Re[2]: What Optional Rules do I really need?

2005-11-30 Thread Robert Menschel
Wednesday, November 30, 2005, 11:59:23 AM, Matt wrote: MK> I'm not well versed in picking the "minimalist" set for a low-resource site, but MK> I can at least tell you what I know you should avoid. MK> In general, the bigger the .cf file, the more resource intensive it will likely MK> be. Admit

Re: bonded sender

2005-11-30 Thread jdow
From: "Matt Kettler" <[EMAIL PROTECTED]> At 10:07 PM 11/30/2005, Jean-Paul Natola wrote: I was just curious ( as it's the first time I came across this) As to how this can be -4.3 RCVD_IN_BSP_TRUSTEDRBL: Sender is in Bonded Sender Program (trusted relay) [IronPort Bonded

Re: bonded sender

2005-11-30 Thread Matt Kettler
At 10:07 PM 11/30/2005, Jean-Paul Natola wrote: I was just curious ( as it's the first time I came across this) As to how this can be -4.3 RCVD_IN_BSP_TRUSTEDRBL: Sender is in Bonded Sender Program (trusted relay) [IronPort Bonded Sender - ] O

Re: mysql & spamassassin

2005-11-30 Thread mouss
Keith Dunnett a écrit : As long as spamassassin is invoked from something which behaves properly (i.e. delivers the mail) in the event that spamd fails - which amavis does, and so does maildrop - then I can't see that the restart causes a significant problem. well, it may cause the mta to con

bonded sender

2005-11-30 Thread Jean-Paul Natola
Hi all I was just curious ( as it's the first time I came across this) As to how this can be -4.3 RCVD_IN_BSP_TRUSTEDRBL: Sender is in Bonded Sender Program (trusted relay) [IronPort Bonded Sender - ] On an Oil of olay message?? Jean-Paul N

Re: What Optional Rules do I really need?

2005-11-30 Thread jdow
From: "User for SpamAssassin Mail List" <[EMAIL PROTECTED]> On Wed, 30 Nov 2005, Matt Kettler wrote: User for SpamAssassin Mail List wrote: > Hello, > > We have a mail system that looks at about 30k incoming emails a day. We > have been running SA for about month (ver 3.03). WARNING: 3.0.3 is

Re: Questions

2005-11-30 Thread Matt Kettler
Tony Melia wrote: > Hi, > I have a couple of questions that I cannot find answers to in the FAQ. > > Firstly, I have downloaded, installed, and updated rules_du_jour. Do I > need to do anything to actually tell spamassassin to use these new > rules, or does it just use any new rules dropped in t

Questions

2005-11-30 Thread Tony Melia
Hi, I have a couple of questions that I cannot find answers to in the FAQ.   Firstly, I have downloaded, installed, and updated rules_du_jour.  Do I need to do anything to actually tell spamassassin to use these new rules, or does it just use any new rules dropped in the relevant folder?  

Re: Antidrug.cf deprecated and no longer maintained.

2005-11-30 Thread Matt Kettler
mouss wrote: > Matt Kettler a écrit : > >> >> >> Ron, I understood you. What I don't understand is if that's what mouss is >> suggesting. >> >> As previously said, I read mouss as suggesting I empty antidrug.cf. I >> did not >> read you as suggesting this. > > > I didn't say so but had in mind:

Re: What Optional Rules do I really need?

2005-11-30 Thread Duncan Findlay
On Wed, Nov 30, 2005 at 02:59:23PM -0500, Matt Kettler wrote: > User for SpamAssassin Mail List wrote: > > Actually it is Debian 3.0.3-2 , so I am assuming that they have taken > > care of the DoS attack problem? > > Probably, but I don't know what the Debian guys do. I personally am pretty > stro

Re: mysql & spamassassin

2005-11-30 Thread Keith Dunnett
Mike Jackson wrote: IIWY I would not try to reinvent the wheel. SQL support is useful for userprefs, Bayes and AWL because it stores data for users who don't have a home directory on the system. That's why it's been developed for those functions. For global information which happily lives in

Re: FetchmailRC and Bayes

2005-11-30 Thread Keith Dunnett
Nathan Zabaldo wrote: Mouss replied make sure the user who runs sa-learn is the one you use when running "spamassassing -D --lint" above. if it's the case, try feeding some messages to sa-learn and see if it "learns" them. The reason I am using fetchmailrc is because I am using dbma

RE: What Optional Rules do I really need?

