Re: [SAtalk] Server Load Average Increasing in Redhad 7.3

hi to all, I've installed spamassassin 2.54 in redhat 7.3 with a machine specs of Intel PII 350MHz 128MB, there are times that my server loads abnormally increases when spamassassin daemon scanning emails. I used to restart the daemon process and the server load back to normal again. Any idea

[SAtalk] Server Load Average Increasing in Redhad 7.3

hi to all, I've installed spamassassin 2.54 in redhat 7.3 with a machine specs of Intel PII 350MHz 128MB, there are trimes that my server loads abnormally increases when --- This SF.Net email is sponsored by: INetU Attention Web Developers & C

Re: [SAtalk] As seen on ...

It does. When someone makes something, it is natural instinct for them to want to test it, see if it works. I would certainly agree with this. However, remember that Microsoft recently released a "patch" that "fixed" certain issues with their IPsec implementation (I believe that was what it wa

Re: [SAtalk] Re: spammers aren't the only ones who can teach. (was We TEACH you how

I own several domain names. I stopped using an e-mail address on one of those domain names back in 1998. I *still* get spam to that address. So that address made one of the lists which apparently gets resold over and over again. I don't think that they ever clean up their lists. -- Thomas Camer

Re: [SAtalk] As seen on ...

On Fri, 2003-06-20 at 03:51, Benjamin A. Shelton wrote: > > > > > >I can't believe a spamware writer would be smart enough to create > >proxy-raping spamware and yet dumb enough to not send himself a test > >message with it to see if it works. > > > If he's dumb enough to spam in the first place,

Re: [SAtalk] resolution of rbls using specific local name servers?

At 12:01 19/06/03 -0700, Daniel Quinlan wrote: [EMAIL PROTECTED] writes: > but now what i want to do is run a local copy of an rbl on a local > name server, to reduce network latency and increase reliability, > and given the operational unpleasantness of microsoft dns on NT, > i don't want to put

[SAtalk] Re: spammers aren't the only ones who can teach. (was We TEACH you how

Luis Hernán Otegui <[EMAIL PROTECTED]> wrote: > > "data, reject=550 5.7.1 Blocked by Anti-Spam Filter", > > [...] > > and the spammers eventually remove the addresses from their databases. Do you have any proof about that last point? I don't think spammers ever examine bounces, or do any sort o

Re: [SAtalk] As seen on ...

I can't believe a spamware writer would be smart enough to create proxy-raping spamware and yet dumb enough to not send himself a test message with it to see if it works. If he's dumb enough to spam in the first place, does this *really* surprise you? :-) -- Benjamin A. Shelton "What do you m

Re: [SAtalk] question: HTML_WEB_BUGS

Jonathan Vanasco <[EMAIL PROTECTED]> writes: > body Image tag with an ID code to identify you > HTML_WEB_BUGS0.542 0.100 0.100 0.100 > > does that trap > http://blank.gif?id=123123";> > Yes, it did, but it won't in 2.60. -- Daniel Quinlan anti-

Re: [SAtalk] As seen on ...

On Fri, 2003-06-20 at 02:53, Justin Mason wrote: > Yorkshire Dave said: > > > Essentially on the same subject, I just received one spam with an html > > comment inserted every 5 characters, which resulted in an unrenderable > > page of BLE BORDER=0> > > tag-inside-tag type stupidity, even the imag

Re: [SAtalk] Is there a way to filter mail that's forwarded?

> > > I have this in there already but it is still not filtering. > Any > > > ideas on what I might have missed?? Ok, I kinda got this fixed. Silly me, I was forwarding things wrong. The only issues I still have is getting all the filtered mail into the right mail boxes. SO

Re: [SAtalk] As seen on ...

Yorkshire Dave said: > Essentially on the same subject, I just received one spam with an html > comment inserted every 5 characters, which resulted in an unrenderable > page of BLE BORDER=0> > tag-inside-tag type stupidity, even the image and web-bug urls had > comment tags in, wouldn't render in

Re: [SAtalk] Web interface to allow remote users to set whitelists/blacklist?

webuserprefs http://freshmeat.net/projects/webuserprefs/?topic_id=29 About: WebUserPrefs is a Web-based editor for SpamAssassin user preferences. It is written in PHP and supports whitelist and blacklist directives, as well as others through a simple plugin architecture. > Is there a web interfac

Re: [SAtalk] As seen on ...

