Re: AWL ?

2015-12-23 Thread Robert Schetterer
n]$ > > hm looks like some stuff isnt fixed final Use of uninitialized value $msgscore in addition (+) at /usr/share/perl5/Mail/SpamAssassin/Plugin/TxRep.pm line 1415 i ve read some bug reports , any recent news to this ? Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys

Re: How to reject all mails with docs attached?

2016-02-01 Thread Robert Schetterer
.net/p/courier/mailman/message/4591641/ spamassassin ( never used it like this ) http://jrs-s.net/2013/06/14/block-common-trojans-in-spamassassin/ best is that clam will detect the problem Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerst

PDFInfo.pm line 418

2016-02-25 Thread Robert Schetterer
Hi ,does anyone know something about this ? Use of uninitialized value in lc at /usr/share/perl5/Mail/SpamAssassin/Plugin/PDFInfo.pm line 418 Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft

Re: PDFInfo.pm line 418

2016-02-26 Thread Robert Schetterer
Am 26.02.2016 um 09:24 schrieb Benning, Markus: > On 2016-02-26 08:59, Robert Schetterer wrote: >> Hi ,does anyone know something about this ? >> >> Use of uninitialized value in lc at >> /usr/share/perl5/Mail/SpamAssassin/Plugin/PDFInfo.pm line 418 > > Thats

Re: Rule to score word documents

2016-03-30 Thread Robert Schetterer
me extension. > > So the content type header may be "application/octet-stream" and totally > missing a 'name=' component but if there's also a Content-Disposition > header that has a 'filename=' component it will trigger file opening > behaivor. > >

Re: Integrating SpamAssassin With James Server 2.3.1

2016-04-17 Thread Robert Schetterer
out everything but still nothing. > > Thanks for looking at this. > > Regards. Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Integrating SpamAssassin With James Server 2.3.1

2016-04-17 Thread Robert Schetterer
Am 17.04.2016 um 14:23 schrieb RW: > On Sun, 17 Apr 2016 10:42:59 +0200 > Robert Schetterer wrote: > >> Am 17.04.2016 um 09:04 schrieb Benjamin Yeo: >>> Hi Guys. I've just downloaded the latest SpamAssassin and I want to >>> integrate with my mail server Ja

Re: spamass-milter: orphaned?

2016-06-01 Thread Robert Schetterer
r. Feel free to file issues or > pull requests there. If/when a spamass-milter project member takes an > interest, changes can be merged back into the official CVS repository. > > Andy > I think you dont have to worry, recent ,the work on spamass-milter is simply done Best

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-19 Thread Robert Schetterer
spamassassin have high "costs", so make sure to reject as most as possible by other stuff before pass to spamassassin. Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amts

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
hese days greylisting has lost his effectiveness widly, so depending on your server it makes no sense to use it anymore content filter like spamassassin are "expensive" always "try" to get them at a very last stage in you filter chain best practise configs can be found via google, the rest is looking at your logs and fix stuff in your filter chain when needed Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
it over years, if you use postscreen you will see greylisting rate will go down to a minimal need, however if done right you can still always combine both can we now return to spamassassin here and get that theme to the postfix list ? Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sy

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
Am 29.07.2016 um 20:45 schrieb Dianne Skoll: > On Fri, 29 Jul 2016 20:36:51 +0200 > Robert Schetterer wrote: > >> Am 29.07.2016 um 20:07 schrieb Dianne Skoll: >>> I don't agree. Greylisting done properly is very effective and has >>> minimal impact.

