Re: Hostkarma whitelist needs something..

2009-10-14 Thread Henrik K
On Thu, Oct 15, 2009 at 08:48:45AM +0300, Jari Fredriksson wrote: > > > 15.10.2009 8:29, Henrik K kirjoitti: >> On Thu, Oct 15, 2009 at 03:33:54AM +0200, Karsten Bräckelmann wrote: >>> On Thu, 2009-10-15 at 02:44 +0300, Jari Fredriksson wrote: -1.0 RCVD_IN_HOSTKARMA_WRBL: HostKarma: relay

Re: Hostkarma whitelist needs something.. (No more; SOLVED)

2009-10-14 Thread Jari Fredriksson
15.10.2009 8:48, Jari Fredriksson kirjoitti: iki.fi is a famous Finnish email forwarding service and as such should be added as internal_networks, if you are using it. Things like this are hard to know unless you really understand TruthPaths.. All right. I removed internal_networks which o

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
15.10.2009 8:29, Henrik K kirjoitti: On Thu, Oct 15, 2009 at 03:33:54AM +0200, Karsten Bräckelmann wrote: On Thu, 2009-10-15 at 02:44 +0300, Jari Fredriksson wrote: -1.0 RCVD_IN_HOSTKARMA_WRBL: HostKarma: relay in white list (first pass) [212.16.98.53 listed i

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Henrik K
On Thu, Oct 15, 2009 at 08:26:02AM +0300, Jari Fredriksson wrote: > > > 15.10.2009 4:33, Karsten Bräckelmann kirjoitti: >> On Thu, 2009-10-15 at 02:44 +0300, Jari Fredriksson wrote: >>> -1.0 RCVD_IN_HOSTKARMA_WRBL: HostKarma: relay in white list (first pass) >>> [21

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
15.10.2009 3:37, Marc Perkel kirjoitti: TOP HAM RULES FIRED -- RANK RULE NAME COUNT %OFMAIL %OFSPAM %OFHAM -- 1 RCVD_IN_JMF_W 1115 6.88 0.06 74.98 This is

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Henrik K
On Thu, Oct 15, 2009 at 03:33:54AM +0200, Karsten Bräckelmann wrote: > On Thu, 2009-10-15 at 02:44 +0300, Jari Fredriksson wrote: > > -1.0 RCVD_IN_HOSTKARMA_WRBL: HostKarma: relay in white list (first pass) > > [212.16.98.53 listed in > > hostkarma.junkemailfilter.c

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
15.10.2009 4:33, Karsten Bräckelmann kirjoitti: On Thu, 2009-10-15 at 02:44 +0300, Jari Fredriksson wrote: -1.0 RCVD_IN_HOSTKARMA_WRBL: HostKarma: relay in white list (first pass) [212.16.98.53 listed in hostkarma.junkemailfilter.com] $ host 212.16.98.53 53.

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
15.10.2009 6:41, Adam Katz kirjoitti: Karsten Bräckelmann wrote: 3.0 RCVD_IN_BRBL_RELAY RBL: received via a relay rated as poor by Barracuda [187.10.243.78 listed in bb.barracudacentral.org] Hmm, a different IP. ... Any chance your internal and trusted

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Adam Katz
Karsten Bräckelmann wrote: >> 3.0 RCVD_IN_BRBL_RELAY RBL: received via a relay rated as poor by >> Barracuda >> [187.10.243.78 listed in >> bb.barracudacentral.org] > > Hmm, a different IP. ... > Any chance your internal and trusted networks are incorrect? Any

Re: Hostkarma whitelist needs something..

2009-10-14 Thread John Hardin
On Wed, 14 Oct 2009, MySQL Student wrote: Hi,  http://www.impsec.org/jhardin/antispam/ This should be: http://www.impsec.org/~jhardin/antispam/ (note the missing tilde :-) Oops. Hand-typed. :( -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.org

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Karsten Bräckelmann
On Thu, 2009-10-15 at 02:44 +0300, Jari Fredriksson wrote: > -1.0 RCVD_IN_HOSTKARMA_WRBL: HostKarma: relay in white list (first pass) > [212.16.98.53 listed in > hostkarma.junkemailfilter.com] $ host 212.16.98.53 53.98.16.212.in-addr.arpa domain name pointer jatkuu

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Marc Perkel
Mike Cardwell wrote: Jari Fredriksson wrote: Jari, How did you produce the great looking statistics? Thanks, Rick It's a perl script called sa-stats.pl I tried not google it for you, but could not find the original. Many scripts with the same name though.. I put that to my server as ht

Re: Hostkarma whitelist needs something..

