reveals that there is no auto-increment operator in postgres or SQLite SQL, neither += nor

Re: awl postgresql

2023-01-03 Thread Sidney Markowitz
Benny Pedersen wrote on 4/01/23 11:00 am: https://github.com/apache/spamassassin/blob/trunk/lib/Mail/SpamAssassin/SQLBasedAddrList.pm#L289 $sql .= " ON CONFLICT (username, email, signedby, ip) DO UPDATE set msgcount = ?, totscore += ?"; confirm is from my side needed it would fix it, i atleast

Re: awl postgresql

2023-01-03 Thread Sidney Markowitz
Ángel wrote on 4/01/23 2:59 pm: On 2023-01-04 at 10:24 +1300, Sidney Markowitz wrote: If anyone else reading this is using 4.0.0 and postgres for AWL, are you seeing or not seeing this problem? I can easily reproduce this with a quick install and manually providing the SQL from the code

Re: awl postgresql

2023-01-03 Thread Sidney Markowitz
Benny Pedersen wrote on 4/01/23 3:19 am: https://github.com/apache/spamassassin/blob/trunk/lib/Mail/SpamAssassin/SQLBasedAddrList.pm#L310 imho this line I agree, but I don't see from looking at that line how the SQL query can have more than one table involved, and from the description of

Re: awl postgresql

2023-01-03 Thread Sidney Markowitz
Benny Pedersen wrote on 3/01/23 2:21 pm: https://github.com/apache/spamassassin/blob/trunk/sql/awl_pg.sql#L6 https://www.irccloud.com/pastebin/wRkT4AeI/awl.sql how to solve it ? The sql error means that there is more than one table in the sql statement that has a column named "totscore"

Re: 4.0.0 dnsbl_subtests.t test failures

2022-12-25 Thread Sidney Markowitz
Philippe Chaintreuil via users wrote on 26/12/22 6:27 am: I'm getting test failures for the dnsbl_subtests.t. Figured I'd check here before filing a bug. I'm running Spam Assassin 4.0.0 on Gentoo Linux. Perl 5.36.0. Test output:

[ANNOUNCE] Apache SpamAssassin 4.0.0 available

2022-12-17 Thread Sidney Markowitz
lectual property framework limits the legal exposure of its 2,500+ contributors. For more information, visit https://www.apache.org/ -- Sidney Markowitz Chair, Apache SpamAssassin PMC sid...@apache.org

Re: New Release Candidate 4.0.0-rc4 Testers Needed

2022-12-11 Thread Sidney Markowitz
Greg Troxel wrote on 12/12/22 4:47 am: UPGRADE says: https://wiki.apache.org/spamassassin/WelcomelistBlocklist (Bug 7826) 1) I find that URL gets me "page not found. We missed creating that wiki page when bug 7826 was handled. I have just created a minimal page so the URL no longer

New Release Candidate 4.0.0-rc4 Testers Needed

2022-12-07 Thread Sidney Markowitz
, Sidney Markowitz Chair, Apache SpamAssassin PMC sid...@apache.org

New Release Candidate 4.0.0-rc1 Testers Needed

2022-08-31 Thread Sidney Markowitz
. https://lists.apache.org/thread/cqhpzy9pp26mq7bzw4jcvzx6swop6lcg Thanks, Sidney Markowitz Chair, Apache SpamAssassin PMC sid...@apache.org

Request for participation in the 2022 ASF Community Survey

2022-08-24 Thread Sidney Markowitz
The Apache Software Foundation PMCs have been asked to forward this request to their user and dev communities via their mailing lists: Hello everyone, The 2022 ASF Community Survey is looking to gather scientific data that allows us to understand our community better, both in its demographic

Re: heads up for false uribl black hits

2021-05-20 Thread Sidney Markowitz
Benny Pedersen wrote on 21/05/21 4:59 am: only place i find it https://spameatingmonkey.com/lookup/libehat Spameatingmonkey lists it as "This domain was first registered within the last 30 days Listings automatically expire in less than 30 days" It was registered on April 23. Maybe

