Re: Need help with DCC

2005-11-21 Thread Roman Serbski
> Quoted from Vernon Schryver[EMAIL PROTECTED] > > The "write(MTA socket,4)" messages suggest that spamassassin has closed > the socket to dccifd when dccifd gets around to answering. > > The "continue not asking greylist" messages suggest that dccifd is > trying to contact a greylist server wi

Re: Spamassassin + Exchange 2k3 + Antivirus Recommendations

2005-11-21 Thread Matt Kettler
At 01:03 AM 11/22/2005, Christopher Brower wrote: Can anyone recommend a good setup for running Sapmassassin and an open source antivirus solution on a SMTP gateway infront of an Exchange box? Suggestions: use amavis, MailScanner or mimedefang as a MTA integration. Use clamav as an antivirus p

Spamassassin + Exchange 2k3 + Antivirus Recommendations

2005-11-21 Thread Christopher Brower
Can anyone recommend a good setup for running Sapmassassin and an open source antivirus solution on a SMTP gateway infront of an Exchange box? Also could you point me to some guides? It’s been awhile since I setup spam assassin and last time I did I think it was version 2.0. Is it possible

Re: Need help with DCC

2005-11-21 Thread Spamassassin List
On 11/22/05, Spamassassin List <[EMAIL PROTECTED]> wrote: >I am trying to enable DCC support but as far as I can see no >DCC_CHECK >is being involved. Your advise would be greatly appreciated. Did you enable local, -L? Remove this when you call spamd No, spamd is called without -L: spamd_flag

Re: Need help with DCC

2005-11-21 Thread Roman Serbski
On 11/22/05, Spamassassin List <[EMAIL PROTECTED]> wrote: > >I am trying to enable DCC support but as far as I can see no >DCC_CHECK > >is being involved. Your advise would be greatly appreciated. > > Did you enable local, -L? Remove this when you call spamd No, spamd is called without -L: spamd_

Re: Need help with DCC

2005-11-21 Thread Spamassassin List
I am trying to enable DCC support but as far as I can see no >DCC_CHECK is being involved. Your advise would be greatly appreciated. Did you enable local, -L? Remove this when you call spamd

Need help with DCC

2005-11-21 Thread Roman Serbski
Dear all, I am trying to enable DCC support but as far as I can see no DCC_CHECK is being involved. Your advise would be greatly appreciated. FreeBSD 5.4-STABLE, qmail 1.03, SA 3.1.0 used with qmail-scanner 1.25, dcc 1.3.16 - all installed from ports. local.cf: add_header all Status DCC _DCCB_

Re: spamcop.net tactics

2005-11-21 Thread Amos
On 11/21/05, Jeff Chan <[EMAIL PROTECTED]> wrote: > detect it, then yes your IPs can get blacklisted. The best way > to solve that is to stop the emission of spam from your network. It's easier to do when the source is identified. > As was already suggested, one good way to do that is to block >

Re: Error when attempting to run sa-stats

2005-11-21 Thread Steven Stern
jdow wrote: From: "Steven Stern" <[EMAIL PROTECTED]> Jason Kratzer wrote: Do I need to install the module or can I run it from the install directory. I was unable to find the documentation for it. [EMAIL PROTECTED] tools]# ./sa-stats.pl Can't locate Parse/Syslog.pm in @INC (@INC con

SpamdForkScaling error

2005-11-21 Thread Tim Jordan
Hello everyone, This is my first post to the SA mailing list. I hope I'm proceeding correctly. I noticed that my mail server seems to be running slow. I tailed the syslog and found the error below. I included the syslog entry for the test message I sent to my email server. I'm hoping someone c

Re: Error when attempting to run sa-stats

2005-11-21 Thread jdow
From: "Steven Stern" <[EMAIL PROTECTED]> Jason Kratzer wrote: Do I need to install the module or can I run it from the install directory. I was unable to find the documentation for it. [EMAIL PROTECTED] tools]# ./sa-stats.pl Can't locate Parse/Syslog.pm in @INC (@INC contains: pe

