Re: [Declude.JunkMail] declude / spamassassin - topic change
Hi Sandy, Sanford Whiteman wrote: So what you're asking for is a switch like -e, but which is more conditional, allowing the possible result codes: - 0, if -lt not met - , if -lt met and <= -et value - -et value, if > -et value Exactly. Sounds like a good option, and I can't think of a way of kludging that in one external test instance with the current switches (you could actually do it with multiple SPAMC32 runs -- don't!). I'll add it in. Excellent. It will really allow me to further punish email that SA considers blatant spam. Thanks! -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Keith, Keith Johnson wrote: Travis, In your setup, your Declude is running on a Windows 2k/2003 box calling your SA server on a Linux box on the same local network? I guess the speeds are much the same as quering a local DNS server for lookups. Sounds great, I will have look into this, my loads are around the same for our three servers. Thanks again, This what I was trying to recommend - have spamd on a different box - running on what ever platform you like. With that scenario spamassassin has nil effect on the imail [declude] box. Sorry I was not clear on that! -Nicko Keith From: [EMAIL PROTECTED] on behalf of Travis Sullivan Sent: Tue 9/20/2005 6:31 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] declude / spamassassin Nick, If you don't mind, is SA heavy on the CPU? What kinda load are you running with SA? I have 3k plus users getting 300k emails per day... my SA is running on a linux server, P4 2ghz... no increase in load when I started using SA with declude today. The best config I have set is: SPAMASSASSIN externalnonzero "e:\imail\declude\spamd\spamc32.exe -d 209.215.97.193 -r -lt 4 -et 6 -f" 3 0 I 'think' so far that spamassassin only reports if SA's score is 4 or more, if so, I score it a 3 on the email test. I am still playing with the values to tune the system. thanks for everyone's help today. I hope to have MRTG running reports on declude soon to show some statistics. Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Matt, The BITMASK tests have a limit of 32 individual tests, since we expect a 32-bit integer to be returned to Declude. David Franco-Rocha Declude Technical / Engineering - Original Message - From: Matt To: Declude.JunkMail@declude.com Sent: Tuesday, September 20, 2005 5:32 PM Subject: Re: [Declude.JunkMail] declude / spamassassin Sandy,The latest Declude's support bitmasked result codes. You might consider creating a user maintained map from tests failed in SA to bitmapped result codes returned to Declude. I'm not sure what the limit might be in Declude for the number of unique tests, but I have managed to use 16 so far without issue. It probably is limited to either 16 or 32 if it is limited. It might very well not be.MattSanford Whiteman wrote: Thanks guys, I have it working now! BTW... any way to retrieve any info from SA with regards to test failed or weight? This info is not currently used by Declude, though it is accessible when you run SPAMC32 against a message from the command line. Declude Junkmail doesn't support the use of "report" files as in Declude Virus -- secondary files left behind by external tests whose results can then be parsed by the Declude for insertion in headers or weighting. If it did, it'd be straightforward to drop a report file for each message and have these integrated into the Declude log. Anyway, the next version of SPAMC32 is coming out very soon with the ability to consult a local SPAMC32 log file (rather than the main SPAMD log file) to check which individual SA rules failed for each message; this is a definite need. As for SPAMC32 inserting headers directly, this is technically simple, but I have purposely avoided implementing this functionality because it will add significant extra disk I/O to reread and alter the original message, rather than letting Declude add all of its headers at once when done processing. Plus, adding the names of 10, 20, or more SA rules to the message headers can be pretty sloppy. So, in sum, header insertion will likely be added as an optional command-line switch, but it's not as much of a priority as the local logging function. I will keep the list posted, as always. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Sandy, The utility in this is that the tests failed would be centralized in one application, Delude, and available for combo tests and easier diagnosis within that framework. Of course SpamAssassin has a multitude of different tests and scores within those tests, and it isn't practical to do everything in bitmask fashion, but I could see some utility in separating out a bayesian test as BAYESIAN-LOW, BAYESIAN-MED and BAYESIAN-HIGH for instance, or lumping together multiple Nigerian/Advance Fee Fraud filters into one separate test trackable by Declude. I understand that this probably isn't within the scope of your current plans, but it does offer some interesting potential for the future. I personally find the combo filtering technique within Declude to be very, very valuable. For instance finding out that a message hit both a DUL list and SPAMCOP is enough to delete a message, but these tests are not reliable enough to even hold on individually (IMO of course). Matt Sanford Whiteman wrote: The latest Declude's support bitmasked result codes. You might consider creating a user maintained map from tests failed in SA to bitmapped result codes returned to Declude. I'm not sure what the limit might be in Declude for the number of unique tests, but I have managed to use 16 so far without issue. It probably is limited to either 16 or 32 if it is limited. It might very well not be. Interesting possibility, and I can see the usefulness. . . would be a certain bandwidth saver vs. having different SPAMD instances (and different SPAMC32 runs) for different rulesets, but what you save in bandwidth might be offset be a nearly ridiculous amount of complexity on the client side. One SPAMD might have tens of rulesets and thousands of rules, so trying to bitmask to identify the rules would be pretty crazy. Bitmasking at the ruleset level would be doable, but you wouldn't get the actual offending RegEx line from that, just the file that contained it. Rather than trying to match result codes up to a matrix of all possible results, I think such a full-featured external test as SpamAssassin is really a better push for a "dumb" report.txt kind of feature, which could simply gulp up a TESTSFAILED-style string returned from SPAMC32 and either put it in the logs without inspection, put it into a Declude variable for further use, or whatever. In the meantime, SPAMC32's upcoming local logging by queuefile name should help immensely with tracking results by rule. Remember that SA has its own weighting features, so tweaking rule-level weights and inter-rule/inter-ruleset dependencies lets you do weight management like Declude's before returning an aggregate SPAMC32 weight. . . albeit at a management cost vs. doing as much as possible within Declude. I'd see bitmasking in the far future, though I can't see putting aside time for it right now. Thanks, Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
keith wrote: In your setup, your Declude is running on a Windows 2k/2003 box calling your SA server on a Linux box on the same local network? I guess the speeds are much the same as quering a local DNS server for lookups. Sounds great, I will have look into this, my loads are around the same for our three servers. Thanks again, Yes Keith, my SA linux server is running on the local network. Speeds are wonderful. I am very happy to report that adding SA to the declude weighting system is amazing! I have increased my hold score, lowered many other scores a point here, two points there, and spam is silent for the moment :) MRTG statistics should be done tomorrow, we will see then exactly what is going on. Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] declude / spamassassin
Travis, In your setup, your Declude is running on a Windows 2k/2003 box calling your SA server on a Linux box on the same local network? I guess the speeds are much the same as quering a local DNS server for lookups. Sounds great, I will have look into this, my loads are around the same for our three servers. Thanks again, Keith From: [EMAIL PROTECTED] on behalf of Travis Sullivan Sent: Tue 9/20/2005 6:31 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] declude / spamassassin >>Nick, >> If you don't mind, is SA heavy on the CPU? What kinda load are >>you running with SA? I have 3k plus users getting 300k emails per day... my SA is running on a linux server, P4 2ghz... no increase in load when I started using SA with declude today. The best config I have set is: SPAMASSASSIN externalnonzero "e:\imail\declude\spamd\spamc32.exe -d 209.215.97.193 -r -lt 4 -et 6 -f" 3 0 I 'think' so far that spamassassin only reports if SA's score is 4 or more, if so, I score it a 3 on the email test. I am still playing with the values to tune the system. thanks for everyone's help today. I hope to have MRTG running reports on declude soon to show some statistics. Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. <>
Re: [Declude.JunkMail] declude / spamassassin
