Re: spamass filter blocked yahoo, but why?

2015-03-11 Thread Oli Schacher
On Wed, 11 Mar 2015 22:52:41 -0600 "@lbutlr" wrote: > Oh, found the log line seconds later: > > spamd: result: Y 10 - > [...] > ,URIBL_BLACK,URIBL_DBL_SPAM,URIBL_JP_SURBL,URIBL_RHS_DOB,URIBL_SBL_A,URIBL_SC_SURBL,URIBL_WS_SURBL Looks like the message text contains a blacklisted domain.

Re: spamass filter blocked yahoo, but why?

2015-03-11 Thread @lbutlr
> On 11 Mar 2015, at 22:45 , @lbutlr wrote: > > $ grep 3l2cbk5MbNzJMhn /var/log/maillog > Mar 11 22:28:34 mail postfix/smtpd[79324]: 3l2cbk5MbNzJMhn: > client=nm20-vm5.bullet.mail.ne1.yahoo.com[98.138.91.242] > Mar 11 22:28:34 mail postfix/cleanup[79271]: 3l2cbk5MbNzJMhn: > message-id=<2c89470

spamass filter blocked yahoo, but why?

2015-03-11 Thread @lbutlr
$ grep 3l2cbk5MbNzJMhn /var/log/maillog Mar 11 22:28:34 mail postfix/smtpd[79324]: 3l2cbk5MbNzJMhn: client=nm20-vm5.bullet.mail.ne1.yahoo.com[98.138.91.242] Mar 11 22:28:34 mail postfix/cleanup[79271]: 3l2cbk5MbNzJMhn: message-id=<2c89470b-6522-413d-813b-a7e6f242c...@yahoo.com> Mar 11 22:28:38 ma

Re: bayes expire

2015-03-11 Thread Reindl Harald
Am 11.03.2015 um 19:53 schrieb @lbutlr: Non-token data: last expire time delta and last expire reduction count are currently 0. What is the time before these fields might start to see data? 0.000 0 3 0 non-token data: bayes db version 0.000 0 2928

Re: bayes expire

2015-03-11 Thread Matus UHLAR - fantomas
On 11.03.15 12:53, @lbutlr wrote: Non-token data: last expire time delta and last expire reduction count are currently 0. What is the time before these fields might start to see data? you must either allow auto-expire (which many people discourage) or run expire manually (once per time) -- Mat

bayes expire

2015-03-11 Thread @lbutlr
Non-token data: last expire time delta and last expire reduction count are currently 0. What is the time before these fields might start to see data? 0.000 0 3 0 non-token data: bayes db version 0.000 0 2928 0 non-token data: nspam 0.000

Re: Bogus day old domains from RRPPROXY.NET

2015-03-11 Thread Axb
On 03/11/2015 01:49 PM, Gibbs, David wrote: On 3/10/2015 5:08 PM, Reindl Harald wrote: for postfix there is "check_sender_ns_access hash:/etc/postfix/blacklist_ns.cf" with the advantage of logging and a proper reject cat /etc/postfix/blacklist_ns.cf ns1.sedoparking.com REJECT Domain is pa

Re: Bogus day old domains from RRPPROXY.NET

2015-03-11 Thread Gibbs, David
On 3/10/2015 5:08 PM, Reindl Harald wrote: for postfix there is "check_sender_ns_access hash:/etc/postfix/blacklist_ns.cf" with the advantage of logging and a proper reject cat /etc/postfix/blacklist_ns.cf ns1.sedoparking.com REJECT Domain is parked at sedo.com ns2.sedoparking.com R

Re: questions about the internal bayes-storage

2015-03-11 Thread Reindl Harald
Am 11.03.2015 um 13:25 schrieb Reindl Harald: Am 11.03.2015 um 13:20 schrieb RW: On Wed, 11 Mar 2015 12:49:55 +0100 Reindl Harald wrote: "sa-learn --backup" looks like the tokens are stored as CRC32 which (in case if i am right) brings the question which software / library / implementation do

