aide spamassassin SVP (vraiment en galère là)

aide spamassassin SVP (vraiment en galère là) - Logiciels - Linux et OS Alternatifs

Marsh Posté le 17-08-2006 à 12:13:22    

Bonjour
 
j'ai installé postfix, amavis, clamav et tout marche bien
j'ai installé spamassassin, j'ai mis enabled=1 et lorsque j'envoie un mail avec n'importe quel mot j'arrive à des scores de -2.8 quasiment tout le tps, peut importe ce que je mette dans le mail.
Pas moyen de comprendre pourquoi !
dans le debug, j'ai "config: SpamAssassin failed to parse line, skipping: ENABLED=1 " meme si je simplifie le fichier de configuration de spamassassin.
j'ai jsute fait une install par défaut de spamassassin et j'ai des erreurs.
 
merci à tous pour votre aide.
 
------------------------------------------------------------------------------------------------------------------
 
pour vous aider, je laisse les infos que j'ai :
 
Dans spamassassin, je regarde /etc/spamassassin/local.cf et j'ai :

Citation :


# pour etre considéré comme du spam
required_hits 5.0
 
# Change the subject of suspected spam
rewrite_header subject *****SPAM*****
 
# Encapsulate spam in an attachment (0=no, 1=yes, 2=safe)
report_safe 1
 
# Change to one to enable spamd
ENABLED=1
 
#On utilise le filtre bayesien
use_bayes 1
 
# Enable Bayes auto-learning
bayes_auto_learn 1
 
# j'ai des soucis pour l'instant donc j'ai mis learn à zéro mais après je décommenterai les 3 lignes
#bayes_auto_learn 1 #Il apprends seul ce qui est spam et ce qui ne l'est pas
#bayes_auto_learn_thershold_spam 10 #Il faut un score de 10 pour qu'il apprenne que le message est un spam
#bayes_auto_learn_thershold_nonspam 2 #Il faut un score inférieur à 2 pour qu'il apprenne que le message n'est pas un spam
 
#On désactive l'autoWhiteList
use_auto_whitelist 0
 
# Activer toutes les vérifications de réseaux
skip_rbl_checks         0
 
# Le courrier utilisant une langue de l'un de ces pays ne sera pas
# marqué comme étant du spam dans une langue étrangère.
# - français, anglais
ok_languages            fr en
 
#On n'utilise pas les outils razor, dcc et pyzor
skip_rbl_checks 0
use_razor2 0
use_dcc 0
use_pyzor 0
 
#Config via amavis, et petits reglages...
razor_config /var/lib/amavis/.razor/razor-agent.conf
bayes_path /var/lib/amavis/.spamassassin/bayes
auto_whitelist_path /var/lib/amavis/.spamassassin/auto-whitelist
whitelist_from administrateur@bryangarnier.fr
lock_method flock
bayes_auto_expire 0
 
#On effectue quelques reglages de score pour des regles
score SUBJECT_DRUG_GAP_C        3.0
score SUBJECT_DRUG_GAP_L        3.0
score SUBJECT_DRUG_GAP_P        3.0
score SUBJECT_DRUG_GAP_S        3.0
score SUBJECT_DRUG_GAP_VA       3.0
score SUBJECT_DRUG_GAP_VIA      3.0
score SUBJECT_DRUG_GAP_VIC      3.0
score SUBJECT_DRUG_GAP_X        3.0
score DRUGS_ANXIETY  2.0
score DRUGS_ANXIETY_EREC 3.0
score CUM_SHOT   7.0


 
je m'envoie un mail en mettant "CUM_SHOT" en sujet et dans le body résultat je reçois le mail comme de rien n'était.
je fais mail mon_adresse_mail@mon_domain.fr
et je reçois le mail avec en en tete :

Citation :

X-Spam-Status: No, hits=-2.8 tagged_above=-999.0 required=6.3
 tests=ALL_TRUSTED
X-Spam-Level:


 
pour information, je n'ai rien mis dans /var/lib/amavis/.spamassassin/
et il y a un fichier /etc/spamassassin/init.pre auquel je n'ai rien touché
 
Le débogage :
je fais spamassassin --lint --debug
et j'ai :

Citation :


debug: SpamAssassin version 3.0.3
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH

debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/sbin', keeping.
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/bin/X11', which doesn't exist, dropping.
debug: Final PATH set to: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
debug: diag: module not installed: DBI ('require' failed)
debug: diag: module installed: DB_File, version 1.808
debug: diag: module installed: Digest::SHA1, version 2.10
debug: diag: module installed: IO::Socket::UNIX, version 1.21
debug: diag: module installed: MIME::Base64, version 3.04
debug: diag: module installed: Net::DNS, version 0.48
debug: diag: module not installed: Net::LDAP ('require' failed)
debug: diag: module not installed: Razor2::Client::Agent ('require' failed)
debug: diag: module installed: Storable, version 2.12
debug: diag: module not installed: URI ('require' failed)
debug: ignore: using a test message to lint rules
debug: using "/etc/spamassassin/init.pre" for site rules init.pre
debug: config: read file /etc/spamassassin/init.pre
debug: using "/usr/share/spamassassin" for default rules dir
debug: config: read file /usr/share/spamassassin/10_misc.cf
debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/share/spamassassin/20_compensate.cf
debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/share/spamassassin/20_drugs.cf
debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/share/spamassassin/20_phrases.cf
debug: config: read file /usr/share/spamassassin/20_porn.cf
debug: config: read file /usr/share/spamassassin/20_ratware.cf
debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/share/spamassassin/23_bayes.cf
debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/share/spamassassin/25_spf.cf
debug: config: read file /usr/share/spamassassin/25_uribl.cf
debug: config: read file /usr/share/spamassassin/30_text_de.cf
debug: config: read file /usr/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/share/spamassassin/50_scores.cf
debug: config: read file /usr/share/spamassassin/60_whitelist.cf
debug: config: read file /usr/share/spamassassin/65_debian.cf
debug: using "/etc/spamassassin" for site rules dir
debug: config: read file /etc/spamassassin/local.cf
debug: using "/root/.spamassassin" for user state dir
debug: using "/root/.spamassassin/user_prefs" for user prefs file
debug: config: read file /root/.spamassassin/user_prefs
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857f620)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8c2319c)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8c01f40)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857f620) implements 'parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8c2319c) implements 'parse_config'
config: SpamAssassin failed to parse line, skipping: ENABLED=1
warning: description for REMOVE_PAGE is over 50 chars
warning: description for FROM_WEBMAIL_END_NUMS6 is over 50 chars
warning: description exists for non-existent rule DNS_FROM_RFCI_DSN
warning: description for MAILTO_SUBJ_REMOVE is over 50 chars
warning: description for SUBJ_ILLEGAL_CHARS is over 50 chars
warning: description for EXCUSE_4 is over 50 chars
warning: description for RCVD_IN_MAPS_DUL is over 50 chars
warning: description for PORN_15 is over 50 chars
warning: description for MAILTO_TO_SPAM_ADDR is over 50 chars
warning: description exists for non-existent rule RCVD_IN_OPM_WINGATE
warning: description for DATE_IN_FUTURE_96_XX is over 50 chars
warning: description for DCC_CHECK is over 50 chars
warning: description for UNDISC_RECIPS is over 50 chars
warning: description for X_MSMAIL_PRIORITY_HIGH is over 50 chars
warning: description for DATE_IN_FUTURE_48_96 is over 50 chars
warning: description for FORGED_MUA_OIMO is over 50 chars
warning: description for FORGED_MUA_EUDORA is over 50 chars
warning: description for SOME_BREAKTHROUGH is over 50 chars
warning: description for RATWARE_EGROUPS is over 50 chars
warning: description for GAPPY_SUBJECT is over 50 chars
warning: description for URI_IS_POUND is over 50 chars
warning: description for BAYES_60 is over 50 chars
warning: description for FORGED_QUALCOMM_TAGS is over 50 chars
warning: description for MULTI_FORGED is over 50 chars
warning: description for MICRO_CAP_WARNING is over 50 chars
warning: description for MAILTO_TO_REMOVE is over 50 chars
warning: description for SUBJ_HAS_UNIQ_ID is over 50 chars
warning: description for NONEXISTENT_CHARSET is over 50 chars
warning: description for LOTS_OF_STUFF is over 50 chars
warning: description for DATE_IN_FUTURE_06_12 is over 50 chars
warning: description for FREE_PREVIEW is over 50 chars
warning: description for RATWARE_OE_MALFORMED is over 50 chars
warning: description for EXCUSE_3 is over 50 chars
warning: description for BANKRUPTCY is over 50 chars
warning: description for RCVD_IN_MAPS_RBL is over 50 chars
warning: description for BILL_1618 is over 50 chars
warning: description for EXCUSE_12 is over 50 chars
warning: description exists for non-existent rule HTML_WITH_BGCOLOR
warning: description exists for non-existent rule HTML_IMAGE_ONLY_02
warning: description for HTML_IMAGE_ONLY_04 is over 50 chars
warning: description for MILLION_USD is over 50 chars
warning: description for BAYES_20 is over 50 chars
warning: description for RATWARE_HASH_2_V2 is over 50 chars
warning: description for ROUND_THE_WORLD is over 50 chars
warning: description for FULL_REFUND is over 50 chars
warning: description for MIME_HEADER_CTYPE_ONLY is over 50 chars
warning: description for BAYES_40 is over 50 chars
warning: description for SUBJ_YOUR_DEBT is over 50 chars
warning: description for REMOVE_POSTAL is over 50 chars
warning: description for DATE_IN_PAST_12_24 is over 50 chars
warning: description for START_NOW_CAPS is over 50 chars
warning: description for FROM_NO_USER is over 50 chars
warning: description for MIME_BOUND_RKFINDY is over 50 chars
warning: description for BODY_ENHANCEMENT2 is over 50 chars
warning: description for CANNOT_BE_SPAM is over 50 chars
warning: description for DATE_IN_FUTURE_12_24 is over 50 chars
warning: description for BEST_PORN is over 50 chars
warning: description for EXCUSE_6 is over 50 chars
warning: description for FORGED_JUNO_RCVD is over 50 chars
warning: description for PLING_QUERY is over 50 chars
warning: description for PRIORITY_NO_NAME is over 50 chars
warning: description for RCVD_FAKE_HELO_DOTCOM is over 50 chars
warning: description exists for non-existent rule RCVD_IN_OPM_ROUTER
warning: description for BAYES_00 is over 50 chars
warning: description for BODY_ENHANCEMENT is over 50 chars
warning: description for TO_NO_USER is over 50 chars
warning: description for UNCLAIMED_MONEY is over 50 chars
warning: description for EXCUSE_19 is over 50 chars
warning: description for HTML_WEB_BUGS is over 50 chars
warning: description for FROM_NUM_AT_WEBMAIL is over 50 chars
warning: description for FROM_AND_TO_SAME is over 50 chars
warning: description for MISSING_MIMEOLE is over 50 chars
warning: description for FORGED_MUA_IMS is over 50 chars
warning: description for DATE_IN_PAST_24_48 is over 50 chars
warning: description for BARGAIN_URL is over 50 chars
warning: description for RAZOR2_CF_RANGE_51_100 is over 50 chars
warning: description for EXCUSE_REMOVE is over 50 chars
warning: description for BAYES_99 is over 50 chars
warning: description for RCVD_IN_DSBL is over 50 chars
warning: description for RATWARE_HASH_2 is over 50 chars
warning: description for RCVD_IN_BSP_TRUSTED is over 50 chars
warning: description for RAZOR2_CHECK is over 50 chars
warning: description for ADDR_NUMS_AT_BIGSITE is over 50 chars
warning: description for HEAD_ILLEGAL_CHARS is over 50 chars
warning: description for RICH is over 50 chars
warning: description for BAYES_05 is over 50 chars
warning: description for GUARANTEED_100_PERCENT is over 50 chars
warning: description for CELL_PHONE_IMPROVE is over 50 chars
warning: description for FORGED_TELESP_RCVD is over 50 chars
warning: description exists for non-existent rule RCVD_IN_OPM_SOCKS
warning: description for NO_DNS_FOR_FROM is over 50 chars
warning: description for NO_REAL_NAME is over 50 chars
warning: description for DATE_IN_PAST_03_06 is over 50 chars
warning: description for UNWANTED_LANGUAGE_BODY is over 50 chars
warning: description for SUBJ_AS_SEEN is over 50 chars
warning: description for FORGED_AOL_RCVD is over 50 chars
warning: description for WHY_WAIT is over 50 chars
warning: description for INVALID_DATE_TZ_ABSURD is over 50 chars
warning: description for USERPASS is over 50 chars
warning: description for TO_ADDRESS_EQ_REAL is over 50 chars
warning: description for MIME_BOUND_NEXTPART is over 50 chars
warning: description for HABEAS_INFRINGER is over 50 chars
warning: description for TO_EMPTY is over 50 chars
warning: description for MIME_BASE64_BLANKS is over 50 chars
warning: description for FROM_NO_LOWER is over 50 chars
warning: description for YOU_WON is over 50 chars
warning: description for OBSCURED_EMAIL is over 50 chars
warning: description for HTML_FONT_FACE_CAPS is over 50 chars
warning: description for HTML_IMAGE_ONLY_12 is over 50 chars
warning: description for FROM_HAS_ULINE_NUMS is over 50 chars
warning: description for WE_HONOR_ALL is over 50 chars
warning: description for HTML_IMAGE_ONLY_08 is over 50 chars
warning: description for FORGED_MUA_OUTLOOK is over 50 chars
warning: description for RESISTANCE_IS_FUTILE is over 50 chars
warning: description for DATE_IN_PAST_48_96 is over 50 chars
warning: description for HTML_IMAGE_ONLY_10 is over 50 chars
warning: description exists for non-existent rule HTML_IMAGE_ONLY_10
warning: description for MIME_BOUND_DIGITS_7 is over 50 chars
warning: description for BAYES_50 is over 50 chars
warning: description for FREE_SAMPLE is over 50 chars
warning: description exists for non-existent rule RCVD_IN_OPM_HTTP
warning: description for WITH_LC_SMTP is over 50 chars
warning: description for PREST_NON_ACCREDITED is over 50 chars
warning: description for EXCUSE_7 is over 50 chars
warning: description for BEEN_TURNED_DOWN is over 50 chars
warning: description for MIME_HTML_ONLY is over 50 chars
warning: description for DATE_IN_FUTURE_24_48 is over 50 chars
warning: description for SORTED_RECIPS is over 50 chars
warning: description exists for non-existent rule RCVD_IN_OPM_HTTP_POST
warning: description for PORN_16 is over 50 chars
warning: description for FREE_ACCESS is over 50 chars
warning: description for RCVD_IN_BSP_OTHER is over 50 chars
warning: description for DATE_IN_PAST_96_XX is over 50 chars
warning: description for FORGED_EUDORAMAIL_RCVD is over 50 chars
warning: description for FAKED_UNDISC_RECIPS is over 50 chars
warning: description for DATE_IN_PAST_06_12 is over 50 chars
warning: description for BAYES_80 is over 50 chars
warning: description for MIME_BOUND_MANY_HEX is over 50 chars
warning: description for ROUND_THE_WORLD_LOCAL is over 50 chars
warning: description for OBFUSCATING_COMMENT is over 50 chars
warning: description for SEDUCTION is over 50 chars
warning: description for MARKETING_PARTNERS is over 50 chars
warning: description for DATE_IN_FUTURE_03_06 is over 50 chars
warning: description for AOL_USERS_LINK is over 50 chars
warning: description for NO_PURCHASE is over 50 chars
warning: description for HTML_FONT_INVISIBLE is over 50 chars
warning: description for RCVD_IN_MAPS_NML is over 50 chars
warning: description for SUSPICIOUS_RECIPS is over 50 chars
warning: description for US_DOLLARS_3 is over 50 chars
warning: description for BE_BOSS is over 50 chars
warning: description for NO_OBLIGATION is over 50 chars
warning: description for HTML_IMAGE_ONLY_06 is over 50 chars
warning: description exists for non-existent rule HTML_IMAGE_ONLY_06
warning: description for EXCUSE_10 is over 50 chars
warning: description for FREE_QUOTE_INSTANT is over 50 chars
warning: description for FROM_ALL_NUMS is over 50 chars
warning: description for SUBJ_BUY is over 50 chars
warning: description for SELECTED_YOU is over 50 chars
warning: description for BAYES_95 is over 50 chars
warning: description for NIGERIAN_SUBJECT2 is over 50 chars
warning: description for FORGED_MUA_MOZILLA is over 50 chars
warning: description for RATWARE_JPFREE is over 50 chars
warning: description for EXCUSE_23 is over 50 chars
warning: description for HIDE_WIN_STATUS is over 50 chars
warning: description for EXCUSE_24 is over 50 chars
warning: description for RCVD_IN_MAPS_RSS is over 50 chars
warning: description for HTML_EVENT_UNSAFE is over 50 chars
warning: description for MONEY_BACK is over 50 chars
warning: description for MIME_SUSPECT_NAME is over 50 chars
warning: description for COPY_ACCURATELY is over 50 chars
debug: bayes: 1809 tie-ing to DB file R/O /var/lib/amavis/.spamassassin/bayes_toks
debug: bayes: 1809 tie-ing to DB file R/O /var/lib/amavis/.spamassassin/bayes_seen
debug: bayes: found bayes db version 3
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 1809 untie-ing
debug: bayes: 1809 untie-ing db_toks
debug: bayes: 1809 untie-ing db_seen
debug: Score set 1 chosen.
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: bayes: 1809 tie-ing to DB file R/O /var/lib/amavis/.spamassassin/bayes_toks
debug: bayes: 1809 tie-ing to DB file R/O /var/lib/amavis/.spamassassin/bayes_seen
debug: bayes: found bayes db version 3
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 1809 untie-ing
debug: bayes: 1809 untie-ing db_toks
debug: bayes: 1809 untie-ing db_seen
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted:
debug: decoding: no encoding detected
debug: Loading languages file...
debug: Language possibly: en,sco
debug: metadata: X-Languages: en sco
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857f620) implements 'parsed_metadata'
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: trying (3) apache.org...
debug: looking up NS for 'apache.org'
debug: NS lookup of apache.org succeeded => Dns available (set dns_available to hardcode)
debug: is DNS available? 1
debug: URIDNSBL: domains to query:
debug: all '*From' addrs: ignore@compiling.spamassassin.taint.org
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8c2319c))
debug: registering glue method for check_for_spf_helo_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c01f40))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_hashcash_value (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8c2319c))
debug: all '*To' addrs:
debug: registering glue method for check_for_spf_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c01f40))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_for_spf_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c01f40))
debug: registering glue method for check_for_spf_helo_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c01f40))
debug: registering glue method for check_for_spf_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c01f40))
debug: registering glue method for check_for_spf_helo_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8c01f40))
debug: running body-text per-line regexp tests; score so far=-2.623
debug: running uri tests; score so far=-2.623
debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857f620))
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857f620) implements 'check_tick'
debug: running raw-body-text per-line regexp tests; score so far=-2.623
debug: running full-text regexp tests; score so far=-2.623
debug: DCCifd is not available: no r/w dccifd socket found.
debug: Running tests for priority: 500
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857f620) implements 'check_post_dnsbl'
debug: running meta tests; score so far=-2.623
debug: running header regexp tests; score so far=-1.053
debug: running body-text per-line regexp tests; score so far=-1.053
debug: running uri tests; score so far=-1.053
debug: running raw-body-text per-line regexp tests; score so far=-1.053
debug: running full-text regexp tests; score so far=-1.053
debug: Running tests for priority: 1000
debug: running meta tests; score so far=-1.053
debug: running header regexp tests; score so far=-1.053
debug: running body-text per-line regexp tests; score so far=-1.053
debug: running uri tests; score so far=-1.053
debug: running raw-body-text per-line regexp tests; score so far=-1.053
debug: running full-text regexp tests; score so far=-1.053

