RE: [AMaViS-user] FW: How to increase the score for specific recipient
Hi Gary,
Thanks for your reply. If you don't suggest this method then how we can
achieve this objective as there are some address like
[EMAIL PROTECTED], [EMAIL PROTECTED] which receive too much junk
daily.
Thanks,
MJ.
Here is an excerpt from amavisd.conf:
@score_sender_maps = ({ # a by-recipient hash lookup table,
# results from all matching recipient tables are
summed
# ## per-recipient personal tables (NOTE: positive: black, negative:
white)
# '[EMAIL PROTECTED]' = [{'[EMAIL PROTECTED]' = 10.0}],
...
});
I would think you could interpolate this to:
'[EMAIL PROTECTED]' = [{'.' = 3.0}],
Inflating the score from every sender is an unusual thing to do, but I
could see how it might be used for testing.
Gary V
---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download it for free - -and be entered to win a 42 plasma tv or your
very
own Sony(tm)PSP. Click here to play:
http://sourceforge.net/geronimo.php
___
AMaViS-user mailing list
[EMAIL PROTECTED]
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download it for free - -and be entered to win a 42 plasma tv or your very
own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] FW: How to increase the score for specific recipient
MJ wrote:
Hi Gary,
Thanks for your reply. If you don't suggest this method then how we can
achieve this objective as there are some address like
[EMAIL PROTECTED], [EMAIL PROTECTED] which receive too much junk
daily.
Thanks,
MJ.
I see, well I guess in a way this would end up doing something
similar, but would be a more correct way to do it:
let's say you have set:
$sa_kill_level_deflt = 8.0;
Then you could give those two recipients a lower kill level:
@spam_kill_level_maps = (
{ '[EMAIL PROTECTED]' = 5.0,
'[EMAIL PROTECTED]' = 5.0 },
\$sa_kill_level_deflt, # catchall default
);
Here is an excerpt from amavisd.conf:
@score_sender_maps = ({ # a by-recipient hash lookup table,
# results from all matching recipient tables are summed
# ## per-recipient personal tables (NOTE: positive: black, negative: white)
# '[EMAIL PROTECTED]' = [{'[EMAIL PROTECTED]' = 10.0}],
...
});
I would think you could interpolate this to:
'[EMAIL PROTECTED]' = [{'.' = 3.0}],
Inflating the score from every sender is an unusual thing to do, but I
could see how it might be used for testing.
Gary V
---
SF.Net email is sponsored by:
Tame your development challenges with Apache's Geronimo App Server.
Download it for free - -and be entered to win a 42 plasma tv or your very
own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php
___
AMaViS-user mailing list
AMaViS-user@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/amavis-user
AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3
AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] FW: How to increase the score for specific recipient
MJ wrote: Hi Gary, Thanks for your reply. If you don't suggest this method then how we can achieve this objective as there are some address like [EMAIL PROTECTED], [EMAIL PROTECTED] which receive too much junk daily. Thanks, MJ. Actually, there is a much better way to go about this. The problem is these two user addresses are very common, and will get spammed no matter what. The other problem, is I will assume you have these two addresses (among others) listed on a web page so your customers can click on them. They have been harvested by spam bots. The combination of these two problem guarantees you will get a ton of spam. You need to obfuscate the email addresses on your web page(s). You may be able to use something like ASS Maker 3.1: http://www.winsite.com/bin/Info?50033696 or other similar tool to obfuscate addresses on web pages. Then change the email addresses to something more obscure, like [EMAIL PROTECTED] and [EMAIL PROTECTED] and then reject mail to [EMAIL PROTECTED] and [EMAIL PROTECTED] This will cut down spam to these two accounts by 100% (at least for a while). They should never get as much spam as you are getting now, as long as they are never listed in plain text on a web page. Gary V --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] FW: How to increase the score for specific recipient
Gary wrote: You may be able to use something like ASS Maker 3.1: http://www.winsite.com/bin/Info?50033696 or other similar tool to obfuscate addresses on web pages. Then change the email addresses to something more obscure, like [EMAIL PROTECTED] and [EMAIL PROTECTED] and then reject mail to [EMAIL PROTECTED] and [EMAIL PROTECTED] Here is another (simpler) way to obfuscate an address: http://www.fingerlakesbmw.org/main/flobfuscate.php Gary V --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
