You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by "Sergey Tsabolov ( aka linuxman )" <se...@greeklug.gr> on 2010/09/17 00:57:34 UTC

SpamAssassin version 3.2.5

I Just upgrade my SpamAssassin to version 3.2.5

Can some one tell me if the SpamAssassin rules files is up to date or is 
older with this version :

  5682 2010-01-02 17:23 10_default_prefs.cf
     7504 2010-01-02 17:23 20_advance_fee.cf
     6774 2010-01-02 17:23 20_body_tests.cf
     1889 2010-01-02 17:23 20_compensate.cf
    13402 2010-01-02 17:23 20_dnsbl_tests.cf
    14993 2010-01-02 17:23 20_drugs.cf
    11019 2010-01-02 17:23 20_dynrdns.cf
     8381 2010-01-02 17:23 20_fake_helo_tests.cf
    24688 2010-01-02 17:23 20_head_tests.cf
    10475 2010-01-02 17:23 20_html_tests.cf
     5285 2010-01-02 17:23 20_imageinfo.cf
     3325 2010-01-02 17:23 20_meta_tests.cf
     2519 2010-01-02 17:23 20_net_tests.cf
     8121 2010-01-02 17:23 20_phrases.cf
     2057 2010-01-02 17:23 20_porn.cf
    16317 2010-01-02 17:23 20_ratware.cf
     5475 2010-01-02 17:23 20_uri_tests.cf
    18146 2010-01-02 17:23 20_vbounce.cf
     2571 2010-01-02 17:23 23_bayes.cf
     1542 2010-01-02 17:23 25_accessdb.cf
     1534 2010-01-02 17:23 25_antivirus.cf
     1542 2010-01-02 17:23 25_asn.cf
     1307 2010-01-02 17:23 25_dcc.cf
     2182 2010-01-02 17:23 25_dkim.cf
     2124 2010-01-02 17:23 25_domainkeys.cf
     2927 2010-01-02 17:23 25_hashcash.cf
     1308 2010-01-02 17:23 25_pyzor.cf
     3387 2010-01-02 17:23 25_razor2.cf
     7637 2010-01-02 17:23 25_replace.cf
     2899 2010-01-02 17:23 25_spf.cf
     1766 2010-01-02 17:23 25_textcat.cf
     7613 2010-01-02 17:23 25_uribl.cf
    29427 2010-01-02 17:23 30_text_de.cf
    21850 2010-01-02 17:23 30_text_fr.cf
     1856 2010-01-02 17:23 30_text_it.cf
    23188 2010-01-02 17:23 30_text_nl.cf
    19088 2010-01-02 17:23 30_text_pl.cf
     3329 2010-01-02 17:23 30_text_pt_br.cf
    48194 2010-01-02 17:23 50_scores.cf
     1302 2010-01-02 17:23 60_awl.cf
     2770 2010-01-02 17:23 60_shortcircuit.cf
     5145 2010-01-02 17:23 60_whitelist.cf
     2532 2010-01-02 17:23 60_whitelist_dk.cf
     2556 2010-01-02 17:23 60_whitelist_dkim.cf
     3582 2010-01-02 17:23 60_whitelist_spf.cf
     1912 2010-01-02 17:23 60_whitelist_subject.cf
   112311 2010-01-02 17:23 72_active.cf
   112469 2008-11-08 12:39 72_active.cf.orig
      810 2010-01-02 17:23 72_removed.cf
   101479 2010-01-02 17:23 languages
     4777 2010-01-02 17:23 sa-update-pubkey.txt
     1843 2010-01-02 17:23 user_prefs.template

Thanks if some one answer me .
I run Ubuntu 8.04.4 full upgraded .


-- 
--------------------------------------------------------------------------------------
Don't send me documents in .doc , .docx, .xls, .ppt . , .pptx
Send it with ODF format : .odt , .odp , .ods or .pdf .
Try to use Open Document Format : http://www.openoffice.org/
Save you money&   use GNU/Linux Distro http://distrowatch.com/
-----------------------------------------------------------------------------------------


Re: SpamAssassin version 3.2.5

Posted by John Hardin <jh...@impsec.org>.
On Mon, 27 Sep 2010, camera-obscura wrote:

> John Hardin wrote:
>>
>> If you'll post a false negative message (including _all_ headers) to
>> pastebin and send the URL to the list, we'll be able to make some concrete
>> suggestions rather than just guessing blindly.
>
> I will gladly accept suggestions, but I do not understand what you
> suggest....
> TIA

It will help us to diagnose your problem if we have a sample of a message 
that SA has processed, so that we can see what it looks like and what 
rules hit. In order to perform a full analysis, we need to see the full 
message (including all headers, not just the ones your mail client decides 
to show you). pastebin.com is a site that lets you share and annotate 
files; it is much better to put a sample message up there rather than 
trying to send it to the list.

So:

(1) Retrieve a spam email that SA misclassified from your mail server. 
Make sure all the headers are present.

(2) Post that message to pastebin, or some similar site.

(3) Send the URL for that to the list, so we can take a look at it.

Then we may be able to provide some concrete suggestions about fixing the 
problem. Otherwise we're just guessing.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   The Constitution is a written instrument. As such its meaning does
   not alter. That which it meant when adopted, it means now.
                     -- U.S. Supreme Court
                        SOUTH CAROLINA v. US, 199 U.S. 437, 448 (1905)
-----------------------------------------------------------------------
  81 days until TRON Legacy

Re: SpamAssassin version 3.2.5

Posted by camera-obscura <hu...@gmail.com>.


