running a local fingerprinting server

2006-09-17 Thread Ramprasad
Hi, We scan a huge number of mails ( upto 150k an hour ) on our load balanced array of servers. I was thinking of running a local fingerprinting server like pyzord Is the pyzor project still alive .. I havent seen any updates for quiet some time. And are there any issues integrating pyzor wit

Re: Problem after upgrade to Net::DNS 0.58

2006-09-17 Thread Chris
On Sunday 17 September 2006 9:24 pm, Chris wrote: > I'm running SA 3.1.5 and this evening upgraded to the above version of > Net::DNS. Since then periodically I've been seeing this in my syslog: As another question to this, I did an upgrade to the module instead a removing the older version and t

Problem after upgrade to Net::DNS 0.58

2006-09-17 Thread Chris
I'm running SA 3.1.5 and this evening upgraded to the above version of Net::DNS. Since then periodically I've been seeing this in my syslog: Sep 17 20:27:04 localhost spamd[1126]: Can't use string ("Net::DNS::RR::MX") as a HASH ref while "strict refs" in use at /usr/lib/perl5/site_perl/5.8.5/i3

Re: Need help with SA and Received headers... SOLVED

2006-09-17 Thread Daryl C. W. O'Shea
jdow wrote: From: "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> thekillerbean wrote: thekillerbean wrote: All is good! One last question while on this topic - I was restarting sendmail, spamassassin and spamass-milter whenever I made a change to local.cf in the /etc/mail/spamassassin dir - is

Re: Need help with SA and Received headers... SOLVED

2006-09-17 Thread jdow
From: "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> thekillerbean wrote: thekillerbean wrote: All is good! One last question while on this topic - I was restarting sendmail, spamassassin and spamass-milter whenever I made a change to local.cf in the /etc/mail/spamassassin dir - is this really n

Re: Message containing bitmaps with random lines not being blocked

2006-09-17 Thread jdow
From: "Robert Nicholson" <[EMAIL PROTECTED]> From: "Robert S" <[EMAIL PROTECTED]> One does not expect to receive images with words such as the drug that ends in gra or stock touts. The words are decoded then checked, in a "fuzzy" manner against a list of words to which you can add as you wish.

Re: can't make add_header all show up

2006-09-17 Thread TonyE
Ah, Thank you, this is correct. Theo Van Dinter-2 wrote: > > On Sat, Sep 16, 2006 at 04:50:17PM -0700, TonyE wrote: >> I using qmail with qmail-scanner (from the headers: qmail-scanner-1.25st >> (clamdscan: 0.87.1/1195. spamassassin: 3.1.0. perlscan: 1.25st.) >> >> However I'm not seeing

Re: Setting up DKIM and DomainKeys mail signing and verification

2006-09-17 Thread SM
At 04:32 17-09-2006, Benny Pedersen wrote: how does one do signing multible domains ? man 8 dk-filter says to make a internal domain file and add this as -i internal.file You can use the -d parameter ( -d example.com,example.net) or but can domains still have same domain keys or is one domai

Re: DNS lookup problem

2006-09-17 Thread Dhaval Patel
That did it. Upgraded to 3.1.3 in backports and the IP does get picked up. 1.0 RCVD_IN_XBLRBL: Received via a relay in Spamhaus XBL [125.22.64.110 listed in sbl-xbl.spamhaus.org] Is this a known problem with anything less than 3.0.4? I also see that AWL is

Re: DNS lookup problem

2006-09-17 Thread Daryl C. W. O'Shea
Dhaval Patel wrote: "John D. Hardin" <[EMAIL PROTECTED]> said: On Sun, 17 Sep 2006, Dhaval Patel wrote: debug: received-header: parsed as [ ip=125.22.64.110 rdns= helo=v3uviqi8.i2uvfox.aol.com by=jwblack.patel.sh ident= envfrom= intl=0 id=5EA056E02B auth= ] debug: received-header: relay 125.