Re: heads up for false uribl black hits

2021-05-20 Thread Sidney Markowitz
John Hardin wrote on 21/05/21 2:28 am: Odd, the URIBL website lookup tool says libera (.chat) is not listed, and didn't yesterday when you first posted this. https://admin.uribl.com/ Lookup Results (obfuscated just in case) Domain Status libera_chat NOT Listed on URIBL

Re: heads up for false uribl black hits

2021-05-19 Thread Sidney Markowitz
Bill Cole wrote on 20/05/21 1:58 pm: The new domain was NOT listed in any RHSBL at 13:55 UTC. The first of its four ip addresses, 185.199.108.153, is on sbl.spamhaus.org but not the domain name. That is the only match that shows up in the list of RBLs checked at ant-abuse.org Multi-RBL

Re: How do you set nomail for the List?

2021-04-22 Thread Sidney Markowitz
Don Saklad wrote on 20/04/21 3:36 am: How do you set nomail for the List? I can't tell if any of the replies to your query actually answered your question because of the various interpretations of "nomail" and the way the thread expanded into a discussion of other mailing list policies. If

ANNOUNCE: Apache SpamAssassin 3.4.6 available

2021-04-12 Thread Sidney Markowitz
re information, visit https://www.apache.org/ -- Sidney Markowitz Chair, Apache SpamAssassin PMC sid...@apache.org

[CVE-2020-1946] Apache SpamAssassin malicious rule configuration (.cf) files can be configured to run system commands

2021-03-24 Thread Sidney Markowitz
team, please e-mail security at spamassassin.apache.org. For more information about Apache SpamAssassin, visit the https://spamassassin.apache.org/ web site. Apache SpamAssassin Security Team [1]: https://s.apache.org/ng9u9 [2]: https://cve.mitre.org/cgi-bin/cvename.cgi?name=2020-1946 -- Sidney

ANNOUNCE: Apache SpamAssassin 3.4.5 available

2021-03-24 Thread Sidney Markowitz
agmatic Apache License enables individual and commercial users to easily deploy Apache software; the Foundation's intellectual property framework limits the legal exposure of its 2,500+ contributors. For more information, visit https://www.apache.org/ -- Sidney Markowitz Chair, Apache SpamAs

Re: Spamassassin 3.4.4 on centos7

2020-12-11 Thread Sidney Markowitz
Niamh Holding wrote on 11/12/20 11:10 pm: Hello Sidney, Thursday, December 10, 2020, 11:45:34 PM, you wrote: SM> If you got this rpm from an unofficial source who perhaps built it from the source rpm for Spamassassin 3.4.4 in the Fedora repo, talk to whoever did that about how they built

Re: Spamassassin 3.4.4 on centos7

2020-12-10 Thread Sidney Markowitz
Niamh Holding wrote on 10/12/20 12:01 am: rpm -ivh spamassassin-3.4.4-1.el7.centos.x86_64.rpm error: Failed dependencies: perl(BSD::Resource) is needed by spamassassin-3.4.4-1.el7.centos.x86_64 perl(Net::CIDR::Lite) is needed by spamassassin-3.4.4-1.el7.centos.x86_64 1. The

Apache SpamAssassin Looking for Student Developers and Project Ideas for Google Summer of Code 2019

2019-03-13 Thread Sidney Markowitz
: If there are student developers posting on users@ or dev@, please take extra care to guide them and be nice! More info: https://summerofcode.withgoogle.com/ and (READ THIS ONE BEFORE APPLYING) https://community.apache.org/gsoc.html Sidney Markowitz sid...@apache.org Chair, Apache SpamAssassin

Re: Make test fails on macOS High Sierra - help needed

2018-09-10 Thread Sidney Markowitz
Daniel J. Luke wrote on 11/09/18 5:58 AM: I use this (with a perl I built myself outside of macports) and I can confirm it works. Cool. Also, FYI, I did a quick test for the DB_File problem in the latest beta of Mac OS Mojave with the system perl and it did not have this bug. I haven't had

Re: Make test fails on macOS High Sierra - help needed

2018-09-08 Thread Sidney Markowitz
This is really old, but it was never answered satisfactorily and it is what shows up in a Google search for the problem. I'm posting this solution to make sure it shows up in future searches. Here is the solution I just found and added to the Apache SpamAssassin wiki

Tapping the microphone

2018-07-11 Thread Sidney Markowitz
Testing, testing, is this on? Sorry for the noise, checking if the users@ list is working since it has no messages for a while. Bcc'd to the moderators.

