Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Linooks

I have it working!

added the email address that sends newsletters in simcontrol

Thanks for the help.

But I have another last problem.
I get a spam with an email within my domain? lets say
[EMAIL PROTECTED] --- sends out spam messages to all

Can someone please tell how to solve this one? thanks in advance!!!


Matt Kettler-3 wrote:
 
 Linooks wrote:
 Hi,

 Im using qmail,vpopmail,clamav,and SA 3.0.1 under RHEL4

 We send newsletters frequently so I really understand that it will cost a
 lot of cpu usage. I was thinking if I can setup the SA into a different
 machine, not with the email server. So I can gain more cpu usage. when it
 goes to 99 to 100 I can send and receive emails! can SA be setup like
 that?
 SA will scan remote email servers?:-(
   
 Yes, you can do this with spamc and spamd. You'll need to tweak some
 options on their command-lines to make them work over anything but the
 loopback, but the spamc/spamd pair is fundamentally designed with this
 kind of use in mind.
 
 
 
 

-- 
View this message in context: 
http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12317119
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



recieving spam from my own domain?

2007-08-24 Thread Linooks


let say the email address is:

[EMAIL PROTECTED]

it send spam messages and it isn't filtered by SA.

Why?

can I do something about this?


thanks in advance!!!
-- 
View this message in context: 
http://www.nabble.com/recieving-spam-from-my-own-domain--tf4324937.html#a12317128
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Linooks

I had no whitelist option in my local.cf so I think that is not the cause.

Hmm,, I really wonder why.

thanks though!



John D. Hardin wrote:
 
 On Fri, 24 Aug 2007, Linooks wrote:
 
 But I have another last problem.
 I get a spam with an email within my domain? lets say
 [EMAIL PROTECTED] --- sends out spam messages to all
 
 Can someone please tell how to solve this one? thanks in advance!!!
 
 You mean it's not blocking spams that have the FROM address in your 
 domain? The most common cause for that is using whitelist_from to 
 whitelist your own domain, which is a bad idea. Don't do that.
 
 Posting a specific sample to a website and mailing the URL to the list 
 will let us see what you mean, which will help us give useful advice.
 
 --
  John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
  [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED]
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
 ---
  What nuts do with guns is terrible, certainly. But what evil or crazy
  people do with *anything* is not a valid argument for banning that
  item.-- John C. Randolph [EMAIL PROTECTED]
 ---
  Tomorrow: The 1928th anniversary of the destruction of Pompeii
 
 
 

-- 
View this message in context: 
http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12317405
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: recieving spam from my own domain?

2007-08-24 Thread Linooks

I dont have whitelist option in my local.cf file, I even added blacklist_to
[EMAIL PROTECTED] but to no avail.



Jari Fredriksson wrote:
 
 let say the email address is:
 
 [EMAIL PROTECTED]
 
 it send spam messages and it isn't filtered by SA.
 
 Why?
 
 can I do something about this?
 
 
 thanks in advance!!!
 
 The one and only reason to this is that you have whitelisted your own
 domain in your MTA, or by writing whitelist *.mydomain.org in your
 /etc/spamassassin/local.cf or some other SA configuration file.
 
 
 
 

-- 
View this message in context: 
http://www.nabble.com/recieving-spam-from-my-own-domain--tf4324937.html#a12318381
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Linooks

this is the full header:

Return-Path: [EMAIL PROTECTED]
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 18837 invoked by uid 89); 24 Aug 2007 19:45:01 -
Delivered-To: [EMAIL PROTECTED]
Received: (qmail 18801 invoked by uid 89); 24 Aug 2007 19:45:01 -
Received: from unknown (HELO pcsp221-151.supercabletv.net.co)
(200.106.221.151)
 by 0 with SMTP; 24 Aug 2007 19:44:57 -
Received-SPF: none (0: domain at wmlarned.com does not designate permitted
sender hosts)
X-Originating-IP: 81.104.138.159 by smtp.200.106.221.151; Fri, 24 Aug 2007
15:27:02 -0500
Message-ID: [EMAIL PROTECTED]
From: Latonya Moran [EMAIL PROTECTED]
Reply-To: Latonya Moran [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Subject: Best IWC repl1ca w4tches at Prest1ge Repl1cas
Date: Fri, 24 Aug 2007 15:27:02 -0500
Content-Type: text/plain;
Content-Transfer-Encoding: 7Bit

As you see, it came from [EMAIL PROTECTED] and that is developmentex

John D. Hardin wrote:
 
 On Fri, 24 Aug 2007, Linooks wrote:
 
 I had no whitelist option in my local.cf so I think that is not
 the cause.
 
