Re: White List From RCVD

2008-12-12 Thread mouss
Asif Iqbal a écrit : > On Thu, Dec 11, 2008 at 8:09 PM, LuKreme wrote: >> On 11-Dec-2008, at 11:51, Asif Iqbal wrote: >>> whitelist_from_rcvd joe.sm...@here.com qtdenexmbm24.AD.HERE.COM >> Really here.com? The here.com that is registered to Network Solutions? Or >> are you making up d

Re: White List From RCVD

2008-12-12 Thread LuKreme
On 11-Dec-2008, at 19:47, Asif Iqbal wrote: I did not know `example.tld' is reserved for documentation. Example.com is reserved (along with example.org .net, and most non- country tlds). However, since often, especially when talking about mailing systems, you need to talk about several dif

Re: (newbie question) Increasing SA effectiveness

2008-12-12 Thread Marcin Krol
Karsten Bräckelmann wrote: Well, isn't it better to use them before SA, provided your MTA does have this feature (I recommend Exim to everyone)? No -- unless you ultimately trust the RBL to produce a *negligible* amount of FPs. Every single RBL does have FPs to a highly variable degree. Instead

Re: (newbie question) Increasing SA effectiveness

2008-12-12 Thread Marcin Krol
John Hardin wrote: On Thu, 11 Dec 2008, Karsten Br�ckelmann wrote: I still recommend initial training, to give Bayes a good kick-start. Initial _manual_ training. Define manual: manual picking out spams is plain too labor-intensive. If we redefine "manual" to mean ham coming from authentic

Spamtraps (was: Increasing SA effectiveness)

2008-12-12 Thread Marcin Krol
Henrik K wrote: sure there's other useful stuff you can do with spamtrap mails too. Unfortunately it takes a lot of effort to create *good* spamtraps. Yep. It's just too much trouble for a normal admin, I leave it to those who have time on their hands. You can do the simple grep for "mistyp

Help with custom rule

2008-12-12 Thread R.Smits
Hello, Can someone please tell me if this is possible ? header __RULE1_01 From =~ /domain\.com/i header __RULE2_02 Reply-To !~ /domain\.com/i meta RULE03 (__RULE1_01 && __RULE2_02) score RULE03 0.01 So can the : !~ be used in a header rule ? I have never tried it before Greetings ... Rich

Re: Help with custom rule

2008-12-12 Thread Yet Another Ninja
On 12/12/2008 11:54 AM, R.Smits wrote: Hello, Can someone please tell me if this is possible ? header __RULE1_01 From =~ /domain\.com/i header __RULE2_02 Reply-To !~ /domain\.com/i meta RULE03 (__RULE1_01 && __RULE2_02) score RULE03 0.01 So can the : !~ be used in a header rule ? afaik, nope

Re: sought rules updates

2008-12-12 Thread Kevin Golding
In article , LuKreme writes >The gpg installed on my FreeBSD does not have a man page (installed by >ports for SA3.2.5, IIRC), just a --help which says the syntax is: Logically you have security/gnupg installed which means... %ls -l /usr/local/bin/gpg* lrwxr-xr-x 1 root wheel 4 Oct 15

Re: Spamtraps (was: Increasing SA effectiveness)

2008-12-12 Thread Kai Schaetzl
Marcin Krol wrote on Fri, 12 Dec 2008 10:43:57 +0100: > posted spamtraps to Usenet some 6 months ago and I > still get very little spam caught in spamtraps. you will have to exclude them from RBL blocking, of course ;-) I have one Usenet spamtrap that is getting a lot of spam, although it hasn

Re: sought rules updates

2008-12-12 Thread Kai Schaetzl
My god, let it go, please! Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: (newbie question) Increasing SA effectiveness

2008-12-12 Thread Kai Schaetzl
Marcin Krol wrote on Fri, 12 Dec 2008 10:37:31 +0100: > Define manual: manual picking out spams is plain too labor-intensive. If > we redefine "manual" to mean ham coming from authenticated mail, and > spam coming from spamtraps, I wholeheartedly agree. The point is that you need to have a corp

Spamtraps - how to ?

2008-12-12 Thread sebast...@debianfan.de
Hello, in one topic in the past - some users had an discussion about spamtraps. Is there any chance to get a "how to start a spamtrap with spamassassin" ? thx Sebastian

Re: Help with custom rule

2008-12-12 Thread R.Smits
Yet Another Ninja wrote: > On 12/12/2008 11:54 AM, R.Smits wrote: >> Hello, >> >> Can someone please tell me if this is possible ? >> >> header __RULE1_01 From =~ /domain\.com/i >> header __RULE2_02 Reply-To !~ /domain\.com/i >> meta RULE03 (__RULE1_01 && __RULE2_02) >> score RULE03 0.01 >> >> So c

Re: Help with custom rule

2008-12-12 Thread McDonald, Dan
On Fri, 2008-12-12 at 13:24 +0100, R.Smits wrote: > Yet Another Ninja wrote: > > On 12/12/2008 11:54 AM, R.Smits wrote: > >> Hello, > >> > >> Can someone please tell me if this is possible ? > >> > >> header __RULE1_01 From =~ /domain\.com/i > >> header __RULE2_02 Reply-To !~ /domain\.com/i > >> me

Re: Spamtraps

2008-12-12 Thread Ned Slider
Marcin Krol wrote: Henrik K wrote: sure there's other useful stuff you can do with spamtrap mails too. Unfortunately it takes a lot of effort to create *good* spamtraps. Yep. It's just too much trouble for a normal admin, I leave it to those who have time on their hands. You can do the sim

Re: Spamtraps - how to ?