REMINDER - TAC Applications closes in 2 weeks for ACNA Montreal

2018-04-17 Thread Sidney Markowitz
[Forwarded by the PMC on request of the Travel Assistance Committee] Reminder that travel assistance applications for ApacheCon NA 2018 are still open but only for another 2 weeks! Please get your applications in NOW. We will be supporting ApacheCon NA Montréal, Canada on 24th - 29th September

ApacheCon NA 2018 Travel Assistance Applications now open!

2018-02-14 Thread Sidney Markowitz
Hi everyone, The Travel Assistance Committee has asked the various Apache Project Management Committees to forward the following announcement to the user and dev mailing lists: --- The Travel Assistance Committee (TAC) are pleased to announce that travel assistance

Apache SpamAssassin Looking for Student Developers and Project ,Ideas for Google Summer of Code 2018

2018-01-19 Thread Sidney Markowitz
! More info: https://summerofcode.withgoogle.com/ and (READ THIS ONE BEFORE APPLYING) https://community.apache.org/gsoc.html Sidney Markowitz sid...@apache.org Chair, Apache SpamAssassin Project Management Committee

Mass check and rule updates - Down for machine migration

2017-03-15 Thread Sidney Markowitz
machine right now, just the assurance that the work is in progress. I'll post more details when I get them. Regards, Sidney Markowitz Chair, Apache SpamAssassin Project Management Committee

Re: The quality of the squidblacklist.org blacklists

2016-08-23 Thread Sidney Markowitz
st. That goes for those of you who know you're right and for everyone not you who is wrong. Thank you, Sidney Markowitz Chair, Apache SpamAssassin Project Management Committee and mailing list moderator

Re: Matching infinite sets

2016-08-21 Thread Sidney Markowitz
Dianne Skoll wrote on 22/08/16 8:56 AM: > And... why can't a set contain itself? > It can't in standard modern set theory (ZFC), through the foundation axioms, also known as the axiom of regularity https://en.wikipedia.org/wiki/Axiom_of_regularity which is a formulation that allows set theory

Re: Mailing list ban evasion, ghost accounts

2016-08-16 Thread Sidney Markowitz
ver well intentioned it may be, doxing to the public list is always a violation of the Apache Software Foundation Code of Conduct https://www.apache.org/foundation/policies/conduct Sidney Markowitz Chair, Apache SpamAssassin PMC and mailing list moderator

Moderation action on the mailing list

2016-08-05 Thread Sidney Markowitz
or answer regarding Apache SpamAssassin. Thank you, Sidney Markowitz Chair, Apache SpamAssassin PMC

Re: USER_IN_WHITELIST

2016-07-07 Thread Sidney Markowitz
Lorenzo Thurman wrote on 8/07/16 9:26 AM: > Thanks for the info. Does anyone know how I can use whitelistfrom_rcvd? I > can't find any clear answers via Google. > Excuse my typo for the correct spelling whitelist_from_rcvd. To use it, look at the legitimate emails that you want to whitelist

Re: USER_IN_WHITELIST

2016-07-07 Thread Sidney Markowitz
Lorenzo Thurman wrote on 8/07/16 3:03 AM: >> On Jul 7, 2016, at 8:14 AM, Antony Stone >> wrote: >> \.microsoft\.com$ will match anything ending in ".microsoft.com" RW already pointed this out, but to make sure nobody reading this thread misses it, the

