False positives for TVD_RCVD_IP and TVD_RCVD_IP4 rules

2008-11-08 Thread Francis Russell
Greetings fellow users, from what I understand, the TVD_RCVD_IP and TVD_RCVD_IP4 rules are used to determine when messages have been relayed via hosts without domain names. As both of these are just regular expressions, this relies on the various mail relays bothering to do the lookups. My

WHO HAS AN ACCOUNT ON psp.com?

2008-11-08 Thread Michelle Konzack
Hello all, here on the list is someone, which Mailserver bomb me with each message I send here. Also this crapy server send out messages with NO FQDN in the From: and the mailserver of my ISP is each time adding the FQDN of the VSever. So, please can the owner or someone using the do

Re: Checking for SPF & DKIM Checks

2008-11-08 Thread Matus UHLAR - fantomas
On 08.11.08 16:47, Neil wrote: > Do you have any recommendations on scores for these rules? I increased score of SPF_FAIL to 10. spfmilter usually crashes and this is another way to implement spf checks for me :) -- Matus UHLAR - fantomas, [EMAIL PROTECTED] ; http://www.fantomas.sk/ Warning: I wi

Re: Checking for SPF & DKIM Checks

2008-11-08 Thread Neil
On 8 Nov 2008, at 16:41, mouss wrote: Neil wrote: [snip] Content analysis details: (-6.1 points, 4.5 required) pts rule name description -- -- -0.0 SPF_PASS SPF: sender matches SPF record

Re: Checking for SPF & DKIM Checks

2008-11-08 Thread mouss
Neil wrote: [snip] Heh, thanks for helping me out with this. Do you have any recommendations on scores for these rules? I use the default scores for these.

Re: Checking for SPF & DKIM Checks

2008-11-08 Thread mouss
Neil wrote: [snip] Content analysis details: (-6.1 points, 4.5 required) pts rule name description -- -- -0.0 SPF_PASS SPF: sender matches SPF record This is because SA list domain has an

Re: Checking for SPF & DKIM Checks

2008-11-08 Thread Neil
On 8 Nov 2008, at 12:53, mouss wrote: Neil wrote: On 8 Nov 2008, at 07:40, mouss wrote: Neil wrote: But still; how can I know that SPF and DKIM checks are working? copy _this_ message (the one you are reading now) to a file: message.eml, then (assuming a Bourne shell, not a C shell), ru

RE: Re: sa-update calling the wrong IP address

2008-11-08 Thread Shawn Berg
For future reference, in the online Wiki on installing on Windows, there was a new Environmental Variable created of RES_NAMESERVER with a value of the IP of your DNS server: RES_NAMESERVER192.168.0.15 Changing this to the new IP of the Windows DNS server solved the issue of sa-update calli

Re: Getting hammered by backscatter

2008-11-08 Thread mouss
Benny Pedersen wrote: On Fri, November 7, 2008 19:31, mouss wrote: postmaster@ so Michell said she rejects mail from postmaster@ from specific clients. http://rfc-ignorant.org/policy-postmaster.php you cited rfci which is irrelevant here. the rfci policy applies to postmaster as a recip

Re: Checking for SPF & DKIM Checks

2008-11-08 Thread mouss
Neil wrote: On 8 Nov 2008, at 07:40, mouss wrote: Neil wrote: But still; how can I know that SPF and DKIM checks are working? copy _this_ message (the one you are reading now) to a file: message.eml, then (assuming a Bourne shell, not a C shell), run # spamassassin -D -t < message.eml 2

Re: Checking for SPF & DKIM Checks

2008-11-08 Thread Neil
On 8 Nov 2008, at 07:40, mouss wrote: Neil wrote: But still; how can I know that SPF and DKIM checks are working? copy _this_ message (the one you are reading now) to a file: message.eml, then (assuming a Bourne shell, not a C shell), run # spamassassin -D -t < message.eml 2>&1 | tee sa

Re: Checking for SPF & DKIM Checks

2008-11-08 Thread mouss
Neil wrote: But still; how can I know that SPF and DKIM checks are working? copy _this_ message (the one you are reading now) to a file: message.eml, then (assuming a Bourne shell, not a C shell), run # spamassassin -D -t < message.eml 2>&1 | tee sa.out and check sa.out for spf and dkim.

Re: Bayes Strategies

2008-11-08 Thread Greg Troxel
Here's a script I use to run sa-learn. How I manage mail is: everything is in maildir for dovecot, delivered to via procmail SA score >= 6 to /dev/null SA score >= N to .spam.N for N in 1..5 other taggging from foo to .spam.foo ham found in .spam.N filed back to INBOX spam found in