RE: Linting of local.cf

2022-04-15 Thread Steven Manross
mistake and have) but half of me thinks both of these were on purpose for the purpose of the lint fail thread... So, way to go Benny! 😊 Enjoy your day. I love SA!!! Thank You everyone for your posts, help, and contributions to the community! Long time lurker... sometimes poster, Steven

RE: Apache SpamAssassin and Spammers 1st Amendment Rights

2020-11-21 Thread Steven Manross
Long time lurker
 sometimes poster: The marketplace of ideas is a century old concept that goes back to the days of landmark U.S.S.C. First Amendment cases, and it is the “marketplace”’s duty to weed out bad ideas (such like SpamAssassin is doing). But again, SpamAssassin isn’t infringing on a

Re: pyzor config and sig15

2017-09-08 Thread Steven Conrad Bayer
Hi everybody, is the Pyzor network down again? We receiving the following error when we execute 'pyzor ping' public.pyzor.org:24441 (504, 'Reading response timed-out.') Is there anybody which can confirm this too?

RE: sa-learn and exchange integration

2013-02-13 Thread Steven Manross
client). Let me know if you are interested in hearing more offline. P.S. I am mostly a lurker to this forum... until someone brings up the word Exchange. :) Steven -Original Message- From: Axb [mailto:axb.li...@gmail.com] Sent: Wednesday, February 13, 2013 1:17 AM To: users

How can I get SA to tell me what CLAMAV found?

2012-10-05 Thread Steven W. Orr
I have SA running and configured to call clamav.cf My mail server checks the incoming messages by running SA as a milter, so the spam is rejected before reception completes. My mail logfile for a specific message might look like this: Oct 5 11:30:01 saturn sendmail[20656]: q95FTj2G020656: Milt

Problems with AWL not working.

2012-09-16 Thread Steven W. Orr
Back at Xmas, I went from Fedora 10 to Fedora 15. Since then I never noticed that my MySQL AWL table has no entries. Here's what I have: * spamassassin-3.3.2-7.fc15.x86_64 * In mysql CREATE TABLE `awl` ( `username` varchar(100) NOT NULL DEFAULT '', `email` varchar(200) NOT NULL DEFAULT '',

Re: Bayes is causing MySQL performance issues

2010-04-04 Thread Steven W. Orr
On 03/30/10 09:23, quoth Martin Svensson: > Again, thanks for your contributions all. > > Martin: We are running SA on separate servers, our MySQL is running on a > dedicated server. The servers running Amavis/SA are running smoothly, no > swap and no insanse I/O operations. > > Jari: The engine

Re: Do I need to do anything to maintain MySQL?

2009-10-04 Thread Steven W. Orr
On 10/03/09 20:16, quoth Benny Pedersen: > On lĂžr 03 okt 2009 23:41:41 CEST, "Steven W. Orr" wrote >> Thank you. I am still confused in one area: > > no problem > >> These scripts do not touch the bayes_token table, and it is this table >> that >>

Re: Do I need to do anything to maintain MySQL?

2009-10-03 Thread Steven W. Orr
On 10/02/09 04:22, quoth Benny Pedersen: > On fre 02 okt 2009 04:47:56 CEST, "Steven W. Orr" wrote >> I have all my SA tables up and running using InnoDB and using the >> above table definitions. I just have one question: >> >> Will the cronjob that was d

Re: RCVD_VIA_APNIC: CIDR to regex generator?

2009-10-02 Thread Steven W. Orr
On 10/02/09 02:43, quoth Warren Togami: > # 2005/07/29, http://www.apnic.net/db/ranges.html header RCVD_VIA_APNIC > Received =~ > /[^0-9.](?:5[89]|6[01]|12[456]|20[23]|21[0189]|22[012])(?:\.[012]?[0-9]{1,2}){3}(?:\]|\)| > )/ describe RCVD_VIA_APNIC Received through a relay in Asia/Pacific > Net

Re: southwest airlines sends out their own phishing email

2009-10-02 Thread Steven W. Orr
On 10/02/09 13:52, quoth Michael Scheidell: > not to be outdone by hackers and thieves, phishing for PPI, southwest > airlines is sending out their own DKIM signed, SPF PASSED, from their own > servers, their very own phishing email. (didn't one of the major banks do > something like this 3 years

Re: Do I need to do anything to maintain MySQL?

