Re: Is there a way to block invalid non delivery notifications?

2010-07-03 Thread jdow

From: Daniel Lemke le...@jam-software.com
Sent: Friday, 2010/July/02 06:36


Matus UHLAR - fantomas wrote:


apparently not enough of NDRs. I trained bayes with many notices and it
was
able to detect as expected then.


It apparently does learn the ndrs given, but as we send a newsletter from
time to time (that produces ndrs as well), Bayes seems to learn ndrs as 
ham

continuously.


Matus UHLAR - fantomas wrote:


BAYES_99 and CHARSET_FARAWAY together should score enough to score as
spam.
*BOUNCE_MESSAGE score only 0.1 and rising them is not safe.


Is it such a bad idea to rise the score? Or is the general purpose to
combine it with some sort of meta?

By the way, is it possible to rescore or disable one rule, if another
already hit (thought on something like disabling bayes when BOUNCE_MESSAGE
already hit)? This way I could disable Bayes when BOUNCE_MESSAGE already
hit. Yeah I know that's kind of bogus config but it'd be very suitable for
our purpose.


META rules are good for this sort of application.

{^_^} 



upgrade 3.2.1 to 3.2.5: dcc not working, headers not being added

2010-07-03 Thread Robert S
I've upgraded from 3.2.1 to 3.2.5 on gentoo.  It appears that dcc is
broken.  My messages no longer get the dcc header:

was: X-Spam-DCC: x.dcc-servers: hostname 104; Body=1 Fuz1=1 Fuz2=1

now: X-Spam-DCC: _DCCB_: _DCCR_

my init.pre contains (and has always contained) the following:

use_dcc 1
DCC_dccifd_path /var/dcc/dccifd
dcc_timeout 20
add_header  all DCC _DCCB_: _DCCR_

the dccifd daemon is running:

 # ps ax |grep dcc
11838 ?Ss 0:00 /usr/sbin/dccifd -tCMN,50, -l/var/log/dcc
-wwhiteclnt -Uuserdirs -SHELO -Smail_host -SSender -SList-ID
11839 ?Sl 0:00 /usr/sbin/dccifd -tCMN,50, -l/var/log/dcc
-wwhiteclnt -Uuserdirs -SHELO -Smail_host -SSender -SList-ID

It appears that the dcc plugin exists - the following file is on the
system: /usr/share/spamassassin/25_dcc.cf

There are no new messages appearing in the /var/log/dcc/ directory

Here is some debug output:

 $ spamassassin -D dcc  sample-spam.txt 21 |less
[11872] dbg: dcc: network tests on, registering DCC
Return-Path: j...@dogma.slashnull.org
X-Spam-DCC: _DCCB_: _DCCR_
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on
hostname.domainname.com.au
X-Spam-Level: *
X-Spam-Status: Yes, score=5.0 required=5.0 tests=BOTNET autolearn=no
version=3.2.5
X-Spam-Report:
*  5.0 BOTNET Relay might be a spambot or virusbot
*  
[botnet0.8,ip=212.17.35.15,rdns=dogma.slashnull.org,maildomain=dogma.slashnull.org
jm,baddns]

Can somebody help here?

Incidentally the X-Spam-Level: and X-Spam-Status: headers have stopped
appearing in my messages since the upgrade and I've had to add the
following to my local.cf:

add_header all Level _STARS(*)_
add_header all Status _YESNO_, score=_SCORE_ required=_REQD_
tests=_TESTS_ autolearn=_AUTOLEARN_ version=_VERSION_


Problems with File::Scan::ClamAV

2010-07-03 Thread sebast...@debianfan.de

Hello,

i have a debian Lenny system with SpamAssassin version 3.3.1
  running on Perl version 5.10.0.

I had installed clamav and i got a problem by installing file::scan::clamav.

At first i tried to install it in the mcpan-shell - many errors at the 
tests.


Now i tried to install it in a different way - i want to build a debian 
package and then install by paket manager.


What is wrong?

