Re: relay country

2017-02-22 Thread RW
On Tue, 21 Feb 2017 20:47:06 -0500 David Mehler wrote: > Hello, > > I'm using spamassassin 3.4.1 and trying to tighten up my antispam > measures. I've enabled the relay country plugin which also has it's > supporting module of Geo-IP. This is on a FreeBSD system. You probably need to enable the

Re: relay not detected

2016-11-22 Thread RW
On Tue, 22 Nov 2016 12:18:14 -0500 Bill Cole wrote: > On 22 Nov 2016, at 0:48, Pedro David Marco wrote: > > > Thanks Bill, > >> . I don't know why some spammers do this sort of lame  > >> Received fakery, since it fingerprints their mail as spam, but it > >> has been a fairly common practice fo

Re: relay not detected

2016-11-22 Thread Bill Cole
On 22 Nov 2016, at 0:48, Pedro David Marco wrote: Thanks Bill, . I don't know why some spammers do this sort of lame  Received fakery, since it fingerprints their mail as spam, but it has been a fairly common practice for a long time. But SA did not trigger any rule about the forgering... I'

Re: relay not detected

2016-11-22 Thread RW
On Tue, 22 Nov 2016 05:48:29 + (UTC) Pedro David Marco wrote: > Thanks Bill, > >. I don't know why some spammers do this sort of lame  > >Received fakery, since it fingerprints their mail as spam, but it > >has been a fairly common practice for a long time. > But SA did not trigger any rule

Re: relay not detected

2016-11-21 Thread Pedro David Marco
Thanks Bill, >. I don't know why some spammers do this sort of lame  >Received fakery, since it fingerprints their mail as spam, but it has >been a fairly common practice for a long time. But SA did not trigger any rule about the forgering...  and debug mode does not showany message about unparse

Re: relay not detected

2016-11-21 Thread Bill Cole
On 21 Nov 2016, at 17:54, Pedro David Marco wrote: Hi, i have spam emails with a Received line like this: Received: by 9-30-239-23.uocdn.net (Postfix) with ESMTPSA id 693A0C56B with (unknown [158.69.130.12]) ; Sun, 20 Nov 2016 21:06:55 -0300 there is no parsing perl code for lines like this in

Re: Relay Country Plugin GEOIP issue - solved

2015-10-16 Thread am
On 2015-10-14 18:31, Mark Martinec wrote: Check your database: $ spamassassin --lint -D metadata' 2>&1 | fgrep RelayCountry should yield something like: Oct 15 01:26:45.584 [78315] dbg: metadata: RelayCountry: Using database: Geo::IP GEO-106FREE 20151006 Build 1 Copyright (c) 2015 MaxMi

Re: Relay Country Plugin GEOIP issue

2015-10-14 Thread Mark Martinec
2015-10-15 00:09, a...@satester.com wrote: Does the Geo::IP package need to be recompiled for the change to go into effect? No. Use of uninitialized value $hasStructureInfo in numeric eq (==) at (eval 31) line 5520 According to comments in Geo/IP.pm your GeoIP database files must be very o

Re: Relay Country Plugin GEOIP issue

2015-10-14 Thread am
Hi, I cannot get the fix below to work. Does the Geo::IP package need to be recompiled for the change to go into effect? If so, any tips on how to recompile would be greatly appreciated. Allen a...@satester.com On 2015-10-14 12:04, George Ficzeri wrote: This? https://github.com/maxmind/geo

Re: Relay Country Plugin GEOIP issue

2015-10-14 Thread am
Thanks for the reply George. We tried that link yesterday and made the change as described with no results. We restarted mailscanner but nothing else. Maybe I need to restart our MTA or other daemon. Allen a...@bandwise.com On 2015-10-14 12:04, George Ficzeri wrote: This? https://github.c