debug: is spam? score=-1.053 required=5
debug: tests=ALL_TRUSTED,MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME
debug: subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_MSGID,__UNUSABLE_MSGID
lint: 171 issues detected.  please rerun with debug enabled for more information.


 
Merci d'avance

Reply

Marsh Posté le 17-08-2006 à 12:13:22   

Reply

Marsh Posté le 17-08-2006 à 12:41:37    

Essaie de t'envoyer un mail avec juste ça dans le corps du mail (pas de sujet) :
 

Code :
  1. XJS*C4JDBQADN1.NSBN3*2IDNEN*GTUBE-STANDARD-ANTI-UBE-TEST-EMAIL*C.34X


 
Normalement ça passe 1000 points d'un coup au mail ! ;)
 
Source : http://spamassassin.apache.org/gtube/


---------------
- Si les cons volaient, il ferait nuit tout le temps ! -
Reply

Marsh Posté le 17-08-2006 à 12:50:55    

Merci
 
ça passe à 998.8
le sujet est réécris "spam"
 
X-Spam-Status: Yes, hits=998.8 tagged_above=-999.0 required=6.3
 tests=ALL_TRUSTED, GTUBE, MISSING_SUBJECT
X-Spam-Level: ****************************************************************
X-Spam-Flag: YES
 
 
C'est ce all trusted qui me gene
 
dans mon fichier /etc/spamassassin/local.cf
j'ai mis un scroe de 7.0 pour cum_shot
et j'obtiens toujours -2.8 comme score
 
auriez vous une idée du pourquoi?
pourquoi la ligne score "CUM_SHOT   7.0" n'est pas prise en compte dans mon fichier de test alors?
 
MERCI


Message édité par rp91 le 17-08-2006 à 12:52:16
Reply

Marsh Posté le 17-08-2006 à 13:38:39    

normalement ton SA doit pas avoir besoin de ces règles pour fonctionner correctement !
 
essaie de les retirer (ou de les commenter) toutes (celle qui commencent par "score" ) :)

Reply

Marsh Posté le 17-08-2006 à 14:42:34    

salut
 
merci pour tes explications
j'ai supprimé les règles dans le fichier local.cf
 
en fait je ne sais pas du tout créer de règles, comment et où je peux voir "à tel mot correspond tel score"?
 
j'avais vu sur internet "score SUBJECT_DRUG_GAP_C 3.0" alors j'avais ajouté score cum_shot 7.0 moi meme.
 
j'envoie un mail subject "travail" et body "travail" => score -2.8 (score de base quoi)
 
subject "test", et dans le body j'ai mis 11 fois "cum shot" => score -1.1
 
"cum shot test spam cum shot medical viagra" => score -1.1
 
"test spam drugs
sales sell sales" => score -2.8 (drogue c qd meme du spam!)
 
"cum shot viagra viagara shot medical hot
sex sexe cum erectile
drug drugs" => score -0.5  (après avoir mis tout ça je pensais au moins à un score de 3 minimum !)
 
un mail sans sujet et avec en body "test" => score -1.2
 
comment faire en sorte que le score de base ne soit pas aussi faible c'est-à dire -2.8 ? (où sont ces fameux fichiers derègles, parce que moi je n'ia rien touché et fait qu'une install par défaut)
 
Merci

Reply

Marsh Posté le 17-08-2006 à 22:58:15    

up merci (je galère depuis une semaine, j'ai meme du formater suite à une fause manip)

Reply

Marsh Posté le 18-08-2006 à 11:48:28    

Si tu t'envoies des "SPAM" toi même, SpamAssassin doit surement detecter que ça vient d'un expediteur sûr puisque local ( d'ou le ALL_TRUSTED ? ), et lui enlève des points (d'ou le -2.8).
Attends de te prendre de vrais spams (cad envoyés depuis des relays ouverts / avec des encodages de caractères étranges / sans expediteur / avec un user-Agent imité, etc etc) pour juger des scores de Spamassassin. Le contenu des mails joue dans le score, mais ne fait pas tout.
 
T'as qu'a aller t'inscrire à quelques mailings lists, mettre ton adresse mail en signature de tes posts ici, etc etc


Message édité par leto le 18-08-2006 à 11:52:13

---------------
--
Reply

Marsh Posté le 18-08-2006 à 12:10:11    

leto3 :whistle:
 
sinon, rp91, tu ferais bien d'essayer de t'envoyer un mail depuis l'extérieur (du compte de ton FAI, ou un pote à toi par exemple), vers ce compte pour tester ce que dir leto3 ... :)

Reply

Marsh Posté le 19-08-2006 à 00:25:12    

salut
 
merci pour vos réponses et vos idées
déjà j'aimerai bien savoir ils sont où ces tests, si peux les modifier de manière correctes? sinon jsutement j'aimerai bien recevoir des mails de l'extérieur maisj e peux pas.
 
par exemple, soit le domaine toto.com
y a déjà un serveur postfix sans spamassassin qui envoie les mails sur exchange et on reçoit ds la boite au lettres.
 
moi j'ai une machien de test à part login user et donc j'envoie de mail de "user@toto.com" à "mail_perso@free.fr" par exemple, donc je peux envoyer.
Maitenant pour recevoir de l'extérieur c pas possible, si j'envoie à user@toto.com le user existe pas et les gens reçoivent les mails avec exchange et sous outlook et moi je suis sur linux en clair je peux pas tester à mon avis la réception externe.
 
j'enlève le sujet, je passe à -1.1, je le bourre de mot comme sex, viagra, drugs et tout ça dans tous les sens, je penssais arriver à au moin un score de 3 ou 5 et j'arrive à un malheureux -0.5 !! c quand meme zarbi comme score. je veux bien que ça fasse pas tout mais qd meme meme en interne c pas une raison pour pouvoir spammer librement ou avoir des scores négatifs.
 
et recevoir de l'extérieur je sais pas si ça changerait qqch
donc je voudrai savoir un psot normal de base j'ai un score de -2.8, y a pasm oyen que je passe le score de base à 2 par exemple?
ou si vous avez d'autres idées?
merci

Reply

Marsh Posté le 19-08-2006 à 10:45:33    

Comme leto3 te l'a expliqué sur son dernier post, le score est très bas car les mails sont envoyés en local, il a donc confiance en ces mails !
 
