Re: Am i sending spam?

2011-12-24 Thread John Hardin
On Sat, 24 Dec 2011, Benny Pedersen wrote: On Sat, 24 Dec 2011 08:47:44 -0800 (PST), John Hardin wrote: Ha. This is what I get for replying to mail as I read it. :) +1 can you make it more generic exsample without your own domain in it, atleast i dont think users will use it unmodified ?

Re: Bayes and MySQL - does it actually work?

2011-12-24 Thread Gary V
On Fri, Dec 23, 2011 at 4:58 AM, Benny Pedersen wrote: > On Fri, 23 Dec 2011 13:29:00 +0200, Henrik K wrote: > >> Since these issues pop up here every now and then, I guess SA needs own >> tutorial/howto for MySQL tuning.. > > > google mysqltuner was a help for me even i have not much trafic here

Re: Am i sending spam?

2011-12-24 Thread John Hardin
On Sat, 24 Dec 2011, Benny Pedersen wrote: On Sat, 24 Dec 2011 08:47:44 -0800 (PST), John Hardin wrote: Ha. This is what I get for replying to mail as I read it. :) +1 can you make it more generic exsample without your own domain in it, atleast i dont think users will use it unmodified ?

Re: Am i sending spam?

2011-12-24 Thread Benny Pedersen
On Sat, 24 Dec 2011 08:47:44 -0800 (PST), John Hardin wrote: Ha. This is what I get for replying to mail as I read it. :) +1 can you make it more generic exsample without your own domain in it, atleast i dont think users will use it unmodified ? :) mary xmax

Re: whitelist rules should include IP address in output?

2011-12-24 Thread darxus
On 12/24, Greg Troxel wrote: > I think it's a bug in the RP rules that the IP address is not shown, and > in general a bug in any white/blacklist rule not to show the IP address > that hit. Agreed. > Do people agree? Is it helpful to file a single bug about the RP rules, > and also a meta bug?

Re: Am i sending spam?

2011-12-24 Thread Lars Ebeling
I am using Postfix. /Lars - Original Message - From: "John Hardin" To: Sent: Saturday, December 24, 2011 5:47 PM Subject: Re: Am i sending spam? On Sat, 24 Dec 2011, Benny Pedersen wrote: On Fri, 23 Dec 2011 23:13:43 +0100, Lars Ebeling wrote: > In other words, the HELO domain

Re: Am i sending spam?

2011-12-24 Thread John Hardin
On Sat, 24 Dec 2011, Benny Pedersen wrote: On Fri, 23 Dec 2011 23:13:43 +0100, Lars Ebeling wrote: > In other words, the HELO domain was faked. We automatically block mail > from anyone who HELOs as our machine (unless it really *is* from our > machine, > of course!) how do you do that

Re: Am i sending spam?

2011-12-24 Thread John Hardin
On Fri, 23 Dec 2011, Lars Ebeling wrote: - Original Message - From: "David F. Skoll" In other words, the HELO domain was faked. We automatically block mail from anyone who HELOs as our machine (unless it really *is* from our machine, of course!) how do you do that? There are s

Re: whitelist rules should include IP address in output?

2011-12-24 Thread Greg Troxel
why not report it to dnswl ? Good point; I have reported it. The basic issue seems to be that I view websites that offer to a user to upload an address book and send invitation emails to the entire list to be spammers. But, because some invitatations are arguably legitimate (those sent to an

Re: whitelist rules should include IP address in output?

2011-12-24 Thread Greg Troxel
Benny Pedersen writes: > On Sat, 24 Dec 2011 08:54:59 -0500, Greg Troxel wrote: > >> X-Spam-Status: No, score=-1.7 required=1.0 >> tests=BAYES_50,DKIM_FORGED, >> Content analysis details: (-5.7 points, 1.0 required) > > hmm why diff scores now ? because BAYES_50 on arrival changed to BAYE

Re: whitelist rules should include IP address in output?

2011-12-24 Thread Benny Pedersen
On Sat, 24 Dec 2011 08:54:59 -0500, Greg Troxel wrote: X-Spam-Status: No, score=-1.7 required=1.0 tests=BAYES_50,DKIM_FORGED, Content analysis details: (-5.7 points, 1.0 required) hmm why diff scores now ? dkim forged can be solved with adsp no ? why not report it to dnswl ? mary xma

whitelist rules should include IP address in output?

2011-12-24 Thread Greg Troxel
I'm having (yet another) problem getting spam certified by returnpath. (This message is not to complain about returnpath; I'll do that sometime after close of business Monday if they haven't delisted the spammer. :-) The offending spam had a non-spam score, and thus compact headers showing the ru

Re: Am i sending spam?

2011-12-24 Thread Benny Pedersen
On Fri, 23 Dec 2011 23:13:43 +0100, Lars Ebeling wrote: In other words, the HELO domain was faked. We automatically block mail from anyone who HELOs as our machine (unless it really *is* from our machine, of course!) how do you do that? http://www.impsec.org/~jhardin/antispam/milter-regex.

Re: Am i sending spam?

2011-12-24 Thread Benny Pedersen
On Fri, 23 Dec 2011 22:10:22 +0100, Lars Ebeling wrote: http://pastebin.com/78gUdaCj line 82-86 shows that outlook is slowly dieing :-) line 86 contains content outside us-ascii, non encoded chars