Bayes & Apache James server

2011-07-28 Thread Kelson Vibber
I'm setting up the spam/virus filtering on an Apache James mail server, and SpamAssassin is one of the pieces we plan on using. I used to run a Sendmail-based server with SpamAssassin for years at a previous job, so I'm familiar with SA, but I'm still new to James. James includes a plugin for B

Re: RP_MATCHES_RCVD

2011-07-28 Thread darxus
On 07/28, John Hardin wrote: > On Thu, 28 Jul 2011, Daniel McDonald wrote: > >I see a lot of messages hitting RP_MATCHES_RCVD that also hits one of the > >Invaluement rbls. Invaluement primarily targets snowshoe spammers. > http://ruleqa.spamassassin.org/20110727-r1151385-n/RP_MATCHES_RCVD/detail

Re: RP_MATCHES_RCVD

2011-07-28 Thread Daniel McDonald
On 7/28/11 11:47 AM, "John Hardin" wrote: > On Thu, 28 Jul 2011, Daniel McDonald wrote: > >> I see a lot of messages hitting RP_MATCHES_RCVD that also hits one of the >> Invaluement rbls. Invaluement primarily targets snowshoe spammers. >> >> $ grep RP_MATCHES_RCVD /var/log/mail/info.log | gr

Re: RP_MATCHES_RCVD

2011-07-28 Thread John Hardin
On Thu, 28 Jul 2011, Daniel McDonald wrote: I see a lot of messages hitting RP_MATCHES_RCVD that also hits one of the Invaluement rbls. Invaluement primarily targets snowshoe spammers. $ grep RP_MATCHES_RCVD /var/log/mail/info.log | grep -vc INVL 41618 $ grep RP_MATCHES_RCVD /var/log/mail/info

Re: RP_MATCHES_RCVD

2011-07-28 Thread Benny Pedersen
On Thu, 28 Jul 2011 15:28:37 +0100, RW wrote: There seems to be a consensus that SPF and DKIM passes aren't worth significant scores. So how is it that RP_MATCHES_RCVD, scores -1.2 when it just a circumstantial version of what SPF does explicitly. For me it's hitting more spam that ham, and wh

Re: RP_MATCHES_RCVD

2011-07-28 Thread Daniel McDonald
On 7/28/11 9:48 AM, "Mike Grau" wrote: > On 07/28/2011 09:28 AM the voices made RW write: >> There seems to be a consensus that SPF and DKIM passes aren't worth >> significant scores. So how is it that RP_MATCHES_RCVD, scores -1.2 when >> it just a circumstantial version of what SPF does expli

Re: JM_SOUGHT rules hitting Facebook again

2011-07-28 Thread Benny Pedersen
On Thu, 28 Jul 2011 12:45:35 +0200, Axb wrote: Jul 28 11:38:52.060 [16462] dbg: dns: 1.3.3.sought.rules.yerp.org => 3301151446, parsed as 3301151446 Let's ask JM to add: Facebook | Twitter | to his "kill_bad_patterns" are this a problem with dkim testing ? what if JM add this skip words

Re: RP_MATCHES_RCVD

2011-07-28 Thread Mike Grau
On 07/28/2011 09:28 AM the voices made RW write: There seems to be a consensus that SPF and DKIM passes aren't worth significant scores. So how is it that RP_MATCHES_RCVD, scores -1.2 when it just a circumstantial version of what SPF does explicitly. For me it's hitting more spam that ham, and w

Re: RP_MATCHES_RCVD

2011-07-28 Thread Ned Slider
On 28/07/11 15:28, RW wrote: There seems to be a consensus that SPF and DKIM passes aren't worth significant scores. So how is it that RP_MATCHES_RCVD, scores -1.2 when it just a circumstantial version of what SPF does explicitly. For me it's hitting more spam that ham, and what's worse, it's mo

RP_MATCHES_RCVD

2011-07-28 Thread RW
There seems to be a consensus that SPF and DKIM passes aren't worth significant scores. So how is it that RP_MATCHES_RCVD, scores -1.2 when it just a circumstantial version of what SPF does explicitly. For me it's hitting more spam that ham, and what's worse, it's mostly hitting low-scoring freema

Re: Heads up: Plesk + SpamAssassin, spam attack doing the rounds

2011-07-28 Thread Bruno Ferreira - Digitalmente Lda.
On 27-07-2011 19:01, dar...@chaosreigns.com wrote: On 07/27, Bruno Ferreira - Digitalmente Lda. wrote: always self-addressed in some form or other) are actually being delivered without any SA headers after all. However, the logs (the Is it possible plesk is set up to only add the SA headers ab

Re: slow bayes queries using innodb

2011-07-28 Thread Mark Martinec
Jason, > Yes I have 3.3.2 so I've made that change as it seems to make a lot of > sense to me. > > However, I think that will just slow down the rate of learns and it will > still snarl up at busy times? True. I don't have a better answer for your original question on a slowdown. There may be s

Re: slow bayes queries using innodb

2011-07-28 Thread Henrik K
On Thu, Jul 28, 2011 at 09:30:33AM +, Jason Ede wrote: > Even with auto_expiry off the system is still running really slow for a > remote server... The local server bayes updates go through really quickly, > but the remote servers queries are still backing up... > > i.e. from slow query log

Re: JM_SOUGHT rules hitting Facebook again

2011-07-28 Thread Axb
On 2011-07-28 12:39, Ned Slider wrote: Hi, JM_SOUGHT_3 is hitting Facebook notifications again. The offending rule appears to be: body __SEEK_2GW7AI /\. If you don\'t want to receive these emails from Facebook in the future or have your email address used for friend suggestions, you can unsub

JM_SOUGHT rules hitting Facebook again

2011-07-28 Thread Ned Slider
Hi, JM_SOUGHT_3 is hitting Facebook notifications again. The offending rule appears to be: body __SEEK_2GW7AI /\. If you don\'t want to receive these emails from Facebook in the future or have your email address used for friend suggestions, you can unsubscribe\. / Channel update was: Jul

RE: slow bayes queries using innodb

2011-07-28 Thread Jason Ede
Hi, Yes I have 3.3.2 so I've made that change as it seems to make a lot of sense to me. However, I think that will just slow down the rate of learns and it will still snarl up at busy times? Jason > -Original Message- > From: Mark Martinec [mailto:mark.martinec...@ijs.si] > Sent: 28

Re: slow bayes queries using innodb

2011-07-28 Thread Mark Martinec
On Thursday July 28 2011 11:30:33 Jason Ede wrote: > Even with auto_expiry off the system is still running really slow for a > remote server... The local server bayes updates go through really quickly, > but the remote servers queries are still backing up... > > i.e. from slow query log just now..

RE: slow bayes queries using innodb

2011-07-28 Thread Jason Ede
Even with auto_expiry off the system is still running really slow for a remote server... The local server bayes updates go through really quickly, but the remote servers queries are still backing up... i.e. from slow query log just now... # User@Host: sa_user[sa_user] @ gateway.XXX.XXX [XXX.XXX