Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: SpamAssassin: users

Quick question about enabling a private rules in the local.cf

 

 

SpamAssassin users RSS feed   Index | Next | Previous | View Threaded


simon at klunky

Mar 23, 2012, 2:48 AM

Post #1 of 5 (268 views)
Permalink
Quick question about enabling a private rules in the local.cf

Hi there everyone,

I have a many custom rules defined in the local.cf shown below. I
checked spamassassin -D --lint, and did not find any reference to it.
Neither were any error messages reported.

Any example is this private black list:-

describe RBODY_PDOMAINS1 private blacklist of domain names strings
rawbody RBODY_PDOMAINS1
/\@(?:axeabout|career-lists|careers-consult|eur-exlusive|europe-career|europ-exlusive|it-jobsearch\.com|uk-exlusive|tech-newposition|new-joboffers|joblists|web-newcarer|world-jobsearch|gb-totaljob|simple-jobneed|sprytex-it|europjobs\.eu|businesinsiders\.com|sucabikes\.com\.ar|mpe-export\.com|eceurop\.com|cdromland\.nl|buyshield\.com)/
score RBODY_PDOMAINS1 5.0

SA version is 3.3.1-1 running on Debian Squeeze.

Something ought to have changed, because I swear these custom rules
works last month.

Regards, Simon


--
PGP is optional: 4BA78604
simon @ klunky . org
simon @ klunky . co.uk
I won't accept your confidentiality
agreement, and your Emails are kept.
~Ö¿Ö~


simon at klunky

Mar 23, 2012, 5:49 AM

Post #2 of 5 (254 views)
Permalink
Re: Quick question about enabling a private rules in the local.cf [In reply to]

Indeed I certainly can.

http://pastebin.com/c2an4irw

On 23/03/12 13:44, Banyan He wrote:
> Maybe you can share with us the debug output for the second thought in
> this case, Simon.
>
> Best regards,
>
> ------------
> Banyan He
> Blog: http://www.rootong.com
> Email: banyan [at] rootong
>
>
> On 2012-03-23 5:48 PM, Simon Loewenthal wrote:
>> Hi there everyone,
>>
>> I have a many custom rules defined in the local.cf shown below. I
>> checked spamassassin -D --lint, and did not find any reference to it.
>> Neither were any error messages reported.
>>
>> Any example is this private black list:-
>>
>> describe RBODY_PDOMAINS1 private blacklist of domain names strings
>> rawbody RBODY_PDOMAINS1
>> /\@(?:axeabout|career-lists|careers-consult|eur-exlusive|europe-career|europ-exlusive|it-jobsearch\.com|uk-exlusive|tech-newposition|new-joboffers|joblists|web-newcarer|world-jobsearch|gb-totaljob|simple-jobneed|sprytex-it|europjobs\.eu|businesinsiders\.com|sucabikes\.com\.ar|mpe-export\.com|eceurop\.com|cdromland\.nl|buyshield\.com)/
>>
>> score RBODY_PDOMAINS1 5.0
>>
>> SA version is 3.3.1-1 running on Debian Squeeze.
>>
>> Something ought to have changed, because I swear these custom rules
>> works last month.
>>
>> Regards, Simon
>>
>>

--
PGP is optional: 4BA78604
simon @ klunky . org
simon @ klunky . co.uk
I won't accept your confidentiality
agreement, and your Emails are kept.
~Ö¿Ö~


simon at klunky

Mar 23, 2012, 6:27 AM

Post #3 of 5 (258 views)
Permalink
Re: Quick question about enabling a private rules in the local.cf [In reply to]

# spamc -y -R < 20120323.spam
http://pastebin.com/kVFn71B3

Full email with headers via spamassassin -t . Slightly redacted:
http://pastebin.com/HFmWfZa6


