Re: Going in circles with Postfix

2006-06-14 Thread Bob Proulx
John Ackley wrote:
 Installed per
 http://www.geekly.com/entries/archives/0155.htm
steps 1 through 8

Are you installing this for your own personal use?  Or for the use of
a larger group of people getting mail through a server?  Because those
directions are integrating spamassassin tighly into postfix in the
master.cf file.  That works and is what an ISP would typically do to
filter zillions of messages.  But I personally don't run spamassassin
that way.  It is much easier to run spamassassin out of your local
.forward file.

  http://wiki.apache.org/spamassassin/UsedViaProcmail

 (at step 3 I was confused about the use of sendmail which was moved to 
 sendmail.sendmail
 when postfix was installed and also installed was sendmail.postfix - I 
 chose sendmail.sendmail
 because sendmail.postfix resulted in an error message)

What operating system are you using?  It sounds to me from your
description that you are using Red Hat.  If so then what you are
seeing is normal because Red Hat normally installs both sendmail and
postfix both on the same machine at the same time.  That is actually a
pretty bizarre thing to do but so it is.  The executable
/usr/sbin/sendmail must exist and point to the configured program.  So
they use the (ported from Debian) alternstives system to symlink from
there to the configured binary.  The default mailer on Red Hat is the
old Sendamil program but Postfix is also installed but unconfigured.

You say that you chose sendmail.sendmail to avoid errors from
sendmail.postfix.  How did you choose this?  And by that stetement it
means that postfix is not configured on your machine so any
configuration you are doing to the postfix master.cf files will not
have any effect in that case.  If you *do* have postfix configured
then you should not be using sendmail.sendmail.  That won't work.

What errors are you seeing from sendmail.postfix?

Personally I recommend that you get your MTA straightened out without
trying to integrate spamassassin and then follow the instructions on
the wiki page to install spamassassin into your .procmailrc file.

 apparently I am stuck in a never ending loop as shown in maillog
 (and a complaint from sendmail about use of -f)

I think your base problem is that you have part sendmail and part
postfix going at the same time now.

 Jun 13 22:47:50 kp2a postfix/postfix-script: starting the Postfix mail system
 Jun 13 22:47:50 kp2a postfix/master[19055]: daemon started -- version 2.2.8, 
 configuration /etc/postfix
 Jun 13 22:47:50 kp2a postfix/qmgr[19058]: A998F10C8CAE: from=, size=122823, 
 nrcpt=1 (queue active)

Postfix running there.

 Jun 13 22:47:51 kp2a sendmail[19063]: k5E2lpPd019063: Authentication-Warning: 
 kp2a.vi: spamfilter set sender to  [EMAIL PROTECTED] using -f Jun 13 22:47:51 
 kp2a spamd[17507]: spamd: clean message (-1.4/5.0) for spamfilter:509 in 0.8 
 seconds, 120383 bytes.

Sendmail running there.

Don't cross the streams.

If you are running Red Hat and want to configure postfix then here are
the steps to convert to postfix.  I have this scripted for use on
RHEL.  On other systems your mileage may vary.

  service sendmail stop
  chkconfig --del sendmail
  chkconfig postfix on
  service postfix restart
  update-alternatives --set mta /usr/sbin/sendmail.postfix

Bob


Spamassassin Lint detects errors

2006-06-14 Thread amavis
Hi there,

i have a big problem with my spamassassin.

I have checked everything, and for me everything
is ok.

May someone can take a look, but at first some system
informations:
OS: Debian Linux 3.1 sarge
SA: Spamassassin 3.10

Additional Programms:
Maia Mailguard
mysql  Ver 12.22 Distrib 4.0.24

ERRORS :

..
[11208] warn: config: failed to parse line, skipping: rewrite_header_subject 
*SPAM*
[11208] warn: config: failed to parse line, skipping: bayes_autolearn 1
[11208] warn: config: failed to parse line, skipping: 
bayes_autolearn_threshold_nonspam 0.1
[11208] warn: config: failed to parse line, skipping: 
bayes_autolearn_threshold_spam 10.0
[11208] warn: config: failed to parse line, skipping: bayes_use_hapxes 1
[11208] warn: config: failed to parse line, skipping: bayes_use_chi2_combining 1
[11208] warn: config: failed to parse line, skipping: use_razor2 1
[11208] warn: config: failed to parse line, skipping: use_dcc 1
..
[11208] warn: lint: 8 issues detected, please rerun with debug enabled for more 
information



LOCAL.CF :
# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
###
#
# rewrite_header Subject *SPAM*
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock
required_score 5.0
rewrite_header_subject *SPAM*
report_safe 1
use_bayes 1
bayes_store_module Mail::SpamAssassin::BayesStore::SQL
bayes_sql_dsn DBI:mysql:maiadb
bayes_sql_username 
bayes_sql_password 
bayes_sql_override_username 
bayes_autolearn 1
bayes_autolearn_threshold_nonspam 0.1
bayes_autolearn_threshold_spam 10.0
bayes_use_hapxes 1
bayes_use_chi2_combining 1
bayes_ignore_header ReSent-Date
bayes_ignore_header ReSent-From
bayes_ignore_header ReSent-Message-ID
bayes_ignore_header ReSent-Subject
bayes_ignore_header ReSent-To
bayes_ignore_header ReSent-Date
bayes_ignore_header ReSent-Message-ID
bayes_ignore_header ReSent-Subject
bayes_ignore_header ReSent-To
bayes_ignore_header X-Received-From-IP
bayes_ignore_header X-Virus-Scanned
bayes_ignore_header X-Spam-Status
bayes_ignore_header X-Spam-Level
bayes_ignore_header X-Sender
bayes_ignore_header X-Mailer

#Auto-Whitelist Config
auto_whitelist_factory Mail::SpamAssassin::SQLBasedAddrList
user_awl_dsn DBI:mysql:maiadb
user_awl_sql_username 
user_awl_sql_password 

skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1


Thanks Peter




RE: Spamassassin Lint detects errors

2006-06-14 Thread Sietse van Zanen
Have you loaded all of the respected plugins in init.pre?
 
