Re: is it possible to setup SA in a different machine?
I have it working! added the email address that sends newsletters in simcontrol Thanks for the help. But I have another last problem. I get a spam with an email within my domain? lets say [EMAIL PROTECTED] --- sends out spam messages to all Can someone please tell how to solve this one? thanks in advance!!! Matt Kettler-3 wrote: Linooks wrote: Hi, Im using qmail,vpopmail,clamav,and SA 3.0.1 under RHEL4 We send newsletters frequently so I really understand that it will cost a lot of cpu usage. I was thinking if I can setup the SA into a different machine, not with the email server. So I can gain more cpu usage. when it goes to 99 to 100 I can send and receive emails! can SA be setup like that? SA will scan remote email servers?:-( Yes, you can do this with spamc and spamd. You'll need to tweak some options on their command-lines to make them work over anything but the loopback, but the spamc/spamd pair is fundamentally designed with this kind of use in mind. -- View this message in context: http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12317119 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
recieving spam from my own domain?
let say the email address is: [EMAIL PROTECTED] it send spam messages and it isn't filtered by SA. Why? can I do something about this? thanks in advance!!! -- View this message in context: http://www.nabble.com/recieving-spam-from-my-own-domain--tf4324937.html#a12317128 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: is it possible to setup SA in a different machine?
I had no whitelist option in my local.cf so I think that is not the cause. Hmm,, I really wonder why. thanks though! John D. Hardin wrote: On Fri, 24 Aug 2007, Linooks wrote: But I have another last problem. I get a spam with an email within my domain? lets say [EMAIL PROTECTED] --- sends out spam messages to all Can someone please tell how to solve this one? thanks in advance!!! You mean it's not blocking spams that have the FROM address in your domain? The most common cause for that is using whitelist_from to whitelist your own domain, which is a bad idea. Don't do that. Posting a specific sample to a website and mailing the URL to the list will let us see what you mean, which will help us give useful advice. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- What nuts do with guns is terrible, certainly. But what evil or crazy people do with *anything* is not a valid argument for banning that item.-- John C. Randolph [EMAIL PROTECTED] --- Tomorrow: The 1928th anniversary of the destruction of Pompeii -- View this message in context: http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12317405 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: recieving spam from my own domain?
I dont have whitelist option in my local.cf file, I even added blacklist_to [EMAIL PROTECTED] but to no avail. Jari Fredriksson wrote: let say the email address is: [EMAIL PROTECTED] it send spam messages and it isn't filtered by SA. Why? can I do something about this? thanks in advance!!! The one and only reason to this is that you have whitelisted your own domain in your MTA, or by writing whitelist *.mydomain.org in your /etc/spamassassin/local.cf or some other SA configuration file. -- View this message in context: http://www.nabble.com/recieving-spam-from-my-own-domain--tf4324937.html#a12318381 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: is it possible to setup SA in a different machine?
this is the full header: Return-Path: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: (qmail 18837 invoked by uid 89); 24 Aug 2007 19:45:01 - Delivered-To: [EMAIL PROTECTED] Received: (qmail 18801 invoked by uid 89); 24 Aug 2007 19:45:01 - Received: from unknown (HELO pcsp221-151.supercabletv.net.co) (200.106.221.151) by 0 with SMTP; 24 Aug 2007 19:44:57 - Received-SPF: none (0: domain at wmlarned.com does not designate permitted sender hosts) X-Originating-IP: 81.104.138.159 by smtp.200.106.221.151; Fri, 24 Aug 2007 15:27:02 -0500 Message-ID: [EMAIL PROTECTED] From: Latonya Moran [EMAIL PROTECTED] Reply-To: Latonya Moran [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Best IWC repl1ca w4tches at Prest1ge Repl1cas Date: Fri, 24 Aug 2007 15:27:02 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit As you see, it came from [EMAIL PROTECTED] and that is developmentex John D. Hardin wrote: On Fri, 24 Aug 2007, Linooks wrote: I had no whitelist option in my local.cf so I think that is not the cause. Hmm,, I really wonder why. Please post a sample including all headers, if you can. On Fri, 24 Aug 2007, Linooks wrote: But I have another last problem. I get a spam with an email within my domain? lets say [EMAIL PROTECTED] --- sends out spam messages to all The way I deal with it is I know mail from my domain will only ever originate at my MTA. I have some milter-regex rules that reject messages from my domain unless they originate on the private network side of the MTA. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- What nuts do with guns is terrible, certainly. But what evil or crazy people do with *anything* is not a valid argument for banning that item.-- John C. Randolph [EMAIL PROTECTED] --- Tomorrow: The 1928th anniversary of the destruction of Pompeii -- View this message in context: http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12318383 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: is it possible to setup SA in a different machine?
