Re: whitelist_from_rcvd inquiry

2007-04-09 Thread Matt Kettler
R Lists06 wrote: >> Matt Kettler wrote: >> Separate. >> > *snip* > >> In general, for options that you can do many of on one line, you only >> put the option name itself once, you don't repeat it. >> > > Thanks > > What I was getting at is what if there are multiple sending hosts... >

Re: Email service that does graylisting/razor/spamfiltering/etc?

2007-04-09 Thread Evan Platt
At 06:35 PM 4/9/2007, Kelly Jones wrote: I have about 20 domains, and any email to any of these domains ([EMAIL PROTECTED]) forwards to a single mailbox. I handle email for all these domains myself, but it's becoming a hassle: % dictionary attacks mean I often get the same spam repeatedly WHY

Email service that does graylisting/razor/spamfiltering/etc?

2007-04-09 Thread Kelly Jones
I have about 20 domains, and any email to any of these domains ([EMAIL PROTECTED]) forwards to a single mailbox. I handle email for all these domains myself, but it's becoming a hassle: % dictionary attacks mean I often get the same spam repeatedly % I'm too scared to change my SMTP config (to

Re: spam test

2007-04-09 Thread Bob McClure Jr
On one server I manage, I found Botnet to be a tremendous help in tagging spam, but does produce some FPs, almost entirely because of misconfigured DNS. After notifying several mail/network admins of their fubar DNS, I got tired of trying to clean up the Internet and throttled Botnet back to 4.5 p

RE: whitelist_from_rcvd inquiry

2007-04-09 Thread R Lists06
> Matt Kettler wrote: > Separate. *snip* > In general, for options that you can do many of on one line, you only > put the option name itself once, you don't repeat it. Thanks What I was getting at is what if there are multiple sending hosts... Obviously the thing that changed was the last para

Re: whitelist_from_rcvd inquiry

2007-04-09 Thread Matt Kettler
R Lists06 wrote: > Greeting, > > Can lines be combined in a situation like this... > > whitelist_from_rcvd [EMAIL PROTECTED] hisdomain.com whitelist_from_rcvd > [EMAIL PROTECTED] hisotherdomain.com > > > does this work or should this be done? > No. If you run spamassassin --lint, it should gener

whitelist_from_rcvd inquiry

2007-04-09 Thread R Lists06
Greeting, Can lines be combined in a situation like this... whitelist_from_rcvd [EMAIL PROTECTED] hisdomain.com whitelist_from_rcvd [EMAIL PROTECTED] hisotherdomain.com does this work or should this be done? can they be combined into one statement or should they be separate? Any other tips e

Re: spam test

2007-04-09 Thread Peter Russell
I have my trusted network setup correctly - but botnet fires on so many domains, domains which would normally like to trust. Yes its entirely possible its not set up right...but i followed the instructions as best i could. Bill Landry wrote: Robert Fitzpatrick wrote the following on 4/9/20

Re: spam test

2007-04-09 Thread Bill Landry
Robert Fitzpatrick wrote the following on 4/9/2007 4:37 PM -0800: > Bill Landry wrote: >> Peter Russell wrote the following on 4/9/2007 3:41 PM -0800: >>> We dont use Botnet anymore, it fires on anything/everything and >>> drives me nuts. >>> >> You must not have Botnet and/or your trusted_networks

Re: spam test

2007-04-09 Thread Robert Fitzpatrick
Bill Landry wrote: Peter Russell wrote the following on 4/9/2007 3:41 PM -0800: We dont use Botnet anymore, it fires on anything/everything and drives me nuts. You must not have Botnet and/or your trusted_networks setup correctly then. Bill I am running Postfix+Amavisd-new+SA 3.1.7 gateways

Tutorial for setting up a spamassassin mailfilter? (No local mailboxes except spamtrap)

2007-04-09 Thread Philip Seccombe
Hey everyone, I've found various opinions on this when I search so thought I would ask here and see what people say. Currently I have a debian box with spamassassin being called by qmail on incoming emails, emails are then forwarded back out to the external mail servers. I am wanting to

Re: Messages receiving High Score but still getting through

2007-04-09 Thread kiwidesign
I don't believe we use spamd as we run spamassassin from within MailScanner. Is there a similar fix for our MailScanner configuration? Thanks Kiwidesign -- View this message in context: http://www.nabble.com/Messages-receiving-High-Score-but-still-getting-through-tf3503348.html#a9911174 Sent f

Re: spam test

2007-04-09 Thread Bill Landry
Peter Russell wrote the following on 4/9/2007 3:41 PM -0800: We dont use Botnet anymore, it fires on anything/everything and drives me nuts. You must not have Botnet and/or your trusted_networks setup correctly then. Bill

