Re: Secure spamd server

2009-02-03 Thread Andre
On Wed, 4 Feb 2009, Jason Haar wrote: > mouss wrote: > > stunnel may be more appropriate, and easier to setup and control than > > ssh, in this particular case. > > > > > What's wrong with spamc's native "--ssl" mode - plus a simple ACL at the > spamd end to limit who can reach it? Chances are t

Re: Secure spamd server

2009-02-03 Thread Jason Haar
mouss wrote: > stunnel may be more appropriate, and easier to setup and control than > ssh, in this particular case. > > What's wrong with spamc's native "--ssl" mode - plus a simple ACL at the spamd end to limit who can reach it? Chances are there's a firewall involved in this situation anyway.

Re: Secure spamd server

2009-02-03 Thread mouss
Andre a écrit : > I haven't thought about a VPN yet, but it could probably work. I only > thought about a ssh tunnel so far, which may also work. > stunnel may be more appropriate, and easier to setup and control than ssh, in this particular case. > Still, if anyone knows an esay off-the-shelf s

New version of iXhash plugin - update recommended

2009-02-03 Thread Dirk Bonengel
Hello all, just to make it official: he iXhash plugin has now reached version 1.5.5. Recent changes are: - Adam Stephens noted that hash#3 would be checked even though it ahd not been computed in the first place. In other words: Hash #2 would be checked against twice. This should be corrected,

Re: Secure spamd server

2009-02-03 Thread Marc Perkel
Andre wrote: Hi, we run Exim (4.69) with mail scanned at smtp time via acl. We put an external spamd server to work (works fine). Now we want to extend that setup by permitting another mail server (Exim, same setup) to connect to the spamd server. However, that transport has to happen over th

Re: Question regarding recipient notification of blocked email

2009-02-03 Thread Robert LeBlanc
TWR wrote: > I am running qmail with spamassassin so that any message flagged as 'spam' is > deposited into a users 'spam' folder. The user has to manually login to > their webmail.domain.com spam folder in order to view these messages. Is > there a way for spamassassin to notify the end user on

Re: Secure spamd server

2009-02-03 Thread John Hardin
On Tue, 3 Feb 2009, Andre wrote: I haven't thought about a VPN yet, but it could probably work. I only thought about a ssh tunnel so far, which may also work. That's what I was going to suggest. It's a lot more lightweight than a VPN if this is going to be the only reason the two servers are

Re: Secure spamd server

2009-02-03 Thread Andre
I haven't thought about a VPN yet, but it could probably work. I only thought about a ssh tunnel so far, which may also work. Still, if anyone knows an esay off-the-shelf solution for exim I'd prefer that (if it exists). Thank you, -andre On Tue, 3 Feb 2009, Martin Gregorie wrote: > On Tue, 200

Re: Secure spamd server

2009-02-03 Thread Martin Gregorie
On Tue, 2009-02-03 at 14:46 -0500, Andre wrote: > However, we can't find a way to tell exim to connect via SSL (basically > the equivalent of 'spamc -S'). > > So, how do we enable SSL here? Is anyone running a similar setup? Are > we just missing something? Other stories to tell... > Would settin

Secure spamd server

2009-02-03 Thread Andre
Hi, we run Exim (4.69) with mail scanned at smtp time via acl. We put an external spamd server to work (works fine). Now we want to extend that setup by permitting another mail server (Exim, same setup) to connect to the spamd server. However, that transport has to happen over the open internet,

Re: Uninstalling Razor & Pyzor

2009-02-03 Thread Arthur Dent
On Tue, Feb 03, 2009 at 07:09:57PM +0100, Karsten Bräckelmann wrote: > On Tue, 2009-02-03 at 17:33 +, Mark wrote: > > > > Both Razor and Pyzor have been merrily catching spam very effectively > > for me for many moons now. It appears however, that when I originally > > installed them I did so

Re: Uninstalling Razor & Pyzor

2009-02-03 Thread Karsten Bräckelmann
On Tue, 2009-02-03 at 19:26 +0100, Benny Pedersen wrote: > On Tue, February 3, 2009 19:14, Karsten Bräckelmann wrote: > > On Tue, 2009-02-03 at 18:57 +0100, Benny Pedersen wrote: > > > real problem is that spamd startup with root privilegdes and start > > > razor/pyzor as so olso, make a bug on it

