Re: VBounce ruleset

2008-05-15 Thread Jonas Eckerman
Aaron Bennett wrote: Is anyone using these [VBounce] rules for spam detection? We use them for detection ofbacscattered spam. If so, how have you been scoring them? We haven't changed the score. What we do is check if ANY_BOUNCE_MESSAGE hits. If it hits a mail, our mimedefang-filter then

Re: VBounce ruleset

2008-05-14 Thread Benny Pedersen
On Wed, May 14, 2008 16:45, Aaron Bennett wrote: > My question is to people who've been using the rules in a real > production environment -- do you see them working with the default > scores, or have you tweaked them at all? vbounce is working as default as designed :) but you need to define a

Re: VBounce ruleset

2008-05-14 Thread Karsten Bräckelmann
On Wed, 2008-05-14 at 15:03 -0400, Aaron Bennett wrote: > Karsten Bräckelmann wrote: > > > > Please check the recent archives for threads > > about the VBounce plugin or backscatter. > > I apologize for not doing that... however, had I, I would have still > asked the question because the advice g

Re: VBounce ruleset

2008-05-14 Thread Jari Fredriksson
> > Is anyone using these rules for spam detection? If so, > how have you been scoring them? I'm glad to have a > confirmation that 0.1 is obviously not enough but I'm > curious how others are scoring these rules; given a > general spam target of 5. I'm thinking of scoring in the > range of 1.5

Re: VBounce ruleset

2008-05-14 Thread Aaron Bennett
Karsten Bräckelmann wrote: Please check the recent archives for threads about the VBounce plugin or backscatter. I apologize for not doing that... however, had I, I would have still asked the question because the advice given is not suitable for an enterprise deployment: # If you use this

Re: VBounce ruleset

2008-05-14 Thread Matus UHLAR - fantomas
> Aaron Bennett wrote: > > production environment -- do you see them working with the default > > scores, or have you tweaked them at all? On 14.05.08 12:04, Matt Garretson wrote: > I've set up a meta rule which adds more to the score if either > ANY_BOUNCE_MESSAGE or VBOUNCE_MESSAGE hit. pardo

Re: VBounce ruleset

2008-05-14 Thread Matt Garretson
Aaron Bennett wrote: > production environment -- do you see them working with the default > scores, or have you tweaked them at all? I've set up a meta rule which adds more to the score if either ANY_BOUNCE_MESSAGE or VBOUNCE_MESSAGE hit. I also have custom rules that try to decrease the score

Re: VBounce ruleset

2008-05-14 Thread Karsten Bräckelmann
> I'm giving some though to deploying the Vbounce ruleset into an existing > SA 3.1.9+Maia Mailguard / 5,000 user email environment. It makes good > sense; the only thing that seems off is the scoring. As I see it, none > of the rules score greater then 0.1. It's hard to see how that's going

Re: Vbounce ruleset whitelist_bounce_relays

2007-02-19 Thread Jeremy Fairbrass
Hi Justin, What exactly is the fix, and where do I find it? I just installed the VBounce plugin on my server this weekend (for the first time), and have the same probs described here - ie. although I've added my server to whitelist_bounce_relays in local.cf, I'm not getting the MY_SERVERS_FOUND

Re: Vbounce ruleset whitelist_bounce_relays

2007-02-14 Thread Justin Mason
Matt Kettler writes: > Steve [Spamassassin] wrote: > > Justin Mason wrote: > >> could you post an example of your config and the message you're testing > >> with, in full? > > OK in /etc/mail/spamassassin/local.cf > > > Received: by mail.mydomain.com (Postfix) id EFBE62E48F; Wed, 7 Feb > > 2

Re: Vbounce ruleset whitelist_bounce_relays

2007-02-14 Thread Steve [Spamassassin]
Matt Kettler wrote: Received: by mail.mydomain.com (Postfix) id EFBE62E48F; Wed, 7 Feb 2007 12:57:43 + (GMT) Nice.. A Received: header with no from clause. I'm glad you like it, though I don't think I can take all the credit... this is generated by an almost vanilla (Gentoo) Post

Re: Vbounce ruleset whitelist_bounce_relays

2007-02-13 Thread Matt Kettler
Steve [Spamassassin] wrote: > Justin Mason wrote: >> could you post an example of your config and the message you're testing >> with, in full? > OK in /etc/mail/spamassassin/local.cf > Received: by mail.mydomain.com (Postfix) id EFBE62E48F; Wed, 7 Feb > 2007 12:57:43 + (GMT) Nice.. A Re

Re: Vbounce ruleset whitelist_bounce_relays

2007-02-13 Thread Steve [Spamassassin]
Justin Mason wrote: could you post an example of your config and the message you're testing with, in full? OK in /etc/mail/spamassassin/local.cf -- allow_user_rules 1 bayes_auto_expire 0 whitelist_bounce_relays mail.mydomain.com -- A bounce message which should have been whitelisted: c

Re: Vbounce ruleset whitelist_bounce_relays

2007-02-13 Thread Justin Mason
Steve [Spamassassin] writes: > I've been trying to use the Vbounce ruleset > [http://wiki.apache.org/spamassassin/VBounceRuleset] on spamassassin 3.1.4. > > I'm unable to get whitelist_bounce_relays to work... When I > intentionally send an email to a non-existent remote address I get a > boun