Re: Svar: confirm unsubscribe from users@spamassassin.apache.org

2013-10-23 Thread Benny Pedersen
Webmaster DKDB skrev den 2013-10-24 07:56: X-Mailer: GroupWise 2012 mangler dkdb.dk spænding i livet ? hvis du ønsker at framelde denne mailliste så skal du ikke skrive til den, men skrive til manageren som kan findes på To remove your address from the list, send a message to: [removed

Svar: confirm unsubscribe from users@spamassassin.apache.org

2013-10-23 Thread Webmaster DKDB
>>> 24-10-2013 kl. 07:39 skrev i >>> meddelelsen UID6893-1321632709: > Hi! This is the ezmlm program. I'm managing the > users@spamassassin.apache.org mailing list. > > To confirm that you would like > >webmas...@dkdb.dk > > removed from the users mailing list, please send a short reply

OT: freebsd 10

2013-10-23 Thread Benny Pedersen
http://www.youtube.com/watch?v=hbAh3O0g90Q :-)

Re: Spam constantly being autolearned as ham

2013-10-23 Thread John Hardin
On Wed, 23 Oct 2013, Axb wrote: On 10/23/2013 11:40 PM, John Hardin wrote: On Wed, 23 Oct 2013, Axb wrote: > On 10/23/2013 11:23 PM, Quanah Gibson-Mount wrote: > > > > Still the spam score seems a bit low, I guess I may want to tweak the > > URIBL_DBL_SPAM and URIBL_BLOCKED scores. >

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Thursday, October 24, 2013 12:05 AM +0200 Benny Pedersen wrote: Quanah Gibson-Mount skrev den 2013-10-23 23:51: Is Amavis screwing with things here, since SA is called via Amavis? if its is, try testing spampd so its showed its not that problem, running amavis and spampd nearly is equa

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
Quanah Gibson-Mount skrev den 2013-10-23 23:56: Yes, I see... Amavis turns off RBLs: $spamassasin_obj = Mail::SpamAssassin->new( { dont_copy_prefs => 1, local_tests_only => 1 } ) That explains a lot. ;) damm this happends only on precompiled problems distros like zimbra i cant get th

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
Quanah Gibson-Mount skrev den 2013-10-23 23:51: Is Amavis screwing with things here, since SA is called via Amavis? if its is, try testing spampd so its showed its not that problem, running amavis and spampd nearly is equal to postfix setup, not much time to see if amavis is at fault for this

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
Axb skrev den 2013-10-23 23:47: If ppl setup their reports not to show rule descriptions do we need to read them every description out loud? the more users that setup there dns servers to not forward, the more datafeeds paying users is needed to handle the dns load :)

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 2:56 PM -0700 Quanah Gibson-Mount wrote: Now, why don't I have "URIBL_BLOCKED" in *both*? It still seems to me that URIBL lookups are not occurring when going through the MTA, regardless of whether or not I'm blocked. Is Amavis screwing with things here, sinc

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
John Hardin skrev den 2013-10-23 23:40: Maybe we need to rename that to URIBL_QUERY_BLOCKED for clarity? +1

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 2:51 PM -0700 Quanah Gibson-Mount wrote: Now, why don't I have "URIBL_BLOCKED" in *both*? It still seems to me that URIBL lookups are not occurring when going through the MTA, regardless of whether or not I'm blocked. Is Amavis screwing with things here, sin

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 11:32 PM +0200 Axb wrote: URIBL_BLOCKED is not good news .-) I wouldn't touch that score... http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block Ok. Here is something I don't understand -- Why I get utterly different values from email that goes t

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Axb
On 10/23/2013 11:40 PM, John Hardin wrote: On Wed, 23 Oct 2013, Axb wrote: On 10/23/2013 11:23 PM, Quanah Gibson-Mount wrote: Still the spam score seems a bit low, I guess I may want to tweak the URIBL_DBL_SPAM and URIBL_BLOCKED scores. URIBL_BLOCKED is not good news .-) I wouldn't touch

