pyzor-users — general discussion of Pyzor and Pyzor-related topics

Server down?

[Antonio G. <Ant...@cm...>]

Hi all! 

We are using Pyzor as Spam check on our spamassassin configuration, 
but, pyzor check is reporting that server is down. Seems that telnet does not 
work :( 

Trying 79.99.133.40... 
telnet: connect to address 79.99.133.40: Connection refused 
Trying 109.72.80.227... 
telnet: connect to address 109.72.80.227: Connection refused 

Any ideas? 

Thank you! 

Antonio. 

Re: Pyzor server

[Tony M. <to...@sp...>]

> Are there any stats on submitters?

Not at the moment, no.  Since nearly everyone is reporting as the anonymous user this would have to be by IP address.  If I turn up the log level that information could be gathered from the logs, but the impact of writing a log entry to disk with each query is significant (the server is basically just network IO + memory at the moment).

I could add more efficient recording specifically for these stats.  Another item for the to-do list perhaps :)

Cheers,
Tony

Re: Pyzor server

[Robin V. <ro...@sw...>]

On 12/27/2011 09:16 PM, Tony Meyer wrote:

Hi!

> No.  public.pyzor.org is using the default ACL for the anonymous user, which means that an anonymous user can use "check", "report", "ping", and "info".  IOW, the only command that requires an account is "whitelist" - anyone can submit a spam report, but only trusted sources may whitelist a report.

Ok, then it's clear how that works.

> I have plans (but no idea when there will be time) to add another public database (e.g. trusted.pyzor.org) that restricts the anonymous user to "check", "ping", and "info", and give out accounts (allowing "report" and "whitelist") to anyone that appears to be legitimate.  It would be interesting to compare the results of these.
> A reputation system for reporters could be added (other fingerprinting systems have them), but that is a significant change, and not likely to happen any time soon (unless someone submits a patch for it…).

Would be nice to see the difference, but maybe the problem it tries to 
solve isn't really big. I see some FP's on Pyzor hits, but most often it 
works as it should. I guess there are not many spammers that take the 
time to figure out how the reporting works. And even then there are 
enough of us to report the opposite. Are there any stats on submitters?

/Robin

-- 
Robin Vleij

Re: Pyzor server

[Tony M. <to...@sp...>]

> You mean that it's impossible to get an account on the public server? 
> And without it the submits are ignored? That seems odd. How do the 
> fingerprints of spams end up in the public "database" then?

No.  public.pyzor.org is using the default ACL for the anonymous user, which means that an anonymous user can use "check", "report", "ping", and "info".  IOW, the only command that requires an account is "whitelist" - anyone can submit a spam report, but only trusted sources may whitelist a report.

The reason behind this lies with how pyzor treats (at least by default) a "whitelist" command - if a digest is whitelisted, that doesn't just decrease the count (i.e. it's not an "unreport"), it means that the digest never gets considered spam (i.e. it really is whitelisting).  This isn't practical as an anonymous function.

Note that since the anonymous user can submit reports, these might be wrong.  I think the SA plug-in will believe Pyzor if there is any number of reports, but more judicious decisions can be made if the report count is taken into consideration (however, since Pyzor's just another rule inside of SA, that perhaps isn't necessary in that context).

I have plans (but no idea when there will be time) to add another public database (e.g. trusted.pyzor.org) that restricts the anonymous user to "check", "ping", and "info", and give out accounts (allowing "report" and "whitelist") to anyone that appears to be legitimate.  It would be interesting to compare the results of these.

A reputation system for reporters could be added (other fingerprinting systems have them), but that is a significant change, and not likely to happen any time soon (unless someone submits a patch for it…).

Apologies for the slow reply - I wasn't really doing much with email over the Christmas period.

Cheers,
Tony

Re: Pyzor server

[Robin V. <ro...@sw...>]

On 12/23/2011 03:06 PM, Benny Pedersen wrote:

Hi!

> yep its simple on localhost, but on public its another problem :)

You mean that it's impossible to get an account on the public server? 
And without it the submits are ignored? That seems odd. How do the 
fingerprints of spams end up in the public "database" then?

