Re: which RDJ rulesets should I pickup?

2006-02-13 Thread jdow
From: Simon Leung [EMAIL PROTECTED] Hi there, I have found that there are many rulesets available at http://www.exit0.us/index.php?pagename=RulesDuJour. Should I add ALL of them in my TRUSTED_RULESETS or only need some of them will do the job? YMMV is the operative term here. YOU know how

Re: What do these messages with -D mean?

2006-02-13 Thread Michael W Cocke
On Sun, 12 Feb 2006 15:11:12 -0800, you wrote: I ran spamassassin -D and got the following in the debug output. Is this a problem? If so what should I do? [27299] dbg: bayes: no dbs present, cannot tie DB R/O: /var/spool/MIMEDefang/mimedefang-bayes_toks [27299] dbg: bayes: not scoring message,

Re: which RDJ rulesets should I pickup?

2006-02-13 Thread Loren Wilton
Should I add ALL of them in my TRUSTED_RULESETS or only need some of them will do the job? You definitely should NOT add ALL of the rulesets to your configuration! Some of the rulesets are 2.6x only. Some of them are 3.0.x only. Some of them are 3.1 only. At the very least you need to ONLY

Re: Two instances of spamd

2006-02-13 Thread Michael Monnerie
On Sonntag, 12. Februar 2006 20:59 Jan Krumsiek wrote: Is this really the same process with two threads? Run pstree -p mfg zmi -- // Michael Monnerie, Ing.BSc --- it-management Michael Monnerie // http://zmi.at Tel: 0660/4156531 Linux 2.6.11 // PGP Key: lynx -source

[no subject]

2006-02-13 Thread Marcos Manhanes
Hello for all, My SpamAssassin show me this messages somebody that means it ? [10272] warn: Argument n.nn isn't numeric in addition (+) at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf.pm line 251. [10272] warn: Argument n.nn isn't numeric in addition (+) at

Re:

2006-02-13 Thread Matt Kettler
Marcos Manhanes wrote: Hello for all, My SpamAssassin show me this messages somebody that means it ? [10272] warn: Argument n.nn isn't numeric in addition (+) at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/Conf.pm line 251. Generally that means you've got a configuration option

RES:

2006-02-13 Thread Marcos Manhanes
Can you help me to fix it ? -Mensagem original- De: Matt Kettler [mailto:[EMAIL PROTECTED] Enviada em: segunda-feira, 13 de fevereiro de 2006 10:38 Para: Marcos Manhanes Cc: spamassassin-users@incubator.apache.org Assunto: Re: Marcos Manhanes wrote: Hello for all, My SpamAssassin

Re: RES:

2006-02-13 Thread Matt Kettler
Marcos Manhanes wrote: Can you help me to fix it Well, I can't help you without seeing the problem.. Also, I don't even know what version of SpamAssassin you are using. All of my advice is assuming you are using SA 3.1.0. You can start by finding all your score commands. grep score

Re: Enabling per user rules in SQL db

2006-02-13 Thread Henry F. Camacho Jr
Don: SpamC does not look at the to: address. I just solved this problem in a thread earlier. Since I am using sendmail, I used the spamass-milter, and that has the ability to look at the to address and send it directly to spamd. If you want to have the userprefs loaded based on the to:

Re: RES:

2006-02-13 Thread Daryl C. W. O'Shea
Matt Kettler wrote: Marcos Manhanes wrote: Also, I don't even know what version of SpamAssassin you are using. All of my advice is assuming you are using SA 3.1.0. Gotta be SA 3.1.0. 3.0 and trunk moves that code a bit. You can start by finding all your score commands. grep score

RE:

2006-02-13 Thread Ed Russell
Have you tried to lint your rules? --- Talk is cheap since supply always exceeds demand. --- -Original Message- From: Marcos Manhanes [mailto:[EMAIL PROTECTED] Sent: Monday, February

WebRedirect Plugin Updated

2006-02-13 Thread Daryl C. W. O'Shea
An FYI for those interested... I've updated the WebRedirect Plugin [1] (for use with SpamAssassin 3.1) with changes I made around the end of December to allow the testing of any HTTP status code. The plugin now always includes a trailing slash (even when not present in the parsed URI) when

RES:

2006-02-13 Thread Marcos Manhanes
Friends, I'm running SpamAssassin version 3.1.0 with Perl version 5.8.0. It's a copy of the file Conf.pm ## Conf.pm # 245 # Set the actual scoreset values appropriately 246 for my $index (0..3) { 247 my $score = $relative ? 248

Re: Stock image woes

2006-02-13 Thread Kelson
wrote: Is anybody having any luck with the Stock spam that consists of an image and noise to through off bayes? Yeah. The new sare_stocks ruleset www.rulesemporium.org is pushing most of them over the threshold, and Bayes seems to be taking care of the rest. (In my experience, Bayes

