You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Noc Phibee <no...@phibee.net> on 2005/11/29 13:48:32 UTC

Best choice for more stop spams ? I wait your return

Hi,

I want post you my config ;=) i have a small problems:
    I am thinks that i don't have a good result in scoring.
    a big quantity of spams are not detected.

My server is not a mail server, but only a relay. He run
on Qmail with Qmail-scanner and spamassassin 3.0.4.

What do you thinks of my spamassassin -D --lint ?

I see three problems :

1- "debug: bayes: no dbs present, cannot tie DB R/O: 
/root/.spamassassin/bayes_toks"
Bayes don't work ?

2- "debug: Pyzor is not available: pyzor not found"
"debug: DCCifd is not available: no r/w dccifd socket found."
"debug: DCC is not available: no executable dccproc found."
It's a good solution for stop more spams that active this products ?

3- He have other solution for best detect ? addin a solution of:
         spamcop, SORBS and other (what is the best ?)
         How install it ?

Very thanks for all return that you post.




==================================================
My local.cf:
==================================================
required_hits 4.9
auto_whitelist_path        /var/spool/spamassassin/auto-whitelist
auto_whitelist_file_mode   0666
rewrite_header Subject *****SPAM*****
dns_available yes
ok_locales en fr
report_safe 1
skip_rbl_checks 0
use_razor2 0
bayes_auto_learn                        1
bayes_auto_learn_threshold_nonspam      0.1
bayes_auto_learn_threshold_spam         8.0