***
creating a debian package:

# dh-make-perl --cpan File::Scan::ClamAV --build
Dispatching deprecated method 'CPAN::Config::load' to CPAN::HandleConfig
Going to read '/root/.cpan/Metadata'
  Database was generated on Thu, 01 Jul 2010 23:27:05 GMT
CPAN: Time::HiRes loaded ok (v1.9721)
Fetching with LWP:
  ftp://ftp.fu-berlin.de/unix/languages/perl/authors/01mailrc.txt.gz
Going to read '/root/.cpan/source/authors/01mailrc.txt.gz'
Going to read 1 yaml file from /root/.cpan/build/
DONE
Restored the state of none (in 0.0301 secs)
DONE
Fetching with LWP:

ftp://ftp.fu-berlin.de/unix/languages/perl/modules/02packages.details.txt.gz
Going to read '/root/.cpan/source/modules/02packages.details.txt.gz'
  Database was generated on Sat, 03 Jul 2010 00:27:33 GMT
DONE
Fetching with LWP:
  ftp://ftp.fu-berlin.de/unix/languages/perl/modules/03modlist.data.gz
Going to read '/root/.cpan/source/modules/03modlist.data.gz'
DONE
Going to write /root/.cpan/Metadata
Fetching with LWP:

ftp://ftp.fu-berlin.de/unix/languages/perl/authors/id/J/JA/JAMTUR/File-Scan-Cl 


 amAV-1.91.tar.gz
CPAN: Digest::SHA loaded ok (v5.48)
  Checksum was ok
CPAN: Archive::Tar loaded ok (v1.62)
File-Scan-ClamAV-1.91/
File-Scan-ClamAV-1.91/META.yml
File-Scan-ClamAV-1.91/README
File-Scan-ClamAV-1.91/testfiles/
File-Scan-ClamAV-1.91/testfiles/innocent
File-Scan-ClamAV-1.91/testfiles/clamavtest.gz
File-Scan-ClamAV-1.91/testfiles/clamavtest
File-Scan-ClamAV-1.91/testfiles/clamavtest.zip
File-Scan-ClamAV-1.91/t/
File-Scan-ClamAV-1.91/t/pod.t
File-Scan-ClamAV-1.91/t/01ping.t
File-Scan-ClamAV-1.91/t/04scan.t
File-Scan-ClamAV-1.91/t/05streamscan.t
File-Scan-ClamAV-1.91/t/02reload.t
File-Scan-ClamAV-1.91/t/03quit.t
File-Scan-ClamAV-1.91/t/00basic.t
File-Scan-ClamAV-1.91/t/pod-coverage.t
File-Scan-ClamAV-1.91/t/mkconf.pl
File-Scan-ClamAV-1.91/Makefile.PL
File-Scan-ClamAV-1.91/Changes
File-Scan-ClamAV-1.91/lib/
File-Scan-ClamAV-1.91/lib/File/
File-Scan-ClamAV-1.91/lib/File/Scan/
File-Scan-ClamAV-1.91/lib/File/Scan/ClamAV.pm
File-Scan-ClamAV-1.91/MANIFEST.SKIP
File-Scan-ClamAV-1.91/MANIFEST
CPAN: File::Temp loaded ok (v0.22)
Found: File-Scan-ClamAV 1.91 (libfile-scan-clamav-perl arch=all)

Using maintainer: root r...@postmaster@consultingparadise.de
Found changelog: Changes
Found docs: README
Using rules: /usr/share/dh-make-perl/rules.MakeMaker.noxs
**
Copyright information incomplete!

Upstream copyright information could not be automatically determined.

If you are building this package for your personal use, you might disregard
this information; however, if you intend to upload this package to Debian
(or in general, if you plan on distributing it), you must look into the
complete copyright information.

The causes for this warning are:
No licensing information
make: Entering directory `/root/.cpan/build/File-Scan-ClamAV-1.91'
dh_testdir
dh_testroot
dh_clean build-stamp install-stamp
# Add commands to clean up after the build process here
[ ! -f Makefile ] || make realclean
make: Leaving directory `/root/.cpan/build/File-Scan-ClamAV-1.91'
make: Entering directory `/root/.cpan/build/File-Scan-ClamAV-1.91'
dh_testdir
# Add commands to compile the package here
/usr/bin/perl Makefile.PL INSTALLDIRS=vendor
Checking if your kit is complete...
Looks good
Writing Makefile for File::Scan::ClamAV
make
make[1]: Entering directory `/root/.cpan/build/File-Scan-ClamAV-1.91'
cp lib/File/Scan/ClamAV.pm blib/lib/File/Scan/ClamAV.pm
Manifying blib/man3/File::Scan::ClamAV.3pm
make[1]: Leaving directory `/root/.cpan/build/File-Scan-ClamAV-1.91'
make test
make[1]: Entering directory `/root/.cpan/build/File-Scan-ClamAV-1.91'
PERL_DL_NONLAZY=1 CLAMD_PATH=/usr/sbin /usr/bin/perl 
-MExtUtils::Command::MM -e test_harness(0, 'blib/lib', 
'blib/arch') t/*.t