_POSTAL isn't numeric ... /Conf.pm line 251

2006-02-13 Thread Tyler Nally
Hmmm. upgraded to SA 3.1.0 and I get this when performing a sa-learn: Argument _POSTAL isn't numeric in addition (+) at /usr/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/Conf.pm line 251 Is this a problem? Is there a fix? -- Tyler Nally [EMAIL PROTECTED]

Re: RES:

2006-02-13 Thread Matt Kettler
Marcos Manhanes wrote: Friends, I'm running SpamAssassin version 3.1.0 with Perl version 5.8.0. It's a copy of the file Conf.pm Ok, so it's DEFINITELY a score command.. So follow my advice with the grep statements from the previous email I posted from my comcast.net account.

Re: _POSTAL isn't numeric ... /Conf.pm line 251

2006-02-13 Thread Theo Van Dinter
On Mon, Feb 13, 2006 at 12:11:16PM -0500, Tyler Nally wrote: Argument _POSTAL isn't numeric in addition (+) at /usr/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/Conf.pm line 251 Is this a problem? Is there a fix? You have a bad config line somewhere. probably something like score RULE

Download new rules

2006-02-13 Thread Benjamin Adams
I'm looking for a website to download new rules for Spamassassin 3.1.0 Ben

RES: RES:

2006-02-13 Thread Marcos Manhanes
It information arrived to you ? ## Conf.pm # 245 # Set the actual scoreset values appropriately 246 for my $index (0..3) { 247 my $score = $relative ? 248 $self-{scoreset}-[$index]-{$rule} + $scores[$index] : 249

Re: _POSTAL isn't numeric ... /Conf.pm line 251

2006-02-13 Thread Tyler Nally
On Monday 13 February 2006 12:16 pm, Theo Van Dinter wrote: On Mon, Feb 13, 2006 at 12:11:16PM -0500, Tyler Nally wrote: Argument _POSTAL isn't numeric in addition (+) at /usr/lib/perl5/site_perl/5.8.6/Mail/SpamAssassin/Conf.pm line 251 Is this a problem? Is there a fix? You have a bad

Re: RES: RES:

2006-02-13 Thread Daryl C. W. O'Shea
Marcos Manhanes wrote: It information arrived to you ? It did, twice. Now do what Matt said and grep for n.nn in your config files, probably in /etc/mail/spamassassin Daryl

RES: Download new rules

2006-02-13 Thread Marcos Manhanes
This is my file of the configuration ### local.cf ## # Save spam messages as a message/rfc822 MIME attachment instead of # modifying the original message (0: off, 2: use text/plain instead) report_safe 1 # Set which networks or hosts

Spamassassin not scanning all emails

2006-02-13 Thread Jason Marshall
Good day! My Spamassassin worked for years without skipping any emails. Suddenly (and not coresponding to an upgrade) emails started showing up in my inbox without spamassassin headers. I call spamc via procmail. Spamassassin is v3.1.0, and I run spamd like this: /usr/bin/spamd -d

Re: Spamassassin not scanning all emails

2006-02-13 Thread Matt Kettler
Jason Marshall wrote: Good day! My Spamassassin worked for years without skipping any emails. Suddenly (and not coresponding to an upgrade) emails started showing up in my inbox without spamassassin headers. How big are the messages that aren't getting scanned? Over 250k? I call spamc

RES: RES: RES:

2006-02-13 Thread Marcos Manhanes
When I made it command not show nothing. But I think that some times ago I got some rules and when I made upgrade to new version it stop to worked. Did you see it's rules ? 20_porn.cf bogus-virus-warnings.cf chickenpox.cf evilrules.cf local.cf-new antidrug.cf br_rules.cf DomainDigits1.cf

Re: RES: RES:

2006-02-13 Thread Matt Kettler
Marcos Manhanes wrote: It information arrived to you ? I don't need your conf.pm. That just proves my assumption about your version was correct. I need your score statements from your config files. I need the output of these two commands: grep score /etc/mail/spamassassin/* grep score

Re: RES: RES: RES:

2006-02-13 Thread Matt Kettler
Marcos Manhanes wrote: When I made it command not show nothing. But I think that some times ago I got some rules and when I made upgrade to new version it stop to worked. Did you see it's rules ? 20_porn.cf bogus-virus-warnings.cf chickenpox.cf evilrules.cf local.cf-new

RE: General assistance

2006-02-13 Thread Bowie Bailey
DAve wrote: Bowie Bailey wrote: DAve wrote: Ed Russell wrote: 2. Once this is in place should I re-activate pzyor, dcc or razor? Is one better than the other? Are there advantages to either? I use neither, though I think I am in the minority. I routinely