2009-10-01 Thread Steven W. Orr
On 09/24/09 09:21, quoth Benny Pedersen: > On tor 24 sep 2009 04:57:57 CEST, "Steven W. Orr" wrote >> Since I haven't *ever* touched this table for cleanup, the above >> described cron job will not delete any rows for that period of time. > > you will have l

Two more SA/MySQL questions.

2009-09-24 Thread Steven W. Orr
I got the timestanp field added to the bayee_seen table. I don't know why but ALTER TABLE bayes_seen ADD lastupdate timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP ON UPDATE CURRENT_TIMESTAMP; did not work as it set all of the lastupdate fields to '-00-00 00:00:00' which apparently is *not*

Re: Do I need to do anything to maintain MySQL?

2009-09-23 Thread Steven W. Orr
On 09/23/09 07:14, quoth Jari Fredriksson: >> On 23.09.09 00:04, Steven W. Orr wrote: >>> Every so often, I see some large MySQL accesses taking place from SA. >>> Is there any regular maintenance needed or should I just leave it >>> alone? >> It depends

Do I need to do anything to maintain MySQL?

2009-09-22 Thread Steven W. Orr
Every so often, I see some large MySQL accesses taking place from SA. Is there any regular maintenance needed or should I just leave it alone? -- Time flies like the wind. Fruit flies like a banana. Stranger things have .0. happened but none stranger than this. Does your driver's license say Or

Re: Problem with "new_from_string" via package "Mail::SPF::Mech::All"

2009-09-06 Thread Steven W. Orr
On 09/06/09 08:41, quoth Benny Pedersen: > On Sun 06 Sep 2009 04:38:12 AM CEST, "Steven W. Orr" wrote > >> Should I worry? Is there anything I should do? > > http://search.cpan.org/dist/Mail-SPF/ > > 2.006 have being stable nearly a year now, if after upgrad

Problem with "new_from_string" via package "Mail::SPF::Mech::All"

2009-09-05 Thread Steven W. Orr
An error happened on Aug 10: Aug 10 12:38:52 saturn spamd[771]: spf: lookup failed: Can't lo cate object method "new_from_string" via package "Mail::SPF::Mech::IP4" at /usr/lib/perl5/vendor_perl/5.10.0/Mail/SPF/Record.pm line 22. After that nothing and now on Sep 5, I have 48 new occurrences. ma

Re: Catch-22 unsubscribing from this list.

2009-07-26 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/26/09 20:01, quoth RW: > On Sat, 25 Jul 2009 18:07:12 -0400 > "Michael W. Cocke" wrote: > >> There doesn't seem to be a web interface to subscribe/unscribe from >> this list. The email address >> "users-unsubscr...@spamassassin.apache.org" co

Re: How to auto-report to SpamCop?

2009-07-18 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/18/09 12:00, quoth Michael Scheidell: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> SA + spamass-milter + sendmail >> >> I have spamass-milter set to reject during reception if the score is too >> high. >> What I'd like to have happe

How to auto-report to SpamCop?

2009-07-18 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 SA + spamass-milter + sendmail I have spamass-milter set to reject during reception if the score is too high. What I'd like to have happen is for the rejected mail to be automatically reported to spamcop. I thought I knew what I was doing by setting

Re: Argument "2.long" isn't numeric in PerMsgStatus.pm

2009-07-07 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/07/09 03:05, quoth Mark Martinec: > Steven, > >> Jul 6 22:38:08 saturn spamd[32217]: Argument "2.long" isn't \ >> numeric in numeric lt (<) at \ >> /usr/lib/perl5/vendor_perl/5.10.0/Mail

Argument "2.long" isn't numeric in PerMsgStatus.pm

2009-07-06 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Jul 6 22:38:08 saturn spamd[32217]: Argument "2.long" isn't \ numeric in numeric lt (<) at \ /usr/lib/perl5/vendor_perl/5.10.0/Mail/SpamAssassin/PerMsgStatus.pm line 1004. Should I be concerned? 595 > spamassassin -V SpamAssassin version 3.2

Re: Managing SA/sa-learn with clamav

2009-07-05 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 07/04/09 13:56, quoth Steven W. Orr: > I think I have a problem. Maybe not, but I'd like to hear what other people > think. > > I have a small home server running sendmail, spamassassin, spamass-milter and > clamav-milter. The

Managing SA/sa-learn with clamav

2009-07-04 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I think I have a problem. Maybe not, but I'd like to hear what other people think. I have a small home server running sendmail, spamassassin, spamass-milter and clamav-milter. The clamav helped a lot but there was a bunch of stuff getting through des

Re: I have an SA problem with Thunderbird.

