Re: SA scan internal to external / internal to internal

2010-07-24 Thread Martin Gregorie
On Sat, 2010-07-24 at 20:05 +0530, Suhag P Desai wrote: > 1. Is SA for external to internal mail only ??? or it can be used > to scan internal to external and internal to internal mail also ? > That depends on how you feed it: - at present I'm only scanning incoming by using this chain:

Re: sa-update

2010-07-24 Thread Grant Peel
OK, I have deleted the orignal post so I can make things clear, and hopefully ask the correct question. Right now, I have a build of FreeBSD: FreeBSD spare..com 8.0-RELEASE-p3 FreeBSD 8.0-RELEASE-p3 #0: Fri Jun 11 09:42:51 EDT 2010 r...@dev..com:/usr/obj/usr/src/sys/GENERIC i386 Now th

Re: disable trusted_networks and internal_networks

2010-07-24 Thread Benny Pedersen
On lør 24 jul 2010 15:05:22 CEST, Matt Kettler wrote [snip] However, 127.0.0.1 should exist. NO_RELAYS means SA interpreted the mail as having no origin at all, not even localhost, and that implies a serious lack of information being passed to SA. sendmail -bv root gives me a nice NO_RELAYS in

SA scan internal to external / internal to internal

2010-07-24 Thread Suhag P Desai
Hi Mailing List users, This is my first message in this mail community and I am evaluating SA very first time. I have few question in my mind regarding working of SA. I gone through a FAQ and some documentation from official SA websites. 1. Is SA for external to internal mail only

Re: how about detecting misused unsubscribe links?

2010-07-24 Thread John Hardin
On Sat, 24 Jul 2010, Jason Haar wrote: It made me think: it contains links to the site it wants you to go to (which are all the same) - but includes a fake unsubscribe option that refers to the same URL. I've seen this behavior in a tonne of spam... How much work would it be to create a rule

Re: sa-update

2010-07-24 Thread RW
On Sat, 24 Jul 2010 08:09:36 -0400 "Grant Peel" wrote: > cd /usr/ports/mail/p5-Mail-SpamAssassin > make config (changed nothing) > make > make deinstall > make reinstall You would be better-off using portupgrade, or portmaster to do this. "make deinstall; make [re]install" wont upgrad

Re: disable trusted_networks and internal_networks

2010-07-24 Thread Matt Kettler
On 7/23/2010 10:05 AM, Benny Pedersen wrote: > On fre 23 jul 2010 04:49:40 CEST, Matt Kettler wrote >> Fair enough... I was keying off Benny's suggestion to lower the score of >> both ALL_TRUSTED and NO_RELAYS, the latter of which is never a good >> sign. > > as all in life it depends :=) > > grep

Re: sa-update

2010-07-24 Thread Michael Scheidell
On 7/24/10 8:09 AM, Grant Peel wrote: I used the ports update method Micheal mentioned above (on my dev box that was used to make the FreeBSD build I am currently using) Then found the new /var/db/spamassassin did exist, I conclude that when I updated FreeBSD from 8.0 release t

Re: sa-update

2010-07-24 Thread Grant Peel
- Original Message - From: Michael Scheidell To: Grant Peel Cc: users@spamassassin.apache.org Sent: Friday, July 23, 2010 4:40 PM Subject: Re: sa-update On 7/23/10 4:28 PM, Grant Peel wrote: I have a brand new build of FreeBSD 8.0 p#3 Spamassassin installed fro

how about detecting misused unsubscribe links?

2010-07-24 Thread Jason Haar
Hi there This piece of spam got into my inbox http://pastebin.com/n9QaffWD It made me think: it contains links to the site it wants you to go to (which are all the same) - but includes a fake unsubscribe option that refers to the same URL. I've seen this behavior in a tonne of spam... How much