On Thu, 2003-06-19 at 21:55, Jonathan Vanasco wrote: > using html comments? i don't think so. comments would more likely be > in a scipting language and be // /* or # > I can't even count the number of times I've seen or . I've had one email with annotated html attached since this thread starte

Re[2]: [SAtalk] DNSBL MTA rejection and more efficiency?

>> > > >> > > http://www.spamhaus.org/sbl/ >> > >>From my own experience above and their own description on this site, it >> > > sounds like the SBL is fairly safe and not abusive like other DNSBL's in >> > > the past have been accused of. Would anyone else agree that the SBL is >> > > generally s

[SAtalk] Razor2 check skipped & MySQL Preferences

Hey I am working on setting up SpamAssassin for system-wide use on my FreeBSD box. I have spamd running in the background, but am getting the following message in my logs. I am not sure what directory is being referenced in the file. Any assistance in fixing this problem would be greatly app

[SAtalk] Web interface to allow remote users to set whitelists/blacklist?

Is there a web interface or another non-tech way for users to be able to set/control things like the whitelist and blacklist remotely from a windows system? I dont want to try to teach end users how to get into their linux shell to make changes. I would spend all day fixing the things they screwe

[SAtalk] Re: What is the best way to train sa-learn?

[EMAIL PROTECTED] <[EMAIL PROTECTED]> wrote: > > I am wondering is there some where that has hundreds or thousands of > spam emails available for download. So that I can put them in a > directory and train SA? > > Or maybe I am headed in the wrong direction? I think you are headed in the wrong d

Re: [SAtalk] Forward mail to spam folder?

what mta are you running? have procmail? there's a million ways to do it. On Thursday, June 19, 2003, at 06:15 PM, Matthew Thomas wrote: Greetings, I recently got SpamAssassin 2.55 running with MIMEDefang. I'd like to temporarily (say over a weekend), send mail marked as spam to a spam mailb

Re: [SAtalk] Re: No X-Header

On Thu, 19 Jun 2003, Fuzzy Fox wrote: > Jack Gostl <[EMAIL PROTECTED]> wrote: > > > > Using Pine, I checked the message ID and scanned the syslog (which > > includes both spamd and sendmail entries) and located the message > > being handed off to procmail. It wasn't even slightly busy at that > >

[SAtalk] score - MSGID_OE_SPAM_4ZERO 4.3

Hello all, A gentleman I respect (Bruce Kushnick of teletruth, aka New Networks Institute, at newnetworks.com) puts out a newsletter via Outlook Express. He's getting caught by the above rule. Trivial to whitelist or mod the score, his valid concern is that he just purchased a new computer and is

Re: [SAtalk] Bayes learning on double-byte Email?

Genchev, Sergei said: > Does it make any sense to feed Chinese (mostly HTML) E-mail as spam/ham to > bayes? Would Bayes learn Chinese words as meaningless single-byte "words"? > Does it matter? Should I try to use UTF-8 locale? Any experiences would be > greatly appreciated, especially from mail

[SAtalk] Bayes learning on double-byte Email?

Hi everyone, Our company gets a lot of legitimate and not-so-legitimate E-mail in Chinese. Our people in Taiwan have quite a bit more spam slip through than our US and European offices. Having read a lot of warnings about using UTF-8 locale, I am running SA 2.55 with LANG=en_US on RH8. Does it

[SAtalk] Forward mail to spam folder?

Greetings, I recently got SpamAssassin 2.55 running with MIMEDefang. I'd like to temporarily (say over a weekend), send mail marked as spam to a spam mailbox so that I can more easily get sa-learn started. What would be the best way to do that? With an "if(spam_assassin_is_spam())" sort of cons

Re: [SAtalk] Installing SA on a redhat 9.0 box?

Try unset LANG or export LANG=C and then try the install. -- Thomas Cameron, RHCE, CNE, MCSE, MCT Cameron Technical Services, Inc. (512) 454-3200 Main http://www.camerontech.com - Original Message - From: "Bill" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Thursday, June 19, 2003

[SAtalk] question: HTML_WEB_BUGS

body Image tag with an ID code to identify you HTML_WEB_BUGS0.542 0.100 0.100 0.100 does that trap http://blank.gif?id=123123";> --- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An

Re: [SAtalk] Base-64 encoded HTML and text spam

Michael Bell wrote on Thu, 19 Jun 2003 09:59:34 -0700 (PDT): > Base64 is used quite legitimately by Outlook, Notes, and GW, in > international settings. > I partly disagree. You can use QP. I don't know how this works for Asian characters, but it works well for European languages. Not to mention

Re: [SAtalk] 'cryingrussians' spam

[EMAIL PROTECTED] wrote: > I've seen mentions of this type of spam that does not get tagged as such > with the default rules of spamassassin 2.55. > > Can anyone elaborate on techniques for blocking this type of spam? > Any recommendations would be of interest. Start adding global rules- I've fou

Re: [SAtalk] Question on XSPAM report in header.

Theo Van Dinter wrote on Thu, 19 Jun 2003 13:22:58 -0400: > I don't think we sort either, so the report order should be the order > of the test listing which should be the order in which the hits were made. > No, test order really is alphabetical, at least here. Kai -- Kai Schätzl, Berlin, G

Re: [SAtalk] Isn't there a "forged AOL" rule?

Mike Van Pelt wrote on Thu, 19 Jun 2003 10:30:34 -0700: > There used to be rules for "forged from {aol,hotmail,yahoo,etc.}" > didn't there? > These are *not* "forged AOL". There's nothing which prevents you sending with any email client via attbi.net using an email address from AOL. You could ju

Re: [SAtalk] DNSBL MTA rejection and more efficiency?

At 07:56 19/06/03 -1000, Warren Togami wrote: On Thu, 2003-06-19 at 02:57, Simon Byrnand wrote: > > Analyzing my spam from the last 3 months, I have had zero in my Inbox > > with RCVD_IN_SBL while about 50% in my SPAM box has RCVD_IN_SBL. > > > > http://www.spamhaus.org/sbl/ > >>From my own experie

Re: [SAtalk] What helper ap should I add on next?

On Thu, Jun 19, 2003 at 03:12:36PM -0400, Matt Kettler wrote: > Well, if you've got DCC and razor going, there's only 2 other possible > optional pieces left: > > 1) pyzor > > 2) install Net::DNS so the RBLs start running, unless you've already done > that. Thanks, it looks like it going to b

Re: [SAtalk] What helper ap should I add on next?

On Thu, Jun 19, 2003 at 01:58:58PM -0500, Tom Meunier wrote: > Is Pyzor not the only other one available anyway? There are also 'real time blacklists' (RBL's). I've looked at Pyzor, but the laptop I'm fetching my email on is too tight on disk space to install Python. Regards: Jim Ford -- Spam p

RE: [SAtalk] As seen on ...

> -Original Message- > From: Jonathan Vanasco [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 19, 2003 3:42 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: Re: [SAtalk] As seen on ... > > > > On Thursday, June 19, 2003, at 01:00 PM, Pierre Bacquet wrote: > > * some high

Re: [SAtalk] As seen on ...

using html comments? i don't think so. comments would more likely be in a scipting language and be // /* or # in any event, if there were between a couple of web designers -- the addresses would easily be whitelisted On Thursday, June 19, 2003, at 04:28 PM, Yorkshire Dave wrote: On Thu, 200

Re: [SAtalk] Sneaky Spam: Your PC's Hard Drive (fwd)

Hi Tony, On Thu, 19 Jun 2003, Tony Earnshaw wrote: > Tim wrote: > > > This guy sneaked past SpamAssassin 2.55. I only use the address for > > Yahoogroups subscriptions, so that must have been where the spammer got > > it. I did [not] "opt in" for anything. > > Good news! > > 1: *Certainly* d

Re: [SAtalk] As seen on ...

Hi Pierre, On Thu, 19 Jun 2003, Pierre Bacquet wrote: > Hello, > > I am receiving a lot of SPAM for HGH for whatever including the > following recurring sentences : > > As seen on NBC, CBS, and even Oprah ... > As reported on in the New England Journal of Medicine ... Try setting: required

Re: [SAtalk] As seen on ...