Hi Keith, Keith Johnson wrote: Nick, If you don't mind, is SA heavy on the CPU? What kinda load are you running with SA? First I am no authority here but am willing to share my experience. Sandy's spamd32 seems to be no issue as near as I can tell. The cpu issue is with spamd. .I have spamd running under cygwin on an older dual PIII 1.13 processor machine. Its raid 5 with a gig of ram. At least on my system spamd will spawn 6 perl processes each w/about 75k of ram. A couple of weeks ago we had some spam leakage to the Imail box with the result of like 2 mill or more emails in the spool/overflow dir. The main server was fine but the spamd box was running at 90-100% full cpu.to clear up that mess. If I guessed I would say the max the spamd box could do was 3 email a second.So bottom line is how many email would you max process in a second. would dictate if a separate spamd box would be necessary. Overall now I am doing ~ 15,000 email a day and the spamd box is running easy under 10%load. I personally really like spamassassin under Declude. With the weighting system of Declude it makes another excellent test. -Nick --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Nick, If you don't mind, is SA heavy on the CPU? What kinda load are you running with SA? I have 3k plus users getting 300k emails per day... my SA is running on a linux server, P4 2ghz... no increase in load when I started using SA with declude today. The best config I have set is: SPAMASSASSIN externalnonzero "e:\imail\declude\spamd\spamc32.exe -d 209.215.97.193 -r -lt 4 -et 6 -f" 3 0 I 'think' so far that spamassassin only reports if SA's score is 4 or more, if so, I score it a 3 on the email test. I am still playing with the values to tune the system. thanks for everyone's help today. I hope to have MRTG running reports on declude soon to show some statistics. Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin - topic change
Anyway, the next version of SPAMC32 is coming out very soon with the ability to consult a local SPAMC32 log file (rather than the main SPAMD log file) to check which individual SA rules failed for each message; this is a definite need. Hi Sandy, Well since you are working on the code - something that for me would be nice is a modification to your "-e" switch. What I would like to have happen is return the SA weight only after a threshold is met. For example with a setting of 5 an email of 4.99 would not be considered spam but anything above would and the total score would be passed. Hopefully I'm clear on this - I'm trying! Thanks for the consideration. -Nick As for SPAMC32 inserting headers directly, this is technically simple, but I have purposely avoided implementing this functionality because it will add significant extra disk I/O to reread and alter the original message, rather than letting Declude add all of its headers at once when done processing. Plus, adding the names of 10, 20, or more SA rules to the message headers can be pretty sloppy. So, in sum, header insertion will likely be added as an optional command-line switch, but it's not as much of a priority as the local logging function. I will keep the list posted, as always. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] declude / spamassassin
Nick, If you don't mind, is SA heavy on the CPU? What kinda load are you running with SA? We are wanting to pursue it, however, Sanford had mentioned awhile back it would be heavy on the CPU. Thanks again, Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nick Hayer Sent: Tuesday, September 20, 2005 5:44 PM To: Declude.JunkMail@declude.com Subject: Re: [Declude.JunkMail] declude / spamassassin Travis Sullivan wrote: > So, the only thing I will see in the headers is the total score SA > results: > > X-RBL-Warning: SPAMASSASSIN: Message failed SPAMASSASSIN: 3. > > And declude scores only for the test group, like other tests in the > global.cfg file? Correct. Very slick huh? And good job getting it to go! -Nick > > Travis > --- > This E-mail came from the Declude.JunkMail mailing list. To > unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type > "unsubscribe Declude.JunkMail". The archives can be found at > http://www.mail-archive.com. > > --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Travis Sullivan wrote: So, the only thing I will see in the headers is the total score SA results: X-RBL-Warning: SPAMASSASSIN: Message failed SPAMASSASSIN: 3. And declude scores only for the test group, like other tests in the global.cfg file? Correct. Very slick huh? And good job getting it to go! -Nick Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Sandy, The latest Declude's support bitmasked result codes. You might consider creating a user maintained map from tests failed in SA