Bayes is causing MySQL performance issues

2010-03-23 Thread Martin Svensson
Hi list-users, I'm having issues with a SA setup's bayes database that some of you hopefully can help with, it began last Monday. The setup consists of 2 spam-eating servers running Amavis and one dedicated server running MySQL and Bind. Bayes, AWL and Amavis are using MySQL with three separate

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-23 Thread Daniel Lemke
John Hardin wrote: To be serious, have you considered setting up a Linux VM that is dedicated to hosting spamd? If only it was that simple. SA is actually required as a component of a bigger system which actually has NO business being near a Windows server, but unfortunately our sys

This will make you smile

2010-03-23 Thread Per Jessen
I got an email this morning, quite clearly spam, but I thought I'd check out the link to the Email Marketing Privacy Policy - here are a couple of snippets: company is a reputable company who specialise in ... [snip]. We adhere closely to the appropriate conditions of the Data Protection Act

Any known issues with Razor2?

2010-03-23 Thread Nigel Frankcom
Hi All, Apologies if this has already been asked. A hunt through Google didn't help much nor did any digging around the SA site. That's not to say it's not there, just that I can't find it :-/ I have Razor2 installed via CPAN, though without a version number. When I try and install the new SA I

Re: Any known issues with Razor2?

2010-03-23 Thread Nigel Frankcom
On Tue, 23 Mar 2010 09:12:16 +, Nigel Frankcom ni...@blue-canoe.com wrote: Hi All, Apologies if this has already been asked. A hunt through Google didn't help much nor did any digging around the SA site. That's not to say it's not there, just that I can't find it :-/ I have Razor2 installed

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-23 Thread weirdbeardmt
The Makefile.PL is the stock one from the downloaded ZIP archive. Anyway, it's attached. I tried switching the EOL chars, to no avail. http://old.nabble.com/file/p27998442/Makefile.PL Makefile.PL Daniel Lemke wrote: Acutally, I'm quite sure this is a problem of your makefile. It may be

Re: The Impossible Rule??? Bug???

2010-03-23 Thread --[ UxBoD ]--
- corpus.defero corpus.def...@idnet.com wrote: I was looking at a piece of irritating pill spam this morning ((http://pastebin.com/qzj83QKq)) and noticed this in the body, just after a random excerpt from chapter 58 of 'The Awakening': ---34AD8EF316667417464496762D36F3502061F3

Re: The Impossible Rule??? Bug???

2010-03-23 Thread corpus.defero
On Tue, 2010-03-23 at 10:00 +, --[ UxBoD ]-- wrote: mimeheader __ANY_IMAGE_ATTACHContent-Type =~ /image\/(?:gif|jpe?g|png|bmp)/ mimeheader MIME_IMAGE_JPGContent-Type =~ /image\/jpg/ describe MIME_IMAGE_JPGContains wrong MIME type image\/jpg score

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-23 Thread Daniel Lemke
weirdbeardmt wrote: The Makefile.PL is the stock one from the downloaded ZIP archive. Anyway, it's attached. It's the generated Makefile that is needed ;) The Makefile.PL is a perl script which builds a file called Makefile (without extension). Nmake tries to compile Makefile so your

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-23 Thread weirdbeardmt
Hah. sorry, too early, not thinking straight. Try again. http://old.nabble.com/file/p27998910/Makefile Makefile Daniel Lemke wrote: It's the generated Makefile that is needed ;) The Makefile.PL is a perl script which builds a file called Makefile (without extension). Nmake tries to

Re: The Impossible Rule??? Bug???

2010-03-23 Thread Martin Gregorie
On Tue, 2010-03-23 at 09:35 +, corpus.defero wrote: Having some time to play I was interested to see a slight mismatch there in the content type. Claims to be a bmp, but has a .jpg extension. Feeling it was worthy of a couple of points (it scored 0 when it first arrived) I tried to create

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-23 Thread Daniel Lemke
Hmm some strange things here... What does perl -V:make tell you? Should be something like make='nmake'; I found some references to MinGW, do you need it for any reason or would it be possible to uninstall it? -- View this message in context:

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-23 Thread weirdbeardmt
Dan - don't tell me how, but I think we're cooking on gas now. First off - MinGW was installed to get rid of the error messages I was seeing about not having a C compiler installed. Anyway, I uninstalled. I then checked the make version as below - and it said C:\perl...\dmake.exe. So I removed

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-23 Thread Daniel Lemke
weirdbeardmt wrote: Dan - don't tell me how, but I think we're cooking on gas now. First off - MinGW was installed to get rid of the error messages I was seeing about not having a C compiler installed. Anyway, I uninstalled. Nice to hear that ;) You won't need a C compiler unless you

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-23 Thread Daniel Lemke
Daniel Lemke wrote: Microsoft Virtual Studio (Express Edition is free of charge) argh I mean Visual Studio Express -- View this message in context: http://old.nabble.com/Installation-error-on-Windows-Server-2008---64-bit-tp27950951p28000599.html Sent from the SpamAssassin - Users

Re: Rules correct ?