==================================================
My spamassassin -D --lint :
==================================================
debug: SpamAssassin version 3.0.4
debug: Score set 0 chosen.
debug: running in taint mode? no
debug: diag: module installed: DBI, version 1.47
debug: diag: module installed: DB_File, version 1.810
debug: diag: module installed: Digest::SHA1, version 2.10
debug: diag: module installed: IO::Socket::UNIX, version 1.21
debug: diag: module installed: MIME::Base64, version 3.05
debug: diag: module installed: Net::DNS, version 0.48
debug: diag: module installed: Net::LDAP, version 0.31
debug: diag: module installed: Razor2::Client::Agent, version 2.67
debug: diag: module installed: Storable, version 2.15
debug: diag: module installed: URI, version 1.35
debug: ignore: using a test message to lint rules
debug: using "/etc/mail/spamassassin/init.pre" for site rules init.pre
debug: config: read file /etc/mail/spamassassin/init.pre
debug: using "/usr/share/spamassassin" for default rules dir
debug: config: read file /usr/share/spamassassin/10_misc.cf
debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/share/spamassassin/20_compensate.cf
debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/share/spamassassin/20_drugs.cf
debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/share/spamassassin/20_phrases.cf
debug: config: read file /usr/share/spamassassin/20_porn.cf
debug: config: read file /usr/share/spamassassin/20_ratware.cf
debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/share/spamassassin/23_bayes.cf
debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/share/spamassassin/25_spf.cf
debug: config: read file /usr/share/spamassassin/25_uribl.cf
debug: config: read file /usr/share/spamassassin/30_text_de.cf
debug: config: read file /usr/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/share/spamassassin/50_scores.cf
debug: config: read file /usr/share/spamassassin/60_whitelist.cf
debug: using "/etc/mail/spamassassin" for site rules dir
debug: config: read file /etc/mail/spamassassin/10_local_report.cf
debug: config: read file /etc/mail/spamassassin/70_sare_adult.cf
debug: config: read file /etc/mail/spamassassin/70_sare_bayes_poison_nxm.cf
debug: config: read file /etc/mail/spamassassin/70_sare_evilnum0.cf
debug: config: read file /etc/mail/spamassassin/70_sare_evilnum1.cf
debug: config: read file /etc/mail/spamassassin/70_sare_evilnum2.cf
debug: config: read file /etc/mail/spamassassin/70_sare_genlsubj.cf
debug: config: read file /etc/mail/spamassassin/70_sare_header.cf
debug: config: read file /etc/mail/spamassassin/70_sare_highrisk.cf
debug: config: read file /etc/mail/spamassassin/70_sare_html.cf
debug: config: read file /etc/mail/spamassassin/70_sare_obfu.cf
debug: config: read file /etc/mail/spamassassin/70_sare_oem.cf
debug: config: read file /etc/mail/spamassassin/70_sare_random.cf
debug: config: read file /etc/mail/spamassassin/70_sare_ratware.cf
debug: config: read file /etc/mail/spamassassin/70_sare_specific.cf
debug: config: read file /etc/mail/spamassassin/70_sare_spoof.cf
debug: config: read file /etc/mail/spamassassin/70_sare_unsub.cf
debug: config: read file /etc/mail/spamassassin/70_sare_uri0.cf
debug: config: read file /etc/mail/spamassassin/70_sare_uri1.cf
debug: config: read file /etc/mail/spamassassin/70_sare_uri3.cf
debug: config: read file /etc/mail/spamassassin/70_sare_whitelist.cf
debug: config: read file /etc/mail/spamassassin/70_sc_top200.cf
debug: config: read file 
/etc/mail/spamassassin/72_sare_redirect_post3.0.0.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_body.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_headers.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_rawbody.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_subject.cf
debug: config: read file /etc/mail/spamassassin/88_FVGT_uri.cf
debug: config: read file /etc/mail/spamassassin/95_Ophelys_Corps.cf
debug: config: read file /etc/mail/spamassassin/95_Ophelys_General.cf
debug: config: read file /etc/mail/spamassassin/95_Ophelys_Sujets.cf
debug: config: read file /etc/mail/spamassassin/99_FVGT_Tripwire.cf
debug: config: read file /etc/mail/spamassassin/99_FVGT_meta.cf
debug: config: read file /etc/mail/spamassassin/99_sare_fraud_post25x.cf
debug: config: read file /etc/mail/spamassassin/99_sober.cf
debug: config: read file /etc/mail/spamassassin/Chinese_rules.cf
debug: config: read file /etc/mail/spamassassin/backhair.cf
debug: config: read file /etc/mail/spamassassin/blacklist_ro.cf
debug: config: read file /etc/mail/spamassassin/bogus-virus-warnings.cf
debug: config: read file /etc/mail/spamassassin/chickenpox.cf
debug: config: read file /etc/mail/spamassassin/evilnumbers.cf
debug: config: read file /etc/mail/spamassassin/local.cf
debug: config: read file /etc/mail/spamassassin/mime_validate.cf
debug: config: read file /etc/mail/spamassassin/random.current.cf
debug: config: read file /etc/mail/spamassassin/weeds_2.cf
debug: using "/root/.spamassassin" for user state dir
debug: using "/root/.spamassassin/user_prefs" for user prefs file
debug: config: read file /root/.spamassassin/user_prefs
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered 
Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8dfaaac)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered 
Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8ddaafc)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8ddc20c)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8dfaaac) 
implements 'parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8ddaafc) 
implements 'parse_config'
warning: description for REMOVE_PAGE is over 50 chars
warning: description exists for non-existent rule DNS_FROM_RFCI_DSN
warning: description for MAILTO_TO_SPAM_ADDR is over 50 chars
warning: description exists for non-existent rule RCVD_IN_OPM_WINGATE
warning: description for SOME_BREAKTHROUGH is over 50 chars
warning: description for RATWARE_EGROUPS is over 50 chars
warning: description for RATWARE_OE_MALFORMED is over 50 chars
warning: description for EXCUSE_3 is over 50 chars
warning: description for BANKRUPTCY is over 50 chars
warning: description for BILL_1618 is over 50 chars
warning: description for FULL_REFUND is over 50 chars
warning: description for FROM_NO_USER is over 50 chars
warning: description for CANNOT_BE_SPAM is over 50 chars
warning: description for PLING_QUERY is over 50 chars
warning: description for OPHELYS_LANGAGE_6 is over 50 chars
warning: description for OPHELYS_LANGAGE_1 is over 50 chars
warning: description for MISSING_MIMEOLE is over 50 chars
warning: description for RCVD_IN_BSP_TRUSTED is over 50 chars
warning: description for CELL_PHONE_IMPROVE is over 50 chars
warning: description for FORGED_TELESP_RCVD is over 50 chars
warning: description exists for non-existent rule RCVD_IN_OPM_SOCKS
warning: description for TO_ADDRESS_EQ_REAL is over 50 chars
warning: description for FROM_NO_LOWER is over 50 chars
warning: description for OBSCURED_EMAIL is over 50 chars
warning: description for HTML_FONT_FACE_CAPS is over 50 chars
warning: description for WE_HONOR_ALL is over 50 chars
warning: description for RESISTANCE_IS_FUTILE is over 50 chars
warning: description for MIME_BOUND_DIGITS_7 is over 50 chars
warning: description for BAYES_50 is over 50 chars
warning: description for MIME_HTML_ONLY is over 50 chars
warning: description for DATE_IN_FUTURE_24_48 is over 50 chars
warning: description for PORN_16 is over 50 chars
warning: description for ROUND_THE_WORLD_LOCAL is over 50 chars
warning: description for OBFUSCATING_COMMENT is over 50 chars
warning: description for SUSPICIOUS_RECIPS is over 50 chars
warning: description for FROM_ALL_NUMS is over 50 chars
warning: description for OPHELYS_SOFTMAIL_6 is over 50 chars
warning: description for HIDE_WIN_STATUS is over 50 chars
warning: description for OPHELYS_LANGAGE_2 is over 50 chars
warning: description for RCVD_IN_MAPS_RSS is over 50 chars
warning: description for MONEY_BACK is over 50 chars
warning: description for MIME_SUSPECT_NAME is over 50 chars
warning: description for SUBJ_HAS_UNIQ_ID is over 50 chars
warning: description for RCVD_IN_MAPS_RBL is over 50 chars
warning: description for EXCUSE_12 is over 50 chars
warning: description for MILLION_USD is over 50 chars
warning: description for OPHELYS_LANGAGE_5 is over 50 chars
warning: description for ROUND_THE_WORLD is over 50 chars
warning: description for MIME_HEADER_CTYPE_ONLY is over 50 chars
warning: description for SUBJ_YOUR_DEBT is over 50 chars
warning: description for REMOVE_POSTAL is over 50 chars
warning: description for EXCUSE_6 is over 50 chars
warning: description for BODY_ENHANCEMENT is over 50 chars
warning: description for FROM_AND_TO_SAME is over 50 chars
warning: description for FORGED_MUA_IMS is over 50 chars
warning: description for RAZOR2_CF_RANGE_51_100 is over 50 chars
warning: description for RCVD_IN_DSBL is over 50 chars
warning: description for BAYES_99 is over 50 chars
warning: description for RATWARE_HASH_2 is over 50 chars
warning: description for FORGED_AOL_RCVD is over 50 chars
warning: description for YOU_WON is over 50 chars
warning: description for FROM_HAS_ULINE_NUMS is over 50 chars
warning: description for HTML_IMAGE_ONLY_08 is over 50 chars
warning: description for FORGED_MUA_OUTLOOK is over 50 chars
warning: description for EXCUSE_7 is over 50 chars
warning: description for FREE_ACCESS is over 50 chars
warning: description for MARKETING_PARTNERS is over 50 chars
warning: description for DATE_IN_FUTURE_03_06 is over 50 chars
warning: description for NO_PURCHASE is over 50 chars
warning: description for HTML_FONT_INVISIBLE is over 50 chars
warning: description for RCVD_IN_MAPS_NML is over 50 chars
warning: description for BAYES_95 is over 50 chars
warning: description for FORGED_MUA_MOZILLA is over 50 chars
warning: description for EXCUSE_23 is over 50 chars
warning: description for COPY_ACCURATELY is over 50 chars
warning: description for FROM_WEBMAIL_END_NUMS6 is over 50 chars
warning: description for SUBJ_ILLEGAL_CHARS is over 50 chars
warning: description for UNDISC_RECIPS is over 50 chars
warning: description for DATE_IN_FUTURE_48_96 is over 50 chars
warning: description for X_MSMAIL_PRIORITY_HIGH is over 50 chars
warning: description for FORGED_MUA_OIMO is over 50 chars
