On Thu, 2006-09-28 at 11:05 -0700, Loren Wilton wrote:
> > Apparently they have removed SPF records after publishing them once.
> > Thats a stupid idea IMHO. Today I am forced to TEMP FAIL earthlink ids
> > whenever there is a spam attack on my servers
>
> SPF can be a pain for a number of reasons
On Thu, 2006-09-28 at 19:11 -0700, jdow wrote:
> From: "Ramprasad" <[EMAIL PROTECTED]>
>
> > On Tue, 2006-09-26 at 21:28 -0700, jdow wrote:
> >> Before you blame Earthlink note that it has NOT gone through Earthlink
> >> servers.
> >>
> >> relay2.corp.good-sam.com is the receiving email server.
>
From: "Ramprasad" <[EMAIL PROTECTED]>
On Tue, 2006-09-26 at 21:28 -0700, jdow wrote:
Before you blame Earthlink note that it has NOT gone through Earthlink
servers.
relay2.corp.good-sam.com is the receiving email server.
It's a forged email, at a guess. (It also has mangled headers. Newlines
Henrik,
> I do however have a small problem:
> My usesrs submit their messages for relaying on port 25 like normal
> incoming messages - meaning that they will be verified before they are
> signed, causing the verification to fail.
No, if you follow my setup. Mail from mynetworks and from authent
->
-> You can clear the AWL for a sender like this:
->
-> spamassassin --remove-addr-from-whitelist [EMAIL PROTECTED]
->
-> ([EMAIL PROTECTED] is the sender)
->
-> Make sure you do this as the user who is having the problem.
->
-> > Thanks and kind regards
->
-> If this doesn't help, post
On 9/28/06, Henrik Ostergaard <[EMAIL PROTECTED]> wrote:
This sounds promissing! But I have distributed, moving users and therefore
uses pop-before-smtp for authentication, which means that my IP list is in a
hash table, which is not in CIDR format. :-(
Your best choice is to set up SASL authen
Noel Jones wrote:
>
> # dk-filter -H -S mailgate -M {auth_author} -o Received -s
> /var/db/certificates/domainkey.private -d example.com -i
> /var/db/domainkey.clients -u milter -l -p inet:[EMAIL PROTECTED]
>
> and the /var/db/domainkey.clients file is a list of networks that
> should be sign
Email Lists wrote:
> >
> > Its probably an AWL score, but without showing us a list of the
> > tests hit on one of these emails all we can do is throw straws in
> > the air and guess.
> > Loren
> >
>
> Ok, a box of straws will be on the way immediately...
>
> Any special colors? ;->
>
On 9/28/06, Henrik Ostergaard <[EMAIL PROTECTED]> wrote:
My usesrs submit their messages for relaying on port 25 like normal incoming
messages - meaning that they will be verified before they are signed,
The same dk-filter command usually provides both signing and
verification, deciding which t
Loren Wilton wrote:
>I did notice one possible problem in that debug output. There was an
>'inappropriate ioctl for device' message in the whitelist stuff near
the
>end.
>This is something that has been a problem for other and has been
discussed
>before, but I don't recall what the usual fix i
->
-> Its probably an AWL score, but without showing us a list of the tests hit
-> on
-> one of these emails all we can do is throw straws in the air and guess.
->
-> Loren
->
Ok, a box of straws will be on the way immediately...
Any special colors? ;->
I appreciate your time and th
After awhile I removed all of it and restarted everything yet the test
domain I did this with at first is still getting really high spam scores
and
is causing me a problem cause it is a secondary mail account live domain
etc.
Its probably an AWL score, but without showing us a list of the test
I did notice one possible problem in that debug output. There was an
'inappropriate ioctl for device' message in the whitelist stuff near the
end.
This is something that has been a problem for other and has been discussed
before, but I don't recall what the usual fix is to solve this problem.
Daniel Staal wrote:
Depends on the setup. For instance, given the explanations above, I'll
start a system to automatically learn from my 'checkspam' folder, but
not my 'highspam' folder. I have procmail automatically sort my spam by
score, so I can pay extra attention to low-scoring spam. (W
Apparently they have removed SPF records after publishing them once.
