You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Patrick Proniewski <pa...@patpro.net> on 2009/08/27 21:18:02 UTC
razor/spamcop report question
Hello,
I'm using the amavisd-new/spamassassin 3.2.5/clamav combo on some
servers (Freebsd, Mac OS X Server).
I would like spamassassin to report spam using razor and spamcop
services.
in /usr/local/etc/mail/spamassassin/v310.pre (freebsd), I have this:
loadplugin Mail::SpamAssassin::Plugin::Razor2
loadplugin Mail::SpamAssassin::Plugin::SpamCop
spamcop_to_address submit.<mysubmitaddress>@spam.spamcop.net
1- How do I know that spamcop get reports from Spamassassin?
2- I don't understand why Razor does not work.
I run:
# su vscan -c 'spamassassin -r < /tmp/spam'
and it returns:
[28395] warn: reporter: razor2 report failed: No such file or
directory report requires
authentication at /usr/local/lib/perl5/site_perl/5.8.9/Mail/
SpamAssassin/Plugin/Razor2.pm
line 178. at /usr/local/lib/perl5/site_perl/5.8.9/Mail/SpamAssassin/
Plugin/Razor2.pm line 326.
1 message(s) examined.
-> razor complains about auth. But I'm using Razor version 2.84, it's
supposed to provide automatically the credentials (since 2.74 iirc).
-> spamcop send me an email :
> SpamCop is now ready to process your spam.
>
> Use links to finish spam reporting (members use cookie-login please!):
> http://www.spamcop.net/sc?id=z3261...
And I only get an email like this one when I'm running `su vscan -c
'spamassassin -r < /tmp/spam'`. During normal operations, I don't get
any email from Spamcop asking me to finish a spam report.
Am I missing something?
regards,
patpro
Re: razor/spamcop report question
Posted by Patrick Proniewski <pa...@patpro.net>.
On 04 sept. 2009, at 11:49, Giampaolo Tomassoni wrote:
>> I have IMAP folders as "to be reported SPAM" and "Reported SPAM". A
>> cronjob reads every mail on the first and reports it, then moves the
>> file to to the latter.
>
> I use instead the amavis' quarantine folder, reporting viruses and
> spam
> above a given score threshold (actually 18...). I never had FPs
> thanks to
> this high score threshold, while I see a lot of spam and virus
> reported.
I'm doing before-queue content filtering, and have no quarantine:
either the spam is not accepted, either it goes in the queue for
delivery.
IMAP folder is something I can do on my personal server, but not at
work.
Mac OS X comes with a script that should do the trick with few
modifications:
http://www.opensource.apple.com/source/SpamAssassin/SpamAssassin-124.1/SetupExtras/learn_junk_mail
Thank you all for the clarification.
Regards
patpro
RE: razor/spamcop report question
Posted by Giampaolo Tomassoni <g....@libero.it>.
> -----Original Message-----
> From: Matus UHLAR - fantomas [mailto:uhlar@fantomas.sk]
> Sent: Friday, September 04, 2009 12:02 PM
> To: users@spamassassin.apache.org
> Subject: Re: razor/spamcop report question
>
> > > Reporting can't be automatic, as there will be or may be false
> > > positives. As well as false negatives.
>
> On 04.09.09 11:49, Giampaolo Tomassoni wrote:
> > Razor, DCC, maybe IxHash and surely others do state in their policies
> that
> > automatic reporting is forbidden.
>
> DCC? DCC is based on automatic submission, note that it measures
> bulkiness
> of mail, not spamminess...
Right. But you may report a message hash to the DCC servers as "spam", which
marks that hash as such on further requests.
See Mail::SpamAssassin::Plugin::DCC. It has a reporting handle.
Giampaolo
Re: razor/spamcop report question
Posted by Matus UHLAR - fantomas <uh...@fantomas.sk>.
> > Reporting can't be automatic, as there will be or may be false
> > positives. As well as false negatives.
On 04.09.09 11:49, Giampaolo Tomassoni wrote:
> Razor, DCC, maybe IxHash and surely others do state in their policies that
> automatic reporting is forbidden.
DCC? DCC is based on automatic submission, note that it measures bulkiness
of mail, not spamminess...
--
Matus UHLAR - fantomas, uhlar@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Linux - It's now safe to turn on your computer.
Linux - Teraz mozete pocitac bez obav zapnut.
RE: razor/spamcop report question
Posted by Giampaolo Tomassoni <g....@libero.it>.
> Reporting can't be automatic, as there will be or may be false
> positives. As well as false negatives.
Razor, DCC, maybe IxHash and surely others do state in their policies that
automatic reporting is forbidden.
SpamCop, however, doesn't. This is probably because of the very nature of
the SpamCop reporting system: the report submitter is quite responsible of
their own submissions, and submitted sources may request an arbitration
about the report itself.
> I have IMAP folders as "to be reported SPAM" and "Reported SPAM". A
> cronjob reads every mail on the first and reports it, then moves the
> file to to the latter.
I use instead the amavis' quarantine folder, reporting viruses and spam
above a given score threshold (actually 18...). I never had FPs thanks to
this high score threshold, while I see a lot of spam and virus reported.
I'm using spamgrass (a tool of mines) in a cron job.
You may get a copy of it at:
http://www.tomassoni.biz/download/spamgrass.pl
Use perldoc to get usage instructions.
