pyzor-users — general discussion of Pyzor and Pyzor-related topics

Re: message stops pyzor report

[Milton C. <mi...@i-...>]

Hey Chris , strange , this is the result I get ..

milton@online ~ $ pyzor report < pyzorstop.txt
82.94.255.106:24441	(200, 'OK')



On Jan 30, 2008, at 4:25 AM, Chris wrote:

> The message at the below url stopped pyzor dead in its tracks  
> tonight. My spam
> reporting script ran fine until it got to this message, dcc worked  
> and so did
> razor but when it was pyzors turn it just hung there. I let it sit  
> for about
> 10 minutes and ended up killing the script. Had to backtrack through  
> my
> script output and find out which message it was.
>
> http://www.mediamax.com/chris1948/Hosted/pyzorstop.txt
>
> Anyone have any ideas? It has a lot of .jpg's in it I know that.
>
> -- 
> Chris
> KeyID 0xE372A7DA98E6705C
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2008.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/_______________________________________________
> pyzor-users mailing list
> pyz...@li...
> https://lists.sourceforge.net/lists/listinfo/pyzor-users

message stops pyzor report

[Chris <cpo...@em...>]

The message at the below url stopped pyzor dead in its tracks tonight. My s=
pam=20
reporting script ran fine until it got to this message, dcc worked and so d=
id=20
razor but when it was pyzors turn it just hung there. I let it sit for abou=
t=20
10 minutes and ended up killing the script. Had to backtrack through my=20
script output and find out which message it was.

http://www.mediamax.com/chris1948/Hosted/pyzorstop.txt

Anyone have any ideas? It has a lot of .jpg's in it I know that.

=2D-=20
Chris
KeyID 0xE372A7DA98E6705C

Re: X-Spam-Pyzor: Whitelisted.

[Milton C. <mi...@i-...>]

Hee Chris,

Thanks for pointing this out, it appears we'd made an error in our new  
Server software giving whitelist access to the DB for un-registered  
users.
Error has been rectified and you should be getting better results as  
of today..



best regards,

Milton



On Nov 8, 2007, at 4:08 AM, Chris wrote:

> On Wednesday 07 November 2007 3:24 pm, you wrote:
>> Hey Chris,
>>
>> Strange since we've only received 5 whitelist requests - , Could you
>> forward the digest of that message, so i can check what the status is
>> in the database.
>>
>>
>> Milton
>>
> Since Embarq is so paranoid of being blacklisted they just might  
> have blocked
> the example I sent you so here is a link to it.
>
> http://www.mediamax.com/chris1948/Hosted/pyzorwhite.txt
>
> There were seven that showed up as 'whitelisted' on tonights spam,  
> thats out
> of 37 spam total. I've put them in a seperate folder so if you want  
> a copy of
> them I'll tar'em up and put on the upload site.
>
> -- 
> Chris
> KeyID 0xE372A7DA98E6705C

Re: X-Spam-Pyzor: Whitelisted.

[Milton C. <mi...@i-...>]

Hey Chris,

Strange since we've only received 5 whitelist requests - , Could you  
forward the digest of that message, so i can check what the status is  
in the database.


Milton


On Nov 7, 2007, at 4:26 AM, Chris wrote:

> Noticed this tonight while going through my spam.
>
>> Received: from localhost by cpollock.localdomain
>>         with SpamAssassin (version 3.2.3);
>>         Sun, 04 Nov 2007 19:47:08 -0600
>> From: sni...@se...
>> Cc: recipient list not shown: ;
>> Subject: =?us-ascii?Q?help=20me=20please?=
>> Date: Mon, 05 Nov 2007 02:09:53 +0100 (CET)
>> Message-Id: <101...@se...>
>> X-Spam-Virus: Yes (Email.Scam4.Gen368.Sanesecurity.06122000)
>> X-Spam-Seen: Tokens 99
>> X-Spam-New: Tokens 159
>> X-Spam-Remote: Host localhost.localdomain
>> X-Spam-ASN: AS43037 77.75.72.0/23
>> X-Spam-Flag: YES
>> X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on
> cpollock.localdomain
>> X-Spam-Hammy: Tokens 3
>> X-Spam-Status: Yes, score=22.6 required=5.0  
>> tests=BAYES_99=5,CLAMAV=10,
>>         DCC_CHECK=2.17,DIGEST_MULTIPLE=0.001,MISSING_HEADERS=1.292,
>>          
>> RAZOR2_CF_RANGE_51_100 
>> =0.5,RAZOR2_CF_RANGE_E4_51_100=1.5,RAZOR2_CHECK=0.5,
>>         SAGREY=1,SPF_PASS=-0.001,US_DOLLARS_3=0.63 autolearn=disabled
> version=3.2.3
>> X-Spam-Spammy: Tokens 24
>> X-Spam-Pyzor: Whitelisted.
>
> I don't ever remember seeing anything like this before. The above  
> are scores
> from my SA setup, below are the actual message headers:
>
>> Return-path: <sni...@se...>
>> Envelope-to: cpo...@to...
>> Delivery-date: Sun, 04 Nov 2007 20:10:03 -0500
>> Received: from mxl.seznam.cz ([77.75.72.44])
>>         by linuxsrv01.usdcservers.net with smtp (Exim 4.68)
>>         (envelope-from <sni...@se...>)
>>         id 1IoqTT-0008W8-NY
>>         for cpo...@to...; Sun, 04 Nov 2007 20:10:03 -0500
>> Received: (qmail 16991 invoked by uid 0); 5 Nov 2007 01:09:56 -0000
>> Cc: recipient list not shown: ;
>> Date: Mon, 05 Nov 2007 02:09:53 +0100 (CET)
>> Reply-To: nel...@ya...
>> From: sni...@se...
>> Received: from [41.207.201.62]
>>         by email.seznam.cz with HTTP
>>         for sni...@se...;
>>         Mon, 5 Nov 2007 2:09:53 +0100 (CET)
>> Subject: =?us-ascii?Q?help=20me=20please?=
>> Content-Transfer-Encoding: 7bit
>> Content-Type: text/plain;
>>         charset="us-ascii"
>> Mime-Version: 1.0
>> Message-Id: <101...@se...>
>> X-Abuse: hel...@se...
>> X-Seznam-User: sni...@se...
>> X-Spam-Status: No, score=2.7
>> X-Spam-Score: 27
>> X-Spam-Bar: ++
>> X-Spam-Flag: NO
>> X-SenderIP: 77.75.72.44
>> X-ASN: ASN-43037
>> X-CIDR: 77.75.72.0/23
>
> I take it then that the pyzor servers have whitelisted this server  
> for some
> reason?
>
> -- 
> Chris
> KeyID 0xE372A7DA98E6705C
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Splunk Inc.
> Still grepping through log files to find problems?  Stop.
> Now Search log events and configuration files using AJAX and a  
> browser.
> Download your FREE copy of Splunk now >> http://get.splunk.com/_______________________________________________
> pyzor-users mailing list
> pyz...@li...
> https://lists.sourceforge.net/lists/listinfo/pyzor-users

X-Spam-Pyzor: Whitelisted

[Chris <cpo...@em...>]

To add a bit more to this I've looked through 78 spam I received today, of=
=20
those 14 show the above. I don't remember seeing this before, but guess I=20
could look through this months spam so far and see if I see it on any other=
=20
messages.

Chris

=2D-=20
Chris
KeyID 0xE372A7DA98E6705C

X-Spam-Pyzor: Whitelisted.

[Chris <cpo...@em...>]

Noticed this tonight while going through my spam.=20

> Received: from localhost by cpollock.localdomain
> =A0=A0=A0=A0=A0=A0=A0=A0with SpamAssassin (version 3.2.3);
> =A0=A0=A0=A0=A0=A0=A0=A0Sun, 04 Nov 2007 19:47:08 -0600
>  From: sni...@se...
>  Cc: recipient list not shown: ;
>  Subject: =3D?us-ascii?Q?help=3D20me=3D20please?=3D
>  Date: Mon, 05 Nov 2007 02:09:53 +0100 (CET)
>  Message-Id: <101...@se...>
>  X-Spam-Virus: Yes (Email.Scam4.Gen368.Sanesecurity.06122000)
>  X-Spam-Seen: Tokens 99
>  X-Spam-New: Tokens 159
>  X-Spam-Remote: Host localhost.localdomain
>  X-Spam-ASN: AS43037 77.75.72.0/23
>  X-Spam-Flag: YES
>  X-Spam-Checker-Version: SpamAssassin 3.2.3 (2007-08-08) on=20
cpollock.localdomain
>  X-Spam-Hammy: Tokens 3
>  X-Spam-Status: Yes, score=3D22.6 required=3D5.0 tests=3DBAYES_99=3D5,CLA=
MAV=3D10,
> =A0=A0=A0=A0=A0=A0=A0=A0DCC_CHECK=3D2.17,DIGEST_MULTIPLE=3D0.001,MISSING_=
HEADERS=3D1.292,
> =A0=A0=A0=A0=A0=A0=A0=A0RAZOR2_CF_RANGE_51_100=3D0.5,RAZOR2_CF_RANGE_E4_5=
1_100=3D1.5,RAZOR2_CHECK=3D0.5,
> =A0=A0=A0=A0=A0=A0=A0=A0SAGREY=3D1,SPF_PASS=3D-0.001,US_DOLLARS_3=3D0.63 =
autolearn=3Ddisabled=20
version=3D3.2.3
>  X-Spam-Spammy: Tokens 24
>  X-Spam-Pyzor: Whitelisted.

