sa-update and location of rules

2008-06-16 Thread Helmut Schneider
Hi, running FreeBSD I have two directories with rules in it: /usr/local/share/spamassassin /var/db/spamassassin/3.002005/updates_spamassassin_org Which is the correct directory, which rules are used? Thanks, Helmut -- No Swen today, my love has gone away My mailbox stands for lorn, a symbol

Re: SpamAssassin 3.2.5 committed to FreeBSD ports

2008-06-17 Thread Helmut Schneider
Len Conrad [EMAIL PROTECTED] wrote: Does libkrb5.so.8 exist (usually in /usr/lib/)?! no. installed heimdal then krb5 from ports, no problem. re-booted. same msgs as before in sshd logs. sshd won't allow any logins. and complains same as before. Did you install security/krb5 or

Re: SpamAssassin 3.2.5 committed to FreeBSD ports

2008-06-17 Thread Helmut Schneider
Helmut Schneider [EMAIL PROTECTED] wrote: Len Conrad [EMAIL PROTECTED] wrote: Does libkrb5.so.8 exist (usually in /usr/lib/)?! no. installed heimdal then krb5 from ports, no problem. re-booted. same msgs as before in sshd logs. sshd won't allow any logins. and complains same

Re: sa-update and location of rules

2008-06-17 Thread Helmut Schneider
Theo Van Dinter [EMAIL PROTECTED] wrote: On Tue, Jun 17, 2008 at 10:42:41AM +0200, Helmut Schneider wrote: So /var/db/spamassassin/version/updates_spamassassin_org has precedence over /usr/local/etc/mail/spamassassin? Some kind of version checking or rather the existence of the rules file? What

Re: sa-update and location of rules

2008-06-18 Thread Helmut Schneider
Theo Van Dinter [EMAIL PROTECTED] wrote: On Tue, Jun 17, 2008 at 09:56:49PM +0200, Helmut Schneider wrote: FWIW, the directories and their order are well documented in the spamassassin POD. Could you please point me to the exact location? Thanks. (you could also use man) $ perldoc

whitelist_from/whitelist_auth and custom score

2008-07-02 Thread Helmut Schneider
Hi, I would like to do some whitelisting for an external mailing list. I found whitelist_from and whitelist_auth but they automatically score -100. Is there a way to use whitelist_* or something similiar with a custom score? Thanks, Helmut -- No Swen today, my love has gone away My mailbox

Re: whitelist_from/whitelist_auth and custom score

2008-07-04 Thread Helmut Schneider
On Wed, 2008-07-02 at 11:12 +0200, Helmut Schneider wrote: I would like to do some whitelisting for an external mailing list. I found whitelist_from and whitelist_auth but they automatically score -100. Is there a way to use whitelist_* or something similiar with a custom score? amavisd-new

Performance problem body tests

2010-06-02 Thread Helmut Schneider
Hi, with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance problem: [/var/amavis/tmp]# spamassassin -D -lint /var/amavis/tmp/amavis-20100602T192227-44802/email.txt Jun 2 21:37:08.809 [50826] warn: The -l option has been deprecated and is no longer supported, ignoring. Jun 2

Re: Performance problem body tests

2010-06-02 Thread Helmut Schneider
David Michaels wrote: Quoting Helmut Schneider jumpe...@gmx.de: Hi, with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance problem: [...] timing: total 36840 ms - init: 3827 (10.4%), parse: 43 (0.1%), extract_message_metadata: 822 (2.2%), get_uri_detail_list: 178

Re: [sa] Performance problem body tests

2010-06-03 Thread Helmut Schneider
Charles Gregory wrote: On Wed, 2 Jun 2010, Helmut Schneider wrote: with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance problem: What distinguishes 'certain mails'? Length? Content? Mime attachements? It's around 1 of 1000, I caught one that was a HTML mail, 100kB