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
Am 29.07.2016 um 22:15 schrieb Dianne Skoll: > On Fri, 29 Jul 2016 21:13:56 +0200 > Robert Schetterer wrote: > >> so i.e measure mails tagged as spam by spamassassin >> with pure greylisting setup running before tagging ,perhaps for one >> week, then stop greylis

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
informative > > >> On Jul 29, 2016, at 1:28 PM, Robert Schetterer > <mailto:r...@sys4.de>> wrote: >> >> the subject Using Postfix and Postgrey - not scanning after hold >> does not match spamassassin list theme >> >> however no need to flame in any ca

Re: Using Postfix and Postgrey - not scanning after hold

2016-07-29 Thread Robert Schetterer
Am 29.07.2016 um 22:22 schrieb Dianne Skoll: > On Fri, 29 Jul 2016 22:21:04 +0200 > Robert Schetterer wrote: > >> now compare with pure postscreen > > I don't use postfix or postscreen. hm.. that does not fit the subject..why did you involved yourself ? All I

Re: Is greylisting effective? (was Re: Using Postfix and Postgrey - not scanning after hold)

2016-07-29 Thread Robert Schetterer
Am 30.07.2016 um 03:34 schrieb Reindl Harald: > > > Am 29.07.2016 um 22:48 schrieb Dianne Skoll: >> On Fri, 29 Jul 2016 22:39:15 +0200 >> Robert Schetterer wrote: >> >>>> I don't use postfix or postscreen. >>> hm.. that does not fit the subj

Re: Is greylisting effective? (was Re: Using Postfix and Postgrey - not scanning after hold)

2016-07-31 Thread Robert Schetterer
Am 30.07.2016 um 13:10 schrieb Kim Roar Foldøy Hauge: > On Sat, 30 Jul 2016, Robert Schetterer wrote: > >> Am 30.07.2016 um 03:34 schrieb Reindl Harald: >>> >>> >>> Am 29.07.2016 um 22:48 schrieb Dianne Skoll: >>>> On Fri, 29 Jul 2016 22:39:15

Re: Is greylisting effective? (was Re: Using Postfix and Postgrey - not scanning after hold)

2016-08-02 Thread Robert Schetterer
nection is handed over from postcreen to the smtpd > process after a client has passed the tests > you may use a complete postfix server including postscreen etc "before" sendmailbut then it might better to simply change to postfix in total, but such setups are often use with M

Re: Is greylisting effective? (was Re: Using Postfix and Postgrey - not scanning after hold)

2016-08-04 Thread Robert Schetterer
Am 04.08.2016 um 22:30 schrieb Chris: > Greylisting is just one of several tools available to a system > administrator for filtering out spam as multiple described it does not Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße

Re: backport 3.4.0 Ubuntu 12.04 TLS

2016-09-16 Thread Robert Schetterer
ub/5219815/+listing-archive-extra > > H ... do you think better backporting 3.4.1 from Xenial? Does it run > on Ubuntu 12.04 LTS and 14.04 LTS? > > Ciao! > > tested and running with recompile debian way 3.4.1 from wily 15.04 does run in 14.04 Best Regards MfG Robert

Re: backport 3.4.0 Ubuntu 12.04 TLS

2016-09-16 Thread Robert Schetterer
Am 16.09.2016 um 13:41 schrieb Marcus Schopen: > Hi Robert, > > Am Freitag, den 16.09.2016, 13:02 +0200 schrieb Robert Schetterer: >> Am 16.09.2016 um 12:48 schrieb Marcus Schopen: >>> Hi Patrick, >>> >>> Am Donnerstag, den 15.09.2016, 22:02 -0400 schrieb

Re: Greymail and marketing junk

2016-09-30 Thread Robert Schetterer
do expensive content filter to known not wanted domains. At the end ,at a server with many different users you will see that some marketing is really wanted by some users, but others like to see it so best way for this are users own white/blacklists after you filtered the most bad things global. Be

Re: Greymail and marketing junk

2016-09-30 Thread Robert Schetterer
Am 30.09.2016 um 11:35 schrieb Robert Schetterer: > Am 30.09.2016 um 02:28 schrieb Alex: >> Hi all, >> >> Has anyone given any thought to special rules or methods designed to >> catch greymail? That is, mail that perhaps may be opt-in, but abusive, >> like marke

Re: Useful and simple script to reduce high spam load at mta level, what do you think

2016-10-27 Thread Robert Schetterer
d-iptables-recent-modul-abwehren/ but this solutions may not fit exact to "your" problem fail2ban is a good well tested solution so you should always decide by deep log analysis which way to go Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64

Re: Filtering outbound mail

2017-02-16 Thread Robert Schetterer
traffic ,action should be taken etc ,such exists but not as freeware and for sure it must be fitted to your needs Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Schleißheimer Straße 26/MG, 80333 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein

Re: Yahoo - Can't figure out a server is down?