2005-11-30 Thread Chris Santerre
> SARE_UNSUB If anyone gets some juicy things that miss unsub, send them my way. I haven't seen spam in any decent number in quite a long time. Chris Santerre SysAdmin and SARE/URIBL ninja http://www.uribl.com http://www.rulesemporium.com

RE: What Optional Rules do I really need?

2005-11-30 Thread Bowie Bailey
From: User for SpamAssassin Mail List [mailto:[EMAIL PROTECTED] > > On Wed, 30 Nov 2005, Matt Kettler wrote: > > > Definitely do not use any "large" rule-sets if you don't want to waste at ton of > > resources. Most especially "BLACKLIST" in RDJ's trusted ruleset. > > > > Also, since you're using

Re: mysql & spamassassin

2005-11-30 Thread Mike Jackson
With due respect... if you're not using per-user preferences then you're not using per-user rules either, so what is the point of storing them in MySQL? How often do they need to be edited, and by whom? Good reasons not to: there's no support for it that I know of, so you'll have to write it y

Re: What Optional Rules do I really need?

2005-11-30 Thread Matt Kettler
User for SpamAssassin Mail List wrote: > Actually it is Debian 3.0.3-2 , so I am assuming that they have taken > care of the DoS attack problem? Probably, but I don't know what the Debian guys do. I personally am pretty strongly opposed to using distro-variant packages because unless I'm heavily e

RE: FetchmailRC and Bayes

2005-11-30 Thread Nathan Zabaldo
Mouss replied >make sure the user who runs sa-learn is the one you use when running >"spamassassing -D --lint" above. if it's the case, try feeding some >messages to sa-learn and see if it "learns" them. The reason I am using fetchmailrc is because I am using dbmail to store mail in mysql. So

Re: mysql & spamassassin

2005-11-30 Thread Keith Dunnett
[EMAIL PROTECTED] wrote: Hi there, it's me again. Now i got a question about mysql and Spamassassin. I wan't to store all rules inside an mysql table, but the only think i can find is to store user prefs. I did'nt use user prefs, because i use postfix/amavisd-new/SA as an Anti Spam gateway

Re: What Optional Rules do I really need?

2005-11-30 Thread User for SpamAssassin Mail List
On Wed, 30 Nov 2005, Matt Kettler wrote: > User for SpamAssassin Mail List wrote: > > Hello, > > > > We have a mail system that looks at about 30k incoming emails a day. We > > have been running SA for about month (ver 3.03). > > WARNING: 3.0.3 is subject to a remotely exploitable DoS attack. Al

Re: FetchmailRC and Bayes

2005-11-30 Thread mouss
Nathan Zabaldo a écrit : I’m running SA v 3.0.2 on Debian Woody. Spamassassin –D –lint returns the following regarding Bayes: debug: bayes: found bayes db version 3 debug: bayes: Not available for scanning, only 1 spam(s) in Bayes DB < 200 I have been running the following fetchmai

Re: Antidrug.cf deprecated and no longer maintained.

2005-11-30 Thread mouss
Matt Kettler a écrit : Ron, I understood you. What I don't understand is if that's what mouss is suggesting. As previously said, I read mouss as suggesting I empty antidrug.cf. I did not read you as suggesting this. I didn't say so but had in mind: - antidrug.cf: just a notice (which also p

Re: OT? Threats from twtelecom over spam reports

2005-11-30 Thread Dan Hollis
On Wed, 30 Nov 2005, Mike Jackson wrote: twtelecom is staffed by morons, like most other large providers. Eh, I wouldn't go so far as to say they're morons. They're just near-sighted. They'll do whatever they need to do - and no more - to protect their own interests without considering the impl

Re: What Optional Rules do I really need?

2005-11-30 Thread Matt Kettler
User for SpamAssassin Mail List wrote: > Hello, > > We have a mail system that looks at about 30k incoming emails a day. We > have been running SA for about month (ver 3.03). WARNING: 3.0.3 is subject to a remotely exploitable DoS attack. All an attacker needs to do is send you a bunch of malform

What Optional Rules do I really need?

2005-11-30 Thread User for SpamAssassin Mail List
Hello, We have a mail system that looks at about 30k incoming emails a day. We have been running SA for about month (ver 3.03). We run this on a spamass-milter off of sendmail. With the standard rules it has been running OK but does not stop as much spam as we would like (we do sa learn as well).

