i will just report spamassassin trunc breaks amavisd-new

2023-08-05 Thread Benny Pedersen
going back to 3.4.6 as now until 4.0.1 is released, in amavisd logs hits is always - with imho means spamtest is skipped, can you verify sa trunk does work still with amavisd ?

Re: amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread hg user
ser wrote: > >> >I did investigate a bit and was able to link spikes in emails received > on > >> >the external MTAs to spikes in messages queued in amavisd. > >> > > >> >As soon as I receive a mailing list/newsletter kind of email addressed > to >

Re: amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread Matus UHLAR - fantomas
On 28.06.19 12:03, hg user wrote: >I did investigate a bit and was able to link spikes in emails received on >the external MTAs to spikes in messages queued in amavisd. > >As soon as I receive a mailing list/newsletter kind of email addressed to >several hundreds recipients and t

Re: amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread Henrik K
On Fri, Jun 28, 2019 at 12:03:23PM +0200, hg user wrote: > > A message I was able to isolate is 94kb, has text and html part and processing > via command line takes about 6 seconds, I received 500+ of them. Due to > unsubscribe urls containing the mail address, all messages have different > hashes

Re: amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread Henrik K
On Fri, Jun 28, 2019 at 01:23:38PM +0200, Matus UHLAR - fantomas wrote: > On 28.06.19 12:03, hg user wrote: > >I did investigate a bit and was able to link spikes in emails received on > >the external MTAs to spikes in messages queued in amavisd. > > > >As soon

Re: amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread Matus UHLAR - fantomas
On 28.06.19 12:03, hg user wrote: I did investigate a bit and was able to link spikes in emails received on the external MTAs to spikes in messages queued in amavisd. As soon as I receive a mailing list/newsletter kind of email addressed to several hundreds recipients and the message size is

Re: amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread hg user
I did investigate a bit and was able to link spikes in emails received on the external MTAs to spikes in messages queued in amavisd. As soon as I receive a mailing list/newsletter kind of email addressed to several hundreds recipients and the message size is more than 70kb, the messages starts to

Re: amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread Matus UHLAR - fantomas
On Fri, Jun 28, 2019 at 10:49 AM hg user wrote: I'm not able to lower cpu usage of amavisd. 4 cpus are used 100% and messages queue up to 15 minutes before being processed. mailq reports up to 470 queued messages... and this is bad, really bad. The most part of SA work is spent

Re: amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread Dominic Raferd
On Fri, 28 Jun 2019 at 09:56, hg user wrote: > Messages reported by mailq decreased to about 370 and then, in a few > seconds, to 0... from 370 to 0 in a few seconds... > > > > On Fri, Jun 28, 2019 at 10:49 AM hg user wrote: > >> I'm not able to lower cpu usag

Re: amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread hg user
Messages reported by mailq decreased to about 370 and then, in a few seconds, to 0... from 370 to 0 in a few seconds... On Fri, Jun 28, 2019 at 10:49 AM hg user wrote: > I'm not able to lower cpu usage of amavisd. > 4 cpus are used 100% and messages queue up to 15 minutes b

amavisd 100% cpu load - 470 queued messages...

2019-06-28 Thread hg user
I'm not able to lower cpu usage of amavisd. 4 cpus are used 100% and messages queue up to 15 minutes before being processed. mailq reports up to 470 queued messages... and this is bad, really bad. The most part of SA work is spent here: tests_pri_0: 7371 (93.7%) and I know that prior

Re: Debian 8: Postfix -> amavisd-new -> spamassassin -> Bayes : not scanning?

2017-07-10 Thread Frantisek Rysanek
On 10 Jul 2017 at 16:56, RW wrote: > > On Mon, 10 Jul 2017 14:48:29 +0200 > Frantisek Rysanek wrote: > > > Dear fellow Debian users, > > > > it seems that I've found the correct answer. > > > > In /etc/spamassassin/local.cf, > > in addition to the aforementioned: > > use_bayes 1 > > bayes_a

Re: Debian 8: Postfix -> amavisd-new -> spamassassin -> Bayes : not scanning?

2017-07-10 Thread Frantisek Rysanek
already knew that Amavis was really a Perl script. The Perl interpreter probably gets called using the #! shell specification on the first line in /usr/sbin/amavisd-new . You betcha. >From there, the workaround is simple. But ... OOPS! I probably shouldn't tell anyone :-> Still... I don'

Re: Debian 8: Postfix -> amavisd-new -> spamassassin -> Bayes : not scanning?

