Re: Whitelisting IP's

2008-03-08 Thread Daryl C. W. O'Shea
On 08/03/2008 2:20 PM, Matt wrote: >>> I have a file that contains a list of all the IP's that have >>> successfully POP3'ed there email within last 15 minutes. Its used for >>> POPB4SMTP. Naturally the IP's in the file are constantly changing. >>> >>> /etc/virtual/pophosts >>> >>> Is there anywa

Re: Whitelisting IP's

2008-03-08 Thread Steve Cloutier
Matt-123 wrote: > >> > I have a file that contains a list of all the IP's that have >> > successfully POP3'ed there email within last 15 minutes. Its used for >> > POPB4SMTP. Naturally the IP's in the file are constantly changing. >> > >> > /etc/virtual/pophosts >> > >> > Is there anyway to s

Re: [spamassassin] Re: How to report 120,000 spams a day

2008-03-08 Thread Steve Cloutier
Tuc at T-B-O-H.NET wrote: > >> >> On 08.03.08 18:28, Tuc at T-B-O-H wrote: >> > > Our mail server receives about 128K emails a day. Of >> > > those, 120K are absolutely known spam so I don't even run >> > > them through spamassassin. Of the 8K left, 6K are determined >> > > to be spams, and

Re: [spamassassin] Re: How to report 120,000 spams a day

2008-03-08 Thread Michael Scheidell
-- Michael Scheidell, CTO >|SECNAP Network Security Winner 2008 Network Products Guide Hot Companies FreeBsd SpamAssassin Ports maintainer Charter member, ICSA labs anti-spam consortium > From: "Tuc at T-B-O-H.NET" <[EMAIL PROTECTED]> > Date: Sat, 8 Mar 2008 19:51:49 -0500 (EST) > To: Matus UHLAR

Re: Yet another spam blocker?

2008-03-08 Thread Steve Cloutier
Jari Fredriksson wrote: > >> I just wanted to come up with >> something that blocked spam >> at the protocol level (so the spammer gets an error!!!), > > That's all great.. but the reality may be that the spammer still get no > error. > > ... > H... Well, yes and no :-) Now, it is prob

Re: Yet another spam blocker?

2008-03-08 Thread Jari Fredriksson
> I just wanted to come up with > something that blocked spam > at the protocol level (so the spammer gets an error!!!), That's all great.. but the reality may be that the spammer still get no error. Spam is nowadays delivered thru 3rd party innocent bystanders, and the actual spammer hardly is

Re: [spamassassin] Re: How to report 120,000 spams a day

2008-03-08 Thread Tuc at T-B-O-H.NET
> > On 08.03.08 18:28, Tuc at T-B-O-H wrote: > > > Our mail server receives about 128K emails a day. Of > > > those, 120K are absolutely known spam so I don't even run > > > them through spamassassin. Of the 8K left, 6K are determined > > > to be spams, and 2K are considered "good". > > > > >

Re: How to report 120,000 spams a day

2008-03-08 Thread Matus UHLAR - fantomas
On 08.03.08 18:28, Tuc at T-B-O-H wrote: > > Our mail server receives about 128K emails a day. Of > > those, 120K are absolutely known spam so I don't even run > > them through spamassassin. Of the 8K left, 6K are determined > > to be spams, and 2K are considered "good". > > > > I'm wonde

Re: Setting manual rule scores

2008-03-08 Thread SM
Hello, At 07:25 08-03-2008, Matt Richards wrote: I have read through the FAQ and i cant seem to see an answer to this question, I currently have a spam score of 20 and there are some rules that I would like to trigger as spam, so have a rule score as 20. This is because I use spamassassin with ot

Re: How to report 120,000 spams a day

2008-03-08 Thread Tuc at T-B-O-H
> > Hi, > > Our mail server receives about 128K emails a day. Of > those, 120K are absolutely known spam so I don't even run > them through spamassassin. Of the 8K left, 6K are determined > to be spams, and 2K are considered "good". > > I'm wondering if there is some way to help the

Re: Yet another spam blocker?