Je vois pas vraiment où est ton problème, à moins que tu souhaites t'envoyer du spam en local .... :/

Reply

Marsh Posté le 19-08-2006 à 10:45:33   

Reply

Marsh Posté le 19-08-2006 à 14:44:44    

ben je faisais des tests
remarque un spam en local ça pourrait exister (infection par un vers par exemple)
et meme avec un mail en local avec sex viagra et tout le tintouin, c quand meme fort de considérer ça comme un non spam avec un score négatif, oki en local le score sera + faible que l'extérieur mais si tu met que ça et que t'arrive meme pas à un score positif c que y a un souci :heink: enfin c ma logique, ptet quen dans le conception de spamassassin on se dit tout ce qui est local est sûr à 100% auquel cas moi je me poserai des questions ds le cas où t'aurai un rézo d'entreprise infecté.
 
merci de vos conseils, je vais regarder ça dès lundi

Reply

Marsh Posté le 19-08-2006 à 20:52:13    

regarde les scores obtenus par viagra, sex, etc ... ce sont pas ceux là qui font qu'un message est considéré comme SPAM ...
 
essaie plutôt de t'envoyer un mail avec un dyndns et là tu verras :)

Reply

Marsh Posté le 20-08-2006 à 18:13:56    

Salut à tous,
 
Quelques réponses (en plus d'un autre forum sur lequel j'ai aussi répondu)

  • rgrep 'viagra' /usr/share/spamassassin/*

/usr/share/spamassassin/20_drugs.cf:describe SUBJECT_DRUG_GAP_VIA       Subject contains a gappy version of 'viagra'
/usr/share/spamassassin/20_drugs.cf:body DRUG_ED_COMBO          /\bviagra .{0,15}(?:phentermine|xenical|tenuate|zyban|propecia)\b/i
/usr/share/spamassassin/20_drugs.cf:body DRUG_ED_ONLINE         /\bviagra .{0,25}(?:express|online|overnight)/i
/usr/share/spamassassin/20_drugs.cf:describe VIA_GAP_GRA            Attempts to disguise the word 'viagra'
/usr/share/spamassassin/20_drugs.cf:# gapped/obfu viagra variants using funky html-style character codes
/usr/share/spamassassin/30_text_de.cf:lang de describe SUBJECT_DRUG_GAP_VIA Betreff enthält 'viagra' mit L.ü.c.k.e.n
/usr/share/spamassassin/30_text_de.cf:lang de describe VIA_GAP_GRA Versucht das Wort 'viagra' zu tarnen
/usr/share/spamassassin/30_text_nl.cf:lang nl describe SUBJ_VIAGRA                     Onderwerp bevat "viagra"
 

  • grep 'viagra' /etc/spamassassin/*

/etc/spamassassin/70_sare_adult.cf:body     SARE_SUPERVIAGRA /(?:super|weekend)[- ]viagra/i
/etc/spamassassin/70_sare_header0.cf:header    SARE_FROM_DRUGS          From =~ /\b(?:cialis|levitra|phentermine|valium|viagra|vicodin|xanax)\b/i
/etc/spamassassin/antidrug.cf:# gapped/obfu viagra variants using funky html-style character codes
 
 
Puis par édition des fichiers :

  • 20_drugs.cf

header SUBJECT_DRUG_GAP_VIA     Subject =~ /v.{0,2}i.{0,2}a.{0,2}g.{0,2}r.{0,2}a/i
describe SUBJECT_DRUG_GAP_VIA   Subject contains a gappy version of 'viagra'
-> détection de viagra dans le sujet
 

  • antidrug.cf

body     SARE_SUPERVIAGRA /(?:super|weekend)[- ]viagra/i
describe SARE_SUPERVIAGRA mentions drug which is often subject of spam
score    SARE_SUPERVIAGRA 2.889 # type=spamgg
-> détection de viagra dans le corps du mail
 
Et enfin :

  •  grep 'ALL_TRUSTED' /usr/share/spamassassin/*

/usr/share/spamassassin/20_compensate.cf:header ALL_TRUSTED      eval:check_all_trusted()
/usr/share/spamassassin/20_compensate.cf:describe ALL_TRUSTED    Did not pass through any untrusted hosts
/usr/share/spamassassin/20_compensate.cf:tflags ALL_TRUSTED      nice
/usr/share/spamassassin/30_text_de.cf:lang de describe ALL_TRUSTED Nachricht wurde nur über vertrauenswürdige Rechner weitergeleitet
/usr/share/spamassassin/50_scores.cf:score ALL_TRUSTED -2.400 -2.820 -2.867 -3.300
 
Donc le score de ALL_TRUSTED est très fort !
 
Et comme l'ont dit certains ici, beaucoup de filtrages se font par analyse des serveurs par lesquels est passé le mail ainsi que les infos de l'expéditeur. Donc pour moi, la vérif des DNSBL est à activer et un envoi en local ne permet pas de faire de vrai test.
 
Il faut aller voir dans /var/log/mail.info pour savoir précisément quelles règles ont été positives, puis on remonte à leur fichier conteneur.
 
 
@+++


---------------
Sphinx, le prédateur du bug ;)
Reply

Marsh Posté le 20-08-2006 à 23:16:05    

Je pense que le ALL_TRUSTED est normal quand tu t'envoie une mail a toi même...

Reply

Marsh Posté le 21-08-2006 à 12:20:44    

bonjour
 
Merci pour toutes vos réponses
 
j'ai réussi à arriver à un score plus jsute de 3.9,  
comme je vous ai dit je ne peux pas m'envoyer de mail parce que le serveur ne me connait pas, je suis comme un pc indépendant sur le réseau.
 
En revanche je vous poste mon message pour vous donner une astuce qui pourrait vous servir un jour :
 
# pour des tests, je met 0 pour que le spam en local soit  
# considéré "neutre" pour pas influencer les scores
# score ALL_TRUSTED 0
 
merci, je continue à regarder :ange:

Reply

Marsh Posté le 21-08-2006 à 17:08:09    

Crée une adresse mail, genre hardwarefr@tondomaine.com , et poste la ici. Et on te transferera des vrais spams :)


---------------
--
Reply

Marsh Posté le 21-08-2006 à 19:13:52    

Bonjour
 
d'abord MERCI pour toutes vos réponses.
 
j'ai viré le enabled et le writing header ainsi que le required 5.0 étant donné que tou cela est dans amavis
 
voilà mon fichier local.cf

Citation :


ok_languages fr en
skip_rbl_checks 0
use_razor2 0 # marche pas encore
use_dcc 1 # mettre à zéro ça marche pas je crois
use_pyzor 0 # marche pas encore
score ALL_TRUSTED 0
 
# Encapsulate spam in an attachment (0=no, 1=yes, 2=safe)
report_safe 1
 
#On utilise le filtre bayesien
use_bayes 1
 
# Enable Bayes auto-learning
# bayes_auto_learn 0
 
# j'ai des soucis pour l'instant donc j'ai mis learn à zéro mais après je décommenterai les 3 lignes
bayes_auto_learn 1 #Il apprends seul ce qui est spam et ce qui ne l'est pas
 
#On désactive l'autoWhiteList
use_auto_whitelist 0
 
#Config via amavis, et petits reglages...
razor_config /var/lib/amavis/.razor/razor-agent.conf
bayes_path /var/lib/amavis/.spamassassin/bayes
auto_whitelist_path /var/lib/amavis/.spamassassin/auto-whitelist
whitelist_from administrateur@bryangarnier.fr
lock_method flock
bayes_auto_expire 0
 


je précise, techniquement je ne peux pas recevoir de mail, seulement envoyer, c pour cela que j'ai mis trusted à zéro comme ça je n'influencerai pas mes résultat de spam , j'envoie sur la boite mail du rézo et théoriquement ça doit etre considéré comme un mail de l'extérieur vu que j'ai mis un score de 0 donc qui n'influence pas les hits.
 
aujourd'hui
je fais "spamassassin --lint --debug" et j'ai ces erreurs là :

Citation :