 Hmm,, I really wonder why.
 
 Please post a sample including all headers, if you can.
 
  On Fri, 24 Aug 2007, Linooks wrote:
  
  But I have another last problem.
  I get a spam with an email within my domain? lets say
  [EMAIL PROTECTED] --- sends out spam messages to all
 
 The way I deal with it is I know mail from my domain will only ever 
 originate at my MTA. I have some milter-regex rules that reject 
 messages from my domain unless they originate on the private 
 network side of the MTA.
 
 --
  John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
  [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED]
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
 ---
  What nuts do with guns is terrible, certainly. But what evil or crazy
  people do with *anything* is not a valid argument for banning that
  item.-- John C. Randolph [EMAIL PROTECTED]
 ---
  Tomorrow: The 1928th anniversary of the destruction of Pompeii
 
 
 

-- 
View this message in context: 
http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12318383
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Linooks

Thanks! i will check..


John D. Hardin wrote:
 
 On Fri, 24 Aug 2007, Linooks wrote:
 
 this is the full header:
 
 Return-Path: [EMAIL PROTECTED]
 Delivered-To: [EMAIL PROTECTED]
 Received: (qmail 18837 invoked by uid 89); 24 Aug 2007 19:45:01 -
 Delivered-To: [EMAIL PROTECTED]
 Received: (qmail 18801 invoked by uid 89); 24 Aug 2007 19:45:01 -
 Received: from unknown (HELO pcsp221-151.supercabletv.net.co)
 (200.106.221.151)
  by 0 with SMTP; 24 Aug 2007 19:44:57 -
 Received-SPF: none (0: domain at wmlarned.com does not designate
 permitted
 sender hosts)
 X-Originating-IP: 81.104.138.159 by smtp.200.106.221.151; Fri, 24 Aug
 2007
 15:27:02 -0500
 Message-ID: [EMAIL PROTECTED]
 From: Latonya Moran [EMAIL PROTECTED]
 Reply-To: Latonya Moran [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Subject: Best IWC repl1ca w4tches at Prest1ge Repl1cas
 Date: Fri, 24 Aug 2007 15:27:02 -0500
 Content-Type: text/plain;
 Content-Transfer-Encoding: 7Bit
 
 I don't see any SA headers in that at all. You might want to check 
 whatever feeds messages to SA and see whether it is passing messages 
 with your domain in the From header to SA in the first place.
 
 --
  John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
  [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED]
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
 ---
   ...much of our country's counterterrorism security spending is not
   designed to protect us from the terrorists, but instead to protect
   our public officials from criticism when another attack occurs.
 -- Bruce Schneier
 ---
  Tomorrow: The 1928th anniversary of the destruction of Pompeii
 
 
 

-- 
View this message in context: 
http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12319179
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: recieving spam from my own domain?

2007-08-24 Thread Linooks

Thanks.


Theo Van Dinter-2 wrote:
 
 On Fri, Aug 24, 2007 at 12:43:17PM -0700, Linooks wrote:
  let say the email address is:
  
  [EMAIL PROTECTED]
  
  it send spam messages and it isn't filtered by SA.
  
  Why?
  
  can I do something about this?
 
 SA processes all mails sent to it(*), so if mails aren't being processed,
 you're probably not sending them to SA.
 
 
 (*) - if using spamc, it will skip sending messages  250k to spamd
 
 -- 
 Randomly Selected Tagline:
 A computer is a stupid machine with the ability to do incredibly smart
  things, while computer programmers are smart people with the ability to
  do incredibly stupid things.  They are, in short, a dangerously perfect
  match. - Bill Bryson.
 
  
 

-- 
View this message in context: 
http://www.nabble.com/recieving-spam-from-my-own-domain--tf4324937.html#a12319212
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



is it possible to setup SA in a different machine?