On 23/03/12 13:59, Banyan He wrote:
> 60.Mar 23 10:39:43.265 [28017] dbg: config: read file
> /etc/spamassassin/local.cf
> 61.Mar 23 10:39:43.428 [28017] dbg: config: read file
> /etc/spamassassin/malware.blocklist.cf
> 62.Mar 23 10:39:43.491 [28017] dbg: config: read file
> /etc/spamassassin/sql.cf
>
> Seems it does load the config file you customized. How about the spamc
> run?
>
> spamc -y -R < /path/to/sampler
>
> What did you see here then?
>
> ------------
> Banyan He
> Blog: http://www.rootong.com
> Email: banyan [at] rootong
>
>
> On 2012-03-23 8:49 PM, Simon Loewenthal wrote:
>> Indeed I certainly can.
>>
>> http://pastebin.com/c2an4irw
>>
>> On 23/03/12 13:44, Banyan He wrote:
>>> Maybe you can share with us the debug output for the second thought in
>>> this case, Simon.
>>>
>>> Best regards,
>>>
>>> ------------
>>> Banyan He
>>> Blog: http://www.rootong.com
>>> Email: banyan [at] rootong
>>>
>>>
>>> On 2012-03-23 5:48 PM, Simon Loewenthal wrote:
>>>> Hi there everyone,
>>>>
>>>> I have a many custom rules defined in the local.cf shown
>>>> below. I
>>>> checked spamassassin -D --lint, and did not find any reference to it.
>>>> Neither were any error messages reported.
>>>>
>>>> Any example is this private black list:-
>>>>
>>>> describe RBODY_PDOMAINS1 private blacklist of domain names strings
>>>> rawbody RBODY_PDOMAINS1
>>>> /\@(?:axeabout|career-lists|careers-consult|eur-exlusive|europe-career|europ-exlusive|it-jobsearch\.com|uk-exlusive|tech-newposition|new-joboffers|joblists|web-newcarer|world-jobsearch|gb-totaljob|simple-jobneed|sprytex-it|europjobs\.eu|businesinsiders\.com|sucabikes\.com\.ar|mpe-export\.com|eceurop\.com|cdromland\.nl|buyshield\.com)/
>>>>
>>>>
>>>> score RBODY_PDOMAINS1 5.0
>>>>
>>>> SA version is 3.3.1-1 running on Debian Squeeze.
>>>>
>>>> Something ought to have changed, because I swear these custom rules
>>>> works last month.
>>>>
>>>> Regards, Simon
>>>>
>>>>


--
PGP is optional: 4BA78604
simon @ klunky . org
simon @ klunky . co.uk
I won't accept your confidentiality
agreement, and your Emails are kept.
~Ö¿Ö~


simon at klunky

Mar 26, 2012, 7:06 AM

Post #4 of 5 (244 views)
Permalink
Re: Quick question about enabling a private rules in the local.cf [In reply to]

Hi,

Still lost with this so I created a simple rule in the local.cf
(spamassasin --lint && restart done) :-

describe MYTEST mytest
body MYTEST /cdromland/
score MYTEST 0.1


I added this since word in to a file named aaa.
cdromland

# spamc -y -R <aaa
8.0/6.0
...
...
Content analysis details: (8.0 points, 6.0 required)

pts rule name description
---- ----------------------
--------------------------------------------------
-0.0 NO_RELAYS Informational: message was not relayed via SMTP
1.0 MISSING_HEADERS Missing To: header
0.5 MISSING_MID Missing Message-Id: header
1.8 MISSING_SUBJECT Missing Subject: header
2.3 EMPTY_MESSAGE Message appears to have no textual parts and no
Subject: text
1.0 MISSING_FROM Missing From: header
-0.0 NO_RECEIVED Informational: message has no Received headers
1.4 MISSING_DATE Missing Date: header
0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822
headers

I should think it would trigger the rule MYTEST, yet it did not. Have I
misunderstood the rule, or is there a problem elsewhere?

S.

