Re: Autowhitelist based on Return-Path: (envelope sender) for mailing list

2011-07-08 Thread Andrzej Adam Filip
Michelle Konzack wrote: > Hello Andrzej Adam Filip, > > Am 2011-07-08 18:05:11, hacktest Du folgendes herunter: >> Would not it make sense to add autowhitelisting based on Return-Path: >> header (envelope sender) to auto whitelist mailing lists? >> [ It may be triggered only when List-Id: header i

Re: Autowhitelist based on Return-Path: (envelope sender) for mailing list

2011-07-08 Thread Michelle Konzack
Hello Andrzej Adam Filip, Am 2011-07-08 18:05:11, hacktest Du folgendes herunter: > Would not it make sense to add autowhitelisting based on Return-Path: > header (envelope sender) to auto whitelist mailing lists? > [ It may be triggered only when List-Id: header is present. ] Not even the half o

Re: Securing spamd [single (non root) OS user]

2011-07-08 Thread m...@smtp.fakessh.eu
Le vendredi 8 juillet 2011 19:00, Andrzej Adam Filip a écrit : > Kārlis Repsons wrote: > > All, > > I'd like you to review approximately how I'm running spamd. My concern > > is security. You can see that the child processes are run by spamd user, > > but the main process is still run by root: > >

Re: Securing spamd

2011-07-08 Thread Andrzej Adam Filip
Kārlis Repsons wrote: > On Friday 08 July 2011 16:54:22 Benny Pedersen wrote: >> On Fri, 8 Jul 2011 16:41:36 +, Kārlis Repsons wrote: >> > All, >> > I'd like you to review approximately how I'm running spamd. My >> > concern >> > is security. You can see that the child processes are run by spa

Re: Securing spamd

2011-07-08 Thread Kārlis Repsons
On Friday 08 July 2011 17:34:13 Benny Pedersen wrote: > > On Friday 08 July 2011 17:00:50 Andrzej Adam Filip wrote: > >> Do you need spamd changing OS user ids? (e.g. to access > >> ~/.spamassassin/ ) > > > > No, I don't! > > one could ask how to configure it A small server. And configuration is

Re: Securing spamd

2011-07-08 Thread Benny Pedersen
On Fri, 8 Jul 2011 17:03:35 +, Kārlis Repsons wrote: Stop what? questions ? I tried with --port=2580, but still one root process. But you meant it's not worth worrying about? some have answered this already On Friday 08 July 2011 17:00:50 Andrzej Adam Filip wrote: Do you need spamd

Re: Lowering spam threshold [avoid discarding at high cost]

2011-07-08 Thread John Hardin
On Fri, 8 Jul 2011, Andrzej Adam Filip wrote: John Hardin wrote: On Fri, 8 Jul 2011, Lars Jørgensen wrote: $sa_tag2_level_deflt = 5.2; # add 'spam detected' headers at that level $sa_kill_level_deflt = 6.2; # triggers spam evasive actions (e.g. blocks mail) That seems a little aggressiv

Re: Securing spamd

2011-07-08 Thread Kārlis Repsons
On Friday 08 July 2011 16:54:22 Benny Pedersen wrote: > On Fri, 8 Jul 2011 16:41:36 +, Kārlis Repsons wrote: > > All, > > I'd like you to review approximately how I'm running spamd. My > > concern > > is security. You can see that the child processes are run by spamd > > user, > > but the main

Re: Securing spamd [single (non root) OS user]

2011-07-08 Thread Andrzej Adam Filip
Kārlis Repsons wrote: > All, > I'd like you to review approximately how I'm running spamd. My concern > is security. You can see that the child processes are run by spamd user, > but the main process is still run by root: > > ps -C spamd -o user,cmd > USER CMD > root /usr/sbin/spamd -d -r

Re: Securing spamd

2011-07-08 Thread Benny Pedersen
On Fri, 8 Jul 2011 16:41:36 +, Kārlis Repsons wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still run by root: ps -C spamd -o user,cmd USER CMD root

Securing spamd

2011-07-08 Thread Kārlis Repsons
All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still run by root: ps -C spamd -o user,cmd USER CMD root /usr/sbin/spamd -d -r /var/run/spamd.pid -m 2 -u spamd --nou

Re: Reduce filtering time by white-listing [Mail::SpamAssassin::Plugin::Shortcircuit]

2011-07-08 Thread Kārlis Repsons
On Thursday 07 July 2011 16:46:42 Andrzej Adam Filip wrote: > Have you considered using Shortcircuit plugin? > Mail::SpamAssassin::Plugin::Shortcircuit Partially I use it. I gave up for anything more than using it with whitelist_from.

Autowhitelist based on Return-Path: (envelope sender) for mailing list

2011-07-08 Thread Andrzej Adam Filip
Would not it make sense to add autowhitelisting based on Return-Path: header (envelope sender) to auto whitelist mailing lists? [ It may be triggered only when List-Id: header is present. ] -- [pl>en: Andrew] Andrzej Adam Filip : a...@onet.eu Fame is a vapor; popularity an accident; the only eart

Re: Lowering spam threshold [avoid discarding at high cost]

2011-07-08 Thread Andrzej Adam Filip
John Hardin wrote: > On Fri, 8 Jul 2011, Lars Jørgensen wrote: > $sa_tag2_level_deflt = 5.2; # add 'spam detected' headers at that level $sa_kill_level_deflt = 6.2; # triggers spam evasive actions (e.g. blocks mail) >> >>> That seems a little aggressive to me. Personally I'd pref

RE: Lowering spam threshold

2011-07-08 Thread John Hardin
On Fri, 8 Jul 2011, Lars Jørgensen wrote: $sa_tag2_level_deflt = 5.2; # add 'spam detected' headers at that level $sa_kill_level_deflt = 6.2; # triggers spam evasive actions (e.g. blocks mail) That seems a little aggressive to me. Personally I'd prefer a larger margin of error for FPs, and

RE: Lowering spam threshold

2011-07-08 Thread Lars Jørgensen
> > $sa_tag2_level_deflt = 5.2; # add 'spam detected' headers at that level > > $sa_kill_level_deflt = 6.2; # triggers spam evasive actions (e.g. blocks > > mail) > That seems a little aggressive to me. Personally I'd prefer a larger > margin of error for FPs, and would set the discard level t