[SAtalk] BigEvil and Debian amavisd-new/SA?

2004-01-09 Thread Ralf Hildebrandt
Hi! I copied the BigEvil.cf to /etc/mail/spamassassin, restarted amavisd, but the BigEvil rules don't seem to be used. Is the path different in Debian? -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-45

Re: [SAtalk] postfix

2003-12-29 Thread Ralf Hildebrandt
y domain name. So every > email that is sent to my domain.edu is allowed to be relayed, > anything else is rejected. > > Does anybody know this ? This is what postfix does by default. Read the docs more carefully. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROT

Re: [SAtalk] filtering spam tagged email before hitting exchange 2000

2003-12-08 Thread Ralf Hildebrandt
o I was wondering > if there is any way to filter tagged email before it hits > Exchange 2000, something that filters it at at tehe same machine > where spamassassin lives. Use Postfix+amavisd-new+SpamAssassin -- and user D_DISCARD to drop the spam on the gateway. --

Re: [SAtalk] SMTP gateway/filter

2003-11-12 Thread Ralf Hildebrandt
to go. Adding SA via amavisd-new is -- after that -- just a small step. Using this we're blocking 13-14% ONLY by rejecting mail to non-existant users. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570

Re: [SAtalk] re: howto stop mails with from=<>

2003-08-04 Thread Ralf Hildebrandt
all emails will be sent again to > another mail server (exchange server for example) at the end, the email > gateway normally don't check if user account is existing or not. Ours does. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus Mitte

Re: [SAtalk] re: howto stop mails with from=<>

2003-08-04 Thread Ralf Hildebrandt
and they bounce to postmaster Why? -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a - Kommunikationsnetze - Fax. +49 (0)30-450 570-91

Re: [SAtalk] how to stop mails with from=<>

2003-08-02 Thread Ralf Hildebrandt
", loops can happen even with non-faulty servers. > Your users might get unhappy when they don't get mailbounces due > to that your mailserver drops error mails.. Which can happen cases > when the a mailserver accepts all incomming mail is accepted and > delivery to local mailb

Re: Re[2]: [SAtalk] how to stop mails with from=<>

2003-08-02 Thread Ralf Hildebrandt
* Robert Menschel <[EMAIL PROTECTED]>: > 1) I've checked my corpus, 3+ months of email, and I don't find any "<>" > in any From header. Do I misunderstand the situation? There is no <> in the from: header. We were talking about the envelope se

Re: [SAtalk] how to stop mails with from=<>

2003-08-02 Thread Ralf Hildebrandt
somewhere talked about it. > I forgot which one, but I've seen it pop up on the Postfix list a few > times. RFC821 -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a - K

Re: [SAtalk] Postfix error: Client host rejected: cannot find your hostname.

2003-06-28 Thread Ralf Hildebrandt
> He has his own Consulting house, and occasionally send his lesser > minions - Maurice, Xena and Yoda - to help, if he's busy. Consulting? To the dark side it leads. Easy! Tempting! -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite C

Re: [SAtalk] Ideas on dealing with Joe Job?

2003-06-26 Thread Ralf Hildebrandt
il.com" is the HELO here. > Jun 25 22:10:29 soyokaze postfix/smtpd[14120]: reject: RCPT from > cs9356-145.austin.rr.com[24.93.56.145]: 504 <2note1>: Helo command > rejected: need fully-qualified hostname; from=<[EMAIL PROTECTED]> > to=<[EMAIL PROTECTED]> Ditto here.

Re: [SAtalk] Ideas on dealing with Joe Job?

2003-06-26 Thread Ralf Hildebrandt
e options for most installations. I get > FPs, especially because of reject_unknown_hostname, Oh yes. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a - Kommunikationsnetze - Fa

Re: [SAtalk] Scanning outgoing mails for Spam

2003-06-26 Thread Ralf Hildebrandt
ssin to check for outgoing mails. Look into amavisd-new -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a - Kommunikationsnetze -

Re: [SAtalk] Server Load Average Increasing in Redhad 7.3

2003-06-20 Thread Ralf Hildebrandt
process and the server load back to normal > again. How many mails are analysed in parallel. Which MTA? How is SA integrated into the MTA? -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat

Re: [SAtalk] how much work to install and maintain

2003-06-19 Thread Ralf Hildebrandt
ces in the puzzle. Spamassassin works just fine with many different > MTA's, including the one IT guy is familiar with. Definitely. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a -

Re: [SAtalk] Spam Trap

2003-06-07 Thread Ralf Hildebrandt
* Ralf Hildebrandt <[EMAIL PROTECTED]>: > > Give this one a look: > > http://www.stearns.org/doc/spamassassin-setup.current.html#autoreporting > > I've got an inexplicable problem with that. One one machine it works > just fine, on my other box, i ge

