Re: Using spam tools for viruses

2005-10-24 Thread Alan Premselaar
Thomas Cameron wrote: > Howdy - > > I recently responded to a thread on a local LUG mailing list where a guy > wanted to report a virus as spam. I have always thought that using a > spam tool to fight viruses was wrong, and I said so. He asked why, and > basically my response was "use the right

3.1.0 spamd refusing connections

2005-10-24 Thread ard
Gregory P. Ennis wrote: > I upgraded from 3.0.4 to 3.1.0 [...] > On the slower machine spamd seemed to quit working allowing the mail > to go through the system without being filtered. > > I started using the roound-robin switch, with marked improvement. [...] > The problem is resolved by restar

Re: How to disable a ruleset?

2005-10-24 Thread jdow
From: "Carlos Zottmann" <[EMAIL PROTECTED]> Hi !! I have added a ruleset named br_rules.cf, by saving it in the /etc/mail/spamassassin directory. I though that this ruleset, though, was not nice enough, and deleted it from the above directory, stopped and started spamd again. Verifying the mes

Re: How to disable a ruleset?

2005-10-24 Thread Matt Kettler
Carlos Zottmann wrote: > Hi !! > > I have added a ruleset named br_rules.cf, by saving it in the > /etc/mail/spamassassin directory. > > I though that this ruleset, though, was not nice enough, and deleted > it from the above directory, stopped and started spamd again. That *should* do it. Unle

How to disable a ruleset?

2005-10-24 Thread Carlos Zottmann
Hi !! I have added a ruleset named br_rules.cf, by saving it in the /etc/mail/spamassassin directory. I though that this ruleset, though, was not nice enough, and deleted it from the above directory, stopped and started spamd again. Verifying the messages detected as spam after that, I noticed t

RE: eliminating DNS queries for unused network tests

2005-10-24 Thread Pierre Thomson
[EMAIL PROTECTED] wrote: > -BEGIN PGP SIGNED MESSAGE- > Hash: SHA1 "Pierre Thomson" writes: >> >> In 20_dnsbl_tests.cf there are some non-scored tests: >> __RCVD_IN_NJABL, __RCVD_IN_SBL_XBL, __RCVD_IN_SORBS etc. Are these >> the culprits? I can't disable them by scoring zero, since they

geo specific rules

2005-10-24 Thread Joseph Malone
I'm trying to make a rule that adds points if the e-mail came from outside canada and the u.s., using nerd.dk... does this seem like a legit rule? - #block ips out of us and ca header __RCVD_IN_NERDSeval:check_rbl('nerds', 'zz.countries.nerd.dk.') header __RCVD_IN_NERDS_USev

Re: eliminating DNS queries for unused network tests

2005-10-24 Thread Justin Mason
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 "Pierre Thomson" writes: > Here's one for which I can't find an answer in the archive. Recently Matt K > repeated the common advice: > > >You can turn various RBLs on and off by changing the score of the rule. > >Setting it to a score of 0 disable

eliminating DNS queries for unused network tests

2005-10-24 Thread Pierre Thomson
Here's one for which I can't find an answer in the archive. Recently Matt K repeated the common advice: >You can turn various RBLs on and off by changing the score of the rule. >Setting it to a score of 0 disables the rule entirely, and it will not be >queried. While optimizing my new SA 3.1.

Re: Bogus X-Authentication-Warning:

2005-10-24 Thread Ryan Moore
- Original Message - From: Robert Menschel <[EMAIL PROTECTED]> To: Ryan Moore <[EMAIL PROTECTED]> CC: Spamassassin-Users Sent: 10/23/2005 4:38:13 PM -0400 Subject: Bogus X-Authentication-Warning: SA 3.1.0 uses: 20_head_tests.cf:header X_AUTH_WARN_FAKED X-Authentication-Warning !~

