You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by David Kandou <da...@suarapembaruan.com> on 2005/01/06 06:00:36 UTC
Spamassassin Problem
Dear all,
I am installing spamassassin 3.0.1 on server that running qmail, but after i install spamassassin i still receive spam, when i using older version of spamassassin (2.6.3) i don't have problem with spam (90% of spam are blocked).
Can anybody help me...... i already try to run command #spamassassin --lint and i fount so many error message like this :
[root@polinux root]# spamassassin --lint
warning: description for SARE_MULT_BMASTGR is over 50 chars
warning: description for KAM_COMBO_BADAOL is over 50 chars
warning: description for MONOTONE_WORDS_5_8 is over 50 chars
warning: description for SARE_RECV_IP_061050 is over 50 chars
warning: description for RCVD_IN_AHBL_SPAM_SUPPORT is over 50 chars
warning: description for VOWEL_TOCC_7 is over 50 chars
warning: description for RATWR19_MESSID is over 50 chars
warning: description for VIRUS_WARNING251 is over 50 chars
warning: description exists for non-existent rule SARE_SUB_CASINO_OB1
warning: description for T_RATWARE_OOPS_06 is over 50 chars
warning: description for VIRUS_WARNING268B is over 50 chars
warning: description for SARE_RECV_IP_222064 is over 50 chars
warning: description for T_RATWARE_OOPS_03 is over 50 chars
warning: description for MONOTONE_WORDS_2_30 is over 50 chars
warning: description for MSGID_YAHOO_CAPS is over 50 chars
warning: description for SARE_RECV_IP_218071 is over 50 chars
warning: description for VIRUS_WARNING16 is over 50 chars
warning: description for BAD_MOZILLA_VERSION is over 50 chars
warning: description for VIRUS_WARNING111 is over 50 chars
warning: description for IMPRONONCABLE_1_MIDDLE is over 50 chars
warning: description for SARE_RECV_FORGE_OUTBLZ is over 50 chars
warning: description for VIRUS_WARNING241 is over 50 chars
warning: description for SARE_RECV_IP_061052 is over 50 chars
warning: description for MESSAGE_BADMIME is over 50 chars
warning: description for VOWEL_URI_7 is over 50 chars
warning: description for SARE_FREE_WEBM_Jpop is over 50 chars
warning: description for SUPPORT_AT_MICROSOFT is over 50 chars
warning: description for T_RATWARE_OOPS_08 is over 50 chars
warning: description for ILLEGALSTR02 is over 50 chars
warning: description for RATWR1_MESSID is over 50 chars
warning: description for RCVD_IN_AHBL_SPAM is over 50 chars
warning: description for SARE_MSGID_EMPTY is over 50 chars
warning: description for SARE_RECV_IP_061228 is over 50 chars
warning: description for SARE_RECV_IP_061172 is over 50 chars
warning: description for RCVD_IN_AHBL_RTB is over 50 chars
warning: description for WORKSTATION_NAME4 is over 50 chars
warning: description for VIRUS_WARNING62 is over 50 chars
warning: description for VIRUS_WARNING301 is over 50 chars
warning: description for VIRUS_WARNING276 is over 50 chars
warning: description for VIRUS_WARNING180 is over 50 chars
warning: description for T_RATWARE_OOPS_05 is over 50 chars
warning: description for VIRUS_WARNING303 is over 50 chars
warning: description for T_RATWARE_OOPS_10 is over 50 chars
warning: description for STOCKREPORT_3 is over 50 chars
warning: description for IMPRONONCABLE_2 is over 50 chars
warning: description for RCVD_IN_AHBL_FORMMAIL is over 50 chars
warning: description for RM_hm_ShortMsgid12 is over 50 chars
warning: description for OUR_MTA_IP is over 50 chars
warning: description for SARE_RECV_IP_218080 is over 50 chars
warning: description for HTML_FONT_SIZE_ONE is over 50 chars
warning: description for SARE_RECV_IP_069194 is over 50 chars
warning: description for ILLEGALSTR03 is over 50 chars
warning: description for VIRUS_WARNING153 is over 50 chars