Thats a stupid idea IMHO. Today I am forced to TEMP FAIL earthlink ids
whenever there is a spam attack on my servers
SPF can be a pain for a number of reasons that have been discussed
endlessly. I suspect Dirtlink found them
> I came across a situation that seems non-intuitive;
>
> Two emails this am were spam, but hit BAYES_00. So they were
> (presumably) learned as Ham somewhere along the way.
Not a valid presumption. The tokens may have been learned as ham from
other messages, but there is no implication that thi
I came across a situation that seems non-intuitive;
Two emails this am were spam, but hit BAYES_00. So they
were (presumably) learned as Ham somewhere along the way.
So far so good…
Doing ‘ sa-learn –forget ./message.txt ‘
gets me : Forgot tokens 0 from message(s) (1 message(s) e
On Thu, September 28, 2006 1:08 pm, Email Lists said:
> # Use Bayesian classifier (default: 1)
> #
> # use_bayes 1
>
> # Bayesian classifier auto-learning (default: 1)
> #
> # bayes_auto_learn 1
>
> Please notice that they are commented out and have never been put in
> service.
Since those ar
> I just install a new version of spamassassin.
> What do I need to do, so it learns everything?
You may wish to run sa-update:
Or install additional add-on rules:
http://wiki.apache.org/spamassassin/CustomRulesets
Or run sa-learn against a recent set of ham (non-spam) and spam
messages. The bay
I just install a new version of spamassassin.
What do I need to do, so it learns everything?
-> I placed with some rules some time back because I didn't like to see list
-> emails from this one person with very poor judgement and taste in his
-> signature lines decisions...
->
-> Looked like this and I added them to my local.cf
->
-> #
->header LOCAL_DEMONSTRATION_ALL ALL =~ /th
I placed with some rules some time back because I didn't like to see list
emails from this one person with very poor judgement and taste in his
signature lines decisions...
Looked like this and I added them to my local.cf
#
header LOCAL_DEMONSTRATION_ALL ALL =~ /thatjerksdomsin\.com/i
I have alreay have a similar problem but with another mail server (ModusMail).It's not exactly the same problem and I'm not sure if that will help you.The user start downloading the email and the connection reset so the client have to redownload from the start... The email server only note the dow
Mike Woods wrote:
> Bowie Bailey wrote:
> >
> > You don't have to figure out what has and has not already been
> > learned. Just filter everything into directories for ham and spam
> > learning and feed the entire directory to sa-learn. Once you have
> > learned the messages, you can either dele
Bowie Bailey wrote:
> Why would you feed things through again and again? My point was that
> if you turn off auto-learning, you have complete control over what is
> learned.
I wouldn't, but when you said "Then you can feed everything to sa-learn
and not worry about it"
I assumed that's what
DNS time-outs are usually 10 seconds.
14-10 = 4, which is normal.
I would check if your DNS tests run smoothly and do not time out somewhere.
-Sietse
From: Justin MasonSent: Thu 28-Sep-06 17:00To: John D. HardinCc: Deephay; Olivier Nicole; users@spamassassin.apache.orgSubject: Re: really sl
Mike Woods wrote:
> > Why not simply turn off autolearning? Then you can feed everything
> > to sa-learn and not worry about it.
>
> Feeding everything through sa-learn again and again would take huge
> amounts of time, if i take the spam folders of me and one of the
> directors there are over 10
And Theo Van Dinter pointed out:
You're not by chance using the opendns.{com,org} folks for DNS, are you?
Of course. I'm an idiot. I switched to OpenDNS a couple of weeks back.
