Re: Disable Botnet? (enquiry about fixing IPv6 problem)

2011-07-22 Thread Kārlis Repsons
On Thursday 14 July 2011 06:13:39 Yves Goergen wrote: > On 12.07.2011 10:39 CE(S)T, Kārlis Repsons wrote: > > There is the other thread about some patching for IPv6, but could someone > > post the current status with this problem or some idea what should be > > done for now

Disable Botnet? (enquiry about fixing IPv6 problem)

2011-07-12 Thread Kārlis Repsons
I wonder how good or bad is my idea to temporarily not load Botnet module? That results in some repeated warnings, but if I load it, there are even more warnings like these: spamd[2882]: Argument "2607:fe70:0:4::a" isn't numeric in multiplication (*) at /usr/lib/perl5/vendor_perl/5.12.3/Mail/Sp

Re: Securing spamd

2011-07-08 Thread Kārlis Repsons
On Friday 08 July 2011 17:34:13 Benny Pedersen wrote: > > On Friday 08 July 2011 17:00:50 Andrzej Adam Filip wrote: > >> Do you need spamd changing OS user ids? (e.g. to access > >> ~/.spamassassin/ ) > > > > No, I don't! > > one could ask how to configure it A small server. And configuration is

Re: Securing spamd

2011-07-08 Thread Kārlis Repsons
On Friday 08 July 2011 16:54:22 Benny Pedersen wrote: > On Fri, 8 Jul 2011 16:41:36 +0000, Kārlis Repsons wrote: > > All, > > I'd like you to review approximately how I'm running spamd. My > > concern > > is security. You can see that the child processes are ru

Securing spamd

2011-07-08 Thread Kārlis Repsons
All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still run by root: ps -C spamd -o user,cmd USER CMD root /usr/sbin/spamd -d -r /var/run/spamd.pid -m 2 -u spamd --nou

Re: Reduce filtering time by white-listing [Mail::SpamAssassin::Plugin::Shortcircuit]

2011-07-08 Thread Kārlis Repsons
On Thursday 07 July 2011 16:46:42 Andrzej Adam Filip wrote: > Have you considered using Shortcircuit plugin? > Mail::SpamAssassin::Plugin::Shortcircuit Partially I use it. I gave up for anything more than using it with whitelist_from.

Re: Reduce filtering time by white-listing

2011-07-07 Thread Kārlis Repsons
On Thursday 07 July 2011 14:16:00 Axb wrote: > On 2011-07-07 16:10, Kārlis Repsons wrote: > >If whitelist_auth, about 16 secs > > (hashes are still computed and compared!). > > I assume you're not using local resolver or you have a thin/throttled > pipe (many D

Re: Reduce filtering time by white-listing

2011-07-07 Thread Kārlis Repsons
It seems that while processing an email from address, which is marked as whitelist_auth, still hashes are computed. I've set "shortcircuit USER_IN_WHITELIST on" and it works well (no hashes computed) if address is marked as whitelist_from... Any idea on how to faster process mail form adresses

Re: Reduce filtering time by white-listing

2011-07-07 Thread Kārlis Repsons
On Thursday 07 July 2011 09:52:36 Martin Gregorie wrote: > On Thu, 2011-07-07 at 08:27 +0000, Kārlis Repsons wrote: > > as per my current SA setup it takes quite a while until all tests are > > over and the mail is delivered. > > How are you running SA? If you're explic

Reduce filtering time by white-listing

2011-07-07 Thread Kārlis Repsons
Hi all, as per my current SA setup it takes quite a while until all tests are over and the mail is delivered. Thus it seemed necessary to do some white-listing to save time. The problem is: even though an address is white-listed with "whitelist_from", still DNS lookups are done, hashes are compute

Re: Increase spamassassin -r verbosity?

2010-02-17 Thread Kārlis Repsons
On Wednesday 17 February 2010 12:09:50 Frank Heydlauf wrote: > Hi K??rlis, > > On Wed, Feb 17, 2010 at 08:50:24AM +, K??rlis Repsons wrote: > > On Tuesday 16 February 2010 18:18:01 Mark Martinec wrote: > > ... > > > > spamassassin --debug info -r > ... > > > Does the thing, but with one

Re: Increase spamassassin -r verbosity?