User getting spammed to death

2006-02-13 Thread Peter Marshall
I am not sure if there is anything that I can do ... But our marketing email address is getting spammed to death. We are getting about 2000 messages an hour. It is getting to be a problem. Do any of you have a suggestion other than simply turfing the email address ? Thanks Peter

Re: RES: RES:

2006-02-13 Thread Matt Kettler
Marcos Manhanes wrote: Actually, to be more specific, you need to find a score statement which literally has n.nn in it instead of an actual score. I'd venture to guess someone copy-pasted *directly* out of the manpage. grep score /etc/mail/spamassassin/*.cf |grep n\.nn grep score

RE: User getting spammed to death

2006-02-13 Thread Shawn R. Beairsto
I had this problem a couple years back with our education email address. While the account got moderate levels of spam, it was absolutely inundated with virus backscatter. After a few months of trying to block the majority of it, we deemed the effort futile and abandoned the address. It was a

RE: User getting spammed to death

2006-02-13 Thread Kristopher Austin
Are the messages coming from the same sending server? If so, I'd blacklist it at your MTA until the storm is over. Kris -Original Message- From: Peter Marshall [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 12:16 PM To: SpamAssassin list Subject: User getting spammed to

Re: User getting spammed to death

2006-02-13 Thread Peter Marshall
nope .. unfortunitly, that is not the case :( Kristopher Austin wrote: Are the messages coming from the same sending server? If so, I'd blacklist it at your MTA until the storm is over. Kris -Original Message- From: Peter Marshall [mailto:[EMAIL PROTECTED] Sent: Monday, February

RE: User getting spammed to death

2006-02-13 Thread Rob McEwen
Peter: I know this is probably not the problem... but you might want to be extra sure that this is not really a case of the SAME small group of messages downloading over and over again. I've seen that happen before where Outlook or Outlook Express, when downloading 20 messages off of the server

RE: General assistance

2006-02-13 Thread Ed Russell
Thanks for the advice, it's well suited. FYI, my average scan time is: 7.73104733769435 I have enabled pyzor, razor and dcc. All looks fine for now. Of course this is a work in progress and I will have to keep a close eye on it. Ed --- Talk

RE: User getting spammed to death

2006-02-13 Thread Michael Di Martino
please send unsubscribe address. I cannot find it on the spamassissin site. Thanks Mike

Re: General assistance

2006-02-13 Thread DAve
Bowie Bailey wrote: DAve wrote: Bowie Bailey wrote: DAve wrote: Ed Russell wrote: 2. Once this is in place should I re-activate pzyor, dcc or razor? Is one better than the other? Are there advantages to either? I use neither, though I think I am in the minority. I routinely

RE: user_prefs rules throwing errors

2006-02-13 Thread Jim Smith
That may be an important catch, Jim. Are there any indications you are going into swapping? No, I'm quite certain that is not an issue since it has now been moved onto a new server and uses around 1% of the real memory but still has the errors. And what command string is spamd spawned? That

Re: User getting spammed to death

2006-02-13 Thread Matt Kettler
Michael Di Martino wrote: please send unsubscribe address. I cannot find it on the spamassissin site. That's because it's in the headers of *EVERY* message on the list. Note that this is the RFC standardized method for telling users how to unsubscribe, so be sure to check for it on other

Re: Using Inet to launch spamd

2006-02-13 Thread mouss
Henry F. Camacho Jr a écrit : Matt: Hmmm... Matt, this is exactly what init is designed to do, it will respawn any daemon that stops running, and reruns it automatically. Some people use something called daemon tools, or something called supervisor, all which work just fine. I think init

RE: User getting spammed to death

2006-02-13 Thread Evan Platt
On Mon, February 13, 2006 11:20 am, Michael Di Martino wrote: please send unsubscribe address. I cannot find it on the spamassissin site. In the headers of every message: list-unsubscribe: mailto:[EMAIL PROTECTED]

Re: User getting spammed to death

2006-02-13 Thread Evan Platt
On Mon, February 13, 2006 11:59 am, Matt Kettler wrote: That's because it's in the headers of *EVERY* message on the list. Note that this is the RFC standardized method for telling users how to unsubscribe, so be sure to check for it on other lists you subscribe to. SNIP list-unsubscribe:

RE: User getting spammed to death

2006-02-13 Thread Greg Allen
Using some good RBLs at your MTA should help, also make sure you are running current version of SA with everything enabled (bayes, urbl, etc) -Original Message- From: Peter Marshall [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 1:16 PM To: SpamAssassin list Subject:

RE: User getting spammed to death

2006-02-13 Thread Greg Allen
Using some good RBLs at your MTA should help, also make sure you are running current version of SA with everything enabled (bayes, urbl, etc) -Original Message- From: Peter Marshall [mailto:[EMAIL PROTECTED] Sent: Monday, February 13, 2006 1:16 PM To: SpamAssassin list Subject:

Re: User getting spammed to death

2006-02-13 Thread Matt Kettler
Evan Platt wrote: On Mon, February 13, 2006 11:59 am, Matt Kettler wrote: That's because it's in the headers of *EVERY* message on the list. Note that this is the RFC standardized method for telling users how to unsubscribe, so be sure to check for it on other lists you subscribe to.