Re: Performance problem body tests

2010-06-03 Thread Helmut Schneider
Helmut Schneider wrote: with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance problem: [...] Any idea where to start? Appendix: I set up a fresh and clean FreeBSD 8.0 with only SA 3.3.1 and Perl 5.10.1_1 and the problem still persists. I then removed all packages, compiled perl

Re: Performance problem body tests

2010-06-03 Thread Helmut Schneider
Helmut Schneider wrote: with certain mails on FreeBSD 8.0 and SA 3.3.1 I have a performance problem: I might have been able to catch a non-confident example mail[1] (bad example because of the size, but an example). While SA 3.2.5 needs ~45 seconds, with SA 3.3.1: Jun 4 03:36:41.029 [56496

Bayes expiration

2011-01-19 Thread Helmut Schneider
Hi, I set use_bayes 1 bayes_auto_learn1 bayes_expiry_max_db_size30 bayes_auto_expire 1 bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn

Re: Bayes expiration

2011-01-19 Thread Helmut Schneider
Michael Scheidell wrote: On 1/19/11 6:04 AM, Helmut Schneider wrote: bayes_auto_expire 1 disable auto expire and run a cronjob. OK...but..why? :) make sure you run the cronjob for each user in bayes. The database ist global...

Re: Bayes expiration

2011-01-19 Thread Helmut Schneider
Michael Scheidell wrote: On 1/19/11 7:56 AM, Helmut Schneider wrote: Michael Scheidell wrote: On 1/19/11 6:04 AM, Helmut Schneider wrote: bayes_auto_expire 1 disable auto expire and run a cronjob. OK...but..why? :) to fix your problem. [helmut

Re: Bayes expiration

2011-01-19 Thread Helmut Schneider
Michael Scheidell wrote: On 1/19/11 8:16 AM, Helmut Schneider wrote: 1295442708, Last: 1295442672, atime: 0, count: 0, newdelta: 0, ratio: 0, period: 43200 or, it has been trying (automatically) for a while. remove auto expire (at least) done. change to this also bayes_store_module

Re: Bayes expiration

2011-01-19 Thread Helmut Schneider
RW wrote: On Wed, 19 Jan 2011 13:16:09 + (UTC) Helmut Schneider jumpe...@gmx.de wrote: Michael Scheidell wrote: On 1/19/11 7:56 AM, Helmut Schneider wrote: Michael Scheidell wrote: On 1/19/11 6:04 AM, Helmut Schneider wrote: bayes_auto_expire

Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Hi, Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally and forwarded to SA. The mailrelays of the external provider are listed in

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
John Hardin wrote: On Mon, 10 Sep 2012, Helmut Schneider wrote: Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails are not recognized as SPAM externally

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Dave Funk wrote: On Mon, 10 Sep 2012, John Hardin wrote: On Mon, 10 Sep 2012, Helmut Schneider wrote: Short story: Can I exclude hosts from RCVD_IN_DNSWL_LOW/MED/HI? Long story: We are using an external provider to filter SPAM. We also use SA internally. Sometimes mails

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Kris Deugau wrote: Helmut Schneider wrote: If I understood you correctly I'd need to add all relays of MessageLabs to trusted_networks and also track any IP address changes... If you don't have that info, and their support refuses to tell you, tailing your inbound logs for a while

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Matthias Leisi wrote: On Mon, Sep 10, 2012 at 8:34 PM, Helmut Schneider jumpe...@gmx.de wrote: It looks like RCVD_IN_DNSWL_MED examines firstuntrusted and if he trusts his MX/relays correctly then this shouldn't be happening. In general, setting up the trustpath correctly is sufficient