Re: Spam constantly being autolearned as ham

2013-10-23 Thread John Hardin
On Wed, 23 Oct 2013, Axb wrote: On 10/23/2013 11:23 PM, Quanah Gibson-Mount wrote: Still the spam score seems a bit low, I guess I may want to tweak the URIBL_DBL_SPAM and URIBL_BLOCKED scores. URIBL_BLOCKED is not good news .-) I wouldn't touch that score... Maybe we need to rename that

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Karsten Bräckelmann
On Tue, 2013-10-22 at 21:50 -0500, David B Funk wrote: > Actually that %thingy is the IPv6 zone_id (which functionally maps to the > interface). Good point, thanks. And appropriately named article link. > Given that the LLA is the same bit range regardless of interface, on a > multi-homed machi

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
Quanah Gibson-Mount skrev den 2013-10-23 23:23: Oct 23 14:18:43.636 [24474] dbg: uridnsbl: domain "pumpery.com" listed (URIBL_BLOCKED): 127.0.0.1 this is not a url blacklistning, but a warning wmware dns is not paying for dataservices i wont say localhost one more time now, you get the poin

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Axb
On 10/23/2013 11:23 PM, Quanah Gibson-Mount wrote: --On Wednesday, October 23, 2013 5:04 PM -0400 Kris Deugau wrote: Well, you didn't post the message body... *Usually* that indicates that the URI wasn't listed when the message was originally processed, but checking again even 10-15 minutes

Re: Spam constantly being autolearned as ham

2013-10-23 Thread John Hardin
On Wed, 23 Oct 2013, Quanah Gibson-Mount wrote: Still the spam score seems a bit low, I guess I may want to tweak the URIBL_DBL_SPAM and URIBL_BLOCKED scores. URIBL_BLOCKED means the DNS server you're using to query the DNSBL has exceeded the free access limits and is being blocked from getti

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 5:04 PM -0400 Kris Deugau wrote: Well, you didn't post the message body... *Usually* that indicates that the URI wasn't listed when the message was originally processed, but checking again even 10-15 minutes later it is. This is tricky to confirm unless you

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 10:52 PM +0200 Benny Pedersen wrote: Quanah Gibson-Mount skrev den 2013-10-23 22:09: Ok, but the message body specifically has multiple links to pumpery.com. So why didn't it get scored? That's what I don't understand. ;) X-ASF-Spam-Status: No, hits=7.1 re

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 10:57 PM +0200 Benny Pedersen wrote: Quanah Gibson-Mount skrev den 2013-10-23 22:45: Oct 23 09:05:53 edge01-zcs amavis[3250]: (03250-12) Checking: 4vlUublDBL_R [162.213.112.166] -> Oct 23 09:05:53 edge01-zcs amavis[3250]: (03250-12) Passed CLEAN {RelayedInb

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Kris Deugau
Quanah Gibson-Mount wrote: > --On Wednesday, October 23, 2013 3:58 PM -0400 Kris Deugau > wrote: > >> Only select headers have URIs extracted and passed to the DNS lookups; >> I don't *think* Received: or Message-Id: are included. I've been >> surprised now and then discovering a URI that *was*

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
Quanah Gibson-Mount skrev den 2013-10-23 22:45: Oct 23 09:05:53 edge01-zcs amavis[3250]: (03250-12) Checking: 4vlUublDBL_R [162.213.112.166] -> Oct 23 09:05:53 edge01-zcs amavis[3250]: (03250-12) Passed CLEAN {RelayedInbound}, [162.213.112.166]:49611 [162.213.112.166] -> , Queue-ID: A39DD79F,

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
Quanah Gibson-Mount skrev den 2013-10-23 22:09: Ok, but the message body specifically has multiple links to pumpery.com. So why didn't it get scored? That's what I don't understand. ;) X-ASF-Spam-Status: No, hits=7.1 required=10.0 tests=SPF_PASS,URIBL_BLACK,URIBL_DBL_SPAM,URIBL_JP_SUR