> the public pyzord, if listed add diggest to localhost pyzord, pyzord
> imho have both whitelist/blacklist counters for every diggest, could
> this be used as repution on localhost ?

Sure, but that would take time for queries probably, and with large 
volume mail clusters that's not really an option maybe. I think the 
local servers should just get a copy of the current DB, so one can run 
the queries locally.

> all the above can and should be done entirely in pyzor client in
> spamassassin plugin config

Well, since there was no problem running on the public servers, I don't 
really need the local server setup any longer. If it's OK to run the 
queries public, it's OK for me.

If some day we want extra public servers, we're there to help AND we can 
look at distributing the DB.

> mary xmax btw

The same, merry X-Mas to everyone!

/Robin

-- 
Robin Vleij

Re: Pyzor server

[Benny P. <me...@ju...>]

On Fri, 23 Dec 2011 13:06:58 +0100, Robin Vleij wrote:
> No, I didn't get an account. How does one get an account for the 
> public
> Pyzor servers?

yep its simple on localhost, but on public its another problem :)

maybe its time to make some sort of rfc ?

here i can come up with something like:

pyzord running in localhost, spamassassin queury localhost pyzord, if 
diggest is listed use this hit counter from it, if not listed try query 
the public pyzord, if listed add diggest to localhost pyzord, pyzord 
imho have both whitelist/blacklist counters for every diggest, could 
this be used as repution on localhost ?

all the above can and should be done entirely in pyzor client in 
spamassassin plugin config

imho it will benefit us all if this is done

mary xmax btw

Re: Pyzor server

[Robin V. <ro...@sw...>]

On 12/22/2011 06:23 PM, Benny Pedersen wrote:

Hi!

No, I didn't get an account. How does one get an account for the public 
Pyzor servers?


> you got an account ?
>
> imho pyzord discard reporting if no account, atleast it was so while i
> run pyzord here on gentoo
>
>> OK, great! Then we'll just run on that, just let us know if you need
>> more mirror cap!
>
> +1
>
> ------------------------------------------------------------------------------
> Write once. Port to many.
> Get the SDK and tools to simplify cross-platform app development. Create
> new or port existing apps to sell to consumers worldwide. Explore the
> Intel AppUpSM program developer opportunity. appdeveloper.intel.com/join
> http://p.sf.net/sfu/intel-appdev
> _______________________________________________
> pyzor-users mailing list
> pyz...@li...
> https://lists.sourceforge.net/lists/listinfo/pyzor-users


-- 
Robin Vleij

Re: Pyzor server

[Benny P. <me...@ju...>]

On Thu, 22 Dec 2011 13:56:05 +0100, Robin Vleij wrote:

> Yeah, that basically takes away the point of Pyzor a bit, without the
> community data. :-) We've started to use spamassassin -r instead of
> sa-learn to report our spam, so we'll submit to pyzor as well now.

you got an account ?

imho pyzord discard reporting if no account, atleast it was so while i 
run pyzord here on gentoo

> OK, great! Then we'll just run on that, just let us know if you need
> more mirror cap!

+1

Re: Pyzor server

[Benny P. <me...@ju...>]

On Thu, 22 Dec 2011 12:21:20 +0100, Robin Vleij wrote:

> Any plans or support for that?

just add 127.0.0.1:defaultport to servers file will work

but it will still need server to server diggest support

but the server to server support could very well be added to spammassin 
plugin without any code change to pyzor/pyzord

Re: Pyzor server

[Robin V. <ro...@sw...>]

On 12/22/2011 01:12 PM, Dreas van Donselaar wrote:

Hi Dreas! (are you Dutch?)

> The Pyzor server code is open-source, so if you like you can run your
> own local Pyzor server. That won't benefit from the publicly available
> data though, you'd have to train it locally.

Yeah, that basically takes away the point of Pyzor a bit, without the 
community data. :-) We've started to use spamassassin -r instead of 
sa-learn to report our spam, so we'll submit to pyzor as well now.

> There is currently no option to mirror the public database. There should
> be plenty of resources available on the public.pyzor.org setup though,
> so feel free to use that!

OK, great! Then we'll just run on that, just let us know if you need 
more mirror cap!