2008-12-12 Thread Ned Slider
sebast...@debianfan.de wrote: Hello, in one topic in the past - some users had an discussion about spamtraps. Is there any chance to get a "how to start a spamtrap with spamassassin" ? thx Sebastian Here's one approach: http://blog.rompe.org/How_to_configure_spamassassin_to_use_an_inexist

Re: White List From RCVD

2008-12-12 Thread Asif Iqbal
On Fri, Dec 12, 2008 at 3:00 AM, mouss wrote: > Asif Iqbal a écrit : >> On Thu, Dec 11, 2008 at 8:09 PM, LuKreme wrote: >>> On 11-Dec-2008, at 11:51, Asif Iqbal wrote: whitelist_from_rcvd joe.sm...@here.com qtdenexmbm24.AD.HERE.COM >>> Really here.com? The here.com that is regist

Re: White List From RCVD

2008-12-12 Thread Asif Iqbal
On Fri, Dec 12, 2008 at 3:06 AM, LuKreme wrote: > On 11-Dec-2008, at 19:47, Asif Iqbal wrote: >> >> I did not know `example.tld' is reserved for documentation. > > > Example.com is reserved (along with example.org .net, and most non-country > tlds). However, since often, especially when talking a

sought rules update fails

2008-12-12 Thread Jan P. Kessler
Hi, sa-update currently fails with: http: request failed: 403 Forbidden: HTML 2.0//EN"> 403 Forbidden Forbidden You don't have permission to access /rules/stage/320725913.tar.gz on this server. Apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 PHP/5.2.4-2ubuntu5.3 with Suhosin-Patch mod_ssl/2.2.8 Ope

Re: (newbie question) Increasing SA effectiveness

2008-12-12 Thread John Hardin
On Fri, 12 Dec 2008, Marcin Krol wrote: John Hardin wrote: On Thu, 11 Dec 2008, Karsten Br�ckelmann wrote: > I still recommend initial training, to give Bayes a good kick-start. Initial _manual_ training. Define manual: manual picking out spams is plain too labor-intensive. Manual trai

Re: sought rules updates

2008-12-12 Thread Karsten Bräckelmann
On Thu, 2008-12-11 at 17:12 -0700, LuKreme wrote: > On 11-Dec-2008, at 14:29, Karsten Bräckelmann wrote: > I read a hell of a lot of stuff about all this, and have been running > SA since 2.mumble If you are a plug-n-play sysadmin, then no > problem. If you are already well-versed in the vag

Re: sought rules update fails

2008-12-12 Thread John Hardin
On Fri, 12 Dec 2008, Jan P. Kessler wrote: Hi, sa-update currently fails with: http: request failed: 403 Forbidden: 2.0//EN"> 403 Forbidden Forbidden You don't have permission to access /rules/stage/320725913.tar.gz on this server. Apache/2.2.8 (Ubuntu) DAV/2 SVN/1.4.6 PHP/5.2.4-2ubuntu5

FIXED: sought rules update fails

2008-12-12 Thread Jan P. Kessler
Karsten Bräckelmann schrieb: On Fri, 2008-12-12 at 15:03 +0100, Jan P. Kessler wrote: sa-update currently fails with: http: request failed: 403 Forbidden: [...] Any permission issues on yerp.org? Just tested, works for me. Did you try again? Jep, it's working now! Th

Re: sought rules update fails

2008-12-12 Thread Karsten Bräckelmann
On Fri, 2008-12-12 at 15:03 +0100, Jan P. Kessler wrote: > sa-update currently fails with: > > http: request failed: 403 Forbidden: [...] > Any permission issues on yerp.org? Just tested, works for me. Did you try again? -- char *t="\10pse\0r\0dtu...@ghno\x4e\xc8\x79\xf4\xab\x51\x8a\x10\xf4

Re: sought rules updates

2008-12-12 Thread LuKreme
On 12-Dec-2008, at 07:20, Karsten Bräckelmann wrote: If something doesn't work, please do at least think twice about the command that failed, *before* venting your broken syntax to the list. It wasn't *MY* broken syntax, that's the whole point. -- The other cats just think he's a tosser. -

Re: FIXED: sought rules update fails

2008-12-12 Thread McDonald, Dan
On Fri, 2008-12-12 at 15:32 +0100, Jan P. Kessler wrote: > Karsten Bräckelmann schrieb: > > On Fri, 2008-12-12 at 15:03 +0100, Jan P. Kessler wrote: > > > >> sa-update currently fails with: > >> > >> http: request failed: 403 Forbidden: [...] > >> > > > > > >> Any permission issues on y

Re: FIXED: sought rules update fails

2008-12-12 Thread John Hardin
On Fri, 12 Dec 2008, McDonald, Dan wrote: Just tested, works for me. Did you try again? Jep, it's working now! Thank you, JM! It's failing again Like I said, it appears to be a transient problem, possibly related to the publication schedule of rule updates. -- John Hardin KA7OHZ

Re: Spamtraps

2008-12-12 Thread mouss
Marcin Krol a écrit : > Henrik K wrote: > sure there's other useful stuff you can do with spamtrap mails too. >> >> Unfortunately it takes a lot of effort to create *good* spamtraps. > > Yep. > >> It's just >> too much trouble for a normal admin, I leave it to those who have time on >> their han

Re: Help with custom rule

2008-12-12 Thread Matt Kettler
Yet Another Ninja wrote: > On 12/12/2008 11:54 AM, R.Smits wrote: >> Hello, >> >> Can someone please tell me if this is possible ? >> >> header __RULE1_01 From =~ /domain\.com/i >> header __RULE2_02 Reply-To !~ /domain\.com/i >> meta RULE03 (__RULE1_01 && __RULE2_02) >> score RULE03 0.01 >> >> So c