/var/lib/amavis$ spamassassin --lint --debug
debug: SpamAssassin version 3.0.3
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH

debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/sbin', keeping.
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/bin/X11', which doesn't exist, dropping.
debug: Final PATH set to: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
debug: diag: module installed: DBI, version 1.46
debug: diag: module installed: DB_File, version 1.808
debug: diag: module installed: Digest::SHA1, version 2.10
debug: diag: module installed: IO::Socket::UNIX, version 1.21
debug: diag: module installed: MIME::Base64, version 3.04
debug: diag: module installed: Net::DNS, version 0.48
debug: diag: module not installed: Net::LDAP ('require' failed)
debug: diag: module installed: Razor2::Client::Agent, version 2.67
debug: diag: module installed: Storable, version 2.12
debug: diag: module installed: URI, version 1.35
debug: ignore: using a test message to lint rules
debug: using "/etc/spamassassin/init.pre" for site rules init.pre
debug: config: read file /etc/spamassassin/init.pre
debug: using "/usr/share/spamassassin" for default rules dir
debug: config: read file /usr/share/spamassassin/10_misc.cf
debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/share/spamassassin/20_compensate.cf
debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/share/spamassassin/20_drugs.cf
debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/share/spamassassin/20_phrases.cf
debug: config: read file /usr/share/spamassassin/20_porn.cf
debug: config: read file /usr/share/spamassassin/20_ratware.cf
debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/share/spamassassin/23_bayes.cf
debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/share/spamassassin/25_spf.cf
debug: config: read file /usr/share/spamassassin/25_uribl.cf
debug: config: read file /usr/share/spamassassin/30_text_de.cf
debug: config: read file /usr/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/share/spamassassin/50_scores.cf
debug: config: read file /usr/share/spamassassin/60_whitelist.cf
debug: config: read file /usr/share/spamassassin/65_debian.cf
debug: using "/etc/spamassassin" for site rules dir
debug: config: read file /etc/spamassassin/local.cf
debug: using "/root/.spamassassin" for user state dir
debug: using "/root/.spamassassin/user_prefs" for user prefs file
debug: config: read file /root/.spamassassin/user_prefs
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857ee90)
debug: plugin: loading Mail::SpamAssassin::Plugin::Hashcash from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8f63f84)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8f407e8)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857ee90) implements 'parse_config'
debug: plugin: Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8f63f84) implements 'parse_config'
debug: bayes: 1889 tie-ing to DB file R/O /var/lib/amavis/.spamassassin/bayes_toks
debug: bayes: 1889 tie-ing to DB file R/O /var/lib/amavis/.spamassassin/bayes_seen

debug: bayes: found bayes db version 3
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 1889 untie-ing
debug: bayes: 1889 untie-ing db_toks
debug: bayes: 1889 untie-ing db_seen
debug: Score set 1 chosen.
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: bayes: 1889 tie-ing to DB file R/O /var/lib/amavis/.spamassassin/bayes_toks
debug: bayes: 1889 tie-ing to DB file R/O /var/lib/amavis/.spamassassin/bayes_seen
debug: bayes: found bayes db version 3
debug: bayes: Not available for scanning, only 0 spam(s) in Bayes DB < 200
debug: bayes: 1889 untie-ing
debug: bayes: 1889 untie-ing db_toks
debug: bayes: 1889 untie-ing db_seen
debug: metadata: X-Spam-Relays-Trusted:  
debug: metadata: X-Spam-Relays-Untrusted:  
debug: decoding: no encoding detected
debug: Loading languages file...
debug: Language possibly: en,sco
debug: metadata: X-Languages: en sco
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857ee90) implements 'parsed_metadata'
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: trying (3) apache.org...
debug: looking up NS for 'apache.org'
debug: NS lookup of apache.org succeeded => Dns available (set dns_available to hardcode)
debug: is DNS available? 1
debug: URIDNSBL: domains to query:  
debug: all '*From' addrs: ignore@compiling.spamassassin.taint.org
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_hashcash_double_spend (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8f63f84))
debug: registering glue method for check_for_spf_helo_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f407e8))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_hashcash_value (Mail::SpamAssassin::Plugin::Hashcash=HASH(0x8f63f84))
debug: all '*To' addrs:  
debug: registering glue method for check_for_spf_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f407e8))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_for_spf_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f407e8))
debug: registering glue method for check_for_spf_helo_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f407e8))
debug: registering glue method for check_for_spf_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f407e8))
debug: registering glue method for check_for_spf_helo_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f407e8))
debug: running body-text per-line regexp tests; score so far=0.197
debug: running uri tests; score so far=0.197
debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857ee90))
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857ee90) implements 'check_tick'
debug: running raw-body-text per-line regexp tests; score so far=0.197
debug: running full-text regexp tests; score so far=0.197
debug: DCCifd is not available: no r/w dccifd socket found.
debug: Current PATH is: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
debug: executable for dccproc was found at /usr/bin/dccproc
debug: DCC is available: /usr/bin/dccproc
debug: entering helper-app run mode
debug: setuid: helper proc 1890: ruid=0 euid=0
debug: DCC: got response: socket(UDP): Address family not supported by protocol
debug: leaving helper-app run mode
debug: DCC -> check failed: no X-DCC returned (did you create a map file?): socket(UDP): Address family not supported by protocol
debug: Running tests for priority: 500
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x857ee90) implements 'check_post_dnsbl'
debug: running meta tests; score so far=0.197
debug: running header regexp tests; score so far=1.767
debug: running body-text per-line regexp tests; score so far=1.767
debug: running uri tests; score so far=1.767
debug: running raw-body-text per-line regexp tests; score so far=1.767
debug: running full-text regexp tests; score so far=1.767
debug: Running tests for priority: 1000
debug: running meta tests; score so far=1.767
debug: running header regexp tests; score so far=1.767
debug: running body-text per-line regexp tests; score so far=1.767
debug: running uri tests; score so far=1.767
debug: running raw-body-text per-line regexp tests; score so far=1.767
debug: running full-text regexp tests; score so far=1.767
debug: is spam? score=1.767 required=5
debug: tests=MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME
debug: subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__SANE_MSGID,__UNUSABLE_MSGID
lint:170 issues detected. please rerun with debug enabled for more information.


 
Aujourd'hui je peux faire quoi concrètement?
le truc des modules perl j'en ia installé aucun de chez cpan.org, la dernière fois que j'ia tout installé j'ia cassé tout mon système, j'ai du réinstallé debian, postfix, clamav et spamassassin
 
sachez aussi que je n'ai fait que des APT-GET et que avec des sources STABLES (pas de volatile ou autre).
et après mon plantage total et une réinstall propre g tu exactement au meme point qu'avec mon formatage, cad que j'ai installé spamassassin 2 fois avec une install propre et à chaque fois j'ai mes 170 "issued tedected" (et c quoi ce tainted mode?)
 
je vous remercie VIVEMENT pour toute l'aide apportée et que vous pouvez m'apporter.
je suis sur ce point bloqué depuis 2 semaines, et j'avoue que les règles, et pyzor razor j'ia fait apt-get mais après en mode debug j'ai vu des erreurs alors j'ai toutmis à zéro pour désactiver, j'aimerai déjà avoir un spamassin propre sans erreur.
au passage amavis je sais pas j'ia quelle version, mais spamassassin c 3.0.3 et je suis pas trop doué pour des install source ou autre, j'ai tjrs installé avecdes apt-get
 
que puis-je faire concrètement aujourd'hui?
et pk ces règles sont erronées? aoir autant de messages en suivant des tutos quasi similiaire c pas croyables ! meme avec un fichier local.cf vide j'ai toutes les règles de fausse là qui apparaissent.
à noter j'utilise VI pour éditer.
 
MERCI

Reply

Marsh Posté le 23-08-2006 à 10:43:52    

Il me semble que si tu utilises amavisd-new, inutile de toucher aux fichiers de conf de spamassassin, tout se fait via amavisd .
Sinon, j'ai pas très bien compris ton problème là, en tout cas celui du dernier post.


---------------
--
Reply

Marsh Posté le 24-08-2006 à 17:31:44    

merci beaucoup
 
je crois que j'ai quasiment fini (il ne me restera à voir que l'apprentissage, le filtre bayésien j'ai rien compris il faut que je lise un peu de doc)
ma config est postfix + amavisd-new + spamassassin + clamav + pyzor + razor + dcc
 
ça a l'air de bien marcher, je voudrai vérifier ma config avec vous
mais ça me semble assez lent (dans les 6 à 10s) quand je fais spamassassin --lint -D
j'ai :
 