On Thu, 2003-06-19 at 20:41, Jonathan Vanasco wrote: > > having any html comments at all pretty much signifies spam > or normal email between a couple of web designers. -- Yorkshire Dave --- This SF.Net email is sponsored by: INetU Attenti

Re: [SAtalk] how much work to install and maintain

On Thu, 2003-06-19 at 19:25, Ralph Seichter wrote: > Yorkshire Dave <[EMAIL PROTECTED]> wrote: > > > I strongly suggest sticking with the MTA you know, for improved > > reliability and safety, at least until you're familiar with the > > other pieces in the puzzle. > > I admit you got a point here

Re: [SAtalk] SA's Bayes and AWL DB formats and MIMEDefang

On Thu, Jun 19, 2003 at 09:13:00PM +0300, Justin Mason wrote: > > Create initial DBs manually with SA's tools and MIMEDefang can't > > access them. Let MIMEDefang create them and SA's tools will > > create DBs of their own with DB_File. > > Yeah, there's a known bug open in the SpamAssassin bugzi

Re: [SAtalk] Question on usage before MTA...

Hello Matt, haven't used SA yet - so I didn't know there is more than one "database". Bye, Alexander > At 09:36 PM 6/19/2003 +0200, TeamHost Limited wrote: >>getting closer on this one ;-) >> >> > What database? the bayes database? Why bother? >>In order to have one one database which needs wor

Re: [SAtalk] As seen on ...

On Thursday, June 19, 2003, at 01:00 PM, Pierre Bacquet wrote: * some high scores when there are too many HTML comments (with meaningless contents) or very long ones made of consecutive chars without any space. having any html comments at all pretty much signifies spam do spamassassin rules wo

Re: [SAtalk] how much work to install and maintain

Tony Earnshaw <[EMAIL PROTECTED]> wrote: > Unix/Linux doesn't have "downtime;" that's a Gates euphamism. > In Unix/Linux it's called "uptime", and is measured in multiples > of 6 months. Hehehe... Now that's what I call a capital quote candidate! :-) -- Mit freundlichen Grüßen / Yours sincerely

Re: [SAtalk] DNSBL MTA rejection and more efficiency?

On Thu, 19 Jun 2003, Warren Togami wrote: > If everyone is in agreement that SBL is effective and safe, why is > spamassassin's default score for RCVD_IN_SBL so low? Based on analyzing a big body of spam and ham messages, the GA in it's finite wisdom adjusted the score of RCVD_IN_SBL to balance

Re: [SAtalk] Is there a way to filter mail that's forwarded?

Ok, let's try this again. I'm having a hard time replying to the list today. Grr. > > > I have this in there already but it is still not filtering. > Any > > > ideas on what I might have missed?? > > > > > > > Turn on logging in the .procmailrc file and see what it says? It's > > pro

Re: [SAtalk] What helper ap should I add on next?

At 07:11 PM 6/19/2003 +0100, Jim Ford wrote: Hi, Looks like I've got DCC working with SA OK - with Razor, another piece of the jigsaw! Any recommendations as to what remote anti-spam service I should add next? Well, if you've got DCC and razor going, there's only 2 other possible optional pieces

Re: [SAtalk] how much work to install and maintain

I have a question for the group. How much work is it to install and maintain a mailhost integrated with spam assassin for a company of about 40 employees. We have experience with sendmail and linux. My IT guy gives the following estimate. He's comparing this with the administrative cost for in

Re: [SAtalk] resolution of rbls using specific local name servers?

[EMAIL PROTECTED] writes: > but now what i want to do is run a local copy of an rbl on a local > name server, to reduce network latency and increase reliability, > and given the operational unpleasantness of microsoft dns on NT, > i don't want to put it there. In 2.60, RBL lookups are going to be

RE: [SAtalk] how much work to install and maintain

FWIW I was a total n00b to linux about 1 year ago. I am still not even what I would consider a power user. It took me far longer to get sendmail auth working than MS and SA. Now mind you my server is only serving 6 users and about 20 accounts on 3 domains. I'd say setup took me about 7 hours (sen

Re: [SAtalk] Question on usage before MTA...

