[SAtalk] Re: [SAdev] Bayes/AWL in MySQL

2003-12-16 Thread Kelsey Cummings
ng for many mounts to many severs, although I suppose the same could be done for SQL DSNs as well.) -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net, inc. System Administrator 2260 Apollo Way 707.522.1000 (Voice) Santa Rosa, CA 95407 707.547.2199 (Fax

Re: SpamCop pre-emptive listings (RE: [SAtalk] Offsetting rules?)

2003-11-06 Thread Kelsey Cummings
cking system like spamcops. SpamAssassin could use the probability to determine a score. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net, inc. System Administrator 2260 Apollo Way 707.522.1000 (Voice) Santa Rosa, CA 95407 707.547.2199 (Fax)

Re: [SAtalk] using spamd/spamc to reject SMTP connection

2003-10-31 Thread Kelsey Cummings
o start coding this > one up? Using mimedefang is probably the easiest way to cook this up, you can also get virus filtering too boot. :) -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net, inc. System Administrator 2260 Apollo Way 707.522.1000 (Voice)

Re: [SAtalk] Using MRTG to display highest connection counts

2003-10-30 Thread Kelsey Cummings
day. It's not MTRG, but cricket and ucd-snmpd but this is what we get: http://stats.sonic.net/private_cricket/grapher.cgi?target=%2Fservers%2Fspamcan I wrote this page up a LONG time ago, with instructions and a tarball of our code. http://www.sonic.net/~kgc/cricket/ -- Kelsey Cumming

Re: [SAtalk] Re: stats script

2003-10-30 Thread Kelsey Cummings
s and asking for > > a copy. > > It looks like it requires Posix - does that mean sendmail (or exim, > or...) users wouldn't be able to use it? > > (sorry, I'm just not familiar with Posix) Chris, that's Posix, as in the syscal spec. Not to be confused with Postfi

Re: [SAtalk] scan time rounded

2003-10-28 Thread Kelsey Cummings
> entry logs in the RedHat 8 servers is fine(eg. 0.2,0.5,0.8,1.2 > seconds,etc. ), but in the RedHat 9 box is always rounded (eg. 0.0, 1.0, > 2.0 seconds). > Any hints? perl -MCPAN -e'install("Time::HiRes");' -- Kelsey Cummings - [EMAIL PROTECTED]

Re: [SAtalk] Razor2 vs DCC vs Pyzor ?

2003-07-09 Thread Kelsey Cummings
or servers up (most of the time.) -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator2260 Apollo Way 707.522.1000 (Voice)Santa Rosa, CA 95407 707.547.2199 (Fax) http://www.sonic.net/ Fingerprint = 7F 59 43 1B 44 8A

Re: [SAtalk] USAGE - Mutt Bindings

2003-05-30 Thread Kelsey Cummings
e as SPAM! > macro index z "| sa-learn --single -D --spam" > macro index Z "| sa-learn --single -D --ham" mine are: macro index S "|sa-learn --single --spam" macro pager S "|sa-learn --single --spam" Funny thing is, I've never got a fp, a

Re: [SAtalk] sharing Bayes DB between relays

2003-05-29 Thread Kelsey Cummings
On Wed, May 28, 2003 at 01:25:49AM -0700, Kelsey Cummings wrote: > On Tue, May 27, 2003 at 09:21:34AM -0400, Adam Denenberg wrote: > > I have seen this pop up before but with no real answer. If you have 2 > > relay servers with equal MX costs sitting on the perimiter running SA,

Re: [SAtalk] sharing Bayes DB between relays

2003-05-28 Thread Kelsey Cummings
NFS safe. So, either rewrite it for SQL (and let us all know) or use NFS like we do. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator2260 Apollo Way 707.522.1000 (Voice)Santa Rosa, CA 95407 707.547.2199 (Fax)

Re: [SAtalk] SA burning CPU

2003-02-14 Thread Kelsey Cummings
iar with strace and it's output. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator2260 Apollo Way 707.522.1000 (Voice)Santa Rosa, CA 95407 707.547.2199 (Fax) http://www.sonic.net/ Fingerprint = 7F 59 43 1B

Re: [SAtalk] question regarding spamc/spamd performance for large email services, and the spamc/spamd "protocol"

2002-12-13 Thread Kelsey Cummings
a day. In order to keep performance up with all network tests enabled, each server has a local DCC and bind server which is authoritative for most of the RBLs in user. Alot of performance could be gained by disabling network tests and the AWL, etc. -- Kelsey Cummings - [EMAIL PROTECTED]

Re: [SAtalk] blacklists of spamfriendly urls. (and suggestion for new test, if it doesn't exist)

2002-12-05 Thread Kelsey Cummings
names used will likely differ a lot. This is certainly true. There are cases that it could help alot where their is persistent SPAM for less fly by night cases. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator2260 Apollo Way 707.5

Re: [SAtalk] qmail catch-22?