Thanks! i will check.. John D. Hardin wrote: On Fri, 24 Aug 2007, Linooks wrote: this is the full header: Return-Path: [EMAIL PROTECTED] Delivered-To: [EMAIL PROTECTED] Received: (qmail 18837 invoked by uid 89); 24 Aug 2007 19:45:01 - Delivered-To: [EMAIL PROTECTED] Received: (qmail 18801 invoked by uid 89); 24 Aug 2007 19:45:01 - Received: from unknown (HELO pcsp221-151.supercabletv.net.co) (200.106.221.151) by 0 with SMTP; 24 Aug 2007 19:44:57 - Received-SPF: none (0: domain at wmlarned.com does not designate permitted sender hosts) X-Originating-IP: 81.104.138.159 by smtp.200.106.221.151; Fri, 24 Aug 2007 15:27:02 -0500 Message-ID: [EMAIL PROTECTED] From: Latonya Moran [EMAIL PROTECTED] Reply-To: Latonya Moran [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Best IWC repl1ca w4tches at Prest1ge Repl1cas Date: Fri, 24 Aug 2007 15:27:02 -0500 Content-Type: text/plain; Content-Transfer-Encoding: 7Bit I don't see any SA headers in that at all. You might want to check whatever feeds messages to SA and see whether it is passing messages with your domain in the From header to SA in the first place. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- ...much of our country's counterterrorism security spending is not designed to protect us from the terrorists, but instead to protect our public officials from criticism when another attack occurs. -- Bruce Schneier --- Tomorrow: The 1928th anniversary of the destruction of Pompeii -- View this message in context: http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12319179 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: recieving spam from my own domain?
Thanks. Theo Van Dinter-2 wrote: On Fri, Aug 24, 2007 at 12:43:17PM -0700, Linooks wrote: let say the email address is: [EMAIL PROTECTED] it send spam messages and it isn't filtered by SA. Why? can I do something about this? SA processes all mails sent to it(*), so if mails aren't being processed, you're probably not sending them to SA. (*) - if using spamc, it will skip sending messages 250k to spamd -- Randomly Selected Tagline: A computer is a stupid machine with the ability to do incredibly smart things, while computer programmers are smart people with the ability to do incredibly stupid things. They are, in short, a dangerously perfect match. - Bill Bryson. -- View this message in context: http://www.nabble.com/recieving-spam-from-my-own-domain--tf4324937.html#a12319212 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
is it possible to setup SA in a different machine?
Hi, Im using qmail,vpopmail,clamav,and SA 3.0.1 under RHEL4 We send newsletters frequently so I really understand that it will cost a lot of cpu usage. I was thinking if I can setup the SA into a different machine, not with the email server. So I can gain more cpu usage. when it goes to 99 to 100 I can send and receive emails! can SA be setup like that? SA will scan remote email servers?:-( -- View this message in context: http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12280335 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: is it possible to setup SA in a different machine?
So sir, I can just setup an updated verision of SA in a different server and configure it to scan remote servers? can u please send a link how to that.. Im not that good yet..:working: Linooks wrote: Hi, Im using qmail,vpopmail,clamav,and SA 3.0.1 under RHEL4 We send newsletters frequently so I really understand that it will cost a lot of cpu usage. I was thinking if I can setup the SA into a different machine, not with the email server. So I can gain more cpu usage. when it goes to 99 to 100 I can send and receive emails! can SA be setup like that? SA will scan remote email servers?:-( -- View this message in context: http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12280664 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: is it possible to setup SA in a different machine?
Thats also my problem, I did not set this email server.. How would I do what you recommend? Thanks, Ralf Hildebrandt wrote: * Linooks [EMAIL PROTECTED]: Hi, Im using qmail,vpopmail,clamav,and SA 3.0.1 under RHEL4 We send newsletters frequently so I really understand that it will cost a lot of cpu usage. Why would it? Can't you inject the newsletter in such a way that it circumvents SA clamav? -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL PROTECTED] Charite - Universitätsmedizin BerlinTel. +49 (0)30-450 570-155 Gemeinsame Einrichtung von FU- und HU-BerlinFax. +49 (0)30-450 570-962 IT-Zentrum Standort CBFsend no mail to [EMAIL PROTECTED] -- View this message in context: http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12281136 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: is it possible to setup SA in a different machine?
I have no idea, but I think the server uses simscan to call clam and SA. I hope that helps.. John D. Hardin wrote: On Wed, 22 Aug 2007, Linooks wrote: Thats also my problem, I did not set this email server.. How would I do what you recommend? First question: how is SA being called? Then we can offer advice. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED] key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C AF76 D822 E6E6 B873 2E79 --- Of the twenty-two civilizations that have appeared in history, nineteen of them collapsed when they reached the moral state the United States is in now. -- Arnold Toynbee --- 3 days until The 1928th anniversary of the destruction of Pompeii -- View this message in context: http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12281399 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
Re: is it possible to setup SA in a different machine?
Cool!! i will try this one,, a very big thanks!! muah! I think this will work! Rick Macdougall-2 wrote: Linooks wrote: I have no idea, but I think the server uses simscan to call clam and SA. I hope that helps.. If you are using simscan you can add [EMAIL PROTECTED]:spam=no,clam=yes to the /var/qmail/control/simcontrol file and then run /var/qmail/bin/simscanmk. [EMAIL PROTECTED] is the email address of the account used to send out the newsletters. Regards, Rick -- View this message in context: http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12282292 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.