SA 2.63 upgrade

Jim Dickenson dickenson at CFMC.COM
Fri Feb 6 22:50:10 GMT 2004


What I have seen is people recommend not using the RPM. I have not seen a
reason for that. This is why I am asking. I have not had a problem using the
RPM since I started using MS a few months ago, until this update. My
original install of SA was via RPM files and I have used them to do updates
since. I had SA running without MS at first and added MS with clamAV some
time after.

I do not know what is going on with the current version of SA but some
scanning is being done as I get some spam flagged like this:

X-CfMC-MailScanner-SpamCheck: spam, SpamAssassin (score=17.565, required 5,
    BigEvilList_108 3.00, BigEvilList_79 3.00, FORGED_OUTLOOK_TAGS 1.10,
    J_BACKHAIR_12 1.00, J_BACKHAIR_13 1.00, J_BACKHAIR_15 1.00,
    J_BACKHAIR_22 1.00, J_BACKHAIR_35 1.00, J_BACKHAIR_42 1.00,
    J_BACKHAIR_51 1.00, J_BACKHAIR_53 1.00, TW_BF 0.08, TW_BT 0.08,
    TW_BZ 0.08, TW_CQ 0.08, TW_DJ 0.08, TW_DW 0.08, TW_FC 0.08,
    TW_FQ 0.08, TW_JD 0.08, TW_JP 0.08, TW_KK 0.08, TW_KP 0.08,
    TW_LB 0.08, TW_MV 0.08, TW_PD 0.08, TW_QD 0.08, TW_QH 0.08,
    TW_QR 0.08, TW_QU 0.08, TW_QY 0.08, TW_SF 0.08, TW_TD 0.08,
    TW_VG 0.08, TW_VU 0.08, TW_WB 0.08, TW_WC 0.08, TW_WQ 0.08,
    TW_WZ 0.08, TW_XV 0.08, TW_YZ 0.08, TW_ZT 0.08, TW_ZW 0.08)


but only a very few non RulesDuJour rules are being triggered.

I think I have successfully disabled bayes but that has not changed things.

I updated SA yesterday at about 8AM. As you can see the "caught" spam has
fallen off since then:

Date      Mail    Spam       %    Virus    %    Volume
28/01    2,289    1,179    51.5     58    2.5    13.3Mb  
29/01    8,223    4,224    51.4    222    2.7    73Mb  
30/01    8,185    4,245    51.9    198    2.4    89Mb  
31/01    6,883    3,685    53.5     94    1.4    27.6Mb  
01/02    7,167    3,992    55.7     83    1.2    46.1Mb  
02/02    8,304    4,280    51.5    138    1.7    66.1Mb  
03/02    8,724    4,375    50.1    138    1.6    67.2Mb  
04/02    8,498    4,282    50.4    125    1.5   120.3Mb  
05/02    8,454    2,376    28.1    121    1.4   137.3Mb  
06/02    5,143      828    16.1     81    1.6    66.2Mb  
-- 
Jim Dickenson
mailto:dickenson at cfmc.com