2002-12-03 Thread Kelsey Cummings
y (which really isn't possible anyway if I remember right,) would defeat its special purpose: to speed up SA by avoiding perl's 'expensive' execution. If you aren't concerned about this, you can just run spamassassin. -- Kelsey Cummings - [EMAIL PROTECTED] son

Re: [SAtalk] Is this a threat? [SA hate mail sent to me]

2002-11-15 Thread Kelsey Cummings
On Fri, Nov 15, 2002 at 07:51:31PM +, Justin Mason wrote: > What, Julian Haight? He's still running it ;) Maybe he was replaced by a body snatcher! Julian? Is that really you? -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator2260 Ap

[SAtalk] Is this a threat? [SA hate mail sent to me]

2002-11-15 Thread Kelsey Cummings
happened to the guy that used to run spamcop.com You can't justify what you are doing. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator2260 Apollo Way 707.522.1000 (Voice)Santa Rosa, CA 95407 707.547.2199 (Fax)

Re: [SAtalk] spamd -Q?

2002-10-31 Thread Kelsey Cummings
raw let me fix that.) > I run spamd with -d -q -x, but would like to add -a -H -u spamd. This > doesn't seem to work though in tandem with SQL pref lookup and razor. (or the AWL) -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator2260

Re: [SAtalk] Listen on all interrfaces?

2002-10-09 Thread Kelsey Cummings
configs enabled? (Only trying to gauge our performance with others that are using SA.) -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator2260 Apollo Way 707.522.1000 (Voice)Santa Rosa, CA 95407 707.547.2199 (Fax)

Re: [SAtalk] spamd log to mrtg

2002-10-09 Thread Kelsey Cummings
; http://thinkgeek.com/sf > ___ > Spamassassin-talk mailing list > [EMAIL PROTECTED] > https://lists.sourceforge.net/lists/listinfo/spamassassin-talk -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator22

Re: [SAtalk] Average Spam Size?

2002-06-06 Thread Kelsey Cummings
3 : 0.001008% < 69k : 1 : 0.000336% < 72k : 1 : 0.000336% < 79k : 2 : 0.000672% < 80k : 1 : 0.000336% < 83k : 2 : 0.000672% < 84k : 4 : 0.001344% < 85k : 1 : 0.000336% < 87k : 2 : 0.000672% < 88k : 1 : 0.000336% < 89k : 4 : 0.001344% < 90k : 2 : 0.000672%

Re: [SAtalk] How to check that rbl_checks are turned off

2002-05-20 Thread Kelsey Cummings
t; > > ___ > > Don't miss the 2002 Sprint PCS Application Developer's Conference > August 25-28 in Las Vegas -- http://devcon.sprintpcs.com/adp/index.cfm > > ___ &

[SAtalk] whitelist/blacklist score changes?

2002-05-15 Thread Kelsey Cummings
50_scores.cf # We never change the whitelist/blacklist scores score USER_IN_BLACKLIST 10.0 score USER_IN_WHITELIST -100.0 -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300 B Street, Ste 101 707.522.1000 (Voice)

Re: [SAtalk] Early DCC results

2002-05-02 Thread Kelsey Cummings
On Thu, May 02, 2002 at 09:41:56AM -0600, Charlie Watts wrote: > On Wed, 1 May 2002, Kelsey Cummings wrote: > > > Take a look at spamd times. I checked the razor list and didn't see any > > chatter about lagged servers but it sure looks like razor is suffering a > &

Re: [SAtalk] More SA site-wide stuff

2002-05-01 Thread Kelsey Cummings
/etc/procmailrc LOGABSTRACT=all LOGFILE=/var/log/prcmail.log VERBOSE=YES Then, tail -f /var/log/procmail.log It'll tell you more than you need to know, but should help you in traking down what is or isn't happening. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.n

Re: [SAtalk] Early DCC results

2002-05-01 Thread Kelsey Cummings
t lag. Anyone on this list had any experience setting up a DCC server? -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300 B Street, Ste 101 707.522.1000 (Voice)Santa Rosa, CA 95404 707.547.2199 (Fax) http://ww

Re: [SAtalk] Early DCC results

2002-05-01 Thread Kelsey Cummings
s are impressive: > > > > Total spam messages received: 109 > > Listed in DCC: 50 (46%) > > Listed in Razor: 41 (38%) > > Listed in both: 25 (23%) I'm seeing great hit rates too. So far so good! -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System

Re: [SAtalk] What is the cleanest mail server to use with SA ?