Re: spamassessin GUI

2005-10-24 Thread Rick Macdougall
M.Saeed Shaikh wrote: Hi, We are using Qmail for MTA and spamassessin for spam. We are writing spam rules globally (/etc/mail/spamassessin/local.cf). I want to give user/domain level spam. i.e. any user or domain admin can write its own spam rules. There must be global file aslo. Is it po

Re: Using spam tools for viruses

2005-10-24 Thread wayne
In <[EMAIL PROTECTED]> Thomas Cameron <[EMAIL PROTECTED]> writes: > I recently responded to a thread on a local LUG mailing list where a guy > wanted to report a virus as spam. [...] > > What is the "conventional wisdom" on this list? Should viruses be > reported as spam? If so, why? If not, w

RE: MailScanner, SpamAssassin and Bayes rebuilds

2005-10-24 Thread Anthony Peacock
Hi, I don't stop mail processing while it is rebuilding. I just schedule the rebuild for a fairly quiet period. PS You should send your replies to the list, as there are far more people who will see and possibly help with your message. > Is there any problem with running the rebuild during no

Re: MailScanner, SpamAssassin and Bayes rebuilds

2005-10-24 Thread Dhawal Doshy
Pierre Thomson wrote: I just upgraded to MailScanner 4.46.2 (current stable version) and SpamAssassin 3.1.0. I have five MailScanner child processes, and they restart themselves every 4 hours. On startup, the first of the five MS processes discovers that a Bayes rebuild is due, and proceeds

Re: MailScanner, SpamAssassin and Bayes rebuilds

2005-10-24 Thread Anthony Peacock
Hi, Turn off automatic Bayes rebuilds, and run a rebuild once a day using sa-learn. For example on *nix I use the following: /usr/local/bin/sa-learn --force-expire Which is run via cron once a day during the wee small hours. > I just upgraded to MailScanner 4.46.2 (current stable version) an

Re: x-spam headers

2005-10-24 Thread Matt Kettler
At 08:00 AM 10/3/2005, Cristina Tanzi Tolenti wrote: Hi, I use qmail+qmail-scanner+fast_spamassassin, this is an example of my x-spam headers: Why x-spam-Level is with + and not *?? Why in x-spam-status there aren't autolearn yes/no and spamassassin version? When you use fast_spamassassi

MailScanner, SpamAssassin and Bayes rebuilds

2005-10-24 Thread Pierre Thomson
I just upgraded to MailScanner 4.46.2 (current stable version) and SpamAssassin 3.1.0. I have five MailScanner child processes, and they restart themselves every 4 hours. On startup, the first of the five MS processes discovers that a Bayes rebuild is due, and proceeds to run it. Thereafter,

Re: Using spam tools for viruses

2005-10-24 Thread JamesDR
Thomas Cameron wrote: Howdy - I recently responded to a thread on a local LUG mailing list where a guy wanted to report a virus as spam. I have always thought that using a spam tool to fight viruses was wrong, and I said so. He asked why, and basically my response was "use the right tool for t

Using spam tools for viruses

2005-10-24 Thread Thomas Cameron
Howdy - I recently responded to a thread on a local LUG mailing list where a guy wanted to report a virus as spam. I have always thought that using a spam tool to fight viruses was wrong, and I said so. He asked why, and basically my response was "use the right tool for the job," as in use a vir

Re: spamassessin GUI

2005-10-24 Thread Benny Pedersen
On Mon, October 24, 2005 07:37, M.Saeed Shaikh wrote: > We are using Qmail for MTA and spamassessin for spam. We are writing spam > rules globally (/etc/mail/spamassessin/local.cf). so far so good > I want to give user/domain level spam. i.e. any user or domain admin can > write its own spam rule

Re: Stopping Rules

2005-10-24 Thread Michael Monnerie
On Samstag, 22. Oktober 2005 18:01 Andy Smith wrote: > Masses of legitimate email comes from hosts with no reverse DNS, > incorrect HELO and other borderline or actual RFC violations. It pretty much depends on the mail server and it's users. Our server used to receive most e-mail from Austria, so