2017-07-10 Thread RW
On Mon, 10 Jul 2017 14:48:29 +0200 Frantisek Rysanek wrote: > Dear fellow Debian users, > > it seems that I've found the correct answer. > > In /etc/spamassassin/local.cf, > in addition to the aforementioned: > use_bayes 1 > bayes_auto_learn 1 > I have added: > > use_bayes_rules 1 > > F

Re: Debian 8: Postfix -> amavisd-new -> spamassassin -> Bayes : not scanning?

2017-07-10 Thread Frantisek Rysanek
tc/amavis/conf.d/50-user , I have the following: > > $DO_SYSLOG = 0; > $LOGFILE = "/var/log/amavis.log"; > $sa_tag_level_deflt = -; # always add spam info headers > > $log_level = 1; > $sa_debug = 1; > > I've also tried log_level = 2, which showed me

Debian 8: Postfix -> amavisd-new -> spamassassin -> Bayes : not scanning?

2017-07-09 Thread Frantisek Rysanek
's handled too. I'm getting *some* notes about the Bayes plugin in the amavis log: Jul 9 21:25:54 mail.x.y.z /usr/sbin/amavisd-new[8868]: (08868-01) SA dbg: bayes: tie-ing to DB file R/O /var/lib/spamassassin/.spamassassin/bayes_toks Jul 9 21:25:54 mail.x.y.z /usr/sbin/amavisd-new[88

Re: Spamassassin and amavisd-new wont' check (faked) bounce with zip-archive/exe (maleware)

2015-10-29 Thread Martin Gregorie
On Mon, 2015-10-26 at 13:09 +0100, Django[BOfH] wrote: > Hello list, dear Marc! > > I had have a "little problem" with a mailsystem. > > A few days agoe a colleague received over 200 bounce-messages and > this > over 10 minutes. O.K., that was all backscatter from a software > -company > in Redmo

Re: Spamassassin and amavisd-new wont' check (faked) bounce with zip-archive/exe (maleware)

2015-10-27 Thread Matus UHLAR - fantomas
On 26.10.15 13:09, Django [BOfH] wrote: Hello list, dear Marc! correction: Helo spamassassn-users list - it has nothing to do with attachment or virus scanning. you should have contacted amavisd-new list http://lists.amavis.org/cgi-bin/mailman/listinfo/amavis-users So I tried to understand

Re: Spamassassin and amavisd-new wont' check (faked) bounce with zip-archive/exe (maleware)

2015-10-26 Thread John Hardin
On Mon, 26 Oct 2015, Django [BOfH] wrote: A few days agoe a colleague received over 200 bounce-messages and this over 10 minutes. O.K., that was all backscatter from a software-company in Redmond :( All those messages had have an attachment (zip archive) with maleware. http://impsec.org/email-

Spamassassin and amavisd-new wont' check (faked) bounce with zip-archive/exe (maleware)

2015-10-26 Thread Django [BOfH]
tp://sourceforge.net/p/amavis/mailman/amavis-user/thread/201010051713. 38050.ste...@localside.net/ and http://www.ijs.si/software/amavisd/ " ... bounce killer feature (requires pen pals SQL logging) checks a header section attached to received non-delivery status notifications, and discar

Re: First start with Spamassassin Debian 7 wheezy postfix and dovecot amavisd

2015-01-10 Thread Matus UHLAR - fantomas
job. sa-learn is nice, but it does not work with dovecots mdbox, does dovecot's antispam plugin (http://wiki2.dovecot.org/Plugins/Antispam) work with amavisd? I would start searching here... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receiv

Re: First start with Spamassassin Debian 7 wheezy postfix and dovecot amavisd

2015-01-10 Thread RW
gt; fail -> had to trigger amavis to do the job. > ... > spamassassin configuration files reside in /et/spamassassin/ so I > think I have to do the configuration here, why do I have to repeat > configuration in amavis?!? http://www.ijs.si/software/amavisd/#faq-spam > Okay, h

First start with Spamassassin Debian 7 wheezy postfix and dovecot amavisd

2015-01-09 Thread Steffen Mutter
Hi, I just started fiddling around with spamassassin, very good software but a high level of complexity. Already run into several problems because mail headers were not rewritten and whitelisting of mails did fail -> had to trigger amavis to do the job. sa-learn is nice, but it does not work