2017-03-05 Thread Robert Schetterer
no server. >> >> The concept being that some spammers attempt that server, get nothing >> and don't bother trying any other server. >> >> This has been fine for a decade. Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 3

Re: Spam from .br TLDs

2017-04-18 Thread Robert Schetterer
ls in > Portuguese Language? > > Cheers, > > - heinrich > > key: 0xC15DAD56 -- 363D 5BC3 9C45 9D09 3D78 1C28 DB68 F047 C15D AD56 > http://www.lafraia.com.br/spambr/ no idea if they are working fine Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30

Re: Spam from .br TLDs

2017-04-20 Thread Robert Schetterer
Am 20.04.2017 um 15:57 schrieb RW: > On Wed, 19 Apr 2017 17:37:42 +0200 > Heinrich Boeder wrote: > >> -BEGIN PGP SIGNED MESSAGE- >> Hash: SHA256 >> >> >> Hi all, >> >> I tried the Ruleset Robert Schetterer suggested but I still get Sp

Re: Strict/Relaxed DKIM alignment possible with SA?

2017-05-07 Thread Robert Schetterer
> > On 07.05.17 12:46, Thore Boedecker wrote: >> I have played around with it and SA is not performing actual SPF >> queries/validations due to the use of spampd on localhost as a proxy. > > that's why I recommended trying policyd-spf on valhalla.nano-srv

Re: dkim-reputation.org / SA-Plugin

2010-09-14 Thread Robert Schetterer
ay of implementing plugins anyway, for me i use the rep plugin since 1 year with no major good or bad results its use seems not wide spreaded by whatever reason -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: preventing authenticated smtp users from triggering PBL

2010-12-17 Thread Robert Schetterer
assin/amavis filter afterwards the recommended way is to let authed user use submission port submission 587/tcp , without configured the filter for it in master.cf -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: preventing authenticated smtp users from triggering PBL

2010-12-18 Thread Robert Schetterer
Am 17.12.2010 20:50, schrieb Jason Bertoch: > On 2010/12/17 2:48 PM, Robert Schetterer wrote: >> forget trusted_networks use i.e spamass-milter >> with spamassassin with option -I: skip (ignore) checks if sender is >> authenticated > > Though I've not used spama

Re: NOW: spamass-milter postfix Debian (WAS: Q about short-circuit over ruling blacklisting rule)

2011-01-19 Thread Robert Schetterer
E=spamass-milter DAEMON=/usr/sbin/spamass-milter SOCKET=/var/spool/postfix/spamass-milter/spamass.sock PIDFILE=/var/spool/postfix/spamass-milter/spamass.pid DESC="Sendmail milter plugin for SpamAssassin" OPTIONS="-f -e -x -I -u vmail -r 15 -i 127.0.0.1" RUNAS="postfix"

Re: FIX for ET EXPLOIT Possible SpamAssassin Milter Plugin Remote Arbitrary Command Injection Attempt

2011-02-11 Thread Robert Schetterer
use spamass-milter! as far i know this bug was fixed last year on a standart default postfix this rcpt to: root+:"|touch /tmp/foo" doesnt work anyway -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: alert: New event: ET EXPLOIT Possible SpamAssassin Milter Plugin Remote Arbitrary Command Injection Attempt

2011-02-11 Thread Robert Schetterer
t; RCPT TO: > 501 5.1.3 Bad recipient address syntax > QUIT > 221 2.0.0 Bye > > Can anyone confirm this? > > p@rick > > Hi Patrick the Problem was fixed last year, as far i know, it never worked with default postfix settings also the x switch isnt wide used http://savannah.nongnu.org/bugs/?29136 -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: alert: New event: ET EXPLOIT Possible SpamAssassin Milter Plugin Remote Arbitrary Command Injection Attempt