Re: whitelist issues with sprintpcs.com

2016-07-03 Thread Sidney Markowitz
Benny Pedersen wrote on 4/07/16 9:47 AM: > On 2016-07-03 23:34, Groach wrote: >> On 03/07/2016 23:29, Reindl Harald wrote: It turns out that this mailing list software gives me only a bigger hammer than I wanted to use. I cannot place individuals under moderation so I can review their posts

Re: whitelist issues with sprintpcs.com

2016-07-03 Thread Sidney Markowitz
Alex wrote on 4/07/16 6:48 AM: > Hi, > > On Sun, Jul 3, 2016 at 2:29 PM, Benny Pedersen wrote: >> On 2016-07-03 20:18, Alex wrote: >> >>> whitelist_from *@pm.sprintpcs.com >>> >>> does not work.. Why? It's because the mail has a Resent-From which overrides any other from type

Re: Catching well directed spear phishing messages

2016-06-28 Thread Sidney Markowitz
David Jones wrote on 29/06/16 2:13 AM: >> From: RW >> That wont work in this example because nothing has actually been >> spoofed. > > Exactly. If I search the Internet for the CEO/CIO/CTO/etc of a company > and send and email from my domain but make the displayed

Re: Catching well directed spear phishing messages

2016-06-28 Thread Sidney Markowitz
David Jones wrote on 29/06/16 12:46 AM: > This is pure social engineering that can't be stopped by technology. The AP > dept has to have proper safeguards and out of band validation (i.e. phone > call to the "Recognized Name"). No, technology can help. The IT department sets up the mail client

Re: Catching well directed spear phishing messages

2016-06-28 Thread Sidney Markowitz
Ram wrote on 28/06/16 7:19 PM: > > > On Tuesday 28 June 2016 12:03 PM, Raymond Dijkxhoorn wrote: >> Hai! >> >> I dont understand why they would match your spf record either. Are they >> sended out by a IP adres you 'approved' ?? > SPF does not fail , because they use a different envelope

Re: Catching well directed spear phishing messages

2016-06-27 Thread Sidney Markowitz
Ram wrote on 28/06/16 3:10 AM: > > Here is the sample > > > I just redacted the actual recpient email id and name > > > Return-Path: This isn't a SpamAssassin problem, but it is a problem that you can use SpamAssassin as a tool to help solve. If your company's

Re: why does that mail not get any bayes-classification

2016-06-11 Thread Sidney Markowitz
Reindl Harald wrote on 12/06/16 9:31 AM: > > headers don't help when you have a "spamd: result" log-line with a ton Ah, finally I understand what you are trying to do! You analyze the spamd result log lines, and they currently have two deficiencies: 1) They do not distinguish between Bayes

Re: why does that mail not get any bayes-classification

2016-06-11 Thread Sidney Markowitz
Reindl Harald wrote on 12/06/16 9:08 AM: > > and it's not worth to discuss since the *real* solution would be a > "BAYES_NOTOKS" which would appear *everywhere* and clearly explain why > no other BAYES_XX is present I can't argue with that. Without the ability to make it a rule or a meta-rule

Re: why does that mail not get any bayes-classification

2016-06-11 Thread Sidney Markowitz
Reindl Harald wrote on 12/06/16 8:37 AM: > > it is not part of the report itself while tags, scores and descriptions > are - a report is something like this: what you showed is defined in the configuration file using "report". Those just happen to be the last lines of it in the default

Re: why does that mail not get any bayes-classification

2016-06-11 Thread Sidney Markowitz
Reindl Harald wrote on 12/06/16 4:44 AM: > look above "sadly that works only for mail-headers - but don't appear in > the logs" > Oh, you mentioned spamc -R before and it does appear in that output. I got that confused with the spamd logs - You're right, I don't see them there. Sidney

Re: why does that mail not get any bayes-classification

2016-06-11 Thread Sidney Markowitz
Reindl Harald wrote on 12/06/16 2:13 AM: > sadly that works only for mail-headers - but don't appear in the logs I just tried adding this to my local configuration, not pretty, just to see what it would do report tag values sender _SENDERDOMAIN_ author _AUTHORDOMAIN_ bayesh _BAYESTCHAMMY_