Re: Fake amavisd-new header lines in recent spam

2014-11-10 Thread Axb
On 11/10/2014 09:01 AM, Rich Wales wrote: /do we have your permission to add this rule to SA's masscheck / autopromoting ?/ Yes, by all means, go ahead. Thanks, Commited to http://svn.apache.org/repos/asf/spamassassin/trunk/rulesrc/sandbox/emailed/sa_users_contrib.cf masscheck results w

Re: Fake amavisd-new header lines in recent spam

2014-11-10 Thread Rich Wales
> /do we have your permission to add this rule to SA's masscheck / > autopromoting ?/ Yes, by all means, go ahead. -- *Rich Wales* ri...@richw.org

Re: Fake amavisd-new header lines in recent spam

2014-11-09 Thread Axb
o "from" clause*. A valid "Received:" line from an amavisd-new scan will always have a "from" clause -- and further, I believe a valid "from" clause from amavisd-new will always reference "localhost". * The "Received:"

Re: Fake amavisd-new header lines in recent spam

2014-11-09 Thread Rich Wales
header lines, such as the following: * There is an *extraneous semicolon* before the "for" clause. There should be only one semicolon in a "Received:" line -- namely, the one just before the date/time stamp. * There is *no "from" clause*. A valid "Rece

RE: Fake amavisd-new header lines in recent spam

2014-11-09 Thread Marieke Janssen
>Yeah they tried a similar trick with MailScanner years ago, basically dont >trust someone elses mail to tell the truth as per usual You are right about trust, but in this case we can detect fake amavis-headers and score bigtime in a safe way. And from what I can tell from my logs it hits

Re: Fake amavisd-new header lines in recent spam

2014-11-09 Thread Martin Hepworth
Yeah they tried a similar trick with MailScanner years ago, basically dont trust someone elses mail to tell the truth as per usual On Sunday, 9 November 2014, Marieke Janssen wrote: > >hitting like crazy and safe > > Confirmed, thank you. > > /MJ > > -- -- Martin Hepworth, CISSP Oxford, UK

RE: Fake amavisd-new header lines in recent spam

2014-11-09 Thread Marieke Janssen
>hitting like crazy and safe Confirmed, thank you. /MJ

Re: Fake amavisd-new header lines in recent spam

2014-11-09 Thread Axb
On 11/09/2014 06:59 PM, Axb wrote: On 11/09/2014 06:45 PM, Rich Wales wrote: Hi. Recently, I've noticed that some spam arriving on my mail server contains a "Received:" header line citing amavisd-new -- possibly an attempt to trick spam filters into concluding the message h

Re: Fake amavisd-new header lines in recent spam

2014-11-09 Thread Axb
On 11/09/2014 06:45 PM, Rich Wales wrote: Hi. Recently, I've noticed that some spam arriving on my mail server contains a "Received:" header line citing amavisd-new -- possibly an attempt to trick spam filters into concluding the message has already been scanned and is pre

Fake amavisd-new header lines in recent spam

2014-11-09 Thread Rich Wales
Hi. Recently, I've noticed that some spam arriving on my mail server contains a "Received:" header line citing amavisd-new -- possibly an attempt to trick spam filters into concluding the message has already been scanned and is presumably free of problems. Here is an example

Re: AWL in SQL with amavisd-new

2014-06-26 Thread ML mail
and this works fine/reliabily? incorrect question, incorrect answer :=) the username in awl is the unix running user, not email addresses, therefor amavisd is single user pr default, if you like to chain it to be fully virtual you must ask more qestions here on how spamd/spamc works first the awl use

Re: AWL in SQL with amavisd-new

2014-06-26 Thread Benny Pedersen
awl is the unix running user, not email addresses, therefor amavisd is single user pr default, if you like to chain it to be fully virtual you must ask more qestions here on how spamd/spamc works first the awl user must be mapped to email before it can be used as virtual user i am lost aswell

Re: AWL in SQL with amavisd-new

2014-06-26 Thread Benny Pedersen
Kevin A. McGrail skrev den 2014-06-26 16:34: But the reason I'm posting is that many servers run sitewide AWL without issue. Why do you feel it is useless? multi recipient is handled better in amavisd-new, but its not very well dokumented, if you always just get single recipient spam