Re: How to filter this kind of spam

2005-11-30 Thread Jeremy
Use the "70_sare_specific.cf" ruleset as found at http://www.rulesemporium.com/rules.htm. Would recommend also using SURBL and/or URIBL, if you're not already, as they will catch the URLs listed in those spams - see http://www.surbl.org and http://www.uribl.com. Cheers, Jeremy <[EMAIL PROTECT

Re: Antidrug.cf deprecated and no longer maintained.

2005-11-30 Thread Matt Kettler
Ron Johnson wrote: > Matt Kettler writes: > >>At 10:33 AM 11/30/2005, Ron Johnson wrote: >> >> >>>Matt Kettler writes: >>> At 09:36 PM 11/29/2005, mouss wrote: >it would be good to make the file empty, only containing this info. this >way, even those who miss this message (and the

Re: Antidrug.cf deprecated and no longer maintained.

2005-11-30 Thread Ron Johnson
Matt Kettler writes: > > At 10:33 AM 11/30/2005, Ron Johnson wrote: > > >Matt Kettler writes: > > > > > > At 09:36 PM 11/29/2005, mouss wrote: > > > >it would be good to make the file empty, only containing this info. this > > > >way, even those who miss this message (and the previous one) still

Re: Antidrug.cf deprecated and no longer maintained.

2005-11-30 Thread Matt Kettler
At 10:33 AM 11/30/2005, Ron Johnson wrote: Matt Kettler writes: > > At 09:36 PM 11/29/2005, mouss wrote: > >it would be good to make the file empty, only containing this info. this > >way, even those who miss this message (and the previous one) still have a > >chance to get the info. > > Yes, bu

Re: some messages bypassing spamassasin

2005-11-30 Thread DAve
jdow wrote: From: "Toni Casueps" <[EMAIL PROTECTED]> There are a few messages that don't have the X-Spam... headers. Is there any conditions under which a message doesn't get checked? I use Spamassassin 3.0.4 under Linux+Postfix I am invoking it from master.cf (i.e. the IntegratedSpamdInPostf

mysql & spamassassin

2005-11-30 Thread mrtg
Hi there, it's me again. Now i got a question about mysql and Spamassassin. I wan't to store all rules inside an mysql table, but the only think i can find is to store user prefs. I did'nt use user prefs, because i use postfix/amavisd-new/SA as an Anti Spam gateway wich is connected between in

Re: Antidrug.cf deprecated and no longer maintained.

2005-11-30 Thread Kris Deugau
Matt Kettler wrote: > Yes, but there are still users out there that aren't using SA 3.0.x > due to perl version problems. For them, I still wish to make the file > available. Or because we've seen no pressing reason to upgrade; 2.64 is working Just Fine Thanks. (Not to mention a good reason NOT

Re: Antidrug.cf deprecated and no longer maintained.

2005-11-30 Thread Ron Johnson
Matt Kettler writes: > > At 09:36 PM 11/29/2005, mouss wrote: > >it would be good to make the file empty, only containing this info. this > >way, even those who miss this message (and the previous one) still have a > >chance to get the info. > > Yes, but there are still users out there that are

Re: OT? Threats from twtelecom over spam reports

2005-11-30 Thread Mike Jackson
twtelecom is staffed by morons, like most other large providers. Eh, I wouldn't go so far as to say they're morons. They're just near-sighted. They'll do whatever they need to do - and no more - to protect their own interests without considering the implications for others on the net. Take AO

Re: How to filter this kind of spam

2005-11-30 Thread Keith Dunnett
[EMAIL PROTECTED] wrote: Hi there, since some weeks our company get spammed with thousends of viagra mails. These are detected by the SARE_SPECIFIC ruleset. If that means nothing to you, Google for 'rules_du_jour'. HTH, Keith

How to filter this kind of spam

2005-11-30 Thread mrtg
Hi there, since some weeks our company get spammed with thousends of viagra mails. The email, link and subject changes every time. Take a look on the html code: --- Sorry can't post the code, here is a link to an textfile wich containing the body: http://www.sbgit.com/spa

Add Razor or Pyzor ?

2005-11-30 Thread Noc Phibee
Hi one question : I have added today DCC to my config (anyone know where i can know if the request are sent to the dcc server ?). Now, i want add Pyzor or Razor ;=) What is, for you the best solution for best result ? SA 3.0.4 automatiquely check SORBS,RBL, SpamCop and other no ? Thanks bye