From jonathangf at gmail.com Tue Feb 12 12:53:59 2008 From: jonathangf at gmail.com (Jonathan GF) Date: Tue, 12 Feb 2008 21:53:59 +0100 Subject: [SA-exim] Help! could not parse X-Spam-Status... Message-ID: Hi group, i'm brand new to the mailing list. I'm writting because i have an error in my mail server implementation and after researching it took me to sa-exim. I read the list archives and i saw something that might be in line with my issue but i want to confirm it. I have Debian Etch server with Exim and sa-exim installed. The packages are this: * exim4-daemon-heavy 4.63-17 sa-exim 4.2.1-4 * The error i'm seeing int he exim mainlog is this: *2008-02-12 21:07:10 1JP1PJ-0000y2-G6 SA: Debug: SAEximRunCond expand returned: 'true' 2008-02-12 21:07:10 1JP1PJ-0000y2-G6 SA: Debug: check succeeded, running spamc 2008-02-12 21:07:13 1JP1PJ-0000y2-G6 SA: PANIC: SA: could not parse X-Spam-Status: to extract hits and required. Bad!. Got: 'X-Spam-Status: Yes, score=7.3 required=5.5 autolearn=no version=3.1.7-deb ' (but message was accepted) 2008-02-12 21:07:13 1JP1PJ-0000y2-G6 SA: Debug: Writing message to /var/spool/sa- exim/SAerrorsave/new/1202846833_1782264.209 at mail.computerjobs.com* Later, onse the email is processed, because it seems to be proceeses fine, in the headers of the mail i can see this: *X-SA-Exim-Connect-IP: 193.119.59.164 X-SA-Exim-Mail-From: candidate.information at mail.computerjobs.com Subject: [SPAM?] Good things in store for you at ComputerJobs.com and JobServe X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 3.1.7-deb (2006-10-05) on mailhost.surestorm.com X-Spam-Level: ******* X-Spam-Status: Yes, score=7.3 required=5.5 autolearn=no version=3.1.7-deb X-SA-Exim-Scanned: No (on mailhost.surestorm.com); Panic (see exim mainlog)* The question is, i saw while researching that might be necessary to rebuild the /usr/lib/exim4/local_scan/sa-exim.so (local_scan_path directive) file. Is this correct? Is there any other way to proceed? In case i have to rebuild the sa-exim.so file, How can i do this? What do i need? Thanks in advance. Cheers, Jonathan GF -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.merlins.org/archives/sa-exim/attachments/20080212/3a454c22/attachment.htm From holmgren at lysator.liu.se Tue Feb 12 15:27:01 2008 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Wed, 13 Feb 2008 00:27:01 +0100 Subject: [SA-exim] Help! could not parse X-Spam-Status... In-Reply-To: References: Message-ID: <200802130027.02585@proffe.kibibyte.se> On tisdagen den 12 februari 2008, Jonathan GF wrote: > Hi group, > > i'm brand new to the mailing list. I'm writting because i have an error in > my mail server implementation and after researching it took me to sa-exim. > > I read the list archives and i saw something that might be in line with my > issue but i want to confirm it. > > I have Debian Etch server with Exim and sa-exim installed. The packages are > this: > > * exim4-daemon-heavy 4.63-17 > sa-exim 4.2.1-4 * > > The error i'm seeing int he exim mainlog is this: > > *2008-02-12 21:07:10 1JP1PJ-0000y2-G6 SA: Debug: SAEximRunCond expand > returned: 'true' > 2008-02-12 21:07:10 1JP1PJ-0000y2-G6 SA: Debug: check succeeded, running > spamc > 2008-02-12 21:07:13 1JP1PJ-0000y2-G6 SA: PANIC: SA: could not parse > X-Spam-Status: to extract hits and required. Bad!. Got: 'X-Spam-Status: > Yes, score=7.3 required=5.5 autolearn=no version=3.1.7-deb > ' (but message was accepted) SA-Exim requires that the "tests=_TEST_" part of X-Spam-Status be present for some reason. If you reset the X-Spam-Status header field to the default you should be fine. -- Magnus Holmgren holmgren at lysator.liu.se (No