Re: User getting spammed to death

2006-02-13 Thread Matt Kettler
Greg Allen wrote: Using some good RBLs at your MTA should help, also make sure you are running current version of SA with everything enabled (bayes, urbl, etc) True, spamcop and some other RBLs have recently started blacklisting sites that emit backwash.

Re: User getting spammed to death

2006-02-13 Thread Niek
On 2/13/2006 7:16 PM +0100, Peter Marshall wrote: I am not sure if there is anything that I can do ... But our marketing email address is getting spammed to death. We are getting about 2000 messages an hour. It is getting to be a problem. Do any of you have a suggestion other than simply

Re: Download new rules

2006-02-13 Thread Benjamin Adams
I downloaded some of the rules that they had. Just seeing what the affect is for the next few days. Thanks of the help Ben On Feb 13, 2006, at 12:31 PM, Chris Stone wrote: On Mon, Feb 13, 2006 at 12:18:05PM -0500, Benjamin Adams wrote: I'm looking for a website to download new rules for

Re: User getting spammed to death

2006-02-13 Thread hamann . w
I am not sure if there is anything that I can do ... But our marketing email address is getting spammed to death. We are getting about 2000 messages an hour. It is getting to be a problem. Do any of you have a suggestion other than simply turfing the email address ? Thanks Peter

Re: User getting spammed to death

2006-02-13 Thread Evan Platt
On Mon, February 13, 2006 2:29 pm, [EMAIL PROTECTED] wrote: I have just started to reject mails where the sender does not care to put my email addy into To or Cc field, Wow.. So if someone sends a message where you're on the BCC, you simply delete it? I get a number of e-mails from friends

Re: Spamassassin not scanning all emails

2006-02-13 Thread jdow
From: Matt Kettler [EMAIL PROTECTED] Jason Marshall wrote: Good day! My Spamassassin worked for years without skipping any emails. Suddenly (and not coresponding to an upgrade) emails started showing up in my inbox without spamassassin headers. How big are the messages that aren't getting

Re: Spamassassin not scanning all emails

2006-02-13 Thread Jason Marshall
How big are the messages that aren't getting scanned? Over 250k? Random sizes, most far smaller than 250k. And do you have per user rules enabled? If so do any of the user rules have a rawbody or full rule attribute? I do; each user has a .spamassassin/user_prefs file. Most of them are

Re: Spamassassin not scanning all emails

2006-02-13 Thread Matt Kettler
Jason Marshall wrote: I just noticed that I get spamd[797]: prefork: child states: quite often in the logs. This doesn't look bad to me, but I don't know what is supposed to mean... Probably nothing. That means 4 children exist, and they are all idle. That's a good thing :)

Re: Spamassassin not scanning all emails

2006-02-13 Thread jdow
From: Jason Marshall [EMAIL PROTECTED] How big are the messages that aren't getting scanned? Over 250k? Random sizes, most far smaller than 250k. And do you have per user rules enabled? If so do any of the user rules have a rawbody or full rule attribute? I do; each user has a

Problems downloading...

2006-02-13 Thread Philip Prindeville
Anyone else seeing this? [EMAIL PROTECTED] src]# wget http://apache.roweboat.net/spamassassin/source/Mail-SpamAssassin-3.1.0.tar.gz --21:47:02-- http://apache.roweboat.net/spamassassin/source/Mail-SpamAssassin-3.1.0.tar.gz = `Mail-SpamAssassin-3.1.0.tar.gz' Resolving

Re: Spamassassin not scanning all emails

2006-02-13 Thread Jason Marshall
If it was in $USER/.spamassassin/user_prefs it's very good. There is a Yep, the rawbody rule was in my user_prefs. workaround if you are using procmail. (If SA does not put headers into the message run it again. I run it as spamassassin rather than the daemon to be sure. I've seen VERY VERY

Re: Spamassassin not scanning all emails

2006-02-13 Thread Daryl C. W. O'Shea
jdow wrote: I've whined. It SEEMS to trace to a perl bug. In fact it seems to be related to a perl interaction between threads which should be impossible. ...and I've long ago sent you a patch to help debug it. :p

Re: User getting spammed to death

2006-02-13 Thread hamann . w
Hi Evan, it is currently an addition to qmail-scanner As for whielisting: if the envelope from matches @spamassassin.apache.org or @lists.sourceforge.net or my username (yes, I sometimes bcc me a copy) let it through. Otherwise if none of my possible names appears in either to or cc, it must