Re: DNS lookup problem

2006-09-17 Thread Dhaval Patel
"John D. Hardin" <[EMAIL PROTECTED]> said: > On Sun, 17 Sep 2006, Dhaval Patel wrote: > > > debug: received-header: parsed as [ ip=125.22.64.110 rdns= > > helo=v3uviqi8.i2uvfox.aol.com > > by=jwblack.patel.sh ident= envfrom= intl=0 id=5EA056E02B auth= ] > > debug: received-header: relay 125.22.6

Re: DNS lookup problem

2006-09-17 Thread Daryl C. W. O'Shea
Dhaval Patel wrote: Please bare with me while I try to get spamassassin fully tweaked. I received a spam in my inbox which clearly came from an ip that is on blacklists (http://www.dnsstuff.com/tools/ip4r.ch?ip=125.22.64.110) that spamassassin should be searching. Unfortunately spamassassin d

Re: Need help with SA and Received headers... SOLVED

2006-09-17 Thread Daryl C. W. O'Shea
thekillerbean wrote: thekillerbean wrote: All is good! One last question while on this topic - I was restarting sendmail, spamassassin and spamass-milter whenever I made a change to local.cf in the /etc/mail/spamassassin dir - is this really necessary or was it overkill? You only need to

Re: DNS lookup problem

2006-09-17 Thread John D. Hardin
On Sun, 17 Sep 2006, Dhaval Patel wrote: > debug: received-header: parsed as [ ip=125.22.64.110 rdns= > helo=v3uviqi8.i2uvfox.aol.com > by=jwblack.patel.sh ident= envfrom= intl=0 id=5EA056E02B auth= ] > debug: received-header: relay 125.22.64.110 trusted? no internal? no > debug: metadata: X-Spam

RE: Can i use MySQL pref when i call spam from amavisd ?

2006-09-17 Thread Num ber
look more on amavisd.conf and sql and you be there I sow just before the Amavisd-new.sql and i really happy.. Amavisd-new.sql allow : WhiteListe, BlackListe,and more param like SpamScore !! Many thanks, i'm going to use it _ Votr

Re: DNS lookup problem

2006-09-17 Thread Dhaval Patel
Thanks for the tip. Tried it but still the same, please see the output below. Thanks, Dhaval "John D. Hardin" <[EMAIL PROTECTED]> said: > On Sun, 17 Sep 2006, Dhaval Patel wrote: > > > debug: is Net::DNS::Resolver available? yes > > debug: Net::DNS version: 0.48 > > The current version of Net

RE: Can i use MySQL pref when i call spam from amavisd ?

2006-09-17 Thread Benny Pedersen
On Sun, September 17, 2006 18:42, Num ber wrote: > My user wasn't unix account, But virtual user on mysql. > i can't user "per user pref" :-( > > The only way is to use blacklist and whitelist for all user? no amavisd sql supports ALL pr user config, just not pr user spam scores with spamassass

Re: DNS lookup problem

2006-09-17 Thread John D. Hardin
On Sun, 17 Sep 2006, Dhaval Patel wrote: > debug: is Net::DNS::Resolver available? yes > debug: Net::DNS version: 0.48 The current version of Net::DNS is 0.58, and there have been recommendations on-list to upgrade in response to other problems, so you might try updating it using CPAN and then tr

RE: Can i use MySQL pref when i call spam from amavisd ?

2006-09-17 Thread Num ber
if all users are setup as unix accounts simply use user_prefs file for each user will do, but i don't know if that will be honnered from amavisd, to my knowlegde it will only work for amavis user so to get it working like you like, you have to manage virtual to in spamd/spamc but then amavisd is

Re: Message containing bitmaps with random lines not being blocked

2006-09-17 Thread Robert Nicholson
So do you frequently expect to get mail with words as images then? I mean are you saying that SA doesn't spots there without it? Can I see an example of a message that only OCR scored as spam? On Sep 15, 2006, at 5:07 PM, Robert S wrote: http://bugs.gentoo.org/show_bug.cgi?id=145939 for g

