email builder wrote:
<[EMAIL PROTECTED]> said:
Normal system load averages 0.15, with about 5 spamd processes running.
Peak load varies, very occasionally going above 8, with around 30 spamd
processes at once. This system has been processing about 20,000 messages
per day lately.
Thanks for the g
On 10/22/2004 11:32 PM +0200, Kai Schaetzl wrote:
For about 48 hours I see an increase in attempts to unload spam to our
clients. Many of the connects seem to be endless = they keep the sendmail
process with almost no data open until I kill them after a while. This
happens on several machines, s
Kai Schaetzl wrote:
> J Thomas Hancock wrote on Fri, 22 Oct 2004 16:20:12 -0500:
>
>> We want our users to set their own custom delete levels and marking
>> levels.
>>
>
> Deleting messages doesn't make much sense. You want to quarantine
> them and reject as much as possible at MTA level. But delet
Kai Schaetzl wrote:
> For about 48 hours I see an increase in attempts to unload spam to our
> clients.
For the past 12 months I have seen endless attempts to send mail to invalid
addresses. I get 1,000 per hour, every hour for every day of the working
week. Off hours is slightly lower, during p
Hi All
(I am also going to send this email to qmail-scanner's mailing list)
I get conflicting report in my spam score here. I am running
qmail-scanner-1.22+st
The spamd log shows
@400041797c9113d8cd8c 2004-10-22 21:32:55 [13829] i: checking message
<[EMAIL PROTECTED]> for [EMAIL PROTECTED]
J Thomas Hancock wrote on Fri, 22 Oct 2004 16:20:12 -0500:
> We want our users to set their own custom delete levels and marking levels.
>
Deleting messages doesn't make much sense. You want to quarantine them and
reject as much as possible at MTA level. But deletion will always delete
false po
> <[EMAIL PROTECTED]> said:
> > > We are using Courier-MTA, which includes pop, imap, and webmail in a
> > > single package. ClamAV is called from amavisd-new and SA is called
> > > (as spamc/spamd) by maildrop prior to delivery.
> >
> > What kind of traffic do you handle? What is your typical s
For about 48 hours I see an increase in attempts to unload spam to our
clients. Many of the connects seem to be endless = they keep the sendmail
process with almost no data open until I kill them after a while. This
happens on several machines, sometimes looking a bit like a "wave" and
many of
At 04:32 PM 10/22/2004, Robert Bartlett wrote:
Thanks everyone for the replies. Is there a good known site to learn more
about maildrop scripts?
Other than the docs on the website, I know not much about maildrop.
http://www.courier-mta.org/maildrop/?maildropfilter.html
It's a very weak start. Hopef
J Thomas Hancock said:
> We want our users to set their own custom delete levels and marking
> levels.
> The best way I have found for us to store those settings is using SA's
> MySQL
> capabilities. I looked at MailScanner, amavisd-new, and now Mimedefang.
> I
> could not see where those utilit
> > All I have to say is, why are you going through so much trouble?
>
> He likes pain?
We want our users to set their own custom delete levels and marking levels.
The best way I have found for us to store those settings is using SA's MySQL
capabilities. I looked at MailScanner, amavisd-new, and
On Fri, 22 Oct 2004 12:06:31 -0700 (PDT), "email builder"
<[EMAIL PROTECTED]> said:
> > We are using Courier-MTA, which includes pop, imap, and webmail in a
> > single package. ClamAV is called from amavisd-new and SA is called
> > (as spamc/spamd) by maildrop prior to delivery.
>
> What kind of
Thanks a bunch, this helps, I'll let you know how it goes...
-Jim
-Original Message-
From: kaiser suse [mailto:[EMAIL PROTECTED]
Sent: Friday, October 22, 2004 3:00 PM
To: users@spamassassin.apache.org
Subject: RE: Dcc check failed...
Upwood, Jim said:
> I'm running Mandrake 10, SA3.X
From: Robert Bartlett [mailto:[EMAIL PROTECTED]
>
> Thanks everyone for the replies. Is there a good known site
> to learn more about maildrop scripts?