If so, run spamassassin -D --lint and post output here. It'ss give you the 
reasons for not being able to parse the config lines.
 
-Sietse



From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Wed 14-Jun-06 12:11
To: users@spamassassin.apache.org
Subject: Spamassassin Lint detects errors



Hi there,

i have a big problem with my spamassassin.

I have checked everything, and for me everything
is ok.

May someone can take a look, but at first some system
informations:
OS: Debian Linux 3.1 sarge
SA: Spamassassin 3.10

Additional Programms:
Maia Mailguard
mysql  Ver 12.22 Distrib 4.0.24

ERRORS :

..
[11208] warn: config: failed to parse line, skipping: rewrite_header_subject 
*SPAM*
[11208] warn: config: failed to parse line, skipping: bayes_autolearn 1
[11208] warn: config: failed to parse line, skipping: 
bayes_autolearn_threshold_nonspam 0.1
[11208] warn: config: failed to parse line, skipping: 
bayes_autolearn_threshold_spam 10.0
[11208] warn: config: failed to parse line, skipping: bayes_use_hapxes 1
[11208] warn: config: failed to parse line, skipping: bayes_use_chi2_combining 1
[11208] warn: config: failed to parse line, skipping: use_razor2 1
[11208] warn: config: failed to parse line, skipping: use_dcc 1
..
[11208] warn: lint: 8 issues detected, please rerun with debug enabled for more 
information



LOCAL.CF :
# This is the right place to customize your installation of SpamAssassin.
#
# See 'perldoc Mail::SpamAssassin::Conf' for details of what can be
# tweaked.
#
###
#
# rewrite_header Subject *SPAM*
# report_safe 1
# trusted_networks 212.17.35.
# lock_method flock
required_score 5.0
rewrite_header_subject *SPAM*
report_safe 1
use_bayes 1
bayes_store_module Mail::SpamAssassin::BayesStore::SQL
bayes_sql_dsn DBI:mysql:maiadb
bayes_sql_username 
bayes_sql_password 
bayes_sql_override_username 
bayes_autolearn 1
bayes_autolearn_threshold_nonspam 0.1
bayes_autolearn_threshold_spam 10.0
bayes_use_hapxes 1
bayes_use_chi2_combining 1
bayes_ignore_header ReSent-Date
bayes_ignore_header ReSent-From
bayes_ignore_header ReSent-Message-ID
bayes_ignore_header ReSent-Subject
bayes_ignore_header ReSent-To
bayes_ignore_header ReSent-Date
bayes_ignore_header ReSent-Message-ID
bayes_ignore_header ReSent-Subject
bayes_ignore_header ReSent-To
bayes_ignore_header X-Received-From-IP
bayes_ignore_header X-Virus-Scanned
bayes_ignore_header X-Spam-Status
bayes_ignore_header X-Spam-Level
bayes_ignore_header X-Sender
bayes_ignore_header X-Mailer

#Auto-Whitelist Config
auto_whitelist_factory Mail::SpamAssassin::SQLBasedAddrList
user_awl_dsn DBI:mysql:maiadb
user_awl_sql_username 
user_awl_sql_password 

skip_rbl_checks 0
use_razor2 1
use_dcc 1
use_pyzor 1


Thanks Peter






Re: Spamassassin Lint detects errors

2006-06-14 Thread Loren Wilton
 [11208] warn: config: failed to parse line, skipping:
rewrite_header_subject *SPAM*

rewrite_header Subject SPAM

 [11208] warn: config: failed to parse line, skipping: bayes_autolearn 1

probably is bayes_autolearn Yes

 [11208] warn: config: failed to parse line, skipping: bayes_use_hapxes 1
 [11208] warn: config: failed to parse line, skipping:
bayes_use_chi2_combining 1

Don't know why those are complaining, but I think they are the defaults so
there is no need to set them.

 [11208] warn: config: failed to parse line, skipping: use_razor2 1
 [11208] warn: config: failed to parse line, skipping: use_dcc 1

Razor and DCC are now plugins.  You need to uncomment the plugin lines in
init.pre or init.310 or wherever they are.

Loren



Postfix/spamassassin loop

2006-06-14 Thread Justin Cook




Oops.

I'm a bit of a novice user and I'm setting up SA under Postfix for the
first time.

Mail sent while SpamAssassin is running delivers fine, but anything
inbound (or mail sent to a local address from a local IP) fails with a
"max hops reached" error. It turns out Spamassassin is calling
postfix's Sendmail bin, which calls spamassassin, and so on.

What should I be looking for here?

Cheers!





