Re: no rDNS

2012-10-16 Thread Joseph Acquisto
>>> On 10/16/2012 at 6:25 PM, Lutz Petersen wrote: >> > Wondering about this detection: >> > >> > "2.4 RDNS_NONE Delivered to internal network by a host with >> > no > rDNS" > > I saw this sometimes in mails delivered from external where people > have sent their mail within an in

Re: no rDNS

2012-10-16 Thread Lutz Petersen
> > Wondering about this detection: > > > > "2.4 RDNS_NONE Delivered to internal network by a host with no > > rDNS" I saw this sometimes in mails delivered from external where people have sent their mail within an internal lan to for example the companies (internal reachable) mai

Re: Sender domain in IP space 5.0.0.0/8 triggers RCVD_ILLEGAL_IP

2012-10-16 Thread Kevin A. McGrail
On 10/16/2012 3:03 PM, Frederic De Mees wrote: I thank all of you who have responded. This brings a subsequent question. Suppose I rent a new couple of servers in a colo and get IP addresses in this infamous 5.x range. A website such as a forum, e-shop, ... will issue lots of e-mails. (I'm not

Re: Sender domain in IP space 5.0.0.0/8 triggers RCVD_ILLEGAL_IP

2012-10-16 Thread Frederic De Mees
I thank all of you who have responded. This brings a subsequent question. Suppose I rent a new couple of servers in a colo and get IP addresses in this infamous 5.x range. A website such as a forum, e-shop, ... will issue lots of e-mails. (I'm not in the bulkmail business) I wonder what perce

Re: no rDNS

2012-10-16 Thread RW
On Tue, 16 Oct 2012 11:25:15 -0400 Joseph Acquisto wrote: > Wondering about this detection: > > "2.4 RDNS_NONE Delivered to internal network by a host > with no rDNS" > > I see this on *all* SPAM marked email some of which are from > legitimate senders. I have set my internal boxe

Re: Sender domain in IP space 5.0.0.0/8 triggers RCVD_ILLEGAL_IP

2012-10-16 Thread darxus
On 10/16, Frederic De Mees wrote: > I have found 2 instances of the file 20_head_tests.cf on my server. > The first stays in /usr/share/spamassassin and contains the following That's used when you have never run sa-update. > The second in /var/lib/spamassassin/3.003001/updates_spamassassin_org an

Re: Sender domain in IP space 5.0.0.0/8 triggers RCVD_ILLEGAL_IP

2012-10-16 Thread Frederic De Mees
From: "John Wilcock" The bug has definitely been fixed for SpamAssassin 3.3.2, and the bugzilla states that the same is true for all 3.3.x. RCVD_ILLEGAL_IP X-Spam-Relays-Untrusted =~ / (?:by|ip)=(?=\d+\.\d+\.\d+\.\d+ )(?:(?:0|2(?:2[4-9]|[3-5]\d)|192\.0\.2|198\.51\.100|203\.0\.113)\.

Re: no rDNS

2012-10-16 Thread Ned Slider
On 16/10/12 16:25, Joseph Acquisto wrote: Wondering about this detection: "2.4 RDNS_NONE Delivered to internal network by a host with no rDNS" Yes, I see this on *all* SPAM marked email some of which are from legitimate senders. I have set my internal boxes as trusted and i

no rDNS

2012-10-16 Thread Joseph Acquisto
Wondering about this detection: "2.4 RDNS_NONE Delivered to internal network by a host with no rDNS" I see this on *all* SPAM marked email some of which are from legitimate senders. I have set my internal boxes as trusted and internal in the config file, but still suspect it mus

Re: Spamassassin sync in 2 servers?

2012-10-16 Thread Christian Grunfeld
if you choose "IMAP movement", when users marks as spam/ham messages are moved to special folders where system learns from. if you choose "report by email" messages reported as spam/ham are sent to special catchall accounts. 2012/10/16 Christian Grunfeld : > I said it is possible moving messages

Re: Spamassassin sync in 2 servers?

2012-10-16 Thread Christian Grunfeld
I said it is possible moving messages by IMAP or by email reporting . and not possible moving messages at filesystem level (in the case webmail is separate from mail server) Plugins can do all of them. You have to choose what fit best for you. 2012/10/16 mgia : >> roundcube and many others h

Re: Spamassassin sync in 2 servers?

2012-10-16 Thread mgia
> roundcube and many others have plugins that can move messages by IMAP, > at filesystem level (not usefull if frontend is separate from > mailboxes) and by "report by mail" Sorry, I haven't understand you, do you mean that this is not possible?

Re: Spamassassin sync in 2 servers?

2012-10-16 Thread Christian Grunfeld
roundcube and many others have plugins that can move messages by IMAP, at filesystem level (not usefull if frontend is separate from mailboxes) and by "report by mail" 2012/10/16 mgia : > Hi, >> How do you spread transport, recipients mailboxes and web client >> between your servers? >> >> if you

Re: Spamassassin sync in 2 servers?

2012-10-16 Thread mgia
Hi, > How do you spread transport, recipients mailboxes and web client > between your servers? > > if you have SMTP and recipient mailboxes in one box you have to filter > only there ! In the case that the web mail interface (ex. roundcube) is running in a separate server as of the mail server, h

Re: Sender domain in IP space 5.0.0.0/8 triggers RCVD_ILLEGAL_IP

2012-10-16 Thread Ned Slider
On 16/10/12 07:50, John Wilcock wrote: Le 16/10/2012 07:57, Frederic De Mees a écrit : When I receive mails from servers hosted in IP address space 5.0.0.0/8, SA tags them with RCVD_ILLEGAL_IP. This address space is currently heavily distributed in Europe. I have found a bug report #6810 (https