Re: AWL in SQL with amavisd-new

2014-06-26 Thread RW
On Thu, 26 Jun 2014 07:42:50 -0700 ML mail wrote: > Ok so if I understand you correctly you are saying that it is > possible to use AWL as site-wide having just one part of the e-mail > exchange (the "To:" field) and this works fine/reliabily? To: isn't relevant, you either have site-wide or per

Re: AWL in SQL with amavisd-new

2014-06-26 Thread ML mail
wrote: I am using the auto-whitelist feature of SpamAssassin stored into a PostgreSQL database. It works fine but I have got one issue: as I am calling SA from amavisd-new, the username stored in the AWL SQL table is always "amavis". Now this renders my AWL useless as the username sh

Re: AWL in SQL with amavisd-new

2014-06-26 Thread Kevin A. McGrail
On 6/26/2014 10:31 AM, ML mail wrote: I am using the auto-whitelist feature of SpamAssassin stored into a PostgreSQL database. It works fine but I have got one issue: as I am calling SA from amavisd-new, the username stored in the AWL SQL table is always "amavis". Now this rend

AWL in SQL with amavisd-new

2014-06-26 Thread ML mail
Hi, I am using the auto-whitelist feature of SpamAssassin stored into a PostgreSQL database. It works fine but I have got one issue: as I am calling SA from amavisd-new, the username stored in the AWL SQL table is always "amavis". Now this renders my AWL useless as the username shoul

Re: SpamAssassin with Amavisd-new

2013-07-14 Thread Benny Pedersen
Timothy Murphy skrev den 2013-07-12 15:09: I have Postfix/Dovecot running on my CentOS-6.4 server, and I'm trying to add SpamAssassin through Amavisd. I have followed meticulously the instructions in <http://wiki.centos.org/HowTos/Amavisd>. see "2. Installation" As far a

Re: SpamAssassin with Amavisd-new

2013-07-12 Thread Bowie Bailey
On 7/12/2013 9:09 AM, Timothy Murphy wrote: I have Postfix/Dovecot running on my CentOS-6.4 server, and I'm trying to add SpamAssassin through Amavisd. I have followed meticulously the instructions in <http://wiki.centos.org/HowTos/Amavisd>. As far as I can tell, amavisd and clamav

Re: SpamAssassin with Amavisd-new

2013-07-12 Thread Dejan Doder
please send logs to see what is happening BR DEJan On Fri, Jul 12, 2013 at 3:09 PM, Timothy Murphy wrote: > I have Postfix/Dovecot running on my CentOS-6.4 server, > and I'm trying to add SpamAssassin through Amavisd. > I have followed meticulously the instructions in > <ht

Re: SpamAssassin with Amavisd-new

2013-07-12 Thread RW
On Fri, 12 Jul 2013 15:09:10 +0200 Timothy Murphy wrote: > I have Postfix/Dovecot running on my CentOS-6.4 server, > and I'm trying to add SpamAssassin through Amavisd. > I have followed meticulously the instructions in > <http://wiki.centos.org/HowTos/Amavisd>. > As

Re: SpamAssassin with Amavisd-new

2013-07-12 Thread Martin Gregorie
On Fri, 2013-07-12 at 15:09 +0200, Timothy Murphy wrote: > I have Postfix/Dovecot running on my CentOS-6.4 server, > and I'm trying to add SpamAssassin through Amavisd. > I have followed meticulously the instructions in > <http://wiki.centos.org/HowTos/Amavisd>. > As far

SpamAssassin with Amavisd-new

2013-07-12 Thread Timothy Murphy
I have Postfix/Dovecot running on my CentOS-6.4 server, and I'm trying to add SpamAssassin through Amavisd. I have followed meticulously the instructions in <http://wiki.centos.org/HowTos/Amavisd>. As far as I can tell, amavisd and clamav are running, as also is spamd. I have set o

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-12-03 Thread RW
On Mon, 3 Dec 2012 07:23:59 -0800 Gary Funck wrote: > Since this is a Spam Assassin list: Is there a way of disabling > grey listing, but still receiving some benefit from the principle > that mail received from a first time or infrequent sender should > be looked upon with some suspicion? Person

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-12-03 Thread Martin Gregorie
On Mon, 2012-12-03 at 07:27 -0800, Gary Funck wrote: > On 11/29/12 10:44:54, John Hardin wrote: > > You will probably want to put a little effort into maintaining lists > > of regular correspondents who can bypass greylisting. There may be > > tools to automate that, e.g. to whitelist someone a loc

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-12-03 Thread Martin Gregorie
On Mon, 2012-12-03 at 07:23 -0800, Gary Funck wrote: > Since this is a Spam Assassin list: Is there a way of disabling > grey listing, but still receiving some benefit from the principle > that mail received from a first time or infrequent sender should > be looked upon with some suspicion? > Yes.