Re: Spamassassin Lint detects errors

2006-06-14 Thread Scott Tarlton

If I'm not mistaken, bayes_autolearn 1 should actually be

bayes_auto_learn 1

anyone please feel free to correct me if I'm wrong.  adieu

Scott

Loren Wilton wrote:

[11208] warn: config: failed to parse line, skipping:

rewrite_header_subject *SPAM*

rewrite_header Subject SPAM


[11208] warn: config: failed to parse line, skipping: bayes_autolearn 1


probably is bayes_autolearn Yes


[11208] warn: config: failed to parse line, skipping: bayes_use_hapxes 1
[11208] warn: config: failed to parse line, skipping:

bayes_use_chi2_combining 1

Don't know why those are complaining, but I think they are the defaults so
there is no need to set them.


[11208] warn: config: failed to parse line, skipping: use_razor2 1
[11208] warn: config: failed to parse line, skipping: use_dcc 1


Razor and DCC are now plugins.  You need to uncomment the plugin lines in
init.pre or init.310 or wherever they are.

Loren



RE: SA tags above header info

2006-06-14 Thread Bowie Bailey
Daryl C. W. O'Shea wrote:
 
 Personally, I now prefer the headers being prepended over them being
 appended.  There was about a week or two where I wasn't sure about
 it though.

I agree.  I find that it helps to clarify exactly which server added
the headers.  It also follows the same pattern as all of the other MTA
headers which are always added at the top.

-- 
Bowie


Re: The Future of Email is SQL

2006-06-14 Thread List Mail User
...
Well - I'm a member of the Exim cult - but if something better comes 
along I might convert. :)

And you're not even British:)  Actually I count Exim in the short
list of well done and readily usable/useful MTAs (i.e. works as expected,
not can be made to work).  Still, I'm partial to postfix and use many
sendmail setups (20+ years of experience is hard to ignore).

Paul Shupak
[EMAIL PROTECTED]


Loading Rules - Possible Memory Issue

2006-06-14 Thread Duane Hill
Don't know if someone can point me in a direction to look or not. I'm 
using SA through a third-party plugin for our MTA. This is running on 
FreeBSD 6.0 with SA v3.1.1 on Perl v5.8.7.


As soon as I move aproximately 520K of rules into the directory with the 
local.cf and restart the plugin, messages start to pile up in the MTA's 
queue. If I move the rules out and restart the plugin, everything resumes 
to normal. The server has plenty of resources available to handle 
everything.


I'm suspecting it's the plugin and how it forks child processes. It 
doesn't reuse the child processes. Once the child process is finished, it 
is eventually cleaned up.


If I was able to get a plugin set in to use spamd, would I be seeing the 
same results?


--
This message was sent using 100% recycled electrons.


OT: Setting Up DNSBL using RBLDNSD

2006-06-14 Thread Michele Neylon :: Blacknight Solutions
Has anyone any tips on doing this?

I do not want to mirror existing data (I already am :) )

I want to setup my own DNSBL to catch the junk that the other DNSBLS miss.. 

The only tutorials / guides I've found either refer explicitly to Bind or
make reference to  rbldns-conf, which doesn't appear to exist on Ubuntu

Any tips, thoughts or even flames are welcome

TIA

Michele

Mr Michele Neylon
Blacknight Solutions
http://www.blacknight.ie/
http://blog.blacknight.ie/
Intl. +353 (0) 59  9183072 
UK: 0870 163 0607



RE: Loading Rules - Possible Memory Issue

2006-06-14 Thread Thomas Raef
What does your spamd/current log show? If that's what you have.

Sounds like one of the rules is hosing spamd. I'm speaking from recent
experience.

Just a thought.

-Original Message-
From: Duane Hill [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 14, 2006 8:16 AM
To: users@spamassassin.apache.org
Subject: Loading Rules - Possible Memory Issue

Don't know if someone can point me in a direction to look or not. I'm 
using SA through a third-party plugin for our MTA. This is running on 
FreeBSD 6.0 with SA v3.1.1 on Perl v5.8.7.

As soon as I move aproximately 520K of rules into the directory with the

local.cf and restart the plugin, messages start to pile up in the MTA's 
queue. If I move the rules out and restart the plugin, everything
resumes 
to normal. The server has plenty of resources available to handle 
everything.

I'm suspecting it's the plugin and how it forks child processes. It 
doesn't reuse the child processes. Once the child process is finished,
it 
is eventually cleaned up.

If I was able to get a plugin set in to use spamd, would I be seeing the

same results?

--
This message was sent using 100% recycled electrons.


RE: Loading Rules - Possible Memory Issue

2006-06-14 Thread Chris Santerre
Title: RE: Loading Rules - Possible Memory Issue







 -Original Message-
 From: Duane Hill [mailto:[EMAIL PROTECTED]]
 Sent: Wednesday, June 14, 2006 9:16 AM
 To: users@spamassassin.apache.org
 Subject: Loading Rules - Possible Memory Issue
 
 
 Don't know if someone can point me in a direction to look or not. I'm 
 using SA through a third-party plugin for our MTA. This is running on 
 FreeBSD 6.0 with SA v3.1.1 on Perl v5.8.7.
 
 As soon as I move aproximately 520K of rules into the 
 directory with the 
 local.cf and restart the plugin, messages start to pile up in 
 the MTA's 
 queue. If I move the rules out and restart the plugin, 
 everything resumes 
 to normal. The server has plenty of resources available to handle 
 everything.
 
 I'm suspecting it's the plugin and how it forks child processes. It 
 doesn't reuse the child processes. Once the child process is 
 finished, it 
 is eventually cleaned up.
 
 If I was able to get a plugin set in to use spamd, would I be 
 seeing the 
 same results?