t/00basic.t ... ok
t/01ping.t  1/3 # Failed test 2 in t/01ping.t at line 26
#  t/01ping.t line 26 is: ok($av-ping);
t/01ping.t  Failed 1/3 subtests
t/02reload.t .. 1/3 # Failed test 2 in t/02reload.t at line 25
#  t/02reload.t line 25 is: ok($av-reload);
t/02reload.t .. Failed 1/3 subtests
t/03quit.t  1/4 # Failed test 2 in t/03quit.t at line 31
#  t/03quit.t line 31 is: ok($av-quit);
t/03quit.t  Failed 1/4 subtests
t/04scan.t  1/8 # Test 4 got:  (t/04scan.t at line 36)
#   Expected: 1 (Didn't detect 

Re: Problems with File::Scan::ClamAV

2010-07-03 Thread Charles Gregory

On Sat, 3 Jul 2010, sebast...@debianfan.de wrote:

i have a debian Lenny system with SpamAssassin version 3.3.1
  running on Perl version 5.10.0.


Is it running properly?

I had installed clamav and i got a problem by installing 
file::scan::clamav.


How is this connected to spamassassin? My first feeling on this is that 
you would have better luck posting this to the Debian lists. Or perhaps 
contact the author


I presume you have already googled for your errors :)

- C


Re: upgrade 3.2.1 to 3.2.5: dcc not working, headers not being added

2010-07-03 Thread Alex
Hi,

 I've upgraded from 3.2.1 to 3.2.5 on gentoo.  It appears that dcc is
 broken.  My messages no longer get the dcc header:

First, did you know that 3.3.1 was released? Otherwise, why stop at 3.2.5?

Also, it's a national holiday weekend in the US (and in CA?), so it's
likely to be slower on the list for the next few days.

  $ spamassassin -D dcc  sample-spam.txt 21 |less
 [11872] dbg: dcc: network tests on, registering DCC

How about the rest of the configuration? Are you sure the other
components are working? Try -D without the dcc and read through each
line to make sure the DCC plugin is being used and the 25_dcc.cf file
is being parsed.

 X-Spam-Status: Yes, score=5.0 required=5.0 tests=BOTNET autolearn=no
        version=3.2.5

There should have been other tests triggered by your sample, leading
me to think the rest of your configuration isn't properly working or
configured.

It's also odd that BOTNET would score a full five points, and on your
own domain. Did you change the default setting? Are you sure DNS is
working properly?

Regards,
Alex


Re: upgrade 3.2.1 to 3.2.5: dcc not working, headers not being added

2010-07-03 Thread Robert S
 I've upgraded from 3.2.1 to 3.2.5 on gentoo.  It appears that dcc is
 broken.  My messages no longer get the dcc header:

 First, did you know that 3.3.1 was released? Otherwise, why stop at 3.2.5?


3.3.1 is still marked as unstable by gentoo.  I've downgraded back
to 3.2.1 (which was working very well) and will probably wait until
3.3.* is marked as stable.  I'd like to avoid these types of issues.

  $ spamassassin -D dcc  sample-spam.txt 21 |less
 [11872] dbg: dcc: network tests on, registering DCC

 How about the rest of the configuration? Are you sure the other
 components are working? Try -D without the dcc and read through each
 line to make sure the DCC plugin is being used and the 25_dcc.cf file
 is being parsed.

 X-Spam-Status: Yes, score=5.0 required=5.0 tests=BOTNET autolearn=no
        version=3.2.5

 There should have been other tests triggered by your sample, leading
 me to think the rest of your configuration isn't properly working or
 configured.


I have a feeling that the /etc/spamassassin/*.pre files are not being
read.  A lot of other plugins aren't being read.

Maybe I should (have) put this on gentoo bugzilla.


Re: upgrade 3.2.1 to 3.2.5: dcc not working, headers not being added

2010-07-03 Thread Benny Pedersen

On lør 03 jul 2010 23:24:55 CEST, Robert S wrote

I have a feeling that the /etc/spamassassin/*.pre files are not being
read.  A lot of other plugins aren't being read.
Maybe I should (have) put this on gentoo bugzilla.


spamassassin 21 -D --lint | less

--
xpoint http://www.unicom.com/pw/reply-to-harmful.html