Re: False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-27 Thread Jolly ArrRoger
Thanks again J, your comments makes sense so far. Maybe someone will know how a consistent SLD hopped admittedly through too many machines but appeared to be received(2) by my email server on ainaz.pair.com. This just does not make sense and I can produce at least a half dozen more "CONFIRMED_FORG

Re: reply from sorbs

2004-11-27 Thread jdow
It means your address is in a set of DSL addresses listed as Dial Up addresses. Ye verily thou art stuck in the fork. And indeed, it should only be used on mail that is incoming from the Internet. Local mail should bypass the SpamAssassin checks. That way cron job emails to root will not get filte

reply from sorbs

2004-11-27 Thread Chris
Here is the reply I got from sorbs.net when I asked about my ip being listed there, now, would someone be so kind as to explain to me what the reply means. Note: I'm not running a mail server, as I said, all I was doing was trying to get fetchmail > procmail to work to take some of the load of

Re: False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-27 Thread jdow
At this point you're stuck reading the "FORGED_YAHOO_RCVD" tests in the 20_headers.cf file (at least on 2.63.) On my machine this is in /usr/share/spamassassin. On closer look it appears this is a web mail posting via yahoo to a yahoo group that fribbles is way around way more yahoo machines than m

Re: OT - How often to reboot?

2004-11-27 Thread Kenneth Porter
--On Saturday, November 27, 2004 12:42 PM -0800 jdow <[EMAIL PROTECTED]> wrote: I nearly cried when I took that machine down. I know what you mean. I always feel like I'm shooting my dog when I have to bounce the system. Right now I've got a game server suffering a couple of WINE zombies becaus

Re: False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-27 Thread Jolly ArrRoger
Thanks jdow. The reason I believe it is because I know "newuser1" to be legitimate however the path the message takes getting to me through SA generates FP's consistently. Can someone familiar with what causes SA to confirm forgery, identify the specific cause? --Roger - Original Message

Re: False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-27 Thread jdow
Er, Roger, one might ask you what makes you think for a picosecond that the message is not forged. Trace the headers backwards starting at the top. I see nothing there to inspire belief in the headers below the second "Received:" header. {^_^} - Original Message - From: "Jolly ArrRoger" <

Re: OT - How often to reboot?

2004-11-27 Thread David Brodbeck
Duncan Findlay wrote: On Sat, Nov 27, 2004 at 01:37:57PM -0500, David Brodbeck wrote: I reboot Linux servers when I need to upgrade the kernel, upgrade the BIOS, or have a startup script change that needs to be tested. Don't overlook that last one, it's less inconvenient to reboot right away

Re: OT - How often to reboot?

2004-11-27 Thread jdow
From: "Dan Barker" <[EMAIL PROTECTED]> > Excuse the bandwidth, but someone on this list is going to know. I've always > tried to reboot windoze boxes at least monthly. Back in "the day", I'd > reboot IBM mainframes each Standard/Daylight Savings transition, just > because I had to be on-site on a

False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-27 Thread Jolly ArrRoger
Can someone please explain why SA declares forgery on the attached message? Seem to be getting an excessive number of false positives from legitimate yahoo.com email addresses that are delivered through YahooGroups.com. I've been "whitelisting" each one I find but wonder if there is a specific a

RE: OT - How often to reboot?

2004-11-27 Thread Gary W. Smith
No disagreement there but it wasn't on the net. It housed a MySQL DB used by some front-end applications from within the DMZ. Secure is sometimes relative to the task at hand. One of the reasons for the restart was because it was upgraded... > -Original Message- > From: Nicolas [mailt

Re: OT - How often to reboot?

2004-11-27 Thread Duncan Findlay
On Sat, Nov 27, 2004 at 01:37:57PM -0500, David Brodbeck wrote: > I reboot Linux servers when I need to upgrade the kernel, upgrade the > BIOS, or have a startup script change that needs to be tested. Don't > overlook that last one, it's less inconvenient to reboot right away and > find out if

Re: OT - How often to reboot?

2004-11-27 Thread David Brodbeck
Dan Barker wrote: What's the thinking for Linux? I'm just running a couple daemons in support of my Wireless Network subscription services (they diddle the firewall based on Credit Card income) and the firewall. I reboot Linux servers when I need to upgrade the kernel, upgrade the BIOS, or have

Re: OT - How often to reboot?