IIRC, Um...520k of rules seems like an awful lot! Could be one rule, could be several. Use the law of halfs. Take half the rules, place them in, test. If it does bog the server down, cut that set in half, test. Continue half'ing until you find the culprit. Post the rule(s) here and we can try to help. 

Chris Santerre
SysAdmin and SARE/URIBL ninja
http://www.uribl.com
http://www.rulesemporium.com






RE: Loading Rules - Possible Memory Issue

2006-06-14 Thread Duane Hill

On Wed, 14 Jun 2006, Chris Santerre wrote:


-Original Message-
From: Duane Hill [mailto:[EMAIL PROTECTED]
Sent: Wednesday, June 14, 2006 9:16 AM
To: users@spamassassin.apache.org
Subject: Loading Rules - Possible Memory Issue


Don't know if someone can point me in a direction to look or not. I'm
using SA through a third-party plugin for our MTA. This is running on
FreeBSD 6.0 with SA v3.1.1 on Perl v5.8.7.

As soon as I move aproximately 520K of rules into the
directory with the
local.cf and restart the plugin, messages start to pile up in
the MTA's
queue. If I move the rules out and restart the plugin,
everything resumes
to normal. The server has plenty of resources available to handle
everything.

I'm suspecting it's the plugin and how it forks child processes. It
doesn't reuse the child processes. Once the child process is
finished, it
is eventually cleaned up.

If I was able to get a plugin set in to use spamd, would I be
seeing the
same results?


IIRC, Um...520k of rules seems like an awful lot! Could be one rule, could
be several. Use the law of halfs. Take half the rules, place them in, test.
If it does bog the server down, cut that set in half, test. Continue
half'ing until you find the culprit. Post the rule(s) here and we can try to
help.


Ok. One of the rule sets were a custom set I created. The file size was 
322K. I will have to go back into the rule set and use my learned regex 
experience in the past month and trim it down.


I also have a couple rule sets that have the full set loaded from 
rulesemporium. I will be going back in and just loading a few of the 
smaller parts instead.


I think what it boils down to is just getting carried away.

Thanks for the response. This is still relatively new with running our MTA 
on FreeBSD. It was migrated away from Windows about three weeks ago.


--
This message was sent using 100% recycled electrons.


Re: Loading Rules - Possible Memory Issue

2006-06-14 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Duane Hill wrote:
[snippage]
 I think what it boils down to is just getting carried away.
 
 Thanks for the response. This is still relatively new with running our
 MTA on FreeBSD. It was migrated away from Windows about three weeks ago.

FWIW I have had real success using FBSD-6.0-RELEASE, SA from CPAN and
spamass-milter and sendmail from the ports collection. Just lately I've
moved away from the milter, towards a procmail-based SA setup for better
configurability. Ping me if you want more details.

C.

- --
Craig McLeanhttp://fukka.co.uk
[EMAIL PROTECTED]   Where the fun never starts
Powered by FreeBSD, and GIN!
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.3 (GNU/Linux)

iD8DBQFEkCirMDDagS2VwJ4RAgqZAKDz6HIvWmqhLE/VSk1fonA1w7RkswCgzSj+
Clsn7VfuQcWVDkgfYK6x9pw=
=RThC
-END PGP SIGNATURE-


FP's on BAD_ENC_HEADER in bounces from Microsoft SMTPSVC

2006-06-14 Thread Nick Leverton
Microsoft SMTPSVC seems to trigger BAD_ENC_HEADER when sending bounces if 
it's been given a non-English bounce template (or whatever M$ use for 
configuring that). Even bounces to correctly encoded mail.  I've got quite 
a number of examples, and all of them have a foreign language Subject 
line, encoded in =?unicode-1-1-utf-7?, but wrapped onto more than one 
line.

Three samples attached, from different SMTPSMV servers - jal.co.uk (Japan 
Airlines), ohl.de and ifg.com, all of which are legit correspondents.  I 
removed the original pre-bounce message except for its final Received 
header - this one which bounced the mail - and I overwrote the usernames 
for their privacy, but the mail domains, the incriminating Received line, 
and the rest of the headers are original.

header BAD_ENC_HEADER  ALL =~ /=\?[^?\s]+\?[^?\s]\?\s*[^?]+\s(?!\?=)/

I think the problem is that the Subject header although encoded does have 
spaces in, which is invalid for RFC2047 (and headers can only be split on 
whitespace, so the folded headers are doubly invalid).  

Is anyone else having trouble from this ?  With a net/bayes score of 3.100, 
it doesn't need many other rules to reach spam levels.  One of those 
samples hit HTML_50_60, HTML_FONT_BIG, HTML_MESSAGE, HTML_TAG_EXIST_TBODY, 
HTML_WEB_BUGS and  NO_REAL_NAME for a total score of 5.196 (ouch).  I've 
zeroed the BAD_ENC_HEADER score for myself, but wonder if it's affecting 
others too ?

