You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Roger Merchberger <zm...@30below.com> on 2004/04/01 17:38:04 UTC

Is it possible that local rules quit working?

Something weird has happened just within the last 10 days or so -- it seems 
that my local (home directory rules) quit working, I think...

I have some header rewriting rules in the local user_prefs file, here's a 
snippet:

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
...
whitelist_from  gretchenparker@earthlink.net
score           GAPPY_TEXT      1.00
subject_tag     [_HITS_ Spam?]
report_safe             0
always_add_headers      1
spam_level_stars        0
clear_report_template
report [[ _HITS_ out of _REQD_ -- Prolly Spam! ]]
...
=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=

I have made *no* changes to the user_prefs file in weeks (and the only 
thing I've changed in months is adding whitelist_from entries). The only 
thing I can think of that would prompt this change, is I tried setting up 
Rules Du Jour to automagically update evilrules.cf & other files. However, 
I've taken all these out, restarted spamd, and altho spamassassin still 
"works" it doesn't seem to want to do any subject header rewriting or 
anything like that. Having the spam hits value in the subject makes it 
easier to go thru enmasse...

Specs:
RedHat 9 box, 1G RAM, Athlon 1800+
Perl 5.8.0
Spamassassin 2.60
qmail 1.03 (barely patched)
*no* antivirus software
I am calling SA for individual mailboxen from a .qmail file & a custom 
python script (as ifspamh was consuming *way* too much in the way of resources)

And of course, Google & spamassassin --lint returns nothing... ;-/

Thanks for any idears,
Roger "Merch" Merchberger

--
Roger "Merch" Merchberger -- sysadmin, Iceberg Computers
zmerch@30below.com

What do you do when Life gives you lemons,
and you don't *like* lemonade?????????????


Re: Is it possible that local rules quit working?

Posted by Matthew Cline <ma...@nightrealms.com>.
On Thursday 01 April 2004 03:38 pm, Roger Merchberger wrote:
> Something weird has happened just within the last 10 days or so -- it seems
> that my local (home directory rules) quit working, I think...

You still have "allow_user_rules 1" in your local.cf?

-- 
Give a man a match, and he'll be warm for a minute, but set him on
fire, and he'll be warm for the rest of his life.

Advanced SPAM filtering software: http://spamassassin.org


Re: Is it possible that local rules quit working?

Posted by Roger Merchberger <zm...@30below.com>.
Rumor has it that Andy Jezierski may have mentioned these words:

>Silly question, do you have rewrite_subject 1  in your local.cf?  It's not 
>in your user_prefs.

Yes, as a matter of fact, I did -- but for some reason, it wasn't being 
read. (Permissions seemed fine...) So I whacked it, made a new copy of that 
file from a backup directory, reset the permissions (just in case), 
restarted spamd, and all is now well once again. :-)

I wonder if maybe my inode tables were a touch wonky? The machine doesn't 
get a fsck all that often; and mail delivery is by definition I/O bound...

Anywho, thanks all! It's working the way it should again.

Laterz,
Roger "Merch" Merchberger

--
Roger "Merch" Merchberger   | "Bugs of a feather flock together."
sysadmin, Iceberg Computers |           Russell Nelson
zmerch@30below.com          |


[OT] Re: Is it possible that local rules quit working?

Posted by LuKreme <kr...@kreme.com>.
On Apr 1, 2004, at 10:56 AM, Roger Merchberger wrote:
> If you're ever in Northern Michigan, I'll buy you a beer, or if you're 
> in Boston mid-July, I'll be there, too...  ;-)

Yoo-Pee Michigan?

>
-- 
When we woke up that morning we had no way of knowing that in a matter 
of hours we'd changed the way we were going.  Where would I be now?  
Where would I bee now if we'd never met?  Would I be singing this song 
to someone else instead?


Re: Is it possible that local rules quit working?

Posted by Andy Jezierski <aj...@stepan.com>.
Roger Merchberger <zm...@30below.com> wrote on 04/01/2004 11:56:05 AM:

> Rumor has it that Matt Kettler may have mentioned these words:
> >At 10:38 AM 4/1/04 -0500, Roger Merchberger wrote:
> >>I have made *no* changes to the user_prefs file in weeks (and the only 

> >>thing I've changed in months is adding whitelist_from entries). The 
only 
> >>thing I can think of that would prompt this change, is I tried setting 
up 
> >>Rules Du Jour to automagically update evilrules.cf & other files. 
> >>However, I've taken all these out, restarted spamd, and altho 
> >>spamassassin still "works" it doesn't seem to want to do any subject 
> >>header rewriting or anything like that. Having the spam hits value in 
the 
> >>subject makes it easier to go thru enmasse...
> >
> >Hmm... have you considered running a message through spamassassin -tD ? 

