bayes user DB

email address is in etc... My current DB machines are a HA pairing of dual AMD 1.8 Ghz w/ 2G RAM in an active passive configuration using SAN storage. Thanks to the list as always. Ronan -- Regards Ronan McGlue === Analyst / Programmer Queens University Belfast

per user filtering

which takes precedence I guess is what im after. I reject all incoming mail at the MTA at SMTP time if the spamscoreint variable is above 100 ie 10 points. How much use are the options provided(the panels) other than white/black listing? -- Regards Ronan McGlue === Analyst

spam acl condition: cannot parse spamd output

since upgrading to 3.2 i have been getting regular messages in the exim's panic log. 2007-05-17 02:16:03 1HoVX0-0002df-PP spam acl condition: cannot parse spamd output anyone else seen this or know any reasons why it happens? R Regards Ronan McGlue === An

per user scanning

a certain minimum threshold to begin working, however surely the AWL should start working immediately? thanks R -- Regards Ronan McGlue === Analyst / Programmer Queens University Belfast

Re: per user scanning

Tony Finch wrote: On Tue, 27 Feb 2007, #Ronan McGlue wrote: I am looking to move to peruser scanning, so I would need to change only one line of the above to spam= $local_part:true which will use the local part of the email address as the username. This won't work because

per user scanning

her user_awl_sql_username bayes_sql_username etc R -- Regards Ronan McGlue === Analyst / Programmer Queens University Belfast

rulesdujour

can someone give me a listing of the latest timestamps regarding their rulesdujour updates? I've just noticed that none of the files have been updated on my machine since mid augaust... surely this isn't normal... thanks Ronan -- Ronan McGlue Analyst / Programmer CMC Systems Gro

graphs

recurring topic but anything that makes my life easier is good imo. Ronan -- Ronan McGlue Analyst / Programmer CMC Systems Group Queens University Belfast

sa-learn

score assigned. Even though there are now SA headers in the mail does this affect the baysian learner, or is it smart enough to remove / ignore any SA tags it finds!? Thanks Ronan -- Ronan McGlue Analyst / Programmer CMC Systems Group Queens University Belfast

Re: Tricky University spam

t from the headers. Why not just post the whole spam with headers, and obfuscate the email address in it? --Chris -- Ronan McGlue Analyst / Programmer CMC Systems Group Queens University Belfast

Re: RBL Lists in SA 3.1

(as always: MTA rejects are quicker than SA). Just a hint, maybe that causes your mem usage. I have ~44MB per spamd child, also not quite small though. But no problems here *g* mfg zmi -- Ronan McGlue Analyst / Programmer CMC Systems Group Queens University Belfast

Re: clear folder after sa-learn scan

On Wed, 15 Feb 2006 12:36:29 +0100 Paul Smit <[EMAIL PROTECTED]> wrote: > Hey All, > > Can anyone tell me if there is a possibility to empty my > "sa-lean" folder after I scanned it? I want to delete all > mail in that mbox folder, because it's not being used > anymore. you can use the mail-util

spamd children && logging

I have started getting a problem with spamd. Not enough children are being spawned to handle the load from my mail servers. I get quite regularly now Spamd ACL errors from my exim boxes while the spamd server is barely swetting. I think i've narrowed it down to the fact that it now only spawns

dcc / razor

what is the official stance on using razor/dcc for not personal use. I've looked at the 3.1 docs and its off by default. I cant seem to find any liscencing info on either site. Anyone got any URLS/ info regarding this issue. Im using it at a uni here sitewide so Id like to forgo a lawsuit...

merges bayes DB???

Is there a way to merger 2 (or more)bayes DBs? Im still reading up on the MySQL option to my 2 servers but a stop-gap solution would be to merge the two DBs nightly and let them run as normal during the day... Ronan ps ive man'd sa-learn and saw nothing relevant so i presume I cant

Re: Limit the size of spamd

ore: $spam_bar ($spam_score)\n\ X-Spam-Score-Int: $spam_score_int condition = ${if <{$message_size}{80k}{1}{0}} spam = nobody:true our process stay between 30-40Meg and means we can run 10 children at a time. -- Regards

shared SQL DB

??? thanks -- Regards Ronan McGlue Info. Services QUB

Re: Sa stats using rrdtool?