Re: Error when attempting to run sa-stats

2005-11-21 Thread Steven Stern
Jason Kratzer wrote: Do I need to install the module or can I run it from the install directory. I was unable to find the documentation for it. [EMAIL PROTECTED] tools]# ./sa-stats.pl Can't locate Parse/Syslog.pm in @INC (@INC contains: perl -MCPAN -e shell install Parse::Syslog

Re: spamcop.net tactics

2005-11-21 Thread Jeff Chan
SpamCop simply notes what addresses appear to be emitting spam. If your network is emitting spam and SpamCop users or traps detect it, then yes your IPs can get blacklisted. The best way to solve that is to stop the emission of spam from your network. As was already suggested, one good way to do

Re: uol.com.br

2005-11-21 Thread jdow
Please note that I have not blocked all brazil as tempting as that might be from time to time, Carlos. I have blocked uol.com.br simply because it is very annoyingly broken and offers a DoS magnifier tool in their stupid anti spam challenge response. I am blocking this ONLY for myself. And for the

Re: Rule for this

2005-11-21 Thread Loren Wilton
Title: Message  First, fix your trusted hosts.  You shoudln't be trusting a DSL line on some other system.   Second, you don't mention what version of SA you are using, nor what rules files you are using.  It looks like you don't have antidrug rules, which would imply 2.6x.  In any case some

Re: Error when attempting to run sa-stats

2005-11-21 Thread qqqq
Have you done a find for Syslog.pm ?   find /usr -name Syslog.pm       - Original Message - From: Jason Kratzer To: users@spamassassin.apache.org Sent: Monday, November 21, 2005 1:18 PM Subject: Error when attempting to run sa-stats Do I need to ins

Error when attempting to run sa-stats

2005-11-21 Thread Jason Kratzer
Do I need to install the module or can I run it from the install directory. I was unable to find the documentation for it.     [EMAIL PROTECTED] tools]# ./sa-stats.pl Can't locate Parse/Syslog.pm in @INC (@INC contains: /usr/lib/perl5/5.8.0/i386-linux-thread-multi /usr/lib/perl5/5.8.0 /

Re: SA 3.1.0 and GroupWise 6.5

2005-11-21 Thread Theo Van Dinter
On Mon, Nov 21, 2005 at 09:44:41PM +0200, Jyri Korhonen wrote: > But then I tried to use live data and found out > that SA doesn't like at all the internal GroupWise > header format (this is the same message as above > using the internal header format): > > MAIL FROM:<[EMAIL PROTECTED]> SIZE=1741

Re: spamd DnsResolver errors under Cygwin

2005-11-21 Thread Paul Strebel
> >[1452] dbg: dns: launching DNS A query for > >8.147.220.193.sbl-xbl.spamhaus.org. in background > >[1452] dbg: dns: name server: 193.220.91.200, LocalAddr: 0.0.0.0 > >[1452] error: Error creating a DNS resolver socket: Operation not > >permitted at > >/usr/lib/perl5/site_perl/5.8/Mail/SpamAssas

Re: SA 3.1.0 and GroupWise 6.5

2005-11-21 Thread Matt Kettler
Jyri Korhonen wrote: > If I run SA to a message with the internal GroupWise > headers I'll get something like the example below. > Could somebody give me a hint what I shoud do to > make SA understand GroupWise headers? > Extensive code-rewrite (preferably of GroupWise, but alternatively of SA).

RE: SpamAssassin: how to generate stats

2005-11-21 Thread Dallas L. Engelken
> -Original Message- > From: Jim Knuth [mailto:[EMAIL PROTECTED] > Sent: Monday, November 21, 2005 1:44 PM > To: SpamAssassin Users > Subject: Re: SpamAssassin: how to generate stats > > Hallo und Guten Abend Dallas, > > Heute (am 21.11.2005 - 20:31 Uhr) >schriebst Du: > > >> -

SA 3.1.0 and GroupWise 6.5

2005-11-21 Thread Jyri Korhonen
Hello, I'm trying to test SA with Novell GroupWise 6.5, but I'm not using anything in front of GroupWise or behind GroupWise. I'm checking the emails "in between" - that's after SMTP daemon and before GroupWise MTA. We are running GroupWise on a Netware server so I need a workstation to do the job