2004-11-27 Thread Nicolas
On Sat, Nov 27, 2004 at 09:26:19AM -0800, Gary W. Smith wrote: > My RH6.1 box had about 800 days on it I think until we upgrade it a > couple months. My Windows domain controller has almost 9 months on it > until I did the full set of service packs. > > You only really need to reboot if you hav

Re: My IP listed in dnsbl.sorbs.net

2004-11-27 Thread David Brodbeck
Ron McKeating wrote: Hmmm, but I have my own domain, and I want all my email to come from my domain, my isp will not route email from my domain (ntl) through their mail servers, they want my to use my [EMAIL PROTECTED] account. One option, if you can't get a proper static IP, is to use a third-part

RE: OT - How often to reboot?

2004-11-27 Thread Gary W. Smith
My RH6.1 box had about 800 days on it I think until we upgrade it a couple months. My Windows domain controller has almost 9 months on it until I did the full set of service packs. You only really need to reboot if you have applications that are poorly writing and leak memory. Michele is rig

Re: OT - How often to reboot?

2004-11-27 Thread Michael Shiloh
I read somewhere that it is wise to reboot when you install or modify services that start upon boot. This way, if anything doesn't start right, you'll have a pretty good indication that it's due to whatever you were working on, and you'll know about it while the details are still fresh in your mind

SARE ruleset for rolex?

2004-11-27 Thread Vermyndax
Would there happen to be a SARE ruleset to catch this horrible influx of Rolex spam? --JM

RE: OT - How often to reboot?

2004-11-27 Thread Michele Neylon :: Blacknight Solutions
We only reboot: - when we absolutely have to ie. Machine is not behaving properly or has to be physically moved - when there is a kernel upgrade (same as above) If the machine is behaving and you don't need to patch/upgrade the kernel why reboot it? Mr Michele Neylon Blacknight Internet Solution

OT - How often to reboot?

2004-11-27 Thread Dan Barker
Excuse the bandwidth, but someone on this list is going to know. I've always tried to reboot windoze boxes at least monthly. Back in "the day", I'd reboot IBM mainframes each Standard/Daylight Savings transition, just because I had to be on-site on a Sunday anyhow. No real reason. What's the think

Re: My IP listed in dnsbl.sorbs.net

2004-11-27 Thread Nicolas
On Fri, Nov 26, 2004 at 04:18:16PM +, Ron McKeating wrote: > On Fri, 2004-11-26 at 15:54, Jim Maul wrote: > > Chris wrote: > > > I was messing around with fetchmail yesterday seeing if I could get it > > > to > > > work for the first time. After playing with it for a few hours and > > > se

make test error installing Net::Ident

2004-11-27 Thread email builder
All, I understand this may be the wrong place to ask a perl question, but I have a question that Google nor any list I can find will answer... trying to install perl module Net::Ident, I get make test errors as follows. I'd really appreciate any tips. I've no idea why this is happening (Fedor

Re: FW: TIMING [total 846599 ms] ???

2004-11-27 Thread Matthias Keller
Hi Dan Thanks for checking Well, I'm running quite a large set of rules (pretty much everything that's lying around ;) ), but the problem with the very long lines seems to be pre3 specific then another good reason to upgrade... As soon as I find the time to test it on the other system T

RE: FW: TIMING [total 846599 ms] ???

2004-11-27 Thread Dan Barker
Well, that wasn't it. On my test system, it lost about 10 seconds firing up SPAMD, and ran quickly after that (I guess I could run it a second time - Yes, that's the ticket). I'm using mostly default 3.0.1 rules. 041127 074235: Q:bigspam1; Delta T: 15,593 ms (783); In X-Spam-Status: Yes, score=

Re: sa-stats.pl problem on woody - looking for log analyser?

2004-11-27 Thread Marcus Schopen
On Friday 26 November 2004 06:05, Marcus Schopen wrote: > Hi, > > on debian/woody sa-stats.pl ends with following errors: > > Error in option spec: "top|T:25" > Error in option spec: "SCALAR(0x84ff7f4)" > > The getopt libs might be to old on woody. Are there any other programms to > get some ni

Announcing WebUserPrefs 0.6

2004-11-27 Thread Ben Story
Hi All, After talking with Patrick Bores, the original programmer, about WebUserPrefs, I have put together a new release with SA 3.x compatible subject line rewriting. I have attached the new version as I don't have web space yet. Pending approval of SourceForge, I'll be posting the file to

Re: whitelist by M-ID and PGP?

2004-11-27 Thread David Brodbeck
Daniel Quinlan wrote: Why? That way I can strongly identify users I know would not spam.. Users of PGP are not the same set of people getting their mail occasionally flagged as false positives. There have also been cases of spammers grabbing PGP signatures and slapping them on the end of t