Re: Temporary 'Replacements' for SaneSecurity

2009-01-14 Thread Paul Griffith
On Wed, 14 Jan 2009 09:23:51 -0500, John Rudd wrote: How's it working for you, so far? On Wed, Jan 14, 2009 at 06:12, Paul Griffith wrote: On Tue, 13 Jan 2009 05:28:42 -0500, si wrote: Guys, I'm sure you're as sad as I am re- temporary suspension of the brilliant serv

Re: Temporary 'Replacements' for SaneSecurity

2009-01-14 Thread Paul Griffith
On Tue, 13 Jan 2009 05:28:42 -0500, si wrote: Guys,   I'm sure you're as sad as I am re- temporary suspension of the brilliant services offered by Steve Basford and is helpers at Sane Security. In a sick kind of way, the 'bad guys' are acknowledging the work these guys have done by DOSing

Sought rules - yerp.org - 403 Forbidden errors

2008-12-01 Thread Paul Griffith
Greetings, Anyone have any issues getting Jim Mason's sought rules updated from yerp.org? I am running SA 3.0.25 and the last successful update was Nov. 26, 2008. It looks like some bits need to be flipped on. Here is my channel.conf file: sought.rules.yerp.org Here is the error from sa-u

Re: whitelisting webmail application

2008-05-05 Thread Paul Griffith
On Sat, 03 May 2008 11:51:32 -0400, Leonardo Rodrigues Magalhães <[EMAIL PROTECTED]> wrote: > Hello Guys, > > im running SA 3.2.4 and, on the same machine, horde/imp as webmail > application. > > Sometimes, mails sent through imp are getting flagged as SPAM > because of RBL checks, fo

Re: SpamAssassin and LaTeX

2007-12-06 Thread Paul Griffith
y send attachments as true attachments. That is really a matter of taste, when it is pure ascii, i prefer it inline myself :) Best regards, Olivier Thanks Paul -- Paul Griffith |Dept. of Computer Science and Engineering - York University CSE Technical Team |4700 Keele Street, Toronto, ON, Canad

Re: SpamAssassin and LaTeX

2007-12-06 Thread Paul Griffith
On Wed, 05 Dec 2007 20:36:22 -0500, John D. Hardin <[EMAIL PROTECTED]> wrote: On Wed, 5 Dec 2007, Paul Griffith wrote: I guess I could write rules that verify a valid .tex and .bib document and then assign a minus score, it would be better if e-mail clients actually send attachments a

SpamAssassin and LaTeX

2007-12-05 Thread Paul Griffith
% The following shows a little of the typesetting power of LaTeX \begin{eqnarray} E = mc^2 \\ m = \frac{m_0}{\sqrt{1-\frac{v^2}{c^2}}} \end{eqnarray} \end{document} For more info on LaTEx see: http://en.wikipedia.org/wiki/LaTeX Thanks Paul -- Paul Griffith |Dep

Re: refefine/extend a existing rule in 20_ratware.cf possible ??

2007-10-16 Thread Paul Griffith
On Tue, 16 Oct 2007 14:57:00 -0400, Joseph Brennan <[EMAIL PROTECTED]> wrote: --On Tuesday, October 16, 2007 12:59 -0400 Paul Griffith <[EMAIL PROTECTED]> wrote: Hi, I want to add a patch to 20_ratware.cf so I can extend FORGED_MUA_OUTLOOK to handle the new Outlook Messa

refefine/extend a existing rule in 20_ratware.cf possible ??

2007-10-16 Thread Paul Griffith
=4162&action=view Thanks Paul -- Paul Griffith |Dept. of Computer Science and Engineering CSE Technical Team |4700 Keele Street, Toronto, ON, Canada, M3J-1P3 [EMAIL PROTECTED] |CSE1003A|Tel: 416-736-2100 x70258|Fax: 416-736-5872

Re: SA user users whitelist @ SMTP time

2007-09-28 Thread Paul Griffith
On Fri, 28 Sep 2007 09:49:33 -0400, Bowie Bailey <[EMAIL PROTECTED]> wrote: Paul Griffith wrote: Greetings SA users, I have a question that many of you have had to deal with. In our setup we use Exim to call SA. Here is the issue, we reject anything over a score 5.0. If a user that is

SA user users whitelist @ SMTP time

2007-09-28 Thread Paul Griffith
Greetings SA users, I have a question that many of you have had to deal with. In our setup we use Exim to call SA. Here is the issue, we reject anything over a score 5.0. If a user that is in my whitelist sends a spammy e-mail with a score over 5.0, the mail is rejected. i.e This is wha

Summary - Handling Spam Surges

2007-09-12 Thread Paul Griffith
Here is summary of all the responses. Thanks to all who resonded, your suggestions have been very helpful. We will - reduce the number of SA max-children - look at ratelimit in exim - only spam scan messages under a certain size Aaron Wolfe We reduce the messages bound fo

Handling Spam Surges

2007-09-10 Thread Paul Griffith
Greetings, How do you handle Spam surges/DoS attacks? We just had a Spam surge/DoS and are looking at ways to better withstand (as best as we can) another surge Here is how we start SA: -c -d -r $PIDFILE -s /var/log/spamd --socketpath=$SOCKET --max-children=150 --min-children=10 Our (

Re: too much spam getting through, scores too low

2007-07-18 Thread Paul Griffith
On Wed, 18 Jul 2007 11:17:16 -0400, SM <[EMAIL PROTECTED]> wrote: At 05:39 18-07-2007, Paul Griffith wrote: See this link: http://www.cse.yorku.ca/~paulg/missed-spam.html Both messages scored 13.9 and hits FH_FROMEML_NOTLD,RDNS_NONE, URIBL_BLACK,URIBL_JP_SURBL,URIBL_OB_SURBL,URIBL_SC

Re: too much spam getting through, scores too low

2007-07-18 Thread Paul Griffith
On Wed, 18 Jul 2007 05:30:38 -0400, SM <[EMAIL PROTECTED]> wrote: At 21:31 17-07-2007, Debbie D wrote: But I am still getting way to many spams.. more than I did before the update -- cialis, viagra, all kinds of meds, all scoring between 0.6 and 3.5 Post a link to some of these emails incl

Re: too much spam getting through, scores too low

2007-07-18 Thread Paul Griffith
On Wed, 18 Jul 2007 00:31:44 -0400, Debbie D <[EMAIL PROTECTED]> wrote: I am so frustrated.. updated cpanel the other day to WHM 11.2.0 cPanel 11.6.0-C15032 FEDORA 4 i686 - WHM X v3.1.0 Exim 4.66 on a Linux box But I am still getting way to many spams.. more than I did before the update --

exim and spamd -vs- commandline spamassassin -t why does the scores varies ?

2007-07-17 Thread Paul Griffith
Greetings, I am trying to trackdown why some spam is scoring the way it is. Take a look at the sample header at the end of the e-mail. Using spamd and exim I will get a score of 2.6, but in if I call spamassassin from the command line I get a score of 8.1. via exim/spamd X-Spam-Checker-