Re: SpamAssassin: how to generate stats

2005-11-21 Thread Jim Knuth
Hallo und Guten Abend Dallas, Heute (am 21.11.2005 - 20:31 Uhr) schriebst Du: >> -Original Message- >> From: Matt Kettler [mailto:[EMAIL PROTECTED] >> Sent: Monday, November 21, 2005 1:05 PM >> To: Jeferson Pessoa Santana >> Cc: SpamAssassin Users >> Subject: Re: SpamAssassin: how to

RE: SpamAssassin: how to generate stats

2005-11-21 Thread robert
>> -Original Message- >> From: Matt Kettler [mailto:[EMAIL PROTECTED] >> Sent: Monday, November 21, 2005 1:05 PM >> To: Jeferson Pessoa Santana >> Cc: SpamAssassin Users >> Subject: Re: SpamAssassin: how to generate stats >> >> Jeferson Pessoa Santana wrote: >> > Hi guys, >> > >> > I'm usi

RE: SpamAssassin: how to generate stats

2005-11-21 Thread Dallas L. Engelken
> -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Monday, November 21, 2005 1:05 PM > To: Jeferson Pessoa Santana > Cc: SpamAssassin Users > Subject: Re: SpamAssassin: how to generate stats > > Jeferson Pessoa Santana wrote: > > Hi guys, > > > > I'm using SpamAs

Re: SpamAssassin: how to generate stats

2005-11-21 Thread Matt Kettler
Jeferson Pessoa Santana wrote: > Hi guys, > > I'm using SpamAssassin 3.1.0 and I don't know how to generate stats > about the number of Spam, Non-Spam received, and Top Rules used. Can you > guys know how to do this? > This depends a lot on HOW you're using SpamAssassin 3.1.0. However, assuming

Re: spamcop.net tactics

2005-11-21 Thread Aaron Grewell
> Seems to me like setting up a firewall or network logger should make it pretty > easy to see what is sending out inordinate amounts of traffic on port 25. Or > you could just block port 25 outgoing as a matter of policy and force people > to go out through the university mail servers. No one

SpamAssassin: how to generate stats

2005-11-21 Thread Jeferson Pessoa Santana
Hi guys, I'm using SpamAssassin 3.1.0 and I don't know how to generate stats about the number of Spam, Non-Spam received, and Top Rules used. Can you guys know how to do this? Thanks Jeff

Really slow bayes on 3.1.0, suggestions?

2005-11-21 Thread Matt Kettler
I recently upgraded from SA 2.64 to 3.1.0 and one thing I've noticed is bayes operations are inordinately slower than they used to be. Especially expiry runs, which often take in excess of 15 minutes to complete. I've tried changing the lock_method to flock, but things are still slow. Even just d

Re: uol.com.br

2005-11-21 Thread Elton Ramos Carvalho
jdow wrote: From: "Craig White" <[EMAIL PROTECTED]> On Sat, 2005-11-19 at 05:37 -0800, jdow wrote: From: "Kai Schaetzl" <[EMAIL PROTECTED]> > Jdow wrote on Thu, 17 Nov 2005 22:22:40 -0800: > >> curmudgeon > > I learned a new word :-) > > My stance on this is that the list-admin should pleas

RE: Just scan one e-mail address

2005-11-21 Thread Esteban Darreche
Amavis-new could acomplish that ? > -Mensaje original- > De: Bowie Bailey [mailto:[EMAIL PROTECTED] > Enviado el: Lunes, 21 de Noviembre de 2005 02:08 p.m. > Para: users@spamassassin.apache.org > Asunto: RE: Just scan one e-mail address > > > From: M Bernasconi [mailto:[EMAIL PROTECTED]

Re: spamcop.net tactics

2005-11-21 Thread Kelson
Amos wrote: Just recently we discovered we've been tagged by spamcop. Since the spamtrap is "secrete", there's no way to know what incident triggered this event, which makes it pretty damn difficult to track it down to try to deal with it. Furthermore, a site has only one chance to delist their s

RE: How to find junk folder and retreive a message.