2007-08-22 Thread Linooks

Hi,

Im using qmail,vpopmail,clamav,and SA 3.0.1 under RHEL4

We send newsletters frequently so I really understand that it will cost a
lot of cpu usage. I was thinking if I can setup the SA into a different
machine, not with the email server. So I can gain more cpu usage. when it
goes to 99 to 100 I can send and receive emails! can SA be setup like that?
SA will scan remote email servers?:-(
-- 
View this message in context: 
http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12280335
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: is it possible to setup SA in a different machine?

2007-08-22 Thread Linooks

So sir, I can just setup an updated verision of SA in a different server and
configure it to scan remote servers? can u please send a link how to that..
Im not that good yet..:working:

Linooks wrote:
 
 Hi,
 
 Im using qmail,vpopmail,clamav,and SA 3.0.1 under RHEL4
 
 We send newsletters frequently so I really understand that it will cost a
 lot of cpu usage. I was thinking if I can setup the SA into a different
 machine, not with the email server. So I can gain more cpu usage. when it
 goes to 99 to 100 I can send and receive emails! can SA be setup like
 that? SA will scan remote email servers?:-(
 

-- 
View this message in context: 
http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12280664
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: is it possible to setup SA in a different machine?

2007-08-22 Thread Linooks

Thats also my problem, I did not set this email server..

How would I do what you recommend?

Thanks,


Ralf Hildebrandt wrote:
 
 * Linooks [EMAIL PROTECTED]:
 
 Hi,
 
 Im using qmail,vpopmail,clamav,and SA 3.0.1 under RHEL4
 
 We send newsletters frequently so I really understand that it will cost a
 lot of cpu usage.
 
 Why would it? Can't you inject the newsletter in such a way that it
 circumvents SA  clamav?
 
 -- 
 Ralf Hildebrandt (i.A. des IT-Zentrums)
 [EMAIL PROTECTED]
 Charite - Universitätsmedizin BerlinTel.  +49 (0)30-450
 570-155
 Gemeinsame Einrichtung von FU- und HU-BerlinFax.  +49 (0)30-450
 570-962
 IT-Zentrum Standort CBFsend no mail to
 [EMAIL PROTECTED]
 
 

-- 
View this message in context: 
http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12281136
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: is it possible to setup SA in a different machine?

2007-08-22 Thread Linooks

I have no idea, but I think the server uses simscan to call clam and SA. I
hope that helps..


John D. Hardin wrote:
 
 On Wed, 22 Aug 2007, Linooks wrote:
 
 Thats also my problem, I did not set this email server..
 
 How would I do what you recommend?
 
 First question: how is SA being called? Then we can offer advice.
 
 --
  John Hardin KA7OHZhttp://www.impsec.org/~jhardin/
  [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED]
  key: 0xB8732E79 -- 2D8C 34F4 6411 F507 136C  AF76 D822 E6E6 B873 2E79
 ---
   Of the twenty-two civilizations that have appeared in history,
   nineteen of them collapsed when they reached the moral state the
   United States is in now.  -- Arnold Toynbee
 ---
  3 days until The 1928th anniversary of the destruction of Pompeii
 
 
 

-- 
View this message in context: 
http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12281399
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.



Re: is it possible to setup SA in a different machine?

2007-08-22 Thread Linooks

Cool!! i will try this one,, a very big thanks!! muah! I think this will
work!


Rick Macdougall-2 wrote:
 
 Linooks wrote:
 I have no idea, but I think the server uses simscan to call clam and SA.
 I
 hope that helps..
 
 
 
 If you are using simscan you can add
 
 [EMAIL PROTECTED]:spam=no,clam=yes
 
 to the /var/qmail/control/simcontrol file and then run 
 /var/qmail/bin/simscanmk.
 
 [EMAIL PROTECTED] is the email address of the account used to send out the 
 newsletters.
 
 Regards,
 
 Rick
 
 
 
 

-- 
View this message in context: 
http://www.nabble.com/is-it-possible-to-setup-SA-in-a-different-machine--tf4313291.html#a12282292
Sent from the SpamAssassin - Users mailing list archive at Nabble.com.