2011-02-11 Thread Robert Schetterer
ter/default + * Use new popenenv function instead of open; fixes remote code exploit + as the spamass-milter user when run using -x. (closes: #573228) + + -- Don Armstrong Wed, 11 Mar 2009 03:59:39 -0700 + -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: alert: New event: ET EXPLOIT Possible SpamAssassin Milter Plugin Remote Arbitrary Command Injection Attempt

2011-02-11 Thread Robert Schetterer
checkin that has since been fixed. > There is little activity on the spamass-milter project because it > doesn't need anything; almost all updates go to SA and the MTAs rather > than the milter. > > As noted by Robert Schetterer, postfix doesn't allow this syntax > anymo

Re: Spamassassin,clamAV and Clamsmtp

2011-03-05 Thread Robert Schetterer
our assistance. > > Simon > > you might use spampd ( standalone ) or i.e chain it with clamsmtp ( did this for years ) , or better use clamav-milter,spamass-milter try amavis... -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Spamd hits 100% and times out - Started today

2011-03-20 Thread Robert Schetterer
max-conn-per-child=num Maximum connections accepted by child check for timeouts in dns related stuff like rbls and/or thing like razor,pyzor,dcc -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Spamd hits 100% and times out - Started today

2011-03-20 Thread Robert Schetterer
Am 20.03.2011 22:09, schrieb JKL: > On 03/20/2011 10:04 PM, Karsten Bräckelmann wrote: >> On Sun, 2011-03-20 at 21:37 +0100, JKL wrote: >>> I noticed a problem that started this morning, where postfix was >>> timing out whilst talking with the spamass-milter. Looking further into >>> this, I se

Re: Spamassassin w/Postfix mail disappears when cc'd

2011-04-13 Thread Robert Schetterer
r/sbin/sendmail.postfix -oi -f ${sender} > ${recipient} > > > > > > /etc/postfix/main.cf <http://main.cf>: > - > eader_checks = regexp:/etc/postfix/header_checks > > > > > /etc/postfix/header_checks: > --- > > > /^X-Spam-Flag: YES/ REDIRECT s...@mikey.com <mailto:s...@mikey.com> > > > > Thanks in advance for your help. > -- > > Jack > your setup postfix with spamassassin is not optimal ( after all it should work, didnt checked your parameters ), better use i.e spamass-milter i dont believe this mailto working /^X-Spam-Flag: YES/ REDIRECT s...@mikey.com <mailto:s...@mikey.com> i recommend to read again examples with your kind of setup -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Nearly 200.000 Spams today from coolserver.info and starsweet.info

2011-06-16 Thread Robert Schetterer
e there are some more, but these are those which I was able to grep. > However, I have tried to train Spamassassin but it give only a score of > 2-4. > > Does someone know more about this crap? > > Thanks, Greetings and nice Day/Evening > Michelle Konzack > -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: SA on outgoing SMTP servers

2011-09-09 Thread Robert Schetterer
match SPF, it > should not apply to domains we are designed to send mail for . > (SPF records include us) > > > ... any other ideas? try using clamav-milter with sanesecurity antispam signatures this should avoid a lot of outgoing spam -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Blacklisting based on SPF

2011-10-07 Thread Robert Schetterer
dns entries so if you want blacklist with spf do it selective i.e with some milter but wouldnt recommend it anyway -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Blacklisting based on SPF

2011-10-07 Thread Robert Schetterer
Am 07.10.2011 10:03, schrieb Benny Pedersen: > On Fri, 07 Oct 2011 09:54:09 +0200, Robert Schetterer wrote: >> but wouldnt recommend it anyway > > why would i like to whitelist a unknown spammer ? > > thinking more about it would get me mad :-) > > in my eyes the w

Re: Blacklisting based on SPF

2011-10-07 Thread Robert Schetterer
Am 07.10.2011 20:24, schrieb Dave Warren: > On 10/7/2011 1:12 AM, Robert Schetterer wrote: >> in my eyes the whole idea of spf was broken from beginning >> but do what you want, no need for flame >> in my real world it makes more problems then helping in antispam >> i

Re: Good bye RCVD_IN_HOSTKARMA_BL

2011-10-13 Thread Robert Schetterer
er, at your site and on other sites -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Good bye RCVD_IN_HOSTKARMA_BL

2011-10-13 Thread Robert Schetterer
Am 13.10.2011 10:07, schrieb jdow: > On 2011/10/13 00:32, Robert Schetterer wrote: >> Am 12.10.2011 21:49, schrieb jdow: >>> The idiots who run that one have put the Earthlink smtp servers into >>> their >>> list. So I am opting out of it. I don't want AL

Re: 5000 x whitelist_from or whitelist_auth entries - performance hit?