> >Perhaps the debug output might give some clues to a problem that --lint 

> >isn't reporting.
> 
> Otay, I've done that, and I still can't find any clues (altho after 
being 
> used to qmail's logs for nearly a decade; other proggies don't parse as 
> readily... ;-) )
> 
> Here's what I feel are relevant snippets, but the entire log is 
available at:
> 
> http://www.30below.com/~zmerch/sa/bork.txt  <== intuitive, eh???
> 
> (the log from that message was not spam. Even tho -t *assumes* it's 
spam, I 
> fed it a known spam as well, the log is here:)
> 
> http://www.30below.com/~zmerch/sa/bork2.txt  <== intuitive, eh???
> 
> =-=-=-=-=-=-=-=-=-=-=-=-=-= Start Here
> 
> debug: using "/usr/share/spamassassin" for default rules dir
> debug: using "/etc/mail/spamassassin" for site rules dir
> debug: using "/home/vv30/.spamassassin" for user state dir
> debug: using "/home/vv30/.spamassassin/user_prefs" for user prefs file
> debug: using "/home/vv30/.spamassassin" for user state dir
> 
> =-=-= snip =-=-=
> 
> debug: bayes: score = 0.00237964043586497
> debug: using "/home/vv30/.spamassassin" for user state dir
> debug: bayes: 26008 untie-ing
> debug: bayes: 26008 untie-ing db_toks
> debug: bayes: 26008 untie-ing db_seen
> debug: Razor2 is not available
> 
> =-=-= snip =-=-=
> 
> debug: is spam? score=-3.688 required=5 tests=BAYES_00,PRIORITY_NO_NAME
> 
> =-=-=-=-=-=-=-=-=-=-=-=-=-= End Here
> 
> Anyway, I also put the user_prefs file in question here:
> 
> http://www.30below.com/~zmerch/sa/user_prefs
> 
> *any ideas are mucho danke* ;-)
> 
> If you're ever in Northern Michigan, I'll buy you a beer, or if you're 
in 
> Boston mid-July, I'll be there, too...  ;-)
> 
> Thanks all,
> Roger "Merch" Merchberger
> 
> --
> Roger "Merch" Merchberger   ---   sysadmin, Iceberg Computers
> zmerch@30below.com
> 
> Hi! I am a .signature virus.  Copy me into your .signature to join in!
> 


Silly question, do you have rewrite_subject 1  in your local.cf?  It's not 
in your user_prefs.

Andy

Re: Is it possible that local rules quit working?

Posted by Roger Merchberger <zm...@30below.com>.
Rumor has it that Matt Kettler may have mentioned these words:
>At 10:38 AM 4/1/04 -0500, Roger Merchberger wrote:
>>I have made *no* changes to the user_prefs file in weeks (and the only 
>>thing I've changed in months is adding whitelist_from entries). The only 
>>thing I can think of that would prompt this change, is I tried setting up 
>>Rules Du Jour to automagically update evilrules.cf & other files. 
>>However, I've taken all these out, restarted spamd, and altho 
>>spamassassin still "works" it doesn't seem to want to do any subject 
>>header rewriting or anything like that. Having the spam hits value in the 
>>subject makes it easier to go thru enmasse...
>
>Hmm... have you considered running a message through spamassassin -tD ? 
>Perhaps the debug output might give some clues to a problem that --lint 
>isn't reporting.

Otay, I've done that, and I still can't find any clues (altho after being 
used to qmail's logs for nearly a decade; other proggies don't parse as 
readily... ;-) )

Here's what I feel are relevant snippets, but the entire log is available at:

http://www.30below.com/~zmerch/sa/bork.txt  <== intuitive, eh???

(the log from that message was not spam. Even tho -t *assumes* it's spam, I 
fed it a known spam as well, the log is here:)

http://www.30below.com/~zmerch/sa/bork2.txt  <== intuitive, eh???

=-=-=-=-=-=-=-=-=-=-=-=-=-= Start Here

debug: using "/usr/share/spamassassin" for default rules dir
debug: using "/etc/mail/spamassassin" for site rules dir
debug: using "/home/vv30/.spamassassin" for user state dir
debug: using "/home/vv30/.spamassassin/user_prefs" for user prefs file
debug: using "/home/vv30/.spamassassin" for user state dir

=-=-= snip =-=-=

debug: bayes: score = 0.00237964043586497
debug: using "/home/vv30/.spamassassin" for user state dir
debug: bayes: 26008 untie-ing
debug: bayes: 26008 untie-ing db_toks
debug: bayes: 26008 untie-ing db_seen
debug: Razor2 is not available

=-=-= snip =-=-=

debug: is spam? score=-3.688 required=5 tests=BAYES_00,PRIORITY_NO_NAME

=-=-=-=-=-=-=-=-=-=-=-=-=-= End Here

Anyway, I also put the user_prefs file in question here:

http://www.30below.com/~zmerch/sa/user_prefs

*any ideas are mucho danke* ;-)

If you're ever in Northern Michigan, I'll buy you a beer, or if you're in 
Boston mid-July, I'll be there, too...  ;-)

Thanks all,
Roger "Merch" Merchberger

--
Roger "Merch" Merchberger   ---   sysadmin, Iceberg Computers
zmerch@30below.com

Hi! I am a .signature virus.  Copy me into your .signature to join in!


Re: Is it possible that local rules quit working?

Posted by Matt Kettler <mk...@comcast.net>.
At 10:38 AM 4/1/04 -0500, Roger Merchberger wrote:
>I have made *no* changes to the user_prefs file in weeks (and the only 
>thing I've changed in months is adding whitelist_from entries). The only 
>thing I can think of that would prompt this change, is I tried setting up 
>Rules Du Jour to automagically update evilrules.cf & other files. However, 
>I've taken all these out, restarted spamd, and altho spamassassin still 
>"works" it doesn't seem to want to do any subject header rewriting or 
>anything like that. Having the spam hits value in the subject makes it 
>easier to go thru enmasse...

Hmm... have you considered running a message through spamassassin -tD ? 
Perhaps the debug output might give some clues to a problem that --lint 
isn't reporting.