2009-06-24 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 06/24/09 16:15, quoth René Berber: > Steven W. Orr wrote: > > [snip] >> What I really want to do is something that TB doesn't seem to support. i.e., >> I >> and lots of other people want the ability to pipe a

I have an SA problem with Thunderbird.

2009-06-24 Thread Steven W. Orr
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I tried asking this question on the TB forum, but they're tied up with their own problems right now. I'd like to try here because I frequently get my problems solved. Here is what I posted on the TB help forum. Spamasassin and retraining a false nega

Re: I never got WrongMx working and have no idea why.

2009-06-04 Thread Steven W. Orr
On Thursday, Jun 4th 2009 at 19:47 -, quoth RW: On Thu, 4 Jun 2009 18:04:35 -0400 (EDT) "Steven W. Orr" wrote: My dns MX record looks like this: ;; ANSWER SECTION: syslang.net.9738IN MX 100 mx2.zoneedit.com. syslang.net.9738IN

I never got WrongMx working and have no idea why.

2009-06-04 Thread Steven W. Orr
In my /etc/mail/spamassassin, I have two files, wrongmx.cf and wrongmx.pm The cf file looks like this: loadplugin WrongMX wrongmx.pm header WRONGMX eval:wrongmx() describeWRONGMX Sent to lower pref MX when higher pref MX was up. tflags WRONGMX net score

Re: help lowering score on a specific email list situation

2009-03-28 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 03/28/2009 04:32 PM, RobertH wrote: > hello > > i have problems with the cabletv.org email list. > > it is hosted on a charter static and has wierd reverse dns etc etc blah. > > so, almost always scores as spam > > here is what it is trippin

unable to find user?

2009-02-10 Thread Steven Stern
We're running Spamassasin on three machines, two Fedora 8 and one the latest CENTOS. We're trying to move all of the SA installations to CENTOS. These are MX servers that front an Exchange server. The systems are all set up using the same .cf and init.d files, but we're seeing a difference. We ru

Re: sa-learn from internal mail server ?

2008-11-26 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/26/2008 04:14 PM, Sam Ami wrote: > hi all > > our current setup. > primary mx for all out email domains installation: qmail,spamassasin,clamav > all email is inline scanned and then relayed to the internal server > for delivery to users mailbox

Re: sa-learn with IMAP

2008-09-01 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 09/01/2008 01:29 PM, Raymond Jette wrote: > Good afternoon, > > I am trying to use sa-learn with a Microsoft Exchange server. The users > move spam / ham message from there Inbox to a Public folder. The public > folder is accessable via IMAP. > >

What is current version of Botnet plugin?

2008-08-04 Thread Steven Stern
I've found Botnet 0.6 and references to Botnet 0.8(ebuild). What's the preferred version for this plugin?

Re: WrongMX from amavisd-new?

2008-07-28 Thread Steven W. Orr
On Monday, Jul 28th 2008 at 12:03 -, quoth Mark Martinec: =>Dan, => =>> I installed WrongMX.pm today, on my secondary MX, but it does not appear =>> to be firing. A spamassassin -D --lint does show the module to be =>> loaded, and the module shows up in my amavisd-new logs: =>> =>> Jul 23 13:

Problem with WrongMX

2008-07-16 Thread Steven W. Orr
In my /etc/mail/spamassassin, I have the latest copy of wrongmx.pm and wrongmx.cf [EMAIL PROTECTED] spamassassin]# cat wrongmx.cf loadplugin WrongMX wrongmx.pm header WRONGMX eval:wrongmx() describeWRONGMX Sent to lower pref MX when higher pref MX was up. tflags W

Re: Problem with TextCat.pm

2008-07-15 Thread Steven W. Orr
On Tuesday, Jul 15th 2008 at 11:14 -, quoth Matus UHLAR - fantomas: =>On 15.07.08 11:05, Steven W. Orr wrote: =>> I took a look at TextCat and decided to try and give it a whirl. =>> =>> [EMAIL PROTECTED] spamassassin]# spamassassin --lint =>> [13019] warn:

Problem with TextCat.pm

2008-07-15 Thread Steven W. Orr
I took a look at TextCat and decided to try and give it a whirl. [EMAIL PROTECTED] spamassassin]# spamassassin --lint [13019] warn: String found where operator expected at (eval 612) line 1, near ""loadplugin" "Mail::SpamAssassin::Plugin::TextCat"" [13019] warn: (Missing operator before "Mail::