2008-03-08 Thread Steve Cloutier
Matt Kettler-3 wrote: > > > .. > Yes, we know that. Our tool is external too. > > The only big difference I see is your tool appears to be a quasi > nonstandard milter for sendmail, that interacts with all phases of > delivery. > > Personally, I use a combination of milter-greylist for filte

Re: Yet another spam blocker?

2008-03-08 Thread Matt Kettler
Steve Cloutier wrote: Hi ! I did a fair amount of sendmail tweaking, and it does indeed do quite a bit (like checking for the existance of domains, etc.), but *not* the sort of filtering I've been able to do with the external code. Um, Yeah.. We know that. Many of us use SpamAssassin as a

Re: Whitelisting IP's

2008-03-08 Thread Matt
> > I have a file that contains a list of all the IP's that have > > successfully POP3'ed there email within last 15 minutes. Its used for > > POPB4SMTP. Naturally the IP's in the file are constantly changing. > > > > /etc/virtual/pophosts > > > > Is there anyway to setup Spamassassin to whitelis

Re: Domain Name SPAM

2008-03-08 Thread Rob McEwen
John Hardin wrote: I wouldn't recommend doing that for *all* the RBLS, just Zen, and if you're going to make Zen a poison pill, then just put it into the MTA's DNSBL list and spare SA the load. John, Good suggestion... except that I don't think that Dave is using SA. He said he uses Smarter

Re: Domain Name SPAM

2008-03-08 Thread Rob McEwen
uk1host wrote: I have moved the weight of the RBLs including Spamcop and Zen to 30. Hopefully this will cut it back although at the moment I am still getting mail through. Dave, SpamCop and Zen won't block all the spam... but, along the lines of what I said previously, if this adjustment

Re: Domain Name SPAM

2008-03-08 Thread John Hardin
On Sat, 2008-03-08 at 09:22 -0800, uk1host wrote: > > uk1host wrote: > > > > > > I have moved the weight of the RBLs including Spamcop and Zen to 30. > > > > Hopefully this will cut it back although at the moment I am still getting > > mail through. I wouldn't recommend doing that for *all* t

Re: Yet another spam blocker?

2008-03-08 Thread Steve Cloutier
Chris Hoogendyk wrote: > > > Henrik K wrote: >> On Fri, Mar 07, 2008 at 10:07:16PM -0800, Steve Cloutier wrote: >> >>> Hi ! >>> >>> Call me -- whatever :-) I took a look at SpamAssassin a while back, and >>> (at >>> least at the time), it seemed to scan the mailbox file after the >>> messa

Re: Domain Name SPAM

2008-03-08 Thread uk1host
uk1host wrote: > > > I have moved the weight of the RBLs including Spamcop and Zen to 30. > > Hopefully this will cut it back although at the moment I am still getting > mail through. > > -- > MAIL 1 > Return-Path: <[EMAIL PROTECTED]> > Received: fr

Re: Domain Name SPAM

2008-03-08 Thread uk1host
> > I have moved the weight of the RBLs including Spamcop and Zen to 30. > > Hopefully this will cut it back although at the moment I am still getting > mail through. > > -- > MAIL 1 > Return-Path: <[EMAIL PROTECTED]> > Received: from 254.Red-88-12-

Re: Domain Name SPAM

2008-03-08 Thread Martin Gregorie
On Sat, 2008-03-08 at 16:14, Rob McEwen wrote: > > It looks to me like you have some kind of DNS malfunction...or > SmarterMail malfunction. > If you think this may be the case, try using Ethereal/Wireshark while you run a piece of known spam through a freshly started copy of SA. This will give a

