From holmgren at lysator.liu.se Sat Dec 2 18:34:52 2006 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Sun, 3 Dec 2006 03:34:52 +0100 Subject: [SA-exim] Conflicting spamc.conf Message-ID: <200612030334.53382@proffe.kibibyte.se> Recent versions of spamc has the ability to read command-line options from a configuration file. The options read can conflict with normal SA-Exim operation (there is no way to specify that you want normal filtering operation except by not specifying -E, -r, -R etc., and hardcoding -F /dev/null will surely result in an error with older versions. Isn't it time to reconsider the decision not to talk the spamc/spamd protocol directly? If it's done right, new protocol versions shouldn't be a problem since spamd will give its response using a version corresponding to the version the client uses. There are some advantages with this. First and foremost, the score and whether it's spam or not don't have to be pulled from the X-Spam-* headers. That means more freedom to the user as to the formatting of the X-Spam-Status header (but it's still needed for greylisting). Second, the forking business goes away (some other business takes its place, of course, but it's not not necessarily more difficult business). I'm of course already working on it. :-) -- Magnus Holmgren holmgren at lysator.liu.se (No Cc of list mail needed, thanks) "Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack)" -- Dave Evans -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.merlins.org/archives/sa-exim/attachments/20061203/75e8f525/attachment.pgp From marc at merlins.org Sat Dec 2 18:48:03 2006 From: marc at merlins.org (Marc MERLIN) Date: Sat, 2 Dec 2006 18:48:03 -0800 Subject: [SA-exim] Conflicting spamc.conf In-Reply-To: <200612030334.53382@proffe.kibibyte.se> References: <200612030334.53382@proffe.kibibyte.se> Message-ID: <20061203024803.GG5267@merlins.org> On Sun, Dec 03, 2006 at 03:34:52AM +0100, Magnus Holmgren wrote: > Recent versions of spamc has the ability to read command-line options from a > configuration file. The options read can conflict with normal SA-Exim > operation (there is no way to specify that you want normal filtering > operation except by not specifying -E, -r, -R etc., and > hardcoding -F /dev/null will surely result in an error with older versions. True. > Isn't it time to reconsider the decision not to talk the spamc/spamd protocol > directly? If it's done right, new protocol versions shouldn't be a problem > since spamd will give its response using a version corresponding to the > version the client uses. At the time I was hoping to have the sa-exim.so binary be fully independent of spamassassin versions and API changes, and not have to worry about linking and later possible linking version mismatches between sa-exim and SA. Also, the SA API and linking didn't seem very mature when first wrote SA-Exim. Things have change since then obviously. > There are some advantages with this. First and foremost, the score and whether > it's spam or not don't have to be pulled from the X-Spam-* headers. That > means more freedom to the user as to the formatting of the X-Spam-Status > header (but it's still needed for greylisting). Second, the forking business > goes away (some other business takes its place, of course, but it's not not > necessarily more difficult business). I've never found forking to really be a bottleneck there compared to the heavy stuff that SA does in perl for each call. I would go as far as saying that I'm almost certain that you will never able to benchmark a difference between forking spamc and calling SA via the API compared to the CPU time used by the spamd work after that. > I'm of course already working on it. :-) I'm not against it, I've just never seen sufficient incentive to work on it myself. It may be the better solution today. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 307 bytes Desc: Digital signature Url : http://lists.merlins.org/archives/sa-exim/attachments/20061202/603ee33c/attachment-0001.pgp From jay at skimmilk.net Mon Dec 4 08:22:25 2006 From: jay at skimmilk.net (Jay Milk) Date: Mon, 04 Dec 2006 10:22:25 -0600 Subject: [SA-exim] Monitored Greylisting? Message-ID: <45744B41.80504@skimmilk.net> All, I know this isn't 100% on-topic for this list, but I'm at a loss as to where else to ask my questions. I also believe that this does fit into the sa-exim/greylisting world. I've been watching the sa-exim project for a while. I'm the sys-admin of a dedicated server running Cpanel/WHM (which in turn uses EXIM 4.x). I currently have mailscanner installed, and I keep an eye on the mailqueue using mailwatch. While tagging spam has been mostly successful for a while, I'd still like to reject it on ingress. However, we've seen a marked increase in spam recently, specifically in "good" spam. This is spam that eludes SA quite well -- it appears to come from many different relays, in different formats, and usually including an obfuscated image with the spam-message, and random prose below. It defeats SA rules and the Bayes filter very well. I also have a few honey-pots set up -- email addresses which are silently advertised (or easily guessed), and go directly into sa-learn for spam. On an average day, my server processes ~1,500 messages, of which > 75% are spam. Even with a well-trained database, I get over 50 missed spam-messages each day. I get less than five false positives in a week. All this said, I don't think sa-exim will do my server much good. High-scoring spam (>25) is already discarded, and with the quality of spam improving, sa seems to be missing a lot. However, if I could set up greylisting in a way that's workable for my server (and my user-base), I think I could improve the user-experience greatly. Here are my thoughts -- 1. I'd like to keep two whitelists, one with from-email/to-email pairs, and another with from-email/to-domain pairs. I have the know-how to extract these from the mailscanner-log and populate sql-tables -- I'd basically add each address my users have sent mail *to* every 10 minutes or so. Emails that are on either of these whitelists would be delivered without further delay. 2. I'd like to keep "business hours" for each domain. I see that the majority of spam is actually coming in outside of business hours, so the greylisting could be somewhat more aggressive outside of business hours. 