Re: Relay Country Plugin GEOIP issue

2015-10-14 Thread George Ficzeri
This? https://github.com/maxmind/geoip-api-perl/pull/22 If you click 'Files changed' you'll see the path, and see the fix. On 10/14/15 11:49 AM, a...@satester.com wrote: > Hi, > > We activated the relay country plugin yesterday. As part of the process > we did a yum install perl-Geo-IP. Now w

Re: Relay Country on SA 3.3.1

2010-03-26 Thread jdow
- Original Message - From: "Daniel Lemke" To: Sent: Friday, 2010/March/26 06:59 Subject: Re: Relay Country on SA 3.3.1 Kaleb Hosie wrote: Before I upgraded to 3.3.1 I had the relay country ruleset installed and enabled. In my local.cf file, here's a few lines

Re: Relay Country on SA 3.3.1

2010-03-26 Thread Daniel Lemke
Kaleb Hosie wrote: > > Before I upgraded to 3.3.1 I had the relay country ruleset installed and > enabled. In my local.cf file, here's a few lines I have: > > header RELAYCOUNTRY_CN X-relay-countries =~ /CN/ > describe RELAYCOUNTRY_CN Relayed through China > score RELAYCOUNTRY_CN 5 > > add_hea

Re: relay

2007-01-23 Thread Rick Macdougall
Terry Soucy wrote: You might want to try asking that question in a mailing list specific for qmail. Check www.qmail.org for access to support and forums. Also check the Life with qmail book, available for download at http://www.lifewithqmail.org, which addresses this question. Terry Terry Sou

Re: relay

2007-01-23 Thread Terry Soucy
You might want to try asking that question in a mailing list specific for qmail. Check www.qmail.org for access to support and forums. Also check the Life with qmail book, available for download at http://www.lifewithqmail.org, which addresses this question. Terry Terry Soucy, Systems Analyst

Re: FuzzyOcr problem (Re: Relay Checker plugin v0.2)

2006-11-11 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Rudd wrote: > decoder wrote: >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA1 >> >> John Rudd wrote: >>> D.J. wrote: On 11/10/06, Patrick Sneyers <[EMAIL PROTECTED]> wrote: > I get this warning: plugin: failed to create instance of p

Re: FuzzyOcr problem (Re: Relay Checker plugin v0.2)

2006-11-10 Thread sokka
Hi,   Can anyone let me know the clear installation and configuration of this FuzzyOcr ?   thanks in advance

Re: FuzzyOcr problem (Re: Relay Checker plugin v0.2)

2006-11-10 Thread John Rudd
decoder wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Rudd wrote: D.J. wrote: On 11/10/06, Patrick Sneyers <[EMAIL PROTECTED]> wrote: I get this warning: plugin: failed to create instance of plugin Mail::SpamAssassin::Plugin::RelayChecker: Can't locate object method "new" via pa

Re: FuzzyOcr problem (Re: Relay Checker plugin v0.2)

2006-11-10 Thread decoder
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 John Rudd wrote: > D.J. wrote: >> On 11/10/06, Patrick Sneyers <[EMAIL PROTECTED]> wrote: >>> >>> I get this warning: plugin: failed to create instance of plugin >>> Mail::SpamAssassin::Plugin::RelayChecker: Can't locate object >>> method "new" via p

FuzzyOcr problem (Re: Relay Checker plugin v0.2)

2006-11-10 Thread John Rudd
D.J. wrote: On 11/10/06, Patrick Sneyers <[EMAIL PROTECTED]> wrote: I get this warning: plugin: failed to create instance of plugin Mail::SpamAssassin::Plugin::RelayChecker: Can't locate object method "new" via package "Mail::SpamAssassin::Plugin::RelayChecker" at (eval 26) line 1. (This is my

Re: Relay Checker plugin v0.2

2006-11-10 Thread D . J .
On 11/10/06, Patrick Sneyers <[EMAIL PROTECTED]> wrote: I get this warning:plugin: failed to create instance of pluginMail::SpamAssassin::Plugin::RelayChecker: Can't locate object method"new" via package "Mail::SpamAssassin::Plugin::RelayChecker" at (eval 26) line 1.(This is my own build of SA 3.1.