2009-10-14 Thread MySQL Student
Hi, >  http://www.impsec.org/jhardin/antispam/ This should be: http://www.impsec.org/~jhardin/antispam/ (note the missing tilde :-) Regards, Alex

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Marc Perkel
Jari Fredriksson wrote: 14.10.2009 19:17, R-Elists kirjoitti: All I can say is that if these numbers were real or typical I would be out of business. perkel, i might be wrong, yet it doesnt appear to me that Jari have enough mail volume to have a reasonable statistical base...

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
15.10.2009 0:42, Rick Knight kirjoitti: Jari Fredriksson wrote: 15.10.2009 0:21, Rick Knight kirjoitti: Here's the url for the newer version "http://www.rulesemporium.com/programs/sa-stats-1.0.txt";. It's not newer, it's exactly the same version, without or later additions. Please to n

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Rick Knight
Jari Fredriksson wrote: 15.10.2009 0:21, Rick Knight kirjoitti: Here's the url for the newer version "http://www.rulesemporium.com/programs/sa-stats-1.0.txt";. It's not newer, it's exactly the same version, without or later additions. Please to not reply to my INBOX, I get confused. My

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
15.10.2009 0:21, Rick Knight kirjoitti: Here's the url for the newer version "http://www.rulesemporium.com/programs/sa-stats-1.0.txt";. It's not newer, it's exactly the same version, without or later additions. Please to not reply to my INBOX, I get confused. My Thunderbird sees your repli

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Rick Knight
Karsten Bräckelmann wrote: On Wed, 2009-10-14 at 14:03 -0700, Rick Knight wrote: Thanks again for putting the script up. I found the original site and downloaded the 3.1 version. In the instructions it says "If your top 5 does not contain URIBL_BLACK, see http://www.uribl.com/usage.shtml";.

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Rick Knight
Jari Fredriksson wrote: 14.10.2009 23:55, Rick Knight kirjoitti: Jari Fredriksson wrote: 14.10.2009 21:49, Mike Cardwell kirjoitti: Jari Fredriksson wrote: Jari, How did you produce the great looking statistics? Thanks, Rick It's a perl script called sa-stats.pl I tried not google i

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Karsten Bräckelmann
On Wed, 2009-10-14 at 14:03 -0700, Rick Knight wrote: > Thanks again for putting the script up. I found the original site and > downloaded the 3.1 version. In the instructions it says "If your top 5 > does not contain URIBL_BLACK, see http://www.uribl.com/usage.shtml";. On > my system URIBL_BLAC

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
14.10.2009 23:55, Rick Knight kirjoitti: Jari, Thanks again for putting the script up. I found the original site and downloaded the 3.1 version. In the instructions it says "If your top 5 does not contain URIBL_BLACK, see http://www.uribl.com/usage.shtml";. On my system URIBL_BLACK is number

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
14.10.2009 23:55, Rick Knight kirjoitti: Jari Fredriksson wrote: 14.10.2009 21:49, Mike Cardwell kirjoitti: Jari Fredriksson wrote: Jari, How did you produce the great looking statistics? Thanks, Rick It's a perl script called sa-stats.pl I tried not google it for you, but could not

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Rick Knight
Jari Fredriksson wrote: 14.10.2009 21:49, Mike Cardwell kirjoitti: Jari Fredriksson wrote: Jari, How did you produce the great looking statistics? Thanks, Rick It's a perl script called sa-stats.pl I tried not google it for you, but could not find the original. Many scripts with the sa

Re: Hostkarma whitelist needs something..