I would suggest just reading the maildropfilter man page. There is an
online version here:
http://www.courier-mta.org/maildropfilter.html
Bowi
* Matt Kettler <[EMAIL PROTECTED]>:
> All I have to say is, why are you going through so much trouble?
He likes pain?
> Use a decent MTA integration tool and you can delete high-scoring messages,
> and tag all the rest in one pass through SA. Mimedefang, MailScanner and
> lots of other tools
Thanks everyone for the replies. Is there a good known site to learn more
about maildrop scripts?
Thanks
Robert
> At 01:48 PM 10/22/2004, Robert Bartlett wrote:
>>Currently I use a maildrop script that checks the score given to the
>> email
>>by SA and if it reaches a certain number or greater it
At 04:24 PM 10/22/2004, J Thomas Hancock wrote:
I am configuring 1 PC with one physical Ethernet adapter and 2 IP
addresses as an email proxy server. The server accepts mail on the
interface 1, runs it through SA, then forwards it to interface
2. Interface 2 accepts the mail, runs it through S
At 01:48 PM 10/22/2004, Robert Bartlett wrote:
Currently I use a maildrop script that checks the score given to the email
by SA and if it reaches a certain number or greater it gets sent to a
different mailbox.
My question is could you do that instead in SA local.cf
Others have pointed out that mai
* J Thomas Hancock <[EMAIL PROTECTED]>:
> Here is my last attempt at getting this overly complicated
> Postfix/Spamassassin install working.
>
>
>
> I am configuring 1 PC with one physical Ethernet adapter and 2 IP addresses
> as an email proxy server. The server accepts mail on the interface
Here is my last attempt at getting this overly complicated
Postfix/Spamassassin install working.
I am configuring 1 PC with one physical Ethernet adapter and
2 IP addresses as an email proxy server. The server accepts mail on the
interface 1, runs it through SA, then forwards it to int
From: email builder [mailto:[EMAIL PROTECTED]
>
> > We are using Courier-MTA, which includes pop, imap, and webmail
> > in a single package. ClamAV is called from amavisd-new and SA is
> > called (as spamc/spamd) by maildrop prior to delivery.
>
> What kind of traffic do you handle? What is you
Currently I use a maildrop script that checks the score given to the email
by SA and if it reaches a certain number or greater it gets sent to a
different mailbox.
My question is could you do that instead in SA local.cf and if so which
one would be better in doing this? Should I keep the maildrop s
email builder wrote:
We currently use MailScanner/ClamAV/sendmail on our Gateway with three
toasters running qmail/vpopmail calling SA from a script added to the
users .qmail file. All Maildirs are NFS mounted as are qmail control files.
NFS 4 by chance? Do you have any opinions on its security
email builder wrote:
We currently use MailScanner/ClamAV/sendmail on our Gateway with three
toasters running qmail/vpopmail calling SA from a script added to the
users .qmail file. All Maildirs are NFS mounted as are qmail control files.
NFS 4 by chance? Do you have any opinions on its security
On Fri, Oct 22, 2004 at 02:32:32PM -0400, Upwood, Jim wrote:
> I'm running Mandrake 10, SA3.Xdev, I never "set" the open file value,
> where can I set this, what is the syntax, spamd is kicked off by a
> regular startup script...
This is more of a linux thing and not a SA thing, but its related.
> We currently use MailScanner/ClamAV/sendmail on our Gateway with three
> toasters running qmail/vpopmail calling SA from a script added to the
> users .qmail file. All Maildirs are NFS mounted as are qmail control files.
NFS 4 by chance? Do you have any opinions on its security and
speed/per
> We are using Courier-MTA, which includes pop, imap, and webmail in a
> single package. ClamAV is called from amavisd-new and SA is called
> (as spamc/spamd) by maildrop prior to delivery.