2011-10-25 Thread Robert Schetterer
of servers out there arel configured correctly > so that whitelist_auth works correctly? > > you should choose another way for whitelisting, i.e bypass spamassassin for trusted server ips etc anyway why not using i.e. whitelist_from *@somebody.co ? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: real world spamassassin experiences re: processing on servers emailing from .info domains

2011-10-28 Thread Robert Schetterer
you may write some ruleset for domains but i dont think it will help a lot, over the time -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Detecting serious domains

2011-11-17 Thread Robert Schetterer
n age, as there where a possibility for "tasting" domains, but as i remember this isnt possible anymore -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: What is the best RBL list?

2011-11-28 Thread Robert Schetterer
it would be useful to list on the spamassassin wiki. > > The best RBLS for getting rid of snow-shoe spammers are from Invaluement, > but it is avaiable by subscription only. I don't know if Rob McEwen > has any interest in running it through GA... > > the best rbl

Re: Bayes database in mysql on multiple servers

2011-11-30 Thread Robert Schetterer
but be aware you might get doubles with bayes store, this should be ignored but i am told PostgreSQL is better in replacation stuff -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Mark all invites as spam

2011-12-09 Thread Robert Schetterer
the same sender address -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Mark all invites as spam

2011-12-15 Thread Robert Schetterer
Am 16.12.2011 12:59, schrieb Ram: > On Fri, 2011-12-09 at 10:20 +0100, Robert Schetterer wrote: >> Am 09.12.2011 13:58, schrieb Ram: >>> If I want to mark *all* invite mails as spam >>> >>> linkedin, WAYN , facebook , google+ or anything else. >>

Re: sa-learn and modern spam sizes

2011-12-16 Thread Robert Schetterer
; > > Office: 7020 0979 > > Direct: 3336 9974 > > Mobile: 5120 1096 > > Fax:7020 0978 > > Web: www.techbiz.dk <http://www.techbiz.dk> > > > > > -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Bayes and MySQL - does it actually work?

2011-12-21 Thread Robert Schetterer
drives for > speed. Also using InnoDB. I'm beginning to wonder if it is ever going to > work and if someone is going to fix it? > what makes you think it does not work ? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Bayes and MySQL - does it actually work?

2011-12-21 Thread Robert Schetterer
users no Problem so far > > On 12/21/2011 8:54 AM, Christian Grunfeld wrote: >> Bayes in MySQL works great for my with only one user ! >> In my previous setup with per user bayes in mysql was a mess ! >> >> Cheers >> Christian >> >> 2011/12/21 Robert

Re: Bayes and MySQL - does it actually work?

2011-12-21 Thread Robert Schetterer
ormance tweaks however 250K messages/day seems not that much to me scanning outbound mail with spamd ,was slow here too,i only use clamav-milter with sanesecurity for that, also for inbound before spamass-milter but no flames, for performance issues, a look to the total mailsetup is needed ever, there is no straight right or wrong most cases only analysing the bottlenecks will help -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Bayes and MySQL - does it actually work?