2009-10-14 Thread John Hardin
On Wed, 14 Oct 2009, Jari Fredriksson wrote: 14.10.2009 21:49, Mike Cardwell kirjoitti: Jari Fredriksson wrote: > It's a perl script called sa-stats.pl > > I have modified the default file so that is scans /var/log/messages > which works for me (Debian), the script not runs without argum

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
14.10.2009 21:49, Mike Cardwell kirjoitti: Jari Fredriksson wrote: Jari, How did you produce the great looking statistics? Thanks, Rick It's a perl script called sa-stats.pl I tried not google it for you, but could not find the original. Many scripts with the same name though.. I put t

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Mike Cardwell
Jari Fredriksson wrote: Jari, How did you produce the great looking statistics? Thanks, Rick It's a perl script called sa-stats.pl I tried not google it for you, but could not find the original. Many scripts with the same name though.. I put that to my server as http://www.iki.fi/jarif/sa

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
14.10.2009 20:50, Jari Fredriksson kirjoitti: which works for me (Debian), the script not runs without arguments. *now* runs. (s/not/now/g) -- http://www.iki.fi/jarif/ Q: How many WASPs does it take to change a light bulb? A: One. pgpEguqewsBA6.pgp Description: PGP signature

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
14.10.2009 20:33, Rick Knight kirjoitti: Jari, How did you produce the great looking statistics? Thanks, Rick It's a perl script called sa-stats.pl I tried not google it for you, but could not find the original. Many scripts with the same name though.. I put that to my server as http://w

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Rick Knight
Jari Fredriksson wrote: 14.10.2009 19:17, R-Elists kirjoitti: All I can say is that if these numbers were real or typical I would be out of business. perkel, i might be wrong, yet it doesnt appear to me that Jari have enough mail volume to have a reasonable statistical base... -

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Jari Fredriksson
14.10.2009 19:17, R-Elists kirjoitti: All I can say is that if these numbers were real or typical I would be out of business. perkel, i might be wrong, yet it doesnt appear to me that Jari have enough mail volume to have a reasonable statistical base... - rh You are not wrong,

RE: Hostkarma whitelist needs something..

2009-10-14 Thread R-Elists
> > > > > > All I can say is that if these numbers were real or typical I > would be out of business. > perkel, i might be wrong, yet it doesnt appear to me that Jari have enough mail volume to have a reasonable statistical base... - rh

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Marc Perkel
Henrik K wrote: On Wed, Oct 14, 2009 at 03:25:36AM -0700, Marc Perkel wrote: Jari Fredriksson wrote: I just started using Katz's wiki rules and it brought HOSTKARMA with it. I have not yet seen any blacklists of HOSTKARMA, but the whitelists are there. RANK

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Henrik K
On Wed, Oct 14, 2009 at 03:25:36AM -0700, Marc Perkel wrote: > > > Jari Fredriksson wrote: >> >> I just started using Katz's wiki rules and it brought HOSTKARMA with it. >> >> I have not yet seen any blacklists of HOSTKARMA, but the whitelists are >> there. >> >> RANKRULE NAME

Re: Hostkarma whitelist needs something..

2009-10-14 Thread Marc Perkel
Jari Fredriksson wrote: I just started using Katz's wiki rules and it brought HOSTKARMA with it. I have not yet seen any blacklists of HOSTKARMA, but the whitelists are there. RANKRULE NAME COUNT %OFMAIL %OFSPAM %OFHAM 9RCVD_IN_HOSTKARMA_WL 77

RE: Hostkarma whitelist needs something..

2009-10-13 Thread R-Elists
> > > Funny, after the discussions yesterday, I did the same thing > only to wake up this morning with a mess of mis-marked > messages due to hits on hostkarma. Until I can do further > analysis, I've dropped RCVD_IN_HOSTKARMA_BL and > RCVD_IN_HOSTKARMA_WL to .001 and -.001 respectively. > >

Re: Hostkarma whitelist needs something..

2009-10-13 Thread Adam Katz
Jari Fredriksson wrote: > TOP HAM RULES FIRED > -- > RANKRULE NAME COUNT %OFMAIL %OFSPAM %OFHAM > -- >5RCVD_IN_HOSTKARMA_W

Re: Hostkarma whitelist needs something..

2009-10-13 Thread Jason Bertoch
Jari Fredriksson wrote: I just started using Katz's wiki rules and it brought HOSTKARMA with it. Is this really a whitelist? Funny, after the discussions yesterday, I did the same thing only to wake up this morning with a mess of mis-marked messages due to hits on hostkarma. Until I can do f

Hostkarma whitelist needs something..

2009-10-12 Thread Jari Fredriksson
Email: 911 Autolearn: 603 AvgScore: 13.10 AvgScanTime: 12.16 sec Spam: 462 Autolearn: 414 AvgScore: 33.17 AvgScanTime: 10.80 sec Ham:449 Autolearn: 189 AvgScore: -7.55 AvgScanTime: 13.55 sec Time Spent Running SA: 3.08 hours Time Spent Processing Spam