Re: Wild behavior by SA-3.2.0

2007-05-13 Thread Loren Wilton
spamd: result: Y 5 - DKIM_SIGNED,DKIM_VERIFIED,DK_SIGNED,DK_VERIFIED,HTML_IMAGE_ONLY_32, HTML_MESSAGE,INVALID_DATE,MIME_HTML_ONLY,MIME_QP_LONG_LINE,MISSING_MIMEOLE,SPF_PASS My guess, and only a guess, is that the mail message might somehow have been corrupted on the first try, and "fixed" by th

Re: Wild behavior by SA-3.2.0

2007-05-13 Thread Jason Haar
Jason Haar wrote: > > spamd: result: . 1 - > DKIM_POLICY_SIGNSOME,HTML_IMAGE_ONLY_32,HTML_MESSAGE,SPF_PASS > > I can at least answer the DomainKey differences now. Exchange likes removing headers it thinks aren't necessary - so although Dell is signing their emails, the headers don't show up in

Wild behavior by SA-3.2.0

2007-05-13 Thread Jason Haar
We are seeing SA-3.2.0 acting strangely/inconsistently on our FC3 servers Ever since upgrading from 3.1.8 to 3.2.0, we have started tagging HAM that we never had problems with before. e.g. we just had it tag email from Dell as spam with scores >5 as follows: spamd: result: Y 5 - DKIM_SIGNED,DKIM

Re: razor and pyzor

2007-05-13 Thread Gary V
Pyzor is not actively maintained. It has not been for a while. All new pyzor installations use the main pyzor server. That server is overloaded and queries will often timeout (5 seconds wasted). Some generous person (Milton?) created a mirror a while ago and it responds much quicker. The mailin

Re: razor and pyzor

2007-05-13 Thread Gary V
On Sunday 13 May 2007 12:28, Gary V wrote: Thanks for the excellent notes! > The run 'pyzor discover'. This creates > /root/.pyzor/servers which is a file that contains the IP address and port > to the main pyzor server. Don't use that server. Edit and change to > 82.94.255.100:24441 Why? --

Re: razor and pyzor

2007-05-13 Thread Loren Wilton
The run 'pyzor discover'. This creates /root/.pyzor/servers which is a file that contains the IP address and port to the main pyzor server. Don't use that server. Edit and change to 82.94.255.100:24441 Why? I believe I've read that the main Pyzor servers are noted for returning timeouts rat

Re: razor and pyzor

2007-05-13 Thread Phil Barnett
On Sunday 13 May 2007 12:28, Gary V wrote: Thanks for the excellent notes! > The run 'pyzor discover'. This creates > /root/.pyzor/servers which is a file that contains the IP address and port > to the main pyzor server. Don't use that server. Edit and change to > 82.94.255.100:24441 Why? -- P

Re: Inappropriate use of E-Mail addresses

2007-05-13 Thread Gene Heskett
On Sunday 13 May 2007, jdow wrote: >I can't. But I can offer sympathy. Welcome to the world of the "Joe Job." >It is the chief reason that I have pledged to NEVER EVER find in favor of >a spammer if I find myself on a jury with him as the plaintiff or defendant. > >Besides, I'd probably jump over t

Re: R: R: Inappropriate use of E-Mail addresses

2007-05-13 Thread Dave Pooser
> Bart, you're right here, but if I was a spammer, I would avoid using > SPF/SenderID-protected e-mail addresses in my From: headers, since it would > reduce the choices of my message reaching dest. I can say that since we started using SPF at $DAYJOB and finally killed the fershlugginer catchall

R: R: Inappropriate use of E-Mail addresses

2007-05-13 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: Bart Schaefer [mailto:[EMAIL PROTECTED] > > On 5/13/07, Gregory P. Ennis <[EMAIL PROTECTED]> wrote: > > SPF seems very interesting. Does spamAssassin automatically use an > SPF > > record if it exists? > > There's a plugin. > > > Do I set up an SPF record w

Re: Massive Spam Attack?

2007-05-13 Thread Jason Frisvold
Thanks for the heads up on this... This has given me a few ideas on some custom blocking software... If it works out, ill be sure to release it... On 5/13/07, Faisal N Jawdat <[EMAIL PROTECTED]> wrote: Given the level of the traffic, you might look at implementing something like Deny Spammers

Re: Massive Spam Attack?

2007-05-13 Thread Jason Frisvold
Thanks for the heads up on this... This has given me a few ideas on some custom blocking software... If it works out, ill be sure to release it... On 5/13/07, Faisal N Jawdat <[EMAIL PROTECTED]> wrote: Given the level of the traffic, you might look at implementing something like Deny Spammers

Re: R: Inappropriate use of E-Mail addresses

2007-05-13 Thread Bart Schaefer
On 5/13/07, Gregory P. Ennis <[EMAIL PROTECTED]> wrote: SPF seems very interesting. Does spamAssassin automatically use an SPF record if it exists? There's a plugin. Do I set up an SPF record with whoever manages my MX DNS record? Yes. It's a TXT record. Some DNS hosting companies will s

RE: razor and pyzor

2007-05-13 Thread Gary V
PS wget http://spamassassin.apache.org/full/3.0.x/dist/sample-spam.txt razor-check -d sample-spam.txt | more The razor servers run on tcp port 2703. _ PC Magazine’s 2007 editors’ choice for best Web mail—award-winning Windows Live

RE: razor and pyzor

2007-05-13 Thread Gary V
Greetings I am not new to SA However, I am new to razor and pyzor... I must admit to only cursory viewing of any of those type of posts for the past year or more... Are those of you running medium to high volume mail servers happy with razor and pyzor for just the scoring they provide? Sho

Re: Massive Spam Attack?