Time to return from whence I came. Thank you,
Don Craig
--
"John D. Hardin" writes:
>On Thu, 28 Sep 2006, Deephay wrote:
>
>> On 9/28/06, Olivier Nicole <[EMAIL PROTECTED]> wrote:
>> > > I am quite new to SA (a week of SA life), and the SA is working, the
>> > > thing is, SA is incredibly slow on my server (2.8GHZ CPU + 2GB Memory
>> > > + Qmail + Qmail-s
Mark Adams wrote:
What is your exchange server hosting? pop3? I have noted problems before
with clients recieving duplicate emails when connections timeout and the
server does not know how far the client application has gone through
the download of the mailbox - causing it to start downloading agai
On Thu, 28 Sep 2006, Deephay wrote:
> On 9/28/06, Olivier Nicole <[EMAIL PROTECTED]> wrote:
> > > I am quite new to SA (a week of SA life), and the SA is working, the
> > > thing is, SA is incredibly slow on my server (2.8GHZ CPU + 2GB Memory
> > > + Qmail + Qmail-scanner). Here's a typical scan
>
> This morning I am receiving emails but not sure everything is "normal"
> yet. My belief is that there are multiple problems with our domain that
> is causing my email problems. I would more than welcome any and all
> assistance. Thank you.
>
>
What is your exchange server hosting? pop3? I
Jake Vickers wrote:
Steve, in looking at what I
was doing late last night, I did not specify the port for the telnet
connection. It was my outbound firewall that was causing the no route to host.
Apologize for this.
If email is working now, keep an eye on it. Are
all of your clients se
On Thu, Sep 28, 2006 at 09:43:22AM -0400, Shue, Daniel G. wrote:
> this with event sink, or do I need to take my question to an Exchange
> newsgroup?
I would highly recommend that since you'll be more likely to get an
answer. 1) It's not a question about SpamAssassin, 2) the super vast
majority o
Matt Kettler wrote:
>First, I'd have Jake try his telnet again, but this time use port 25 to
>connect to: (note the extra 25 on the end)
>telnet 204.87.111.225 25
>*I* can do this just fine. I get back:
>220 dellapp02.occa.state.ok.us ESMTP
>Jake should to. If he can't, the problem isn't in yo
I have seen some info of SA working with Exchange and using event sinks.
However, what I want to do may be a little different. I want to be able
to take any spam that our Linux box running SA tags as spam (either by
header or preferably subject) that gets forwarded to our Exchange 2003
server be m
Steve Ingraham wrote:
>
> I want to thank Jake, Andrew, George, Eric, Loren, Jimmy and anyone
> else who has sent information to help me with my email problems the
> last couple of days. Despite all of your good advice our domain is
> still having email problems. I am not exactly sure what the root
Steve Ingraham wrote:
mail.okcca.net. 21592 IN A 204.87.111.225
;; Query time: 2 msec
;; SERVER: 216.55.144.5#53(216.55.144.5)
;; WHEN: Wed Sep 27 21:16:14 2006
;; MSG SIZE rcvd: 48
[EMAIL PROTECTED] ~]# telnet 204.87.111.225
Trying 204.87.111.225...
telnet: connect
On Tue, 2006-09-26 at 21:28 -0700, jdow wrote:
> Before you blame Earthlink note that it has NOT gone through Earthlink
> servers.
>
> relay2.corp.good-sam.com is the receiving email server.
>
> It's a forged email, at a guess. (It also has mangled headers. Newlines
> are missing. MAYBE it would
Why not simply turn off autolearning? Then you can feed everything to
sa-learn and not worry about it.
Feeding everything through sa-learn again and again would take huge
amounts of time, if i take the spam folders of me and one of the
directors there are over 100,000 messages so learning them
Email Lists-2 wrote:
>
>
> Kim
>
> Please forgive, I had my email client set wrong and it didn't wrap your
> .cf
> file in the email so... it was uncommented. My fault.
>
> Interesting though... maybe you just didn't stop and restart the service?
>
> :-)
>
> -rh
>
> --
> Robert - Abba Co
Thanks for a splendid howto!
I do however have a small problem:
My usesrs submit their messages for relaying on port 25 like normal incoming
messages - meaning that they will be verified before they are signed,
causing the verification to fail. If I set up the DNS record to enforce
signing, this
42 matches
Mail list logo