2010-02-17 Thread Kārlis Repsons
On Tuesday 16 February 2010 18:18:01 Mark Martinec wrote: > > > I'd appreciate a pointer how should spamassassin -r be made more > > > verbose, so that it'd report also messages with priority "info", but > > > not "dbg"... > > > > spamassassin --debug area=noall -r > Sorry, wrong syntax, should b

Increase spamassassin -r verbosity?

2010-02-16 Thread Kārlis Repsons
People, I'd appreciate a pointer how should spamassassin -r be made more verbose, so that it'd report also messages with priority "info", but not "dbg"... signature.asc Description: This is a digitally signed message part.

Set the obligatory report methods?

2010-02-04 Thread Kārlis Repsons
Hi again, [hopefully that is not- or documented somewhere deep] presumably, when all spam reporting methods have failed, I get this warning: "warn: spamassassin: warning, unable to report message". My question: is there some way to set the obligatory report methods, missing any of which would re

update the wiki?

2010-02-04 Thread Kārlis Repsons
People, in trying to set up Razor2 sitewide, I found some things, which were not so good about the wikipage [1]. As per me, it would be this way (and it works): I What was wrong 1. no need calling razor-client 2. no need to touch /etc/spamassassin, just /etc/spamassassin/.razor 3. cd .razor &&

Re: Avoid ham to be taken for spam

2010-02-02 Thread Kārlis Repsons
On Tuesday 02 February 2010 15:08:01 Matus UHLAR - fantomas wrote: > On 02.02.10 11:47, Kārlis Repsons wrote: > > in fact, all spam filters are normally designed with an intent to get rid > > of spam, not ham, but anyway, I'm confused with my possible chances to > > mis

Avoid ham to be taken for spam

2010-02-02 Thread Kārlis Repsons
Hi, in fact, all spam filters are normally designed with an intent to get rid of spam, not ham, but anyway, I'm confused with my possible chances to miss some mails for no really valid reason. I've seen that long list in [1], but that doesn't say much of what should be avoided. For example, I re

Re: How should this tricky spam be filtered?

2010-01-30 Thread Kārlis Repsons
On Saturday 30 January 2010 16:55:54 Dale Carstensen wrote: > > The Postfix program > > > >: host mx1.us.apache.org[140.211.11.136] > > said: 552 spam score (10.4) exceeded threshold (in reply to end of DATA > > command) > > Karlis, > > That's what the list said about my reply t

Re: How should this tricky spam be filtered?

2010-01-30 Thread Kārlis Repsons
On Saturday 30 January 2010 15:48:36 Jeff Mincy wrote: > BAYES_99,DCC_CHECK,RCVD_IN_BL_SPAMCOP_NET,RCVD_IN_FIVETEN_SPAM,RCVD_IN_NIX > SPAM,RCVD_IN_UCEPROTECT1,RCVD_IN_UCEPROTECT2,RCVD_IN_UCEPROTECT3,BOTNET,BOT > NET_BADDNS > > Botnet/FIVETEN/NIXSPAM/UCEPROTECT are additional rules added. > > -je

Re: How should this tricky spam be filtered?

2010-01-30 Thread Kārlis Repsons
On Saturday 30 January 2010 13:54:14 Jeff Mincy wrote: > Retrain the message correctly in Bayes. Bayes will catch on to this > after a few times. The subject alone should be a strong enough clue > for bayes (I get BAYES_80 on this partial sample), so it looks like > you are doing only autolearn a

Re: How should this tricky spam be filtered?

2010-01-30 Thread Kārlis Repsons
On Saturday 30 January 2010 13:51:18 Mike Cardwell wrote: > By forwarding the email the way you have, your email client has stripped > out most of the useful header information. Try pasting the message > including the full set of headers into http://spamalyser.com/ or > http://pastebin.com/ or simi

How should this tricky spam be filtered?

2010-01-30 Thread Kārlis Repsons
People, perhaps its simple to be done, but I personally would like to know the ways to get rid of something like this: -- Forwarded Message -- Subject: marty rizin g suppe r socio logy mason ing Date: Friday 29 January 2010 From: "Cheap Tamiflu on www.ra97.com" To: reps...@

Size of Bayes data and possible mysql storage?

2010-01-27 Thread Kārlis Repsons
Hello spam assassins, The question, which bothers me is about Bayes data size. How much is a typical size of those data and what mechanisms are there to limit growing of it? Can mysql be used for storage and would you recommend it (well, maybe it can then be easier to share Spamassassin knowledg