2007-05-13 Thread Faisal N Jawdat
Given the level of the traffic, you might look at implementing something like Deny Spammers at he /24 level (rather than the host level). https://sourceforge.net/projects/deny-spammers/ -faisal On May 13, 2007, at 12:15 AM, Jason Frisvold wrote: On 5/12/07, Jason Frisvold <[EMAIL PROTECTE

Re: R: Inappropriate use of E-Mail addresses

2007-05-13 Thread Gregory P. Ennis
On Sun, 2007-05-13 at 16:19 +0200, Giampaolo Tomassoni wrote: > > -Messaggio originale- > > Da: Gregory P. Ennis [mailto:[EMAIL PROTECTED] > > > > On Sun, 2007-05-13 at 15:16 +0200, Giampaolo Tomassoni wrote: > > > > -Messaggio originale- > > > > Da: Gregory P. Ennis [mailto:[EMAIL

clean copy of 20_vbounce.cf

2007-05-13 Thread RobertH
We cannot seem to get a clean updated copy of 20_vbounce.cf for some reason. Dunce hat accepted. Is there anyway that the Dev's or someone can make this more easily accessible as a text file without the wrapping and such... thanks -- Abba Communications Spokane, WA www.abbacomm.net

R: Inappropriate use of E-Mail addresses

2007-05-13 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: Gregory P. Ennis [mailto:[EMAIL PROTECTED] > > On Sun, 2007-05-13 at 15:16 +0200, Giampaolo Tomassoni wrote: > > > -Messaggio originale- > > > Da: Gregory P. Ennis [mailto:[EMAIL PROTECTED] > > > > > > Everyone, > > > > > > I have used spamassassin on

RE: Inappropriate use of E-Mail addresses

2007-05-13 Thread Gregory P. Ennis
On Sun, 2007-05-13 at 09:53 -0400, Michael Scheidell wrote: > > -Original Message- > > From: Gregory P. Ennis [mailto:[EMAIL PROTECTED] > > Sent: Sunday, May 13, 2007 9:50 AM > > To: jdow > > Cc: users@spamassassin.apache.org > > Subject: Re: Inappropriate use of E-Mail addresses > > > >

Re: Inappropriate use of E-Mail addresses

2007-05-13 Thread SM
At 05:52 13-05-2007, Gregory P. Ennis wrote: I have used spamassassin on our mail servers now for over 4 years and have nothing but high praise for what it has done for us. However, recently we have been hit by bounced e-mail that is related to the inappropriate use of some of our e-mail address

RE: Inappropriate use of E-Mail addresses

2007-05-13 Thread Michael Scheidell
> -Original Message- > From: Gregory P. Ennis [mailto:[EMAIL PROTECTED] > Sent: Sunday, May 13, 2007 9:50 AM > To: jdow > Cc: users@spamassassin.apache.org > Subject: Re: Inappropriate use of E-Mail addresses > > > OK... now we are getting somewhere exactly what I want > to do ...

Re: Inappropriate use of E-Mail addresses

2007-05-13 Thread Gregory P. Ennis
OK... now we are getting somewhere exactly what I want to do ... maybe we should create a neighborhood spam watch society :) On Sun, 2007-05-13 at 06:12 -0700, jdow wrote: > I can't. But I can offer sympathy. Welcome to the world of the "Joe Job." > It is the chief reason that I have pledged

R: Inappropriate use of E-Mail addresses

2007-05-13 Thread Giampaolo Tomassoni
> -Messaggio originale- > Da: Gregory P. Ennis [mailto:[EMAIL PROTECTED] > > Everyone, > > I have used spamassassin on our mail servers now for over 4 years and > have nothing but high praise for what it has done for us. However, > recently we have been hit by bounced e-mail that is rela

Re: Inappropriate use of E-Mail addresses

2007-05-13 Thread jdow
I can't. But I can offer sympathy. Welcome to the world of the "Joe Job." It is the chief reason that I have pledged to NEVER EVER find in favor of a spammer if I find myself on a jury with him as the plaintiff or defendant. Besides, I'd probably jump over the jury box railing and gouge his eyes

Inappropriate use of E-Mail addresses

2007-05-13 Thread Gregory P. Ennis
Everyone, I have used spamassassin on our mail servers now for over 4 years and have nothing but high praise for what it has done for us. However, recently we have been hit by bounced e-mail that is related to the inappropriate use of some of our e-mail addresses. It appears that some spam art