warning: description for GAPPY_SUBJECT is over 50 chars
warning: description for URI_IS_POUND is over 50 chars
warning: description for MULTI_FORGED is over 50 chars
warning: description for MICRO_CAP_WARNING is over 50 chars
warning: description for MAILTO_TO_REMOVE is over 50 chars
warning: description for FREE_PREVIEW is over 50 chars
warning: description exists for non-existent rule HTML_IMAGE_ONLY_02
warning: description for HTML_IMAGE_ONLY_04 is over 50 chars
warning: description for BAYES_20 is over 50 chars
warning: description for RATWARE_HASH_2_V2 is over 50 chars
warning: description for MIME_BOUND_RKFINDY is over 50 chars
warning: description for DATE_IN_FUTURE_12_24 is over 50 chars
warning: description for BEST_PORN is over 50 chars
warning: description for OPHELYS_CORPS_44 is over 50 chars
warning: description for BAYES_00 is over 50 chars
warning: description for TO_NO_USER is over 50 chars
warning: description for UNCLAIMED_MONEY is over 50 chars
warning: description for HTML_WEB_BUGS is over 50 chars
warning: description for OPHELYS_CORPS_14 is over 50 chars
warning: description for DATE_IN_PAST_24_48 is over 50 chars
warning: description for BARGAIN_URL is over 50 chars
warning: description for EXCUSE_REMOVE is over 50 chars
warning: description for RAZOR2_CHECK is over 50 chars
warning: description for HEAD_ILLEGAL_CHARS is over 50 chars
warning: description for RICH is over 50 chars
warning: description for BAYES_05 is over 50 chars
warning: description for NO_DNS_FOR_FROM is over 50 chars
warning: description for NO_REAL_NAME is over 50 chars
warning: description for OPHELYS_NIGERIA_3 is over 50 chars
warning: description for OPHELYS_SUJET_177 is over 50 chars
warning: description for WHY_WAIT is over 50 chars
warning: description for INVALID_DATE_TZ_ABSURD is over 50 chars
warning: description for HABEAS_INFRINGER is over 50 chars
warning: description for TO_EMPTY is over 50 chars
warning: description for HTML_IMAGE_ONLY_12 is over 50 chars
warning: description for DATE_IN_PAST_48_96 is over 50 chars
warning: description for HTML_IMAGE_ONLY_10 is over 50 chars
warning: description exists for non-existent rule HTML_IMAGE_ONLY_10
warning: description exists for non-existent rule RCVD_IN_OPM_HTTP
warning: description for WITH_LC_SMTP is over 50 chars
warning: description for PREST_NON_ACCREDITED is over 50 chars
warning: description for BEEN_TURNED_DOWN is over 50 chars
warning: description exists for non-existent rule RCVD_IN_OPM_HTTP_POST
warning: description for MIME_BOUND_MANY_HEX is over 50 chars
warning: description for US_DOLLARS_3 is over 50 chars
warning: description for BE_BOSS is over 50 chars
warning: description for FREE_QUOTE_INSTANT is over 50 chars
warning: description for OPHELYS_CORPS_18 is over 50 chars
warning: description for SELECTED_YOU is over 50 chars
warning: description for NIGERIAN_SUBJECT2 is over 50 chars
warning: description for HTML_EVENT_UNSAFE is over 50 chars
warning: description for MAILTO_SUBJ_REMOVE is over 50 chars
warning: description for EXCUSE_4 is over 50 chars
warning: description for RCVD_IN_MAPS_DUL is over 50 chars
warning: description for PORN_15 is over 50 chars
warning: description for DATE_IN_FUTURE_96_XX is over 50 chars
warning: description for DCC_CHECK is over 50 chars
warning: description for FORGED_MUA_EUDORA is over 50 chars
warning: description for BAYES_60 is over 50 chars
warning: description for FORGED_QUALCOMM_TAGS is over 50 chars
warning: description for NONEXISTENT_CHARSET is over 50 chars
warning: description for LOTS_OF_STUFF is over 50 chars
warning: description for DATE_IN_FUTURE_06_12 is over 50 chars
warning: description exists for non-existent rule HTML_WITH_BGCOLOR
warning: description for BAYES_40 is over 50 chars
warning: description for DATE_IN_PAST_12_24 is over 50 chars
warning: description for START_NOW_CAPS is over 50 chars
warning: description for BODY_ENHANCEMENT2 is over 50 chars
warning: description for OPHELYS_SOFTMAIL_4 is over 50 chars
warning: description for FORGED_JUNO_RCVD is over 50 chars
warning: description for PRIORITY_NO_NAME is over 50 chars
warning: description for RCVD_FAKE_HELO_DOTCOM is over 50 chars
warning: description exists for non-existent rule RCVD_IN_OPM_ROUTER
warning: description for EXCUSE_19 is over 50 chars
warning: description for FROM_NUM_AT_WEBMAIL is over 50 chars
warning: description for ADDR_NUMS_AT_BIGSITE is over 50 chars
warning: description for GUARANTEED_100_PERCENT is over 50 chars
warning: description for OPHELYS_SOFTMAIL_5 is over 50 chars
warning: description for DATE_IN_PAST_03_06 is over 50 chars
warning: description for UNWANTED_LANGUAGE_BODY is over 50 chars
warning: description for SUBJ_AS_SEEN is over 50 chars
warning: description for USERPASS is over 50 chars
warning: description for MIME_BOUND_NEXTPART is over 50 chars
warning: description for MIME_BASE64_BLANKS is over 50 chars
warning: description for FREE_SAMPLE is over 50 chars
warning: description for OPHELYS_SUJET_176 is over 50 chars
warning: description for SORTED_RECIPS is over 50 chars
warning: description for RCVD_IN_BSP_OTHER is over 50 chars
warning: description for DATE_IN_PAST_96_XX is over 50 chars