2005-11-21 Thread Jason Kratzer
I found it. It was being forwarded to a public folder. Thanks! Thank you, Jason Kratzer Network Administrator Cuhaci & Peterson Architects L.L.C. 1220 Alden Road Orlando, FL 32803 (407) 228-4220 Ext. 1444 (Office) (407) 228-4219 (Fax) [EMAIL PROTECTED] (email) www.c-p.com (Web) -O

Re: spamcop.net tactics

2005-11-21 Thread Chris Conn
Amos wrote: I must say I'm not particularly thrilled about the tactics employed by SpamCop. At a university it is sometimes difficult to control every single thing that everybody does on campus, unless of course perhaps if this was a complete authoritarian state. We try hard to control and mini

Re: spamcop.net tactics

2005-11-21 Thread Russell Miller
On Monday 21 November 2005 10:11, Amos wrote: > I must say I'm not particularly thrilled about the tactics employed by > SpamCop. At a university it is sometimes difficult to control every > single thing that everybody does on campus, unless of course perhaps > if this was a complete authoritarian

Re: spamcop.net tactics

2005-11-21 Thread Michele Neylon:: Blacknight.ie
Amos wrote: > I must say I'm not particularly thrilled about the tactics employed by > SpamCop. At a university it is sometimes difficult to control every > single thing that everybody does on campus, unless of course perhaps > if this was a complete authoritarian state. We try hard to control and

Re: spamcop.net tactics

2005-11-21 Thread Matt Kettler
Amos wrote: > I must say I'm not particularly thrilled about the tactics employed by > SpamCop. At a university it is sometimes difficult to control every > single thing that everybody does on campus, unless of course perhaps > if this was a complete authoritarian state. We try hard to control and

Re: spamcop.net tactics

2005-11-21 Thread qqqq
I am not a fan myself and do not use them. However, you should have received a mailing to postmaster (or abuse) due to Spamcop complaints. Did you get these? - Original Message - From: "Amos" <[EMAIL PROTECTED]> To: "SpamAssassin" Sent: Monday, November 21, 2005 11:11 AM Subjec

spamcop.net tactics

2005-11-21 Thread Amos
I must say I'm not particularly thrilled about the tactics employed by SpamCop. At a university it is sometimes difficult to control every single thing that everybody does on campus, unless of course perhaps if this was a complete authoritarian state. We try hard to control and minimize spamming ev

Re: How to find junk folder and retreive a message.

2005-11-21 Thread Theo Van Dinter
On Mon, Nov 21, 2005 at 12:00:57PM -0500, Jason Kratzer wrote: > I am currently attempting to find the junk folder on my server. I am > using SpamAssassin 3.x with postfix and AMAVISD. Earlier today an e-mail > was blocked that was intended for the president of the company. I am > currently trying

RE: Clever Spammers, Anything to catch this?

2005-11-21 Thread Rick Cooper
> -Original Message- > From: John Hardin [mailto:[EMAIL PROTECTED] > Sent: Monday, November 21, 2005 11:17 AM > To: SpamAssassin list > Subject: Re: Clever Spammers, Anything to catch this? > > > On Sun, 2005-11-20 at 06:50, Rick Cooper wrote: > > I have noted there are a lot of spams get

Re: Antw: Re: Just scan one e-mail address

2005-11-21 Thread Matt Kettler
M Bernasconi wrote: > The program calls "spamassassin". And in "spamassassin" has no user/domain > capability (correct me if i'm wrong). You are correct. If you want to just scan one-user's mail, this is better handled by only calling SA for the mail you want to scan. This way you actually sav

RE: Just scan one e-mail address

2005-11-21 Thread Bowie Bailey
From: M Bernasconi [mailto:[EMAIL PROTECTED] > > I want use SA on one e-mail address and not the hole domain. > Let's say [EMAIL PROTECTED] should be scanned through SA. I > know I can give the all_spam_to parameter to the hole domain > [EMAIL PROTECTED] But then also [EMAIL PROTECTED] is not g

How to find junk folder and retreive a message.

