RE: Better phish detection

2012-03-16 Thread Aaron Bennett
retty good. Regards, David. --- We use it here; I've got a little python script that parses out recent entries from that project and builds a simple postfix static map to block mail attempts to them. I'm happy to share if anyone's interested. - Aaron Bennett Manage

RE: preventing authenticated smtp users from triggering PBL

2010-12-17 Thread Aaron Bennett
> -Original Message- > From: Ted Mittelstaedt [mailto:t...@ipinc.net] > Sent: Friday, December 17, 2010 12:20 PM > To: users@spamassassin.apache.org > Subject: Re: preventing authenticated smtp users from triggering PBL > > why are you using authenticated SMTP from trusted networks? > > T

RE: preventing authenticated smtp users from triggering PBL

2010-12-17 Thread Aaron Bennett
> -Original Message- > > Based on the headers you included, there's nothing indicating the sender > was authenticated. Are you using the following in postfix? > > smtpd_sasl_authenticated_header yes No, I'm not -- that's a good idea. If I turn that on, can I write a rule bas

preventing authenticated smtp users from triggering PBL

2010-12-17 Thread Aaron Bennett
thenticated SMTP/TLS through the 'cmail' host, how can I prevent it from hitting the PBL? Thanks, Aaron --- Aaron Bennett Manager of Systems Administration Clark University ITS

Re: sane values for size of bayes_token database in MySQL

2010-06-29 Thread Aaron Bennett
On 06/29/2010 11:00 AM, Kris Deugau wrote: Aaron Bennett wrote: 1) Are you supposed to have a global Bayes DB? 2) How many users do you have? 3) If the answer to 1) is "yes", did you set bayes_sql_override_username? If the answer to 1) is no, you're probably not running B

sane values for size of bayes_token database in MySQL

2010-06-28 Thread Aaron Bennett
I'm sort of pulling at straws here, but I'm reading the manpage for sa-learn and it says that sa-learn will try to expire bayes tokens according to this: - the number of tokens in the DB is> 100,000 - the number of tokens in the DB is> bayes_expiry_max_db_size - there is

boosting PBL score suggestions

2009-07-22 Thread Aaron Bennett
suggestion about raising the RCVD_IN_PBL score? I was thinking of raising it as high as 2 or 3. Another thing I'm considering is a META rule that scores for PBL + BAYES_60, etc. I am generally reluctant to mess much with the default scoring -- but I'm always looking for a better se

sa-update, dostech, / RHEL5 question

2008-06-06 Thread Aaron Bennett
k. I'm getting this error when I run with debugging: [20790] dbg: dns: query failed: 4.2.3.72_sare_bml_post25x.cf.sare.sa-update.dostech.net => NOERROR Thanks for any suggestions - Aaron Bennett Here's the complete output of the sa-update: [EMAIL PR

Re: VBounce ruleset

2008-05-14 Thread Aaron Bennett
x27;m glad to have a confirmation that 0.1 is obviously not enough but I'm curious how others are scoring these rules; given a general spam target of 5. I'm thinking of scoring in the range of 1.5 - 2... Best, Aaron Bennett

VBounce ruleset

2008-05-14 Thread Aaron Bennett
ault scores, or have you tweaked them at all? Best, Aaron Bennett

Re: AWL Database Cleanup

2008-04-28 Thread Aaron Bennett
listmail wrote: I noticed that the AWL database was getting rather large, so I used the check_whitelist script to remove the stale entries. While this seems to have removed a lot of entries from the database, it did not reduce the database size. If you are using MySQL with the Innodb backend