Re: Yet another thread about AWL

2012-02-22 Thread Antonio Gutiérrez Mayoral
Thank you all for your advices. I have checked the Maia DB (table awl) and I have a lot of records mailer-daemon%.ru with a negative scores. In conclusion, I have a lot of spam scoring between 0..5 (2.5, 2.8, etc) but not been considered spam. So, I think that deleting this records from the DB

Re: Yet another thread about AWL

2012-02-22 Thread Benny Pedersen
Den 2012-02-22 09:46, Antonio Gutiérrez Mayoral skrev: What do you think about that? i dont think

Re: Yet another thread about AWL

2012-02-22 Thread Antonio Gutiérrez Mayoral
2012/2/21 Bowie Bailey bowie_bai...@buc.com $ spamassassin --remove-addr-from-whitelist u...@example.com -- Bowie Seems that it's not working for me. I have called spamassassin --remove-addr-from-whitelist but row is still on the MySQL database... cmsa1:/tmp # spamassassin

Re: Yet another thread about AWL

2012-02-22 Thread Benny Pedersen
Den 2012-02-22 10:17, Antonio Gutiérrez Mayoral skrev: 2012/2/21 Bowie Bailey bowie_bai...@buc.com $ spamassassin --remove-addr-from-whitelist u...@example.com cmsa1:/tmp # spamassassin --remove-addr-from-whitelist spamassassin -R spammsg.file sa-learn --spam --showdots spammsg.file do

Re: Yet another thread about AWL

2012-02-22 Thread Antonio Gutiérrez Mayoral
Im afraid that it doesnt anything :-( cmsa1:/tmp # spamassassin -R foo.dat SpamAssassin auto-whitelist: removing address: xx...@zz.es SpamAssassin auto-whitelist: removing address: mailer-dae...@relay.hostingconsult.ru SpamAssassin auto-whitelist: removing address: m...@checklicense.ru

Re: Yet another thread about AWL

2012-02-22 Thread Michael Scheidell
On 2/22/12 5:14 AM, Antonio Gutiérrez Mayoral wrote: But in the MySQL shows up the record... usernameemailipcount totscore vscan mailer-dae...@relay.hostingconsult.ru mailto:mailer-dae...@relay.hostingconsult.ru 194.587 -2.393 disable AWL. it is

Re: Yet another thread about AWL

2012-02-22 Thread Antonio Gutiérrez Mayoral
Now, Im very confused. I have configured to NOT Use AWL. # Auto-Whitelist configuration # Deshabilitar Auto-whitelist use_auto_whitelist 0 in /etc/mail/spamassassin/local.cf I have checked with spamassassin --lint the config and restart spamd. I am still seeing AWL triggered on the amavis

Re: Yet another thread about AWL

2012-02-22 Thread Duane Hill
On Wednesday, February 22, 2012 at 12:36:31 UTC, aguti...@gmail.com confabulated: Now, Im very confused. I have configured to NOT Use AWL. # Auto-Whitelist configuration # Deshabilitar Auto-whitelist use_auto_whitelist 0 in /etc/mail/spamassassin/local.cf I have checked with

Re: Yet another thread about AWL

2012-02-22 Thread Antonio Gutiérrez Mayoral
I have tried in two ways: 1) commenting out AWL loadplugin line in v310.pre, restarting spamd. Amavis log is showing that AWL rules are still triggered. 2) commenting out AWL loadplugin line in v310.pre, and including use_auto_whitelist 0 in local.cf. spamassassin --lint produces an error.

Re: Yet another thread about AWL

2012-02-22 Thread Antonio Gutiérrez Mayoral
I have just discovered that I have a .spamassassin directory under /var/spool/amavis/, the home directory of the vscan user (who is running amavis and call SA). Under this directory are two files, auto-whitelist and user_prefs. Maybe user_prefs file are overriding local.cf ? All settings in

Re: Yet another thread about AWL

2012-02-22 Thread Michael Scheidell
On 2/22/12 7:36 AM, Antonio Gutiérrez Mayoral wrote: I have checked with spamassassin --lint the config and restart spamd. I am still seeing AWL triggered on the amavis log: and, you don't use spamd with amavisd-new. -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 *| *SECNAP

Re: Yet another thread about AWL

2012-02-22 Thread Duane Hill
On Wednesday, February 22, 2012 at 13:04:31 UTC, aguti...@gmail.com confabulated: I have tried in two ways: 1) commenting out AWL loadplugin line in v310.pre, restarting spamd. Amavis log is showing that AWL rules are still triggered. 2) commenting out AWL loadplugin line in v310.pre, and

Re: Yet another thread about AWL

2012-02-22 Thread Antonio Gutiérrez Mayoral
Oh, thank you! I though that restarting spamd was sufficient. 2012/2/22 Duane Hill duih...@gmail.com On Wednesday, February 22, 2012 at 13:04:31 UTC, agutierr@gmail.comconfabulated: I have tried in two ways: 1) commenting out AWL loadplugin line in v310.pre, restarting spamd. Amavis

Re: Yet another thread about AWL

2012-02-22 Thread Michael Scheidell
On 2/22/12 8:17 AM, Antonio Gutiérrez Mayoral wrote: Oh, thank you! I though that restarting spamd was sufficient. you don't run spamd at all with amavisd-new. just wasting ram/cpu/swap. -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 *| *SECNAP Network Security Corporation *