Citation :


courrier:~# spamassassin --lint -D
debug: SpamAssassin version 3.0.3
debug: Score set 0 chosen.
debug: running in taint mode? yes
debug: Running in taint mode, removing unsafe env vars, and resetting PATH
debug: PATH included '/usr/local/sbin', keeping.
debug: PATH included '/usr/local/bin', keeping.
debug: PATH included '/usr/sbin', keeping.
debug: PATH included '/usr/bin', keeping.
debug: PATH included '/sbin', keeping.
debug: PATH included '/bin', keeping.
debug: PATH included '/usr/bin/X11', which doesn't exist, dropping.
debug: Final PATH set to: /usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin
debug: diag: module installed: DBI, version 1.46
debug: diag: module installed: DB_File, version 1.808
debug: diag: module installed: Digest::SHA1, version 2.10
debug: diag: module installed: IO::Socket::UNIX, version 1.21
debug: diag: module installed: MIME::Base64, version 3.04
debug: diag: module installed: Net::DNS, version 0.48
debug: diag: module not installed: Net::LDAP ('require' failed)
debug: diag: module installed: Razor2::Client::Agent, version 2.67
debug: diag: module installed: Storable, version 2.12
debug: diag: module installed: URI, version 1.35
debug: ignore: using a test message to lint rules
debug: using "/etc/spamassassin/init.pre" for site rules init.pre
debug: config: read file /etc/spamassassin/init.pre
debug: using "/usr/share/spamassassin" for default rules dir
debug: config: read file /usr/share/spamassassin/10_misc.cf
debug: config: read file /usr/share/spamassassin/20_anti_ratware.cf
debug: config: read file /usr/share/spamassassin/20_body_tests.cf
debug: config: read file /usr/share/spamassassin/20_compensate.cf
debug: config: read file /usr/share/spamassassin/20_dnsbl_tests.cf
debug: config: read file /usr/share/spamassassin/20_drugs.cf
debug: config: read file /usr/share/spamassassin/20_fake_helo_tests.cf
debug: config: read file /usr/share/spamassassin/20_head_tests.cf
debug: config: read file /usr/share/spamassassin/20_html_tests.cf
debug: config: read file /usr/share/spamassassin/20_meta_tests.cf
debug: config: read file /usr/share/spamassassin/20_phrases.cf
debug: config: read file /usr/share/spamassassin/20_porn.cf
debug: config: read file /usr/share/spamassassin/20_ratware.cf
debug: config: read file /usr/share/spamassassin/20_uri_tests.cf
debug: config: read file /usr/share/spamassassin/23_bayes.cf
debug: config: read file /usr/share/spamassassin/25_body_tests_es.cf
debug: config: read file /usr/share/spamassassin/25_hashcash.cf
debug: config: read file /usr/share/spamassassin/25_spf.cf
debug: config: read file /usr/share/spamassassin/25_uribl.cf
debug: config: read file /usr/share/spamassassin/30_text_de.cf
debug: config: read file /usr/share/spamassassin/30_text_fr.cf
debug: config: read file /usr/share/spamassassin/30_text_nl.cf
debug: config: read file /usr/share/spamassassin/30_text_pl.cf
debug: config: read file /usr/share/spamassassin/50_scores.cf
debug: config: read file /usr/share/spamassassin/60_whitelist.cf
debug: config: read file /usr/share/spamassassin/65_debian.cf
debug: config: read file /usr/share/spamassassin/70_broken_rules.cf
debug: config: read file /usr/share/spamassassin/70_testing.cf
debug: config: read file /usr/share/spamassassin/regression_tests.cf
debug: using "/etc/spamassassin" for site rules dir
debug: config: read file /etc/spamassassin/70_sare_adult.cf
debug: config: read file /etc/spamassassin/70_sare_bayes_poison_nxm.cf
debug: config: read file /etc/spamassassin/70_sare_evilnum0.cf
debug: config: read file /etc/spamassassin/70_sare_evilnum1.cf
debug: config: read file /etc/spamassassin/70_sare_evilnum2.cf
debug: config: read file /etc/spamassassin/70_sare_genlsubj.cf
debug: config: read file /etc/spamassassin/70_sare_genlsubj0.cf
debug: config: read file /etc/spamassassin/70_sare_genlsubj1.cf
debug: config: read file /etc/spamassassin/70_sare_genlsubj2.cf
debug: config: read file /etc/spamassassin/70_sare_genlsubj3.cf
debug: config: read file /etc/spamassassin/70_sare_genlsubj_eng.cf
debug: config: read file /etc/spamassassin/70_sare_genlsubj_x30.cf
debug: config: read file /etc/spamassassin/70_sare_header.cf
debug: config: read file /etc/spamassassin/70_sare_header0.cf
debug: config: read file /etc/spamassassin/70_sare_header1.cf
debug: config: read file /etc/spamassassin/70_sare_header2.cf
debug: config: read file /etc/spamassassin/70_sare_header3.cf
debug: config: read file /etc/spamassassin/70_sare_header_eng.cf
debug: config: read file /etc/spamassassin/70_sare_header_x264_x30.cf
debug: config: read file /etc/spamassassin/70_sare_header_x30.cf
debug: config: read file /etc/spamassassin/70_sare_highrisk.cf
debug: config: read file /etc/spamassassin/70_sare_html.cf
debug: config: read file /etc/spamassassin/70_sare_html0.cf
debug: config: read file /etc/spamassassin/70_sare_html1.cf
debug: config: read file /etc/spamassassin/70_sare_html2.cf
debug: config: read file /etc/spamassassin/70_sare_html3.cf
debug: config: read file /etc/spamassassin/70_sare_html4.cf
debug: config: read file /etc/spamassassin/70_sare_html_eng.cf
debug: config: read file /etc/spamassassin/70_sare_html_x30.cf
debug: config: read file /etc/spamassassin/70_sare_obfu.cf
debug: config: read file /etc/spamassassin/70_sare_obfu0.cf
debug: config: read file /etc/spamassassin/70_sare_obfu1.cf
debug: config: read file /etc/spamassassin/70_sare_obfu2.cf
debug: config: read file /etc/spamassassin/70_sare_obfu3.cf
debug: config: read file /etc/spamassassin/70_sare_oem.cf
debug: config: read file /etc/spamassassin/70_sare_random.cf
debug: config: read file /etc/spamassassin/70_sare_specific.cf
debug: config: read file /etc/spamassassin/70_sare_spoof.cf
debug: config: read file /etc/spamassassin/70_sare_unsub.cf
debug: config: read file /etc/spamassassin/70_sare_uri0.cf
debug: config: read file /etc/spamassassin/70_sare_uri1.cf
debug: config: read file /etc/spamassassin/70_sare_uri3.cf
debug: config: read file /etc/spamassassin/70_sare_uri_eng.cf
debug: config: read file /etc/spamassassin/70_sare_whitelist.cf
debug: config: read file /etc/spamassassin/70_sare_whitelist_pre30.cf
debug: config: read file /etc/spamassassin/70_sc_top200.cf
debug: config: read file /etc/spamassassin/71_sare_bml_pre25x.cf
debug: config: read file /etc/spamassassin/71_sare_redirect_pre3.0.0.cf
debug: config: read file /etc/spamassassin/72_sare_bml_post25x.cf
debug: config: read file /etc/spamassassin/72_sare_redirect_post3.0.0.cf
debug: config: read file /etc/spamassassin/99_sare_fraud_post25x.cf
debug: config: read file /etc/spamassassin/99_sare_fraud_pre25x.cf
debug: config: read file /etc/spamassassin/antidrug.cf
debug: config: read file /etc/spamassassin/bogus-virus-warnings.cf
debug: config: read file /etc/spamassassin/local.cf
debug: config: read file /etc/spamassassin/random.cf
debug: config: read file /etc/spamassassin/tripwire.cf
debug: using "/root/.spamassassin" for user state dir
debug: using "/root/.spamassassin/user_prefs" for user prefs file
debug: config: read file /root/.spamassassin/user_prefs
debug: plugin: loading Mail::SpamAssassin::Plugin::URIDNSBL from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8f62554)
debug: plugin: loading Mail::SpamAssassin::Plugin::SPF from @INC
debug: plugin: registered Mail::SpamAssassin::Plugin::SPF=HASH(0x8f4c7f8)
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8f62554) implements 'parse_config'
debug: Score set 1 chosen.
debug: ---- MIME PARSER START ----
debug: main message type: text/plain
debug: parsing normal part
debug: added part, type: text/plain
debug: ---- MIME PARSER END ----
debug: metadata: X-Spam-Relays-Trusted:
debug: metadata: X-Spam-Relays-Untrusted:
debug: decoding: no encoding detected
debug: Loading languages file...
debug: Language possibly: en,sco
debug: metadata: X-Languages: en sco
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8f62554) implements 'parsed_metadata'
debug: is Net::DNS::Resolver available? yes
debug: Net::DNS version: 0.48
debug: trying (3) apache.org...
debug: looking up NS for 'apache.org'
debug: NS lookup of apache.org succeeded => Dns available (set dns_available to hardcode)
debug: is DNS available? 1
debug: URIDNSBL: domains to query:
debug: all '*From' addrs: ignore@compiling.spamassassin.taint.org
debug: Running tests for priority: 0
debug: running header regexp tests; score so far=0
debug: registering glue method for check_for_spf_helo_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f4c7f8))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: all '*To' addrs:
debug: registering glue method for check_for_spf_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f4c7f8))
debug: SPF: message was delivered entirely via trusted relays, not required
debug: registering glue method for check_for_spf_pass (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f4c7f8))
debug: registering glue method for check_for_spf_helo_softfail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f4c7f8))
debug: registering glue method for check_for_spf_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f4c7f8))
debug: registering glue method for check_for_spf_helo_fail (Mail::SpamAssassin::Plugin::SPF=HASH(0x8f4c7f8))
debug: running body-text per-line regexp tests; score so far=0.197
debug: running uri tests; score so far=0.197
debug: registering glue method for check_uridnsbl (Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8f62554))
debug: Razor2 is available
debug: entering helper-app run mode
 Razor-Log: read_file: 16 items read from /etc/razor/razor-agent.conf
 Razor-Log: Computed razorhome from env: /root/.razor
 Razor-Log: Found razorhome: /root/.razor
aoû 24 16:22:20.395437 check[1681]: [ 2] [bootup] Logging initiated LogDebugLevel=9 to stdout
aoû 24 16:22:20.421692 check[1681]: [ 5] computed razorhome=/root/.razor, conf=/etc/razor/razor-agent.conf, ident=/root/.razor/identity-ruPPa_nd2-
aoû 24 16:22:20.421874 check[1681]: [ 8] Client supported_engines: 4 8
aoû 24 16:22:20.422169 check[1681]: [ 8]  prep_mail done: mail 1 headers=93, mime0=1376
aoû 24 16:22:20.422528 check[1681]: [ 5] read_file: 1 items read from /root/.razor/servers.discovery.lst
aoû 24 16:22:20.422867 check[1681]: [ 5] read_file: 2 items read from /root/.razor/servers.nomination.lst
aoû 24 16:22:20.423220 check[1681]: [ 5] read_file: 3 items read from /root/.razor/servers.catalogue.lst
aoû 24 16:22:20.423489 check[1681]: [ 9] Assigning defaults to folly.cloudmark.com
aoû 24 16:22:20.423638 check[1681]: [ 9] Assigning defaults to joy.cloudmark.com
aoû 24 16:22:20.423787 check[1681]: [ 9] Assigning defaults to c102.cloudmark.com
aoû 24 16:22:20.423942 check[1681]: [ 9] Assigning defaults to c101.cloudmark.com
aoû 24 16:22:20.424083 check[1681]: [ 9] Assigning defaults to shock.cloudmark.com
aoû 24 16:22:20.424834 check[1681]: [ 5] read_file: 18 items read from /root/.razor/server.c101.cloudmark.com.conf
aoû 24 16:22:20.425283 check[1681]: [ 5] read_file: 18 items read from /root/.razor/server.c101.cloudmark.com.conf
aoû 24 16:22:20.425873 check[1681]: [ 5] read_file: 19 items read from /root/.razor/server.shock.cloudmark.com.conf
aoû 24 16:22:20.426322 check[1681]: [ 5] read_file: 19 items read from /root/.razor/server.shock.cloudmark.com.conf
aoû 24 16:22:20.426876 check[1681]: [ 5] read_file: 19 items read from /root/.razor/server.c102.cloudmark.com.conf
aoû 24 16:22:20.427350 check[1681]: [ 5] read_file: 19 items read from /root/.razor/server.c102.cloudmark.com.conf
aoû 24 16:22:20.427904 check[1681]: [ 5] read_file: 18 items read from /root/.razor/server.joy.cloudmark.com.conf
aoû 24 16:22:20.428340 check[1681]: [ 5] read_file: 18 items read from /root/.razor/server.joy.cloudmark.com.conf
aoû 24 16:22:20.428889 check[1681]: [ 5] read_file: 18 items read from /root/.razor/server.folly.cloudmark.com.conf
aoû 24 16:22:20.429319 check[1681]: [ 5] read_file: 18 items read from /root/.razor/server.folly.cloudmark.com.conf
aoû 24 16:22:20.429490 check[1681]: [ 5] 162561 seconds before closest server discovery
aoû 24 16:22:20.429658 check[1681]: [ 6] c102.cloudmark.com is a Catalogue Server srl 5096; computed min_cf=21, Server se: 3BC8
aoû 24 16:22:20.429841 check[1681]: [ 8] Computed supported_engines: 4 8
aoû 24 16:22:20.430001 check[1681]: [ 8] Using next closest server c102.cloudmark.com:2703, cached info srl 5096
aoû 24 16:22:20.430127 check[1681]: [ 8] mail 1 has no subject
aoû 24 16:22:20.430423 check[1681]: [ 6] preproc: mail 1.0 went from 1376 bytes to 1339
aoû 24 16:22:20.430553 check[1681]: [ 6] computing sigs for mail 1.0, len 1339
aoû 24 16:22:20.432217 check[1681]: [ 6] Engine (8) didn't produce a signature for mail 1.0
aoû 24 16:22:20.432409 check[1681]: [ 6] skipping whitelist file (empty?): /root/.razor/razor-whitelist
aoû 24 16:22:20.432536 check[1681]: [ 5] Connecting to c102.cloudmark.com ...
aoû 24 16:22:20.621535 check[1681]: [ 8] Connection established
aoû 24 16:22:20.621714 check[1681]: [ 4] c102.cloudmark.com >> 36 server greeting: sn=C&srl=5096&a=l&a=cg&ep4=7542-10
aoû 24 16:22:20.622025 check[1681]: [ 4] c102.cloudmark.com << 25
aoû 24 16:22:20.622119 check[1681]: [ 6] cn=razor-agents&cv=2.67
aoû 24 16:22:20.622297 check[1681]: [ 6] c102.cloudmark.com is a Catalogue Server srl 5096; computed min_cf=21, Server se: 3BC8
aoû 24 16:22:20.622477 check[1681]: [ 8] Computed supported_engines: 4 8
aoû 24 16:22:20.622620 check[1681]: [ 8] mail 1.0 e4 sig: xFaZIZUVHk90OQfARnenjx5BZTMA
aoû 24 16:22:20.622764 check[1681]: [ 5] mail 1.0 e8 got no sig
aoû 24 16:22:20.622881 check[1681]: [ 8] preparing 1 queries
aoû 24 16:22:20.623052 check[1681]: [ 8] sending 1 batches
aoû 24 16:22:20.623183 check[1681]: [ 4] c102.cloudmark.com << 52
aoû 24 16:22:20.623278 check[1681]: [ 6] a=c&e=4&ep4=7542-10&s=xFaZIZUVHk90OQfARnenjx5BZTMA
aoû 24 16:22:20.852394 check[1681]: [ 4] c102.cloudmark.com >> 5
aoû 24 16:22:20.852494 check[1681]: [ 6] response to sent.2
p=0
aoû 24 16:22:20.852786 check[1681]: [ 6] mail 1.0 e=4 sig=xFaZIZUVHk90OQfARnenjx5BZTMA: sig not found.
aoû 24 16:22:20.852903 check[1681]: [ 7] method 4: mail 1.0: no-contention part, spam=0
aoû 24 16:22:20.852996 check[1681]: [ 7] method 4: mail 1: all non-contention parts not spam, mail not spam
aoû 24 16:22:20.853086 check[1681]: [ 3] mail 1 is not known spam.
aoû 24 16:22:20.853197 check[1681]: [ 5] disconnecting from server c102.cloudmark.com
aoû 24 16:22:20.853340 check[1681]: [ 4] c102.cloudmark.com << 5
aoû 24 16:22:20.853427 check[1681]: [ 6] a=q
debug: Using results from Razor v2.67
debug: Found Razor2 part: part=0 engine=4 ct=0 cf=0
debug: leaving helper-app run mode
debug: Razor2 results: spam? 0  highest cf score: 0
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8f62554) implements 'check_tick'
debug: running raw-body-text per-line regexp tests; score so far=0.197
debug: running full-text regexp tests; score so far=0.197
debug: Razor2 is available
debug: Pyzor is available: /usr/bin/pyzor
debug: entering helper-app run mode
debug: setuid: helper proc 1682: ruid=0 euid=0
debug: Pyzor: got response: 66.250.40.33:24441  TimeoutError:
debug: leaving helper-app run mode
debug: Pyzor: couldn't grok response "66.250.40.33:24441        TimeoutError: "