warning: description for KAM_URIPARSE is over 50 chars
warning: description for RM_fl_ConsWord6s is over 50 chars
warning: description for SARE_MULT_HEAD_LC is over 50 chars
warning: description for RCVD_IN_AHBL_PROXY is over 50 chars
warning: description for VIRUS_WARNING144 is over 50 chars
warning: description for RCVD_IN_AHBL_MISC is over 50 chars
warning: description for VIRUS_WARNING164 is over 50 chars
warning: description for MK_BAD_HTML_04 is over 50 chars
warning: description for VIRUS_WARNING278 is over 50 chars
warning: description for MONOTONE_WORDS_3_20 is over 50 chars
warning: description for RCVD_IN_AHBL_I_SPAM_SUPPORT is over 50 chars
warning: description exists for non-existent rule VIRUS_WARNIGN282
warning: description for MONOTONE_WORDS_5_20 is over 50 chars
warning: description for STOCKREPORT_5 is over 50 chars
warning: description for STRANGE_QUOTE is over 50 chars
warning: description for VIRUS_WARNING260 is over 50 chars
warning: description for RM_hm_EmtyMsgid is over 50 chars
warning: description for VIRUS_WARNING166 is over 50 chars
warning: description for VIRUS_WARNING185 is over 50 chars
warning: description for LC_ESMTP_RCVD is over 50 chars
warning: description for XAUTH_XMAILER is over 50 chars
warning: description for RCVD_IN_AHBL_SMTP is over 50 chars
warning: description for RATWARE_GAVIN is over 50 chars
warning: description for RCVD_IN_AHBL_RFCI_PA is over 50 chars
warning: description for RCVD_IN_AHBL_ENDUSER is over 50 chars
warning: description for SARE_TOCC_CONS6s is over 50 chars
warning: description for SARE_RECV_IP_080178 is over 50 chars
warning: description for T_RATWARE_OOPS_07 is over 50 chars
warning: description for VIRUS_WARNING224 is over 50 chars
warning: description for STOCKREPORT_4 is over 50 chars
warning: description for VIRUS_WARNING146 is over 50 chars
warning: description for RATWR8_MESSID is over 50 chars
warning: description for RM_hr_HeloSender is over 50 chars
warning: description for VIRUS_WARNING177 is over 50 chars
warning: description for MK_BAD_HTML_06 is over 50 chars
warning: description for MK_HIDING_IN_FRAMES_01 is over 50 chars
warning: description for REPLYTO_BOGUS is over 50 chars
warning: description for RM_st_KS5601 is over 50 chars
warning: description for IMPRONONCABLE_1_LIGHT is over 50 chars
warning: description for VIRUS_WARNING275 is over 50 chars
warning: description for RM_hxl_ForgedIndy is over 50 chars
warning: description for VIRUS_WARNING23 is over 50 chars
warning: description for RCVD_IN_AHBL_UNKNOWN_1 is over 50 chars
warning: description exists for non-existent rule RCVD_IN_AHBL_UNKNOWN_1
warning: description for VIRUS_WARNING_MYDOOM4 is over 50 chars
warning: description for SARE_FROM_NUM_8DIG is over 50 chars
warning: description for SARE_FROM_NUM_HOTML is over 50 chars
warning: description for RM_fw_LeadingPrep is over 50 chars
warning: description for VOWEL_TOCC_6 is over 50 chars
warning: description for RCVD_IN_AHBL_5XXI is over 50 chars
warning: description for SARE_HEAD_XLIB_INDY1 is over 50 chars
warning: description for T_RATWARE_ERROR_04 is over 50 chars
warning: description for T_RATWARE_OOPS_09 is over 50 chars
warning: description for VIRUS_WARNING148 is over 50 chars
warning: description for VIRUS_WARNING237 is over 50 chars
warning: description for ILLEGALSTR01 is over 50 chars
warning: description for VIRUS_WARNING273 is over 50 chars
warning: description for VIRUS_WARNING63 is over 50 chars
warning: description exists for non-existent rule SARE_RD_SAFE_GT
warning: description for RCVD_IN_AHBL_RFCI_MISC is over 50 chars
warning: description for SARE_RECV_IP_218070 is over 50 chars