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 10:34 PM +0200 Axb wrote: pls grep your logs for one of these: URIBL , SURBL , DBL (uppercase) Do you see any hits at all? I see one: Oct 23 09:05:53 edge01-zcs amavis[3250]: (03250-12) Checking: 4vlUublDBL_R [162.213.112.166] -> Oct 23 09:05:53 edge01-

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Axb
On 10/23/2013 10:09 PM, Quanah Gibson-Mount wrote: --On Wednesday, October 23, 2013 10:06 PM +0200 Benny Pedersen wrote: if you have own bind9 running on localhost bind9 is not installed on localhost. so resolv.conf is forwarding in wild ? :( resolve.conf uses VMWare's DNS servers which a

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 10:06 PM +0200 Benny Pedersen wrote: if you have own bind9 running on localhost bind9 is not installed on localhost. so resolv.conf is forwarding in wild ? :( resolve.conf uses VMWare's DNS servers which are not located on the MX servers. --Quanah --

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 3:58 PM -0400 Kris Deugau wrote: Only select headers have URIs extracted and passed to the DNS lookups; I don't *think* Received: or Message-Id: are included. I've been surprised now and then discovering a URI that *was* extracted from a header. Otherwise all

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
Quanah Gibson-Mount skrev den 2013-10-23 21:30: 50_scores.cf:score URIBL_DBL_SPAM 0 1.7 0 1.7 meta URIBL_DBL_SPAM (0.001) (0) (0.001) (0) that will show if you get results or not if hits but dont use it in production only on testing if you have own bind9 running on localhost bind9 is not

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
Quanah Gibson-Mount skrev den 2013-10-23 03:05: No, it was literally a bug in the early postfix 2.10 development releases. I reported it back to Wietse a few years ago, but never fixed my config. ;) yes i remember it now, one should show diff in ifconfig vs postconf -d | grep mynetwork :-)

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Kris Deugau
Quanah Gibson-Mount wrote: > --On Wednesday, October 23, 2013 8:00 PM +0200 Benny Pedersen > wrote: > >> Quanah Gibson-Mount skrev den 2013-10-23 19:37: >> pumpery.com listed on black.uribl.com pumpery.com listed on jp.surbl.org pumpery.com listed on sc.surbl.org >>>

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Wednesday, October 23, 2013 8:00 PM +0200 Benny Pedersen wrote: Quanah Gibson-Mount skrev den 2013-10-23 19:37: pumpery.com listed on black.uribl.com pumpery.com listed on jp.surbl.org pumpery.com listed on sc.surbl.org pumpery.com listed on dbl.spamhaus.org this i

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Benny Pedersen
Quanah Gibson-Mount skrev den 2013-10-23 19:37: pumpery.com listed on black.uribl.com pumpery.com listed on jp.surbl.org pumpery.com listed on sc.surbl.org pumpery.com listed on dbl.spamhaus.org this is urlbl, nothing to do with trusted_networks So, how do I determine why

Re: Spam constantly being autolearned as ham

2013-10-23 Thread Quanah Gibson-Mount
--On Tuesday, October 22, 2013 11:09 PM +0200 Axb wrote: sent reply directly, sotrry - here's for the list On 10/22/2013 10:33 PM, Quanah Gibson-Mount wrote: I don't get the concern about VMW. The vmw hosts are *my* MTAs and in mynetworks. mail.zimbra.com -> load balanced name for edge01-z

RE: Shared bayes SQL between machines

2013-10-23 Thread Jonas Akrouh Larsen
> -Original Message- > From: Dave Warren [mailto:da...@hireahit.com] > Sent: 23. oktober 2013 09:51 > To: users@spamassassin.apache.org > Subject: Re: Shared bayes SQL between machines > > On 2013-10-22 07:52, Jonas Akrouh Larsen wrote: > > Mmm well I'd like to use it, but it's also the ma

Re: Shared bayes SQL between machines

2013-10-23 Thread Dave Warren
On 2013-10-22 07:52, Jonas Akrouh Larsen wrote: Mmm well I'd like to use it, but it's also the manual learning. We use a web frontend which lists quarantined messages and both users and myself do manual training from there (it just calls sa-learn) How do you distribute load among your SpamAss