SpamAssassin && postfix && mysql virtual users && courier-imap help

2004-09-19 Thread Michael T. Halligan
Greetings, I'm testing a new mailserverr now based on the HOWTO at workaround.org/articles/ispmail-sarge/ and have a couple of remaining issues before I can actually deploy this. 1. How do I use whitelists in a configuration where users don't have their own UID/GID since everything is owned by th

Re: Delivery failure (users@spamassassin.apache.org)

2004-09-19 Thread Will Yardley
Anyone else seeing this junk when sending messages to the list? gbierman at mochamail.com, apparently the address at this site subscribed to the SA users list - please tell the postmaster of your system to fix this. On Sun, Sep 19, 2004 at 12:03:01PM -0700, [EMAIL PROTECTED] wrote: > users@spama

Re: AWL DoS?

2004-09-19 Thread Will Yardley
On Sun, Sep 19, 2004 at 08:08:24AM -0700, Bill Landry wrote: > From: "Raymond Dijkxhoorn" <[EMAIL PROTECTED]> > > > Much better to simply not spam filter critical e-mail accounts > > > like postmaster/abuse/support/sales/etc. > > With around 35.000-70.000 mails to those above boxes daily thats no

Re: After starting spamd, spamc fails to connect to it and spamd stops running!?

2004-09-19 Thread hug
After all that it seems my problems were related to having changed versions of perl and spamd's inability to find the new libraries on it's path. Many thanks all for your help! hugh - Original Message - From: "Chris Santerre" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: "Spamassassin

RE: SPF Fails on SA 3.0rc5 because of lack of HELO ?

2004-09-19 Thread Avi Shatz
The only thing I wanted to prove with this is that line, that is created by my local mail server (the last hop, and the most important one for SPF), does indeed contains the EHLO string that isn't detected correctly by SA 3.0rc5. And since nothing is special about my own MS SMTPSVC (Win2k3 SMTP

Re: AWL DoS?

2004-09-19 Thread Raymond Dijkxhoorn
Hi! Much better to simply not spam filter critical e-mail accounts like postmaster/abuse/support/sales/etc. With around 35.000-70.000 mails to those above boxes daily thats not really do-able... Do you see a lot of spam to these addresses? The reason I'm asking is because we don't. To bad there

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: "Raymond Dijkxhoorn" <[EMAIL PROTECTED]> > > Probably unrealistic to expect customers to know how to "bounce" a message. > > Yes. Exactly my point. > > > Much better to simply not spam filter critical e-mail accounts like > > postmaster/abuse/support/sales/etc.

Re: AWL DoS?

2004-09-19 Thread Raymond Dijkxhoorn
Hi! This is why people are encouraged to _bounce_ the original message, so the sender email address is still the original one, and then won't hurt the customer. http://www.stearns.org/doc/spamassassin-setup.current.html#autoreporting http://www.stearns.org/doc/spamassassin-setup.current.html#restri

Re: AWL DoS?

2004-09-19 Thread Bill Landry
> - Original Message - > From: "William Stearns" <[EMAIL PROTECTED]> > > > Good afternoon, Raymond, all, > > (Raymond, you probably already know this, but I wanted to quickly > > cover it for other people that may also be considering whether or not to > > use AWL). > > > [SNIP] > > That's

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: "William Stearns" <[EMAIL PROTECTED]> > Good afternoon, Raymond, all, > (Raymond, you probably already know this, but I wanted to quickly > cover it for other people that may also be considering whether or not to > use AWL). > [SNIP] > That's a different issue.

Re: AWL DoS?

2004-09-19 Thread Raymond Dijkxhoorn
Hi! We turned off AWL, we had a customer that forwarded two spam messages to our helpdesk, the third normal message never came in, since his AWL beat him... That's a different issue. If the customer used _forward_ rather than _bounce_, SA treats the entire message as coming from that emai

Re: AWL DoS?

2004-09-19 Thread William Stearns
Good afternoon, Raymond, all, (Raymond, you probably already know this, but I wanted to quickly cover it for other people that may also be considering whether or not to use AWL). On Sun, 19 Sep 2004, Raymond Dijkxhoorn wrote: > >> I gotta think this isn't gonna happen... but anyone know i

Re: AWL DoS?

2004-09-19 Thread Raymond Dijkxhoorn
Hi! We turned off AWL, we had a customer that forwarded two spam messages to our helpdesk, the third normal message never came in, since his AWL beat him... Probably should not be spam filtering postmaster/abuse/support e-mails. Probably not, but at the moment its about the only way to get a norma

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: "Raymond Dijkxhoorn" <[EMAIL PROTECTED]> > We turned off AWL, we had a customer that forwarded two spam messages to > our helpdesk, the third normal message never came in, since his AWL beat > him... Probably should not be spam filtering postmaster/abuse/supp

Re: SPF Fails on SA 3.0rc5 because of lack of HELO ?