Re: Partial solution: Question about RelayCountry

2008-07-11 Thread Steven W. Orr
=>doesn't use it internally. => =>Hmm, any chance you neglected to restart spamd after editing the configs? => =>Do you get the same lack of modifications piping messages through spamc on the =>command line? => On Thursday, Jul 10th 2008 at 23:48 -, quoth David B Funk:

Partial solution: Question about RelayCountry

2008-07-10 Thread Steven W. Orr
7th 2008 at 05:41 -, quoth Justin Mason: => =>Matus UHLAR - fantomas writes: =>> On 06.07.08 23:09, Steven W. Orr wrote: =>> > Should I expect to see X-Relay-Countries as an added header in my =>> > unrejected mail or is that only added to rejected mail? (Right no

Re: Question about RelayCountry

2008-07-08 Thread Steven W. Orr
On Tuesday, Jul 8th 2008 at 10:18 -, quoth McDonald, Dan: =>On Tue, 2008-07-08 at 10:00 -0400, Steven W. Orr wrote: =>> On Monday, Jul 7th 2008 at 05:41 -, quoth Justin Mason: =>> =>> => =>> =>Matus UHLAR - fantomas writes: =>> =>> On 06.07.08

Re: Question about RelayCountry

2008-07-08 Thread Steven W. Orr
On Monday, Jul 7th 2008 at 05:41 -, quoth Justin Mason: => =>Matus UHLAR - fantomas writes: =>> On 06.07.08 23:09, Steven W. Orr wrote: =>> > Should I expect to see X-Relay-Countries as an added header in my =>> > unrejected mail or is that only added to

Question about RelayCountry

2008-07-06 Thread Steven W. Orr
I uncommented loadplugin Mail::SpamAssassin::Plugin::RelayCountry in init.pre and I created a relay_country.cf in /etc/mail/spamassassin The setup I use is sendmail/spamassmilter/spamsassin(spamd) to reject mail during reception. Should I expect to see X-Relay-Countries as an added header i

Lots of spam with the following snip

2008-06-30 Thread Steven W. Orr
God dag, *** Warning! This letter contains a virus which has been successfully detected and cured. *** The part that's noteworthy is this: *** Warning! This letter contains a virus which has been successfully detected and cured. *** Does someone have rule for this ready made? Thanks --

Re: MySQL Unreliable

2008-05-16 Thread Steven Stern
Marc Perkel wrote: Need a little help for MySQL users. I'm running several servers that are using a common MySQL server for bayes for all the SA servers. What I'm seeing is that MySQL is just plain unreliable. The database is often corrupted and it does so in a manner that basically causes SA

Re: Integrating Spam assasin with exchange server.

2008-05-15 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 05/15/2008 07:33 AM, ejml wrote: | Hello Steven, | | I'm very interesting about how I can forward the message with the header | rewritten to final user because I get only a warning spam arrival message. | Is there some parameters tha

Re: AWL Database Cleanup

2008-04-25 Thread Steven Stern
r the moment, I'm trying to find a simple solution, such as locating a tool | that is capable of managing whatever database SA uses by default for the AWL. |>From looking at the scripts, it appears to be something built in to Perl. | | On Fri, 25 Apr 2008 18:49:01 -0500, Steven Stern wrote |

Re: AWL Database Cleanup

2008-04-25 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 04/25/2008 06:32 PM, listmail wrote: | I noticed that the AWL database was getting rather large, so I used the | check_whitelist script to remove the stale entries. While this seems to have | removed a lot of entries from the database, it did not r

Re: Perl problem (Scalar::Util)

2008-02-29 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/29/2008 03:57 PM, Bill Landry wrote: | Steven Stern wrote: |> I'm getting the following error from various perl programs: |> |> $sa-update |> Use of uninitialized value in concatenation (.) or string at |> /usr/lib64/perl

Perl problem (Scalar::Util)

2008-02-29 Thread Steven Stern
I'm getting the following error from various perl programs: $sa-update Use of uninitialized value in concatenation (.) or string at /usr/lib64/perl5/5.8.8/x86_64-linux-thread-multi/Scalar/Util.pm line 30. OK... maybe we need an update: [EMAIL PROTECTED] ~]# perl -MCPAN -e shell cpan> install

Re: -max-child setting not obeyed?