Re: questions about the internal bayes-storage

2015-03-11 Thread Reindl Harald
Am 11.03.2015 um 13:20 schrieb RW: On Wed, 11 Mar 2015 12:49:55 +0100 Reindl Harald wrote: "sa-learn --backup" looks like the tokens are stored as CRC32 which (in case if i am right) brings the question which software / library / implementation does the checksums It's truncated sha1 ah ok

Re: questions about the internal bayes-storage

2015-03-11 Thread RW
On Wed, 11 Mar 2015 12:49:55 +0100 Reindl Harald wrote: > "sa-learn --backup" looks like the tokens are stored as CRC32 which > (in case if i am right) brings the question which software / > library / implementation does the checksums It's truncated sha1.

questions about the internal bayes-storage

2015-03-11 Thread Reindl Harald
"sa-learn --backup" looks like the tokens are stored as CRC32 which (in case if i am right) brings the question which software / library / implementation does the checksums i recently faced that message after upgrade to MariaDB 10 150311 8:38:01 [Note] InnoDB: Using CPU crc32 instructions loo

Re: Bogus day old domains from RRPPROXY.NET

2015-03-11 Thread Axb
On 03/11/2015 10:57 AM, Benny Pedersen wrote: Axb skrev den 2015-03-11 10:41: RPZ zones are domain lists - NOT nameservers lists nameservers is domain aswell imho :=) if anything using rbldnsd :-) here is just see domain not found if rpz listed, and i dont plan to list my dns hoster for

Re: Bogus day old domains from RRPPROXY.NET

2015-03-11 Thread Axb
On 03/11/2015 10:57 AM, Benny Pedersen wrote: Axb skrev den 2015-03-11 10:41: RPZ zones are domain lists - NOT nameservers lists nameservers is domain aswell imho :=) if anything using rbldnsd :-) here is just see domain not found if rpz listed, and i dont plan to list my dns hoster for

Re: Bogus day old domains from RRPPROXY.NET

2015-03-11 Thread Benny Pedersen
Axb skrev den 2015-03-11 10:41: RPZ zones are domain lists - NOT nameservers lists nameservers is domain aswell imho :=) if anything using rbldnsd :-) here is just see domain not found if rpz listed, and i dont plan to list my dns hoster for being free and good no matter how many bad dom

Re: Bogus day old domains from RRPPROXY.NET

2015-03-11 Thread Axb
On 03/11/2015 10:20 AM, Benny Pedersen wrote: Kevin Miller skrev den 2015-03-10 23:01: FWIW, I put on my BOFH hat, and just blocked those name servers at the filewall. They're based in Germany so it's a pretty safe bet that I'm not going to see legitimate mail from any of the legitimate domain

RE: Bogus day old domains from RRPPROXY.NET

2015-03-11 Thread Benny Pedersen
Kevin Miller skrev den 2015-03-10 23:01: FWIW, I put on my BOFH hat, and just blocked those name servers at the filewall. They're based in Germany so it's a pretty safe bet that I'm not going to see legitimate mail from any of the legitimate domains hosted by them. That may not be the case for

Re: Chain content filters in Postfix

2015-03-11 Thread Oli Schacher
On Wed, 11 Mar 2015 08:23:41 + Roger Walters wrote: > Thank you both Axb and Reindl Harald for your answers. I finally tried > Fuglu because I wanted to keep the rest of the scripts independent > instead of integrating them into a milter, and seems that it works > nicely, I didn't know that o

Re: Chain content filters in Postfix

2015-03-11 Thread Roger Walters
Thank you both Axb and Reindl Harald for your answers. I finally tried Fuglu because I wanted to keep the rest of the scripts independent instead of integrating them into a milter, and seems that it works nicely, I didn't know that one! Thanks for this great hint! Regards, Roger 2015-03-10 22:57

Re: Bogus day old domains from RRPPROXY.NET

2015-03-11 Thread Axb
On 03/10/2015 11:01 PM, Kevin Miller wrote: -Original Message- From: Kevin A. McGrail [mailto:kmcgr...@pccc.com] Sent: Tuesday, March 10, 2015 1:31 PM To: Kevin Miller; users@spamassassin.apache.org Subject: Re: Bogus day old domains from RRPPROXY.NET On 2/19/2015 2:50 PM, Kevin Miller w