Chris Lee | 1 Apr 2004 09:29
Picon

Bad arg length for Socket::pack_sockaddr_in

OS: Linux RedHat Fedora Core 1
Kernel: 2.4.22-1.2174.nptl
Perl : perl-5.8.3-16
Razar 2.40 from source tarball

When I issue the the command, error occur.

# razor-admin -create
Bad arg length for Socket::pack_sockaddr_in, length is 0, should be 4 at
/usr/lib/perl5/5.8.3/i386-linux-thread-multi/Socket.pm line 373.

Any Hints?

Regards,
Chris Lee

-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
Don Seeberg | 7 Apr 2004 09:13

moving razor folders

Hello,

My system is an apple xserve running the 10.3 server (unix
environment).  I just installed razor-agents and
razor-agents-sdk through to the "make install" step (I have
not yet run the initialization scripts).  I would like to
move the razor-agents-2.40 and razor-agents-sdk-2.03
application folders to a new location.  Can I move them
without screwing up any links?

Thanks very much,

Don Seeberg

-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
Chad Phillips | 8 Apr 2004 00:25

razor-check and cron

Hi,

I just installed razor.  I read this "An alternate method would be to call
razor-check from cron, at regular intervals, to identify and mark spam in
queued mailboxes." in the docs.

I can run razor-check at the command line.  With verbose on I can see it
going through my mail and saying that some is spam.  How do I get it to
mark a message as spam?  I read the manpage and the faq and didn't find
anything.  If it is in the faq somewhere could someone post a url?

I am also assuming that if I run razor-check with cron, I will not have
mess with sendmail?  Is that correct?

thanks
chad

-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
David Eisner | 12 Apr 2004 23:44
Picon
Favicon

Poor detection ratio

Hi.  I've installed Razor, and I'm trying to get a sense for
how well it works.

I've taken some sample spam from http://www.em.ca/~bruceg/spam/.
I ran razor-check on 519 sample spams from April 7th, and only
four ( < 1% ) were detected:

--snip--
bash-2.05b$ for f in 108136*; do razor-check $f; if [ "$?" == "0" ]; 
then echo $f; fi; done
1081366364.21172_100.txt
1081366421.21172_304.txt
1081366444.21309_120.txt
1081366504.21309_677.txt
bash-2.05b$ ls 108136* | wc
    519     519   12837
--snip--

Am I missing something?  Thanks.

-David

---------------------------------------------------------
D a v i d  E i s n e r        c r a d l e  <at>  u m d . e d u
CALCE EPSC                         University of Maryland

-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
(Continue reading)

Neil Bradley | 13 Apr 2004 00:01

Re: Poor detection ratio

> Hi.  I've installed Razor, and I'm trying to get a sense for
> how well it works.
>
> I've taken some sample spam from http://www.em.ca/~bruceg/spam/.
> I ran razor-check on 519 sample spams from April 7th, and only
> four ( < 1% ) were detected:

I ran in to the same problem when I installed Razor under SpamAssassin
early last week. Now, with some tweaking, it's detecting over 95% of Spam.

I wound up jacking up the score for the presence of spam in Razor.
Frankly, I don't think the default value of .5-1.5 for the % confidence in
SpamAssassin is high enough. Every thing Razor has listed I've seen is
spam.

If you're running SpamAssassin, how many spam and ham messages did you
sa-learn?  If you have a relatively small database, it can't get a good
idea of what is and isn't spam without it.

-->Neil

-------------------------------------------------------------------------------
Neil Bradley             "Your mistletoe is no match for my T.O.W. missile!"
Synthcom Systems, Inc.   - Santabot - Futurama
ICQ #29402898

-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
(Continue reading)

David Eisner | 13 Apr 2004 00:15
Picon
Favicon

Re: Poor detection ratio

Neil Bradley wrote:

>If you're running SpamAssassin, how many spam and ham messages did you
>sa-learn?  If you have a relatively small database, it can't get a good
>idea of what is and isn't spam without it.
>

I am using SpamAssassin, but in this case I'm just running the
command line 'razor-check' to see if it can detect sample spam.

Under SpamAssassin, the Razor check and the bayes db (populated with
sa-learn) are two different tests.  Using sa-learn will improve the bayes
filter, but that's independent of the Razor lookup, I believe.

-David

---------------------------------------------------------
D a v i d  E i s n e r        c r a d l e  <at>  u m d . e d u
CALCE EPSC                         University of Maryland

-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
Tony (Unihost | 14 Apr 2004 15:17

Can't Find Razor Discovery Servers .... Again

Hi,

Surely this is one for the FAQ the amount of times that I've seen it.
Can't find Razor discovery servers.