Cc of list mail needed, thanks) -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part. Url : http://lists.merlins.org/archives/sa-exim/attachments/20080213/ca1d8404/attachment.pgp From jonathangf at gmail.com Wed Feb 13 02:53:32 2008 From: jonathangf at gmail.com (jonathangf at gmail.com) Date: Wed, 13 Feb 2008 11:53:32 +0100 Subject: [SA-exim] Help! could not parse X-Spam-Status... In-Reply-To: <200802130027.02585@proffe.kibibyte.se> References: <200802130027.02585@proffe.kibibyte.se> Message-ID: Thanks Magnus. I will test it and back with the results. Cheers, Jonathan GF On 2/13/08, Magnus Holmgren wrote: > On tisdagen den 12 februari 2008, Jonathan GF wrote: > > Hi group, > > > > i'm brand new to the mailing list. I'm writting because i have an error in > > my mail server implementation and after researching it took me to sa-exim. > > > > I read the list archives and i saw something that might be in line with my > > issue but i want to confirm it. > > > > I have Debian Etch server with Exim and sa-exim installed. The packages > are > > this: > > > > * exim4-daemon-heavy 4.63-17 > > sa-exim 4.2.1-4 * > > > > The error i'm seeing int he exim mainlog is this: > > > > *2008-02-12 21:07:10 1JP1PJ-0000y2-G6 SA: Debug: SAEximRunCond expand > > returned: 'true' > > 2008-02-12 21:07:10 1JP1PJ-0000y2-G6 SA: Debug: check succeeded, running > > spamc > > 2008-02-12 21:07:13 1JP1PJ-0000y2-G6 SA: PANIC: SA: could not parse > > X-Spam-Status: to extract hits and required. Bad!. Got: 'X-Spam-Status: > > Yes, score=7.3 required=5.5 autolearn=no version=3.1.7-deb > > ' (but message was accepted) > > SA-Exim requires that the "tests=_TEST_" part of X-Spam-Status be present > for > some reason. If you reset the X-Spam-Status header field to the default you > should be fine. > > -- > Magnus Holmgren holmgren at lysator.liu.se > (No Cc of list mail needed, thanks) > From jonathangf at gmail.com Wed Feb 13 09:31:57 2008 From: jonathangf at gmail.com (Jonathan GF) Date: Wed, 13 Feb 2008 18:31:57 +0100 Subject: [SA-exim] Autolearn = No Message-ID: Hi group, the SA headers show i don't have enabled auto-learning but in my spamassassin "local.cf" i have it (at least in term of bayes). Can someone show me he procedure to enable autolearning, and maybe pros and cons ? Thanks in advance. Cheers, Jonathan GF -------------- next part -------------- An HTML attachment was scrubbed... URL: http://lists.merlins.org/archives/sa-exim/attachments/20080213/e65d4fc8/attachment.htm From holmgren at lysator.liu.se Wed Feb 13 10:33:40 2008 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Wed, 13 Feb 2008 19:33:40 +0100 Subject: [SA-exim] Autolearn = No In-Reply-To: References: Message-ID: <200802131933.55937@proffe.kibibyte.se> On onsdagen den 13 februari 2008, Jonathan GF wrote: > Hi group, > > the SA headers show i don't have enabled auto-learning but in my > spamassassin "local.cf" i have it (at least in term of bayes). > > Can someone show me he procedure to enable autolearning, and maybe pros and > cons ? autolearn=no means that autolearning was enabled but the score lay between the autolearn thresholds, or, if it was over the spam autolearn threshold, either the header score or the body score was below the hard-coded threshold of 3.0. Note that when SA decides whether to autolearn, the score is calculated using one of the non-bayes scoresets, i.e. it differs from the one that is reported in the X-Spam-Status field. -- Magnus Holmgren holmgren at lysator.liu.se (No Cc of list mail needed, thanks) -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part. Url : http://lists.merlins.org/archives/sa-exim/attachments/20080213/ddb230b1/attachment.pgp