Re: reply from sorbs

2004-11-28 Thread Steve Sobol
David Brodbeck wrote: make sure in writing before you sign anything that your ip(s) will never be listed by the ISP as res/dynamic/dialup ip. If they do they may be in breach of contract (and you would need a lawyer for resolution.) I doubt any ISP would agree to a contract term like that, beca

Re: reply from sorbs

2004-11-28 Thread Chris Edwards
| DUHL is intended to be used on INCOMMING mail only - on the host where | ones MX records point to. I may be missing something, but I think the OP was *not* complaining about lack of ability to send mail over the Internet from a DUHL / dynamic IP, but rather, failing foul of a mis-configured SA s

reply from sorbs

2004-11-28 Thread Chris
I didn't think my "listed in sorbs" and "reply from sorbs" threads would net so many replies or so much help. What I guess caused all this is that I was having results of cronjobs sent to me via my ISP. Again, I'll reinterate, I don't run a mail server, hell, I can't even figure out still aft

Re: make test error installing Net::Ident

2004-11-28 Thread email builder
> a question that Google nor any list I can find will answer... trying to > install perl module Net::Ident, I get make test errors as follows. I'd > really appreciate any tips. I've no idea why this is happening (Fedora > Core 1): > > # perl -MCPAN -e'CPAN::Shell->install("Net::Ident")' >

Re: reply from sorbs

2004-11-28 Thread JamesDR
Reread it, i said *YOUR* ISP marking *YOUR* leased IP(s) as *DUL/DYN/RES* read before replying (OH yes, ISP'S *DO* this kind of thing to enforce their polices.) :-D And yes, an isp who does not agree, is sheit imo, if they're too lazy to classify their ips, move along, get sat, cable etc. The

Re: False Positives: CONFIRMED_FORGED from yahoo.com

2004-11-28 Thread Jolly ArrRoger
Message from user inside www.pair.com: >> Original message Apparently Yahoo has slightly changed the routing of groups messages: SA EvalTests.pm /from \[$IP_ADDRESS\] by \S+\.(?:groups|grp\.scd)\.yahoo\.com with NNFMP/ Received headers with NNFMP: from [66.218.69.1] by n22

Re: reply from sorbs

2004-11-28 Thread John Rudd
(my choice of comments to reply to make my position sound a lot more at odds with your overall post than I am, but there were a two parts I just had to respond to) On Nov 28, 2004, at 9:00 AM, Bob Amen wrote: It's very depressing and getting worse, according to my mail servers' statistics. Hm.

Re: reply from sorbs

2004-11-28 Thread David Brodbeck
JamesDR wrote: make sure in writing before you sign anything that your ip(s) will never be listed by the ISP as res/dynamic/dialup ip. If they do they may be in breach of contract (and you would need a lawyer for resolution.) I doubt any ISP would agree to a contract term like that, because the

Re: reply from sorbs

2004-11-28 Thread JamesDR
DSL, Cable, T1, Fiber, etc. your high speed connection type shouldn't be blacklisted, your service level should, ie dynamic residential line. A business class customer paying for static ip(s) on a (a/s)dsl line should not have their ip's blacklisted. I've seen as much spam come from lines where

sa-learn stats? Explaination?

2004-11-28 Thread Bob Proulx
I have not been paying attention to the bayes internals. Here is the output of a recent sa-learn --force-expire run. synced Bayes databases from journal in 0 seconds: 1248 unique entries (1790 total entries) expired old Bayes database entries in 31 seconds 156683 entries kept, 6897 deleted

Re: My IP listed in dnsbl.sorbs.net

2004-11-28 Thread Bob Proulx
Chris wrote: > However, I do not run a mail server, the offending msg came from the fact > that every 4hrs I restart spamd and have the output of the crontab mailed > to me. I also have the results of the rootkit hunter cronjob mailed to me > daily. Is the problem caused by the fact that the m

Re: My IP listed in dnsbl.sorbs.net

2004-11-28 Thread Bob Proulx
Chris wrote: > Jim Maul wrote: > > Id say its because you have a dynamic ip address. You might want to > > send all mail out through your isp's mail servers instead. > > All msgs do go through EL, AFAIK, here are two headers, the first from a msg > not marked as spam, the second the headers from

Re: reply from sorbs

2004-11-28 Thread Bob Amen
I realize this is way off topic, but it is important to spam fighting. jdow wrote: On Sun, Nov 28, 2004 at 10:11:12AM -, [EMAIL PROTECTED] wrote: Hi, if I did not miss anything in this thread, the victim HAS a static IP on the cable/dsl link and pays more for the access than d

Re: OT - How often to reboot?