2011-12-22 Thread Robert Schetterer
Am 23.12.2011 02:45, schrieb Marc Perkel: > > > On 12/21/2011 10:58 AM, Robert Schetterer wrote: >> Am 21.12.2011 19:10, schrieb Kris Deugau: >>> Marc Perkel wrote: >>>> I've been trying for a long time to get bayes/mysql to actually work. >>&g

Re: [OT] RBLs

2012-01-11 Thread Robert Schetterer
nalyse your logs an make special setups related to ips ,domains etc sometimes -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: [OT] RBLs

2012-01-11 Thread Robert Schetterer
ositive spam quota is mostly relevant, this should be small as possible, but there will ever be spam bypass filters, react on that, with fitting targetting actions is your job as postmaster -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: [OT] RBLs

2012-01-11 Thread Robert Schetterer
the IP is caught from a previous spam campaign. But if you're not > using all the best DNSBLs, you miss out on some of this! > > MORE: And, btw, really good /24 blacklists do _preemptively_ block much > snowshoe spam, from the very 1st spam sent! > Hi Rob, read postfix archive

Re: MSN again

2012-01-26 Thread Robert Schetterer
with postfix and these are the problem senders as short workaround make a sender reject table -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: MSN again

2012-01-26 Thread Robert Schetterer
Am 27.01.2012 08:31, schrieb Tom Kinghorn: > On 27/01/2012 09:25, Robert Schetterer wrote: >> if you are with postfix >> and these are the problem senders >> as short workaround make a sender reject table > Hi Robert > > I have a regex sender reject table but t

Re: blacklist_from exceptions

2012-02-02 Thread Robert Schetterer
and whitelist one reciept before from that domain should work, did you test? -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Spamassassin 3.3.2 for Ubuntu LTS

2012-02-07 Thread Robert Schetterer
oneiric (mail): Perl-based spam filter using text analysis 3.3.2-1: all simple recompile the debian way or look in a ppa https://launchpad.net/~patrickdk/+archive/general-lucid/+packages -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Spamassassin detect my mails as spam

2012-02-24 Thread Robert Schetterer
ly sure if this fixes your problem but i have set score RDNS_NONE 0 cause the "default" points at this parameter looks like nonsense to me i have also a scenario with private net relays which will not have any reverse dns records ever -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Spamassassin detect my mails as spam

2012-02-24 Thread Robert Schetterer
Am 24.02.2012 15:00, schrieb RW: > On Fri, 24 Feb 2012 12:32:35 +0100 > Robert Schetterer wrote: >> > I am not realy sure if this fixes your problem but i have set >> > >> > score RDNS_NONE 0 >> > >> > cause the "default" points a

Re: Specify the user homedir in a non-standard setup (ISP)

2012-02-28 Thread Robert Schetterer
>> the email at SMTP session. >> >> Can we do that with spamassassin 3.3.2 ? >> >> Thanks for your help, > -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Specify the user homedir in a non-standard setup (ISP)

2012-02-28 Thread Robert Schetterer
installation with virtual users > (vpopmail, LDAP, SQL) where all mailboxes are owned from the same ID and > works fine also with a huge number of users. > > Plus, you can use user preferences in SQL for build custom interfaces or > read it from external appliance. > > Ciao agree ,users setup in sql or ldap is isp style no need for other layouts -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Allowing IMAP users to train spam/ham

2012-03-05 Thread Robert Schetterer
a learn-spam folder. > i use a spam/ham forward email transport something like here http://patrick-wessel.de/projektlinuxserver/spamtraining-mit-perl/ http://www.localside.net/sal-wrapper/ but to be honest, its not widly used and needed -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Help with blocking Chinese Spam

2012-03-13 Thread Robert Schetterer
This works well for me and could be trivially adapted to any country, > but ymmv. > > > Martin > > more trival, if the sender address is always the same reject it on mta level, if you arent afraid about loosing other mail from this ip mailserver reject the ip in total -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: A flood of new domains ?

2012-03-21 Thread Robert Schetterer
nged > This method of language learning is super easy. > Please confirm that this update is accurate. > Teach yourself a new foreign language in 10 days > > Just being curious. Yesterday I got another 10 different domains. > > Hi Per, nothing special like that, was

Re: OT how to bypass public nameservers as bind forwarders?