Computers for Marketing Corporation
http://www.cfmc.com/



> From: "shrek-m at gmx.de" <shrek-m at GMX.DE>
> Reply-To: MAILSCANNER at JISCMAIL.AC.UK
> Date: Fri, 6 Feb 2004 22:04:34 +0100
> To: MAILSCANNER at JISCMAIL.AC.UK
> Subject: Re: SA 2.63 upgrade
> 
> Jim Dickenson wrote:
> 
>> I have seen that mentioned
>> 
> 
> what have you seen mentioned ??  ;-)
> 
> 
>> in the list before but as it has always worked
>> for me I did not know exactly why people make the recommendation.
>> 
>> In addition SA is being called, what is not happening is that email that had
>> tripped many rules before are not tripping those rules. I have seen email
>> that for some time had been receiving scores in the teens now receive a
>> score of 0.
>> --
>> Jim Dickenson
>> mailto:dickenson at cfmc.com
>> 
>> Computers for Marketing Corporation
>> http://www.cfmc.com/
>> 
>> 
>> 
>> 
>> 
>>> From: Mike Kercher <mike at CAMAROSS.NET>
>>> Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
>>> Date: Fri, 6 Feb 2004 14:37:46 -0600
>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>> Subject: Re: SA 2.63 upgrade
>>> 
>>> The recommendation is to NOT use the rpm to install/upgrade SpamAssassin
>>> unless you recompile the rpm from the .src.rpm
>>> 
>>> Mike
>>> 
>>> 
>>> 
>>> 
>>>> -----Original Message-----
>>>> From: MailScanner mailing list
>>>> [mailto:MAILSCANNER at JISCMAIL.AC.UK] On Behalf Of Jim Dickenson
>>>> Sent: Friday, February 06, 2004 2:17 PM
>>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>>> Subject: Re: SA 2.63 upgrade
>>>> 
>>>> I am seeing the same problem. I updated, as I have always
>>>> done, via RPM.
>>>> What I am seeing is that none of the standard rules are
>>>> getting tripped, just the RulesDuJour additions I have installed.
>>>> 
>>>> I originally had the RulesDuJour .cf file in
>>>> /usr/share/spamassassin along with the ones distributed with
>>>> SA. I have moved them to /etc/mail/spamassassin but I am
>>>> still seeing the same behavior.
>>>> 
>>>> I also see that all the stuff that is spam is being
>>>> auto-learned in my bayes files. What is the best way to stop
>>>> using bayes files and then creating new ones. I need to get
>>>> this problem sorted out before I can try to get my bayes
>>>> files loaded again.
>>>> 
>>>> TIA,
>>>> --
>>>> Jim Dickenson
>>>> mailto:dickenson at cfmc.com
>>>> 
>>>> Computers for Marketing Corporation
>>>> http://www.cfmc.com/
>>>> 
>>>> 
>>>> 
>>>> 
>>>> 
>>>>> From: Chris Harris <cwharris at MORGAN.NET>
>>>>> Reply-To: MailScanner mailing list <MAILSCANNER at JISCMAIL.AC.UK>
>>>>> Date: Fri, 6 Feb 2004 13:22:33 -0600
>>>>> To: MAILSCANNER at JISCMAIL.AC.UK
>>>>> Subject: Re: SA 2.63 upgrade
>>>>> 
>>>>> I upgraded SA via CPAN
>>>>> 
>>>>> ----- Original Message -----
>>>>> From: "Mike Kercher" <mike at CAMAROSS.NET>
>>>>> To: <MAILSCANNER at JISCMAIL.AC.UK>
>>>>> Sent: Friday, February 06, 2004 9:06 AM
>>>>> Subject: Re: SA 2.63 upgrade
>>>>> 
>>>>> 
>>>>> 
>>>>> 
>>>>>> No.  How did you upgrade SA?
>>>>>> 
>>>>>> 
>>>>>> 
>>>>>> ________________________________
>>>>>> 
>>>>>>        From: MailScanner mailing list
>>>>>> [mailto:MAILSCANNER at JISCMAIL.AC.UK]
>>>>>> On Behalf Of Chris Harris
>>>>>>        Sent: Friday, February 06, 2004 8:42 AM
>>>>>>        To: MAILSCANNER at JISCMAIL.AC.UK
>>>>>>        Subject: SA 2.63 upgrade
>>>>>> 
>>>>>> 
>>>>>>        I upgraded SA to 2.63, and now tons of spam messages are
>>>>>> coming through. There are still messages being flagged as
>>>>>> 
>>>>>> 
>>>> spam, but
>>>> 
>>>> 
>>>>>> the amount
>>>>>> 
>>>>>> 
>>>>> that
>>>>> 
>>>>> 
>>>>>> is not flagged has went up quite a bit. Has anyone else
>>>>>> 
>>>>>> 
>>>> had this problem?
>>>> 
>>>> 
>>>>>>        Chris
>>>>>> 
>>>>>> 
>>>>>> 
>> 
>> 
>> 
>> 
> 
> 
> --
> shrek-m




More information about the MailScanner mailing list