Freebsd port p5-Mail-DKIM to .30.1

2008-03-08 Thread Michael Scheidell
Amavisd-new (2.6rc) needs Mail::DKIM .30.1. for outbound signing, and even for SpamAssassin, this version fixes some issues with some gmail and yahoo email, and also has some significant performance increases. I have tested it with the Freebsd SpamAssassin port, and it does seem to decrease

Re: Domain Name SPAM

2008-03-08 Thread Rob McEwen
Dave, I don't think that you can score Zen too high. I'd bump Zen up to the highest score and see what happens. If a legit e-mail were to get blocked by Zen, you'd be able to tell your mail hosting client that the sender is listed on such a world-famous and reliable blacklist that this incomi

Re: Domain Name SPAM

2008-03-08 Thread Rob McEwen
OOPS... When I said "PBL and CBL both will cause this to be on XBL and ZEN as well" I should clarify that: PBL feeds into ZEN, but not XBL (didn't mean to imply that) CBL feeds into XBL and ZEN Nevertheless, since both are in ZEN, this didn't alter my observations about each message and this

Setting manual rule scores

2008-03-08 Thread Matt Richards
Hello, I have read through the FAQ and i cant seem to see an answer to this question, I currently have a spam score of 20 and there are some rules that I would like to trigger as spam, so have a rule score as 20. This is because I use spamassassin with other filters and I would like to use spamas

Re: Domain Name SPAM

2008-03-08 Thread Rob McEwen
uk1host (Dave) wrote: (1) Return-Path: <[EMAIL PROTECTED]> Received: from Wimax-c3-ppy-pt-190-70-170-132.orbitel.net.co [190.70.170.132] by mail.uk1host.co.uk with SMTP; Sat, 8 Mar 2008 08:59:14 -060 190.70.170.132 is currently listed on CBL, SpamCop, and ivmSIP. (XBL and ZEN would also have

Re: Yet another spam blocker?

2008-03-08 Thread Chris Hoogendyk
Henrik K wrote: On Fri, Mar 07, 2008 at 10:07:16PM -0800, Steve Cloutier wrote: Hi ! Call me -- whatever :-) I took a look at SpamAssassin a while back, and (at least at the time), it seemed to scan the mailbox file after the message(s) were received. The program (again, at the time) was

Re: Domain Name SPAM

2008-03-08 Thread uk1host
uk1host wrote: > > > > uk1host wrote: >> >> >> >> Rob McEwen wrote: >>> >>> [EMAIL PROTECTED] wrote: Do you know if there is a list of RBL's and where I can get it from. I have a customer who is getting alot of spam and I need to cut it down alot, he seems to be getting alo

Re: Domain Name SPAM

2008-03-08 Thread Rob McEwen
Dave wrote: I had a auto response on my mail (which I have now removed) and I was getting 300+ spam over night. I have marked it to enable for filtering and enable for incoming blocking is this correct? Dave, First, it is good that you removed the "auto response" because some argue that

Re: [spamassassin] Re: spamc/spamd .. diff versions, diff systems

2008-03-08 Thread Tuc at T-B-O-H.NET
> > Is that to the "Any issues" or "Libwrap"? :) I'm guessing > > just to the libwrap. > > Both. > Thanks. > > > Will probably try it over the weekend and see what happens. > > > > Which system will it update the .spamassassin directory on? > > The "spamc" client, or "spamd"

Re: Domain Name SPAM

2008-03-08 Thread uk1host
uk1host wrote: > > > > Rob McEwen wrote: >> >> [EMAIL PROTECTED] wrote: >>> Do you know if there is a list of RBL's and where I can get it from. >>> I have a customer who is getting alot of spam and I need to cut it >>> down alot, he seems to be getting alot from drug companies and medical >

Re: Domain Name SPAM

2008-03-08 Thread uk1host
Rob McEwen wrote: > > [EMAIL PROTECTED] wrote: >> Do you know if there is a list of RBL's and where I can get it from. >> I have a customer who is getting alot of spam and I need to cut it >> down alot, he seems to be getting alot from drug companies and medical >> extension companies. > > Dav