DNS lookup problem

2006-09-17 Thread Dhaval Patel
Please bare with me while I try to get spamassassin fully tweaked. I received a spam in my inbox which clearly came from an ip that is on blacklists (http://www.dnsstuff.com/tools/ip4r.ch?ip=125.22.64.110) that spamassassin should be searching. Unfortunately spamassassin did not perform these s

Re: Setting up DKIM and DomainKeys mail signing and verification

2006-09-17 Thread Benny Pedersen
On Tue, September 12, 2006 16:59, Mark Martinec wrote: > I'm finishing up writing what I have learned in the last > couple of weeks on setting up a DKIM/DK signing/verifying sorry i need to know more: # Local config options needing unique settings MTA_NAMES="local" KEYFILE="/etc/dkfilter/dk1.

Re: Need help with SA and Received headers... SOLVED

2006-09-17 Thread thekillerbean
thekillerbean wrote: > > All is good! > One last question while on this topic - I was restarting sendmail, spamassassin and spamass-milter whenever I made a change to local.cf in the /etc/mail/spamassassin dir - is this really necessary or was it overkill? Cheers, tkb. -- View this message

Re: Setting up DKIM and DomainKeys mail signing and verification

2006-09-17 Thread Benny Pedersen
On Tue, September 12, 2006 16:59, Mark Martinec wrote: > I'm finishing up writing what I have learned in the last > couple of weeks on setting up a DKIM/DK signing/verifying thanks Mark how does one do signing multible domains ? man 8 dk-filter says to make a internal domain file and add this a

RE: Can i use MySQL pref when i call spam from amavisd ?

2006-09-17 Thread Benny Pedersen
On Sun, September 17, 2006 12:26, Num ber wrote: > Thanks you for your reply.. i was borring anyway with dk-domain keys :-) >>On Sat, September 16, 2006 23:10, Num ber wrote: >>> Nobody know if i can use sql pref with my configuration? >> yes if you call spamc > Like that -> Postfix -> Amavisd -

RE: Can i use MySQL pref when i call spam from amavisd ?

2006-09-17 Thread Num ber
Thanks you for your reply.. On Sat, September 16, 2006 23:10, Num ber wrote: > Nobody know if i can use sql pref with my configuration? yes if you call spamc Like that -> Postfix -> Amavisd -> Spamc -> Mysql ? But, i see below amavisd have sql pref but that don't solve my problem ? I can't

Re: Need help with SA and Received headers...

2006-09-17 Thread jdow
From: "thekillerbean" <[EMAIL PROTECTED]> jdow wrote: Trust in-mtaX.MYISP.com.au. {^_^} Thanks a ton. Now I know that I can simply type in the FQDN! I called my ISP and asked for the subnet range they use for their mail servers and that's what I put in the local.cf file. Nope. I believe

Re: Need help with SA and Received headers...

2006-09-17 Thread Daryl C. W. O'Shea
Daryl C. W. O'Shea wrote: thekillerbean wrote: Now I know that I can simply type in the FQDN! No, you can't. Single IPs or IP ranges using CIDR notation only. Oh yeah, you can use one, two, or three parts of a dot quad, with a trailing dot, for /8, /16, or /24s too, but IP ranges nonethe

Re: Need help with SA and Received headers...

2006-09-17 Thread Daryl C. W. O'Shea
thekillerbean wrote: jdow wrote: Trust in-mtaX.MYISP.com.au. {^_^} Thanks a ton. Now I know that I can simply type in the FQDN! No, you can't. Single IPs or IP ranges using CIDR notation only. I called my ISP and asked for the subnet range they use for their mail servers and that's w

Re: Need help with SA and Received headers...

2006-09-17 Thread thekillerbean
jdow wrote: > > Trust in-mtaX.MYISP.com.au. > {^_^} > Thanks a ton. Now I know that I can simply type in the FQDN! I called my ISP and asked for the subnet range they use for their mail servers and that's what I put in the local.cf file. Cheers, tkb. -- View this message in context: http