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-12-03 Thread Matt
>> You will probably want to put a little effort into maintaining lists >> of regular correspondents who can bypass greylisting. There may be >> tools to automate that, e.g. to whitelist someone a local user has >> sent mail to. > > Has anyone looked into the use of a DNS-based white listing servic

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-12-03 Thread Matt
>> We greylist after the end of DATA. This wastes bandwidth, but lets us >> use the Subject: line as an additional mix in the greylisting tuple. >> This catches ratware that retries in the face of greylisting, but >> mutates the subject line with each retry. > We use grey listing on our low volum

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-12-03 Thread Gary Funck
On 11/29/12 10:44:54, John Hardin wrote: > You will probably want to put a little effort into maintaining lists > of regular correspondents who can bypass greylisting. There may be > tools to automate that, e.g. to whitelist someone a local user has > sent mail to. Has anyone looked into the use o

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-12-03 Thread Gary Funck
On 11/29/12 14:46:25, David F. Skoll wrote: > We greylist after the end of DATA. This wastes bandwidth, but lets us > use the Subject: line as an additional mix in the greylisting tuple. > This catches ratware that retries in the face of greylisting, but > mutates the subject line with each retry.

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Dave Warren
On 11/29/2012 18:54, David F. Skoll wrote: [My gut instinct says that a reasonable greylisting interval is too short for most DNSBLs to react. Pyzor/Razor/DCC may be somewhat more adept at reacting quickly.] Something trap-driven like NIX is a candidate. No, it's not safe enough to reject bas

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Dave Warren
On 11/29/2012 17:37, John Levine wrote: Does greylisting increase chances of bulk detectors (razor/pyzor/dcc) in case of "yahoo like" spam sources? No. A remarkable fraction of ratware still doesn't bother to retry, so the most simple minded greylister will deter them. That's why it's useful.

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread David F. Skoll
On Thu, 29 Nov 2012 18:01:38 -0800 (PST) John Hardin wrote: > It's not so much the host being blacklisted, as a checksum of the > spam being published by pyzor et. al., or for spamvertised websites > in the spam being published by URIBLs, so that when the sender tries > again the score for that m

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread John Hardin
On Thu, 30 Nov 2012, John Levine wrote: Does greylisting increase chances of bulk detectors (razor/pyzor/dcc) in case of "yahoo like" spam sources? No. A remarkable fraction of ratware still doesn't bother to retry, so the most simple minded greylister will deter them. That's why it's useful

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread John Levine
>Does greylisting increase chances of bulk detectors (razor/pyzor/dcc) in >case of "yahoo like" spam sources? No. A remarkable fraction of ratware still doesn't bother to retry, so the most simple minded greylister will deter them. That's why it's useful. I've never seen any support for the the

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread David F. Skoll
On Thu, 29 Nov 2012 22:47:45 +0100 Axb wrote: > boxes: About 50 000 > rcpt domains: About 2000 > rcpt users: Lots. I don't have an exact figure. > you guys are sending through greylisting. This is on our machines. Our larger customers have significantly higher numbers. Regards, David.

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread John Hardin
On Thu, 29 Nov 2012, David F. Skoll wrote: On Thu, 29 Nov 2012 21:27:19 +0100 "Andrzej A. Filip" wrote: Do you treat "yahoo like" spam sources in the same way? With respect to greylisting, of course. If a machine passes greylisting once, it's extremely likely to pass it in future and it's

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Axb
Just wondering how many boxes: rcpt domains: rcpt users: you guys are sending through greylisting. Axb

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Matt
>> I've never had any >> complaints about delivery speed, but some senders have broken mail >> servers that don't retry on receiving a temporary failure. > > Many such servers use broken SMTP implementations that can't handle > a 4xx code in response to RCPT properly. > > We greylist after the end