From holmgren at lysator.liu.se Wed Feb 13 10:37:56 2008 From: holmgren at lysator.liu.se (Magnus Holmgren) Date: Wed, 13 Feb 2008 19:37:56 +0100 Subject: [SA-exim] Autolearn = No In-Reply-To: <200802131933.55937@proffe.kibibyte.se> References: <200802131933.55937@proffe.kibibyte.se> Message-ID: <200802131937.56818@proffe.kibibyte.se> On onsdagen den 13 februari 2008, Magnus Holmgren wrote: > On onsdagen den 13 februari 2008, Jonathan GF wrote: > > Hi group, > > > > the SA headers show i don't have enabled auto-learning but in my > > spamassassin "local.cf" i have it (at least in term of bayes). > > > > Can someone show me he procedure to enable autolearning, and maybe pros > > and cons ? > > autolearn=no means that autolearning was enabled but the score lay between > the autolearn thresholds, or, if it was over the spam autolearn threshold, > either the header score or the body score was below the hard-coded > threshold of 3.0. Note that when SA decides whether to autolearn, the score > is calculated using one of the non-bayes scoresets, i.e. it differs from > the one that is reported in the X-Spam-Status field. Oh, it could also mean that you haven't learned enough spam and/or ham for autolearning to kick in (bayes_min_ham_num and bayes_min_spam_num, which both default to 200). -- Magnus Holmgren holmgren at lysator.liu.se (No Cc of list mail needed, thanks) "Exim is better at being younger, whereas sendmail is better for Scrabble (50 point bonus for clearing your rack)" -- Dave Evans -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/pgp-signature Size: 189 bytes Desc: This is a digitally signed message part. Url : http://lists.merlins.org/archives/sa-exim/attachments/20080213/cad1ccc3/attachment.pgp From j.carter at ieee.org Sat Feb 16 06:54:51 2008 From: j.carter at ieee.org (Jeffrey D. Carter) Date: Sat, 16 Feb 2008 09:54:51 -0500 Subject: [SA-exim] greylisting effectiveness question Message-ID: <47B6F93B.9090906@ieee.org> After running SpamAssassin 2.55, Exim 4.22, SA-Exim-3.1, and MailScanner 4.42.9 for a really long time, I finally decided I needed to implement greylisting. (Upgrading mail server software is never fun....) This meant upgrading SpamAssassin to 3.2.4, SA-Exim to 4.2.1 (and perl to 5.6.2). and dozens of perl modules... sigh... Just upgrading to SA 3.2.4 gave a major spam reduction all by itself. After finding the secret configuration option (SAmaxrcptlistlength) greylisting seems to be working (at least it is now writing data into the tuplets directory, which it wasn't before). Are there some scripts to parse the logfiles to give some indication of how well it is working? like % of messages "temp rejected" that never get resubmitted? Jeff Carter From marc at merlins.org Mon Feb 18 21:03:08 2008 From: marc at merlins.org (Marc MERLIN) Date: Mon, 18 Feb 2008 21:03:08 -0800 Subject: [SA-exim] greylisting effectiveness question In-Reply-To: <47B6F93B.9090906@ieee.org> References: <47B6F93B.9090906@ieee.org> Message-ID: <20080219050308.GI15141@merlins.org> On Sat, Feb 16, 2008 at 09:54:51AM -0500, Jeffrey D. Carter wrote: > Are there some scripts to parse the logfiles to give some indication of > how well it is working? like % of messages "temp rejected" that never > get resubmitted? All I know about is this: http://nossie.addicts.nl/projects/sa-exim-stats/ I don't personally use it (I should), but it likely does what you need, or something close to it. Marc -- "A mouse is a device used to point at the xterm you want to type in" - A.S.R. Microsoft is to operating systems & security .... .... what McDonalds is to gourmet cooking Home page: http://marc.merlins.org/