3. Incoming messages which don't match either whitelist will be greylisted -- here's now where the monitoring comes in: I could monitor the greylist database and for each address-pair decide whether to allow the message next time it comes in, or whether to reject (550) the next connect-attempt. I have the expertise to write php-scripts and work with mysql databases, in order to implement this monitoring system. However, I have *no clue* when it comes to exim ACL or other configs, and I'm deathly afraid to recompile exim -- I can't afford to break anything, as I don't have enough expertise to trouble-shoot and fix this animal. If anyone can help with the exim-integration on this, I'd be more than glad to modify mailwatch for greylist monitoring, autowhitelisting, etc. Of course, the result of any of this work would be fully open source. Thanks, -- JM From matt at mattbostock.com Sun Dec 10 15:11:15 2006 From: matt at mattbostock.com (Matt Bostock) Date: Sun, 10 Dec 2006 23:11:15 +0000 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message Message-ID: <7839f656315726dcaa37e2819f726276@localhost> Hello, I'm running SA-Exim from FreeBSD ports. I think I've got everything covered but I keep getting this in /var/log/maillog: Dec 7 07:19:57 hostname spamd[93251]: Couldn't get Connecting IP header X-SA-Exim-Connect-IP for message , skipping greylisting call It's happening for every incoming message; how can I fix this? Any help is very much appreciated. Many thanks, Matt From marc at merlins.org Sun Dec 10 15:36:24 2006 From: marc at merlins.org (Marc MERLIN) Date: Sun, 10 Dec 2006 15:36:24 -0800 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message In-Reply-To: <7839f656315726dcaa37e2819f726276@localhost> References: <7839f656315726dcaa37e2819f726276@localhost> Message-ID: <20061210233624.GA29048@merlins.org> On Sun, Dec 10, 2006 at 11:11:15PM +0000, Matt Bostock wrote: > Hello, > > I'm running SA-Exim from FreeBSD ports. I think I've got everything covered but > I keep getting this in /var/log/maillog: > > Dec 7 07:19:57 hostname spamd[93251]: Couldn't get Connecting IP header > X-SA-Exim-Connect-IP for message , skipping greylisting call > > It's happening for every incoming message; how can I fix this? First things first: is sa-exim running? Do you see any SA-Exim headers in your mail? If not, did you configure/enable SA-Exim ? Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From matt at mattbostock.com Sun Dec 10 21:54:50 2006 From: matt at mattbostock.com (Matt Bostock) Date: Mon, 11 Dec 2006 5:54:50 +0000 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message In-Reply-To: <20061210233624.GA29048@merlins.org> References: <20061210233624.GA29048@merlins.org> Message-ID: <65bb3c63ad6c7a114df04e70b5a4499d@localhost> Marc, I ran spamassassin -t -D on a temporarily reject messaged in /var/spool/exim/SAtempreject and got: [5256] dbg: plugin: loading Greylisting from /usr/local/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/Plugin/Greylisting.pm [5256] dbg: plugin: registered Greylisting=HASH(0x8b63f64) ... and then ... [5256] dbg: plugin: registering glue method for greylisting (Greylisting=HASH(0x8b63f64)) [5256] dbg: GREYLISTING: called function [5256] dbg: GREYLISTING: running greylisting on , since score is too low (13.387) and you configured greyl isting to greylist anything under 9999 [5256] dbg: GREYLISTING: computed greylisting on tuplet, saved info in /var/spool/sa-exim/tuplets/91/76/88/anne at evilspammerdomain.com/anne @example.com and whitelist status is 0 Now here's an interesting bit - the tuplets *aren't* being written to during normal operation, but they are when I run the 'spamassassin -t D' command. I have the tuplets directory chowned to spamd:spamd and chmod 770. Should the tuplets dir be chowned to the exim user and group? Many thanks, Matt From michael at heiming.de Sun Dec 10 23:15:31 2006 From: michael at heiming.de (Michael Heiming) Date: Mon, 11 Dec 2006 08:15:31 +0100 Subject: [SA-exim] Monitored Greylisting? In-Reply-To: <45744B41.80504@skimmilk.net> References: <45744B41.80504@skimmilk.net> Message-ID: <457D0593.4070002@heiming.de> Jay Milk wrote: > All, > > I know this isn't 100% on-topic for this list, but I'm at a loss as to > where else to ask my questions. I also believe that this does fit into > the sa-exim/greylisting world. > > I've been watching the sa-exim project for a while. I'm the sys-admin > of a dedicated server running Cpanel/WHM (which in turn uses EXIM 4.x). > I currently have mailscanner installed, and I keep an eye on the > mailqueue using mailwatch. While tagging spam has been mostly > successful for a while, I'd still like to reject it on ingress. > However, we've seen a marked increase in spam recently, specifically in > "good" spam. This is spam that eludes SA quite well -- it appears to > come from many different relays, in different formats, and usually > including an obfuscated image with the spam-message, and random prose > below. It defeats SA rules and the Bayes filter very well. I also have > a few honey-pots set up -- email addresses which are silently advertised > (or easily guessed), and go directly into sa-learn for spam. > > On an average day, my server processes ~1,500 messages, of which > 75% > are spam. Even with a well-trained database, I get over 50 missed > spam-messages each day. I get less than five false positives in a week. Sounds good, with the recent raise of spam I get rid of this amount of ratware sometimes in a couple of Minutes. Still spam is >90%, on secondary MX systems even >99%. I'd suggest to take a deep look in the anti spam possibilities exim has to offer. Of course you could look into FuzzyOCR against gif scam, which can be used by recent SA versions, but all this stuff is pretty expensive to run, if you are flooded with spam 24/7. Though with your minimal spam it might not be a big problem at all. You can control any step of a smtp connection with exim and delay suspicious hosts for the smallest mistake. Be very picky about the slightest mistake. A bunch of it can be fooled into nice smtp protocol violation this way or just goes away. There are quite a few configuration examples available STFW. This way you don't need to fire up SA that often, which saves resources, since SA tends to use quite some ram, limiting the number of spamd you can run in parallel. Good luck Michael Heiming -- From marc at merlins.org Mon Dec 11 07:17:50 2006 From: marc at merlins.org (Marc MERLIN) Date: Mon, 11 Dec 2006 07:17:50 -0800 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message In-Reply-To: <65bb3c63ad6c7a114df04e70b5a4499d@localhost> References: <20061210233624.GA29048@merlins.org> <65bb3c63ad6c7a114df04e70b5a4499d@localhost> Message-ID: <20061211151750.GA26578@merlins.org> On Mon, Dec 11, 2006 at 05:54:50AM +0000, Matt Bostock wrote: > Now here's an interesting bit - the tuplets *aren't* being written to during normal operation, but they are when I run the 'spamassassin -t D' command. I have the tuplets directory chowned to spamd:spamd and chmod 770. Should the tuplets dir be chowned to the exim user and group? Yes. That's indicated in the docs somewhere, and you may want to file a bug with the ports maintainer as it should be set right for you at install time ideally. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From martin.hierling at fh-luh.de Mon Dec 11 09:07:14 2006 From: martin.hierling at fh-luh.de (Martin Hierling) Date: Mon, 11 Dec 2006 18:07:14 +0100 Subject: [SA-exim] am blind, didnt find exim acl examples to add X-SA-Exim-Rcpt-To and X-SA-Exim-Connect-IP Message-ID: <20061211170714.GA14000@cc.fh-luh.de> Hi, i know i have seen them some days ago (perhaps i dreamed...?) but now they are gone. Can someone send me the link or the README where i can see how to tell exim to add these two headers: X-SA-Exim-Rcpt-To and X-SA-Exim-Connect-IP regards Martin -- ---------------------------------------------------------------- Windows: From the people who brought you EDLIN! ---------------------------------------------------------------- From marc at merlins.org Mon Dec 11 10:39:09 2006 From: marc at merlins.org (Marc MERLIN) Date: Mon, 11 Dec 2006 10:39:09 -0800 Subject: [SA-exim] am blind, didnt find exim acl examples to add X-SA-Exim-Rcpt-To and X-SA-Exim-Connect-IP In-Reply-To: <20061211170714.GA14000@cc.fh-luh.de> References: <20061211170714.GA14000@cc.fh-luh.de> Message-ID: <20061211183909.GD29115@merlins.org> On Mon, Dec 11, 2006 at 06:07:14PM +0100, Martin Hierling wrote: > Hi, > > i know i have seen them some days ago (perhaps i dreamed...?) but now > they are gone. > > Can someone send me the link or the README where i can see how to tell > exim to add these two headers: > X-SA-Exim-Rcpt-To and X-SA-Exim-Connect-IP Check /var/log/exim/mainlog, and see if/why sa-exim is running or not. If it's not running, check your sa-exim.conf Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From matt at mattbostock.com Mon Dec 11 14:29:56 2006 From: matt at mattbostock.com (Matt Bostock) Date: Mon, 11 Dec 2006 22:29:56 +0000 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message In-Reply-To: <20061211151750.GA26578@merlins.org> References: <20061211151750.GA26578@merlins.org> Message-ID: <032e5d9a9a17b1109503b3432abfa2ed@localhost> > Yes. That's indicated in the docs somewhere, and you may want to file a > bug with the ports maintainer as it should be set right for you at > install time ideally. Hmmm... I chmodded /var/spool/sa-exim to 777 recursively (there are no other users on this server) just to test, and the tuplets still aren't being written. Any ideas of what might be causing this? Much appreciated, Matt From holmgren at lysator.liu.se Mon Dec 11 15:01:09 2006 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Tue, 12 Dec 2006 00:01:09 +0100 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message In-Reply-To: <65bb3c63ad6c7a114df04e70b5a4499d@localhost> References: <20061210233624.GA29048@merlins.org> <65bb3c63ad6c7a114df04e70b5a4499d@localhost> Message-ID: <200612120001.20320@proffe.kibibyte.se> On Monday 11 December 2006 06:54, Matt Bostock wrote: > Now here's an interesting bit - the tuplets *aren't* being written to > during normal operation, but they are when I run the 'spamassassin -t D' > command. I have the tuplets directory chowned to spamd:spamd and chmod 770. > Should the tuplets dir be chowned to the exim user and group? Depends. If spamd is run with -u spamd, then spamd should own the tuplets dir. If spamd runs as root and thus setuids to the calling user, then the Exim user should own the tuplets dir. But if you get "Couldn't get Connecting IP header X-SA-Exim-Connect-IP", something else must be the problem. -- Magnus Holmgren holmgren at lysator.liu.se (No Cc of list mail needed, thanks) "Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack)" -- Dave Evans -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.merlins.org/archives/sa-exim/attachments/20061212/7ebbab33/attachment.pgp From matt at mattbostock.com Mon Dec 11 15:09:29 2006 From: matt at mattbostock.com (Matt Bostock) Date: Mon, 11 Dec 2006 23:09:29 -0000 Subject: [SA-exim] "Couldn't get Connecting IP headerX-SA-Exim-Connect-IP" error message In-Reply-To: <200612120001.20320@proffe.kibibyte.se> Message-ID: > Depends. If spamd is run with -u spamd, then spamd should own > the tuplets dir. > If spamd runs as root and thus setuids to the calling user, > then the Exim user should own the tuplets dir. But if you get > "Couldn't get Connecting IP header X-SA-Exim-Connect-IP", > something else must be the problem. Thanks Magnus, that makes sense. I've got spamd running with -u spamd, but even chmod 777 isn't working for the tuplets directory. The only time tuplets are being created is when I run 'spamassassin -t D < /var/spool/exim/SAtempreject/samplespam' Best regards, Matt -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.409 / Virus Database: 268.15.15/581 - Release Date: 09/12/2006 From paul at domains.textdriven.com Mon Dec 18 18:17:58 2006 From: paul at domains.textdriven.com (Paul) Date: Tue, 19 Dec 2006 15:17:58 +1300 Subject: [SA-exim] exim not acting on SpamAssassin config Message-ID: Hi, I have having problems with sa-exim running on debian. When email is scanned by sa-exim the settings in /etc/spamassassin/local.cf do not have any affect on sa-exim. If a file is scanned by spamc manually the setting are used. For example, this line in : etc/spamassassin/local.cf version_tag spike1 Here are some of the headers from an email scanned by sa-exim: X-SA-Exim-Connect-IP: 127.0.0.1 X-SA-Exim-Mail-From: paul at domains.textdriven.com Subject: sa-config X-SA-Exim-Version: 4.2 (built Thu, 03 Mar 2005 10:44:12 +0100) X-SA-Exim-Scanned: Yes (on spike) sa-exim seems to completely ignore my settings. What have I done wrong? Thanks, Paul From holmgren at lysator.liu.se Tue Dec 19 01:03:12 2006 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Tue, 19 Dec 2006 10:03:12 +0100 Subject: [SA-exim] exim not acting on SpamAssassin config In-Reply-To: References: Message-ID: <200612191003.20136@proffe.kibibyte.se> On Tuesday 19 December 2006 03:17, Paul wrote: > I have having problems with sa-exim running on debian. When email is > scanned by sa-exim the settings in /etc/spamassassin/local.cf do not > have any affect on sa-exim. If a file is scanned by spamc manually > the setting are used. > > For example, this line in : etc/spamassassin/local.cf > version_tag spike1 > > Here are some of the headers from an email scanned by sa-exim: > X-SA-Exim-Connect-IP: 127.0.0.1 > X-SA-Exim-Mail-From: paul at domains.textdriven.com > Subject: sa-config > X-SA-Exim-Version: 4.2 (built Thu, 03 Mar 2005 10:44:12 +0100) > X-SA-Exim-Scanned: Yes (on spike) > > sa-exim seems to completely ignore my settings. What have I done wrong? The header fields with names beginning with X-SA-Exim- are added by SA-Exim before passing the mail to spamc. They have nothing to do with local.cf. When the processed mail comes back, SA-Exim unfortunately can't just replace the entire mail header with a single function call. Instead it checks for X-Spam-* fields and adds those, as well as changing the Subject if it has been rewritten. The only header field that should be affected by "version_tag spike1" is X-Spam-Version. Have you checked that? -- Magnus Holmgren holmgren at lysator.liu.se (No Cc of list mail needed, thanks) "Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack)" -- Dave Evans -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.merlins.org/archives/sa-exim/attachments/20061219/476a4fa8/attachment.pgp From holmgren at lysator.liu.se Tue Dec 19 03:19:35 2006 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Tue, 19 Dec 2006 12:19:35 +0100 Subject: [SA-exim] exim not acting on SpamAssassin config In-Reply-To: <3FED84D7-089D-45CA-AA2D-46A6E930C508@domains.textdriven.com> References: <200612191003.20136@proffe.kibibyte.se> <3FED84D7-089D-45CA-AA2D-46A6E930C508@domains.textdriven.com> Message-ID: <200612191219.40325@proffe.kibibyte.se> Please send followups to the list, so that others may give their input too. And please don't top post. On Tuesday 19 December 2006 10:57, Paul wrote: > On 19/12/2006, at 10:03 PM, Magnus Holmgren wrote: > > The header fields with names beginning with X-SA-Exim- are added by > > SA-Exim > > before passing the mail to spamc. They have nothing to do with > > local.cf. When > > the processed mail comes back, SA-Exim unfortunately can't just > > replace the > > entire mail header with a single function call. Instead it checks for > > X-Spam-* fields and adds those, as well as changing the Subject if > > it has > > been rewritten. > > > > The only header field that should be affected by "version_tag > > spike1" is > > X-Spam-Version. Have you checked that? > The only X-Spam headers are ones added by other mail servers which > our mail is fetched from using fetchmail. They do a very bad job of > filtering. Here are the headers: > > X-Spam-Score: 0 > X-Spam-Level: > X-Spam-Status: No, score=0 tagged_above=-999 required=5 tests=[none] > > No X-Spam headers from our mail server are added. I know from logs > that tests are defiantly being performed, also, when I try spamc it > outputs the correct headers. It is possible that something fails when spamc is run as the exim user by SA-Exim. Did you run spamc as Debian-exim when it worked? Raise the SAEximDebug setting in /etc/exim4/sa-exim.conf, possibly all the way up to 9. Then, after mail has been received, check your Exim logs for clues. -- Magnus Holmgren holmgren at lysator.liu.se (No Cc of list mail needed, thanks) "Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack)" -- Dave Evans -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.merlins.org/archives/sa-exim/attachments/20061219/35c3ca05/attachment.pgp From jon at brassbounder.plus.com Tue Dec 19 07:08:43 2006 From: jon at brassbounder.plus.com (Jon Armitage) Date: Tue, 19 Dec 2006 15:08:43 +0000 Subject: [SA-exim] Local_scan timeout -- config issue? Message-ID: <20061219150843.GA9572@brassbounder.plus.com> I am running Exim 4.63 with sa-exim on a Sunfire V210, Solaris 10. Nothing has been altered for a couple of months. Over the past couple of days, I have been seeing the following messages in my logs from time to time: 2006-12-19 11:03:00 1GwckM-0005Wz-UQ SA: Debug: SAEximRunCond expand returned: ' 1' 2006-12-19 11:03:00 1GwckM-0005Wz-UQ SA: Debug: check succeeded, running spamc Dec 19 11:03:00 spamc[21268]: [ID 702911 mail.error] skipped message, greater than max message size (272384 bytes) Dec 19 11:08:00 spamc[21268]: [ID 702911 mail.error] oops! message_dump of 8192 returned different Dec 19 11:08:00 spamc[21268]: [ID 702911 mail.error] oops! message_dump of 4288 returned different 2006-12-19 11:08:00 1GwckM-0005Wz-UQ local_scan() function timed out - message t emporarily rejected (size 320896) I have SAmaxbody left at the default and SATruncBodyCond: 0. Have I messed up the config somewhere? I was under the impression that I should get a message along the lines of: 2006-12-19 02:13:47 1GwUSy-0004kn-UH SA: Action: check skipped due to message si ze (8885632 bytes) and SATruncBodyCond expanded to false (Message-Id: 1GwUSy-000 4kn-UH). Thanks, Jon Systems administrator 365 Media Group From marc at merlins.org Tue Dec 19 07:56:54 2006 From: marc at merlins.org (Marc MERLIN) Date: Tue, 19 Dec 2006 07:56:54 -0800 Subject: [SA-exim] Local_scan timeout -- config issue? In-Reply-To: <20061219150843.GA9572@brassbounder.plus.com> References: <20061219150843.GA9572@brassbounder.plus.com> Message-ID: <20061219155654.GL1322@merlins.org> On Tue, Dec 19, 2006 at 03:08:43PM +0000, Jon Armitage wrote: > I have SAmaxbody left at the default and SATruncBodyCond: 0. So, do you have SAmaxbody: 256000? > Have I messed up the config somewhere? I was under the impression that I should > get a message along the lines of: > > 2006-12-19 02:13:47 1GwUSy-0004kn-UH SA: Action: check skipped due to message si > ze (8885632 bytes) and SATruncBodyCond expanded to false (Message-Id: 1GwUSy-000 > 4kn-UH). I'm not sure why this is happening then, the code has: if (SAEximDebug > 3) { log_write(0, LOG_MAIN, "SA: Debug4: Message body is about %.0f bytes and the initial offset is %.0f", (double)(fdsize-18), (double)fdstart); } Set debugging to 4, and see what the message body size is reported as. Then crosscheck with what spamd says when it's having issues. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From jon at brassbounder.plus.com Tue Dec 19 08:34:34 2006 From: jon at brassbounder.plus.com (Jon Armitage) Date: Tue, 19 Dec 2006 16:34:34 +0000 Subject: [SA-exim] Local_scan timeout -- config issue? In-Reply-To: <20061219155654.GL1322@merlins.org> References: <20061219150843.GA9572@brassbounder.plus.com> <20061219155654.GL1322@merlins.org> Message-ID: <20061219163434.GA9793@brassbounder.plus.com> On Tue, Dec 19, 2006 at 07:56:54AM -0800, Marc MERLIN wrote: > So, do you have > SAmaxbody: 256000? I do now. It was undefined before (I thought it defaulted to this). > Set debugging to 4, and see what the message body size is reported as. Done. I will report back when something develops. (Sorry about the incorrect email address. That's what happens when you send messages from home while you're at work. :) I have subscribed this address now) Jon From marc at merlins.org Tue Dec 19 09:14:32 2006 From: marc at merlins.org (Marc MERLIN) Date: Tue, 19 Dec 2006 09:14:32 -0800 Subject: [SA-exim] Local_scan timeout -- config issue? In-Reply-To: <20061219163434.GA9793@brassbounder.plus.com> References: <20061219150843.GA9572@brassbounder.plus.com> <20061219155654.GL1322@merlins.org> <20061219163434.GA9793@brassbounder.plus.com> Message-ID: <20061219171432.GM1322@merlins.org> On Tue, Dec 19, 2006 at 04:34:34PM +0000, Jon Armitage wrote: > On Tue, Dec 19, 2006 at 07:56:54AM -0800, Marc MERLIN wrote: > > So, do you have > > SAmaxbody: 256000? > > I do now. It was undefined before (I thought it defaulted to this). It should, the source code says: static int SAmaxbody=250*1024; > > Set debugging to 4, and see what the message body size is reported as. > > Done. I will report back when something develops. > > (Sorry about the incorrect email address. That's what happens when you send > messages from home while you're at work. :) I have subscribed this address > now) No worries, I had added you through the web interface. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From paul at domains.textdriven.com Wed Dec 20 16:57:20 2006 From: paul at domains.textdriven.com (Paul) Date: Thu, 21 Dec 2006 13:57:20 +1300 Subject: [SA-exim] exim not acting on SpamAssassin config In-Reply-To: <200612191219.40325@proffe.kibibyte.se> References: <200612191003.20136@proffe.kibibyte.se> <3FED84D7-089D-45CA-AA2D-46A6E930C508@domains.textdriven.com> <200612191219.40325@proffe.kibibyte.se> Message-ID: <72C9C007-D202-4047-9E42-FD4C75779E6C@domains.textdriven.com> > Please send followups to the list, so that others may give their > input too. Oops, sorry. > It is possible that something fails when spamc is run as the exim > user by > SA-Exim. Did you run spamc as Debian-exim when it worked? I changed to shell for Debian-exim to /bin/sh (from /bin/false). It ran fine with the correct headers (according to the SA local.cf). > > Raise the SAEximDebug setting in /etc/exim4/sa-exim.conf, possibly > all the way > up to 9. Then, after mail has been received, check your Exim logs > for clues. mail.info: Dec 21 13:29:05 spike spamd[8122]: connection from spike [127.0.0.1] at port 35946 Dec 21 13:29:05 spike spamd[8122]: info: setuid to Debian-exim succeeded Dec 21 13:29:05 spike spamd[8122]: processing message <80E040F5-564D-48A3-BCC2-352B6C63327C at solutions.co.nz> for Debian- exim:106. Dec 21 13:29:05 spike spamd[8122]: clean message (0.0/5.0) for Debian- exim:106 in 0.2 seconds, 1389 bytes. Dec 21 13:29:05 spike spamd[8122]: result: . 0 - scantime=0.2,size=1389,mid=<80E040F5-564D-48A3- BCC2-352B6C63327C at solutions.co.nz>,autolearn=ham Dec 21 13:29:05 spike fetchmail[7569]: flushed exim4/mainlog: 2006-12-21 13:32:27 1GxBrH-00028z-3A SA: Debug6: Extracted header X- Spam-Checker-Version in buffer X-Spam-Checker-Version: SpamAssassin 3.0.3-spike1 (2005-04-27) on spike So sa-exim runs spamc then parses the output? It seems to find the correct version (SpamAssassin 3.0.3-spike1). Can sa-exim be configured to pass on/inject the SA headers into the email message? Many Thanks. Paul From michael at heiming.de Wed Dec 20 23:44:11 2006 From: michael at heiming.de (Michael Heiming) Date: Thu, 21 Dec 2006 08:44:11 +0100 Subject: [SA-exim] greylistnullfrom problems. Message-ID: <458A3B4B.9010607@heiming.de> Hi! Strange problem with greylistnullfrom, which is set to (local.cf): [..];'greylistnullfrom' => '0';[..] Running: Greylisting.pm,v 1.4 2006/01/11 17:17:28 marcmerlin Exp $ exim/exim-sa version (rpm): exim-sa-4.43-1.RHEL4.5 exim-4.43-1.RHEL4.5 The problem it does actually greylist "F=<>" Null sender, despite it shouldn't from how I understood the configuration. Which might not be that bad with the recent raise of ratware, though it looks like it doesn't get whitelisted even if the remote MTA is resending in time. Though >99,99% of all mails with the null sender pass just fine due to none or very low SA score. Running with "Debug: 9" in sa-exim.conf didn't revealed any clue why null sender are being greylisted. Thx for any help on the matter Michael -- From marc at merlins.org Thu Dec 21 09:18:00 2006 From: marc at merlins.org (Marc MERLIN) Date: Thu, 21 Dec 2006 09:18:00 -0800 Subject: [SA-exim] greylistnullfrom problems. In-Reply-To: <458A3B4B.9010607@heiming.de> References: <458A3B4B.9010607@heiming.de> Message-ID: <20061221171800.GB12478@merlins.org> On Thu, Dec 21, 2006 at 08:44:11AM +0100, Michael Heiming wrote: > Hi! > > Strange problem with greylistnullfrom, which is set to (local.cf): > > [..];'greylistnullfrom' => '0';[..] > > Running: > > Greylisting.pm,v 1.4 2006/01/11 17:17:28 marcmerlin Exp $ > > exim/exim-sa version (rpm): > > exim-sa-4.43-1.RHEL4.5 > exim-4.43-1.RHEL4.5 > > The problem it does actually greylist "F=<>" Null sender, despite it > shouldn't from how I understood the configuration. Which might not be > that bad with the recent raise of ratware, though it looks like it > doesn't get whitelisted even if the remote MTA is resending in time. > Though >99,99% of all mails with the null sender pass just fine due to > none or very low SA score. > > Running with "Debug: 9" in sa-exim.conf didn't revealed any clue why > null sender are being greylisted. You can take a mail like this, save it to disk, and run spamassassin -t -D < /tmp/mail This will give you more clue as to what's happening, and you can add some printfs in Greylisting.pm to see what code you're hitting and what's happening. Hope this helps. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From holmgren at lysator.liu.se Thu Dec 21 09:27:13 2006 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Thu, 21 Dec 2006 18:27:13 +0100 Subject: [SA-exim] exim not acting on SpamAssassin config In-Reply-To: <72C9C007-D202-4047-9E42-FD4C75779E6C@domains.textdriven.com> References: <200612191219.40325@proffe.kibibyte.se> <72C9C007-D202-4047-9E42-FD4C75779E6C@domains.textdriven.com> Message-ID: <200612211827.26253@proffe.kibibyte.se> On Thursday 21 December 2006 01:57, Paul wrote: > > Raise the SAEximDebug setting in /etc/exim4/sa-exim.conf, possibly > > all the way > > up to 9. Then, after mail has been received, check your Exim logs > > for clues. > > exim4/mainlog: > > 2006-12-21 13:32:27 1GxBrH-00028z-3A SA: Debug6: Extracted header X- > Spam-Checker-Version in buffer X-Spam-Checker-Version: SpamAssassin > 3.0.3-spike1 (2005-04-27) on spike > > So sa-exim runs spamc then parses the output? It seems to find the > correct version (SpamAssassin 3.0.3-spike1). Can sa-exim be > configured to pass on/inject the SA headers into the email message? SA-Exim can't be configured *not* to inject the SA headers... Which is why it is strange. Aren't there any other "Debug6: Extracted header" lines in /var/log/exim4/mainlog? You aren't filtering out the lines again in a system filter? -- Magnus Holmgren holmgren at lysator.liu.se (No Cc of list mail needed, thanks) "Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack)" -- Dave Evans -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.merlins.org/archives/sa-exim/attachments/20061221/da8a4496/attachment.pgp From michael at heiming.de Thu Dec 21 09:42:07 2006 From: michael at heiming.de (Michael Heiming) Date: Thu, 21 Dec 2006 18:42:07 +0100 Subject: [SA-exim] greylistnullfrom problems. In-Reply-To: <20061221171800.GB12478@merlins.org> References: <458A3B4B.9010607@heiming.de> <20061221171800.GB12478@merlins.org> Message-ID: <458AC76F.60908@heiming.de> Marc MERLIN wrote: > On Thu, Dec 21, 2006 at 08:44:11AM +0100, Michael Heiming wrote: >> Hi! >> >> Strange problem with greylistnullfrom, which is set to (local.cf): >> >> [..];'greylistnullfrom' => '0';[..] >> >> Running: >> >> Greylisting.pm,v 1.4 2006/01/11 17:17:28 marcmerlin Exp $ >> >> exim/exim-sa version (rpm): >> >> exim-sa-4.43-1.RHEL4.5 >> exim-4.43-1.RHEL4.5 >> >> The problem it does actually greylist "F=<>" Null sender, despite it >> shouldn't from how I understood the configuration. Which might not be >> that bad with the recent raise of ratware, though it looks like it >> doesn't get whitelisted even if the remote MTA is resending in time. >> Though >99,99% of all mails with the null sender pass just fine due to >> none or very low SA score. >> >> Running with "Debug: 9" in sa-exim.conf didn't revealed any clue why >> null sender are being greylisted. > > You can take a mail like this, save it to disk, and run > spamassassin -t -D < /tmp/mail > This will give you more clue as to what's happening, and you can add some > printfs in Greylisting.pm to see what code you're hitting and what's > happening. > > Hope this helps. Hi Marc! Indeed, many thx for the pointer. Strange that the most obvious didn't occur to me, go figure...;( I'll check this out and see what I get. Best regards Michael -- From erwin.ambrosch at xhostplus.at Fri Dec 22 00:48:42 2006 From: erwin.ambrosch at xhostplus.at (Erwin Ambrosch|XHOSTPLUS) Date: Fri, 22 Dec 2006 09:48:42 +0100 Subject: [SA-exim] Greylisting Question Message-ID: <458B9BEA.4090800@xhostplus.at> Hi all, please can one help me with the folloing issue. LOG: 2006-12-22 00:00:45 1GxWu1-0000Nv-WD SA: Action: temporarily rejected message: score=5.2 required=5.0 trigger=1.5 2006-12-22 00:05:08 1GxWyG-0000Oy-UF SA: Action: temporarily rejected message: score=5.2 required=5.0 trigger=1.5 2006-12-22 00:40:18 1GxXWI-0000fy-Gv SA: Action: scanned but message isn't spam: score=3.7 required=5.0 LEVELS: SAtempreject: 1.5 SApermreject: 10.0 SAgreylistraisetempreject: 5.0 QUESTION: The message was put in the Mailbox at the third try though score=3.7. I thought the score should be bellow SAtemprject (in my case 1.5) to be deliverd. Thanks Erwin From matt at mattbostock.com Fri Dec 22 12:25:21 2006 From: matt at mattbostock.com (Matt Bostock) Date: Fri, 22 Dec 2006 20:25:21 -0000 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message In-Reply-To: <20061211000419.GB29048@merlins.org> Message-ID: > Off hand, I'm not too sure then. > Your best bet is to put some debugging prints around the > error in the perl module. > You could also take one mail you received, make sure it has > the headers, save it to disk, and run it through spamassassin > -t -D < /tmp/mail and see what happens Hi Marc, The plot thickens... I've done some debugging in greylisting.pm and have it set to print out *all* headers to the logs just before it looks for X-SA-Exim-Connect-IP. After checking the logs, it appears that the X-SA-Exim-* headers aren't being added by the local_scan patch by the time greylisting.pm is called. Oddly enough, although greylisting (and tuplets) aren't working, the emails are being saved to /var/spool/exim/SA* and *do* have the X-SA-Exim-* headers there. Does that make sense? Many thanks, Matt -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.409 / Virus Database: 268.15.26/597 - Release Date: 21/12/2006 From michael at heiming.de Fri Dec 22 12:51:25 2006 From: michael at heiming.de (Michael Heiming) Date: Fri, 22 Dec 2006 21:51:25 +0100 Subject: [SA-exim] Greylisting Question In-Reply-To: <458B9BEA.4090800@xhostplus.at> References: <458B9BEA.4090800@xhostplus.at> Message-ID: <458C454D.4070809@heiming.de> Erwin Ambrosch|XHOSTPLUS wrote: > Hi all, > > please can one help me with the folloing issue. > > LOG: > > 2006-12-22 00:00:45 1GxWu1-0000Nv-WD SA: Action: temporarily rejected > message: score=5.2 required=5.0 trigger=1.5 > > 2006-12-22 00:05:08 1GxWyG-0000Oy-UF SA: Action: temporarily rejected > message: score=5.2 required=5.0 trigger=1.5 > > 2006-12-22 00:40:18 1GxXWI-0000fy-Gv SA: Action: scanned but message > isn't spam: score=3.7 required=5.0 > > LEVELS: > > SAtempreject: 1.5 > SApermreject: 10.0 > SAgreylistraisetempreject: 5.0 > > QUESTION: > > The message was put in the Mailbox at the third try though score=3.7. I > thought the score should be bellow SAtemprject (in my case 1.5) to be > deliverd. Iirc it means start greylisting at 1.5 SA points and let things below pass through. You can be lucky or/and a well configured bayes to use such a high score before greylisting. Michael -- From marc at merlins.org Fri Dec 22 12:55:04 2006 From: marc at merlins.org (Marc MERLIN) Date: Fri, 22 Dec 2006 12:55:04 -0800 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message Message-ID: <20061222205504.GC6271@merlins.org> On Fri, Dec 22, 2006 at 08:25:21PM -0000, Matt Bostock wrote: > > Off hand, I'm not too sure then. > > Your best bet is to put some debugging prints around the > > error in the perl module. > > You could also take one mail you received, make sure it has > > the headers, save it to disk, and run it through spamassassin > > -t -D < /tmp/mail and see what happens > > Hi Marc, > > The plot thickens... > > I've done some debugging in greylisting.pm and have it set to print out > *all* headers to the logs just before it looks for X-SA-Exim-Connect-IP. > After checking the logs, it appears that the X-SA-Exim-* headers aren't > being added by the local_scan patch by the time greylisting.pm is > called. Oddly enough, although greylisting (and tuplets) aren't working, > the emails are being saved to /var/spool/exim/SA* and *do* have the > X-SA-Exim-* headers there. > > Does that make sense? Argh, I understand what you're saying, bu tno, it does not make any sense to me. Off hand, I'm not sure what you're seeing, and I'm leaving on a Plane in 30mn where I will have limited or no internet connectivity for a week. I'm afraid I can't help right now and I don't have any great wisdom to give you at this moment. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From matt at mattbostock.com Fri Dec 22 14:00:13 2006 From: matt at mattbostock.com (Matt Bostock) Date: Fri, 22 Dec 2006 22:00:13 -0000 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message In-Reply-To: <20061222205504.GC6271@merlins.org> Message-ID: > Argh, I understand what you're saying, bu tno, it does not > make any sense to me. > Off hand, I'm not sure what you're seeing, and I'm leaving on > a Plane in 30mn where I will have limited or no internet > connectivity for a week. > > I'm afraid I can't help right now and I don't have any great > wisdom to give you at this moment. Thanks anyway Marc, have a great holiday. Merry Christmas! -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.409 / Virus Database: 268.15.26/597 - Release Date: 21/12/2006 From matt at mattbostock.com Fri Dec 22 15:12:59 2006 From: matt at mattbostock.com (Matt Bostock) Date: Fri, 22 Dec 2006 23:12:59 -0000 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message In-Reply-To: <20061222205504.GC6271@merlins.org> Message-ID: My bad, I had SAaddSAEheaderBeforeSA set to 0. I'm really sorry for wasting your time. Maybe it would be helpful to add a hint about SAaddSAEheaderBeforeSA to greylisting.pm in the "Couldn't get Connecting IP header X-SA-Exim-Connect-IP for message <...>" log message? Many thanks for all of your help and have a great Christmas, Matt -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.409 / Virus Database: 268.15.26/597 - Release Date: 21/12/2006 From czesiek at innozyt.pl Fri Dec 22 18:56:25 2006 From: czesiek at innozyt.pl (Czesiek) Date: Sat, 23 Dec 2006 03:56:25 +0100 Subject: [SA-exim] SA-EXIM on 64 bit linux systems Message-ID: <458C9AD9.3060309@innozyt.pl> Hello All, Is it possible to compile and run sa-exim on 64 bit Linux systems? Regards Czeslaw From marc at merlins.org Fri Dec 22 22:09:52 2006 From: marc at merlins.org (Marc MERLIN) Date: Fri, 22 Dec 2006 22:09:52 -0800 Subject: [SA-exim] "Couldn't get Connecting IP header X-SA-Exim-Connect-IP" error message Message-ID: <20061223060952.GA19120@merlins.org> On Fri, Dec 22, 2006 at 11:12:59PM -0000, Matt Bostock wrote: > My bad, I had SAaddSAEheaderBeforeSA set to 0. I'm really sorry for > wasting your time. > > Maybe it would be helpful to add a hint about SAaddSAEheaderBeforeSA to > greylisting.pm in the "Couldn't get Connecting IP header > X-SA-Exim-Connect-IP for message <...>" log message? Oh, right those two are fundamentally incompatible. I kind of forgot about SAaddSAEheaderBeforeSA, since I've never used it and only added it for someone else. I'll definitely have to add a big warning if both are enabled, as you pointed out, they cannot work together. Sorry about that. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From marc at merlins.org Sat Dec 23 07:43:21 2006 From: marc at merlins.org (Marc MERLIN) Date: Sat, 23 Dec 2006 07:43:21 -0800 Subject: [SA-exim] SA-EXIM on 64 bit linux systems In-Reply-To: <458C9AD9.3060309@innozyt.pl> References: <458C9AD9.3060309@innozyt.pl> Message-ID: <20061223154321.GA12342@merlins.org> On Sat, Dec 23, 2006 at 03:56:25AM +0100, Czesiek wrote: > Hello All, > > Is it possible to compile and run sa-exim on 64 bit Linux systems? I haven't personally tested it, but it ought to work. There are already people using it on other kinds of 64bit systems, so you should be ok. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From tomchat73 at yahoo.de Sat Dec 23 04:45:23 2006 From: tomchat73 at yahoo.de (Tom) Date: Sat, 23 Dec 2006 13:45:23 +0100 Subject: [SA-exim] SEnding spamc -u option? Message-ID: <458D24E3.5080103@yahoo.de> After extensive searching I haven't been able to find a solution to a particular *problem* i'm having. I wish to run a multi-domain webserver and have separate preferences for each domain (AFAIK spamassassin requires local user accounts as opposed to the forwarding I require). As such it would be perfect if I could keep a list of domains and have sa-exim send the -u option to spamc dependent on these domains. My knowledge of c is minimal, but I feel something like this would be possible by keeping a list of domains and users which are checked before sending the appropriate -u option. This would allow me to keep a set of options for each domain - which would be more than enough for my purposes. My apologies if this has been answered before anywhere or if there is a painfully simple way of doing this, but any light shed on the subject would be fantastic. Regards, Tom ___________________________________________________________ Der fr?he Vogel f?ngt den Wurm. Hier gelangen Sie zum neuen Yahoo! Mail: http://mail.yahoo.de From mike at pellatt.co.uk Sat Dec 23 07:58:41 2006 From: mike at pellatt.co.uk (Mike Pellatt) Date: Sat, 23 Dec 2006 15:58:41 +0000 Subject: [SA-exim] SA-EXIM on 64 bit linux systems In-Reply-To: <20061223154321.GA12342@merlins.org> Message-ID: Have run it on x86-64 Fedora Core 5, and presently running it on FC6 (having fixed the removal of it from the overall exim .spec file in extras :-( - who on earth decided that it was "deprecated" !!!!???? - I expect the answer is out there somewhere, but I couldn't be a**ed to find it, it was quicker to un-deprecate it !!!!) Mike P -----Original Message----- From: Marc MERLIN [mailto:marc at merlins.org] Sent: 23 December 2006 15:43 To: Czesiek Cc: sa-exim at lists.merlins.org Subject: Re: [SA-exim] SA-EXIM on 64 bit linux systems On Sat, Dec 23, 2006 at 03:56:25AM +0100, Czesiek wrote: > Hello All, > > Is it possible to compile and run sa-exim on 64 bit Linux systems? I haven't personally tested it, but it ought to work. There are already people using it on other kinds of 64bit systems, so you should be ok. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ _______________________________________________ SA-Exim mailing list SA-Exim at lists.merlins.org http://lists.merlins.org/lists/listinfo/sa-exim From marc at merlins.org Sat Dec 23 08:01:47 2006 From: marc at merlins.org (Marc MERLIN) Date: Sat, 23 Dec 2006 08:01:47 -0800 Subject: [SA-exim] SEnding spamc -u option? In-Reply-To: <458D24E3.5080103@yahoo.de> References: <458D24E3.5080103@yahoo.de> Message-ID: <20061223160147.GC12342@merlins.org> On Sat, Dec 23, 2006 at 01:45:23PM +0100, Tom wrote: > After extensive searching I haven't been able to find a solution to a > particular *problem* i'm having. > > I wish to run a multi-domain webserver and have separate preferences for > each domain (AFAIK spamassassin requires local user accounts as opposed to > the forwarding I require). As such it would be perfect if I could keep a > list of domains and have sa-exim send the -u option to spamc dependent on > these domains. Mmmh, it would still be a problem if you have a spam sent to two of the domains you have at the same time, as sa-exim wouldn't know what -u to give > My knowledge of c is minimal, but I feel something like this would be > possible by keeping a list of domains and users which are checked before > sending the appropriate -u option. This would allow me to keep a set of > options for each domain - which would be more than enough for my purposes. There's been talks about doing some hack where the -u would be linked to an acl set in the exim config. Long story short, you have to handle the situation where you have multiple recipients from different domains and/or with different configs. Someone, or I will eventually allow -u to take an exim variable, and people would then have to work out what they do with the mail, and multiple recipient conflicts in the exim config, so that sa-exim doesn't have to care :) But long answer short: today, you can't do this with sa-exim, nor do I know of any simliar software that lets you do this, just because it's both hard and will ever only be an incomplete solution at best. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/ From holmgren at lysator.liu.se Sun Dec 24 03:38:03 2006 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Sun, 24 Dec 2006 12:38:03 +0100 Subject: [SA-exim] SEnding spamc -u option? In-Reply-To: <458D24E3.5080103@yahoo.de> References: <458D24E3.5080103@yahoo.de> Message-ID: <200612241238.06949@proffe.kibibyte.se> On Saturday 23 December 2006 13:45, Tom wrote: > After extensive searching I haven't been able to find a solution to a > particular *problem* i'm having. > > I wish to run a multi-domain webserver and have separate preferences for > each domain (AFAIK spamassassin requires local user accounts as opposed to > the forwarding I require). As such it would be perfect if I could keep a > list of domains and have sa-exim send the -u option to spamc dependent on > these domains. SpamAssassin requires local usernames in the classical setup, but if you use a database to store user settings and data it should be possible to have usernames in any format. I've written (and presented Marc with) code that lets you specify the username passed with -u to spamc. I could make a patch available. -- Magnus Holmgren holmgren at lysator.liu.se (No Cc of list mail needed, thanks) "Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack)" -- Dave Evans -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.merlins.org/archives/sa-exim/attachments/20061224/3ed7e475/attachment.pgp From holmgren at lysator.liu.se Sun Dec 24 03:39:37 2006 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Sun, 24 Dec 2006 12:39:37 +0100 Subject: [SA-exim] SA-EXIM on 64 bit linux systems In-Reply-To: <458C9AD9.3060309@innozyt.pl> References: <458C9AD9.3060309@innozyt.pl> Message-ID: <200612241239.41537@proffe.kibibyte.se> On Saturday 23 December 2006 03:56, Czesiek wrote: > Is it possible to compile and run sa-exim on 64 bit Linux systems? At least the sa-exim Debian package builds on the amd64 architecture. I haven't tried running it though. -- Magnus Holmgren holmgren at lysator.liu.se Debian maintainer of sa-exim "Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack)" -- Dave Evans -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: not available Url : http://lists.merlins.org/archives/sa-exim/attachments/20061224/776c4c77/attachment-0001.pgp