I don't ever remember seeing anything like this before. The above are score=
s=20
from my SA setup, below are the actual message headers:

> Return-path: <sni...@se...>
>  Envelope-to: cpo...@to...
>  Delivery-date: Sun, 04 Nov 2007 20:10:03 -0500
>  Received: from mxl.seznam.cz ([77.75.72.44])=20
> =A0=A0=A0=A0=A0=A0=A0=A0by linuxsrv01.usdcservers.net with smtp (Exim 4.6=
8)=20
> =A0=A0=A0=A0=A0=A0=A0=A0(envelope-from <sni...@se...>)=20
> =A0=A0=A0=A0=A0=A0=A0=A0id 1IoqTT-0008W8-NY=20
> =A0=A0=A0=A0=A0=A0=A0=A0for cpo...@to...; Sun, 04 Nov 2007 20:10:=
03 -0500
>  Received: (qmail 16991 invoked by uid 0); 5 Nov 2007 01:09:56 -0000
>  Cc: recipient list not shown: ;
>  Date: Mon, 05 Nov 2007 02:09:53 +0100 (CET)
>  Reply-To: nel...@ya...
>  From: sni...@se...
>  Received: from [41.207.201.62]=20
> =A0=A0=A0=A0=A0=A0=A0=A0by email.seznam.cz with HTTP=20
> =A0=A0=A0=A0=A0=A0=A0=A0for sni...@se...;=20
> =A0=A0=A0=A0=A0=A0=A0=A0Mon, 5 Nov 2007 2:09:53 +0100 (CET)
>  Subject: =3D?us-ascii?Q?help=3D20me=3D20please?=3D
>  Content-Transfer-Encoding: 7bit
>  Content-Type: text/plain;=20
> =A0=A0=A0=A0=A0=A0=A0=A0charset=3D"us-ascii"
>  Mime-Version: 1.0
>  Message-Id: <101...@se...>
>  X-Abuse: hel...@se...
>  X-Seznam-User: sni...@se...
>  X-Spam-Status: No, score=3D2.7
>  X-Spam-Score: 27
>  X-Spam-Bar: ++
>  X-Spam-Flag: NO
>  X-SenderIP: 77.75.72.44
>  X-ASN: ASN-43037
>  X-CIDR: 77.75.72.0/23

I take it then that the pyzor servers have whitelisted this server for some=
=20
reason?

=2D-=20
Chris
KeyID 0xE372A7DA98E6705C

Re: Frank Tobin

[Benedict W. <be...@cs...>]

Steve:
>>
It's been over a month - would it be appropriate to try and get back
in touch? Or should we conclude that a different approach is required?
>>

I'll get back in touch..

I will let you know how I get on. I get the impression he has other things =
to occupy his time now,
as do I, I am trying to learn python!

Kind regards

Benedict White

Re: Frank Tobin

[Steve M. <mcc...@gm...>]

It's been over a month - would it be appropriate to try and get back
in touch? Or should we conclude that a different approach is required?

On 26/09/2007, Benedict White <be...@cs...> wrote:
> I have been in touch with him.
>
> He should be popping by some time in the next week.

-- 
steev
http://www.daikaiju.org.uk/~steve/

Pyzor and Selinux

[Speedy S. <spe...@ho...>]

Does anyone know how to patch Selinux to allow Pyzor to work? =20
=20
Pyzor does not work for me if Selinux is enabled but works fine if it Selin=
ux is disabled.

Regards,
The Speedster
_________________________________________________________________
Send a smile, make someone laugh, have some fun! Start now!
http://www.freemessengeremoticons.ca/?icid=3DEMENCA122=

Re: Is Pyzor still alive?