Nick
---BeginMessage---
From   Wed Jun 14 15:45:50 2006
Return-Path: 
Delivered-To: spam-quarantine
X-Quarantine-id: spam-20060612-234932-24639-02
Received: (qmail 25540 invoked by uid 513); 12 Jun 2006 22:49:29 -
Received: from [61.121.116.237] (HELO fmjalmx.mobile-p.jp) (61.121.116.237)
by mx1.diago.nl (qpsmtpd/0.28) with ESMTP; Mon, 12 Jun 2006 23:49:29 +0
100
Received: from fiptyosmvl02.jalnet ([192.168.1.26])
by fmjalmx.mobile-p.jp (MOS 3.5.8-GR)
with ESMTP id BKI91565;
Tue, 13 Jun 2006 07:49:24 +0900 (JST)
Received: from fiptyosefl01.jalnet
by fiptyosmvl02.jalnet (*-*) with ESMTP id k5CMnNS13006
for [EMAIL PROTECTED]; Tue, 13 Jun 2006 07:49:23 +0900 (JST)
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Date: Tue, 13 Jun 2006 07:49:23 +0900
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary=9B095B5ADSN=_01C6750D3EE8F25A00021345fiptyosefl01.jal
X-DSNContext: 335a7efd - 4460 - 0001 - 80040546
Message-ID: [EMAIL PROTECTED]
Subject: =?unicode-1-1-utf-7?Q?+kU1P4XK2YUuQGnfl-  
(+MKgw6TD8-)?=

This is a MIME-formatted message.  
Portions of this message may be unreadable without a MIME-capable mail program.

--9B095B5ADSN=_01C6750D3EE8F25A00021345fiptyosefl01.jal
Content-Type: text/plain; charset=unicode-1-1-utf-7

+MFMwbpAad+Uwb4HqUtV2hDBrdR9iEDBVMIwwX5FNT+FytmFLkBp35TBnMFkwAg-

+ayEwblPXT+GABTB4MG6RTU/hMGtZMWVXMFcwfjBXMF8wAg-

   [EMAIL PROTECTED]




--9B095B5ADSN=_01C6750D3EE8F25A00021345fiptyosefl01.jal
Content-Type: message/delivery-status

Reporting-MTA: dns;fiptyosefl01.jalnet
Received-From-MTA: dns;fiptyosmvl01.jalnet
Arrival-Date: Tue, 13 Jun 2006 07:49:22 +0900

Final-Recipient: rfc822;[EMAIL PROTECTED]
Action: failed
Status: 5.1.1

--9B095B5ADSN=_01C6750D3EE8F25A00021345fiptyosefl01.jal
Content-Type: message/rfc822

Received: from fiptyosmvl01.jalnet ([192.168.1.25]) by fiptyosefl01.jalnet with 
Microsoft SMTPSVC(5.0.2195.6713);
 Tue, 13 Jun 2006 07:49:22 +0900

--9B095B5ADSN=_01C6750D3EE8F25A00021345fiptyosefl01.jal--

---End Message---
---BeginMessage---
From   Wed Jun 14 15:50:03 2006
Return-Path: 
Delivered-To: spam-quarantine
X-Envelope-To: [EMAIL PROTECTED]
X-Envelope-From: 
X-Quarantine-id: spam-20060613-175712-23044-02
Received: (qmail 23889 invoked by uid 513); 13 Jun 2006 16:57:07 -
Received: from [82.127.1.35] (HELO ifg.com) (82.127.1.35)
by mx3.diago.nl (qpsmtpd/0.28) with ESMTP; Tue, 13 Jun 2006 17:57:07 +0
100
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Date: Tue, 13 Jun 2006 19:01:03 +0200
MIME-Version: 1.0
Content-Type: multipart/report; report-type=delivery-status;
boundary=9B095B5ADSN=_01C689396DD799280542ifg.com
X-DSNContext: 7ce717b1 - 1158 - 0002 - 
Message-ID: [EMAIL PROTECTED]
Subject: Notification  
d'=?unicode-1-1-utf-7?Q?+AOk-tat  
de  
remise  
(+AOk-chec)?=

This is a MIME-formatted message.  
Portions of this message may be unreadable without a MIME-capable mail program.

--9B095B5ADSN=_01C689396DD799280542ifg.com
Content-Type: text/plain; charset=unicode-1-1-utf-7

Cette notification d'+AOk-tat de remise est g+AOk-n+AOk-r+AOk-e automatiquement.

+AMk-chec de la remise aux destinataires suivants.

   [EMAIL PROTECTED]




--9B095B5ADSN=_01C689396DD799280542ifg.com
Content-Type: message/delivery-status

Reporting-MTA: dns;ifg.com
Received-From-MTA: dns;ifg.com
Arrival-Date: Tue, 13 Jun 2006 19:01:02 +0200

Final-Recipient: rfc822;[EMAIL PROTECTED]
Action: 

Re: Loading Rules - Possible Memory Issue

2006-06-14 Thread Duane Hill

On Wed, 14 Jun 2006, Craig McLean wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Duane Hill wrote:
[snippage]

I think what it boils down to is just getting carried away.

Thanks for the response. This is still relatively new with running our
MTA on FreeBSD. It was migrated away from Windows about three weeks ago.


FWIW I have had real success using FBSD-6.0-RELEASE, SA from CPAN and
spamass-milter and sendmail from the ports collection. Just lately I've
moved away from the milter, towards a procmail-based SA setup for better
configurability. Ping me if you want more details.


Thanks for the response. The MTA will not change anytime soon. I've pretty 
much resolved the issues. I just had *too* much loaded in. I reduced down 
to just loading some subsets instead of the full set. For example, 
70_sare_genlsubj0.cf and 70_sare_html0.cf instead of the full sets 
70_sare_genlsubj.cf and 70_sare_html.cf. There were a couple others as 
well.


--
This message was sent using 100% recycled electrons.


Re: Postfix/spamassassin loop

2006-06-14 Thread John Ackley



Justin Cook wrote:

Oops.

I'm a bit of a novice user and I'm setting up SA under Postfix for the 
first time.