warning: description for FORGED_EUDORAMAIL_RCVD is over 50 chars
warning: description for FAKED_UNDISC_RECIPS is over 50 chars
warning: description for DATE_IN_PAST_06_12 is over 50 chars
warning: description for BAYES_80 is over 50 chars
warning: description for SEDUCTION is over 50 chars
warning: description for AOL_USERS_LINK is over 50 chars
warning: description for NO_OBLIGATION is over 50 chars
warning: description for HTML_IMAGE_ONLY_06 is over 50 chars
warning: description exists for non-existent rule HTML_IMAGE_ONLY_06
warning: description for EXCUSE_10 is over 50 chars
warning: description for SUBJ_BUY is over 50 chars
warning: description for RATWARE_JPFREE is over 50 chars
warning: description for EXCUSE_24 is over 50 chars
warning: score set for non-existent rule CHARSET_FARAWAY_BODY
warning: score set for non-existent rule CHARSET_FARAWAY_HEADERS
debug: using "/root/.spamassassin" for user state dir
debug: bayes: no dbs present, cannot tie DB R/O: 
/root/.spamassassin/bayes_toks
debug: Score set 1 chosen.
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: bayes: no dbs present, cannot tie DB R/O: 
/root/.spamassassin/bayes_toks
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted:
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8dfaaac) 
implements 'parsed_metadata'
debug: dns_available set to yes in config file, skipping test
debug: decoding: no encoding detected
debug: URIDNSBL: domains to query:
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: all '*From' addrs: ignore@compiling.spamassassin.taint.org
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend 
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8ddaafc))
debug: registering glue method for check_for_spf_helo_pass 
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ddc20c))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_hashcash_value 
(Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8ddaafc))
debug: all '*To' addrs:
debug: registering glue method for check_for_spf_softfail 
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ddc20c))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_for_spf_pass 
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ddc20c))
debug: registering glue method for check_for_spf_helo_softfail 
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ddc20c))
debug: registering glue method for check_for_spf_fail 
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ddc20c))
debug: registering glue method for check_for_spf_helo_fail 
(Mail::SpamAssassin::Plugin::SPF=HASH(0x8ddc20c))
debug: running body-text per-line regexp tests; score so far=-2.423
debug: running uri tests; score so far=-2.423
debug: registering glue method for check_uridnsbl 
(Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8dfaaac))
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8dfaaac) 
implements 'check_tick'
debug: running raw-body-text per-line regexp tests; score so far=-2.423
debug: running full-text regexp tests; score so far=-2.423
debug: Current PATH is: 
/sbin:/usr/sbin:/bin:/usr/bin:/usr/X11R6/bin:/usr/local/bin:/usr/local/sbin
debug: Pyzor is not available: pyzor not found
debug: DCCifd is not available: no r/w dccifd socket found.
debug: DCC is not available: no executable dccproc found.
debug: Running tests for priority: 500
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8dfaaac) 
implements 'check_post_dnsbl'
debug: running meta tests; score so far=-2.423
debug: running header regexp tests; score so far=-0.353
debug: running body-text per-line regexp tests; score so far=-0.353
debug: running uri tests; score so far=-0.353
debug: running raw-body-text per-line regexp tests; score so far=-0.353
debug: running full-text regexp tests; score so far=-0.353
debug: Running tests for priority: 1000
debug: running meta tests; score so far=-0.353
debug: running header regexp tests; score so far=-0.353
debug: lock: 27139 created 
/var/spool/spamassassin/auto-whitelist.lock.gw.phibee.net.org.27139
debug: lock: 27139 trying to get lock on 
/var/spool/spamassassin/auto-whitelist with 0 retries
debug: lock: 27139 link to /var/spool/spamassassin/auto-whitelist.lock: 
link ok
debug: Tie-ing to DB file R/W in /var/spool/spamassassin/auto-whitelist
debug: auto-whitelist (db-based): 
ignore@compiling.spamassassin.taint.org|ip=none scores 0/0
debug: AWL active, pre-score: -0.353, autolearn score: -0.353, mean: 
undef, IP: undef
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 27139 unlink /var/spool/spamassassin/auto-whitelist.lock
debug: Post AWL score: -0.353
debug: running body-text per-line regexp tests; score so far=-0.353
debug: running uri tests; score so far=-0.353
debug: running raw-body-text per-line regexp tests; score so far=-0.353
debug: running full-text regexp tests; score so far=-0.353
debug: is spam? score=-0.353 required=4.9
debug: 
tests=ALL_TRUSTED,FM_NO_TO,MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME,PHIBEE_SUJET_6
debug: 
subtests=__FM_NO_FROM,__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SANE_MSGID,__SOMETHING,__UNUSABLE_MSGID
lint: 185 issues detected.  please rerun with debug enabled for more 
information.

