Re: dns query timed out while sa-update

Hello Dan, Yes the DNS resolve is working I guess, here is output for dig -sh-2.05b# dig 5.2.3.updates.spamassassin.org txt <<>> DiG 9.3.2 <<>> 5.2.3.updates.spamassassin.org txt ;; global options: printcmd ;; Got

Re: experienced comments on these rules and their effectiveness in large installations please

RobertH wrote: > would those of you in the know please comment based upon your data re: the > below rules and their effectiveness in hitting spam vrs ham and/or false > readings in diverse or fairly diverse large scale isp and/or corporate > installations please > A general grasp of how it perfo

experienced comments on these rules and their effectiveness in large installations please

would those of you in the know please comment based upon your data re: the below rules and their effectiveness in hitting spam vrs ham and/or false readings in diverse or fairly diverse large scale isp and/or corporate installations please RCVD_IN_BL_SPAMCOP_NET RCVD_IN_DSBL RCVD

Re: excessive scan time

On Thu, 22 Jan 2009 12:37:09 +, Justin Mason wrote: > you should definitely investigate ways to avoid doing NFS reads/writes > of the bayes files -- that is extremely I/O intensive, and NFS deals > with it very badly. OK. Noted. Maybe I will push the bayes database into MySQL as previously

Re: excessive scan time

On Thu, 22 Jan 2009 13:27:57 +0100, Jonas Eckerman wrote: > > If you're not allready using a SQL database for bayes and AWL I'd > suggest you do that. Those two I might be willing to consider, however... > I'd also suggest using SQL for user preferences. The user interface (i.e. editing a file

Re: [SPAM]IP Reputation

postfix, spamassassin and amavisd ;-) SA comes with several ip reputation tests, plugins and scores. Barracuda has one, with special spamassassin support (will be in SA 3.3, for 3.2x you have to manually add it) If you are looking for more than what SA already has, look into the commercial D

IP Reputation

Hi all... I would like to install an antispam server using postfix +spamassassin+amavis. Is there something that I can install to verify the reputation IP ? Any additional software ? thanks a lot.

Re: How can this free MX backup service be exploited?

RobertH wrote: I'm doing an experimental free MX backup service and wondering if it will get exploited. I'm wondering if I'm overlooking anything obvious? Here's the info on it: http://www.free-mx-backup.com The idea is that it detects if we are the secondary and not the primary MX

Re: SAs vbounce and autolearn

99 too high??? :-[ (amavisd as a 'bounce_killer_score' that is 100 in the amavisd.conf-dist). does something similar. Justin Mason wrote: have you changed the score of the vbounce rules from 0.1? this is why you shouldn't ;) --j. On Thu, Jan 22, 2009 at 16:51, Michael Scheidell wrote:

Re: SAs vbounce and autolearn

have you changed the score of the vbounce rules from 0.1? this is why you shouldn't ;) --j. On Thu, Jan 22, 2009 at 16:51, Michael Scheidell wrote: > Just found out why, all of a sudden, users who never got blocked, now are > getting blocked. > > Christmas, these brilliant people set up 'I am o

Re: How can this free MX backup service be exploited?

Steve Freegard wrote: Marc Perkel wrote: I'm doing an experimental free MX backup service and wondering if it will get exploited. I'm wondering if I'm overlooking anything obvious? Here's the info on it: http://www.free-mx-backup.com The idea is that it detects if we are the secondary and

SAs vbounce and autolearn

Just found out why, all of a sudden, users who never got blocked, now are getting blocked. Christmas, these brilliant people set up 'I am out of the office' messages, which spamassassin 'vbounce' sees as a 'bounce'. (seriously, is a OOO backscatter?) if you don't set tflags noautolearn on you