/Robin

-- 
Robin Vleij

Re: Pyzor server

[Dreas v. D. <dr...@sp...>]

Hi Robin,

On 12/22/2011 12:21 PM, Robin Vleij wrote:
> We just started using Pyzor as a plugin to our SA setup and I'm
> wondering if there's some way to run a pyzor server locally?
The Pyzor server code is open-source, so if you like you can run your 
own local Pyzor server. That won't benefit from the publicly available 
data though, you'd have to train it locally.
> We have
> quite some queries and I guess that running this locally would be
> optimal and prevent us from drowning the public server. We could even
> have the server open for the public as well to support the good cause. :-)
>
> Any plans or support for that?
There is currently no option to mirror the public database. There should 
be plenty of resources available on the public.pyzor.org setup though, 
so feel free to use that!

Kind regards,

Dreas

Pyzor server

[Robin V. <ro...@sw...>]

Hi!

We just started using Pyzor as a plugin to our SA setup and I'm 
wondering if there's some way to run a pyzor server locally? We have 
quite some queries and I guess that running this locally would be 
optimal and prevent us from drowning the public server. We could even 
have the server open for the public as well to support the good cause. :-)

Any plans or support for that?

/Robin

-- 
Robin Vleij

Re: pyzor logfile

[Ralf K. <ra...@lx...>]

HI Tony,

sorry, but this option is not valid within the local.cf.
local.cf:
pyzor_options --logfile=/var/log/pyzor.log
echo "test" | spamassassin -D pyzor 2>&1
result:
[13000] info: config: SpamAssassin failed to parse line, 
"--logfile=/var/log/pyzor.log" is not valid for "pyzor_options", 
skipping: pyzor_options --logfile=/var/log/pyzor.log
I don't know the options in local.cf for the command pyzor_options.
Do you have another idea?

regards
Ralf


Am 31.08.2011 06:47, schrieb Tony Meyer:
>> is it possible, that pyzor writes in a logfile.
>> E.g. /var/log/pyzor.log?
>> I cannot find any possibilites about that.
>
> Yes:
>
> ~$ pyzor --help
> Usage: pyzor [options]
>
> Read data from stdin and execute the requested command (one of 'check',
> 'report', 'ping', 'digest', 'predigest', 'genkey').
>
> Options:
>    -h, --help            show this help message and exit
>    -n NICE, --nice=NICE  'nice' level
>    -d, --debug           enable debugging output
>    --homedir=HOMEDIR     configuration directory
>    -s STYLE, --style=STYLE
>                          input style: 'msg' (individual RFC5321 message),
>                          'mbox' (mbox file of messages), 'digests' (Pyzor
>                          digests, one per line).
>    --log-file=LOGFILE    name of log file
>    --servers-file=SERVERSFILE
>                          name of servers file
>    --accounts-file=ACCOUNTSFILE
>                          name of accounts file
>    -t TIMEOUT, --timeout=TIMEOUT
>                          timeout (in seconds)
>
> It's likely to be more convenient to put the log-file option in your configuration file than specifying it on the command-line every time.
>
> Cheers,
> Tony
> ------------------------------------------------------------------------------
> Special Offer -- Download ArcSight Logger for FREE!
> Finally, a world-class log management solution at an even better
> price-free! And you'll get a free "Love Thy Logs" t-shirt when you
> download Logger. Secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsisghtdev2dev
> _______________________________________________
> pyzor-users mailing list
> pyz...@li...
> https://lists.sourceforge.net/lists/listinfo/pyzor-users

-- 
Mit freundlichen Grüßen
Ralf Kania
Tel:   09131-9403718
Fax:   09131-9403711
Mobil: 0172-4633601

Re: help

[Benny P. <me...@ju...>]

On Tue, 6 Sep 2011 17:47:00 +0700, Kelly M. Kampen wrote:
> Thanks,

for reposting whole digest qoute ;(

help

[Kelly M. K. <k_k...@ya...>]

Thanks,

Kelly M. Kampen


On Tue, Sep 6, 2011 at 5:28 PM,
<pyz...@li...>wrote:

> Send pyzor-users mailing list submissions to
>        pyz...@li...
>
> To subscribe or unsubscribe via the World Wide Web, visit
>        https://lists.sourceforge.net/lists/listinfo/pyzor-users
> or, via email, send a message with subject or body 'help' to
>        pyz...@li...
>
> You can reach the person managing the list at
>        pyz...@li...
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of pyzor-users digest..."
>
>
> Today's Topics:
>
>   1. whitelisted? (John Hein)
>   2. pyzor checks are not in mailheader (Ralf Kania)
>   3. Re: pyzor checks are not in mailheader (Tony Meyer)
>   4. Re: pyzor checks are not in mailheader (Ralf Kania)
>   5. pyzor logfile (Ralf Kania)
>   6. Test pyzor (l.r...@mo...)
>   7. Re: Test pyzor (ygu...@sn...)
>   8. Re: pyzor logfile (Tony Meyer)
>   9. Re: Test pyzor (Tony Meyer)
>  10. Pyzor and Python (l.r...@mo...)
>
>
> ----------------------------------------------------------------------
>
> Message: 1
> Date: Sun, 27 Mar 2011 21:12:16 -0600
> From: "John Hein" <ygu...@sn...>
> Subject: whitelisted?
> To: pyz...@li...
> Message-ID: <832...@sn...>
> Content-Type: text/plain; charset="us-ascii"
>
> Why is the attached spam whitelisted?
>
> -------------- next part --------------
> An embedded message was scrubbed...
> From: unknown sender
> Subject: no subject
> Date: no date
> Size: 1616
>
> ------------------------------
>
> Message: 2
> Date: Tue, 31 May 2011 15:31:48 +0200
> From: Ralf Kania <ra...@lx...>
> Subject: pyzor checks are not in mailheader
> To: pyz...@li...
> Message-ID: <4DE...@lx...>
> Content-Type: text/plain; charset=ISO-8859-15; format=flowed
>
> Hello,
>
> I dont know if pyzor works fine. There are no checks visible in mailheader.
> Here my local.cf:
> ++++++++++++++++++++++++
> use_pyzor 1
> pyzor_path /usr/bin/pyzor
> pyzor_options --homedir /var/lib/amavis/.pyzor
> add_header all Pyzor _PYZOR_
> score PYZOR_CHECK 4.8
> ++++++++++++++++++++++++
>
> But there are no checks in mailheader:
> X-Virus-Scanned: Debian amavisd-new at domain
> X-Spam-Flag: NO
> X-Spam-Score: -4.619
> X-Spam-Level:
> X-Spam-Status: No, score=-4.619 tagged_above=-999 required=5
>        tests=[AWL=-0.619, RCVD_IN_DNSWL_MED=-4]
>
> But I see no DCC Checks, but in logfile.
> What I am doing wrong?
> My system is debian lenny 64 bit.
> I use postfix, amavis, spamassassin, pyzor, dcc.
>
> with kind regards
> Ralf
>
>
>
> ------------------------------
>
> Message: 3
> Date: Thu, 2 Jun 2011 20:37:59 +1200
> From: Tony Meyer <to...@sp...>
> Subject: Re: pyzor checks are not in mailheader
> To: pyz...@li...
> Message-ID: <BAN...@ma...>
> Content-Type: text/plain; charset=ISO-8859-1
>
> Hi,
>
> > I dont know if pyzor works fine. There are no checks visible in
> mailheader.
>
> This is really a SpamAssassin question and not a Pyzor one.
>
> If you run `spamassassin -D < some_message` that will output a lot of
> SpamAssassin debugging information.  In there you should see
> information about the Pyzor checks, if they are occurring (and any
> information about errors if there are any).
>
> Cheers,
> Tony
>
>
>
> ------------------------------
>
> Message: 4
> Date: Fri, 03 Jun 2011 09:48:43 +0200