At 09:36 PM 6/19/2003 +0200, TeamHost Limited wrote: getting closer on this one ;-) > What database? the bayes database? Why bother? In order to have one one database which needs work on but several servers / ISPs to use it. Why should there be xxx databases to work on?? I think it is easier to ha

RE: [SAtalk] Installing SA on a redhat 9.0 box?

[EMAIL PROTECTED] wrote: > Hi Bill, > >> I don't have the error message in front of me but it was complain >> about being able to find a program. Is there a FAQ for >> installing on RH? Any suggestions? > > I just had the same problem. This should help: > > unset LANG or set LANG=C and then star

[SAtalk] FW: *****SPAM***** Order Diet Pills, and other prescription medcations online with no prior prescription

This is an interesting one. If you look at the HTML source, you'll see a PGP signature in an all white font. Clearly this is an attack on SA and similar programs. Thankfully, they made the rest of the message spammy enough that it was still over the threshold by a wide margin. They also went to

RE: [SAtalk] What helper ap should I add on next?

Is Pyzor not the only other one available anyway? -tom > > -Original Message- > From: Jim Ford [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 19, 2003 1:12 PM > To: [EMAIL PROTECTED] > > Hi, > > Looks like I've got DCC working with SA OK - with Razor, > another piece of the jigsaw

RE: [SAtalk] Installing SA on a redhat 9.0 box?

Hi Bill, > I don't have the error message in front of me but it was complain > about being able to find a program. Is there a FAQ for > installing on RH? Any suggestions? I just had the same problem. This should help: unset LANG or set LANG=C and then start again. Jody -

RE: [SAtalk] Sneaky Spam: Your PC's Hard Drive (fwd)

> > > 2: 2.60 official is about to be released. > > -- > Tony Earnshaw Eh? Could you say that again? I like hearing THAT! -tom --- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting P

Re: [SAtalk] Question on usage before MTA...

Hi Matt, getting closer on this one ;-) > What database? the bayes database? Why bother? In order to have one one database which needs work on but several servers / ISPs to use it. Why should there be xxx databases to work on?? I think it is easier to have one and share it. (Not only with word f

Re: [SAtalk] As seen on ...

Pierre Bacquet wrote: I am receiving a lot of SPAM for HGH for whatever including the following recurring sentences : Software versions :-) -- Antoine Le Belge Working to get a life http://j-walk.com/blog/docs/conference.htm http://www.billy.demon.nl Mail: [EMAIL PROTECTED] -

Re: [SAtalk] how much work to install and maintain

Stephen Bannasch wrote: I have a question for the group. How much work is it to install and maintain a mailhost integrated with spam assassin for a company of about 40 employees. We have experience with sendmail and linux. My IT guy gives the following estimate. He's comparing this with the adm

Re: [SAtalk] DNSBL MTA rejection and more efficiency?

Warren Togami said: > If everyone is in agreement that SBL is effective and safe, why is > spamassassin's default score for RCVD_IN_SBL so low? A small number of measured FPs I think. --j. --- This SF.Net email is sponsored by: INetU Attenti

Re: [SAtalk] question about filtering w/ multiple domains

Sorry, ignore that last one. Replied to the wrong thread. --- This SF.Net email is sponsored by: INetU Attention Web Developers & Consultants: Become An INetU Hosting Partner. Refer Dedicated Servers. We Manage Them. You Get 10% Monthly Commis

Re: [SAtalk] question about filtering w/ multiple domains

> > I have this in there already but it is still not filtering. Any > > ideas on what I might have missed?? > > > > Turn on logging in the .procmailrc file and see what it says? It's > probably a typo in your receipe. > > Gerry > Ok, forgive me for being dumb, but how do I turn on loggin

Re: [SAtalk] Installing SA on a redhat 9.0 box?

On Thu, Jun 19, 2003 at 02:28:38PM -0400, Bill wrote: > I recently tried to upgrade a redhat 9 box from its factory installed > version to the latest and ran into a snag. I dont have the error message in > front of me but it was complain about being able to find a program. Is there > a FAQ for inst

Re: [SAtalk] Isn't there a "forged AOL" rule?