2004-09-19 Thread Kai Schaetzl
Avi Shatz wrote on Sun, 19 Sep 2004 02:52:49 +0300: > telnet mailserver.localmta.org 25 > ehlo blabla > What do you want to prove with this? What needs to happen is that [66.111.4.30] sends a HELO with an FQDN when it connects to another SMTP. Your example above doesn't prove this, it just prov

Re: Memory usage question

2004-09-19 Thread Kai Schaetzl
Matt Kettler wrote on Thu, 16 Sep 2004 21:43:01 -0400: > Chris S reported his spamd swelling to 45mb with a huge version of > bigevil.cf he was testing. > The latest bigevil.cf needs about 40 - 50 MB *alone*! Together with several SARE rules our spamd processes were around 90 MB lately. That's

Re: AWL DoS?

2004-09-19 Thread Raymond Dijkxhoorn
Hi! I gotta think this isn't gonna happen... but anyone know if it can? If so, I'm not going to enable AWL on my server. You're asking the right questions. To the best of my knowledge, this has already been addressed. What goes in the AWL isn't just the raw email address, it's the emai

Re: AWL DoS?

2004-09-19 Thread tBB
On Sat, 18 Sep 2004 20:05:29 -0500 "Jason J. Ellingson" <[EMAIL PROTECTED]> wrote: > I'm sure someone thought of this, but I don't see it asked before... so... > = > 1) Person X regularly gets emails from Person Y (good friends) > > 2) Person Z is a bad guy... so he sends Person X a GTUBE ema

Re: spam@uce.gov bouncing?

2004-09-19 Thread Ed Kasky
Not mine and I sent about 25 or so about an hour ago. I have seen it once or twice in the past but it was temporary. I attributed it to a busy or down server. On Sat, 18 Sep 2004, Roger E. Rustad, Jr. wrote: > Is anyone else's [EMAIL PROTECTED] e-mail bouncing? > > All the mail I've forwarded

Re: AWL DoS?

2004-09-19 Thread Will Yardley
On Sat, Sep 18, 2004 at 08:05:29PM -0500, Jason J. Ellingson wrote: > I'm sure someone thought of this, but I don't see it asked before... so... > = > 1) Person X regularly gets emails from Person Y (good friends) > 2) Person Z is a bad guy... so he sends Person X a GTUBE email with a > faked

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: "Jason J. Ellingson" <[EMAIL PROTECTED]> > Okay, follow-up question: > > Where does SpamAssassin get the IP? Is it the oldest IP in the received > headers (low), or the most recent (top)? > > If it is oldest (assuming originating IP), then that could be faked e

spam@uce.gov bouncing?

2004-09-19 Thread Roger E. Rustad, Jr.
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Is anyone else's [EMAIL PROTECTED] e-mail bouncing? All the mail I've forwarded there over the last day or so has been getting returned with Delay reason: Connection refused Roger -BEGIN PGP SIGNATURE- Version: PGP 7.1.1 iQA/AwUBQU0rb+

RE: AWL DoS?

2004-09-19 Thread Jason J. Ellingson
Okay, follow-up question: Where does SpamAssassin get the IP? Is it the oldest IP in the received headers (low), or the most recent (top)? If it is oldest (assuming originating IP), then that could be faked easily enough. If it is top, then what does it do if there is no IP (as many SpamAssass

Re: AWL DoS?

2004-09-19 Thread William Stearns
Good evening, Jason, On Sat, 18 Sep 2004, Jason J. Ellingson wrote: > I'm sure someone thought of this, but I don't see it asked before... so... > = > 1) Person X regularly gets emails from Person Y (good friends) > > 2) Person Z is a bad guy... so he sends Person X a GTUBE email with a fake

Re: AWL DoS?

2004-09-19 Thread Bill Landry
- Original Message - From: "Jason J. Ellingson" <[EMAIL PROTECTED]> > I'm sure someone thought of this, but I don't see it asked before... so... > = > 1) Person X regularly gets emails from Person Y (good friends) > > 2) Person Z is a bad guy... so he sends Person X a GTUBE email with

Re: Two logs for each daemon?

2004-09-19 Thread Mike Burger
YOu might want to direct this at a Samba list. On Sat, 18 Sep 2004, Ed Kasky wrote: > I just upgraded to 3.0.7-1 and noticed an slight oddity in the logs now beig > created. In my smb.conf I have: > > log level = 2 > log file = /var/log/samba/%m.log > > Since upgrading I now get two logs for

Re: AWL DoS?

2004-09-19 Thread Jim Sabatke
Jason J. Ellingson wrote: I'm sure someone thought of this, but I don't see it asked before... so... = 1) Person X regularly gets emails from Person Y (good friends) 2) Person Z is a bad guy... so he sends Person X a GTUBE email with a faked FROM: address of Person Y. 3) Now, GTUBE scores a 100

AWL DoS?

2004-09-19 Thread Jason J. Ellingson
I'm sure someone thought of this, but I don't see it asked before... so... = 1) Person X regularly gets emails from Person Y (good friends) 2) Person Z is a bad guy... so he sends Person X a GTUBE email with a faked FROM: address of Person Y. 3) Now, GTUBE scores a 1000 points, and gets set t