Mail sent while SpamAssassin is running delivers fine, but anything 
inbound (or mail sent to a local address from a local IP) fails with a 
max hops reached error. It turns out Spamassassin is calling 
postfix's Sendmail bin, which calls spamassassin, and so on.


What should I be looking for here?

Cheers!


Had the same problem.  My error was using sendmail.sendmail and not 
sendmail.postfix.
Using sendmail.postfix solved the problem.  Check which version of 
sendmail you are using.





RE: Loading Rules - Possible Memory Issue

2006-06-14 Thread Bowie Bailey
Duane Hill wrote:
 On Wed, 14 Jun 2006, Chris Santerre wrote:
 
  IIRC, Um...520k of rules seems like an awful lot! Could be one
  rule, could be several. Use the law of halfs. Take half the rules,
  place them in, test. If it does bog the server down, cut that set
  in half, test. Continue half'ing until you find the culprit. Post
  the rule(s) here and we can try to help.

Well, I've got 732K of add-on rules on my server (mostly SARE).  Lots
of small files add up fast.  No speed problems.  The spamd processes
take up about 35M each.

 Ok. One of the rule sets were a custom set I created. The file size
 was 322K. I will have to go back into the rule set and use my learned
 regex experience in the past month and trim it down.

If I had to guess, I'd say that's your culprit.  The SARE guys do a
good job testing their rules.  Remove the other rules and see if the
problem remains with just your custom rules.

 I also have a couple rule sets that have the full set loaded from
 rulesemporium. I will be going back in and just loading a few of the
 smaller parts instead.

You can do that, but I would suggest following Chris's suggestion
first.  Find out where the problem is and then you know which rule set
needs to be cut down or fixed.

 I think what it boils down to is just getting carried away.

Occupational hazard in this line of work...

-- 
Bowie


Is razor working with spamassassin?

2006-06-14 Thread Kevin Murphy
I need confirmation that razor is working with spamassassin.  I'm using 
the latest versions of Mail::SpamAssassin and razor2.


I know there is an entry for this question on the wiki, but it wasn't 
helpful; maybe it is out of date?


When I run:

sudo -u amavis spamassassin -D --lint /tmp/junk.msg

Here are the first few lines in the output that mention razor:

[19041] dbg: diag: module installed: Razor2::Client::Agent, version 2.82
[19041] dbg: config: read file /usr/local/share/spamassassin/25_razor2.cf
[19041] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
[19041] dbg: razor2: razor2 is available, version 2.82

Then later this chunk:

[19041] dbg: plugin: registering glue method for check_razor2_range 
(Mail::SpamAssassin::Plugin::Razor2=HASH(0x2afedc))

[19041] dbg: info: entering helper-app run mode
[19041] dbg: info: leaving helper-app run mode
[19041] dbg: razor2: part=0 engine=4 contested=0 confidence=0
[19041] dbg: razor2: results: spam? 0
[19041] dbg: razor2: results: engine 8, highest cf score: 0
[19041] dbg: razor2: results: engine 4, highest cf score: 0
[19041] dbg: plugin: registering glue method for check_razor2 
(Mail::SpamAssassin::Plugin::Razor2=HASH(0x2afedc))


I can't tell if razor is really being applied or not.

My configuration:

In /etc/mail/spamassassin/v310.pre, I have:

loadplugin Mail::SpamAssassin::Plugin::Razor2
ifplugin Mail::SpamAssassin::Plugin::Razor2
use_razor2 1
razor_config /var/amavis/.razor/razor-agent.conf
endif

In /var/amavis/.razor/razor-agent.conf, I have:

debuglevel = 3
identity   = identity
ignorelist = 0
listfile_catalogue = servers.catalogue.lst
listfile_discovery = servers.discovery.lst
listfile_nomination= servers.nomination.lst
logfile= razor-agent.log
logic_method   = 4
min_cf = ac
razordiscovery = discovery.spamnet.com
rediscovery_wait   = 172800
report_headers = 1
turn_off_discovery = 0
use_engines= 4,8
whitelist  = razor-whitelist
razorhome  = /var/amavis/.razor/

In /var/amavis/.razor/, I see:

razor-agent.conf
razor-agent.log
server.c101.cloudmark.com.conf
server.joy.cloudmark.com.conf
server.shock.cloudmark.com.conf
servers.catalogue.lst
servers.catalogue.lst.lock
servers.discovery.lst
servers.nomination.lst
servers.nomination.lst.lock

The whole /var/amavis tree is owned by 'amavis'.

Thanks,
Kevin Murphy



Re: The Future of Email is SQL

2006-06-14 Thread Steve Thomas
 So - like I said - this is visionary stuff. Think SQL - think outside
 the box.

It's not all that visionary. Microsoft's been working on WinFS - a SQL
based system for storing files - for years. It's supposed to have been
released as a part of longhorn (vista), but they're pushing it back.

I'm still confused as to why this is even being discussed on this list,
though. SA is just a system for identifying and labeling certain types of
messages. It has nothing whatsoever to do with where or how those messages
are stored.

St-




RE: Is razor working with spamassassin?

2006-06-14 Thread Sietse van Zanen
If it doesn't say it's not working, it is working. The messages
indicate, that razor is called.

If you want to be sure, just check your spam mails, some of them should
contain a RAZOR tag. Or snoop the network for trafic to the razor
servers.

-Sietse

-Original Message-
From: Kevin Murphy [mailto:[EMAIL PROTECTED] 
Sent: Wednesday, June 14, 2006 8:46 PM
To: users@spamassassin.apache.org
Subject: Is razor working with spamassassin?

