Re: DUL/DUL+ redesign to improve DNS cache hit ratio [SA v. MTA]

2011-07-05 Thread Andrzej Adam Filip
"David F. Skoll" wrote: > On Tue, 05 Jul 2011 23:26:16 +0200 > Andrzej Adam Filip wrote: > >> Would you recommend redesigning (mainly) DUL/DUL+ DNSBL lists to >> improve DNS cache hit ratio? > > No, not really. The poor cache hit ratio doesn't seem to be a problem > in practice (most people were

Re: anti virus EICAR file is not detected by the couple clamd amavisd

2011-07-05 Thread Karsten Bräckelmann
On Wed, 2011-07-06 at 00:53 +0200, Benny Pedersen wrote: > On Wed, 06 Jul 2011 00:38:46 +0200, Karsten Bräckelmann wrote: > > > And the SA users list shouldn't have been included in the first place, > > don't you think? > > first off all, welcome back Karsten :) Heh, thanks. :) Never been off t

Re: DUL/DUL+ redesign to improve DNS cache hit ratio [Was: TTL and DNSBLs]

2011-07-05 Thread David F. Skoll
On Tue, 05 Jul 2011 23:26:16 +0200 Andrzej Adam Filip wrote: > Would you recommend redesigning (mainly) DUL/DUL+ DNSBL lists to > improve DNS cache hit ratio? No, not really. The poor cache hit ratio doesn't seem to be a problem in practice (most people were surprised by the results). If you h

Re: anti virus EICAR file is not detected by the couple clamd amavisd

2011-07-05 Thread Benny Pedersen
On Wed, 06 Jul 2011 00:38:46 +0200, Karsten Bräckelmann wrote: And the SA users list shouldn't have been included in the first place, don't you think? first off all, welcome back Karsten :) yes i think that some users have turned spamassassin into a virus scanner with clamav plugin, and vis

Re: anti virus EICAR file is not detected by the couple clamd amavisd

2011-07-05 Thread Karsten Bräckelmann
On Tue, 2011-07-05 at 21:15 +0200, m...@smtp.fakessh.eu wrote: > in my station > anti virus EICAR file is not detected by the couple clamd amavisd ^^ > > all testimonials are welcome Oh, sure... Naughty boy. Bad cross-posting. And

DUL/DUL+ redesign to improve DNS cache hit ratio [Was: TTL and DNSBLs]

2011-07-05 Thread Andrzej Adam Filip
"David F. Skoll" wrote: > On Mon, 04 Jul 2011 13:52:00 +0200 > Axb wrote: > >> BLs generally adjust their negative TTL to get a practical balance >> between query load and positive hits. >> Gaming these settings can become a costly process. > > My experiments on real mail servers show that DNS c

DUL/DUL+ redesign to improve DNS cache hit ratio [Was: TTL and DNSBLs]

2011-07-05 Thread Andrzej Adam Filip
"David F. Skoll" wrote: > On Mon, 04 Jul 2011 13:52:00 +0200 > Axb wrote: > >> BLs generally adjust their negative TTL to get a practical balance >> between query load and positive hits. >> Gaming these settings can become a costly process. > > My experiments on real mail servers show that DNS c

Re: TTL and DNSBLs (was Re: SpamTips.org: Why run your own DNS server?)

2011-07-05 Thread David F. Skoll
On Tue, 5 Jul 2011 12:20:18 +0200 Michelle Konzack wrote: > > My experiments on real mail servers show that DNS caching is quite > > ineffective for DNSBLs (at least for typical ones like Spamhaus that > > use a short TTL on the order of 15-30 minutes.) > Is the TTL set global or are the TTLs se

Re: anti virus EICAR file is not detected by the couple clamd amavisd

2011-07-05 Thread Michael Scheidell
On 7/5/11 3:15 PM, m...@smtp.fakessh.eu wrote: hi folks in my station anti virus EICAR file is not detected by the couple clamd amavisd all testimonials are welcome works fine here. you must be doing something wrong. find out what you are doing wrong and it will work. -- Michael Scheidell

anti virus EICAR file is not detected by the couple clamd amavisd

2011-07-05 Thread m...@smtp.fakessh.eu
hi folks in my station anti virus EICAR file is not detected by the couple clamd amavisd all testimonials are welcome --  http://pgp.mit.edu:11371/pks/lookup?op=get&search=0x092164A7  gpg --keyserver pgp.mit.edu --recv-key 092164A7 pgpiBHw6zHTrd.pgp Description: PGP signature

Re: SpamTips.org: Why run your own DNS server?