I'll second this one. I get about 250 spam e-mails a day that are forged aol.com. I also get about 150 a day from yahoo.com. This is for a domain of ~500 users. -Mark Mike Van Pelt wrote: The latest fraud attempt (The "BestBuy" credit card fishing expedition) was forged with an AOL return add

Re: [SAtalk] how much work to install and maintain

Yorkshire Dave <[EMAIL PROTECTED]> wrote: > I strongly suggest sticking with the MTA you know, for improved > reliability and safety, at least until you're familiar with the > other pieces in the puzzle. I admit you got a point here. However, if the ominous "IT guy" mentioned by Stephen Bannasch

[SAtalk] Installing SA on a redhat 9.0 box?

I recently tried to upgrade a redhat 9 box from its factory installed version to the latest and ran into a snag. I dont have the error message in front of me but it was complain about being able to find a program. Is there a FAQ for installing on RH? Any suggestions? TIA, Bill

Re: [SAtalk] Question on usage before MTA...

At 08:51 PM 6/19/2003 +0200, TeamHost Limited wrote: Hi Matt, thanks for the information. Is it possible to have mailservers share SA database? What database? the bayes database? Why bother? Is it possible with SA to - set an address to send all possible spam to? No, SA never sees the delivery e

RE: [SAtalk] how much work to install and maintain

Oh, I'm sure a bit of it is also 'not invented here' syndrome; if it was worth using, I'd have thought of it myself. Or maybe he's just real careful, wants to pay lots of attention to it. Or, he's hoping to scare people away. This, of course, is when you mention that you can have it done in a da

Re: [SAtalk] Base-64 encoded HTML and text spam

--On Thursday, June 19, 2003 1:54 PM +1000 Robin Whittle <[EMAIL PROTECTED]> wrote: Does anyone know of a single non-spam message which is sent this way? What software, other than that of spammers, would generate such messages? If these two questions draw a blank, then perhaps the score for th

Re: [SAtalk] SA's Bayes and AWL DB formats and MIMEDefang

Hannu Liljemark said: > Create initial DBs manually with SA's tools and MIMEDefang can't > access them. Let MIMEDefang create them and SA's tools will > create DBs of their own with DB_File. > > Any bright ideas? I'm posting this to MIMEDefang list as well, > before some gets the urge to point m

[SAtalk] What helper ap should I add on next?

Hi, Looks like I've got DCC working with SA OK - with Razor, another piece of the jigsaw! Any recommendations as to what remote anti-spam service I should add next? Regards: Jim Ford -- Spam poison - don't use! ---> [EMAIL PROTECTED] <--- --

Re: [SAtalk] how much work to install and maintain

* Yorkshire Dave <[EMAIL PROTECTED]>: > This always makes me cringe (and rant :)). Possibly good advice, but > with the worst timing. IT guy is hopefully about to familiarise himself > with new antivirus software and new anti-spam software, does he really > need to be learning how to drive a new M

Re: [SAtalk] Question on usage before MTA...

Hi Matt, thanks for the information. Is it possible to have mailservers share SA database? We would like to do a spam-list for several of our partner ISPs - will be approx 3 datacenters involved at the first step - including all mailservers there! Is there any possibility to use SA like that??

RE: [SAtalk] how much work to install and maintain

On Thu, 2003-06-19 at 18:18, Shayne Lebrun wrote: > Yes, he's probably padding his estimates. No, it's not evil or > unreasonable. It's far better to highball your time estimates, and not have > to use it all, then to lowball them, and come up against problems. That's some heavy padding going on

[SAtalk] postfix + filter=spamd + user preferences

I'm using spamd with a mysql user preferences system with postfix. Per user preferences are keyed by username, so mail to username@ works fine (ie: spamd looks up the prefs for said username). However we also give users email addresses of the form firstname.lastname@ and even though the postfix al

Re: [SAtalk] Sneaky Spam: Your PC's Hard Drive (fwd)

Tim wrote: This guy sneaked past SpamAssassin 2.55. I only use the address for Yahoogroups subscriptions, so that must have been where the spammer got it. I did [not] "opt in" for anything. Good news! 1: *Certainly* didn't do anything like sneak past 2.60-CVS. Got 12+, AFAIR; 2: 2.60 official

Re: [SAtalk] DNSBL MTA rejection and more efficiency?