Re: spam test

2007-04-09 Thread Peter Russell
We dont use Botnet anymore, it fires on anything/everything and drives me nuts. Content analysis details: (7.5 points, 5.0 required) pts rule name description -- -- 1.5 FH_RELAY_NODNS We could no

Re: spam test

2007-04-09 Thread Evan Platt
At 01:53 PM 4/9/2007, Robert Fitzpatrick wrote: Can anyone run any of these messages to see how your rules score them? Mostly stock symbol spam. I've been improving our scoring with updates today, but still not able to come up with any rules to cover these: http://esmtp.webtent.net/mail1.txt

Re: spam test

2007-04-09 Thread J.
--- Robert Fitzpatrick <[EMAIL PROTECTED]> wrote: > Can anyone run any of these messages to see how your rules score > them? > Mostly stock symbol spam. I've been improving our scoring with > updates > today, but still not able to come up with any rules to cover these: > > http://esmtp.webtent.n

spam test

2007-04-09 Thread Robert Fitzpatrick
Can anyone run any of these messages to see how your rules score them? Mostly stock symbol spam. I've been improving our scoring with updates today, but still not able to come up with any rules to cover these: http://esmtp.webtent.net/mail1.txt http://esmtp.webtent.net/mail2.txt http://esmtp.webte

R: R: Listas Blancas Spamassassin

2007-04-09 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: Scott Lockwood [mailto:[EMAIL PROTECTED] > > On Mon, 2007-04-09 at 20:46 +0200, Giampaolo Tomassoni wrote: > > Nobody has an edition with the problem. The only edition is, he is > > harder to help him in Spanish who English. If his English is as bad > as > > m

Re: R: Listas Blancas Spamassassin

2007-04-09 Thread Scott Lockwood
On Mon, 2007-04-09 at 20:46 +0200, Giampaolo Tomassoni wrote: > Nobody has an edition with the problem. The only edition is, he is > harder to help him in Spanish who English. If his English is as bad as > my Spanish, you can always use the fish of Babel de AltaVista. I used > it to write this note

R: Listas Blancas Spamassassin

2007-04-09 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: Scott Lockwood [mailto:[EMAIL PROTECTED] > > On Mon, 2007-04-09 at 20:09 +0200, night duke wrote: > > Quisiera dar las gracias a toda la gente de la lista. > > Efectivamente puedo hablar en Ingles o en castellano pero hay ciertas > > cosas que quizas se entien

spamd: server killed by SIGTERM

2007-04-09 Thread J.
I got an obvious spam a little while ago that got scored "X-Spam-Status: No, hits=? required=?" so I looked up the message in the system log. Check out line 5 below (server killed by SIGTERM): Apr 9 10:35:02 localhost spamd[8657]: spamd: result: Y 14 - BAYES_99,RCVD_IN_NJABL_DUL,RCVD_IN_PBL,RCVD_

Re: Listas Blancas Spamassassin

2007-04-09 Thread Scott Lockwood
On Mon, 2007-04-09 at 20:09 +0200, night duke wrote: > Quisiera dar las gracias a toda la gente de la lista. > Efectivamente puedo hablar en Ingles o en castellano pero hay ciertas > cosas que quizas se entienden mejor en el idioma que suelo usar todos > los dias,el castellano o español. > > El

Re: Question about Spam Assassin and Google Analytics

2007-04-09 Thread Michele Neylon :: Blacknight
Dean Shaw wrote: We recently installed Google Analytics on our site and would like to incorporate the tracking on our HTML-based email campaigns. On our first attempt Spam Assassin flagged our email as ‘porn’. The only different factor was the inclusion of GA code in the HTML of the email.

Re: Question about Spam Assassin and Google Analytics

2007-04-09 Thread Kelson
Dean Shaw wrote: We recently installed Google Analytics on our site and would like to incorporate the tracking on our HTML-based email campaigns. On our first attempt Spam Assassin flagged our email as ‘porn’. The only different factor was the inclusion of GA code in the HTML of the email.

Re: Listas Blancas Spamassassin

2007-04-09 Thread night duke
Quisiera dar las gracias a toda la gente de la lista. Efectivamente puedo hablar en Ingles o en castellano pero hay ciertas cosas que quizas se entienden mejor en el idioma que suelo usar todos los dias,el castellano o español. El principal problema que tengo con el spamassassin es que es

Re: Question about Spam Assassin and Google Analytics

2007-04-09 Thread John D. Hardin
On Mon, 9 Apr 2007, Michele Neylon :: Blacknight wrote: > Dean Shaw wrote: > > We recently installed Google Analytics on our site and would like to > > incorporate the tracking on our HTML-based email campaigns. > > Regardless of that issue, you do realise that putting Javascript > into emails is