2012-03-21 Thread Robert Schetterer
t. Thus if you want to use this type of zone to change the behavior of the global forward option (that is, "forward first to", then "forward only", or vice versa, but want to use the same servers as set globally) you need to re-specify the global forwarders. so perhaps delete somthing like forward first; in your config and/or as said cancel forwarders section total -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: was: Allowing IMAP users to train spam/ham is:simplify training of misclassified emails

2012-03-22 Thread Robert Schetterer
eality shows users dont use it very wise perhaps clicking field spam and delte are to near etc or they are simply dummy my conclusion dont waste your time to implement complicated mechs for ham/spam training, work on the tagging/rejecting side to reduce false positive rate -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 08:23, schrieb Per Jessen: > Robert Schetterer wrote: > >> Am 21.03.2012 09:09, schrieb Per Jessen: >>> Has anyone else noticed this stream of new spamvertized domains : >>> >>> http://files.jessen.ch/list-of-new-domains >>> >>

Re: was: Allowing IMAP users to train spam/ham is:simplify training of misclassified emails

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 09:15, schrieb xTrade Assessory: > Robert Schetterer wrote: >>> >> >> however , i have a ham/spam transport learn mail address, >> nearly null users forwards something to it, no wonder >> the false positve rate is nearly null >> >> i

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 09:43, schrieb xTrade Assessory: > Robert Schetterer wrote: >> spam often is very recipient related >> i.e my beloved spambot armee relocated from china/us now to india/brasil >> during last year , looks like thats trendy > > > regarding BR > &g

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 10:19, schrieb Per Jessen: > Robert Schetterer wrote: > >> Am 22.03.2012 08:23, schrieb Per Jessen: >>> Robert Schetterer wrote: >>> >>>> Am 21.03.2012 09:09, schrieb Per Jessen: >>>>> Has anyone else noticed t

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 10:30, schrieb xTrade Assessory: > Robert Schetterer wrote: >> one more indicate for a bright planned campaign >> what are they try to push...? > > > I guess that is easy and simple ... the more the merrier > > they are smart but we got smarter too an

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 10:33, schrieb Axb: > On 03/22/2012 10:19 AM, Per Jessen wrote: >> Robert Schetterer wrote: >> >>> Am 22.03.2012 08:23, schrieb Per Jessen: >>>> Robert Schetterer wrote: >>>> >>>>> Am 21.03.2012 09:09, schrieb Per Jessen:

Re: A flood of new domains ?

2012-03-22 Thread Robert Schetterer
Am 22.03.2012 10:40, schrieb Robert Schetterer: > Am 22.03.2012 10:33, schrieb Axb: >> On 03/22/2012 10:19 AM, Per Jessen wrote: >>> Robert Schetterer wrote: >>> >>>> Am 22.03.2012 08:23, schrieb Per Jessen: >>>>> Robert Schetterer wrote

Re: A flood of new domains ?

2012-03-23 Thread Robert Schetterer
Am 23.03.2012 09:02, schrieb Per Jessen: > Robert Schetterer wrote: > >> Am 22.03.2012 10:19, schrieb Per Jessen: >> It's also the rate of change that is >>> interesting - I very rarely see two emails with the same link. >>> >> >> one more in

Re: Spam from Moniker Privacy Services.

2012-03-30 Thread Robert Schetterer
1 >>>> Pompano Beach FL 33069 >>>> US >>>> >>>> I'm checking if anyone else seen this and has anyone able to stop >>>> this tspam from these domains hiding behind (or they just a front >>>> for) these domain privacy services for spamm

Re: False Positive on Domain Name

2012-06-07 Thread Robert Schetterer
start spamassassin afterwards -- Best Regards MfG Robert Schetterer Germany/Munich/Bavaria

Re: Spamassassin and SPF records with "+all"

2012-07-11 Thread Robert Schetterer
spf records, also strict ones also any legal mail sender in deed many spammers have valid spf entries in dns in case of hacked accounts at big mailers like yahoo,aol etc you have also valid dkim too, so at the end body content filtering needs to be done however -- Best Regards MfG Robert Schetterer

Re: Spamassassin and SPF records with "+all" [learning per domain worth of SPF record]

2012-07-12 Thread Robert Schetterer
Am 12.07.2012 09:08, schrieb Andrzej A. Filip: > On 07/12/2012 09:01 AM, David F. Skoll wrote: >> On Thu, 12 Jul 2012 08:50:59 +0200 >> Robert Schetterer wrote: >> >>> spf does not solve spam problems in general, its may only one from >>> many paramete