On Thu, 2003-06-19 at 02:57, Simon Byrnand wrote: > > Analyzing my spam from the last 3 months, I have had zero in my Inbox > > with RCVD_IN_SBL while about 50% in my SPAM box has RCVD_IN_SBL. > > > > http://www.spamhaus.org/sbl/ > >>From my own experience above and their own description on this si

Re: [SAtalk] Question on XSPAM report in header.

On Thu, Jun 19, 2003 at 01:43:15PM -0400, Chris Santerre wrote: > bunch of rawbody rules. Does SA go thru my local.cf and run all the header > rules first, or just top down? If top down, is there an order that would > give better performance? SA goes through rule types seperately. in no specific

RE: [SAtalk] Question on XSPAM report in header.

> -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 19, 2003 1:23 PM > To: Chris Santerre > Cc: Spamassassin-Talk (E-mail) > Subject: Re: [SAtalk] Question on XSPAM report in header. > > > On Thu, Jun 19, 2003 at 01:04:17PM -0400, Chris Santerre

Re: [SAtalk] how much work to install and maintain

On Thu, 2003-06-19 at 16:57, Ralph Seichter wrote: > BTW, I strongly suggest using Postfix > instead of Sendmail for improved reliability and safety. This always makes me cringe (and rant :)). Possibly good advice, but with the worst timing. IT guy is hopefully about to

[SAtalk] resolution of rbls using specific local name servers?

does anyone else have a need for finer-grained control over rbl lookups? i have a complicated dns setup in one installation that runs sa on around 100k messages/day. it's a typical split dns setup with one name server for the publicly visible names (running bind 9), and another (microsoft on one

[SAtalk] Isn't there a "forged AOL" rule?

The latest fraud attempt (The "BestBuy" credit card fishing expedition) was forged with an AOL return address, even though it really came from attbi.com. Received: from attbi.com (12-229-6-15.client.attbi.com [12.229.6.15]) by mail1.lsil.com (8.12.8p1/8.12.8) with SMTP id h5IKnPRn009253

Re: [SAtalk] Question on usage before MTA...

At 12:55 PM 6/19/2003 +0200, TeamHost Limited wrote: Hello list. Is it possible to use spamassassin before it reaches the server?? We would like to implement it on a firewall system which is set in front of our servers. Would this be possible? Has anyone done that yet? What is needed? No, this is

Re: [SAtalk] Question on XSPAM report in header.

On Thu, Jun 19, 2003 at 01:04:17PM -0400, Chris Santerre wrote: > When the test are shown in the header, they are in alphabetical order. But > the Report doesn't seem to be in any order that I can figure out. How does > SA decide which rule description order listed in the report ? I don't think we

RE: [SAtalk] how much work to install and maintain

Yes, he's probably padding his estimates. No, it's not evil or unreasonable. It's far better to highball your time estimates, and not have to use it all, then to lowball them, and come up against problems. That way, on the one day that the mail server DOES blow up, and it takes him 8 hours to re

Re: [SAtalk] how much work to install and maintain

I'd say that if you are very new to linux but are really good with PC's and OS's, the initial setup time is pretty close. If you are already familiar with Linux, then the setup time would be much lower. I installed the Linux OS from scratch, installed and configured Postfix with SpamAssassin, and

[SAtalk] Question on XSPAM report in header.

When the test are shown in the header, they are in alphabetical order. But the Report doesn't seem to be in any order that I can figure out. How does SA decide which rule description order listed in the report ?   Just wondering :) Chris SanterreSystem Admin"A little nonsense now and then,

[SAtalk] As seen on ...