warning: description for VIRUS_WARNING_MYDOOM4A is over 50 chars
warning: description for PSS_BULK is over 50 chars
warning: description for T_RATWARE_OOPS_02 is over 50 chars
warning: description for MONOTONE_WORDS_2_15 is over 50 chars
warning: description for VIRUS_WARNING_EXE2 is over 50 chars
warning: description for VIRUS_WARNING47 is over 50 chars
warning: description for MEGALONGWORD is over 50 chars
warning: description for RM_rbt_Font0Pt is over 50 chars
warning: description for SARE_RECV_IP_064095 is over 50 chars
warning: description for VIRUS_WARNING218 is over 50 chars
warning: description for XANTIVIRUSBOGUS is over 50 chars
warning: description for MK_BAD_HTML_05 is over 50 chars
warning: description for VIRUS_WARNING165 is over 50 chars
warning: description for SARE_FROM_CHAR_W1251 is over 50 chars
warning: description for RCVD_IN_AHBL_SOS is over 50 chars
warning: description for VIRUS_WARNING151 is over 50 chars
warning: description for VIRUS_WARNING265B is over 50 chars
warning: description for SARE_RECV_IP_221124 is over 50 chars
warning: description for VIRUS_WARNING110 is over 50 chars
warning: description for FFFF_BOUNDARIES is over 50 chars
warning: description for RM_ft_USAscii is over 50 chars
warning: description for MK_BAD_HTML_24 is over 50 chars
warning: description for T_RATWARE_OOPS_04 is over 50 chars
warning: description for SARE_RECV_SUSP_3 is over 50 chars
warning: description for SARE_MSGID_SHORT is over 50 chars
warning: description for SARE_RECV_IP_218079 is over 50 chars
warning: description for MONOTONE_WORDS_5_12 is over 50 chars
warning: description exists for non-existent rule SARE_RD_SAFE_TINY
warning: description for VIRUS_WARNING304 is over 50 chars
warning: description for VIRUS_WARNING280 is over 50 chars
warning: description for VIRUS_WARNING35 is over 50 chars
warning: description for VIRUS_WARNING265 is over 50 chars
warning: description for IMPRONONCABLE_2_LIGHT is over 50 chars
warning: description for PLANTAGE_SPAMWARE is over 50 chars
warning: description for SARE_HEAD_XLIB_INDY2 is over 50 chars
warning: description for VIRUS_WARNING250 is over 50 chars
warning: description for RCVD_IN_AHBL is over 50 chars
warning: description exists for non-existent rule SARE_HTML_P_BREAK
warning: description for T_RATWARE_OOPS_11 is over 50 chars
warning: description for VIRUS_WARNING143 is over 50 chars
warning: description exists for non-existent rule SARE_RD_SAFE_MKSHRT
warning: description for RM_st_USAscii is over 50 chars
warning: description for VOWEL_TOCC_5 is over 50 chars
warning: description for A_HREF_NOTHING is over 50 chars
warning: description for IMPRONONCABLE_1 is over 50 chars
warning: description for VIRUS_WARNING13 is over 50 chars
warning: description for T_RATWARE_OOPS_01 is over 50 chars
warning: description for RM_fl_ConsWord9 is over 50 chars
warning: description for VIRUS_WARNING277 is over 50 chars
warning: description for BANK_SCAM is over 50 chars
warning: description for SARE_FREE_WEBM_RuMail is over 50 chars
warning: description for SARE_FROM_NUM_9DIG is over 50 chars
warning: description for VIRUS_WARNING252 is over 50 chars
warning: score set for non-existent rule SARE_FREE_WEBM_Smapxsm
warning: score set for non-existent rule SARE_FREE_WEBM_SURIML
warning: score set for non-existent rule SARE_HEAD_HDR_XWEBMTM
warning: score set for non-existent rule SARE_FREE_WEBM_ZIt001
warning: score set for non-existent rule SARE_FREE_WEBM_EsTerra
warning: score set for non-existent rule SARE_FREE_WEBM_Iamfi
warning: score set for non-existent rule SARE_FREE_WEBM_LbPlugg
warning: score set for non-existent rule SARE_TOCC_USER
warning: score set for non-existent rule VIRUS_WRANING41