2002-04-30 Thread Kelsey Cummings
PENDDEF(`conf_sendmail_ENVDEF', `-DSTARTTLS') APPENDDEF(`conf_sendmail_LIBS', `-lssl -lcrypto') FEATURE(`local_procmail') MAILER(local) MAILER(smtp) MAILER(`procmail') -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300

Re: [SAtalk] [PATCH] DCC Support for SA

2002-04-29 Thread Kelsey Cummings
247,7 @@ sub dcc_lookup { my ($self, $fulltext) = @_; my $response = undef; - my %count = { }; + my %count; $count{body} = 0; $count{fuz1} = 0; @@ -259,8 +259,13 @@ } eval { -require IPC::Open2; +use IPC::Open2; +use Symbol; + my ($dccin, $dccout, $pid); + +$dcci

Re: [SAtalk] Magnitude of problem

2002-04-21 Thread Kelsey Cummings
On Sun, Apr 21, 2002 at 06:00:50PM -0400, Eric S. Johansson wrote: > At 02:30 PM 4/21/2002 -0700, Kelsey Cummings wrote: > >On Sun, Apr 21, 2002 at 05:06:55PM -0400, Eric S. Johansson wrote: > > > So, any ideas on: > > > > > > number o

Re: [SAtalk] Magnitude of problem

2002-04-21 Thread Kelsey Cummings
umber of people receiving Spam everyday NFC > total population of e-mail users NFC but I'm guessing it's the same # as above. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300 B Street, Ste 101 707.522.1000 (Voice)

Re: [SAtalk] SA died sometime this morning

2002-04-15 Thread Kelsey Cummings
o do something like mv nohup.out nohup.`date +%s` This assumes gnu date. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300 B Street, Ste 101 707.522.1000 (Voice)Santa Rosa, CA 95404 707.547.2199 (Fax) htt

Re: [SAtalk] ADV prefix not firing properly

2002-03-21 Thread Kelsey Cummings
f the likelyhood that they are going to match from that point on, short circuiting if the threshold is exceeded. Of course, this has already been discussed. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300 B Street, Ste 101 707.522.1000 (Voi

Re: [SAtalk] SUBJ_ALL_CAPS regex broken

2002-03-18 Thread Kelsey Cummings
al code is most likely better. > Kelsey Cummings wrote: > > > Date: Fri, 15 Mar 2002 10:13:19 -0800 > > From: Kelsey Cummings <[EMAIL PROTECTED]> > > To: Rob McMillin <[EMAIL PROTECTED]> > > Cc: [EMAIL PROTECTED] > > Subject: Re: [SAtalk] SUBJ_A

Re: [SAtalk] SUBJ_ALL_CAPS regex broken

2002-03-15 Thread Kelsey Cummings
> /^(?:[A-Z]|[^A-Za-z])+$/ Is one of these fixes going to find it's way into CVS soon? -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300 B Street, Ste 101 707.522.1000 (Voice)Santa Rosa, CA 95404 707.547.2199 (Fax)

Re: [SAtalk] SA should block spam that matches government rules

2002-03-11 Thread Kelsey Cummings
ind a single occurrance of "ADV" or > "ADLT" in the subject. I found 5 matches for "Adult" and 2 matches for > "Advertisement", though. We've been uh, 'filtering', mail that matches these rules for a long time, the patterns that we&#x

Re: [SAtalk] Good news for BSD SA-ers

2002-03-06 Thread Kelsey Cummings
a while now, and honestly haven't run into a single problem (apart from some minor build probs early on.) They've been processing a relatively low volume of email (2.5k messages a day -- my email and sonic's spam trolls) and I haven't had a failure in the system. --

Re: [SAtalk] Distributed Checksum Clearinghouse

2002-03-05 Thread Kelsey Cummings
t on those took > over a second. Way too long. Matt - could you quantify your test a bit? What kind of cpu was used to process the benchmark? I've heard some rumor to the affect that there are a few optimized searching algorithms for nilsimsa that have appeared that could resolve the obviou

Re: [SAtalk] Distributed Checksum Clearinghouse

2002-03-04 Thread Kelsey Cummings
information.) At one point, long ago, Vipul had said something to that affect but I haven't heard from him for a long time. (This was about 6 months or more previous to the /. article.) -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300 B Stre

Re: [SAtalk] SA research

2002-01-30 Thread Kelsey Cummings
the files. We use NIS and have a pair of clustered NetApps; file based config just makes sense for us. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300 B Street, Ste 101 707.522.1000 (Voice)Santa Rosa, CA 95404 707.547.2199

Re: [SAtalk] SA research

2002-01-30 Thread Kelsey Cummings
with my schedual how long it will take. -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator300 B Street, Ste 101 707.522.1000 (Voice)Santa Rosa, CA 95404 707.547.2199 (Fax) http://www.sonic.net/ Fingerprint = 7F

[SAtalk] Subject bug in SA 2.0?

2002-01-24 Thread Kelsey Cummings
SPAM_PHRASE,RAZOR_CHECK,SPAM_PHRASES_020,RCVD_IN_RELAYS_ORDB_ORG version=2.0 X-Spam-Flag: YES X-Spam-Checker-Version: SpamAssassin 2.0 (devel $Id: SpamAssassin.pm,v 1.53 2002/01/07 05:06:59 jmason Exp $) -- Kelsey Cummings - [EMAIL PROTECTED] sonic.net System Administrator3