Re: Identifying actual performance on rules

2012-01-23 Thread John Hardin
On Tue, 24 Jan 2012, Karsten Bräckelmann wrote: On Mon, 2012-01-23 at 08:03 -0800, John Hardin wrote: On Sun, 22 Jan 2012, Munroe Sollog wrote: I am trying to locate reason for performance spikes. I have read the various wiki pages, and they suggest solutions but not a way to identify the bo

Re: Identifying actual performance on rules

2012-01-23 Thread Karsten Bräckelmann
On Mon, 2012-01-23 at 08:03 -0800, John Hardin wrote: > On Sun, 22 Jan 2012, Munroe Sollog wrote: > > > I am trying to locate reason for performance spikes. I have read the > > various wiki pages, and they suggest solutions but not a way to identify > > the bottleneck. Is there way to increase

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Benny Pedersen
On Mon, 23 Jan 2012 17:50:42 +0100, Toni Mueller wrote: recently, my spamassassin started to score system messages as spam, mentioning IP numbers not in the email: is your own ip listed as internal_networks or and trusted_networks, your own ip must be listed there, but this wont be stable if y

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
Hi, On Mon, Jan 23, 2012 at 12:29:29PM -0500, Kevin A. McGrail wrote: > My thoughts were definitely the threads in amavis getting mixed up. > I would definitely look at that path because I'm sure if you do > spamassassin -t -D on the mbox format email post-amavis, you'll find > it doesn't repeat

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Kevin A. McGrail
On 1/23/2012 12:25 PM, Toni Mueller wrote: Hi, On Mon, Jan 23, 2012 at 12:19:52PM -0500, dar...@chaosreigns.com wrote: On 01/23, Toni Mueller wrote: I do see this IP number several times, but it tried to send a completely different email to someone else on my server. I was just about to ask i

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
Hi, On Mon, Jan 23, 2012 at 12:19:52PM -0500, dar...@chaosreigns.com wrote: > On 01/23, Toni Mueller wrote: > > I do see this IP number several times, but it tried to send a completely > > different email to someone else on my server. > > I was just about to ask if it might be showing up in othe

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Kevin A. McGrail
On 1/23/2012 12:19 PM, dar...@chaosreigns.com wrote: On 01/23, Toni Mueller wrote: On Mon, Jan 23, 2012 at 11:59:43AM -0500, Kevin A. McGrail wrote: Am I looking at a bug in SA? And/Or, how do I debug this, please? Baffling. Checking your maillogs, you don't see that IP anywhere? I do see th

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread darxus
On 01/23, Toni Mueller wrote: > On Mon, Jan 23, 2012 at 11:59:43AM -0500, Kevin A. McGrail wrote: > > > Am I looking at a bug in SA? And/Or, how do I debug this, please? > > Baffling. Checking your maillogs, you don't see that IP anywhere? > > I do see this IP number several times, but it tried t

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
On Mon, Jan 23, 2012 at 11:59:43AM -0500, Kevin A. McGrail wrote: > > Am I looking at a bug in SA? And/Or, how do I debug this, please? > Baffling. Checking your maillogs, you don't see that IP anywhere? I do see this IP number several times, but it tried to send a completely different email to s

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Kevin A. McGrail
> Am I looking at a bug in SA? And/Or, how do I debug this, please? Kind regards, --Toni++ Baffling. Checking your maillogs, you don't see that IP anywhere?

ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
Hi, recently, my spamassassin started to score system messages as spam, mentioning IP numbers not in the email: Return-Path: Delivered-To: xx...@oeko.net Received: from localhost (localhost [127.0.0.1]) by w3.oeko.net (Postfix) with ESMTP id AB1E725CEA for ; Sun, 22 Jan 2012 0

Re: Identifying actual performance on rules

2012-01-23 Thread John Hardin
On Sun, 22 Jan 2012, Munroe Sollog wrote: I am trying to locate reason for performance spikes. I have read the various wiki pages, and they suggest solutions but not a way to identify the bottleneck. Is there way to increase logging so that I can begin to identify or rule out the actual perf

Re: URIBL blocked

2012-01-23 Thread Giles Coochey
I would look at getting a datafeed: http://www.uribl.com/datafeed.shtml [7] Out of interest, how much volume of email are you processing to experience this? Are you sharing your external IP with any other of your ISP customers? Does your ISP do anything strange with DNS queries? On 2012-01

Re: URIBL blocked

2012-01-23 Thread spamassassin
On 23/01/12 12:22, Tom Kinghorn wrote: > Resolving the block might be as simple as using your own caching > nameserver to avoid being lumped together with other users queries; > setting up your own mirror of the DNS-blocklist; or paying to use the > blocklist. The choice is up to the DNS-Blocklist

URIBL blocked

2012-01-23 Thread Tom Kinghorn
Good afternoon list. Please could someone explain the following  0.0 URIBL_BLOCKED  ADMINISTRATOR NOTICE: The query to URIBL was blocked.     See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more in