Re: why does that mail not get any bayes-classification

2016-06-11 Thread Sidney Markowitz
Reindl Harald wrote on 12/06/16 2:13 AM: > sadly that works only for mail-headers - but don't appear in the logs > nor in a report generated with "/usr/bin/spamc -R" over a webinterface > which proceeds uploads of eml-files :-( Yes I see how that could be useful. It might work if you define a

Re: why does that mail not get any bayes-classification

2016-06-11 Thread Sidney Markowitz
Reindl Harald wrote on 12/06/16 1:04 AM: > output of "spamassassin -D < ignored_by_bayes_stripped.eml" attached See this line in that output: Jun 11 14:47:00.510 [5188] dbg: bayes: cannot use bayes on this message; not enough usable tokens found > i would expect a bayes result in any case

Re: Email with attachment caused 100% CPU usage.

2016-06-10 Thread Sidney Markowitz
Merijn van den Kroonenberg wrote on 10/06/16 10:17 PM: > What does this mean, can still a single operation take more than this > time_limit? There is a fundamental difficulty in perl that the built-in timer alarm facility cannot always interrupt the built-in regular expression matching facility.

Re: Advice: why one relay evaluated and not the other

2016-06-09 Thread Sidney Markowitz
jimimaseye wrote on 10/06/16 1:50 AM: > CONCLUSION: it was working as the book says (even though the book is not > clear WHY the book says what it says). It's been a very long while since I worked with this code and I have to kind of twist my mind up funny to keep it in my head all at once, but

Moderation on this mailing list

2016-06-08 Thread Sidney Markowitz
I'm one of the moderators of this mailing list. I'm also one of those thin-skinned "hypersensible" people who don't want to see rudeness and insults on the list. However I don't want to have to judge whether one person is being too rude to bear and another not quite, or to weigh one person's

Re: SA team lambasted in RISKS Digest

2010-03-05 Thread Sidney Markowitz
Justin Mason wrote: Anyone care to craft a response? I think we should. bonus points for including the obligatory comp.risks tagline I submitted a reply right after the RISKS Digest issue came out. The issue after that indicated that there was a backlog of submissions to RISKS, so maybe

Re: 3.2.1 is a failure?

2007-06-15 Thread Sidney Markowitz
Jari Fredriksson wrote, On 15/6/07 7:53 AM: Both installation tries were via cpan, and here is the result. That looks like bug 5510, about failing tests when they are run s root, which breaks CPAN installation in the common setup in which the build and test are run as root. I think you can

Re: help? error: spamd: unable to determine home directory for user

2005-09-20 Thread Sidney Markowitz
OpenMacNews wrote: i'd tried setting an alternative directory for any given user i was exec'ing at with the -H option ... to no avail. same complaint :-S I looked at the source code in spamd. I had not read the man page documentation on -H carefully enough. It is used to set the $HOME

Re: help? error: spamd: unable to determine home directory for user

2005-09-20 Thread Sidney Markowitz
OpenMacNews wrote: plugins have configuration options? new news to me! They are merged in with the other options and documented in man Mail::SpamAssassin::Conf For example in that man page search for auto_whitelist_path which is the one you were having trouble with. Some of them can only be

Re: help? error: spamd: unable to determine home directory for user

2005-09-20 Thread Sidney Markowitz
OpenMacNews wrote: ah. fyi ( others who may be interested), no such reference to auto_whitelist_path in (my) man Mail::SpamAssassin::Conf I'm running svn trunk, so this could be a recent change in the doc that I didn't notice when it happened. -- sidney

Re: help? error: spamd: unable to determine home directory for user

2005-09-20 Thread Sidney Markowitz
OpenMacNews wrote: i'll update/refresh take a look! I think, but I'm not sure, that I have run into situations where just svn update ; make ; make install did not update the man pages. When working with svn trunk it is a good idea every so often to do a make distclean before building to