Re: Exclude from RCVD_IN_DNSWL_MED

2012-09-10 Thread Helmut Schneider
Helmut Schneider wrote: Kris Deugau wrote: Helmut Schneider wrote: but if their support refuses to tell you, I'd be looking at switching providers I guess they would if they knew themselves. But project switch is ongoing... :) http://images.messagelabs.com/EmailResources

whitelisting despite of trusted_networks

2013-03-13 Thread Helmut Schneider
Hi, after a discussion here on September 12th I added MessageLabs to trusted_networks. If I understood posts in the net correctly this might be the reason why whitelist_ does not work anymore. Mar 13 14:44:04.119 [17641] dbg: spf: relayed through one or more trusted relays, cannot use

Re: whitelisting despite of trusted_networks

2013-03-13 Thread Helmut Schneider
Benny Pedersen wrote: Helmut Schneider skrev den 2013-03-13 15:19: How can I whiltelist(_auth) senders now? if sender ip is whitelisted, does it then make sense to whitelist based on dkim/spf ? note here dkim is not using ip at all ? I want to whitelist email adresses, not IPs

sa-update, can't resolve localhost to address

2007-06-14 Thread Helmut Schneider
Hi, [EMAIL PROTECTED] ~]# uname -rs OpenBSD 4.0 [EMAIL PROTECTED] ~]# When I run sa-update I get the error below: [EMAIL PROTECTED] ~]# sa-update --nogpg can't resolve localhost to address at /usr/local/libdata/perl5/site_perl/i386-openbsd/Net/DNS/Resolver/Base.pm line 751. [EMAIL PROTECTED]

Re: sa-update, can't resolve localhost to address

2007-06-15 Thread Helmut Schneider
Hi, From: Justin Mason [EMAIL PROTECTED] [EMAIL PROTECTED] ~]# sa-update --nogpg can't resolve localhost to address at /usr/local/libdata/perl5/site_perl/i386-openbsd/Net/DNS/Resolver/Base.pm line 751. [EMAIL PROTECTED] ~]# A guess-- you have server localhost in /etc/resolv.conf. In deed,

Re: sa-update, can't resolve 'localhost' to address

2007-06-15 Thread Helmut Schneider
From: Duncan Hill [EMAIL PROTECTED] On Fri, June 15, 2007 08:20, Helmut Schneider wrote: From: Justin Mason [EMAIL PROTECTED] [EMAIL PROTECTED] ~]# sa-update --nogpg can't resolve localhost to address at /usr local/libdata/perl5/site_perl/i386-openbsd/Net/DNS/Resolver/Base.pm line 751

AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

2007-07-10 Thread Helmut Schneider
Hi, I tried to set up SA with AMaViS in a chrooted environment ($daemon_chroot_dir = $MYHOME). I (thought I) copied all necessary files to the jail but when SA is starting I get an error: Jul 10 10:44:02 TEG /usr/local/sbin/amavisd[6817]: SpamControl: initializing Mail::SpamAssassin Error

Re: AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

2007-07-10 Thread Helmut Schneider
From: Leon Kolchinsky [EMAIL PROTECTED] I tried to set up SA with AMaViS in a chrooted environment ($daemon_chroot_dir = $MYHOME). I (thought I) copied all necessary files to the jail but when SA is starting I get an error: Jul 10 10:44:02 TEG /usr/local/sbin/amavisd[6817]: SpamControl:

Re: AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

2007-07-10 Thread Helmut Schneider
From: Leon Kolchinsky [EMAIL PROTECTED] Stupid question, but $MYHOME = /var/amavis ? Yes Also you can try to debug it with strace. Look for all the files you're missing in the jail and copy them into it. (here is a little example on how to use strace to find requirements outside the jail -

Re: AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

2007-07-10 Thread Helmut Schneider
From: Helmut Schneider [EMAIL PROTECTED] [problems resolving a host] Damn!! [EMAIL PROTECTED] ~]# cat /var/amavis/test2.pl #!/usr/bin/perl -w use Net::DNS; my $res = Net::DNS::Resolver-new; my $query = $res-search(www.google.de); if ($query) { foreach my $rr ($query-answer