Re: Debugging my config

2007-04-09 Thread Robert Fitzpatrick
On Mon, 2007-04-09 at 13:13 -0400, Theo Van Dinter wrote: > On Mon, Apr 09, 2007 at 01:07:35PM -0400, Robert Fitzpatrick wrote: > > sa-update -D --updatedir /usr/local/share/spamassassin --channel > > updates.spamassassin.org > > Do you have a reason to be using --updatedir? If not, stop it. >

Re: Debugging my config

2007-04-09 Thread Theo Van Dinter
On Mon, Apr 09, 2007 at 01:07:35PM -0400, Robert Fitzpatrick wrote: > sa-update -D --updatedir /usr/local/share/spamassassin --channel > updates.spamassassin.org Do you have a reason to be using --updatedir? If not, stop it. > Also, I ran sa-update alone and noticed on our FreeBSD system that i

Debugging my config

2007-04-09 Thread Robert Fitzpatrick
I am getting reports a quite a few spam messages and found a lot when looking in our archives. Trying to debug our SA 3.1.7 configuration, I am finding the following when doing 'sa-update -D', we do seem to be getting a lot of stock symbol spam getting through. If I clear out the updates from the l

Re: Enabling Plugins

2007-04-09 Thread Theo Van Dinter
On Mon, Apr 09, 2007 at 09:19:54AM -0700, hubby2debbie wrote: > I've gone to etc/mail/spamassassin/init.pre, as well as the v310.pre and > v312.pre files in the same directory, and all three of them have the > directive "loadplugin Mail::SpamAssassin::Plugin::TextCat" (uncommented). If the plugins

Re: Enabling Plugins

2007-04-09 Thread hubby2debbie
> > *- it can be done under certain circumstances and reworking the standard > config files a little bit, but unless you know what these are without my > telling you, you should use a pre file. :) > I've gone to etc/mail/spamassassin/init.pre, as well as the v310.pre and v312.pre files in t

Re: Spam bounceback attack

2007-04-09 Thread J.
--- "Rob McEwen (PowerView Systems)" <[EMAIL PROTECTED]> wrote: > "J." said: > >Thanks Ram. Not sure how to implement recipient verification with > my > >setup, but I'll look into it. I have an SPF record for my domain > > I'm confused. Are you all saying that J's mail server was processing > a

Re: Enabling Plugins

2007-04-09 Thread Theo Van Dinter
On Mon, Apr 09, 2007 at 08:41:38AM -0700, hubby2debbie wrote: > I'm running spamassassin on a linux vps, which had it already installed, but > none of the plugins were installed. I've loaded the available plugins into > the etc/spamassassin/Plugin/ directory, and enabled the TextCat plugin in > the

Enabling Plugins

2007-04-09 Thread hubby2debbie
I'm running spamassassin on a linux vps, which had it already installed, but none of the plugins were installed. I've loaded the available plugins into the etc/spamassassin/Plugin/ directory, and enabled the TextCat plugin in the user_prefs file. I've also added a directive stating what languages

Re: Spam bounceback attack

2007-04-09 Thread Rob McEwen (PowerView Systems)
"J." said: >Thanks Ram. Not sure how to implement recipient verification with my >setup, but I'll look into it. I have an SPF record for my domain I'm confused. Are you all saying that J's mail server was processing all incoming e-mails, even if there wasn't an alias set up on that domain? in ot

Question about Spam Assassin and Google Analytics

2007-04-09 Thread Dean Shaw
We recently installed Google Analytics on our site and would like to incorporate the tracking on our HTML-based email campaigns. On our first attempt Spam Assassin flagged our email as 'porn'. The only different factor was the inclusion of GA code in the HTML of the email. Has anyone enc

Re: Spam bounceback attack

2007-04-09 Thread Jamie L. Penman-Smithson
On 9 Apr 2007, at 15:18, J. wrote: --- ram <[EMAIL PROTECTED]> wrote: 1) Verify recipient addresses 2) Add SPF records for your domain. And blacklist those servers who accept forged mails from your domain and bounce them 3) If you are suddenly facing a flush of Mailer-"Demons" give a TEMPFAIL

Re: Spam bounceback attack

2007-04-09 Thread J.
--- ram <[EMAIL PROTECTED]> wrote: > On Sun, 2007-04-08 at 11:14 -0700, J. wrote: > > Not sure if this is connected to my agressive smtp connection > rejection > > campaign over the past week, but we've been hit for the first time > in > > many months with a backscatter spam attack. Spammer(s) us

Re: Spam bounceback attack

2007-04-09 Thread ram
On Sun, 2007-04-08 at 11:14 -0700, J. wrote: > Not sure if this is connected to my agressive smtp connection rejection > campaign over the past week, but we've been hit for the first time in > many months with a backscatter spam attack. Spammer(s) use random > addresses with our domain for their sp