Giampaolo
Re: razor/spamcop report question
Posted by Jari Fredriksson <ja...@iki.fi>.
> On 04 sept. 2009, at 09:48, Jari Fredriksson wrote:
>
>>>> And I only get an email like this one when I'm running
>>>> `su vscan -c 'spamassassin -r < /tmp/spam'`. During
>>>> normal operations, I don't get any email from Spamcop
>>>> asking me to finish a spam report.
>>
>> Define "normal operations". Do you have a cron job or
>> something that calls spamassassin -r (or spamc -C
>> report) on those messages? If not, you should.
>
> no, I don't have any cron-job for this purpose. I really
> thought the report was automatic, as amavisd loads
> spamassassin with spamcop code activated. Looks like I
> really missed something.
>
> patpro
Reporting can't be automatic, as there will be or may be false positives. As well as false negatives.
I have IMAP folders as "to be reported SPAM" and "Reported SPAM". A cronjob reads every mail on the first and reports it, then moves the file to to the latter.
Re: razor/spamcop report question
Posted by Patrick Proniewski <pa...@patpro.net>.
On 04 sept. 2009, at 09:48, Jari Fredriksson wrote:
>>> And I only get an email like this one when I'm running
>>> `su vscan -c 'spamassassin -r < /tmp/spam'`. During
>>> normal operations, I don't get any email from Spamcop
>>> asking me to finish a spam report.
>
> Define "normal operations". Do you have a cron job or something that
> calls spamassassin -r (or spamc -C report) on those messages? If
> not, you should.
no, I don't have any cron-job for this purpose. I really thought the
report was automatic, as amavisd loads spamassassin with spamcop code
activated. Looks like I really missed something.
patpro
Re: razor/spamcop report question
Posted by Jari Fredriksson <ja...@iki.fi>.
> Hi all,
>
> No idea on this one?
>
> On 27 août 2009, at 21:18, Patrick Proniewski wrote:
>
>> -> spamcop send me an email :
>>
>>> SpamCop is now ready to process your spam.
>>>
>>> Use links to finish spam reporting (members use
>>> cookie-login please!):
>>> http://www.spamcop.net/sc?id=z3261...
>>
>> And I only get an email like this one when I'm running
>> `su vscan -c 'spamassassin -r < /tmp/spam'`. During
>> normal operations, I don't get any email from Spamcop
>> asking me to finish a spam report.
>>
Define "normal operations". Do you have a cron job or something that calls spamassassin -r (or spamc -C report) on those messages? If not, you should.
Re: razor/spamcop report question
Posted by Michael Scheidell <sc...@secnap.net>.
Patrick Proniewski wrote:
> Hi all,
>
> No idea on this one?
>>
>>
>> I run:
>> # su vscan -c 'spamassassin -r < /tmp/spam'
>>
did you register with razor?
error message is pretty clear:
"report requires authentication"
su - vscan -c "/usr/local/bin/razor-admin -create; wait;\
/usr/local/bin/razor-admin -register;wait;\
/usr/local/bin/razor-admin -discover"
did you look at the razor logs?
cd ~vscan/.razor
_________________________________________________________________________
This email has been scanned and certified safe by SpammerTrap(r).
For Information please see http://www.spammertrap.com
_________________________________________________________________________
Re: razor/spamcop report question
Posted by Patrick Proniewski <pa...@patpro.net>.
Hi all,
No idea on this one?
On 27 août 2009, at 21:18, Patrick Proniewski wrote:
> Hello,
>
> I'm using the amavisd-new/spamassassin 3.2.5/clamav combo on some
> servers (Freebsd, Mac OS X Server).
> I would like spamassassin to report spam using razor and spamcop
> services.
>
> in /usr/local/etc/mail/spamassassin/v310.pre (freebsd), I have this:
>
> loadplugin Mail::SpamAssassin::Plugin::Razor2
> loadplugin Mail::SpamAssassin::Plugin::SpamCop
> spamcop_to_address submit.<mysubmitaddress>@spam.spamcop.net
>
> 1- How do I know that spamcop get reports from Spamassassin?
> 2- I don't understand why Razor does not work.
>
> I run:
> # su vscan -c 'spamassassin -r < /tmp/spam'
>
> and it returns:
>
> [28395] warn: reporter: razor2 report failed: No such file or
> directory report requires
> authentication at /usr/local/lib/perl5/site_perl/5.8.9/Mail/
> SpamAssassin/Plugin/Razor2.pm
> line 178. at /usr/local/lib/perl5/site_perl/5.8.9/Mail/SpamAssassin/
> Plugin/Razor2.pm line 326.
> 1 message(s) examined.
>
> -> razor complains about auth. But I'm using Razor version 2.84,
> it's supposed to provide automatically the credentials (since 2.74
> iirc).
>
> -> spamcop send me an email :
>
>> SpamCop is now ready to process your spam.
>>
>> Use links to finish spam reporting (members use cookie-login
>> please!):
>> http://www.spamcop.net/sc?id=z3261...
>
> And I only get an email like this one when I'm running `su vscan -c
> 'spamassassin -r < /tmp/spam'`. During normal operations, I don't
> get any email from Spamcop asking me to finish a spam report.
>
> Am I missing something?
>
> regards,
> patpro
>