debug: DCCifd is available: /var/lib/dcc/dccifd
debug: entering helper-app run mode
debug: DCCifd: got response: X-DCC-CTc-dcc2-Metrics: courrier 1031; Body=30822 Fuz1=59279 Fuz2=9666683
debug: leaving helper-app run mode
debug: DCCifd: Listed! BODY: 30822 of 999999 FUZ1: 59279 of 999999 FUZ2: 9666683 of 999999
debug: Running tests for priority: 500
debug: RBL: success for 1 of 1 queries
debug: plugin: Mail::SpamAssassin::Plugin::URIDNSBL=HASH(0x8f62554) implements 'check_post_dnsbl'
debug: running meta tests; score so far=1.57
debug: running header regexp tests; score so far=3.14
debug: running body-text per-line regexp tests; score so far=3.14
debug: running uri tests; score so far=3.14
debug: running raw-body-text per-line regexp tests; score so far=3.14
debug: running full-text regexp tests; score so far=3.14
debug: Running tests for priority: 1000
debug: running meta tests; score so far=3.14
debug: running header regexp tests; score so far=3.14
debug: running body-text per-line regexp tests; score so far=3.14
debug: running uri tests; score so far=3.14
debug: running raw-body-text per-line regexp tests; score so far=3.14
debug: running full-text regexp tests; score so far=3.14
debug: is spam? score=3.14 required=5
debug: tests=DCC_CHECK,MISSING_DATE,MISSING_SUBJECT,NO_REAL_NAME
debug: subtests=__HAS_MSGID,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__NONEMPTY_BODY,__SANE_MSGID,__SARE_WHITELIST_FLAG,__UNUSABLE_MSGID
 


 
pyzor, alors la 1ère fois ça marche jamais et si on fait tout de suite après ça marche :
courrier:~# pyzor ping
66.250.40.33:24441      TimeoutError:
courrier:~# pyzor ping
66.250.40.33:24441      (200, 'OK')
courrier:~# pyzor ping
66.250.40.33:24441      (200, 'OK')
courrier:~# pyzor ping
66.250.40.33:24441      (200, 'OK')
courrier:~# pyzor ping
66.250.40.33:24441      (200, 'OK')
 