[AMaViS-user] any reason
any reason for not discarding bad header. today is 95% of the spam i get X-Amavis-Alert: BAD HEADER Improper folded header field made up entirely of whitespace in message header 'X-Spam-Report': \t any good reason why this is not a default? --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] FW: How to increase the score for specific recipient
...The other problem, is I will assume you have these two addresses (among others) listed on a web page so your customers can click on them. They have been harvested by spam bots. The combination of these two problem guarantees you will get a ton of spam. You need to obfuscate the email addresses on your web page(s). ... In my view obfuscation and hiding email addresses is not worth the trouble. Spam needs to be fought for remaining addresses anyway. Obfuscating addresses like [EMAIL PROTECTED] may mean less response from potential clients, and the addresses like hostmaster, postmaster, webmaster can't be obfuscated at all. The RFC 2142 (Mailbox names for common services, roles and functions) suggests that one should use addresses info, support, sales, etc. Mark --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] any reason
boricua, any reason for not discarding bad header. today is 95% of the spam i get X-Amavis-Alert: BAD HEADER Improper folded header field made up entirely of whitespace in message header 'X-Spam-Report': \t Sure, in most cases mail with such headers can be discarded. any good reason why this is not a default? Because such header is actually valid in rfc822. The rfc2822 prohibits it, but recognizes that old clients (or broken mail clients) may still use it: 4.2. Obsolete folding white space In the obsolete syntax, any amount of folding white space MAY be inserted where the obs-FWS rule is allowed. This creates the possibility of having two consecutive folds in a line, and therefore the possibility that a line which makes up a folded header field could be composed entirely of white space. Note that newer versions of amavisd-new remove such lines to protect poorly written mail clients from misinterpreting mail header: amavisd-new-2.3.1 release notes - unfold obsolete-syntax folded header fields composed entirely of white space (RFC 2822 section 4.2); suggested by Ian Abbott and others. Note that such unfolding breaks DomainKeys simple canonicalization algorithm (but is transparent to nofws) if the affected header is included in the signature; Mark --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] SPUR-m [Sperm pills]
Rocsca, The file /etc/mail/spamassassin/local.cf on my server do not exists. I have created it, put in the three lines and restarted spamassassin. Moreover I executed the command 'spassassin --lint' and It returns the shell prompt after some seconds... Strange the file was not provided by the SA installation. Make sure SA is actually using the local.cf at your path. Some installations use directory like /usr/local/etc/mail/spamassassin/ Try: amavisd debug-sa and check paths and config/rules files used, as reported by SA during startup. There are more checks that I can do to verify that all wors fine? The name of the test should appear in the list or triggered SA tests when such spam message is checked. Test new rules by command-line SA first, e.g.: su vscan -c 'spamassassin -t -D test.msg' Mark --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Log Analyzer
Matt, I need a program that can analyze three separate mail logs (one from relay1, one from relay2, and one from relay3) and generate statistics on them. I know there was an amavis program that is no longer maintained, and someone sent me a patched version of something which I couldn't get working. Is there a good log analyzer out there? I don't necessarilly need graphs, just statistics (1000 spam messages blocked, 25 passed, etc. etc.) Not exactly what you are asking for, but such raw statistics is reported by amavisd-agent, for all processed mail since amavisd start: ContentBadHdrMsgs 166 2/h0.4 % (InMsgs) ContentBannedMsgs15 0/h0.0 % (InMsgs) ContentCleanMsgs 9947146/h 23.4 % (InMsgs) ContentSpamMsgs 30726452/h 72.2 % (InMsgs) ContentVirusMsgs 1700 25/h4.0 % (InMsgs) InMsgs42554626/h 100.0 % (InMsgs) Mark --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Can't get logging to maillog in chroot on OpenBSD 3.7 with amavisd 2.3.3