> From: Ralf Kania <ra...@lx...>
> Subject: Re: pyzor checks are not in mailheader
> To: pyz...@li...
> Message-ID: <4DE...@lx...>
> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
>
> Hello Tony,
>
> now my problem is solved. The firewall has blocked th udp packets to
> port 24441.
> IN my mail.log now I see entries like "PYZOR_CHECK".
>
> Thanks and greetings
> Ralf
>
>
> Am 02.06.2011 10:37, schrieb Tony Meyer:
> > Hi,
> >
> >> I dont know if pyzor works fine. There are no checks visible in
> mailheader.
> >
> > This is really a SpamAssassin question and not a Pyzor one.
> >
> > If you run `spamassassin -D<  some_message` that will output a lot of
> > SpamAssassin debugging information.  In there you should see
> > information about the Pyzor checks, if they are occurring (and any
> > information about errors if there are any).
> >
> > Cheers,
> > Tony
> >
> >
> ------------------------------------------------------------------------------
> > Simplify data backup and recovery for your virtual environment with
> vRanger.
> > Installation's a snap, and flexible recovery options mean your data is
> safe,
> > secure and there when you need it. Data protection magic?
> > Nope - It's vRanger. Get your free trial download today.
> > http://p.sf.net/sfu/quest-sfdev2dev
> > _______________________________________________
> > pyzor-users mailing list
> > pyz...@li...
> > https://lists.sourceforge.net/lists/listinfo/pyzor-users
>
>
>
> ------------------------------
>
> Message: 5
> Date: Fri, 03 Jun 2011 09:52:46 +0200
> From: Ralf Kania <ra...@lx...>
> Subject: pyzor logfile
> To: pyz...@li...
> Message-ID: <4DE...@lx...>
> Content-Type: text/plain; charset=ISO-8859-15; format=flowed
>
> Hello,
>
> is it possible, that pyzor writes in a logfile.
> E.g. /var/log/pyzor.log?
> I cannot find any possibilites about that.
> Is it a pyzor option or a spamassassin option?
>
> with kind regards
> Ralf
>
>
>
> ------------------------------
>
> Message: 6
> Date: Tue, 30 Aug 2011 12:04:14 +0200
> From: "l.r...@mo..." <l.r...@mo...>
> Subject: Test pyzor
> To: pyz...@li...
> Message-ID: <4E5...@mo...>
> Content-Type: text/plain; charset=ISO-8859-15; format=flowed
>
> How can i forge a test mail that, for sure, will generates a PYZOR_CHECK
> on the mailheader ?
> This just to be sure nothing is blocking Pyzor to work with SA.
>
> Rergards,
>
> Luciano Rinetti
>
>
>
>
> ------------------------------
>
> Message: 7
> Date: Tue, 30 Aug 2011 08:14:04 -0600
> From: ygu...@sn...
> Subject: Re: Test pyzor
> To: pyz...@li...
> Message-ID: <862...@sn...>
> Content-Type: text/plain; charset=us-ascii
>
> Luciano Rinetti wrote at 12:04 +0200 on Aug 30, 2011:
>  > How can i forge a test mail that, for sure, will generates a PYZOR_CHECK
>  > on the mailheader ?
>  > This just to be sure nothing is blocking Pyzor to work with SA.
>
> http://spamassassin.apache.org/gtube/
> http://spamassassin.apache.org/gtube/gtube.txt
>
>
>
> ------------------------------
>
> Message: 8
> Date: Wed, 31 Aug 2011 16:47:50 +1200
> From: Tony Meyer <to...@sp...>
> Subject: Re: pyzor logfile
> To: pyz...@li...
> Message-ID: <099...@sp...>
> Content-Type: text/plain; charset=us-ascii
>