Re: Uninstalling Razor & Pyzor

2009-02-03 Thread Benny Pedersen
On Tue, February 3, 2009 19:14, Karsten Bräckelmann wrote: > On Tue, 2009-02-03 at 18:57 +0100, Benny Pedersen wrote: >> real problem is that spamd startup with root privilegdes and start >> razor/pyzor as so olso, make a bug on it > Nope. Starting spamd does *not* create it if you configure Razor

Re: Uninstalling Razor & Pyzor

2009-02-03 Thread Karsten Bräckelmann
On Tue, 2009-02-03 at 18:57 +0100, Benny Pedersen wrote: > > real problem is that spamd startup with root privilegdes and start > razor/pyzor as so olso, make a bug on it Nope. Starting spamd does *not* create it if you configure Razor properly. -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf

Re: Uninstalling Razor & Pyzor

2009-02-03 Thread Karsten Bräckelmann
On Tue, 2009-02-03 at 17:33 +, Mark wrote: > > Both Razor and Pyzor have been merrily catching spam very effectively > for me for many moons now. It appears however, that when I originally > installed them I did so as root. > > This is fine, but I now running SELinux in enforcing mode on my F

Re: Uninstalling Razor & Pyzor

2009-02-03 Thread Benny Pedersen
On Tue, February 3, 2009 18:33, Arthur Dent wrote: > I have no entries relating to either Pyzor or Razor in local.rc real problem is that spamd startup with root privilegdes and start razor/pyzor as so olso, make a bug on it -- http://localhost/ 100% uptime and 100% mirrored :)

Uninstalling Razor & Pyzor

2009-02-03 Thread Arthur Dent
Hello all, Both Razor and Pyzor have been merrily catching spam very effectively for me for many moons now. It appears however, that when I originally installed them I did so as root. This is fine, but I now running SELinux in enforcing mode on my Fedora 9 box. Selinux throws a wobbly (that's the

Re: Question regarding recipient notification of blocked email

2009-02-03 Thread Michael Scheidell
> I suppose theoretically a Spamassassin plugin could be developed to handle > this task, but I seriously doubt that is the most effective approach. I Look at amavisd-new.. Its part the way there. Passed the email (one email at a time) to SA. Gets initial scores. Then, splits it up into recipients

Re: Question regarding recipient notification of blocked email

2009-02-03 Thread Kevin Parris
I suppose theoretically a Spamassassin plugin could be developed to handle this task, but I seriously doubt that is the most effective approach. I believe you should evaluate this situation within the context of your mail delivery system, not the spam scanning context. The question you really a

Re: Question regarding recipient notification of blocked email

2009-02-03 Thread TWR
Point well taken. Spamassassin is scanning the email, qmail-scanner does the labeling as "spam" and mailfilter is then shooting it email to the spam folder. I was hoping there was a way that spamassassin could log that user a received x number of spam and then notify the recipient that the email

Re: own address in AWL?

2009-02-03 Thread Greg Troxel
"Benny Pedersen" writes: > On Mon, February 2, 2009 19:04, Greg Troxel wrote: >> I have removed my address from the whitelist and will keep an eye on >> how it gets back in. > > AWL is not really a WHITELIST, but a score avanger, and it does a > fairly good job imho, unhappy with it change its c

Re: Question regarding recipient notification of blocked email

2009-02-03 Thread Kevin Parris
Spamassassin did not put the message in the spam folder. SA does not know if the item is going to be put in a folder (spam or otherwise) or tossed into the bit bucket. SA doesn't even, necessarily, actually know who the item is to - or which of possible multiple recipients might want to be not

Re: Question regarding recipient notification of blocked email

2009-02-03 Thread TWR
Thank you for the quick reply. I have a cron job already setup to automatically delete emails from the spam folder that are 10 days old. Perhaps if I create another cron to locate emails 1 day old and add them to a single email to the original recipient that would work? Any hints/pointers would

Re: Question regarding recipient notification of blocked email

2009-02-03 Thread Jari Fredriksson
> I am running qmail with spamassassin so that any message > flagged as 'spam' is deposited into a users 'spam' > folder. The user has to manually login to their > webmail.domain.com spam folder in order to view these > messages. Is there a way for spamassassin to notify the > end user once a day

Re: Best practices for getting HAM for bayes training

2009-02-03 Thread Michael Scheidell
> Hi, > > > My problem is how to get enough ham for SA training in such an > environment? What is a good ratio for ham/spam when training SA? Any > other best practices that I can use in such an environment? > If using the sa-learn (imap stuff), have users copy email from their SENT folder to t