Mike, Hi, I've been installing systems per the Vintinner wiki for some time now without any issues until now. I've configured the system per all instructions I can find to deal with this issue. There have been a few sparse threads on the subject; http://marc.theaimsgroup.com/?l=amavis-userm=112035005722116w=2 http://marc.theaimsgroup.com/?l=amavis-userm=112091901015777w=2 However, this does nothing for me. The chroot environment is sound, syslogd is creating a socket in /var/amavisd/dev/log ... With this setting amavisd is spewing to the console and I get nada in maillog. What gives? I have no idea. After that first report I stared at the code, did even some modifications to it with 2.3.2, but I don't see what could be causing the behaviour described. Perhaps it is specific to OpenBSD, in which case someone will need to help with debugging. Try first if it works without chrooting. See sub write_log, try inserting few test 'print STDERR (TEST %s\n, ...)' to see which code branches are taken, and run it as 'amavisd debug' to be able to see the stderr (or do: amavisd foreground 2/tmp/err.log ) Mark --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Log Analyzer
On Sep 18, 2005, at 02:17 PM, Mark Martinec wrote: Matt, I need a program that can analyze three separate mail logs (one from relay1, one from relay2, and one from relay3) and generate statistics on them. I know there was an amavis program that is no longer maintained, and someone sent me a patched version of something which I couldn't get working. Is there a good log analyzer out there? I don't necessarilly need graphs, just statistics (1000 spam messages blocked, 25 passed, etc. etc.) Not exactly what you are asking for, but such raw statistics is reported by amavisd-agent, for all processed mail since amavisd start: ContentBadHdrMsgs 166 2/h0.4 % (InMsgs) ContentBannedMsgs15 0/h0.0 % (InMsgs) ContentCleanMsgs 9947146/h 23.4 % (InMsgs) ContentSpamMsgs 30726452/h 72.2 % (InMsgs) ContentVirusMsgs 1700 25/h4.0 % (InMsgs) InMsgs42554626/h 100.0 % (InMsgs) Mark Another one to consider. http://www.daleenterprise.com/amavis-stats I took this over this project, will be public in a day or so, I'll send a link to the list. -- Dale --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
Re: [AMaViS-user] Can't get logging to maillog in chroot on OpenBSD 3.7 with amavisd 2.3.3
On Sun, Sep 18, 2005 at 08:29:20PM +0200, Mark Martinec wrote: Hi, I've been installing systems per the Vintinner wiki for some time now without any issues until now. I've configured the system per all instructions I can find to deal with this issue. There have been a few sparse threads on the subject; http://marc.theaimsgroup.com/?l=amavis-userm=112035005722116w=2 http://marc.theaimsgroup.com/?l=amavis-userm=112091901015777w=2 However, this does nothing for me. The chroot environment is sound, syslogd is creating a socket in /var/amavisd/dev/log ... With this setting amavisd is spewing to the console and I get nada in maillog. What gives? I have no idea. After that first report I stared at the code, did even some modifications to it with 2.3.2, but I don't see what could be causing the behaviour described. Perhaps it is specific to OpenBSD, in which case someone will need to help with debugging. Try first if it works without chrooting. Other things to check: 1) Could there perhaps be a wrapper script used to start it which is invoking amavisd in debug mode? 2) Alternatively, check whether the syslog facility you're sending to got set to something other than mail, and check the /etc/syslog.conf file and see if the log facility which amavisd is sending to gets automatically mirrored to the console. (In that case amavisd would be correctly logging via syslog but it would still go on the console.) -- Clifton -- Clifton Royston -- [EMAIL PROTECTED] Tiki Technologies Lead Programmer/Software Architect My own personal theory is that this is the very dawn of the world. We're hardly more than an eyeblink away from the fall of Troy, and scarcely an interglaciation removed from the Altamira cave painters. We live in extremely interesting ancient times. I like this idea. It encourages us to be earnest and ingenious and brave, as befits ancestral peoples; but keeps us from deciding that because we don't know all the answers, they must be unknowable and thus unprofitable to pursue. -- Teresa Nielsen Hayden, 1995 --- SF.Net email is sponsored by: Tame your development challenges with Apache's Geronimo App Server. Download it for free - -and be entered to win a 42 plasma tv or your very own Sony(tm)PSP. Click here to play: http://sourceforge.net/geronimo.php ___ AMaViS-user mailing list AMaViS-user@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/amavis-user AMaViS-FAQ:http://www.amavis.org/amavis-faq.php3 AMaViS-HowTos:http://www.amavis.org/howto/