Re: dns query timed out while sa-update

On Thu, 2009-01-22 at 06:14 -0800, prkr wrote: > Hi, > /var/lib/spamassassin/3.002005/updates_spamassassin_org.pre > ;; query(5.2.3.updates.spamassassin.org, TXT) > [1237] dbg: dns: query failed: 5.2.3.updates.spamassassin.org => query timed > out > [1237] dbg: channel: no updates available, skipp

dns query timed out which sa-update (ver 3.2.5)

Hi, I am using Spamassassin 3.2.5 on a Big Endian PowerPC system and when I run sa-update I get the following message dbg: dns: query failed: 5.2.3.updates.spamassassin.org => query timed out On packet capture I can see the response for the DNS query. I

dns query timed out while sa-update

Hi, I am using Spamassassin 3.2.5 on a Big Endian PowerPC system and when I run sa-update I get the following message dbg: dns: query failed: 5.2.3.updates.spamassassin.org => query timed out On packet capture I can see the response for the DNS query. I have tried using Net::DNS 0.64 as well as

Re: excessive scan time

you should definitely investigate ways to avoid doing NFS reads/writes of the bayes files -- that is extremely I/O intensive, and NFS deals with it very badly. --j. On Thu, Jan 22, 2009 at 12:27, Jonas Eckerman wrote: > Brian J. Murrell wrote: > >> One thing worth noting is that I have spamassas

Re: excessive scan time

Brian J. Murrell wrote: One thing worth noting is that I have spamassassin using ~/.spamassassin here and people's home dirs can be (i.e. NFS) mounted from remote machines (i.e. their primary workstations), which do occasionally get shut down. If you're not allready using a SQL database for

Re: Whitelisting or passing messeges using db query

On Wed, 2009-01-21 at 16:53 -0800, malatio wrote: > How could I hook spamassassin up to a script that connects to my db (mysql) > and marks a message as non-spam if it finds that the 'To' address is found > in a certain table? > Write a plugin that does the lookup and returns a reply that can be u

Re: Make a rule to block fake url to pdf files...

I have experience with spamassassin and I write many others rules by myself.. (my english can be poor, but i'm not stupid...) Thank you for help Kai Schaetzl escreveu: You don't, I think. You asked "how can I make a rule ...". I gave you some hints which matches you could use for good rul

Re: How can this free MX backup service be exploited?

On Wed, 2009-01-21 at 13:28 -0800, Marc Perkel wrote: > I'm doing an experimental free MX backup service and wondering if it > will get exploited. I'm wondering if I'm overlooking anything obvious? > Here's the info on it: > > http://www.free-mx-backup.com > > The idea is that it detects if we

Re: bayes autolearn off but journal updated

On Thu, Jan 22, 2009 at 10:05, Paweł Sasin wrote: >> >>> Yes, more specifically, it's mostly going to be updating the >> >>> "atime", or time of last access, records for tokens. This time is >> >>> used by the expiry process to drop the least recently used tokens. >> >>> >> >> >> >> What does SA d

Re: bayes autolearn off but journal updated

> >> On 20.01.09 19:45, Matt Kettler wrote: > >>> Yes, more specifically, it's mostly going to be updating the "atime", or > >>> time of last access, records for tokens. This time is used by the expiry > >>> process to drop the least recently used tokens. > > Matus UHLAR - fantomas wrote: > >> Wha

Re: bayes autolearn off but journal updated

> >>> Yes, more specifically, it's mostly going to be updating the > >>> "atime", or time of last access, records for tokens. This time is > >>> used by the expiry process to drop the least recently used tokens. > >>> > >> > >> What does SA do, if it can't r/w open bayes database? Will it skip > >>

Re: bayes autolearn off but journal updated

On Thu, Jan 22, 2009 at 02:48, Matt Kettler wrote: > Matus UHLAR - fantomas wrote: >> >> On 20.01.09 19:45, Matt Kettler wrote: >> >>> Yes, more specifically, it's mostly going to be updating the "atime", or >>> time of last access, records for tokens. This time is used by the expiry >>> process t