Re: Relay Checker plugin v0.2

2006-11-09 Thread Patrick Sneyers
I get this warning: plugin: failed to create instance of plugin Mail::SpamAssassin::Plugin::RelayChecker: Can't locate object method "new" via package "Mail::SpamAssassin::Plugin::RelayChecker" at (eval 26) line 1. (This is my own build of SA 3.1.7 on Max OS X Server 10.4 ppc) It seems to

Re: Relay Checker plugin v0.2

2006-11-03 Thread Stuart Johnston
John Rudd wrote: Stuart Johnston wrote: John Rudd wrote: I've put up a new version of Relay checker, in ... I expect I might, at some point, switch from using a dynamic score in the plugin, to a normal score. But that's the only change I expect to make, aside from bug fixes (if there are a

Re: Relay Checker plugin v0.2

2006-11-03 Thread John Rudd
Stuart Johnston wrote: John Rudd wrote: I've put up a new version of Relay checker, in ... I expect I might, at some point, switch from using a dynamic score in the plugin, to a normal score. But that's the only change I expect to make, aside from bug fixes (if there are any), and/or a swit

Re: Relay Checker plugin v0.2

2006-11-03 Thread Stuart Johnston
John Rudd wrote: I've put up a new version of Relay checker, in ... I expect I might, at some point, switch from using a dynamic score in the plugin, to a normal score. But that's the only change I expect to make, aside from bug fixes (if there are any), and/or a switch to using Net::DNS.

Re: Relay Checker Plugin (code review please?)

2006-11-02 Thread Billy Huddleston
Message - From: "Dylan Bouterse" <[EMAIL PROTECTED]> To: Sent: Wednesday, November 01, 2006 11:28 PM Subject: RE: Relay Checker Plugin (code review please?) I did a couple of times. :( -Original Message- From: Billy Huddleston [mailto:[EMAIL PROTECTED] Sent: Wednesday, N

RE: Relay Checker Plugin (code review please?)

2006-11-01 Thread Dylan Bouterse
I did a couple of times. :( > -Original Message- > From: Billy Huddleston [mailto:[EMAIL PROTECTED] > Sent: Wednesday, November 01, 2006 9:20 PM > To: Dylan Bouterse; users@spamassassin.apache.org > Subject: Re: Relay Checker Plugin (code review please?) > > You may

Re: Relay Checker Plugin (code review please?)

2006-11-01 Thread Billy Huddleston
You may want to download new RelayChecker.pm file... you may have messed it up previously.. If you still have problems let me know.. - Original Message - From: "Dylan Bouterse" <[EMAIL PROTECTED]> To: Sent: Wednesday, November 01, 2006 6:39 PM Subject: RE: Rela

RE: Relay Checker Plugin (code review please?)

2006-11-01 Thread Dylan Bouterse
> -Original Message- > From: John D. Hardin [mailto:[EMAIL PROTECTED] > Sent: Wednesday, November 01, 2006 5:05 PM > To: Dylan Bouterse > Cc: users@spamassassin.apache.org > Subject: RE: Relay Checker Plugin (code review please?) > > On Wed, 1 Nov 20

RE: Relay Checker Plugin (code review please?)

2006-11-01 Thread John D. Hardin
On Wed, 1 Nov 2006, Dylan Bouterse wrote: > # headerRELAY_CHECKER eval:relay_checker() > # describe RELAY_CHECKER Check relay for DNS/Hostname issues. > to: >if ($nordns) { > > and when I run --lint I get the following errors: > > /etc/mail/spamassassin/RelayChecker.pm l

RE: Relay Checker Plugin (code review please?)