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread David F. Skoll
On Thu, 29 Nov 2012 21:59:45 +0100 "Andrzej A. Filip" wrote: > Does greylisting increase chances of bulk detectors (razor/pyzor/dcc) > in case of "yahoo like" spam sources? > [ based on your experience ] I suppose it might, but I don't use razor, pyzor, dcc or anything similar so I have no perso

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Andrzej A. Filip
On 11/29/2012 09:53 PM, David F. Skoll wrote: > On Thu, 29 Nov 2012 21:27:19 +0100 > "Andrzej A. Filip" wrote: > >> Do you treat "yahoo like" spam sources in the same way? > With respect to greylisting, of course. If a machine passes greylisting once, > it's extremely likely to pass it in future

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread David F. Skoll
On Thu, 29 Nov 2012 21:27:19 +0100 "Andrzej A. Filip" wrote: > Do you treat "yahoo like" spam sources in the same way? With respect to greylisting, of course. If a machine passes greylisting once, it's extremely likely to pass it in future and it's an utter waste of time to greylist it. Regard

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Andrzej A. Filip
On 11/29/2012 09:31 PM, Dave Warren wrote: > On 11/29/2012 12:27, Andrzej A. Filip wrote: >> On 11/29/2012 08:46 PM, David F. Skoll wrote: >>> [...] >>> Also, once a given IP passes greylisting, we remember that and we don't >>> greylist that server for 40 days. If you have a large-enough user >>>

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Robert Schetterer
Am 29.11.2012 20:46, schrieb David F. Skoll: > On Thu, 29 Nov 2012 14:36:45 -0500 > vec...@vectro.org wrote: > >> I've never had any >> complaints about delivery speed, but some senders have broken mail >> servers that don't retry on receiving a temporary failure. > > Many such servers use broken

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Dave Warren
On 11/29/2012 12:27, Andrzej A. Filip wrote: On 11/29/2012 08:46 PM, David F. Skoll wrote: [...] Also, once a given IP passes greylisting, we remember that and we don't greylist that server for 40 days. If you have a large-enough user population, this can greatly mitigate the problems caused by

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Andrzej A. Filip
On 11/29/2012 08:46 PM, David F. Skoll wrote: > [...] > Also, once a given IP passes greylisting, we remember that and we don't > greylist that server for 40 days. If you have a large-enough user population, > this can greatly mitigate the problems caused by initial greylisting delays. Do you trea

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread Dave Warren
On 11/29/2012 12:01, Ned Slider wrote: Indeed. But do also play around with the delays in postgrey (--delay). A minimal delay of 60 seconds is enough to force a retry and is adequate - legit hosts will retry, non-legit hosts won't so a longer delay is generally unnecessary. This is only one

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread Ned Slider
I'll expand a little on John's comments below On 29/11/12 18:44, John Hardin wrote: On Thu, 29 Nov 2012, Ed Flecko wrote: I'll be sure to check into Postgrey. Are there any special considerations to installing/configuring it or is it simply a matter of installing, reading the docs and configu

Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread David F. Skoll
On Thu, 29 Nov 2012 14:36:45 -0500 vec...@vectro.org wrote: > I've never had any > complaints about delivery speed, but some senders have broken mail > servers that don't retry on receiving a temporary failure. Many such servers use broken SMTP implementations that can't handle a 4xx code in resp

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread vectro
> From: "John Hardin" > I fully agree. When I purchase an air-line ticket, I want the mail > immediately in my inbox. > > If the greylisting software replies a "4xx Please come back in 299 > seconds", > the truth is that you will have to wait an undetermined amount of time, > depending on the send

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread Frederic De Mees
From: "John Hardin" Some users are extremely allergic to any delays in their email; you may have to maintain a list of exception destination addresses to keep them happy, or for addresses where no delay is acceptable, e.g. or I fully agree. When I purchase an air-line ticket, I want the

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread Ed Flecko
Good thoughts...thank you John. Ed

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread John Hardin
On Thu, 29 Nov 2012, Ed Flecko wrote: I'll be sure to check into Postgrey. Are there any special considerations to installing/configuring it or is it simply a matter of installing, reading the docs and configuring? The biggest consideration is not technical, it's managing the expectations of