2010-03-23 Thread Benny Pedersen
On man 22 mar 2010 13:15:36 CET, Ned Slider wrote header__MY_FILTRAGE_FROM_93 From =~ /txxa\.px...@makk\.fi/ header__MY_FILTRAGE_TO_93 To =~ /\...@exxent\.net/ meta MY_FILTRAGE_93 (__MY_FILTRAGE_FROM_93 __MY_FILTRAGE_TO_93) scoreMY_FILTRAGE_93 200 add

Re: Installation error on Windows Server 2008 / 64-bit

2010-03-23 Thread weirdbeardmt
Daniel - thanks so much for your help. Now all working. Our e-marketing platform is now correctly processing SA (hence no need for spamc). Cheers. Daniel Lemke wrote: Nice to hear that ;) You won't need a C compiler unless you want to build spamc. If you want to, safest way to do is

Re: Yahoo/URL spam

2010-03-23 Thread Alex
Hi Charles, /^[^a-z]{0,10}(http:\/\/|www\.)(\w+\.)+(com|net|org|biz|cn|ru)\/?[^ ]{0,20}[^a-z]{0,10}$/msi This allows for some amount (up to ten chars?) of text before and after the URI if I'm reading that right, correct? Nope. With the /ms flags ^ and $ at beginning and end match the

Re: Yahoo/URL spam

2010-03-23 Thread John Horne
On Tue, 2010-03-23 at 13:18 -0400, Alex wrote: Hi Charles, /^[^a-z]{0,10}(http:\/\/|www\.)(\w+\.)+(com|net|org|biz|cn|ru)\/?[^ ]{0,20}[^a-z]{0,10}$/msi This is what I have: /^[^a-z]{0,10}(http:\/\/|www\.)(\w+\.)+(com|net|org|biz|cn|ru)\/?[^ ]{0,20}[a-z]{0,10}$/msi ^

thelinktrack.com URL redirect

2010-03-23 Thread neil
Hi; We are noticing a number of phishing mails with a clone of one of our webmail pages coming in. The interesting thing is the site they bounce through. The site collects some user info such as OS, browser etc. It appears an interesting way to obfuscate a url and collect data at the same time.

Re: [sa] Re: Yahoo/URL spam

2010-03-23 Thread Charles Gregory
On Tue, 23 Mar 2010, Alex wrote: This is what I have: /^[^a-z]{0,10}(http:\/\/|www\.)(\w+\.)+(com|net|org|biz|cn|ru)\/?[^ ]{0,20}[a-z]{0,10}$/msi My bad. I got an option wrong. Please remove the 'm' above. I always get it backwards. According to 'man perlre' (the definitive resource for SA

lint dostech/SARE errors

2010-03-23 Thread Alex
Hi all, Should I not be using: 72_sare_redirect_post3_0_0_cf_sare_sa-update_dostech_net It generates several dependency problems, including: SARE_RD_SAFE has undefined dependency 'SARE_RD_SAFE_MKSHRT' SARE_RD_SAFE has undefined dependency 'SARE_RD_SAFE_GT' SARE_RD_SAFE has undefined

Reprocess emails that end up in /var/virusmails

2010-03-23 Thread James R. Marcus
Last email had the wrong subject. I have a few emails from internal servers that got flagged as SPAM. I added trusted_networks 10.10.10.0/24 to my local.cf so that emails from those servers aren't checked for SPAM. I have the IDs for emails that are in the /var/virusmails directory. Is there

Re: Reprocess emails that end up in /var/virusmails

2010-03-23 Thread Karsten Bräckelmann
On Tue, 2010-03-23 at 17:22 -0400, James R. Marcus wrote: Last email had the wrong subject. Has been rejected and won't show up on the list, FWIW, since you're not (yet!) subscribed anyway. I have a few emails from internal servers that got flagged as SPAM. I added trusted_networks

Re: The Impossible Rule??? Bug???

2010-03-23 Thread David B Funk
On Tue, 23 Mar 2010, --[ UxBoD ]-- wrote: - corpus.defero corpus.def...@idnet.com wrote: I was looking at a piece of irritating pill spam this morning ((http://pastebin.com/qzj83QKq)) and noticed this in the body, just after a random excerpt from chapter 58 of 'The Awakening':

Re: lint dostech/SARE errors

2010-03-23 Thread Kai Schaetzl
Alex wrote on Tue, 23 Mar 2010 17:34:11 -0400: Should I not be using: *sare*update_dostech_net correct. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Reprocess emails that end up in /var/virusmails

2010-03-23 Thread Kai Schaetzl
James R. Marcus wrote on Tue, 23 Mar 2010 17:22:04 -0400: Last email had the wrong subject. And this one is still incorrect as it is a reply to a thread. Please use the new message button in your client. The reply button is for, surprise, replies. Kai -- Get your web at Conactive Internet

Re: Reprocess emails that end up in /var/virusmails

2010-03-23 Thread Mark Martinec
James, I have a few emails from internal servers that got flagged as SPAM. I added trusted_networks 10.10.10.0/24 to my local.cf so that emails from those servers aren't checked for SPAM. I have the IDs for emails that are in the /var/virusmails directory. Is there a way I can reprocess

Re: The Impossible Rule??? Bug???

2010-03-23 Thread Jonas Eckerman
On 2010-03-23 12:14, Martin Gregorie wrote: Is there any possibility that somebody who is more knowledgeable than I am about images and Perl can extend it to handle BMP and SVG (as a pre-emptive strike)? Not exactly that, but I have written a non-image-specific SA plugin that can check for