warning: score set for non-existent rule SARE_FREE_WEBM_WOWMAIL
warning: score set for non-existent rule SARE_RD_SAFE_GT
warning: score set for non-existent rule SARE_RD_SAFE_TINY
warning: score set for non-existent rule SARE_FREE_WEBM_MYWAY
warning: score set for non-existent rule SARE_HEAD_XBEEN
warning: score set for non-existent rule SARE_SUB_CASINO_OB1
warning: score set for non-existent rule SARE_FREE_WEBM_ZCom04
warning: score set for non-existent rule SARE_FREE_WEBM_CZSEZNA
warning: score set for non-existent rule SARE_FREE_WEBM_Purin
warning: score set for non-existent rule SARE_FREE_WEBM_123
warning: score set for non-existent rule RCVD_IN_AHBL_UNKNOWN_1
warning: score set for non-existent rule SARE_HTML_P_BREAK
warning: score set for non-existent rule SARE_RD_SAFE_MKSHRT
warning: rule 'RCVD_IN_AHBL_SPAM_SUPPORT' is over 22 chars
warning: rule 'IE_ADDRESS_SPOOF_EXPLOIT' is over 22 chars
warning: rule 'VIRUS_WARNING_MIMEDEFANG' is over 22 chars
warning: rule 'RCVD_IN_AHBL_I_SPAM_SUPPORT' is over 22 chars
warning: rule 'MK_HTML_WE_DONT_LIKE_01' is over 22 chars
warning: rule 'VIRUS_WARNING_MYDOOM_BNCE' is over 22 chars
lint: 195 issues detected. please rerun with debug enabled for more information
Re: Howto remove the X-Spam-Report: tag
Posted by Nix <ni...@esperi.org.uk>.
On Thu, 6 Jan 2005, Roel Bindels murmured woefully:
> Can anyone help me with my problem. I do not want SA to set the
> X-Spam-Report: tag in the mail header or mailbody, but I can't find the
> option how to set this.
remove_header X-Spam-Report
--
`The sword we forged has turned upon us
Only now, at the end of all things do we see
The lamp-bearer dies; only the lamp burns on.'
Howto remove the X-Spam-Report: tag
Posted by Roel Bindels <Ro...@protomation.com>.
Hello Listers,
Can anyone help me with my problem. I do not want SA to set the
X-Spam-Report: tag in the mail header or mailbody, but I can't find the
option how to set this.
Any help would be welcome.
I'm using SA 3.0.1 and below are my settings.
rewrite_subject 0
use_terse_report 1
report_safe 0
required_hits 5.0
use_bayes 1
auto_learn 1
skip_rbl_checks 1
use_razor2 1
use_dcc 1
use_pyzor 1
ok_languages all
ok_locales all
Any other comment/advise on my settings are also welcome.
greetings
Roel Bindels
Re: Spamassassin Problem
Posted by Loren Wilton <lw...@earthlink.net>.
You appear to be running some rather old versions of some SARE (and other)
rule sets. It also looks like you have incomplete SARE rulesets, probably
something like having a -1 file without the corresponding (and required) -0
file.
All of those warnings were fixed in the SARE rules that are valid for 3.0.
They still exist (deliberately) in a file are two that are NOT supposed to
be used with 3.0.
I would start by cleaning up your local rules. Look at the descriptions on
the SARE rules page and see which rule sets you should and shouldn't have,
and get the latest versions. Make sure that you check the descriptions for
dependencies too.
Also consider redownloading some of the other rule sets. Looks like you
have bogus-virus-warnings there; I think it has been updated to fix many if
not all of the warnings.
Another thing to check. If you dodn't blow away your 2.63 install before
ding the 3.0 install, 3.0 might be picking up your old rules from 2.63. It
seems that the installs for different platforms (and different releases of
the same platform) tend to move around on where the rules are supposed to
be. SA can sometimes end up seeing both old and new rules, which is a bad
thing.
Now, I don't see anything in those lint warnings that should be keeping
things from working, but if you have the wrong rules running you probably
won't get very good results.
Loren