Re: [SAtalk] Spam Trap

2003-06-05 Thread Ralf Hildebrandt
0 2003-06-03 15:34 user_prefs -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a - Kommunikationsnetze - Fax. +49 (0)30-450 570-916 AIM: ralfpostfix ---

Re: [SAtalk] SpamAssassin on a high load mail system

2003-05-31 Thread Ralf Hildebrandt
a single machine (1 gig ram, 1800 mHz single cpu). Postfix, avcheck + kavdaemon, SA and amavisd-new + uvscan -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a - Kommunikationsnetze -

Re: [SAtalk] question regarding spamc/spamd performance for large email services, and the spamc/spamd "protocol"

2002-12-13 Thread Ralf Hildebrandt
sites using spamassassin? We're using Postfix, since sendmail is too slow for us. http://www.stahl.bau.tu-bs.de/~hildeb/postfix/enterprise_spam_tagging.shtml This setup uses amavisd-new with SA and a virusscanner. -- Ralf Hildebrandt (Im Auftrag des Referat V a)

Re: [SAtalk] RBL slowness

2002-12-06 Thread Ralf Hildebrandt
and a lot of spamd processes get started because they are just waiting for > a response from an RBL. Don't you have a caching DNS on your box? -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450

Re: [SAtalk] bouncing as an alternative to /dev/null

2002-11-25 Thread Ralf Hildebrandt
; > extend it to 550 any high scoring spam (but I don't do that because I > > want to collect as much as I can ;-) > > Does anybody know how to do so using Postfix ? amavisd-new does that. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus Mit

Re: [SAtalk] Suggestion to Reduce False Positive

2002-11-25 Thread Ralf Hildebrandt
; This is for all mail in transit. Note: The above doesn't work, since the content_filter must be a transport, as defined in master.cf -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a

Re: [SAtalk] Suggestion to Reduce False Positive

2002-11-25 Thread Ralf Hildebrandt
* Tom Allison <[EMAIL PROTECTED]>: > How do you use procmail to filter outbound email? If you're using Postfix, you can use a content_filter that invokes procmail. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus Mitte

Re: [SAtalk] Distribute the load

2002-11-20 Thread Ralf Hildebrandt
* Mark M <[EMAIL PROTECTED]>: > > Is there a way to round robin, using spamc/spamd > > to have it use more then 1 spamd server Yes. Have two identical servers, make them both MX for the internal domain (same preference) and send mail to "internal.domain". -- Ralf

Re: [SAtalk] Slow performance with Perl!

2002-11-12 Thread Ralf Hildebrandt
l to run that many concurrent milter/SA processes. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a - Kommunikationsnetze - Fax. +49 (0)30-450 570-916 Windows has detected that a gnat h

Re: [SAtalk] Graph of caught spam

2002-11-08 Thread Ralf Hildebrandt
gt; Just press the upper graph to see it all. It graphs not only indiviual > spam, but also viruses, send, recieved, and bounces. Or one could use mailgraph: http://people.ee.ethz.ch/~dws/software/mailgraph/ -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROT

Re: [SAtalk] SA I18N: German body rules

2002-11-07 Thread Ralf Hildebrandt
lecting German spam or > anything related? Yes. Check the SA webpages! -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a - Kommunikationsnetze - Fax. +49 (0)30-450 570-916 Freed

Re: [SAtalk] Re: Need help interfacing with local RBL

2002-10-29 Thread Ralf Hildebrandt
On Tue, Oct 29, 2002 at 10:57:39AM -0600, Ken Causey wrote: > I failed to note in my original message that rbldns only listens for UDP > packets. Can SA handle rbl checks via UDP? Most DNS lookups are done via UDP... -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] C

Re: [SAtalk] Perspectives on (not) using SA

2002-10-29 Thread Ralf Hildebrandt
rl for each message, and I refuse to full-body-grep each message that comes in. (spamc/spamd and also it doesn't do a full body grep) -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V

Re: [SAtalk] how to reduce CPU useage. 70,000 users

2002-10-24 Thread Ralf Hildebrandt
think that only djbdns caches. Both > nameservers do.) They do, but djbdns is about 3-10 times faster at caching than BIND. Just an idea. -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a

Re: [SAtalk] how to reduce CPU useage. 70,000 users

2002-10-23 Thread Ralf Hildebrandt
e box help, with that large number of users? Another question is: What causes the load? I/O or CPU usage? -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Charite Campus MitteTel. +49 (0)30-450 570-155 Referat V a - Kommunikationsnetze -

Re: [SAtalk] Re: spam assassin test

2002-10-14 Thread Ralf Hildebrandt
On Tue, Oct 15, 2002 at 01:53:15AM -0500, Neil wrote: > Hey guys, > > I saw the incoming mail and it was tagged as a spam. What's the next thing > that I should do then? Filter it to another mailbox? -- Ralf Hildebrandt (Im Auftrag des Referat V a) [EMAIL PROTECTED] Cha