Here is the Output of razor-admin -d -discover -home /etc/razor

########################

[root <at> omega]# razor-admin -d -discover -home /etc/razor
Razor-Log: read_file: 17 items read from /etc/razor/razor-agent.conf
Razor-Log:  -discover will force complete discovery
Apr 14 14:01:56.560312 admin[32411]: [ 1] [bootup] Logging initiated
LogDebugLevel=9 to stdout
Apr 14 14:01:56.560975 admin[32411]: [ 5] computed razorhome=/etc/razor,
conf=/etc/razor/razor-agent.conf, ident=/etc/razor/identity
Apr 14 14:01:56.561078 admin[32411]: [ 2]  Razor-Agents v2.36 starting
razor-admin -d -discover -home /etc/razor
Apr 14 14:01:56.565197 admin[32411]: [ 9] uname -a: Linux
omega.unihost.net SMP Wed Apr 9 21:45:46 MDT 2004 i686 unknown unknown
GNU/Linux
Apr 14 14:01:56.565639 admin[32411]: [ 5] Can't read file
/etc/razor/servers.discovery.lst: No such file or directory
Apr 14 14:01:56.565757 admin[32411]: [ 5] Can't read file
/etc/razor/servers.nomination.lst: No such file or directory
Apr 14 14:01:56.565860 admin[32411]: [ 5] Can't read file
/etc/razor/servers.catalogue.lst: No such file or directory
Apr 14 14:01:56.566325 admin[32411]: [ 5] no listfile:
/etc/razor/servers.nomination.lst
Apr 14 14:01:56.566466 admin[32411]: [ 6] no discovery listfile:
(Continue reading)

Kelson Vibber | 14 Apr 2004 19:26
Favicon

Re: Poor detection ratio

At 03:01 PM 4/12/2004, Neil Bradley wrote:
>Every thing Razor has listed I've seen is spam.

Well, except for the latest CERT advisory.  It appears to have been revoked 
since then, but at the time it hit my mail server Razor tagged it.

Probably some long-dead account is on the list, and has since been 
converted to a spamtrap.

Kelson Vibber
SpeedGate Communications <www.speed.net> 

-------------------------------------------------------
This SF.Net email is sponsored by: IBM Linux Tutorials
Free Linux tutorial presented by Daniel Robbins, President and CEO of
GenToo technologies. Learn everything from fundamentals to system
administration.http://ads.osdn.com/?ad_id=1470&alloc_id=3638&op=click
tallison | 15 Apr 2004 01:31

Re: Poor detection ratio

> Hi.  I've installed Razor, and I'm trying to get a sense for
> how well it works.
>
> I've taken some sample spam from http://www.em.ca/~bruceg/spam/.
> I ran razor-check on 519 sample spams from April 7th, and only
> four ( < 1% ) were detected:
>
> --snip--
> bash-2.05b$ for f in 108136*; do razor-check $f; if [ "$?" == "0" ];
> then echo $f; fi; done
> 1081366364.21172_100.txt
> 1081366421.21172_304.txt
> 1081366444.21309_120.txt
> 1081366504.21309_677.txt
> bash-2.05b$ ls 108136* | wc
>     519     519   12837
> --snip--
>
>
> Am I missing something?  Thanks.
>

I don't think so.

I believe that if the users of SpamAssassin would take the 2 minutes to
configure razor-report you might be able to achieve >>80% detection ratio
in a matter of days.

However, since most people who use SpamAssassin don't take the time to
RTFM they just assume that someone else is running razor-report correctly
(Continue reading)

John Andersen | 15 Apr 2004 04:07

Re: Poor detection ratio

On Wednesday 14 April 2004 15:31, tallison <at> tacocat.net wrote:

> I believe that if the users of SpamAssassin would take the 2 minutes to
> configure razor-report you might be able to achieve >>80% detection ratio
> in a matter of days.
>
> However, since most people who use SpamAssassin don't take the time to
> RTFM they just assume that someone else is running razor-report correctly
> and don't pay it any attention.  The point is if everyone who used
> razor-check also used razor-report then it would be _much_ better in
> performance than what you might see today.
>
> For me, since it's such low overhead, I report everything as spam and only
> check the one's that I am uncertain of.  However, I do not use
> SpamAssassin at all.  Using a different local spam detection engine and
> reporting back to razor should give SpamAssassin some extra benefit.

Except that SA already does WAY better than Razor at detecting spam, and
turning off Razor check in SA does not hurt it's detection rate at all but 
does improve performance.

Lets face it, Razor NEEDS something like SpamAssassin and a few others
to tell it what is spam.

Given that, Why bother with razor?  Once 'ive detected something as spam
with SA (or what ever) why should I feed Razor?  

Razor has a fundamentally flawed design, which is parasitic on the rest of the
anti-spam industry.  

(Continue reading)


Gmane