John Hardin wrote:
> 
> 
> 
> 
> If you'll post a false negative message (including _all_ headers) to 
> pastebin and send the URL to the list, we'll be able to make some concrete 
> suggestions rather than just guessing blindly.
> 
> 
> 
I will gladly accept suggestions, but I do not understand what you
suggest....
TIA

-- 
View this message in context: http://old.nabble.com/SpamAssassin-version-3.2.5-tp29733819p29822570.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.


Re: SpamAssassin version 3.2.5

Posted by John Hardin <jh...@impsec.org>.
On Mon, 27 Sep 2010, camera-obscura wrote:

> But I also have an issue conc 3.2.5 so i decided to use this thread ...
> I have moved my domains to a new server CONTOS with webmin and spamassasin,
> BUT suddenly TONS of spam come in ..
>
> [root@ns290 ~]# spamassassin -V
> SpamAssassin version 3.2.5
>  running on Perl version 5.8.8
>
> So all seems ok, do I have to wait for the self learning feature to start
> becoming intelligent or do i have to specify more parameters?

You should manually train bayes up to 200+ hams and 200+ spams. If it's 
misclassifying spam that badly, autolearn may be learning the messages 
incorrectly.

If you'll post a false negative message (including _all_ headers) to 
pastebin and send the URL to the list, we'll be able to make some concrete 
suggestions rather than just guessing blindly.

-- 
  John Hardin KA7OHZ                    http://www.impsec.org/~jhardin/
  jhardin@impsec.org    FALaholic #11174     pgpk -a jhardin@impsec.org
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
-----------------------------------------------------------------------
   Gun Control is marketed to the public using the appealing delusion
   that violent criminals will obey the law.
-----------------------------------------------------------------------
  81 days until TRON Legacy

Re: SpamAssassin version 3.2.5

Posted by camera-obscura <hu...@gmail.com>.
Honestly I have no idea how to help YOU.

But I also have an issue conc 3.2.5 so i decided to use this thread ...
I have moved my domains to a new server CONTOS with webmin and spamassasin,
BUT suddenly TONS of spam come in ..

[root@ns290 ~]# spamassassin -V
SpamAssassin version 3.2.5
  running on Perl version 5.8.8

So all seems ok, do I have to wait for the self learning feature to start
becoming intelligent or do i have to specify more parameters?
TIA
-- 
View this message in context: http://old.nabble.com/SpamAssassin-version-3.2.5-tp29733819p29815742.html
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.


Re: SpamAssassin version 3.2.5

Posted by "Sergey Tsabolov ( aka linuxman )" <se...@greeklug.gr>.

στις 17/09/2010 02:15 πμ, O/H Karsten Bräckelmann έγραψε:
> On Fri, 2010-09-17 at 01:57 +0300, Sergey Tsabolov wrote:
>    
>> I Just upgrade my SpamAssassin to version 3.2.5
>>
>> Can some one tell me if the SpamAssassin rules files is up to date or is
>> older with this version :
>>
>>    5682 2010-01-02 17:23 10_default_prefs.cf
>>      
> Jan  2  2010 /var/lib/spamassassin/3.002005/updates_spamassassin_org.cf
>
>    
>> Thanks if some one answer me .
>> I run Ubuntu 8.04.4 full upgraded .
>>      
> Looks about right. However, to stay on the safe side, it is advised to
> just run sa-update.
>
> Since the 3.2 stock rule-set is in maintenance mode, it will only get
> updates if there are major issues [1]. Given the timestamps you just
> showed, it is either an up-to-date default configuration in /usr/share,
> or the latest update in /var/lib.
>    
Thank you  .
You absolutely right , I see the upgrades rules in 
/var/lib/spamassassin/3.002005/updates_spamassassin_org
New rules files .
> Either way, that appears to be the latest rule-set for 3.2.
>
>
> [1] Yes, the latest one was, uhm... early this year. ;)
>
>    

-- 
--------------------------------------------------------------------------------------
Don't send me documents in .doc , .docx, .xls, .ppt . , .pptx
Send it with ODF format : .odt , .odp , .ods or .pdf .
Try to use Open Document Format : http://www.openoffice.org/
Save you money&   use GNU/Linux Distro http://distrowatch.com/
-----------------------------------------------------------------------------------------


Re: SpamAssassin version 3.2.5

Posted by Karsten Bräckelmann <gu...@rudersport.de>.
On Fri, 2010-09-17 at 01:57 +0300, Sergey Tsabolov wrote:
> I Just upgrade my SpamAssassin to version 3.2.5
> 
> Can some one tell me if the SpamAssassin rules files is up to date or is 
> older with this version :
> 
>   5682 2010-01-02 17:23 10_default_prefs.cf

Jan  2  2010 /var/lib/spamassassin/3.002005/updates_spamassassin_org.cf

> Thanks if some one answer me .
> I run Ubuntu 8.04.4 full upgraded .

Looks about right. However, to stay on the safe side, it is advised to
just run sa-update.

Since the 3.2 stock rule-set is in maintenance mode, it will only get
updates if there are major issues [1]. Given the timestamps you just
showed, it is either an up-to-date default configuration in /usr/share,
or the latest update in /var/lib.

Either way, that appears to be the latest rule-set for 3.2.


[1] Yes, the latest one was, uhm... early this year. ;)

-- 
char *t="\10pse\0r\0dtu\0.@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4\xf4\xc4";
main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i<l;i++){ i%8? c<<=1:
(c=*++x); c&128 && (s+=h); if (!(h>>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}