I need confirmation that razor is working with spamassassin.  I'm using 
the latest versions of Mail::SpamAssassin and razor2.

I know there is an entry for this question on the wiki, but it wasn't 
helpful; maybe it is out of date?

When I run:

sudo -u amavis spamassassin -D --lint /tmp/junk.msg

Here are the first few lines in the output that mention razor:

[19041] dbg: diag: module installed: Razor2::Client::Agent, version 2.82
[19041] dbg: config: read file
/usr/local/share/spamassassin/25_razor2.cf
[19041] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from
@INC
[19041] dbg: razor2: razor2 is available, version 2.82

Then later this chunk:

[19041] dbg: plugin: registering glue method for check_razor2_range 
(Mail::SpamAssassin::Plugin::Razor2=HASH(0x2afedc))
[19041] dbg: info: entering helper-app run mode
[19041] dbg: info: leaving helper-app run mode
[19041] dbg: razor2: part=0 engine=4 contested=0 confidence=0
[19041] dbg: razor2: results: spam? 0
[19041] dbg: razor2: results: engine 8, highest cf score: 0
[19041] dbg: razor2: results: engine 4, highest cf score: 0
[19041] dbg: plugin: registering glue method for check_razor2 
(Mail::SpamAssassin::Plugin::Razor2=HASH(0x2afedc))

I can't tell if razor is really being applied or not.

My configuration:

In /etc/mail/spamassassin/v310.pre, I have:

loadplugin Mail::SpamAssassin::Plugin::Razor2
ifplugin Mail::SpamAssassin::Plugin::Razor2
use_razor2 1
razor_config /var/amavis/.razor/razor-agent.conf
endif

In /var/amavis/.razor/razor-agent.conf, I have:

debuglevel = 3
identity   = identity
ignorelist = 0
listfile_catalogue = servers.catalogue.lst
listfile_discovery = servers.discovery.lst
listfile_nomination= servers.nomination.lst
logfile= razor-agent.log
logic_method   = 4
min_cf = ac
razordiscovery = discovery.spamnet.com
rediscovery_wait   = 172800
report_headers = 1
turn_off_discovery = 0
use_engines= 4,8
whitelist  = razor-whitelist
razorhome  = /var/amavis/.razor/

In /var/amavis/.razor/, I see:

razor-agent.conf
razor-agent.log
server.c101.cloudmark.com.conf
server.joy.cloudmark.com.conf
server.shock.cloudmark.com.conf
servers.catalogue.lst
servers.catalogue.lst.lock
servers.discovery.lst
servers.nomination.lst
servers.nomination.lst.lock

The whole /var/amavis tree is owned by 'amavis'.

Thanks,
Kevin Murphy



Re: Is razor working with spamassassin?

2006-06-14 Thread Theo Van Dinter
On Wed, Jun 14, 2006 at 02:46:12PM -0400, Kevin Murphy wrote:
 I know there is an entry for this question on the wiki, but it wasn't 
 helpful; maybe it is out of date?

The information has generally been constant for a while, but I wouldn't be
surprised if pieces were out of date.  If you have a pointer to what you think
is out of date, let me know.

 sudo -u amavis spamassassin -D --lint /tmp/junk.msg

(fyi, you don't need the junk.msg, --lint generates and uses its own message)

 Here are the first few lines in the output that mention razor:
 
 [19041] dbg: diag: module installed: Razor2::Client::Agent, version 2.82
 [19041] dbg: config: read file /usr/local/share/spamassassin/25_razor2.cf
 [19041] dbg: plugin: loading Mail::SpamAssassin::Plugin::Razor2 from @INC
 [19041] dbg: razor2: razor2 is available, version 2.82

Ok, the plugin is loaded and razor2 is available.

 Then later this chunk:
 
 [19041] dbg: razor2: part=0 engine=4 contested=0 confidence=0

razor found a single part in the message.

 [19041] dbg: razor2: results: spam? 0
 [19041] dbg: razor2: results: engine 8, highest cf score: 0
 [19041] dbg: razor2: results: engine 4, highest cf score: 0

and at the end the result is that the mail isn't considered spam.

 I can't tell if razor is really being applied or not.

If it wasn't in use, you wouldn't see the above stuff.

 loadplugin Mail::SpamAssassin::Plugin::Razor2
 ifplugin Mail::SpamAssassin::Plugin::Razor2
 use_razor2 1

use_razor2 1 is enabled by default if you load the plugin, fyi.

-- 
Randomly Generated Tagline:
 Fry: I'm not a robot like you. I don't like having disks crammed 
  into me... unless they're Oreos, and then only in the mouth.


pgpxbNPkGZZ5C.pgp
Description: PGP signature


RE: Is razor working with spamassassin?

2006-06-14 Thread Gary V

[19041] dbg: razor2: razor2 is available, version 2.82


Well at least it is there for SpamAssassin to use.


[19041] dbg: razor2: results: spam? 0


Looks like the message was checked (and found not to be spam). Looks OK 
provided the message was in fact not found in the razor database (that is 
the question isn't it?).




In /var/amavis/.razor/, I see:

razor-agent.conf
razor-agent.log
server.c101.cloudmark.com.conf
server.joy.cloudmark.com.conf
server.shock.cloudmark.com.conf
servers.catalogue.lst
servers.catalogue.lst.lock
servers.discovery.lst
servers.nomination.lst
servers.nomination.lst.lock

The whole /var/amavis tree is owned by 'amavis'.