Hello, I am receiving a lot of SPAM for HGH for whatever including the following recurring sentences : As seen on NBC, CBS, and even Oprah ... As reported on in the New England Journal of Medicine ... Nowadays these spams or others include HTML random comments such as . These SPAM are rated un

Re: [SAtalk] how much work to install and maintain

On Thu, 2003-06-19 at 15:21, Stephen Bannasch wrote: > I have a question for the group. How much work is it to install and maintain a > mailhost integrated with spam assassin for a company of about 40 employees. We have > experience with sendmail and linux. I maintain 4 separate installations o

[SAtalk] Base-64 encoded HTML and text spam

Abigail - No. Sorry. You are incorrect. It's understandable that you are, but let me explain Base64 is used quite legitimately by Outlook, Notes, and GW, in international settings. Clearly you don't do much business with Eastern Europe or Asia - their mail is riddled with it (not just the spam yo

Re: [SAtalk] how much work to install and maintain

I just noticed you mentioned you're familiar with Linux. If that's were true in my case, the numbers below would be *much* smaller: I'm on Solaris, and build everything from scratch. I wouldn't need to do that (nor would I recommend it) on a Linux system. On Linux (which I'm currently using

Re: [SAtalk] DNSBL MTA rejection and more efficiency?

Warren Togami said: > If the SBL is generally safe to use for MTA-level rejection, are any of > the other DNSBL's safe to use in this way too? I would suggest the OPM blocklist is similarly effective. Definitely use OPM and SBL at SMTP connect time, if you can. http://opm.blitzed.org/info (I

Re: [SAtalk] how much work to install and maintain

Jonathan Nichols <[EMAIL PROTECTED]> wrote: > Worse - he works in the Star Trek Environment. > "It'll take 3 days, captain!" > *Scotty gets it done in half that* > "Scotty, you're a miracle worker!" > > It's all about setting expectations and then beating them, thus > ensuring your excellent employ

Re: [SAtalk] how much work to install and maintain

Stephen Bannasch <[EMAIL PROTECTED]> wrote: > I have a question for the group. How much work is it to install and > maintain a mailhost integrated with spam assassin for a company of > about 40 employees. We have experience with sendmail and linux. > > My IT guy gives the following estimate. He's

Re: [SAtalk] how much work to install and maintain

Stephen Bannasch <[EMAIL PROTECTED]> wrote: > I have a question for the group. How much work is it to install and > maintain a mailhost integrated with spam assassin for a company of > about 40 employees. We have experience with sendmail and linux. Disclaimer: I'm writing about my personal experi

Re: [SAtalk] how much work to install and maintain

For what it's worth, here's a run-down of my time to set up and maintain a mail server with Sendmail, SpamAssassin, and Trend's Interscan Antivirus for ~500 users, with the caveat that I've been doing this stuff for a while -- if I was a Sendmail or Unix novice, we'd be looking at a lot more ti

Re: [SAtalk] how much work to install and maintain

Scott Rothgaber wrote: Stephen Bannasch wrote: -- Time estimates for an open source solution: -- 60+ hours to setup and test sendmail/anti-virus/RBL/anti-spam software from source. -- 8 hours every month to verify that things are working and up to date -- 8 hours every month to upgrade software (

Re: [SAtalk] how much work to install and maintain

Stephen Bannasch wrote: -- Time estimates for an open source solution: -- 60+ hours to setup and test sendmail/anti-virus/RBL/anti-spam software from source. -- 8 hours every month to verify that things are working and up to date -- 8 hours every month to upgrade software (sendmail/RBL/virus/spam,

[SAtalk] question about filtering w/ multiple domains

using the directions from the url below, i configured postfix to filter mail with anomy sanitizer and spam assassin (following the link from spamassassin.org) http://advosys.ca/papers/postfix-filtering.html i set everything up with the machines normal hostname (dastardly.laits.utexas.edu), and

Re: [SAtalk] Is there a way to filter mail that's forwarded?

i do something similar to what you're trying, namely, fetchmail off of several accounts, and then spamassassinate it before delivering it to my final clean mailbox. so, it's fetchmail --> procmail --> mbox [snip] Yep, already doing something similar to that. Here's the recipe I'm usi

Re: [SAtalk] Is there a way to filter mail that's forwarded?

At 05:33 PM 6/18/03 +0100, Peter Campion-Bye wrote: > Hi all. Trying to use my home mail server to filter my dad's mail for > spam. What I'm doing is I'm pulling it in off of his netzero account (oh > yeah, spam heaven) and it's supposed to be filtered as it goes through my > server and of

  1   2   >