2011-07-05 Thread Per Jessen
Jeff Chan wrote: > On Monday, July 4, 2011, 3:46:15 AM, Warren Jr. wrote: >> Hey folks, > >> http://www.spamtips.org/2011/07/spamassassin-why-run-your-own-dns.html >> I wrote this article about why it can be important to run your own >> DNS server if you have a busy Spamassassin deployment. > >>

Re: [clamav-users] AV timeout?

2011-07-05 Thread Michael Scheidell
On 7/1/11 10:28 AM, Török Edwin wrote: Sounds good. I will disable the JIT bytecode engine in 0.97.1 with the next daily.cvd update (0.97, 0.96.x and master will not be affected). 0.97.1 should then fall back to interpreter, so that others who don't have the patch applied don't get their clamd

Re: Spam from Googlegroups (rfc-ignorant)

2011-07-05 Thread Benny Pedersen
On Tue, 5 Jul 2011 10:29:21 +0200, Michelle Konzack wrote: Return-Path: could add this domain as freemail_domains left handside before @ can be a freemail sender X-Spam-Status: No, score=-0.2 required=4.5 tests=BAYES_20,MISSING_MID, RCVD_IN_DNSWL_LOW,SPF_PASS,T_DKIM_INVALID autolearn=ham

Re: TTL and DNSBLs (was Re: SpamTips.org: Why run your own DNS server?)

2011-07-05 Thread Martin Gregorie
On Tue, 2011-07-05 at 12:20 +0200, Michelle Konzack wrote: > Am 2011-07-04 09:24:19, hacktest Du folgendes herunter: > > My experiments on real mail servers show that DNS caching is quite > > ineffective for DNSBLs (at least for typical ones like Spamhaus that > > use a short TTL on the order of 15

Re: TTL and DNSBLs (was Re: SpamTips.org: Why run your own DNS server?)

2011-07-05 Thread Michelle Konzack
Hello David F. Skoll, Am 2011-07-04 09:24:19, hacktest Du folgendes herunter: > My experiments on real mail servers show that DNS caching is quite > ineffective for DNSBLs (at least for typical ones like Spamhaus that > use a short TTL on the order of 15-30 minutes.) Is the TTL set global or are

Re: Spam from Googlegroups (rfc-ignorant)

2011-07-05 Thread Michelle Konzack
Hello Martin Gregorie, Am 2011-07-05 10:29:25, hacktest Du folgendes herunter: > Is this a legitimate google group, i.e. one that wasn't set up as a spam > target? It doen not seeem to be... > I ask because the genuine Google Groups I've seen have either > USENET type names or (at least) human-c

Re: Spam from Googlegroups (rfc-ignorant)

2011-07-05 Thread Martin Gregorie
On Tue, 2011-07-05 at 10:29 +0200, Michelle Konzack wrote: snippage > mitra.hesab8042...@yahoo.com has invited you to join the deividfincher77364 > group with this message: > Is this a legitimate google group, i.e. one that wasn't set up as a spam target? I ask because the genuine Goo

Re: SpamTips.org: Why run your own DNS server?

2011-07-05 Thread Toni Mueller
Hi, On Tue, 05.07.2011 at 07:18:30 +, Jason Ede wrote: > Andreas Schulze [mailto:s...@andreasschulze.de] wrote: > > - bind (off course) although I'm sure that it was meant in a different way, "off course" hits the nail right onto the head, imnsho. > Are there any figures on the relative

Re: Spam from Googlegroups (rfc-ignorant)

2011-07-05 Thread Michelle Konzack
Hello Benny Pedersen, Am 2011-07-04 15:53:33, hacktest Du folgendes herunter: > On Mon, 4 Jul 2011 14:50:12 +0200, Michelle Konzack wrote: > >>reject yahoo.com senders that are NOT dkim signed > >The message has a From: from GoogleGroups... and in the E-Mail > >is the > >E-Mail of the Group-Owne

RE: SpamTips.org: Why run your own DNS server?

2011-07-05 Thread Jason Ede
> -Original Message- > From: Andreas Schulze [mailto:s...@andreasschulze.de] > Sent: 04 July 2011 12:11 > To: Warren Togami Jr. > Cc: users@spamassassin.apache.org > Subject: Re: SpamTips.org: Why run your own DNS server? > > Warren, > > > Anyone have any better tips of an alternate DNS r