2006-11-01 Thread Dylan Bouterse
> -Original Message- > From: Billy Huddleston [mailto:[EMAIL PROTECTED] > Sent: Wednesday, November 01, 2006 3:58 PM > To: users@spamassassin.apache.org > Subject: Re: Relay Checker Plugin (code review please?) > > Attached is patch to allow scores to be

Re: Relay Checker Plugin (code review please?)

2006-11-01 Thread Billy Huddleston
Attached is patch to allow scores to be done in the .cf file --- RelayChecker.pm 2006-10-30 18:02:28.0 -0500 +++ ../RelayChecker.pm 2006-11-01 15:36:53.0 -0500 @@ -31,6 +31,12 @@ # headerRELAY_CHECKER eval:relay_checker() # describe RELAY_CHECKER Check relay

Re: Relay Checker Plugin (code review please?)

2006-11-01 Thread Justin Mason
John Rudd writes: > Stuart Johnston wrote: > > John Rudd wrote: > >> Stuart Johnston wrote: > >>> John Rudd wrote: > 2) This sort of replaces the other set of rules I created, that did > this with metarules instead of a plugin. This made some of the > checks less useful. You pro

Re: Relay Checker Plugin (code review please?)

2006-10-31 Thread John Rudd
Stuart Johnston wrote: John Rudd wrote: Stuart Johnston wrote: John Rudd wrote: 2) This sort of replaces the other set of rules I created, that did this with metarules instead of a plugin. This made some of the checks less useful. You probably don't need to use both methods. So, what i

Re: Relay Checker Plugin (code review please?)

2006-10-31 Thread Stuart Johnston
John Rudd wrote: Stuart Johnston wrote: John Rudd wrote: 2) This sort of replaces the other set of rules I created, that did this with metarules instead of a plugin. This made some of the checks less useful. You probably don't need to use both methods. So, what is the point of doing thi

Re: Relay Checker Plugin (code review please?)

2006-10-31 Thread John Rudd
Stuart Johnston wrote: John Rudd wrote: 2) This sort of replaces the other set of rules I created, that did this with metarules instead of a plugin. This made some of the checks less useful. You probably don't need to use both methods. So, what is the point of doing this as a plugin inst

Re: Relay Checker Plugin (code review please?)

2006-10-31 Thread Stuart Johnston
John Rudd wrote: 2) This sort of replaces the other set of rules I created, that did this with metarules instead of a plugin. This made some of the checks less useful. You probably don't need to use both methods. So, what is the point of doing this as a plugin instead of using existing ru

Re: Relay Checker Plugin (code review please?)

2006-10-31 Thread Matthew Newton
Hi, On Mon, Oct 30, 2006 at 03:23:21PM -0800, John Rudd wrote: > I've written a plugin for Spam Assassin that does the relay checks I ...and here was me just working out how to get exim to check this, and have SpamAssassin add a score, and your mail arrived :-) > 1) no RDNS for the machines tha

Re: Relay Checker Plugin (code review please?)

2006-10-31 Thread Rick Macdougall
John Rudd wrote: Rick Macdougall wrote: John Rudd wrote: Hi, Right off the bat I've disabled it. It, of course, hits on all mail my local users send. That's not really acceptable in an ISP situation so I've turned it off until tomorrow when I have the time to look at the code and see i

Re: Relay Checker Plugin (code review please?)

2006-10-30 Thread John Rudd
Rick Macdougall wrote: John Rudd wrote: I've written a plugin for Spam Assassin that does the relay checks I used to do in MimeDefang. The purpose of these checks is to try to identify those messages that are likely to be coming directly (with no intermediary mail server) from a zombie-bot,

Re: Relay Checker Plugin (code review please?)

2006-10-30 Thread Rick Macdougall
John Rudd wrote: I've written a plugin for Spam Assassin that does the relay checks I used to do in MimeDefang. The purpose of these checks is to try to identify those messages that are likely to be coming directly (with no intermediary mail server) from a zombie-bot, and are thus likely to

Re: Relay Checker Plugin (code review please?)