Re: AMaViS/SA chrroted: Error creating a DNS resolver socket: No such file or directory

2007-07-10 Thread Helmut Schneider
From: Leon Kolchinsky [EMAIL PROTECTED] I've never run amavisd-new in chroot, but may be you'll find some tips here - http://www.ijs.si/software/amavisd/README.chroot Seems to me like a resolver issue (probably need to configure FreeBSD a little different than OpenBSD). Best Regards, Well,

report_safe does not work

2007-07-12 Thread Helmut Schneider
Hi, I use amavisd-new 2.52 and SA3.21 chroot'ed. [EMAIL PROTECTED] ~]# grep -ir report_safe /var/amavis/usr/local/etc/mail/spamassassin/local.cf # report_safe 1 report_safe 2 [EMAIL PROTECTED] ~]# spamassassin --lint -d [...] [15632] dbg: config: read file

Re: report_safe does not work

2007-07-13 Thread Helmut Schneider
From: Wolfgang Zeikat [EMAIL PROTECTED] On 07/12/07 15:47, Helmut Schneider wrote: Hi, I use amavisd-new 2.52 and SA3.21 chroot'ed. Is there a setting that only mail with a hit greater than X is modified? Or did I miss anything else? AFAIK, amavisd-new has it's own ways of using SA

OT: digest version of mailing list

2007-07-18 Thread Helmut Schneider
Hi, sorry if I missed something but is there also a digest version of the mailing list? I searched http://wiki.apache.org/spamassassin/MailingLists but only found subscribe and unsubscribe. Thanks, Helmut

Re: OT: digest version of mailing list

2007-07-18 Thread Helmut Schneider
From: SM [EMAIL PROTECTED] At 07:41 18-07-2007, Helmut Schneider wrote: sorry if I missed something but is there also a digest version of the mailing list? I searched http://wiki.apache.org/spamassassin/MailingLists but only found subscribe and unsubscribe. Send an email to [EMAIL PROTECTED

Filter from *and* to

2009-01-16 Thread Helmut Schneider
Hi, can I (and if how) create a filter that catches mails _from_and_to_ specific email addresses? It should only apply if a specific sender sendw an email to a specific recipient. Thanks, Helmut -- No Swen today, my love has gone away My mailbox stands for lorn, a symbol of the dawn

Re: Filter from *and* to

2009-01-16 Thread Helmut Schneider
Helmut Schneider jumpe...@gmx.de wrote: can I (and if how) create a filter that catches mails _from_and_to_ specific email addresses? It should only apply if a specific sender sendw an email to a specific recipient. I can use a meta rule, thanks. -- No Swen today, my love has gone away My

move bayes-db to mysql, unable to initialize database for amavis user, aborting!

2009-04-22 Thread Helmut Schneider
Hi, I tried to move a global (not per user) bayes-db to mysql5.0 to use it with 3 different machines. From local.cf: use_bayes 1 bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn DBI:mysql:SpamAssassin bayes_sql_username amavis

Re: move bayes-db to mysql, unable to initialize database for amavis user, aborting!

2009-04-22 Thread Helmut Schneider
Micke Andersson m...@swemic.net wrote: Helmut Schneider wrote: Hi, I tried to move a global (not per user) bayes-db to mysql5.0 to use it with 3 different machines. From local.cf: use_bayes 1 bayes_store_module Mail::SpamAssassin::BayesStore::SQL bayes_sql_dsn

bayes options

2009-04-23 Thread Helmut Schneider
Hi, where can I find a complete set of (bayes) options for local.cf? Either it's well hidden or even http://spamassassin.apache.org/ does not provide such a list. Thanks, Helmut -- No Swen today, my love has gone away My mailbox stands for lorn, a symbol of the dawn