> > is it possible, that pyzor writes in a logfile.
> > E.g. /var/log/pyzor.log?
> > I cannot find any possibilites about that.
>
> Yes:
>
> ~$ pyzor --help
> Usage: pyzor [options]
>
> Read data from stdin and execute the requested command (one of 'check',
> 'report', 'ping', 'digest', 'predigest', 'genkey').
>
> Options:
>  -h, --help            show this help message and exit
>  -n NICE, --nice=NICE  'nice' level
>  -d, --debug           enable debugging output
>  --homedir=HOMEDIR     configuration directory
>  -s STYLE, --style=STYLE
>                        input style: 'msg' (individual RFC5321 message),
>                        'mbox' (mbox file of messages), 'digests' (Pyzor
>                        digests, one per line).
>  --log-file=LOGFILE    name of log file
>  --servers-file=SERVERSFILE
>                        name of servers file
>  --accounts-file=ACCOUNTSFILE
>                        name of accounts file
>  -t TIMEOUT, --timeout=TIMEOUT
>                        timeout (in seconds)
>
> It's likely to be more convenient to put the log-file option in your
> configuration file than specifying it on the command-line every time.
>
> Cheers,
> Tony
>
>
> ------------------------------
>
> Message: 9
> Date: Wed, 31 Aug 2011 16:45:31 +1200
> From: Tony Meyer <to...@sp...>
> Subject: Re: Test pyzor
> To: l.r...@mo..., pyz...@li...
> Message-ID: <818...@sp...>
> Content-Type: text/plain; charset=us-ascii
>
> > How can i forge a test mail that, for sure, will generates a PYZOR_CHECK
> > on the mailheader ?
> > This just to be sure nothing is blocking Pyzor to work with SA.
>
> This isn't really a question about Pyzor, it's a question about
> SpamAssassin.  I believe running:
>
> spamassassin -t -D pyzor < /tmp/message.eml
>
> Will show you enough information about what SpamAssassin is doing to be
> able to tell if it's checking Pyzor.
>
> Cheers,
> Tony
>
>
> ------------------------------
>
> Message: 10
> Date: Tue, 06 Sep 2011 12:28:51 +0200
> From: "l.r...@mo..." <l.r...@mo...>
> Subject: Pyzor and Python
> To: pyz...@li...
> Message-ID: <4E6...@mo...>
> Content-Type: text/plain; charset="iso-8859-15"
>
> Hello,
> i'm using Pyzor ver. "1:0.5.0-2fakesync1" on my Ubuntu Server 11.04 as
> shown by "dpkg -l".
> Please could help me to know the Python vesion and packages are needed
> so that Pyzor can work correctly ?
>
> Thank You and Best Regards
>
> Luciano Rinetti
>
> -------------- next part --------------
> An HTML attachment was scrubbed...
>
> ------------------------------
>
>
> ------------------------------------------------------------------------------
> Special Offer -- Download ArcSight Logger for FREE!
> Finally, a world-class log management solution at an even better
> price-free! And you'll get a free "Love Thy Logs" t-shirt when you
> download Logger. Secure your free ArcSight Logger TODAY!
> http://p.sf.net/sfu/arcsisghtdev2dev
>
> ------------------------------
>
> _______________________________________________
> pyzor-users mailing list
> pyz...@li...
> https://lists.sourceforge.net/lists/listinfo/pyzor-users
>
>
> End of pyzor-users Digest, Vol 31, Issue 1
> ******************************************
>