=> le pyzor est vraiment bizarre.
 
le razor ça fonctionne, par contre mes repertoire correspondent pas du tout à ce qu'on trouve sur le net^^ mais ça semle marcher.
 
je n'ai pas d'erreur avec spamassassin -- lint
mais la 1ère fois ça prendre 10 secondes
après quand je fais ça prendre 5s
 
pour les règles, j'ai effacé TOUT le contenu du fichier /usr/share/spamassassin/30_text_fr.cf
et j'ai installé rules du jour.
comme je ois protéger mon systeme, ben j'ai pris toutes les règles sauf le blackliste qui était vraiment trop trop lourd donc :
 
 
 

Citation :


TRUSTED_RULESETS="TRIPWIRE ANTIDRUG SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 SARE_EVILNUMBERS2 RANDOMVAL BOGUSVIRUS SARE_ADULT SARE_FRAUD SARE_FRAUD_PRE25X SARE_BML SARE_BML_PRE25X SARE_RATWARE SARE_SPOOF SARE_BAYES_POISON_NXM SARE_OEM SARE_RANDOM SARE_HEADER SARE_HEADER0 SARE_HEADER1 SARE_HEADER2 SARE_HEADER3 SARE_HEADER_ENG SARE_HEADER_X264_X30 SARE_HEADER_X30 SARE_HTML SARE_HTML0 SARE_HTML1 SARE_HTML2 SARE_HTML3 SARE_HTML4 SARE_HTML_ENG SARE_HTML_PRE300 SARE_SPECIFIC SARE_OBFU SARE_OBFU0 SARE_OBFU1 SARE_OBFU2 SARE_OBFU3 SARE_REDIRECT SARE_REDIRECT_POST300 SARE_SPAMCOP_TOP200 SARE_GENLSUBJ SARE_GENLSUBJ0 SARE_GENLSUBJ1 SARE_GENLSUBJ2 SARE_GENLSUBJ3 SARE_GENLSUBJ_X30 SARE_GENLSUBJ_ENG SARE_HIGHRISK SARE_UNSUB SARE_URI0 SARE_URI1 SARE_URI2 SARE_URI3 SARE_URI_ENG SARE_WHITELIST SARE_WHITELIST_PRE30"
SA_DIR="/etc/spamassassin"
MAIL_ADDRESS="administrateur@MON_DOMAINE.fr"
SA_RESTART="/etc/init.d/amavisd restart"
 


là j'ai un tit souci qd meme, je reçois autant de mails que de règles, soit + d'une trentaine de mail ! :shock: c possible d'en avoir qu'un seul récapitulatif?
 
et techniquemement il se passe quoi, "/usr/share/spamassassin/" est ignoré et à la place on utilise les règles de /etc/spamassassin/ et une copie des dernières règles téléchargées se trouve dans /etc/spamassassin/RulesDuJour"
c bien cela?
 
 
voilà mon /etc/spamassassin/local.cf

Citation :


ok_languages fr en
skip_rbl_checks 0
use_razor2 1
use_dcc 1  
use_pyzor 1
# score ALL_TRUSTED 0 (j'avais mis à zéro pour éviter d'influencer les hits en local)
 
# Encapsulate spam in an attachment (0=no, 1=yes, 2=safe)
report_safe 1
 
#Config via amavis, et petits reglages...
razor_config /etc/razor/razor-agent.conf
pyzor_path /usr/bin/pyzor
# dcc_path /usr/sbin/dccifd
# dcc_path /usr/bin/dccproc
dcc_home /var/lib/dcc
bayes_path /var/lib/amavis/.spamassassin/bayes
auto_whitelist_path /var/lib/amavis/.spamassassin/auto-whitelist
whitelist_from administrateur@MON_DOMAINE.fr
lock_method flock
bayes_auto_expire 0
 
#On utilise le filtre bayesien
use_bayes 1
 
# bayes_auto_learn 1 #Il apprends seul ce qui est spam et ce qui ne l'est pas
# bayes_auto_learn_threshold_nonspam -2.0
# bayes_auto_learn_threshold_spam 7.0
 
#On désactive l'autoWhiteList
use_auto_whitelist 0


c quoi l'autowhitlist? c l'équvalent du auto_learn non_spam ?
et le lock_method_flock j'ai pas trop compris, je l'ai copié d'un site
 
comment j'utilise le bayésien? les fichier mail d'outlook je les enregistre en *.eml et je les copier ds le repertoire ham et non ham ?
 
quand je fais spamasassin --lint --debug, il y a les plugins qui me semblent lent, le plugin de hashage par exemple , mon fichier /etc/spamassassin/init.pre est le suivant

Citation :


# RelayCountry - add metadata for Bayes learning, marking the countries
# a message was relayed through
#
# loadplugin Mail::SpamAssassin::Plugin::RelayCountry
 
# URIDNSBL - look up URLs found in the message against several DNS
# blocklists.
#
loadplugin Mail::SpamAssassin::Plugin::URIDNSBL
 
# Hashcash - perform hashcash verification.
#
#loadplugin Mail::SpamAssassin::Plugin::Hashcash
 
# SPF - perform SPF verification.
#
loadplugin Mail::SpamAssassin::Plugin::SPF
 


apparemment c ds spamassassin 3.1 qu'il y a les plugin razor dcc et pyzor, moi je les ai pas ici. les plugin j'y ai pas touché.
 
je crois que si j'arrive à mettre en place les bidule baysien je vais ptet jeter un coup d'oeil sur des scripts : http://www.n0rt0n.com/antispam.html   ;)  
 
un truc qui m'inquiète, je vais avoir un serveur en production d'environ 50 000 mail/j
si spamassassin --lint prend 5s, ça veut dire quoi, que chq mail traité il faudra 5secondes?
 
également ça vaut le coup d'utiliser razor pyzor + dcc ? c'est-à dire que le temps que le temps que le mail soit checké que les razor pyzor dcc vérifient chacun sur internet, contact de serveur, vérif, retour de réponse, c pas plus rapide de recevoir du spam et que spamassassin marque un score et qu'on utilise un filtre bayésien?
en clair ça vaut le coup d'utiliser ces 3 modules là ?
 
si possible, aurais tu un lien pour avoir un ordre de grandeur pour la machine édéquate? (sinon je vais faire google à la recherche du serveur postfix adéquat :P )
 
par contre j'ai toujours un probleme, spamassassin est bien utilisé mais si je met cum shot sex viagra www.sexe.com et autre truc du genre, j'ai un score seulement de 1.3 par exemple ! des score vraiment faible !  :??:   ça pour l'instant j'ai truové d'idée nulle part. )
 
MERCI

Message cité 1 fois
Message édité par rp91 le 24-08-2006 à 19:12:09
Reply

Marsh Posté le 25-08-2006 à 12:10:09    

spamassassin, en tout cas via spamd, lance plusieurs processus en même temps. Donc non ça sera pas 5sec / mail , mais bcp moins.
Ceci dit ça dépend des mails ...

Reply

Marsh Posté le 25-08-2006 à 12:11:25    

rp91 a écrit :


 
par contre j'ai toujours un probleme, spamassassin est bien utilisé mais si je met cum shot sex viagra www.sexe.com et autre truc du genre, j'ai un score seulement de 1.3 par exemple ! des score vraiment faible !  :??:   ça pour l'instant j'ai truové d'idée nulle part. )


 
Combien de fois il faudra répeter que le contenu du mail ne joue pas tellement que ça dans le score ? Si tu veux tester, file une adresse ici et on t'envoie des vrais spams. Mais t'envoyer des mails à toi ça ne suffit pas !

Reply

Marsh Posté le    

Reply

Sujets relatifs:

Leave a Replay

Make sure you enter the(*)required information where indicate.HTML code is not allowed