Re: bayes options

2009-04-23 Thread Helmut Schneider
Matt Kettler mkettler...@verizon.net wrote: Helmut Schneider wrote: where can I find a complete set of (bayes) options for local.cf? Either it's well hidden or even http://spamassassin.apache.org/ does not provide such a list. Thanks, Helmut http://spamassassin.apache.org/full/3.2.x/doc

Re: URIDNSBL

2009-04-24 Thread Helmut Schneider
I am using the 3.0 line of SpamAssassin and it's being invoked through amavisd-maia (Maia Mailguard.) I have a certain domain name that's blocked in several of the URIDNSBL lists as fm.interia.pl however my DNSBL checks are only doing interia.pl Just as I'm curious, what does SA score that

meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency '__AC_RHASH_URIb'

2014-02-18 Thread Helmut Schneider
Hi, all over sudden all my installations (3.3.1 and 3.3.2) show rules: meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency '__AC_RHASH_URIb' when checking rules. Whats's wrong? Thanks, Helmut

Re: meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency '__AC_RHASH_URIb'

2014-02-18 Thread Helmut Schneider
Helmut Schneider wrote: all over sudden all my installations (3.3.1 and 3.3.2) show To be more precise: Feb 18 20:48:03.261 [68576] dbg: rules: meta test AC_SPAMMY_URI_PATTERNS6 has undefined dependency '__AC_RHASH_URIb' Feb 18 20:48:03.261 [68576] dbg: rules: meta test AC_SPAMMY_URI_PATTERNS6

meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512'

2014-04-06 Thread Helmut Schneider
Hi, over the last weeks I constantly run into issues when I cannot get SA up again because of broken rule sets. Today it's Apr 6 17:06:01.960 [31092] dbg: rules: meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512' Is something wrong in my process or do we have a problem

Re: meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512'

2014-04-06 Thread Helmut Schneider
John Hardin wrote: On Sun, 6 Apr 2014, Helmut Schneider wrote: over the last weeks I constantly run into issues when I cannot get SA up again because of broken rule sets. Today it's Apr 6 17:06:01.960 [31092] dbg: rules: meta test HEXHASH_WORD has undefined dependency

Re: meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512'

2014-04-06 Thread Helmut Schneider
Dave Funk wrote: On Sun, 6 Apr 2014, Helmut Schneider wrote: over the last weeks I constantly run into issues when I cannot get SA up again because of broken rule sets. Today it's Apr 6 17:06:01.960 [31092] dbg: rules: meta test HEXHASH_WORD has undefined dependency

Re: meta test HEXHASH_WORD has undefined dependency '__KAM_BODY_LENGTH_LT_512'

2014-04-07 Thread Helmut Schneider
John Hardin wrote: On Sun, 6 Apr 2014, Helmut Schneider wrote: John Hardin wrote: On Sun, 6 Apr 2014, Helmut Schneider wrote: over the last weeks I constantly run into issues when I cannot get SA up again because of broken rule sets. Today it's Apr 6 17:06:01.960

Fixing ALL_TRUSTED=-1

2016-04-11 Thread Helmut Schneider
Hi, for more than 6 months I'm trying to fix ALL_TRUSTED=-1 without success. I have read https://wiki.apache.org/spamassassin/TrustPath and https://wiki.apache.org/spamassassin/FixingAllTrusted carefully, put trusted_networks 10.0.0.0/8 172.16.0.0/12 192.168.0.0/16 internal_networks 10.0.0.0/8

Re: Fixing ALL_TRUSTED=-1

2016-04-11 Thread Helmut Schneider
Martin Gregorie wrote: > On Mon, 2016-04-11 at 14:55 +0000, Helmut Schneider wrote: > > > > Hi, > > > > for more than 6 months I'm trying to fix ALL_TRUSTED=-1 without > > success. > > > > I have read https://wiki.apache.org/spamassassin/TrustPath