On 23/03/12 14:27, Simon Loewenthal wrote:
>
> # spamc -y -R < 20120323.spam
> http://pastebin.com/kVFn71B3
>
> Full email with headers via spamassassin -t . Slightly redacted:
> http://pastebin.com/HFmWfZa6
>
>
> On 23/03/12 13:59, Banyan He wrote:
>> 60.Mar 23 10:39:43.265 [28017] dbg: config: read file
>> /etc/spamassassin/local.cf
>> 61.Mar 23 10:39:43.428 [28017] dbg: config: read file
>> /etc/spamassassin/malware.blocklist.cf
>> 62.Mar 23 10:39:43.491 [28017] dbg: config: read file
>> /etc/spamassassin/sql.cf
>>
>> Seems it does load the config file you customized. How about the spamc
>> run?
>>
>> spamc -y -R < /path/to/sampler
>>
>> What did you see here then?
>>
>> ------------
>> Banyan He
>> Blog: http://www.rootong.com
>> Email: banyan [at] rootong
>>
>>
>> On 2012-03-23 8:49 PM, Simon Loewenthal wrote:
>>> Indeed I certainly can.
>>>
>>> http://pastebin.com/c2an4irw
>>>
>>> On 23/03/12 13:44, Banyan He wrote:
>>>> Maybe you can share with us the debug output for the second thought in
>>>> this case, Simon.
>>>>
>>>> Best regards,
>>>>
>>>> ------------
>>>> Banyan He
>>>> Blog: http://www.rootong.com
>>>> Email: banyan [at] rootong
>>>>
>>>>
>>>> On 2012-03-23 5:48 PM, Simon Loewenthal wrote:
>>>>> Hi there everyone,
>>>>>
>>>>> I have a many custom rules defined in the local.cf shown
>>>>> below. I
>>>>> checked spamassassin -D --lint, and did not find any reference to it.
>>>>> Neither were any error messages reported.
>>>>>
>>>>> Any example is this private black list:-
>>>>>
>>>>> describe RBODY_PDOMAINS1 private blacklist of domain names strings
>>>>> rawbody RBODY_PDOMAINS1
>>>>> /\@(?:axeabout|career-lists|careers-consult|eur-exlusive|europe-career|europ-exlusive|it-jobsearch\.com|uk-exlusive|tech-newposition|new-joboffers|joblists|web-newcarer|world-jobsearch|gb-totaljob|simple-jobneed|sprytex-it|europjobs\.eu|businesinsiders\.com|sucabikes\.com\.ar|mpe-export\.com|eceurop\.com|cdromland\.nl|buyshield\.com)/
>>>>>
>>>>>
>>>>> score RBODY_PDOMAINS1 5.0
>>>>>
>>>>> SA version is 3.3.1-1 running on Debian Squeeze.
>>>>>
>>>>> Something ought to have changed, because I swear these custom rules
>>>>> works last month.
>>>>>
>>>>> Regards, Simon
>>>>>
>>>>>
>


--
PGP is optional: 4BA78604
simon @ klunky . org
simon @ klunky . co.uk
I won't accept your confidentiality
agreement, and your Emails are kept.
~Ö¿Ö~


rwmaillists at googlemail

Mar 26, 2012, 7:35 AM

Post #5 of 5 (249 views)
Permalink
Re: Quick question about enabling a private rules in the local.cf [In reply to]

On Mon, 26 Mar 2012 16:06:41 +0200
Simon Loewenthal wrote:

> Hi,
>
> Still lost with this so I created a simple rule in the local.cf
> (spamassasin --lint && restart done) :-
>
> describe MYTEST mytest
> body MYTEST /cdromland/
> score MYTEST 0.1
>
>
> I added this since word in to a file named aaa.
> cdromland
>
> # spamc -y -R <aaa

Try


printf "\ncdromland" | spamc -y -R

It seems to need a blank line to see the rest as a body. I guess
without that it seems cdromland as a malformed header.

SpamAssassin users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.