2006-10-30 Thread Rick Macdougall
John Rudd wrote: I've written a plugin for Spam Assassin that does the relay checks I used to do in MimeDefang. The purpose of these checks is to try to identify those messages that are likely to be coming directly (with no intermediary mail server) from a zombie-bot, and are thus likely to

Re: Relay Checker Plugin (code review please?)

2006-10-30 Thread John Rudd
Dylan Bouterse wrote: -Original Message- From: John Rudd [mailto:[EMAIL PROTECTED] Sent: Monday, October 30, 2006 6:23 PM To: SpamAssassin Users Subject: Relay Checker Plugin (code review please?) I've written a plugin for Spam Assassin that does the relay checks I used to do in Mim

RE: Relay Checker Plugin (code review please?)

2006-10-30 Thread Dylan Bouterse
-Original Message- From: John Rudd [mailto:[EMAIL PROTECTED] Sent: Monday, October 30, 2006 6:23 PM To: SpamAssassin Users Subject: Relay Checker Plugin (code review please?) I've written a plugin for Spam Assassin that does the relay checks I used to do in MimeDefang. The purpose of

Re: relay distance and spam [was xxxl spam]

2006-04-11 Thread Mark Martinec
On Tuesday April 11 2006 23:17, Kelson wrote: > mouss wrote: > > - multiple "internal" hops at either sender or receiver (I have N > > Received headers added by my own MTA. and for mail fetched from an MSP, > > there are still more). > > Actually, if I'm reading this right, it's the number of I

RE: relay distance and spam [was xxxl spam]

2006-04-11 Thread Matthew.van.Eerde
Kelson wrote: > Actually, if I'm reading this right, it's the number of IP hops > between the sending server and the receiving server -- in other > words, how many lines you'd see if you were on the receiving server > and ran traceroute to the sending MTA. Ah... that makes much more sense :) --

Re: relay distance and spam [was xxxl spam]

2006-04-11 Thread Mathias Homann
Am Dienstag, 11. April 2006 22:28 schrieb mouss: > [EMAIL PROTECTED] wrote: > > mouss wrote: > >> I would conjecture that most legitimate mail has two "real" hops > >> (the sending MTA and the receiving MTA). > > > > That would be one hop. > > depends on how you count: > > MUA -> my MTA1 -> y

Re: relay distance and spam [was xxxl spam]

2006-04-11 Thread Kelson
mouss wrote: - multiple "internal" hops at either sender or receiver (I have N Received headers added by my own MTA. and for mail fetched from an MSP, there are still more). Actually, if I'm reading this right, it's the number of IP hops between the sending server and the receiving server -

Re: relay distance and spam [was xxxl spam]

2006-04-11 Thread mouss
[EMAIL PROTECTED] wrote: mouss wrote: I would conjecture that most legitimate mail has two "real" hops (the sending MTA and the receiving MTA). That would be one hop. depends on how you count: MUA -> my MTA1 -> your MTA -> your mailbox that's two MTAs, so that's two hops. I prefe

RE: relay distance and spam [was xxxl spam]

2006-04-11 Thread Matthew.van.Eerde
mouss wrote: > I would conjecture that most legitimate mail has two "real" hops (the > sending MTA and the receiving MTA). That would be one hop.

RE: Relay Country

2005-02-04 Thread Sander Holthaus - Orange XL
> What does one need to do to activate the relay country tests? > We have the CPAN module installed and added this line to local.cf > > loadplugin Mail::SpamAssassin::Plugin::RelayCountry > > Do we need to add any scores or tests? > > We are not yet seeing any evidence that the test is bein

Re: Relay Country

2005-02-04 Thread Alex S Moore
Jeff Koch wrote: What does one need to do to activate the relay country tests? We have the CPAN module installed and added this line to local.cf loadplugin Mail::SpamAssassin::Plugin::RelayCountry I do not use that plugin, but I would uncomment the entry in init.pre and not touch local.cf.