Re: Fixing ALL_TRUSTED=-1

2016-04-11 Thread Helmut Schneider
Bowie Bailey wrote: > On 4/11/2016 10:55 AM, Helmut Schneider wrote: > > Hi, > > > > for more than 6 months I'm trying to fix ALL_TRUSTED=-1 without > > success. > > > > I have read https://wiki.apache.org/spamassassin/TrustPath and > > https://

Re: Fixing ALL_TRUSTED=-1

2016-04-12 Thread Helmut Schneider
Bill Cole wrote: > On 11 Apr 2016, at 10:55, Helmut Schneider wrote: > > > Hi, > > > > for more than 6 months I'm trying to fix ALL_TRUSTED=-1 without > > success. > > Did it just start showing up 6 months ago on a previously-working > SpamAssassin insta

Re: Fixing ALL_TRUSTED=-1

2016-04-12 Thread Helmut Schneider
Bill Cole wrote: > On 12 Apr 2016, at 9:03, Helmut Schneider wrote: > > > Bill Cole wrote: > > > > > Pipe that message into "spamassassin -t -D > > > dns,received-header,metadata" *running as the same user that runs > > > your Amav

Re: Fixing ALL_TRUSTED=-1

2016-04-12 Thread Helmut Schneider
Helmut Schneider wrote: > Bill Cole wrote: > > > On 12 Apr 2016, at 9:03, Helmut Schneider wrote: > > > > > Bill Cole wrote: > > > > > > > Pipe that message into "spamassassin -t -D > > > > dns,received-header,metadata"

Re: remaining relays will be considered trusted, but no longer internal

2016-04-15 Thread Helmut Schneider
Reindl Harald wrote: > > Am 15.04.2016 um 16:08 schrieb Helmut Schneider: > > What does "submission" mean in this context? > > ESMT(S)A > > https://en.wikipedia.org/wiki/SMTP_Authentication I'm neither using authentication nor smtp submission (TCP587).

Re: remaining relays will be considered trusted, but no longer internal

2016-04-15 Thread Helmut Schneider
Helmut Schneider wrote: > when further investigating my issue that ALL_TRUSTED is always true I > came along the following lines when debugging SA: > > Apr 15 11:44:43.211 mail /usr/sbin/amavisd-new[9991]: (09991-02) SA > dbg: received-header: parsed as [ ip=172.20.12.10 rdns=

Re: remaining relays will be considered trusted, but no longer internal

2016-04-15 Thread Helmut Schneider
RW wrote: > On Fri, 15 Apr 2016 12:35:24 +0100 > RW wrote: > > > On Fri, 15 Apr 2016 10:10:13 + (UTC) > > Helmut Schneider wrote: > > > > > Hi, > > > > > > when further investigating my issue that ALL_TRUSTED is always > &g

Re: remaining relays will be considered trusted, but no longer internal

2016-04-15 Thread Helmut Schneider
RW wrote: > On Fri, 15 Apr 2016 14:08:15 + (UTC) > Helmut Schneider wrote: > > > RW wrote: > > > > > On Fri, 15 Apr 2016 12:35:24 +0100 > > > RW wrote: > > > > > > > On Fri, 15 Apr 2016 10:10:13 + (

remaining relays will be considered trusted, but no longer internal

2016-04-15 Thread Helmut Schneider
Hi, when further investigating my issue that ALL_TRUSTED is always true I came along the following lines when debugging SA: Apr 15 11:44:43.211 mail /usr/sbin/amavisd-new[9991]: (09991-02) SA dbg: received-header: parsed as [ ip=172.20.12.10 rdns=relay-in helo=mail2 by=mail01 ident= envfrom=

whitelist_from_rcvd hits only sometimes

2019-02-28 Thread Helmut Schneider
Hi, I'm trying to find out why a message sometimes hits whitelist_from_rcvd and sometimes does not. I checked the headers again and again but cannot see the difference. whitelist_from_rcvd quarant...@eu.quarantine.symantec.com messagelabs.com whitelist_from_rcvd