What kind of traffic do you handle? What is your typical system load? How
much CPU does
spamd take? Wha
Quoting Matt Kettler <[EMAIL PROTECTED]>:
> However, are Mozilla .mbx files are in mbox or mbx format ? I know in 1.0
> they were mbox, but have they since changed to mbx, or did they just
> shorten the filename?
I think they just shortened the extension. It seems as though the files are
still i
From: Matt Kettler [mailto:[EMAIL PROTECTED]
> At 02:15 PM 10/22/2004, Theo Van Dinter wrote:
> >Just to clarify a little.
> >
> >There's --mbox, for mbox formatted files, --mbx for mbx formatted
> >files, --file for a single message, and --dir for a directory of
> >files with 1 message per file.
>
Upwood, Jim said:
> I'm running Mandrake 10, SA3.Xdev, I never "set" the open file value,
> where can I set this, what is the syntax, spamd is kicked off by a
> regular startup script...
I don't use mandrake, but the linux distros I'm aware of set those things
dynamically based on your system re
> Currently I use a maildrop script that checks the score given to the email
> by SA and if it reaches a certain number or greater it gets sent to a
> different mailbox.
>
> My question is could you do that instead in SA local.cf and if so which
> one would be better in doing this? Should I keep t
On Fri, Oct 22, 2004 at 02:41:35PM -0400, Matt Kettler wrote:
> However, are Mozilla .mbx files are in mbox or mbx format ? I know in 1.0
> they were mbox, but have they since changed to mbx, or did they just
> shorten the filename?
I have no idea. mbx is the University of Washington's format,
At 02:15 PM 10/22/2004, Theo Van Dinter wrote:
Just to clarify a little.
There's --mbox, for mbox formatted files, --mbx for mbx formatted files,
--file for a single message, and --dir for a directory of files with 1
message per file.
The code will assume --file or --dir as appropriate in most plac
I'm running Mandrake 10, SA3.Xdev, I never "set" the open file value,
where can I set this, what is the syntax, spamd is kicked off by a
regular startup script...
-Jim
-Original Message-
From: Michael Barnes [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 21, 2004 5:12 PM
To: Upwood, J
On Fri, Oct 22, 2004 at 09:08:15AM -0400, Matt Kettler wrote:
> Yes, sa-learn accepts mail in mbox format with the --mbox flag.
>
> Without the --mbox flag, it expects files to be rfc.822 format, and
> directories to be maildir format.
Just to clarify a little.
There's --mbox, for mbox formatte
At 01:08 PM 10/22/2004, Daniel A. de Araujo wrote:
I am having some problems when the users access some pages that has the
"send this article to a friend" resource, because the message arrives with
the sender´s address that is filled in the page and not with a specific
account.
So its impossible
"Daniel A. de Araujo" wrote:
> I am having some problems when the users access some pages that has
> the "send this article to a friend" resource, because the message
> arrives with the sender´s address that is filled in the page and not
> with a specific account.
> So its impossible to set the add
Currently I use a maildrop script that checks the score given to the email
by SA and if it reaches a certain number or greater it gets sent to a
different mailbox.
My question is could you do that instead in SA local.cf and if so which
one would be better in doing this? Should I keep the maildrop
Hi
guys,
I am having some
problems when the users access some pages that has the "send this article to a
friend" resource, because the message arrives with the sender´s address
that is filled in the page and not with a specific account.
So its impossible to
set the address as a white-li
On Fri, 22 Oct 2004, Sam Kalet wrote:
> I see you mention check_local was formerly available at
> www.digitalanswers.org.
> Is this code officially no longer available? I've noticed the domain is
> missing from DNS over the past few days.
>
The last update of this software known to me was on Ju
Folks:
I recently enabled rbl checks in my spamassassin configuration ...
skip_rbl_checks 0
After I did this, I noticed the following error showing up in my log ...
Oct 22 09:31:02 linux spamd[13465]: error: Insecure dependency in eval
while running setuid at
/usr/lib/perl5/site_perl/5.8.