to bitmapped result codes returned to Declude. I'm not sure what the limit might be in Declude for the number of unique tests, but I have managed to use 16 so far without issue. It probably is limited to either 16 or 32 if it is limited. It might very well not be. Matt Sanford Whiteman wrote: Thanks guys, I have it working now! BTW... any way to retrieve any info from SA with regards to test failed or weight? This info is not currently used by Declude, though it is accessible when you run SPAMC32 against a message from the command line. Declude Junkmail doesn't support the use of "report" files as in Declude Virus -- secondary files left behind by external tests whose results can then be parsed by the Declude for insertion in headers or weighting. If it did, it'd be straightforward to drop a report file for each message and have these integrated into the Declude log. Anyway, the next version of SPAMC32 is coming out very soon with the ability to consult a local SPAMC32 log file (rather than the main SPAMD log file) to check which individual SA rules failed for each message; this is a definite need. As for SPAMC32 inserting headers directly, this is technically simple, but I have purposely avoided implementing this functionality because it will add significant extra disk I/O to reread and alter the original message, rather than letting Declude add all of its headers at once when done processing. Plus, adding the names of 10, 20, or more SA rules to the message headers can be pretty sloppy. So, in sum, header insertion will likely be added as an optional command-line switch, but it's not as much of a priority as the local logging function. I will keep the list posted, as always. --Sandy Sanford Whiteman, Chief Technologist Broadleaf Systems, a division of Cypress Integrated Systems, Inc. e-mail: [EMAIL PROTECTED] SpamAssassin plugs into Declude! http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release/ Defuse Dictionary Attacks: Turn Exchange or IMail mailboxes into IMail Aliases! http://www.imprimia.com/products/software/freeutils/exchange2aliases/download/release/ http://www.imprimia.com/products/software/freeutils/ldap2aliases/download/release/ --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Thanks guys, I have it working now! BTW... any way to retrieve any info from SA with regards to test failed or weight? This is what I have in my logs: Msg failed SPAMASSASSIN (Message failed SPAMASSASSIN: 1.). Action=WARN All I have is a 1, that is the score I have set as the test weight, for now until I figure it all out, with your help of course :) Thanks Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Travis Sullivan wrote: SPAMASSASSINexternalnonzero "c:\imail\declude\spamc32.exe -cw %WEIGHT% -sw 10 -f" 0 -f is supposed to be the filename... but the example doesn't give one. So, how does spamc send a file name to spamd? Declude hands it off to it. Actually I believe the entire email is given to spamc32.[ It works and works well.] -Nick Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
SPAMASSASSINexternalnonzero "c:\imail\declude\spamc32.exe -cw %WEIGHT% -sw 10 -f" 0 -f is supposed to be the filename... but the example doesn't give one. So, how does spamc send a file name to spamd? Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Hi Travis - [I just saw Bill Landry's post - my suggestions here relate to calling spamd with an external test. If you have spamassassin in front of imail and its tagging email forget my suggestions.. - no need to do it twice!] Travis Sullivan wrote: EXTERNAL.SPAMASSASSIN_v3.04externalNONZERO "e:\imail\declude\spamd\spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f" 60 (minus the word wrap, is this exactly as it needs to be entered?) Yes it should work fine. Note the the ip address is the ip address of your spamd server. So that you will have to change. what are these flags? spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f If you download Sandy's spamc32.exe it includes docs and samples. He can explain it better than I. [I forgot.. sorry!. ] -Nick - Original Message - From: "Nick Hayer" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 12:45 PM Subject: Re: [Declude.JunkMail] declude / spamassassin Hi Travis - Sandy's plugin does the 'somehow' part. Simply have it point to your spamd. Here is the line from my global.cfg that may help - EXTERNAL.SPAMASSASSIN_v3.04externalNONZERO "e:\imail\declude\spamd\spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f" 60 -Nick Travis Sullivan wrote: Sorry, that was a typo, remove = remote :) I am looking into your plugin now, is this plug in the only way? I simply can't just use the IP of my spamassasin server somehow? - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 12:29 PM Subject: RE: [Declude.JunkMail] declude / spamassassin Travis not sure what you are asking with "how to use a remove" :) 1. To remove the external test just # comment out the test in your global.cfg 2. To use spamassassin I would suggest using this plugin SPAMC32 http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Tuesday, September 20, 2005 1:21 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] declude / spamassassin I can't find documentation with regards to how to use a remove spamassassin server as an external test in declude v 1.81. Any help will be much appreciated. Thanks! Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
The SA server is not inline with my declude server. My SA server runs on our unix machines. I want to take advantage of that system as another test for declude to score against spam. So, in order to access it, I need to know how to setup declude to use this external feature. I exported the help file out of spamc32.exe, I just now need to confirm the line to place into my global.cfg file. This is an example of one of my entries: SECURITYSAGE rhsbl blackhole.securitysage.com 127.0.0.5 3 0 This is an example given by one user: EXTERNAL.SPAMASSASSIN_v3.04externalNONZERO "e:\imail\declude\spamd\spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f" 60 Is this entire line word for word, minus the IP address of the SA server. Do I use the quotes, and what is the nonzero command? Thanks so much, I am close I know :) Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Why would you want to do this and send the message through SA again if it's already running on your gateway? Bill - Original Message - From: "Travis Sullivan" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 11:24 AM Subject: Re: [Declude.JunkMail] declude / spamassassin These are the columns in my global.cfg file, can you help me plug this in? SECURITYSAGE rhsbl blackhole.securitysage.com 127.0.0.5 3 0 (minus the word wrap, is this exactly as it needs to be entered?) what are these flags? spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f EXTERNAL.SPAMASSASSIN_v3.04externalNONZERO "e:\imail\declude\spamd\spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f" 60 - Original Message - From: "Nick Hayer" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 12:45 PM Subject: Re: [Declude.JunkMail] declude / spamassassin Hi Travis - Sandy's plugin does the 'somehow' part. Simply have it point to your spamd. Here is the line from my global.cfg that may help - EXTERNAL.SPAMASSASSIN_v3.04externalNONZERO "e:\imail\declude\spamd\spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f" 60 -Nick Travis Sullivan wrote: Sorry, that was a typo, remove = remote :) I am looking into your plugin now, is this plug in the only way? I simply can't just use the IP of my spamassasin server somehow? - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 12:29 PM Subject: RE: [Declude.JunkMail] declude / spamassassin Travis not sure what you are asking with "how to use a remove" :) 1. To remove the external test just # comment out the test in your global.cfg 2. To use spamassassin I would suggest using this plugin SPAMC32 http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Tuesday, September 20, 2005 1:21 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] declude / spamassassin I can't find documentation with regards to how to use a remove spamassassin server as an external test in declude v 1.81. Any help will be much appreciated. Thanks! Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
These are the columns in my global.cfg file, can you help me plug this in? SECURITYSAGE rhsbl blackhole.securitysage.com 127.0.0.5 3 0 (minus the word wrap, is this exactly as it needs to be entered?) what are these flags? spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f EXTERNAL.SPAMASSASSIN_v3.04externalNONZERO "e:\imail\declude\spamd\spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f" 60 - Original Message - From: "Nick Hayer" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 12:45 PM Subject: Re: [Declude.JunkMail] declude / spamassassin Hi Travis - Sandy's plugin does the 'somehow' part. Simply have it point to your spamd. Here is the line from my global.cfg that may help - EXTERNAL.SPAMASSASSIN_v3.04externalNONZERO "e:\imail\declude\spamd\spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f" 60 -Nick Travis Sullivan wrote: Sorry, that was a typo, remove = remote :) I am looking into your plugin now, is this plug in the only way? I simply can't just use the IP of my spamassasin server somehow? - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 12:29 PM Subject: RE: [Declude.JunkMail] declude / spamassassin Travis not sure what you are asking with "how to use a remove" :) 1. To remove the external test just # comment out the test in your global.cfg 2. To use spamassassin I would suggest using this plugin SPAMC32 http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Tuesday, September 20, 2005 1:21 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] declude / spamassassin I can't find documentation with regards to how to use a remove spamassassin server as an external test in declude v 1.81. Any help will be much appreciated. Thanks! Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Hi Travis - Sandy's plugin does the 'somehow' part. Simply have it point to your spamd. Here is the line from my global.cfg that may help - EXTERNAL.SPAMASSASSIN_v3.04externalNONZERO "e:\imail\declude\spamd\spamc32.exe -D -d 12.152.254.3 -a 16000 -lt 4 ht 100 -f" 60 -Nick Travis Sullivan wrote: Sorry, that was a typo, remove = remote :) I am looking into your plugin now, is this plug in the only way? I simply can't just use the IP of my spamassasin server somehow? - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 12:29 PM Subject: RE: [Declude.JunkMail] declude / spamassassin Travis not sure what you are asking with "how to use a remove" :) 1. To remove the external test just # comment out the test in your global.cfg 2. To use spamassassin I would suggest using this plugin SPAMC32 http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Tuesday, September 20, 2005 1:21 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] declude / spamassassin I can't find documentation with regards to how to use a remove spamassassin server as an external test in declude v 1.81. Any help will be much appreciated. Thanks! Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
I have spamassasin running on my unix servers. I want to use this as an external test for my imail/declude system as an external test. Thanks, Travis - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 12:29 PM Subject: RE: [Declude.JunkMail] declude / spamassassin Travis not sure what you are asking with "how to use a remove" :) 1. To remove the external test just # comment out the test in your global.cfg 2. To use spamassassin I would suggest using this plugin SPAMC32 http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Tuesday, September 20, 2005 1:21 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] declude / spamassassin I can't find documentation with regards to how to use a remove spamassassin server as an external test in declude v 1.81. Any help will be much appreciated. Thanks! Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
Re: [Declude.JunkMail] declude / spamassassin
Sorry, that was a typo, remove = remote :) I am looking into your plugin now, is this plug in the only way? I simply can't just use the IP of my spamassasin server somehow? - Original Message - From: "David Barker" <[EMAIL PROTECTED]> To: Sent: Tuesday, September 20, 2005 12:29 PM Subject: RE: [Declude.JunkMail] declude / spamassassin Travis not sure what you are asking with "how to use a remove" :) 1. To remove the external test just # comment out the test in your global.cfg 2. To use spamassassin I would suggest using this plugin SPAMC32 http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Tuesday, September 20, 2005 1:21 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] declude / spamassassin I can't find documentation with regards to how to use a remove spamassassin server as an external test in declude v 1.81. Any help will be much appreciated. Thanks! Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
RE: [Declude.JunkMail] declude / spamassassin
Travis not sure what you are asking with "how to use a remove" :) 1. To remove the external test just # comment out the test in your global.cfg 2. To use spamassassin I would suggest using this plugin SPAMC32 http://www.imprimia.com/products/software/freeutils/SPAMC32/download/release / David B www.declude.com -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Travis Sullivan Sent: Tuesday, September 20, 2005 1:21 PM To: declude.junkmail@declude.com Subject: [Declude.JunkMail] declude / spamassassin I can't find documentation with regards to how to use a remove spamassassin server as an external test in declude v 1.81. Any help will be much appreciated. Thanks! Travis --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com. --- This E-mail came from the Declude.JunkMail mailing list. To unsubscribe, just send an E-mail to [EMAIL PROTECTED], and type "unsubscribe Declude.JunkMail". The archives can be found at http://www.mail-archive.com.