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread Robert Schetterer
Am 29.11.2012 17:04, schrieb Ed Flecko: > Gentlemen, > Thank you for your feedback! > > I'll be sure to check into Postgrey. > > Are there any special considerations to installing/configuring it or > is it simply a matter of installing, reading the docs and configuring? > > Ed > yes dont do gr

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread Ed Flecko
Gentlemen, Thank you for your feedback! I'll be sure to check into Postgrey. Are there any special considerations to installing/configuring it or is it simply a matter of installing, reading the docs and configuring? Ed

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread Olivier Nicole
Ed, > I'm looking to set up a spam filtering server to replace our ISP's > spam filtering service. > > I've seen this tutorial ( > ftp://orn.mpg.de/pub/unix/mail/Fairly-Secure_Anti-SPAM_Gateway_Using_SpamAssassin.html#antivirus > ) and I'd be very interested in YOUR opinion; do you think, > fundam

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-28 Thread Ned Slider
7;ll probably be using FreeBSD. Thank you for your input! :-) Ed I use Postfix with Amavisd-new which allows SpamAssassin and Clam-AV to be easily integrated. I also use Postgrey for greylisting. I find this setup very flexible and efficient. Clam-AV doesn't catch a huge amount on

"Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-28 Thread Ed Flecko
I'm looking to set up a spam filtering server to replace our ISP's spam filtering service. I've seen this tutorial ( ftp://orn.mpg.de/pub/unix/mail/Fairly-Secure_Anti-SPAM_Gateway_Using_SpamAssassin.html#antivirus ) and I'd be very interested in YOUR opinion; do you think, fundamentally, a server

Re: setup spamassassin without amavisd

2012-07-09 Thread Henrik K
On Mon, Jul 09, 2012 at 11:29:08AM -0400, Bowie Bailey wrote: > On 7/9/2012 5:42 AM, Benny Pedersen wrote: > > Den 2012-07-09 08:06, Henrik K skrev: > > > >> I just ditch main.cld which seems pointless, I think it saved > >> something like > >> 40-50MB. If there are actually ever any new "viruses

Re: setup spamassassin without amavisd

2012-07-09 Thread Bowie Bailey
On 7/9/2012 5:42 AM, Benny Pedersen wrote: > Den 2012-07-09 08:06, Henrik K skrev: > >> I just ditch main.cld which seems pointless, I think it saved >> something like >> 40-50MB. If there are actually ever any new "viruses", daily.cld >> should >> catch them. With this and most 3rd party sigs,

Re: setup spamassassin without amavisd

2012-07-09 Thread Benny Pedersen
Den 2012-07-09 08:06, Henrik K skrev: I just ditch main.cld which seems pointless, I think it saved something like 40-50MB. If there are actually ever any new "viruses", daily.cld should catch them. With this and most 3rd party sigs, clamd is only 80MB RSS. so you think that virus that are

Re: setup spamassassin without amavisd

2012-07-09 Thread Per Jessen
David Kentwood wrote: > Hi, > > I want to setup spamassassin + clamav + postfix. Many internet guides > use Amavisd to integrate them together. However, my vps has only 516mb > ram so I don't want to install Amavisd unless it's really recommended. > So would the s

Re: setup spamassassin without amavisd

2012-07-09 Thread David Kentwood
Thank you all for your replies. I have carefully considered all of your suggestions and decided to try the Amavisd setup. According to some suggestions here and various online sources, Amavisd is fast, scalable, easy to use and highly configurable. It loads up without spamd, and can handles spam

Re: Perl, fork, and copy-on-write (was Re: setup spamassassin without amavisd)

2012-07-09 Thread Henrik K
On Mon, Jul 09, 2012 at 04:06:48AM -0400, David F. Skoll wrote: > On Mon, 9 Jul 2012 09:06:39 +0300 > Henrik K wrote: > > > You can easily run many children since amavisd or spamd forks are > > copy-on-writed pretty well. So only extra memory used is the per > > s

Perl, fork, and copy-on-write (was Re: setup spamassassin without amavisd)

2012-07-09 Thread David F. Skoll
On Mon, 9 Jul 2012 09:06:39 +0300 Henrik K wrote: > You can easily run many children since amavisd or spamd forks are > copy-on-writed pretty well. So only extra memory used is the per > scan state and file data etc. Have you actually measured this? My experience is that forked Perl