Re: Updating 3.2.4 on SUSE sles10

2012-10-11 Thread Robert Schetterer
oad.opensuse.org/repositories/devel:/languages:/perl/SLE_10/.../perl-Mail-SpamAssassin-3.3.1-46.1.i586.rpm why are you thinking 3.3.1 isnt good enough for you ? i am on 3.3.1-1 on ubuntu lucid lts it works still nice -- Best Regards MfG Robert Schetterer

Re: Updating 3.2.4 on SUSE sles10

2012-10-11 Thread Robert Schetterer
Am 11.10.2012 19:45, schrieb Robert Schetterer: > Am 11.10.2012 18:52, schrieb Joseph Acquisto: >>>>>> Kevin Miller 10/11/12 12:40 PM >>> >>> In the past, when I've asked in the SUSE forums they have put out newer >>> versions of cl

Re: Spamassassin sync in 2 servers?

2012-10-15 Thread Robert Schetterer
Am 15.10.2012 15:30, schrieb mgia: >> which server is in charge of content filter? both of them? > Yes, both of them. > > use spamassassin mysql setup, as described in the faqs i.e master and two slaves etc, bayes sql may not be ideal -- Best Regards MfG Robert Schetterer

Re: spamd not staying up

2012-10-19 Thread Robert Schetterer
um then unmonitor if failed permission 755 then unmonitor if failed uid root then unmonitor if failed gid root then unmonitor check file spamd_rc with path /etc/init.d/spamd group mail if failed checksum then unmonitor if failed permission 755 then unmonitor if failed uid

Re: spamd not staying up

2012-10-20 Thread Robert Schetterer
for my needs -- Best Regards MfG Robert Schetterer [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender:

Re: How to report a spam botnet

2012-11-18 Thread Robert Schetterer
is the best way to fight it? first secure the account, then consider using something like fail2ban to firewall auto if possible use i.e postscreen, and rbls normally it makes no sense to report botnets Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 F

Re: How to report a spam botnet

2012-11-18 Thread Robert Schetterer
Am 18.11.2012 19:35, schrieb Robert Schetterer: > Am 18.11.2012 14:08, schrieb Michael Monnerie: >> We've got one users e-mail password hacked, and at the sime time a lot >> of different IPs started to use that address. Here is the list. How >> should we report those IP

Re: How to report a spam botnet

2012-11-19 Thread Robert Schetterer
y one part of the problem, postfix etc has few stuff to fight incomming spam, other questions are not really topic of the postfix or spamassassin list , cause they are based in more complex and different reasons. Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46

Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?

2012-11-29 Thread Robert Schetterer
er of taste amavis has tons of more features but therefor its more complex anyway in milter mode you are able to reject on smtp income stage Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsg

Re: Greylisting (was Re: "Fairly-Secure" Anti-SPAM Gateway Using OpenBSD, Postfix, Amavisd-new, SpamAssassin, Razor and DCC ? Can I get your opinion?)

2012-11-29 Thread Robert Schetterer
an greatly mitigate the problems caused by initial greylisting delays. > > Regards, > > David. > greylisting isnt state of art, however it might helpfull in some domains ( everyone has its own spam), using postscreen with postfix before selective greylisting is a good choice Best Regar

Re: sudden increase in spam

2013-01-24 Thread Robert Schetterer
ore individual targetting these days > > > > -- > View this message in context: > http://spamassassin.1065346.n5.nabble.com/sudden-increase-in-spam-tp103247.html > Sent from the SpamAssassin - Users mailing list archive at Nabble.com. > Best Regards MfG Robert Schetterer -- [*] sys4 AG

Re: Whitelist and DNS blacklists in SpamAssassin

2013-01-25 Thread Robert Schetterer
ext: > http://spamassassin.1065346.n5.nabble.com/Whitelist-and-DNS-blacklists-in-SpamAssassin-tp103262.html > Sent from the SpamAssassin - Users mailing list archive at Nabble.com. > Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziska

  1   2   3   >