2005-11-21 Thread Jason Kratzer
Hello,   I am currently attempting to find the junk folder on my server. I am using SpamAssassin 3.x with postfix and AMAVISD. Earlier today an e-mail was blocked that was intended for the president of the company. I am currently trying to find this e-mail. I am not sure if the consultant

Antw: Re: Just scan one e-mail address

2005-11-21 Thread M Bernasconi
The program calls "spamassassin". And in "spamassassin" has no user/domain capability (correct me if i'm wrong). And I thought it's just a piece of cake ...! Thank you James for your reply! sincerely m.bernasconi >>> JamesDR <[EMAIL PROTECTED]> 21.11.2005 17.40 Uhr >>> M Bernasconi wrote:

Re: Just scan one e-mail address

2005-11-21 Thread JamesDR
M Bernasconi wrote: Hello! I want use SA on one e-mail address and not the hole domain. Let's say [EMAIL PROTECTED] should be scanned through SA. I know I can give the all_spam_to parameter to the hole domain [EMAIL PROTECTED] But then also [EMAIL PROTECTED] is not going to be checked for spam.

Just scan one e-mail address

2005-11-21 Thread M Bernasconi
Hello! I want use SA on one e-mail address and not the hole domain. Let's say [EMAIL PROTECTED] should be scanned through SA. I know I can give the all_spam_to parameter to the hole domain [EMAIL PROTECTED] But then also [EMAIL PROTECTED] is not going to be checked for spam. How can I make th

Re: Clever Spammers, Anything to catch this?

2005-11-21 Thread John Hardin
On Sun, 2005-11-20 at 06:50, Rick Cooper wrote: > I have noted there are a lot of spams getting through that are using > tags and spelling the drug workds in columns top to bottom then move a > column right and repeat. An example would be > > size=3>LCXAVPV > This eventually spells: > > Levitr

Re: example of using sa-update

2005-11-21 Thread Fred
There are not any updates available yet, the SA devs are working to make this feature available, at this time, everything is still being setup and tested for when this goes live.  The commands are there but the back end isn't entirely ready yet.  Other channels are if / when other rule-write

Re: uol.com.br

2005-11-21 Thread Oliver Schulze L.
The way I see it, there is no need to speak bad things about a country based on bad customer support from one ISP. Brazil is a big country(just look at google earth), and UOL is just one big ISP in that country. So, peace out and let SA do his job. Oliver Dan Hollis wrote: On Mon, 21 Nov 2005

Re: spamd DnsResolver errors under Cygwin

2005-11-21 Thread Matt Kettler
At 07:45 AM 11/21/2005, Paul Strebel wrote: [1452] dbg: dns: launching DNS A query for 8.147.220.193.sbl-xbl.spamhaus.org. in background [1452] dbg: dns: name server: 193.220.91.200, LocalAddr: 0.0.0.0 [1452] error: Error creating a DNS resolver socket: Operation not permitted at /usr/lib/perl

RE: How can I test SURBL is working

2005-11-21 Thread Dallas L. Engelken
> -Original Message- > From: List [mailto:[EMAIL PROTECTED] > Sent: Sunday, November 20, 2005 9:57 PM > To: users@spamassassin.apache.org; Matt Kettler > Subject: Re: How can I test SURBL is working > > > This message should fire them off > > > > http://surbl-org-permanent-test-point.com

spamd DnsResolver errors under Cygwin

2005-11-21 Thread Paul Strebel
Hello, I am running spamd under Cygwin (on WinXP Pro SP2) and use WinSpamC to connect to it from another machine. --lint shows no problems. This is the beginning of the output from --lint: [3408] dbg: logger: adding facilities: all [3408] dbg: logger: logging level is DBG [3408] dbg: generic: S

Re: uol.com.br

2005-11-21 Thread Dan Hollis
On Mon, 21 Nov 2005, Carlos Zottmann wrote: Just a little note on what has been written about Brazil ... You guys surely must have heard about corruption here, but it doesn´t mean that everyone is corrupt, and that every negotiation is a scam here ... Brazil is very serious about a lot of things,

Re: uol.com.br

2005-11-21 Thread Carlos Zottmann
OK, Folks .. Just a little note on what has been written about Brazil ... You guys surely must have heard about corruption here, but it doesn´t mean that everyone is corrupt, and that every negotiation is a scam here ... Brazil is very serious about a lot of things, including our participation i