Re: Yet another thread about AWL

2012-02-22 Thread Antonio Gutiérrez Mayoral
Ok, after restarting amavisd-new its working without AWL plugin. Thank you all for your replies. Im going to try a while without AWL to see results. Thank you so much. Antonio. 2012/2/22 Michael Scheidell michael.scheid...@secnap.com On 2/22/12 8:17 AM, Antonio Gutiérrez Mayoral wrote: Oh,

Yet another thread about AWL

2012-02-21 Thread Antonio Gutiérrez Mayoral
Hi all! I'm afraid this is yet another thread about Auto white lists module :-( Sorry if this question is yet solved on the list. I have a lot of Spam and backscatter throwing high spam score on my actual spam assassin system (postfix, spamassassin with amavisd-new and Maia). Tracing these

Re: Yet another thread about AWL

2012-02-21 Thread Michael Scheidell
On 2/21/12 10:11 AM, Antonio Gutiérrez Mayoral wrote: rule AWL is triggered with a negative score. Reading the documentation I think that the problem was a wrong auto-learn thresold for HAM, the first week the system starts to work. The initial thresold for Ham was -0.001 and I think that this

Re: Yet another thread about AWL

2012-02-21 Thread Antonio Gutiérrez Mayoral
Hi Michael, thank you for your quick reply. For example, this is a report for a mail tagged as non spam: Content analysis details: (3.4 points, 5.0 required) pts rule name description -- -- 0.0 BAYES_50

Re: Yet another thread about AWL

2012-02-21 Thread Duane Hill
On Tuesday, February 21, 2012 at 15:18:30 UTC, michael.scheid...@secnap.com confabulated: On 2/21/12 10:11 AM, Antonio Gutiérrez Mayoral wrote: rule AWL is triggered with a negative score. Reading the documentation I think that the problem was a wrong auto-learn thresold for HAM, the first

Re: Yet another thread about AWL

2012-02-21 Thread Bowie Bailey
On 2/21/2012 10:11 AM, Antonio Gutiérrez Mayoral wrote: Hi all! I'm afraid this is yet another thread about Auto white lists module :-( Sorry if this question is yet solved on the list. I have a lot of Spam and backscatter throwing high spam score on my actual spam assassin system

Re: Yet another thread about AWL

2012-02-21 Thread Antonio Gutiérrez Mayoral
I know that Bayes and AWL are different thinks, but I think that if your non-spam thresold is low (-0.001 in my case) mails classified are non spam could be false positives. [1] It doesnt affect to the AWL table? I think that AWL has auto-learn... [8409] dbg: auto-whitelist: sql-based

Re: Yet another thread about AWL

2012-02-21 Thread Bowie Bailey
On 2/21/2012 10:42 AM, Antonio Gutiérrez Mayoral wrote: I know that Bayes and AWL are different thinks, but I think that if your non-spam thresold is low (-0.001 in my case) mails classified are non spam could be false positives. [1] It doesnt affect to the AWL table? I think that AWL has

Re: Yet another thread about AWL

2012-02-21 Thread Antonio Gutiérrez Mayoral
So, if I have a lot of spam getting negative score from AWL, the problem was that in previous moment these spam was not classified as spam (getting high score) and in conclusion AWL understand that is a legal sender? Sorry if this cuestion is trivial :-( I am not pretty sure if I am understanding

Re: Yet another thread about AWL

2012-02-21 Thread Bowie Bailey
On 2/21/2012 11:21 AM, Antonio Gutiérrez Mayoral wrote: So, if I have a lot of spam getting negative score from AWL, the problem was that in previous moment these spam was not classified as spam (getting high score) and in conclusion AWL understand that is a legal sender? Sorry if this

Re: Yet another thread about AWL

2012-02-21 Thread Benny Pedersen
Den 2012-02-21 16:28, Antonio Gutiérrez Mayoral skrev:  0.0 BAYES_50               BODY: Bayesian spam probability is sa-learn --spam from all that bounce msgs could help -4.6 AWL                    AWL: From: address is in the AWL is not a whitelist with static scores for ham and spam,

Re: Yet another thread about AWL

2012-02-21 Thread Benny Pedersen
Den 2012-02-21 16:29, Duane Hill skrev: http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Plugin_AWL.html 3.3.x have it enabled so this url is okay :-) use_auto_whitelist ( 0 | 1 ) (default: 1) this line is to disable it pr user in user_prefs, the plugin is still enabled

Re: Yet another thread about AWL

2012-02-21 Thread Benny Pedersen
Den 2012-02-21 16:42, Antonio Gutiérrez Mayoral skrev: [8409] dbg: auto-whitelist: sql-based get_addr_entry: found existing entry for mailer-daemon@X|ip=XX.YY ipv4/16 mask is in use, try change it to ipv4/24 or ipv4/32 So, its AWL deprecated? Is better solution remove the addresses from

Re: Yet another thread about AWL

2012-02-21 Thread Michael Scheidell
On 2/21/12 4:09 PM, Benny Pedersen wrote: Den 2012-02-21 16:29, Duane Hill skrev: http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Plugin_AWL.html 3.3.x have it enabled so this url is okay :-) use_auto_whitelist ( 0 | 1 ) (default: 1) this line is to disable it pr user

Re: Yet another thread about AWL

2012-02-21 Thread Duane Hill
On Tuesday, February 21, 2012 at 21:25:08 UTC, michael.scheid...@secnap.com confabulated: On 2/21/12 4:09 PM, Benny Pedersen wrote: Den 2012-02-21 16:29, Duane Hill skrev: http://spamassassin.apache.org/full/3.3.x/doc/Mail_SpamAssassin_Plugin_AWL.html 3.3.x have it enabled so this url