[Chris <cpo...@em...>]

On Friday 05 October 2007 3:18 pm, Speedy Sweedy wrote:
> I'm new to Pyzor so firgive me if this subject is out of line.  I have be=
en
> running pyzor ping for the last couple of days and getting the same
> "timeout" message  Am I using the correct server?  I ran pyzor discover so
> I believe I am
>
> 66.250.40.33:24441      TimeoutError:
> I have found on the net another IP address to use for pyzor but don't know
> if it is legitimate or not.  Is 82.94.255.100:24441 a legitimate pyzor
> server?
>
> Regards,
> The Speedster
Yes it is, its been working fine for me for a couple of years now, use it=20
instead of the address gotten with discover. Just remember that if you run=
=20
pyzor discover again it will go back to the original address.

=2D-=20
Chris
KeyID 0xE372A7DA98E6705C

Is Pyzor still alive?

[Speedy S. <spe...@ho...>]

I'm new to Pyzor so firgive me if this subject is out of line.  I have been=
 running pyzor ping for the last couple of days and getting the same "timeo=
ut" message  Am I using the correct server?  I ran pyzor discover so I beli=
eve I am=20
=20
66.250.40.33:24441      TimeoutError:
I have found on the net another IP address to use for pyzor but don't know =
if it is legitimate or not.  Is 82.94.255.100:24441 a legitimate pyzor serv=
er?

Regards,
The Speedster
_________________________________________________________________
Get cool Messenger Emoticons! Click here to learn more.
http://www.freemessengeremoticons.ca/=

RE: pyzor: check failed: internal error

[Speedy S. <spe...@ho...>]

I just tested my installation with selinux disabled.  Pyzor seems allot hap=
pier and is now included in the scan with no errors.  There must be a polic=
y rule somewhere that can add to selinux to allow pyzor to work, I just hav=
e no idea how to do this.
=20
I've googled some results about pyzor and selinux but I don't understand se=
linux beyond it's function in life so I have no idea of how to add a pyzor =
policy at this point.

Regards,
The Speedster

> Date: Fri, 5 Oct 2007 11:22:58 -0700> To: spe...@ho...; pyzor=
-u...@li...> From: ed...@es...> Subject: Re: pyzor: check=
 failed: internal error> > At 10:28 AM Friday, 10/5/2007, Speedy Sweedy wro=
te -=3D>> >I too am having problems with this error from Pyzor. Has anyone =
> >found a solution that actually works?> >> >/var/log/maillog reveals the =
following error:> >Oct 5 12:22:12 enterprise spamd[1825]: pyzor: check fail=
ed: internal error> >> >Google returns many results, non of which seem to f=
ix the issue for > >me. I'm wondering if Selinux is the cause to this.> > I=
 get these on occasion with selinux disabled. I was advised to > ignore the=
m unless they happen for every message. For me it is very > sporadic so I j=
ust ignore them...> > HTH> > Ed Kasky> ~~~~~~~~~> Randomly Generated Quote =
(438 of 568):> On the other hand, you have different fingers.>=20
_________________________________________________________________
Get cool Messenger Emoticons! Click here to learn more.
http://www.freemessengeremoticons.ca/=

Re: pyzor: check failed: internal error

[Ed K. <ed...@es...>]

At 10:28 AM Friday, 10/5/2007, Speedy Sweedy wrote -=>
>I too am having problems with this error from Pyzor.  Has anyone 
>found a solution that actually works?
>
>/var/log/maillog reveals the following error:
>Oct  5 12:22:12 enterprise spamd[1825]: pyzor: check failed: internal error
>
>Google returns many results, non of which seem to fix the issue for 
>me.  I'm wondering if Selinux is the cause to this.

I get these on occasion with selinux disabled.  I was advised to 
ignore them unless they happen for every message.  For me it is very 
sporadic so I just ignore them...

