Re: Fastmail MX server with public and private IP addresses

2009-02-26 Thread Matt Kettler
RW wrote: > On Thu, 26 Feb 2009 20:24:58 -0500 > Matt Kettler wrote: > > >> Unless, of course, you have a trusted_networks or internal_networks >> statement in your config.. At that point the auto-guesser is disabled. >> > > I do have trusted_networks set, I didn't realise that private add

Re: Fastmail MX server with public and private IP addresses

2009-02-26 Thread RW
On Thu, 26 Feb 2009 20:24:58 -0500 Matt Kettler wrote: > Unless, of course, you have a trusted_networks or internal_networks > statement in your config.. At that point the auto-guesser is disabled. I do have trusted_networks set, I didn't realise that private addresses would have to be included

RE: not seeing any advantage to sa-learn?

2009-02-26 Thread John Hardin
On Fri, 27 Feb 2009, Karsten Br?ckelmann wrote: On Thu, 2009-02-26 at 17:14 -0700, Savoy, Jim wrote: The primary MX server is a little wilder though: 0.000 0 3 0 non-token data: bayes db version 0.000 0 206774 0 non-token data: nspam 0.000

Re: Fastmail MX server with public and private IP addresses

2009-02-26 Thread Matt Kettler
RW wrote: > I'm having a bit of trouble with Fastmail.fm and my trusted network. > > SA takes the first X-Spam-Relays-Untrusted header section as the > last-hop hand-off, and in this case it's seeing the internal > transaction from the MX server (mx2.messagingengine.com) to the first > internal se

RE: not seeing any advantage to sa-learn?

2009-02-26 Thread Karsten Bräckelmann
On Thu, 2009-02-26 at 17:14 -0700, Savoy, Jim wrote: >I seem to have the same problem as Ricardo. I feed the same stuff every day > into Bayes, using sa-learn, but the tagging never changes. Otherwise, SA seems > to be working perfectly on all other messages, but not with the ones I > constant

Re: config status

2009-02-26 Thread Matt Kettler
Karsten Bräckelmann wrote: > On Thu, 2009-02-26 at 16:12 +, Ray wrote: > >> Is there a feature like PostFix's `postconf` to display the currently parsed >> and >> calculated config? >> > > That pretty much equals your local.cf, no? The non-default settings, > similar to postconf -n, t

RE: not seeing any advantage to sa-learn?

2009-02-26 Thread Savoy, Jim
>>On Sat, 07 Feb 2009, Ricardo Kleemann wrote: >> I have SA working very well for me, but there are still a few cases of spam >> that are very persistent, I still get a considerable amount of spam that SA >> doesn't catch. >> However, what is annoying is that no matter how much I feed through >

Re: config status

2009-02-26 Thread Karsten Bräckelmann
On Thu, 2009-02-26 at 16:12 +, Ray wrote: > Is there a feature like PostFix's `postconf` to display the currently parsed > and > calculated config? That pretty much equals your local.cf, no? The non-default settings, similar to postconf -n, that is. For the complete picture including all def

RE: dnsbl checks time out

2009-02-26 Thread Elsa Andrés
Karsten Bräckelmann-2 wrote: > > > [ non-DNS-related stuff snipped ] > > Sure, you didn't touch DNS related settings at all, neither did your > test use DNS. :) > > Did you see Justin's reply? SA *exclusively* uses the *first* nameserver > in resolv.conf. So maybe the DNS server at 80.58.0.33

Re: dnsbl checks time out

2009-02-26 Thread Elsa Andrés
Yet Another Ninja wrote: > > > Unless its reproduceable, you have little to report :-) > > more shots in the dark: > > - UDP packets blocked at firewall/IDS/router > (seen this with Zyxel stuff and older Raptors) > > did you mention what OS you're using? > > - Net::DNS version? > > stumped

RE: dnsbl checks time out

2009-02-26 Thread Karsten Bräckelmann
On Thu, 2009-02-26 at 08:47 -0800, Elsa Andrés wrote: > O.k. I tried the following: [ non-DNS-related stuff snipped ] > But still same results in SA :-? Sure, you didn't touch DNS related settings at all, neither did your test use DNS. :) > The main issue I see is that I can resolve in any prog

Re: dnsbl checks time out

2009-02-26 Thread Yet Another Ninja
On 2/26/2009 6:19 PM, Elsa Andrés wrote: Yet Another Ninja wrote: [7305] dbg: async: timing: 14.975 X dns:TXT:15.35.17.212.list.dsbl.org. *** right? so you see timeouts with list.dsbl.org take a look at http://dsbl.org/ iirc sa-update should remove it from the config have you ever updated a

Re: dnsbl checks time out

2009-02-26 Thread Elsa Andrés
Yet Another Ninja wrote: > > > [7305] dbg: async: timing: 14.975 X dns:TXT:15.35.17.212.list.dsbl.org. > *** > right? > > so you see timeouts with list.dsbl.org > > take a look at http://dsbl.org/ > > iirc sa-update should remove it from the config > have you ever updated after setup? > if n

RE: dnsbl checks time out

2009-02-26 Thread Elsa Andrés
RobertH-2 wrote: > > u since the machine does not do dns, and it is not labeled in the > hosts > file, does the machine really know who it is??? > > usually in /etc/host.conf you will have like > > order hosts,bind > > if the machine cannot know who it is and resolv itself, it will kinda

Re: dnsbl checks time out

2009-02-26 Thread David Morton
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Yet Another Ninja wrote: > so you see timeouts with list.dsbl.org > > take a look at http://dsbl.org/ Cute, the comments are full of link spam. :( -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.9 (GNU/Linux) Comment: Using GnuPG with Mozilla - h

Re: dnsbl checks time out

2009-02-26 Thread Yet Another Ninja
On 2/26/2009 5:10 PM, Elsa Andrés wrote: Yet Another Ninja wrote: spamassassin -D dns < /home/serv1/test.txt should do it. By doing that, I get the same results as the ones I sent in my first e-mail. I can send the full log, if you need it :-? [7305] dbg: async: timing: 14.975 X dns

config status

2009-02-26 Thread Ray
Is there a feature like PostFix's `postconf` to display the currently parsed and calculated config? If not, how do I submit a feature request? Thanks, RSK

Re: dnsbl checks time out

2009-02-26 Thread Elsa Andrés
Yet Another Ninja wrote: > > > spamassassin -D dns < /home/serv1/test.txt > > should do it. > > By doing that, I get the same results as the ones I sent in my first e-mail. I can send the full log, if you need it :-? -- View this message in context: http://www.nabble.com/dnsbl-checks-t

Re: dnsbl checks time out

2009-02-26 Thread Matus UHLAR - fantomas
> Elsa Andrés wrote: > > I am unable to perform dnsbl checks. > > > > Running "spamassassin -D &1 | grep dns | less" I > > get: > > > > *** > > [7336] dbg: dns: no ipv6 > > [7336] dbg: dns: is Net::DNS::Resolver available? yes > > [7336] dbg: dns: Net::DNS version: 0.60 > > > > [7336] dbg: dns: na

Re: dnsbl checks time out

2009-02-26 Thread Yet Another Ninja
On 2/26/2009 4:33 PM, Elsa Andrés wrote: Yet Another Ninja wrote: Try running a msg thru SA in debug mode and see if you're having any DNS timeouts due to some dead BL or similar. O.k. but I only know a way to do that and is the one I put on first e-mail :-) spamassassin -D &1 | less Is t

RE: dnsbl checks time out

2009-02-26 Thread RobertH
u since the machine does not do dns, and it is not labeled in the hosts file, does the machine really know who it is??? usually in /etc/host.conf you will have like order hosts,bind if the machine cannot know who it is and resolv itself, it will kinda freak out eh? and, you can put in ip ad

Re: dnsbl checks time out

2009-02-26 Thread Elsa Andrés
Yet Another Ninja wrote: > > Try running a msg thru SA in debug mode and see if you're having any DNS > timeouts due to some dead BL or similar. > O.k. but I only know a way to do that and is the one I put on first e-mail :-) spamassassin -D &1 | less Is this correct? -- View this message

RE: dnsbl checks time out

2009-02-26 Thread Elsa Andrés
RobertH-2 wrote: > > since all the other machines are ok, you may want to check and verify this > specific machine configs > > /etc/hosts > > /etc/resolv.conf > > ethernet speed and duplex on the machine and switchport > > if i remember right, there are even settings in SA local.cf to check

Re: dnsbl checks time out

2009-02-26 Thread Justin Mason
On Thu, Feb 26, 2009 at 14:46, RobertH wrote: > Elsa Andrés > > since all the other machines are ok, you may want to check and verify this > specific machine configs > > /etc/hosts > > /etc/resolv.conf > > ethernet speed and duplex on the machine and switchport > > if i remember right, there are e

RE: dnsbl checks time out

2009-02-26 Thread RobertH
Elsa Andrés since all the other machines are ok, you may want to check and verify this specific machine configs /etc/hosts /etc/resolv.conf ethernet speed and duplex on the machine and switchport if i remember right, there are even settings in SA local.cf to check re DNS etc etc... - rh

Re: dnsbl checks time out

2009-02-26 Thread Yet Another Ninja
On 2/26/2009 3:35 PM, Elsa Andrés wrote: Yet Another Ninja wrote: Not always a good plan when you notice that some blacklists *may* not give you any positive hits when using openDNS. As Matt put it, a local caching server doing no forwarding is the ideal. Having no positive hits when using

Fastmail MX server with public and private IP addresses

2009-02-26 Thread RW
I'm having a bit of trouble with Fastmail.fm and my trusted network. SA takes the first X-Spam-Relays-Untrusted header section as the last-hop hand-off, and in this case it's seeing the internal transaction from the MX server (mx2.messagingengine.com) to the first internal server (compute1.inter

Re: dnsbl checks time out

2009-02-26 Thread Elsa Andrés
Yet Another Ninja wrote: > > Not always a good plan when you notice that some blacklists *may* not > give you any positive hits when using openDNS. > > As Matt put it, a local caching server doing no forwarding is the ideal. > Having no positive hits when using opendns is not the same that h

Re: dnsbl checks time out

2009-02-26 Thread Yet Another Ninja
On 2/26/2009 1:51 PM, Martin Hepworth wrote: 2009/2/26 Elsa Andrés : Matt Kettler-3 wrote: Looks like your ISP's DNS server is very slow. Well, I am using the same dns server in another machine and just works fine here, also with SA (3.2.3) and dnslb checks. Anyway, I tested with another

Re: dnsbl checks time out

2009-02-26 Thread Martin Hepworth
2009/2/26 Elsa Andrés : > > > Matt Kettler-3 wrote: >> >> >> Looks like your ISP's DNS server is very slow. >> >> > > Well, I am using the same dns server in another machine and just works fine > here, also with SA (3.2.3) and dnslb checks. > > Anyway, I tested with another dns server (opendns ones

Re: dnsbl checks time out

2009-02-26 Thread Elsa Andrés
Matt Kettler-3 wrote: > > > Looks like your ISP's DNS server is very slow. > > Well, I am using the same dns server in another machine and just works fine here, also with SA (3.2.3) and dnslb checks. Anyway, I tested with another dns server (opendns ones) and got the same result (time out)

spamd timing out

2009-02-26 Thread Sujit Acharyya-Choudhury
We are running exim with spamassassin on our gateways and on exim paniclog I am seeing this message: spam acl condition: error reading from spamd socket: Connection timed out on a regular basis (may be once ever 5-10 mins). We have the following setting for spamd: /usr/bin/spamd -d -x

Re: dnsbl checks time out

2009-02-26 Thread Matt Kettler
Elsa Andrés wrote: > Hello, > > I am unable to perform dnsbl checks. > > Running "spamassassin -D &1 | grep dns | less" I > get: > > *** > [7336] dbg: dns: no ipv6 > [7336] dbg: dns: is Net::DNS::Resolver available? yes > [7336] dbg: dns: Net::DNS version: 0.60 > > [7336] dbg: dns: name server: 80

dnsbl checks time out

2009-02-26 Thread Elsa Andrés
Hello, I am unable to perform dnsbl checks. Running "spamassassin -D &1 | grep dns | less" I get: *** [7336] dbg: dns: no ipv6 [7336] dbg: dns: is Net::DNS::Resolver available? yes [7336] dbg: dns: Net::DNS version: 0.60 [7336] dbg: dns: name server: 80.58.0.33, LocalAddr: 0.0.0.0 [7336] dbg:

Re: black list of words combos in subject

2009-02-26 Thread Jeremy
"Michael Scheidell" wrote in message news:c5cb212a.81f45%scheid...@secnap.net... >> Is there any rulesets or plugins that will let me make a word list >> that if there are 2 or more of the words in the list I can start to >> assign a score. >> > Yes, use meta rules > > Header or body rule, header