Thanks,
Kevin Murphy



It might be working, but you don't have an identity (and you need one).
To create one for amavis, try:
sudo -u amavis razor-admin -register
(may have to run it more than one time if you get an error)

See what you find in /var/amavis/.razor/razor-agent.log

You might also use:
sudo -u amavis razor-check -d email.txt

Also, you may consider disabling logging after you you know it works, set:
debuglevel = 0
The log will grow forever otherwise.

If you like, I have a sample that should hit:
wget http://www200.pair.com/mecham/email.txt

Gary V

_
On the road to retirement? Check out MSN Life Events for advice on how to 
get there! http://lifeevents.msn.com/category.aspx?cid=Retirement




RE: Is razor working with spamassassin?

2006-06-14 Thread John D. Hardin
On Wed, 14 Jun 2006, Gary V wrote:

 It might be working, but you don't have an identity (and you need one).

Do you need to register an identity just to perform queries? The razor
documentation implied you only needed to register if you wanted to
submit samples to the database...

--
 John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardin/
 [EMAIL PROTECTED]FALaholic #11174pgpk -a [EMAIL PROTECTED]
 key: 0xB8732E79 - 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
---
  Apparently the Bush/Rove idea of being a fiscal conservative is
  to spend money like there's no tomorrow, run up huge deficits, and
  pray the Rapture happens before the bills come due.
   -- atul666 in Y! SCOX forum
---
 4 days until SWMBO's Birthday



RE: Is razor working with spamassassin?

2006-06-14 Thread Gary V

 It might be working, but you don't have an identity (and you need one).

Do you need to register an identity just to perform queries? The razor
documentation implied you only needed to register if you wanted to
submit samples to the database...

--
 John Hardin


That is likely true. I create one anyway. You may end up running 
'spamassassin -r' at some point in the future, you never know. If you decide 
to create one, I suggest letting it create a random identity.


Gary V

_
Don’t just search. Find. Check out the new MSN Search! 
http://search.msn.click-url.com/go/onm00200636ave/direct/01/




Re: The Future of Email is SQL

2006-06-14 Thread Kenneth Porter

On Tuesday, June 13, 2006 8:52 PM -0700 kbaker [EMAIL PROTECTED] wrote:


It is visionary in that it is not the norm, but again DBMail does all of
this very well and has been production quality for quite some time.


I asked on the Dovecot list about how Dovecot compares to DBMail and got 
this reply from Dovecot's author:


 Forwarded Message 
Date: Tuesday, June 13, 2006 9:43 AM +0300
From: Timo Sirainen [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Re: [Dovecot] DBMail versus Dovecot (was: Using MySQL to store 
email?)


On Mon, 2006-06-12 at 18:12 -0700, Kenneth Porter wrote:

On Saturday, June 10, 2006 10:07 AM -0400 Charles Marcus
[EMAIL PROTECTED] wrote:

 A reference to DBMail was among the first responses, and there have been
 others.

Has anyone compiled a comparison of Dovecot to DBMail? Why would I chose
one over the other?


I think their goals are quite different. Don't know if any such
comparisons would be all that useful.

Or I guess I can give you one difference: Dovecot tries very hard to be
secure. DBMail then seems to keep adding SQL injection security holes. I
said about this to them a few years ago and they fixed them, but now
that I looked at the code a few months ago they had added more of those.
-- End Forwarded Message --


Re: FP's on BAD_ENC_HEADER in bounces from Microsoft SMTPSVC

2006-06-14 Thread Alan Premselaar
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Nick Leverton wrote:
[snip]


 Subject: =3D?unicode-1-1-utf-7?Q?+kU1P4XK2YUuQGnfl- =20
   (+MKgw6TD8-)?=3D
 

Aside from the QP scatter, this subject doesn't look like it's properly
encoded.  if memory serves, if the encoded subject needs to be broken
across multiple lines, each line needs to have its own encoding
start/end tags.

so it should look something like:

Subject: =?unicode-1-1-utf-7?Q?encoded_part?=
=?unicode-1-1-utf-7?Q?more_encoded_part?=

(someone correct me if i'm wrong)

Of course it's hard to tell because of the QuotedPrintable encoding
artifacts, but it looks like your MS mail server is in some way
misconfigured.

Either that or something else is wrapping the headers and breaking the
encoding.

HTH

alan
-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.1 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

iD8DBQFEkMk5E2gsBSKjZHQRAtCkAKDaCCjpeUTVIzC/vYppbh8Bn0j66gCffW1v
27zlnRX/AbNzWsw7HgTj14I=
=IaOn
-END PGP SIGNATURE-


New Spam Assassin user

2006-06-14 Thread Mike L
I am a new user. I am running on Windows 2003.

I have several domains on my servers.

I only want one domain on my server to use spam assassin. Where and what do i need to do to only filter for 1 domain on my sever. Is this possible.

I would also like to setup wrongmx on this as wel..

Thanks in advance.

Mike


Re: The Future of Email is SQL

2006-06-14 Thread Marc Perkel



Kenneth Porter wrote:
On Tuesday, June 13, 2006 8:52 PM -0700 kbaker [EMAIL PROTECTED] 
wrote:


It is visionary in that it is not the norm, but again DBMail does 
all of

this very well and has been production quality for quite some time.


I asked on the Dovecot list about how Dovecot compares to DBMail and 
got this reply from Dovecot's author:




I think Timo will eventually add a MySQL backend to Dovecot.