2008-02-28 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/28/2008 05:16 PM, fchan wrote: | Hi, | I have set my --max-child to 30 but I look at my logs and it appears | that this is not obeyed. | | Here is my spamd options: | SPAMDOPTIONS="-d -m 30 -H" | | Here is what I see in the logs: | Feb 28 10:57:

Re: -max-child setting not obeyed?

2008-02-28 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/28/2008 05:16 PM, fchan wrote: | Hi, | I have set my --max-child to 30 but I look at my logs and it appears | that this is not obeyed. | | Here is my spamd options: | SPAMDOPTIONS="-d -m 30 -H" | | Here is what I see in the logs: | Feb 28 10:57:

Problem related to spamcop.

2008-02-26 Thread Steven W. Orr
All of sudden, my ability to report email to spamcop has been impacted. I'm not doing anything differently. I read my mail using alpine and I pipe my spam through the following script: exec tee >(mail [EMAIL PROTECTED]) | sa-learn --spam As of this morning I get the reports sent back to me s

ok_languages doesn't seem to work

2008-02-13 Thread R. Steven Rainwater
100% of the non-English email we're getting is spam, so I added this to my local.cf file: ok_languages en However, I can't see that it's having any effect at all. I'm still getting tons of Russian and asian spams that don't seem to even be triggering any SA rules at all. Am I using the config o

Re: Expiry problem

2008-01-24 Thread Steven Stern
Michael Parker wrote: On Jan 23, 2008, at 9:54 PM, Steven Stern wrote: It's finally started to remove tokens, so I think I'm OK. We use SQL bayes, so it was an easy matter to use ~ delete from bayes_token where atime > UNIX_TIMESTAMP(); to clean up the stuff from the future

Re: Expiry problem

2008-01-23 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/23/2008 07:35 PM, Matt Kettler wrote: | Steven Stern wrote: |> We had a server go crazy last night and reset its date into August of |> 2277. In any case, we've resolved that, but now I can't get bayes to |> expire. |> |

Expiry problem

2008-01-23 Thread Steven Stern
We had a server go crazy last night and reset its date into August of 2277. In any case, we've resolved that, but now I can't get bayes to expire. After the clocks was correctly set, I deleted all tokens that had a lastupdate in the future, and also removed similar bayes_seen rows. I then r

Re: sa-learn error message

2008-01-17 Thread Steven Stern
Theo Van Dinter wrote: On Thu, Jan 17, 2008 at 03:28:06PM -0600, Steven Stern wrote: bayes db version 0 " indicates your bayes file is corrupt. It should be "version 3". Do you have a backup? SQL or .db? It doesn't necessarily mean there's corruption, in fact, sin

Re: sa-learn error message

2008-01-17 Thread Steven Stern
[EMAIL PROTECTED] wrote: Hi again SA experts, Note the error message in the 2nd-last line of the following transcript: animalhead:~/sj $ sa-learn --no-rebuild --spam --mbox savejunk The --no-rebuild option has been deprecated. Please use --no-sync instead. Learned tokens from 3025 message(s) (

Re: Is it? Blocked by SpamAssassin

2008-01-15 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 01/15/2008 07:24 AM, Umar Murtaza wrote: | | | | | | | | Who exactly is blocking this email? | Can i have a settings to keep a copy/archive of this email, if it is | blocked? | | | Logs: | Jan 15 18:18:43 mailserver sendmail[20774]: m0FDIbQ2020774:

Re: Get HAM's from Exchange / Outlook

2007-12-21 Thread Steven Stern
Jason Bertoch wrote: On Thursday, December 20, 2007 5:49 PM Steven Stern wrote: Jason Holbrook wrote: Hello all, anyone have an idea of how to get HAM's from an exchange / Outlook environment back to SA? I've posted a howto at http://sstern.ccim.com/2006/07/1

Re: Get HAM's from Exchange / Outlook

2007-12-20 Thread Steven Stern
Jason Holbrook wrote: Hello all, anyone have an idea of how to get HAM’s from an exchange / Outlook environment back to SA? My incoming is scanned by a SA gateway but outgoing goes straight from exchange to the cloud. Best Regards, Jason Holbrook Chief Technology Integrator / Partner Em

Re: "Virus found in this message", probe?

2007-12-12 Thread Steven Stern
Kenneth Porter wrote: Anyone seen these? text/plain and HTML parts, seem to have same content, saying there's a virus, please delete, and some gibberish. I'm guessing it's some kind of probe. There was a web address hidden by a malformed CSS tag.

Problem with proofpoint.com

2007-12-09 Thread Steven W. Orr
mote-MTA: DNS; [207.111.236.145] Last-Attempt-Date: Sun, 9 Dec 2007 16:00:23 -0800 Will-Retry-Until: Tue, 18 Mar 2008 12:54:29 -0800 Date: Mon, 2 Sep 2002 19:06:30 From: Steven W. Orr <[EMAIL PROTECTED]> To: Justin Mason <[EMAIL PROTECTED]> Cc: spamassassin talk <[EMAIL PROTECTED

Re: spamd throughput issues

2007-12-09 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 12/09/2007 03:27 PM, Mark Rigby-Jones wrote: > On 9 Dec 2007, at 21:03, Paweł Sasin wrote: >> are you using network tests? >> Try to evaluate spamd performance when run with the -L flag. > > We are running network tests. Disabling them helps somew

Re: use iptables to block spammer

2007-11-29 Thread Steven Kurylo
Is there someone with a script to modify qmail-scanner-queue.pl or another script to run /sbin/iptables to block a spam IP address on the first flagged email, then maybe remove blocks from iptables after a day. I use fail2ban to block misbehaving hosts - like those that send too many spam mes

RE: SpamAssassin on Exchange 2007

2007-11-24 Thread Steven Manross
ange since my current employer does not require me to admin Exchange systems. P.S. If my research is flawed, and someone knows a solution, please share it. HTH, Steven From: Donald F. Caruana [mailto:[EMAIL PROTECTED] Sent: Saturday, November 24, 2

Re: Unique Blacklist & Whitelist configuration or an allow only list

2007-11-17 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/17/2007 09:35 AM, robgeo730 wrote: > Hello I'm a new user, I have used the search function but wasn't able to find > a situation like mine. > > I am fighting an uphill battle against a crappy hosting company that I can't > change from. We have

Re: It's a fine line...

2007-11-05 Thread Steven Kurylo
Philip Prindeville wrote: Between the truly clueless administrator, and those that feign ignorance to cover up their implicit approval of spammers... What do you do in the case where someone is filtering deliveries to their "abuse" mailbox? (Like 99% of mail sent there isn't going to score p

Re: Top spam hosters, how to decline email mentioning them

2007-10-22 Thread Steven W. Orr
On Sunday, Oct 21st 2007 at 00:27 -, quoth Igor Chudov: =>I was looking at this article => => http://en.wikipedia.org/wiki/E-mail_spam => =>It claims that "only five countries are hosting 99.68% of the global =>spammer websites", of which the foremost is China, hosting 73.58% of =>all web sit

Re: Spamassassin and exim4

2007-10-17 Thread Steven Kurylo
My question is - Does spamassassin scan the mail for each recipient? or does it scan only once? If it is the later I would not expect spamassassin to fall over each time one of these mailouts is sent. Is this due to it being in the acl of exim? does anyone have any advice on how to avoid this? I

Re: Auto-RBL was: Why did this not hit more? (SPF, DKIM, Ironport, X-originating-ip)

2007-10-09 Thread Steven Kurylo
Parsing the SA logs would be easy, but the connecting IP isn't listed there. As I mentioned, I'm parsing exim's logs. It contains the spam score and the IP address.

Re: Auto-RBL was: Why did this not hit more? (SPF, DKIM, Ironport, X-originating-ip)

2007-10-09 Thread Steven Kurylo
Or think of it as a way of SA saying "when I get twelve spams of score 10+ from ip 208.23.118.172...I will feed the auto-expiring RBL, which *SENDMAIL* works off of, thus keeping my *SPAMASSASSIN* load lower. Thus a spam deluge via a dictionary attack that may take hours is mitigated in the c

Re: newbie question: scan msgs smaller than certain size

2007-10-06 Thread Steven
Jonathan Armitage wrote: Tom Bombadil wrote: Thanks for the response Loren, but unfortunately, as far as I know we can specify the "spamd" directive just once in exim. I realise we're getting OT here, but there are at least two ways to call SA from Exim, the built-in hook which you are using

Re: newbie question: scan msgs smaller than certain size

2007-10-05 Thread Steven
Tom Bombadil wrote: This is not really on-topic for the SA list, but what clamav support are you missing? Sorry... I guess I didn't explain myself properly. I don't want to go off topic talking about exim, but basically clamav failover/load balance is the problem. We already do what you s

Re: Robert Sexton filter

2007-10-02 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 10/02/2007 11:06 AM, Theo Van Dinter wrote: > On Tue, Oct 02, 2007 at 10:58:26AM -0500, Steven Stern wrote: >> We get many, many emails from a "Robert Sexton" who claims he'll do >> wonders with search engine p

Robert Sexton filter

2007-10-02 Thread Steven Stern
We get many, many emails from a "Robert Sexton" who claims he'll do wonders with search engine placement. As fast as I add an address to the blacklist, he comes in with another. For example, from the AWL tables on one of our MX servers: +--+-+-

Re: bayes_seen = 256GB

2007-09-19 Thread Steven Stern
mfahey wrote: SpamAssassin-3.2.0 Freebsd6.2 The file bayes_seen has grown in size to 256GB! (274992939008) How do I cap the size limit of this file? I want to have it not grow larger then say 800mb at the most! Thanks. You can 'rm' the file or use MySQL for your backend and write a mainte

Re: Posioned MX is a bad idea [Was: Email forwarding and RBL trouble]

2007-08-27 Thread Steven Kurylo
If you have one MX and you create a fake low MX and a fake high MX (or many fake high MX) about 75% to 95% of your spam goes away. It's that simple. How do you deal with the false-positives, legit servers that are blocked by this configuration? There aren't any false positives. That

Re: BOTNET Exceptions for Today

2007-08-21 Thread Steven Kurylo
I don't know, but botnet hits a significant amount of legitimate email here, regardless of how badly configured the sending servers are. I set botnet to score two, and I flag as spam at four. Every time I've had a false positive botnet hit, other rules have been enough to keep the score bel

Re: Question - How many of you run ALL your email through SA?

2007-08-17 Thread Steven Kurylo
I had great results from grey-listing but my users didn't like having to wait 30-60-90 minutes for mail, and I understand that. When you're on the phone with someone and they say "Just sent it," they expect you to have it in a matter of seconds. As I'm often in that positition, I had to sup

Re: Mail server hosted by Comcast

2007-08-16 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/16/2007 10:43 AM, Matt wrote: >> I'm on Comcast and am having no problems. I set the smarthost for >> sendmail to "smtp.comcast.net" and, at least so far, have not triggered >> anything that would block incoming or outgoing mail. All mail from

Re: Question - How many of you run ALL your email through SA?

2007-08-16 Thread Steven Stern
Marc Perkel wrote: OK - it's interesting that of all of you who responded this is the only person who is doing it right. I have to say that I'm somewhat surprised that so few people are preprocessing their email to reduce the SA load. As we all know SA is very processor and memory expensive.

Re: Question - How many of you run ALL your email through SA?

2007-08-15 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 08/15/2007 10:11 PM, Marc Perkel wrote: > As opposed to preprocessing before using SA to reduce the load. (ie. > using blacklist and whitelist before SA) > > We do, except for virus processing through clamav. - -- Steve -BEGIN PGP SIGNATUR

RE: MS outlook can't read parsed email... HELP!!

2007-08-15 Thread Steven Manross
sing 3.17. There could be a bug in 3.19 still, but I don't have time to validate that possibility. Maybe the poster's problem was just an install issue(that's what I am leaning towards). Anyways, he is happy and filtering spam! FYI to all. Steven

RE: MS outlook can't read parsed email... HELP!!

2007-08-13 Thread Steven Manross
, I currently run > > SA3.18 with a similar yet different Exchange Sink and have no such > > problems as the original poster. > > > Steven > > So which sink do you use? Maybe he should use it instead? > > Loren > I created it myself.. There's d

RE: MS outlook can't read parsed email... HELP!!

2007-08-13 Thread Steven Manross
Sorry for jumping in late to this thread.. But, I currently run SA3.18 with a similar yet different Exchange Sink and have no such problems as the original poster. Steven > -Original Message- > From: Loren Wilton [mailto:[EMAIL PROTECTED] > Sent: Monday, August 13, 2007 5:2

Re: Mail server hosted by Comcast

2007-08-11 Thread Steven Stern
Igor Chudov wrote: > I am considering a local deal related to hosting by Comcast cable > (8mbps down, 1 mbps up). > > I am concerned, however, with me sending email and being on comcast IP > range, due to bad rap that Comcast has due to spamming by Comcast > hosted zombies. > > Do you think that m

Re: R: Any mailbox-challenge plugin?