MIKE YRABEDRA wrote: on 6/13/05 8:01 AM, Ronan McGlue at [EMAIL PROTECTED] wrote: MIKE YRABEDRA wrote: on 6/13/05 6:07 AM, Bart Verwilst at [EMAIL PROTECTED] wrote: Hi Try MailGraph :) That's what I'm using for my servers.. Google for mailgraph, first hit :) See ya Looks

Re: Sa stats using rrdtool?

lopers opinion, mrtg is dead, rrd will take it's place. -- Regards Ronan McGlue Info. Services QUB

Re: DNS lookups

Matt Kettler wrote: At 08:32 AM 6/9/2005, Ronan McGlue wrote: anyclues as to why SA isnt 'apparently' using the hosts file?? This is because SA doesn't use the system resolver, it uses Net::DNS's resolver. This gives SA a lot of control over queries, but doesn't

Re: DNS lookups

Victor Brilon wrote: --- Ronan McGlue <[EMAIL PROTECTED]> wrote: yes, but BIND isnt running on the machine in question... (atm) The nets guys here are seeing a lot of lookups from this SPAMD machine for our mailhubs to the Local dns... which is an extra couple of miliseconds i want to

Re: DNS lookups

Jeff Chan wrote: On Thursday, June 9, 2005, 5:32:23 AM, Ronan McGlue wrote: Niek wrote: On 6/9/2005 2:19 PM +0200, Ronan McGlue wrote: sry should have added that the DNS order in /etc/resolv.conf is also correct... What order ? The nameservers are used randomly... again, my semantics

Re: DNS lookups

Niek wrote: On 6/9/2005 2:19 PM +0200, Ronan McGlue wrote: sry should have added that the DNS order in /etc/resolv.conf is also correct... What order ? The nameservers are used randomly... again, my semantics need work... :S the DNS *is in* order in /etc/resolv.conf... anyclues as to

Re: DNS lookups

Niek wrote: On 6/9/2005 2:15 PM +0200, Ronan McGlue wrote: hi SA is continually looking up my 3 mailhubs to our local DNS even though i have them hardcoded into /etc/hosts and /etc/nsswitch.conf is configured properly etc etc... How can I make SA use the hosts file if such an option

DNS lookups

-- Regards Ronan McGlue Info. Services QUB

Re: drop in graph??

pos' with linespoints And then it's just 'gnuplot gnuplotrc' and presto, pretty pictures. Regards, Paul Boven. i like it... thanks i was gonna go rrdtool but i like the looks of this. but why isnt your "complicated script-magic I don't dare share in here" GNU public licesnce ;) ronan -- Regards Ronan McGlue Info. Services QUB

drop in graph??

is there an 'easy' way to get a grpahical representation of how well SA is doing?? preferably something flashy with lots of primary colours for the managment elite?? if not i suppose i gotta start hackin rrdtool scripts or similar!!? mnay thanks Ronan -- Regards Ronan M

whitelist

??? -- Regards Ronan McGlue Info. Services QUB

Re: dissapointed >> dummy MX record

of all the dummy conns going to the same daemon... it was a small denial of service for our legitimate mail so all we had to do was set up a second daemon which only matched the dummy IP... hope it helps -- ==== Regards Ronan McGlue Info. Services QUB

Re: dissapointed

mmy IP which merrily accepts all connections but simply defers them(NOT REJECTS) -- ==== Regards Ronan McGlue Info. Services QUB

dissapointed

ffort!!! thoughts? -- Regards Ronan McGlue Info. Services QUB

bayes learning

ronan -- Regards Ronan McGlue Info. Services QUB

sa-learn training

cked, now unlocking lock debug: unlock: 14319 unlocked /home/spam/.spamassassin/bayes.mutex Learned from 0 message(s) (0 message(s) examined). interrupted at /usr/bin/sa-learn line 412. [EMAIL PROTECTED]:/home/ronan# what am i doing not right...? -- Regards Ronan McGlue Info. Services QUB

Re: Bayes problems and German Spam

reports spam you can guaratee that all the other rules are surplus to requiremtns... IMHO ronan -- ==== Regards Ronan McGlue Info. Services QUB

when bayes gets poisened

TIPLEMessage hits more than one network digest check End of SpamAssassin results -- ==== Regards Ronan McGlue Info. Services QUB

routing spamd clusters net tests

/dcc/SURBL through the main node which, currently, is the only node with internet access??? Is there a better way of running this config?? ronan -- Regards Ronan McGlue Info. Services QUB

RCVD_IN_SORBS_WEB

why is the weighting for RCVD_IN_SORBS_WEB scores 0 0 0 then 0.007... I know there is probably a good reason for this low a score but could someone explain it to me please as I have one very irate user who likes nothing better than to pick holes in spamassassin, which in turn is a headache for m

some messages just arent scanned

dont have enough conns-per-child etc... or what? any help please? ronan -- Regards Ronan McGlue == Analyst/Programmer Information Services Queens University Belfast BT7 1NN

Re: sa-stats error

here use sa-stats.pl? Has the above rror been seen by anyone else? Yes, me: # /root/.cpan/build/Mail-SpamAssassin-3.0.1/tools/sa-stats.pl -l /var/log/mail.log Error in option spec: "top|T:25" Error in option spec: "SCALAR(0x85202d4)" This also happens with no arguments give