Re: setup spamassassin without amavisd

2012-07-08 Thread Henrik K
On Sun, Jul 08, 2012 at 04:40:31PM -0500, Dave Funk wrote: > >On 07/08/2012 12:49 PM, David Kentwood wrote: > >>Hi, > >> > >>I want to setup spamassassin + clamav + postfix. Many internet guides use > >>Amavisd to integrate them together. However, my vps

Re: setup spamassassin without amavisd

2012-07-08 Thread Dave Funk
On 07/08/2012 12:49 PM, David Kentwood wrote: Hi, I want to setup spamassassin + clamav + postfix. Many internet guides use Amavisd to integrate them together. However, my vps has only 516mb ram so I don't want to install Amavisd unless it's really recommended. So would the setup

Re: setup spamassassin without amavisd

2012-07-08 Thread Benny Pedersen
Den 2012-07-08 12:49, David Kentwood skrev: I want to setup spamassassin + clamav + postfix. good choice Many internet guides use Amavisd to integrate them together. this is the most common setup, it does not mean there is not any other options However, my vps has only 516mb i have

Re: setup spamassassin without amavisd

2012-07-08 Thread Martin Gregorie
On Sun, 2012-07-08 at 06:49 -0400, David Kentwood wrote: > Hi, > > I want to setup spamassassin + clamav + postfix. Many internet guides use > Amavisd to integrate them together. However, my vps has only 516mb ram > You don't say what your mail volume is, but until recently I

Re: setup spamassassin without amavisd

2012-07-08 Thread Frederic De Mees
From: "Jari Fredriksson" On Sun, July 8, 2012 13:49, David Kentwood wrote: Hi, I want to setup spamassassin + clamav + postfix. Many internet guides use Amavisd to integrate them together. However, my vps has only 516mb ram so I don't want to install Amavisd unless it's re

Re: setup spamassassin without amavisd

2012-07-08 Thread Jari Fredriksson
On Sun, July 8, 2012 13:49, David Kentwood wrote: > Hi, > > I want to setup spamassassin + clamav + postfix. Many internet guides use > Amavisd to integrate them together. However, my vps has only 516mb ram so > I > don't want to install Amavisd unless it's really recom

Re: setup spamassassin without amavisd

2012-07-08 Thread Axb
On 07/08/2012 12:49 PM, David Kentwood wrote: Hi, I want to setup spamassassin + clamav + postfix. Many internet guides use Amavisd to integrate them together. However, my vps has only 516mb ram so I don't want to install Amavisd unless it's really recommended. So would the setup

setup spamassassin without amavisd

2012-07-08 Thread David Kentwood
Hi, I want to setup spamassassin + clamav + postfix. Many internet guides use Amavisd to integrate them together. However, my vps has only 516mb ram so I don't want to install Amavisd unless it's really recommended. So would the setup work well without using Amavisd? Would you recom

Re: anti virus EICAR file is not detected by the couple clamd amavisd

2011-07-05 Thread Karsten Bräckelmann
On Wed, 2011-07-06 at 00:53 +0200, Benny Pedersen wrote: > On Wed, 06 Jul 2011 00:38:46 +0200, Karsten Bräckelmann wrote: > > > And the SA users list shouldn't have been included in the first place, > > don't you think? > > first off all, welcome back Karsten :) Heh, thanks. :) Never been off t

Re: anti virus EICAR file is not detected by the couple clamd amavisd

2011-07-05 Thread Benny Pedersen
lugin, and visa versa amavisd-new into a spam scanner without the help of spamassassin, its mostly how windows 7 uses gigabyte ram and not just megabyte fun aside from me now, be free dont use windows

Re: anti virus EICAR file is not detected by the couple clamd amavisd

2011-07-05 Thread Karsten Bräckelmann
On Tue, 2011-07-05 at 21:15 +0200, m...@smtp.fakessh.eu wrote: > in my station > anti virus EICAR file is not detected by the couple clamd amavisd ^^ > > all testimonials are welcome Oh, sure... Naughty boy. Bad cross-p

Re: anti virus EICAR file is not detected by the couple clamd amavisd

2011-07-05 Thread Michael Scheidell
On 7/5/11 3:15 PM, m...@smtp.fakessh.eu wrote: hi folks in my station anti virus EICAR file is not detected by the couple clamd amavisd all testimonials are welcome works fine here. you must be doing something wrong. find out what you are doing wrong and it will work. -- Michael

  1   2   3   4   >