Sam Kalet wrote:
I observed with miltrassassin (Revision: 1.14 Date: 2003/05/28
18:43:47)
from check_local.5.6.tar.gz formerly available at
http://www.digitalanswers.org/check_local/check_local.5.6.tar.gz
the following bug:
I see you mention check_local was formerly available at
www.digitalanswer
At 06:25 PM 10/3/2004, Asif Iqbal wrote:
I am not sure if it is a bug. Here is what I am experiencing.
The /etc/mail/spamassassin folder is 775 mode and spamd process owner is
in the part of the group of the spamassassin folder
But I had to change the owner of the bayes_* to the owner of the spamd
> I observed with miltrassassin (Revision: 1.14 Date: 2003/05/28 18:43:47)
> from check_local.5.6.tar.gz formerly available at
> http://www.digitalanswers.org/check_local/check_local.5.6.tar.gz
> the following bug:
I see you mention check_local was formerly available at www.digitalanswers.org.
Is
On Thu, 21 Oct 2004, Jeffrey Lee wrote:
The email server I am using now has some unwelcomed price changes
happening soon and I would like to switch to another server. I
would like something that works well with SA and possibly ClamAV.
The server would require pop, imap, and webmail. If someone coul
At 08:43 AM 10/22/2004 -0500, Chris Barnes wrote:
If I simply copy sa-learn from box1 to box2, can the users run it
without having to install the entire SA package on box2?
No. sa-learn requires most of the full SA package to run.
Sa-learn is mostly just a perl-script wrapper that winds up instanti
On Fri, Oct 22, 2004 at 08:43:10AM -0500, Chris Barnes wrote:
> I have what might be a silly question.
> We have 2 linux boxes:
>
> 1) server (ie. only sysadmins can logon directly). It is the mail
> server (as well as apache, etc). It has SA installed. The raid5 disk
> holding the user file
> I have what might be a silly question.
> We have 2 linux boxes:
>
> 1) server (ie. only sysadmins can logon directly). It is the mail
> server (as well as apache, etc). It has SA installed. The raid5 disk
> holding the user files are connected to this box.
>
> 2) interactive user box - us
I have what might be a silly question.
We have 2 linux boxes:
1) server (ie. only sysadmins can logon directly). It is the mail
server (as well as apache, etc). It has SA installed. The raid5 disk
holding the user files are connected to this box.
2) interactive user box - users can logon (s
On Thu, 21 Oct 2004, Jeffrey Lee wrote:
> The email server I am using now has some unwelcomed price changes
> happening soon and I would like to switch to another server. I
> would like something that works well with SA and possibly ClamAV.
> The server would require pop, imap, and webmail. If some
At 11:31 AM 10/22/2004 +0100, Ronan wrote:
as per subject title or do they have to be standard unix format
Yes, sa-learn accepts mail in mbox format with the --mbox flag.
Without the --mbox flag, it expects files to be rfc.822 format, and
directories to be maildir format.
As for "standard unix fo
- Original Message -
From: "Ronan" <[EMAIL PROTECTED]>
To: "spam"
Sent: Friday, October 22, 2004 5:31 AM
Subject: can sa-learn read mbx format mailboxes
> as per subject title or do they have to be standard unix format
Yep - Just use the --mbox option. - John
as per subject title or do they have to be standard unix format
--
Regards
Ronan McGlue
==
Analyst/Programmer
Information Services
Queens University Belfast
BT7 1NN
Hello jdow,
Tuesday, October 12, 2004, 3:38:35 PM, you responded to "martin f
krafft" <[EMAIL PROTECTED]>
j> ... But posting new examples of
j> spam that escape the filters is worthwhile. Back when we were not
j> stuck with the Apache.org sysadmins I noticed that the SARE rules
j> got updated fa
On Thu, 21 Oct 2004, Jeffrey Lee wrote:
> The email server I am using now has some unwelcomed price changes
> happening soon and I would like to switch to another server. I would
> like something that works well with SA and possibly ClamAV. The server
> would require pop, imap, and webmail. If
55 matches
Mail list logo
