Re: unblacklist_from_rcvd

2010-09-08 Thread William Taylor
On Sep 7, 2010, at 6:36 PM, Matt Kettler wrote: > On 9/7/2010 7:11 PM, William Taylor wrote: >> I want to be able to only allow a certain email to be sent from one of >> several hosts. >> >> Currently im doing something like: >> >> blacklist_from

unblacklist_from_rcvd

2010-09-07 Thread William Taylor
I want to be able to only allow a certain email to be sent from one of several hosts. Currently im doing something like: blacklist_from sa...@foo.com whitelist_from_rcvd sa...@foo.com mail.foo.com whitelist_from_rcvd sa...@foo.com sales.foo.com This doesn't really do what I want because the bl

Web Proxy RBL ?

2009-12-29 Thread William Taylor
Looking for an RBL or something to determine if a given IP is coming from a web proxy. Trying to cut down on spam coming from exploited users sites. Would like to do some logging and see if this helps. Thanks, William

Re: is Pyzor worth it?

2008-10-13 Thread William Taylor
On Mon, Oct 13, 2008 at 08:44:08AM -0700, Bill Landry wrote: > Here are some stats for this past weekend comparing Pyzor to other hash > tests: > > 36 CTYME_IXHASH > 38 HOSTEUROPE_IXHASH > 92 GENERIC_IXHASH > 129 NIXSPAM_IXHASH > 218 RAZOR2_CF_RANGE_E4_51_100 > 256 PYZOR

is Pyzor worth it?

2008-10-13 Thread William Taylor
Is Pyzor worth running these days? Is it still effective? Can anyone using it comment on it? Thanks, William

Re: whitelist_from_rcvd propigating between users

2008-10-09 Thread William Taylor
On Thu, Oct 09, 2008 at 06:31:03PM +0200, Karsten Bräckelmann wrote: > However, given that other user settings actually do work, this might > even be isolated to some particular code, rather than a widespread oops. > I could be wrong but it seems to only be happening with the whitelist_from_rcvd

Re: whitelist_from_rcvd propigating between users

2008-10-09 Thread William Taylor
On Thu, Oct 09, 2008 at 06:16:30PM +0200, Karsten Bräckelmann wrote: > William, please search bugzilla for duplicates first. If you're positive > this issue hasn't been reported before, please feel free to file a new > bug, adding as much details as possible. Thanks. > I did search and could only

Re: whitelist_from_rcvd propigating between users

2008-10-09 Thread William Taylor
On Thu, Oct 09, 2008 at 05:53:30PM +0200, Karsten Bräckelmann wrote: > To be a little more helpful and less snippy -- if you want more detailed > answers, and check if it might be a different bug than the one > mentioned, telling us about your SA version would be a smart first > move... > I wasn'

Re: whitelist_from_rcvd propigating between users

2008-10-09 Thread William Taylor
On Mon, Oct 06, 2008 at 11:30:11AM -0700, William Taylor wrote: > It would seem the whitelist_from_rcvd is incorrectly propigating to the wrong > users in the same thread. > For example usera has "whitelist_from_rcvd *.sonic.net sonic.net" setup. If > userb gets sent mail

Re: dnsbl lookups for X-PHP-Script

2008-10-06 Thread William Taylor
On Mon, Oct 06, 2008 at 08:55:29PM +0300, Henrik K wrote: > X-PHP-Script doesn't seem to be very widely patched - or PHP isn't abused > that much, which is nice. I grepped 3 weeks worth of spam quarantine, 17335 > messages. 46 contained it. 28 unique IPS, out of which 8 was on sbl-xbl and > one or

whitelist_from_rcvd propigating between users

2008-10-06 Thread William Taylor
It would seem the whitelist_from_rcvd is incorrectly propigating to the wrong users in the same thread. For example usera has "whitelist_from_rcvd *.sonic.net sonic.net" setup. If userb gets sent mail that is processed by that same thread it will pickup the whitelist_from_rcvd from usera Any ide

Re: ocr plugin

2008-05-02 Thread William Taylor
On Fri, May 02, 2008 at 06:06:05PM +0300, Henrik K wrote: > On Fri, May 02, 2008 at 03:38:41PM +0200, polloxx wrote: > > Hi, > > > > Am I right to say that picture spam has dropped dramatically since the > > last months? > > Has there been any in a year? That's when I dropped using it. > It's p

Re: ocr plugin

2008-05-02 Thread William Taylor
We are using the SVN version of FuzzyOCR. It seems to be working fine. -William On Fri, May 02, 2008 at 03:38:41PM +0200, polloxx wrote: > Hi, > > Am I right to say that picture spam has dropped dramatically since the > last months? > Is it still reasonable to run an orc plugin? I see the latest

Tests Question

2008-04-25 Thread William Taylor
I recently started recieving complaints from some users about spam getting through. Upon looking at these messages they are scorring 0.0 from spamassassin. Not sure if something is jacked with my setup but running manually I see: [20309] dbg: check: tests= [20309] dbg: check: subtests=__CT,__CTE

Re: Errors from spamassassin -r

2008-04-24 Thread William Taylor
On Tue, Apr 22, 2008 at 06:17:54AM -0700, William Taylor wrote: > Im still seeing this message is I have bayes disabled. Any ideas? > > [EMAIL PROTECTED] williamt]# formail -s spamassassin -r < ./Missed-Spam > 1 message(s) examined. > Can't call method "learn" on

Errors from spamassassin -r

2008-04-22 Thread William Taylor
Im still seeing this message is I have bayes disabled. Any ideas? [EMAIL PROTECTED] williamt]# formail -s spamassassin -r < ./Missed-Spam 1 message(s) examined. Can't call method "learn" on an undefined value at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgLearner.pm line 109. 1 message

Dnsbl checks

2008-04-21 Thread William Taylor
D I see it queries all the blacklists but I never see anything indicating that it matched them. Any thoughts on things I can check on to figure this out? DCC,Razor,Pyzor works fine. Thanks, William -- William Taylor - [EMAIL PROTECTED] Sonic.net System Administrator 2260

Error using -r

2008-04-20 Thread William Taylor
Getting this error when running spamassassin -r < ./MYSPAM I have bayes disabled so it shouldn't even be running this I think. If I enable bayes it doesn't do this. Plus I just the last version I was running didn't do this I think it was 3.1.9 what ever is in the default Centos tree. Running versi

Re: Extend DNSEval.pm?

2008-04-18 Thread William Taylor
On Fri, Apr 18, 2008 at 06:22:58PM +0100, Justin Mason wrote: > > William Taylor writes: > > Is there anyway to extend this in DNSEval.pm locally without patching? > > Maybe with a plugin or something? > > > > my @originating = (); > > for my $header (&#

Extend DNSEval.pm?

2008-04-18 Thread William Taylor
Is there anyway to extend this in DNSEval.pm locally without patching? Maybe with a plugin or something? my @originating = (); for my $header ('X-Originating-IP', 'X-Apparently-From') { my $str = $pms->get($header); next unless $str; push (@originating, ($str =~ m/($IP_ADDRESS)/g)