HTH

Ed Kasky
~~~~~~~~~
Randomly Generated Quote (438 of 568):
On the other hand, you have different fingers.

pyzor: check failed: internal error

[Speedy S. <spe...@ho...>]

I too am having problems with this error from Pyzor.  Has anyone found a so=
lution that actually works?
/var/log/maillog reveals the following error:
Oct  5 12:22:12 enterprise spamd[1825]: pyzor: check failed: internal error
=20
Google returns many results, non of which seem to fix the issue for me.  I'=
m wondering if Selinux is the cause to this.
=20
thoughts?  remedies?
=20
Thanks!

Regards,
=20
The Speedster
_________________________________________________________________
Get next generation emoticons
http://www.freemessengeremoticons.ca/=

pyzor: check failed: internal error

[Speedy S. <spe...@ho...>]

I too am having problems with this error from Pyzor.  Has anyone found a so=
lution that actually works?
/var/log/maillog reveals the following error:
Oct  5 12:22:12 enterprise spamd[1825]: pyzor: check failed: internal error
=20
Google returns many results, non of which seem to fix the issue for me.  I'=
m wondering if Selinux is the cause to this.
=20
thoughts?  remedies?
=20
Thanks!

Regards,
=20
The Speedster
_________________________________________________________________
Get next generation emoticons
http://www.freemessengeremoticons.ca/=

Re: Server down:

[Benedict W. <be...@cs...>]

"Man I've got to change my filter. Every time one of these messages
comes in my pager goes off :)"

Sorry bout that Rik :)


Kind regards

Benedict White

Re: Server down:

[Rick M. <ri...@no...>]

Ed Kasky wrote:
> At 06:05 AM Thursday, 9/27/2007, Benedict White wrote -=>
>> Many thanks Ed, I have a dual server setup already.
>>
>> I have just noticed that it is not responding to any of my mail servers
>> at the moment.
> 
> I stopped using the old server a long time ago and have yet to have a 
> problem with 82.94.255.100...
> 

Man I've got to change my filter.  Every time one of these messages 
comes in my pager goes off :)

Rick

Re: Server down:

[Ed K. <ed...@es...>]

At 06:05 AM Thursday, 9/27/2007, Benedict White wrote -=>
>Many thanks Ed, I have a dual server setup already.
>
>I have just noticed that it is not responding to any of my mail servers
>at the moment.

I stopped using the old server a long time ago and have yet to have a 
problem with 82.94.255.100...

Ed

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (416 of 1280):
Anger, if not restrained, is frequently more hurtful to us than the
injury that provokes it. -Lucius Annaeus Seneca, (BCE 3-65 CE)

Re: Server down:

[Benedict W. <be...@cs...>]

Many thanks Ed, I have a dual server setup already.

I have just noticed that it is not responding to any of my mail servers=20
at the moment.

Kind regards

Benedict White

Re: Server down:

[Ed K. <ed...@es...>]

At 03:46 AM Thursday, 9/27/2007, Benedict White wrote -=>
>The server on 66.250.40.33:24441 seems to have been down since 2nd 
>of September.
>
>Do we know who is looking after it?

No - but - you can change your config to point to 
82.94.255.100:24441.  Someone (I can't remember who - sorry) set this 
one up as 66.250.40.33 has been having trouble for some time.

One caveat though - don't run "pyzor discover" as it will change you 
config back to the old server...

HTH

Ed

. . . . . . . . . . . . . . . . . .
Randomly Generated Quote (570 of 1280):
He who laughs last hasn't been told the terrible truth.

Server down:

[Benedict W. <be...@cs...>]

The server on 66.250.40.33:24441 seems to have been down since 2nd of =
September.

Do we know who is looking after it?

Kind regards



Benedict White
be...@cs...

Computer Systems Engineering Ltd
tel (44) 1444 238070
fax (44) 1444 238099

Re: Frank Tobin (Pyzor Status)

[Jamyn <jsh...@ho...>]

I'm also interested in hosting a dedicated/public DCC server, so 
hopefully this project does not die :) DCC has it's purpose, and I use 
it as well, but Pyzor has performed well for me and I'd like to see it 
survive.

-J

Benedict White wrote:
> I have been in touch with him. 
>
> He should be popping by some time in the next week.
>
> Kind regards
>
> Benedict White
>
>
>
> -------------------------------------------------------------------------
> This SF.net email is sponsored by: Microsoft
> Defy all challenges. Microsoft(R) Visual Studio 2005.
> http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
> _______________________________________________
> pyzor-users mailing list
> pyz...@li...
> https://lists.sourceforge.net/lists/listinfo/pyzor-users
>   

RE: Frank Tobin

[Benedict W. <be...@cs...>]

I have been in touch with him.=20

He should be popping by some time in the next week.

Kind regards

Benedict White

Frank Tobin

[Benedict W. <be...@cs...>]

I may have tracked him down, and am trying to get in touch.

Also thanks to John Hein for confirming the status of=20
the Pyzor patch.

Kind regards

Benedict White

Re: SpamAssassin dual Pyzor patch

[John E H. <jh...@ti...>]

Benedict White wrote at 15:14 +0100 on Sep 25, 2007:
 > Does anyone know if the dual pyzor patch has been included in 
 > Spamassassin regular?

Yes.  It's been in for a while now.

http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5148