Pyzor and Python

[<l.r...@mo...>]

Hello,
i'm using Pyzor ver. "1:0.5.0-2fakesync1" on my Ubuntu Server 11.04 as 
shown by "dpkg -l".
Please could help me to know the Python vesion and packages are needed 
so that Pyzor can work correctly ?

Thank You and Best Regards

Luciano Rinetti

Re: Test pyzor

[Tony M. <to...@sp...>]

> How can i forge a test mail that, for sure, will generates a PYZOR_CHECK 
> on the mailheader ?
> This just to be sure nothing is blocking Pyzor to work with SA.

This isn't really a question about Pyzor, it's a question about SpamAssassin.  I believe running:

spamassassin -t -D pyzor < /tmp/message.eml

Will show you enough information about what SpamAssassin is doing to be able to tell if it's checking Pyzor.

Cheers,
Tony

Re: pyzor logfile

[Tony M. <to...@sp...>]

> is it possible, that pyzor writes in a logfile.
> E.g. /var/log/pyzor.log?
> I cannot find any possibilites about that.

Yes:

~$ pyzor --help
Usage: pyzor [options]

Read data from stdin and execute the requested command (one of 'check',
'report', 'ping', 'digest', 'predigest', 'genkey').

Options:
  -h, --help            show this help message and exit
  -n NICE, --nice=NICE  'nice' level
  -d, --debug           enable debugging output
  --homedir=HOMEDIR     configuration directory
  -s STYLE, --style=STYLE
                        input style: 'msg' (individual RFC5321 message),
                        'mbox' (mbox file of messages), 'digests' (Pyzor
                        digests, one per line).
  --log-file=LOGFILE    name of log file
  --servers-file=SERVERSFILE
                        name of servers file
  --accounts-file=ACCOUNTSFILE
                        name of accounts file
  -t TIMEOUT, --timeout=TIMEOUT
                        timeout (in seconds)

It's likely to be more convenient to put the log-file option in your configuration file than specifying it on the command-line every time.

Cheers,
Tony

Re: Test pyzor

[<ygu...@sn...>]

Luciano Rinetti wrote at 12:04 +0200 on Aug 30, 2011:
 > How can i forge a test mail that, for sure, will generates a PYZOR_CHECK 
 > on the mailheader ?
 > This just to be sure nothing is blocking Pyzor to work with SA.

http://spamassassin.apache.org/gtube/
http://spamassassin.apache.org/gtube/gtube.txt

Test pyzor

[<l.r...@mo...>]

How can i forge a test mail that, for sure, will generates a PYZOR_CHECK 
on the mailheader ?
This just to be sure nothing is blocking Pyzor to work with SA.

Rergards,

Luciano Rinetti

pyzor logfile

[Ralf K. <ra...@lx...>]

Hello,

is it possible, that pyzor writes in a logfile.
E.g. /var/log/pyzor.log?
I cannot find any possibilites about that.
Is it a pyzor option or a spamassassin option?

with kind regards
Ralf

Re: pyzor checks are not in mailheader

[Ralf K. <ra...@lx...>]

Hello Tony,

now my problem is solved. The firewall has blocked th udp packets to 
port 24441.
IN my mail.log now I see entries like "PYZOR_CHECK".

Thanks and greetings
Ralf


Am 02.06.2011 10:37, schrieb Tony Meyer:
> Hi,
>
>> I dont know if pyzor works fine. There are no checks visible in mailheader.
>
> This is really a SpamAssassin question and not a Pyzor one.
>
> If you run `spamassassin -D<  some_message` that will output a lot of
> SpamAssassin debugging information.  In there you should see
> information about the Pyzor checks, if they are occurring (and any
> information about errors if there are any).
>
> Cheers,
> Tony
>
> ------------------------------------------------------------------------------
> Simplify data backup and recovery for your virtual environment with vRanger.
> Installation's a snap, and flexible recovery options mean your data is safe,
> secure and there when you need it. Data protection magic?
> Nope - It's vRanger. Get your free trial download today.
> http://p.sf.net/sfu/quest-sfdev2dev
> _______________________________________________
> pyzor-users mailing list
> pyz...@li...
> https://lists.sourceforge.net/lists/listinfo/pyzor-users

Re: pyzor checks are not in mailheader

[Tony M. <to...@sp...>]

Hi,

> I dont know if pyzor works fine. There are no checks visible in mailheader.

This is really a SpamAssassin question and not a Pyzor one.

If you run `spamassassin -D < some_message` that will output a lot of
SpamAssassin debugging information.  In there you should see
information about the Pyzor checks, if they are occurring (and any
information about errors if there are any).

Cheers,
Tony

pyzor checks are not in mailheader

[Ralf K. <ra...@lx...>]

Hello,

I dont know if pyzor works fine. There are no checks visible in mailheader.
Here my local.cf:
++++++++++++++++++++++++
use_pyzor 1
pyzor_path /usr/bin/pyzor
pyzor_options --homedir /var/lib/amavis/.pyzor
add_header all Pyzor _PYZOR_
score PYZOR_CHECK 4.8
++++++++++++++++++++++++

But there are no checks in mailheader:
X-Virus-Scanned: Debian amavisd-new at domain
X-Spam-Flag: NO
X-Spam-Score: -4.619
X-Spam-Level:
X-Spam-Status: No, score=-4.619 tagged_above=-999 required=5
	tests=[AWL=-0.619, RCVD_IN_DNSWL_MED=-4]

But I see no DCC Checks, but in logfile.
What I am doing wrong?
My system is debian lenny 64 bit.
I use postfix, amavis, spamassassin, pyzor, dcc.

with kind regards
Ralf

whitelisted?

[John H. <ygu...@sn...>]

Why is the attached spam whitelisted?