2007-07-23 Thread Steven Kurylo
and isn't considered to be that much better than C/R (it doesn't clutter a forged-sender's mail box, but it can bog down a forged-sender's mail server with verification requests). Well, it may be. I know, however, that a lot of people is doing this at the MTA level in order to reject mail

Re: not everyone is happy with SA

2007-07-20 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Rudd wrote: > > Further, I as the sender have no obligation to participate in your > anti-spam mechanism. It's YOUR mechanism. You feed it, you configure > it, your CPU cycles are spent on it. I have no obligation to > participate in the prog

Re: Sa-update question

2007-07-20 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Skip Brott wrote: > Using the recommended actions from this list, I run this: > > sa-update --channelfile > /etc/mail/spamassassin/saupdate/sare-sa-update-channels.txt -D > > I get this result from each channel: > > [29610] dbg: gpg: gpg: Signature

Who can tell me where the latest sa-stats can be found.

2007-07-16 Thread Steven W. Orr
I used to use it but it's old and has bugs. I recent;y found out that it's *not* part of the sa distro. Is this still supported and if so, where do I get it? I looked around and found hugely conflicting version info. e.g., version 0.93 seems to support sa-3.1.x but version 1.03 seems to be for

Re: Spam PDF

2007-06-27 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Wael Shahin wrote: > On Wed, 2007-06-27 at 09:18 +0200, Robert Schetterer wrote: > Stéphane LEPREVOST schrieb: Hi, Got one yesterday too here. Seems to be a new way for spammers ... >> I have two servers one is running DCC and one

RE: Error on startup after upgrade to 3.2.1:CompiledRegexps

2007-06-14 Thread Steven W. Orr
On Wednesday, Jun 13th 2007 at 17:14 -0400, quoth Rosenbaum, Larry M.: =>> From: Steven W. Orr [mailto:[EMAIL PROTECTED] =>> =>> [EMAIL PROTECTED] ~]# rpm -Uvh =>> /usr/src/redhat/RPMS/i386/spamassassin-3.2.1-1.i386.rpm =>> /usr/src/redhat/RPMS/i386/perl-Mail

Error on startup after upgrade to 3.2.1:CompiledRegexps

2007-06-13 Thread Steven W. Orr
[EMAIL PROTECTED] ~]# rpm -Uvh /usr/src/redhat/RPMS/i386/spamassassin-3.2.1-1.i386.rpm /usr/src/redhat/RPMS/i386/perl-Mail-SpamAssassin-3.2.1-1.i386.rpm Preparing...### [100%] 1:perl-Mail-SpamAssassin

Re: mySQL bayes not working correctly

2007-06-10 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Gary V wrote: >> I'm running amavisd-new with spamassassin and setup bayes and mysql >> earlier >> today. It seems to connect to the db fine with user vscan when running >> spamassassin -d. I ran sa-learn --spam/ham < spam.txt (full email headers >> to

Re: sa-compile error

2007-06-08 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 diptanjan wrote: > Hi Friends, > > I am getting an error when ever I am usinf sa-compile. can you please > checkout and tell me the reason behind it? > > # sa-compile > [4846] info: generic: base extraction starting. this can take a while... > [4846]

Rulesemporium down?

2007-06-07 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 My systems all were unable to connect for their daily RDJ update yesterday. I time out trying to reach http://rulesemporium.com. Does anyone know what's happening? - -- Steve -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.7 (GNU/Linux) Comment:

Re: spamassassin upgrade

2007-05-20 Thread Steven Stern
night duke wrote: I have debian... */Steven Stern <[EMAIL PROTECTED]>/* escribiĂł: night duke wrote: > Currently i have this version of spamassassin > > SpamAssassin version 3.1.7-deb > > Can i update it to the last version? >

Re: spamassassin upgrade

2007-05-20 Thread Steven Stern
night duke wrote: Currently i have this version of spamassassin SpamAssassin version 3.1.7-deb Can i update it to the last version? Apt-get or yum or howto? Thanks I prefer to download the .tgz file from spamassassin.apache.org and create the rpm myself via rpmbuild -tb file-just-dow

Tool to give report of rejected addresses

2007-05-19 Thread Steven W. Orr
I'm running SA with sendmail and spamass-milter with a reject score set to 5. It occurred to me that I never actually saw the daily list of email addresses of people whose messages were rejected. i.e., I never had an option to view any possible false positives. It turns out it's not a simple gr

  1   2   3   4   >