Re: Best choice for more stop spams ? I wait your return

Posted by Matt Kettler <mk...@evi-inc.com>.
Noc Phibee wrote:
> very Thanks all for answer ...
> 
> they have a big difference from 3.1.0 with 3.0.4 ?

RBLs are more efficient in 3.1.0 and higher. There's also been some rule tweaking.

Also, from reviewing the STATISTICS-*.txt files I feel that 3.1.0 had a cleaner
mass-check than 3.0.0 did, yielding a better scoreset. (personal opinion)


See the release announcement:
http://marc.theaimsgroup.com/?l=spamassassin-announce&m=112674318914008&w=2

> 
> No "specifique" problems when we upgrade 3.0.4 to 3.1.0 ?


Some people have had problems with 3.1.0's new "hot child" forking algorithm.
However, there's an option to change spamd to the old "round robin" style.

The rest is in the docs:

http://svn.apache.org/repos/asf/spamassassin/branches/3.1/UPGRADE
http://wiki.apache.org/spamassassin/UpgradeTo310

Re: Best choice for more stop spams ? I wait your return

Posted by Noc Phibee <no...@phibee.net>.
very Thanks all for answer ...

they have a big difference from 3.1.0 with 3.0.4 ?

No "specifique" problems when we upgrade 3.0.4 to 3.1.0 ?

Thanks


Matt Kettler a écrit :
> At 07:48 AM 11/29/2005, Noc Phibee wrote:
>> Hi,
>>
>> I want post you my config ;=) i have a small problems:
>>    I am thinks that i don't have a good result in scoring.
>>    a big quantity of spams are not detected.
>>
>> My server is not a mail server, but only a relay. He run
>> on Qmail with Qmail-scanner and spamassassin 3.0.4.
>>
>> What do you thinks of my spamassassin -D --lint ?
>>
>> I see three problems :
>>
>> 1- "debug: bayes: no dbs present, cannot tie DB R/O: 
>> /root/.spamassassin/bayes_toks"
>> Bayes don't work ?
>
> The way your configuration is set up, the bayes database lives in the 
> home directory of the user calling SA.
>
> For qmail-scanner, that user is probably not root, therefore no bayes 
> DB exists in root's homedir.
>
> If you wanted a site-wide bayes db that all users will share, you'll 
> need "bayes_path /var/spool/spamassassin/bayes" and "bayes_file_mode 
> 0777" (not 0666!)
>
>
>
>> 2- "debug: Pyzor is not available: pyzor not found"
>> "debug: DCCifd is not available: no r/w dccifd socket found."
>> "debug: DCC is not available: no executable dccproc found."
>> It's a good solution for stop more spams that active this products ?
>
> I like dcc and razor myself, but you'll have to check the licenses. 
> Most people can use these for free, but there are some exceptions for 
> free access to the dcc and razor servers.
>
> Pyzor is all-free AFAIK but I've never used it.
>
>
>
>> 3- He have other solution for best detect ? addin a solution of:
>>         spamcop, SORBS and other (what is the best ?)
>>         How install it ?
>
> SA uses spamcop and sorbs among several other RBLs if you have a 
> recent version of Net::DNS.
>
>
>> Very thanks for all return that you post.
>>
>>
>>
>>
>> ==================================================
>> My local.cf:
>> ==================================================
>> required_hits 4.9
>> auto_whitelist_path        /var/spool/spamassassin/auto-whitelist
>> auto_whitelist_file_mode   0666
>
> Broken: fix that to 0777.
>
> (Note the default for this is 0700, not 0600. SA "file modes" are 
> really masks and can be used as a mask for dir creation, thus need the 
> X bit)
>
>
>> ==================================================
>> My spamassassin -D --lint :
>> ==================================================
>
> Much of that looks relatively normal. SA 3.0.x introduced warnings for 
> long descriptions, but nobody updated the non-english description 
> sets. 3.1.0 has since relaxed the description length and is free of 
> these warnings.
>
>> warning: score set for non-existent rule CHARSET_FARAWAY_BODY
>> warning: score set for non-existent rule CHARSET_FARAWAY_HEADERS
>
> That looks bad.. Those rules should be declared in your 
> /usr/share/spamassassin/20_body_tests.cf. I'd be wondering if your 
> install is goofed up. Check the files in /usr/share/spamassassin and 
> make sure they match the ones in the 3.0.4 tarball.
>
>
>
>