2004-11-28 Thread Nix
On Sat, 27 Nov 2004, Gary W. Smith yowled: > You only really need to reboot if you have applications that are poorly > writing and leak memory. s/applications/kernel modules/ If a memory leak propagates outside the app (and shared memory segments, and so on) it's the kernel's fault for letting

dodgy FORGED_YAHOO_RCVD ? (2.64)

2004-11-28 Thread Per Jessen
Is FORGED_YAHOO_RCVD slightly dodgy: Received: from checkpoint.spamchek.net (node6.pleiades.net [192.168.3.106]) by local.spamchek.net (Postfix) with ESMTP id 870E1DC0B4 for <[EMAIL PROTECTED]>; Sat, 27 Nov 2004 15:38:34 +0100 (CET) Received: from mta309.mail.scd.yahoo.com (mta309.mail.sc

RE: OT how often to reboot?

2004-11-28 Thread Dan Barker
OK, I've decided. I'll boot on April Fools' day, whether it needs it or not. Just to honor the old days. My UPS is only good for a few minutes - 1200 VA box with 5 servers and a monitor on it. But the 15KW generator out back has a 250 Gallon Propane tank, electric start and an Automatic Transfer S

Re: reply from sorbs

2004-11-28 Thread jdow
From: "Nicolas" <[EMAIL PROTECTED]> To: Sent: 2004 November, 28, Sunday 02:12 Subject: Re: reply from sorbs > On Sun, Nov 28, 2004 at 10:11:12AM -, [EMAIL PROTECTED] wrote: > > Hi, > > > > if I did not miss anything in this thread, the victim HAS a static IP on the cable/dsl link and > > pay

Re: reply from sorbs

2004-11-28 Thread Nicolas
On Sun, Nov 28, 2004 at 10:11:12AM -, [EMAIL PROTECTED] wrote: > Hi, > > if I did not miss anything in this thread, the victim HAS a static IP on the > cable/dsl link and > pays more for the access than dynamic ip would cost with the same provider. > The provider, however, reports a full ip b

Re: reply from sorbs

2004-11-28 Thread hamann . w
>> >> On Sat, Nov 27, 2004 at 04:43:37PM -0800, Bob Amen wrote: >> >I must disagree. Unfortunately the number of responsible people on >> > the other end of cable and DSL modems is vanishingly small compared to >> > the number of zombie machines that are spewing spam and more viruses. On >>

Re: reply from sorbs

2004-11-28 Thread Nicolas
On Sat, Nov 27, 2004 at 04:43:37PM -0800, Bob Amen wrote: >I must disagree. Unfortunately the number of responsible people on > the other end of cable and DSL modems is vanishingly small compared to > the number of zombie machines that are spewing spam and more viruses. On > a typical day we

OT how often to reboot?

2004-11-28 Thread Jonathan Nichols
>support DSL. I nearly cried when I took that machine down. (I'd even >moved it, while still on its UPS, from one side of the room to another >when we rearranged the room for better space utilization.) Oh, that's nothing. :) I had a Sparc 5 that was up for like 520 days. I moved from Sacramento, C

Re: reply from sorbs

2004-11-28 Thread Chris
On Saturday 27 November 2004 05:10 pm, jdow wrote: > And indeed, it should only be used on mail that is incoming from the > Internet. Local mail should bypass the SpamAssassin checks. That way > cron job emails to root will not get filtered. That does not, however, > help you with regards to email

Re: reply from sorbs

2004-11-28 Thread Bob Amen
jdow wrote: It means your address is in a set of DSL addresses listed as Dial Up addresses. Ye verily thou art stuck in the fork. [...] (See why I do not like such broad brush black lists? They false alarm BADLY at times they should not, far too many times.) I must disagree. Unfortunately

Re: OT - How often to reboot?

2004-11-28 Thread Scott Rothgaber
jdow wrote: Reboot? Whazzat? If you run a Unix-like OS, it's the last thing that you do before you go back outside. ;-) This was from our credit card processor, shut down only because we moved. s2:[/usr/local/ccd] uname -a BSD/OS s2.easley.net 4.0.1 BSDI BSD/OS 4.0.1 Kernel #0: Fri Oct 22 00: