Re: Should Spamhaus default to disabled?

2010-06-11 Thread Nataraj
Andy Dills wrote: That's fair. Except, we're not a "large organization" by any stretch of the imagination. Have you checked that you are legitimately exceeding the free query limit and that something isn't misconfigured and causing multiple lookups of the same IP address when it could be acc

Re: Should Spamhaus default to disabled?

2010-06-11 Thread Andy Dills
On Fri, 11 Jun 2010, Karsten Br?ckelmann wrote: > On Fri, 2010-06-11 at 10:42 -0400, Andy Dills wrote: > > score URIBL_DBL_SPAM 0 > > score URIBL_DBL_ERROR 0 > > score RCVD_IN_ZEN 0 > > > > I think those are the only queries that generate lookups against Spamhaus, > > but I'm not positive. > >

Re: Should Spamhaus default to disabled?

2010-06-11 Thread Joseph Brennan
Andy Dills wrote: We felt the amount of money being asked for was unreasonable, as we felt we likely wouldn't see an increase in spam if we turned them off. We're paying customers of Spamhaus. Their lists account for about 85% of our spam rejects. I agree it's not cheap, but it's really eff

Re: Detecting mailing list servers / email

2010-06-11 Thread Nataraj
Nataraj wrote: Marc Perkel wrote: Just wondering about what people are using to detect if email is coming from a mail list discussion server like yahoo or google groups. Does anyone have good discussion list detection rules? I'm not sure about doing this from within spamassassin, but using p

Re: Detecting mailing list servers / email

2010-06-11 Thread Nataraj
Marc Perkel wrote: Just wondering about what people are using to detect if email is coming from a mail list discussion server like yahoo or google groups. Does anyone have good discussion list detection rules? I'm not sure about doing this from within spamassassin, but using postfix, I have a

Re: Increase in scan time from 3.3 to 3.3.1

2010-06-11 Thread Chris Conn
In a followup to http://www.gossamer-threads.com/lists/spamassassin/users/151470; Is it possible to set the priority on RBL rules to run after rules, or not at all if shortcircuited? I tried: priority RCVD_IN_BL_SPAMCOP_NET -300 priority RCVD_IN_XBL -300 priority RCVD_IN_PSBL -300 priority R

Re: removing old/stale rules

2010-06-11 Thread Michael Scheidell
On 6/11/10 4:40 PM, Michael Scheidell wrote: On 6/11/10 3:17 PM, Jean-Paul Natola wrote: i've got DOZENS of these, shoud i log a bug for each? also I have TONS of these type of entries as well, it used to come up clean before the upgrade, and I'm also concerned because i get massive amounts

Re: removing old/stale rules

2010-06-11 Thread Michael Scheidell
On 6/11/10 3:17 PM, Jean-Paul Natola wrote: i've got DOZENS of these, shoud i log a bug for each? also I have TONS of these type of entries as well, it used to come up clean before the upgrade, and I'm also concerned because i get massive amounts of spamd timeouts is it related? Jun 11 15:

RE: removing old/stale rules

2010-06-11 Thread Jean-Paul Natola
i've got DOZENS of these, shoud i log a bug for each? also I have TONS of these type of entries as well, it used to come up clean before the upgrade, and I'm also concerned because i get massive amounts of spamd timeouts is it related? Jun 11 15:13:15.140 [20711] dbg: rules: meta test VIRUS_

Re: removing old/stale rules

2010-06-11 Thread Michael Scheidell
On 6/11/10 1:00 PM, Jean-Paul Natola wrote: Hi all, Since my upgrade to 3.3.1, I see when running, sa –lint –D that there’s a bunch of stuff, I assume are no longer used? Like the entry below Jun 11 12:57:36.792 [18565] dbg: config: warning: score set for non-existent rule AXB_HELO_LH_HOME

Re: Should Spamhaus default to disabled?

2010-06-11 Thread corpus.defero
> On Fri, 11 Jun 2010 10:42:31 -0400 (EDT) > Andy Dills wrote: > > > I think the maintainers of SA should strongly consider defaulting > Spamhaus to "off". At the very least, it should be better documented > how to entire disable Spamhaus queries. I think the maintainers of SA should strongl

Re: List of cell phone company hosts

2010-06-11 Thread Benny Pedersen
On Fri 11 Jun 2010 07:23:51 PM CEST, Marc Perkel wrote Also - I'd like to make a list of host names where email from celll phones comes from. Does anyone have a list of domain name or host names where cell phone email is sent from? tlds known by me: tel mobi where domain is the mobile numb

Re: Detecting mailing list servers / email

2010-06-11 Thread Benny Pedersen
On Fri 11 Jun 2010 07:11:33 PM CEST, Marc Perkel wrote Just wondering about what people are using to detect if email is coming from a mail list discussion server like yahoo or google groups. Does anyone have good discussion list detection rules? there is a perl module maillist.pm but i dont

List of cell phone company hosts

2010-06-11 Thread Marc Perkel
Also - I'd like to make a list of host names where email from celll phones comes from. Does anyone have a list of domain name or host names where cell phone email is sent from?

Detecting mailing list servers / email

2010-06-11 Thread Marc Perkel
Just wondering about what people are using to detect if email is coming from a mail list discussion server like yahoo or google groups. Does anyone have good discussion list detection rules?

removing old/stale rules

2010-06-11 Thread Jean-Paul Natola
Hi all, Since my upgrade to 3.3.1, I see when running, sa -lint -D that there's a bunch of stuff, I assume are no longer used? Like the entry below Jun 11 12:57:36.792 [18565] dbg: config: warning: score set for non-existent rule AXB_HELO_LH_HOME Is there a way to just start clean? rat

Re: Should Spamhaus default to disabled?

2010-06-11 Thread Bret Miller
(Sorry about the top post...) One of the big issues with RBL services like this is the rules that use them change over time. We quite nicely fit into free use, but I realize that there are many others who do not. It might be a good enhancement to SA to be able to make a way to disable all quer

Re: Should Spamhaus default to disabled?

2010-06-11 Thread RW
On Fri, 11 Jun 2010 10:42:31 -0400 (EDT) Andy Dills wrote: > I think the maintainers of SA should strongly consider defaulting > Spamhaus to "off". At the very least, it should be better documented > how to entire disable Spamhaus queries. IMO defaults should be set for the benefit of SOHO user

Re: Should Spamhaus default to disabled?

2010-06-11 Thread Karsten Bräckelmann
On Fri, 2010-06-11 at 10:42 -0400, Andy Dills wrote: > score URIBL_DBL_SPAM 0 > score URIBL_DBL_ERROR 0 > score RCVD_IN_ZEN 0 > > I think those are the only queries that generate lookups against Spamhaus, > but I'm not positive. IIRC that doesn't disable all DNS lookups against ZEN. You'd also n

Re: Should Spamhaus default to disabled?

2010-06-11 Thread Michael Scheidell
On 6/11/10 10:42 AM, Andy Dills wrote: We felt the amount of money being asked for was unreasonable, as we felt we likely wouldn't see an increase in spam if we turned them off. should I mention that the (optional) reputation based dcc.pm (which is supported in SA 3.3.x) is really CHEAP? (

Re: Should Spamhaus default to disabled?

2010-06-11 Thread Benny Pedersen
On Fri 11 Jun 2010 04:42:31 PM CEST, Andy Dills wrote After recently upgrading to a new mail cluster with SA 3.3.1, we were contacted (at every imaginable POC address) with a solicitation to purchase access to utilize the Spamhaus blacklists, or they'll stop answering our queries. mail cluster

Re: Should Spamhaus default to disabled?

2010-06-11 Thread Yet Another Ninja
On 2010-06-11 16:42, Andy Dills wrote: After recently upgrading to a new mail cluster with SA 3.3.1, we were contacted (at every imaginable POC address) with a solicitation to purchase access to utilize the Spamhaus blacklists, or they'll stop answering our queries. We felt the amount of mone

Re: Should Spamhaus default to disabled?

2010-06-11 Thread Matus UHLAR - fantomas
On 11.06.10 10:42, Andy Dills wrote: > After recently upgrading to a new mail cluster with SA 3.3.1, we were > contacted (at every imaginable POC address) with a solicitation to > purchase access to utilize the Spamhaus blacklists, or they'll stop > answering our queries. You apparently generat

Should Spamhaus default to disabled?

2010-06-11 Thread Andy Dills
After recently upgrading to a new mail cluster with SA 3.3.1, we were contacted (at every imaginable POC address) with a solicitation to purchase access to utilize the Spamhaus blacklists, or they'll stop answering our queries. We felt the amount of money being asked for was unreasonable, as w

fixed: Re: whitelist_from_spf rule works and lints on some systems, not all

2010-06-11 Thread Michael Scheidell
On 6/11/10 8:10 AM, Michael Scheidell wrote: tested this on email with twitter-resetpw-example=domain@postmaster.twitter.com and rule hits fine on tests, lint likes it, compiles on some systems, but not all. All running spamassassin 3.3.1 and re2c 0.13.5 def_whitelist_from_spftwitter-reset

whitelist_from_spf rule works and lints on some systems, not all

2010-06-11 Thread Michael Scheidell
tested this on email with twitter-resetpw-example=domain@postmaster.twitter.com and rule hits fine on tests, lint likes it, compiles on some systems, but not all. All running spamassassin 3.3.1 and re2c 0.13.5 def_whitelist_from_spftwitter-resetp...@postmaster.twitter.com lint and sa-compi

Re: Scanning attachments with spamassassin

2010-06-11 Thread Frank Heydlauf
Hi, On Thu, Jun 10, 2010 at 03:16:02PM +, Sharma, Ashish wrote: > Can you tell me what all kind of attachment scanning spamassassin does. sorry, not in detail - but you're free to read the code yourself > Can you point me to some good reference that can give me a good idea about > attachmen