Re: Best choice for more stop spams ? I wait your return

Posted by Matt Kettler <mk...@comcast.net>.
At 07:48 AM 11/29/2005, Noc Phibee wrote:
>Hi,
>
>I want post you my config ;=) i have a small problems:
>    I am thinks that i don't have a good result in scoring.
>    a big quantity of spams are not detected.
>
>My server is not a mail server, but only a relay. He run
>on Qmail with Qmail-scanner and spamassassin 3.0.4.
>
>What do you thinks of my spamassassin -D --lint ?
>
>I see three problems :
>
>1- "debug: bayes: no dbs present, cannot tie DB R/O: 
>/root/.spamassassin/bayes_toks"
>Bayes don't work ?

The way your configuration is set up, the bayes database lives in the home 
directory of the user calling SA.

For qmail-scanner, that user is probably not root, therefore no bayes DB 
exists in root's homedir.

If you wanted a site-wide bayes db that all users will share, you'll need 
"bayes_path /var/spool/spamassassin/bayes" and "bayes_file_mode 0777" (not 
0666!)



>2- "debug: Pyzor is not available: pyzor not found"
>"debug: DCCifd is not available: no r/w dccifd socket found."
>"debug: DCC is not available: no executable dccproc found."
>It's a good solution for stop more spams that active this products ?

I like dcc and razor myself, but you'll have to check the licenses. Most 
people can use these for free, but there are some exceptions for free 
access to the dcc and razor servers.

Pyzor is all-free AFAIK but I've never used it.



>3- He have other solution for best detect ? addin a solution of:
>         spamcop, SORBS and other (what is the best ?)
>         How install it ?

SA uses spamcop and sorbs among several other RBLs if you have a recent 
version of Net::DNS.


>Very thanks for all return that you post.
>
>
>
>
>==================================================
>My local.cf:
>==================================================
>required_hits 4.9
>auto_whitelist_path        /var/spool/spamassassin/auto-whitelist
>auto_whitelist_file_mode   0666

Broken: fix that to 0777.

(Note the default for this is 0700, not 0600. SA "file modes" are really 
masks and can be used as a mask for dir creation, thus need the X bit)


>==================================================
>My spamassassin -D --lint :
>==================================================

Much of that looks relatively normal. SA 3.0.x introduced warnings for long 
descriptions, but nobody updated the non-english description sets. 3.1.0 
has since relaxed the description length and is free of these warnings.

>warning: score set for non-existent rule CHARSET_FARAWAY_BODY
>warning: score set for non-existent rule CHARSET_FARAWAY_HEADERS

That looks bad.. Those rules should be declared in your 
/usr/share/spamassassin/20_body_tests.cf. I'd be wondering if your install 
is goofed up. Check the files in /usr/share/spamassassin and make sure they 
match the ones in the 3.0.4 tarball.