Re: Performance Problems Upgrading From 3.2.5 to 3.3.1 on CentOS 5/6

2011-11-17 Thread Karsten Bräckelmann
On Thu, 2011-11-17 at 15:55 +, Tom wrote: > SPAMDOPTIONS="-d -L -i 10.44.219.208 -A 10.44.217.0/20 -m 40 -q -x -u > spamd --min-children=40" Do you really run a single spamd server, serving a /20 of potential SMTP servers? Also, you configured spamd to try hard and always keep exactly 40 chi

Re: Detecting serious domains

2011-11-17 Thread darxus
On 11/17, Marc Perkel wrote: > for example, if the sending domain has no MX records of its own it > is more likely spam that if there are 3 or more MX records that There could be a useful correlation there, but I need to point out that if a domain has no MX records, the correct thing to do is to s

Re: Performance Problems Upgrading From 3.2.5 to 3.3.1 on CentOS 5/6

2011-11-17 Thread Martin Hepworth
have you turned off RBLs and other network tests you dont need and disabled any non-standard rules and plugins? if you are using RBLS's have a a caching nameserver on the SA machine itself (even if your 'local' DNS server is only a couple of milliseconds away a caching namesserver on the box itsel

Re: Detecting serious domains

2011-11-17 Thread Robert Schetterer
Am 17.11.2011 16:27, schrieb Marc Perkel: > I'm exploring a variety of ideas to determine the difference between > "serious" domains down to throw away domains used by spammers. The ideas > I'm presenting here are not complete but are just a conversation starter. > > for example, if the sending do

Re: Detecting serious domains

2011-11-17 Thread Kevin A. McGrail
for example, if the sending domain has no MX records of its own it is more likely spam that if there are 3 or more MX records that resolve to multiple IPs over more than one network. Generally spam only domains are minimally configured, and highly configured domains are not spam only. I also

Performance Problems Upgrading From 3.2.5 to 3.3.1 on CentOS 5/6

2011-11-17 Thread Tom
Greetings, === Information == Old Version: spamassassin-3.2.5-1.el5 New EL5 Version: spamassassin-3.3.1-2.el6.x86_64 New EL6 Version: spamassassin-3.3.1-2.el5.x86_64 SPAMDOPTIONS="-d -L -i 10.44.219.208 -A 10.44.217.0/20 -m 40 -q -x -u spamd --min-children=40" Other info Bayes

Detecting serious domains

2011-11-17 Thread Marc Perkel
I'm exploring a variety of ideas to determine the difference between "serious" domains down to throw away domains used by spammers. The ideas I'm presenting here are not complete but are just a conversation starter. for example, if the sending domain has no MX records of its own it is more lik