Re: [Mimedefang] Questions about stream_by_recipient and problems it creates.

2007-01-24 Thread Steffen Kaiser

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 23 Jan 2007, David F. Skoll wrote:


In one sense, it will work.  However, in a very important sense, it will
fail miserably.  Most senders don't have a clue how to interpret a DSN,


! This is very true !

Even people, who - you think - are accomodated with email and its failures 
since years, tend to ignore the contents of DSNs. Maybe, because of all 
the SPAM backscatter of forged users and the (un-)helpful 
your-message-contained-a-virus messages.



even assuming their mail server preserves the text of the DSN.  You'll
be flooded with support queries.

Bye,

- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBRbcch+gJIbZtwg6XAQKfjgf8CxtLqbGpZ+VOAE5Em9LRf6+2EEqAJbAN
AzWTDExDcsPHVbDYnIiSekIrs4w8k5mCKEO70mELXcfvacCnEIXWYZq/3W3oJUup
IMIoi8oINT5Cda9Eb3Re/YMUWRI4NeMtIFUsoMSheQGxbhcMPR3tggIJunlroEhD
qkr/+u9aCfMHzgBjOdysTJBWEIuj8o0fYNl8PySkvoSkLzrFvFZs4LmSVvteVSTx
s2znbRGIPsScyvbIVkQsZGiXVeTx5QCbzVTXj6Xkjt2dWO4j5WQzU649EjD0U3ly
lH1JJaUHS9fhrRcZieoI7T5U/RcNQgwWettfxbKElKJcxAY+DmbW3Q==
=MaDY
-END PGP SIGNATURE-
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Questions about stream_by_recipient and problems it creates.

2007-01-24 Thread Steffen Kaiser

-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

On Tue, 23 Jan 2007, Matthew Schumacher wrote:


tagged and recipient B wants spam rejected, then we reject the message
with Recipient B thinks this is spam (message was delivered to other
recipients) then in filter_end we queue the message for recipient A.


Hmm:

a) it's not Recipient B thinking the mail is SPAM, but the automated 
filter.


b) when Recipient B would think like so, to delete the mail should be OK.

c) Because it's an automated delete, better log it, so Admin G can defend 
himself in case Manager M wants his head pulled off.


I wonder if users would accept daily or weekly batched drop notices, 
like:


Hello Recipient B,

according to your SPAM settings the following mails had been silently 
deleted, the sender was NOT informed thereabout:


Id Date   From  Subject
l034x  2007-01-10 [EMAIL PROTECTED] Eagle version 1.0 is available
...

if you think, one of the mails was discarded in error, please re-request 
the information from the sender _and_ inform Admin G about the falsely 
deleted mail (Please include the Id of the mail).


Bye,

- -- 
Steffen Kaiser

-BEGIN PGP SIGNATURE-
Version: GnuPG v1.4.6 (GNU/Linux)

iQEVAwUBRbcefugJIbZtwg6XAQLHXwf/ZggAMDk/IOW18DuSDR5rQ8Tvff/kUFMZ
3YS5/2jCmZflRW/U4T/uwS5oM6zDutaQEdpn6SP8QpRJrMSF303DksySQHG7Nj7w
1i6JIT92HngJfznc6AQeacBShi5RIWlX59cG2CO8WKnM3PcQvZNOR6qPfkhC7GA/
TH7mlciF1jb3fdHj+lqVl6tkjMvpXkGTiEPvMnoCs05FfTgUmIVkZN+7NBYgfgyi
d7BG7U0UTV1Mz6szPIixFLjhuoUO1EHtwSa0ZghwZHbMf7KqX3agkcQFbizeB8gV
6/hnIF72OF8lwnzNVbFF6aO2X33emzNsub7foSK2VynaVTRr46eD5w==
=hH5I
-END PGP SIGNATURE-
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Questions about stream_by_recipient and problems it creates.

2007-01-24 Thread Jan-Pieter Cornet
On Tue, Jan 23, 2007 at 01:36:43PM -0900, Matthew Schumacher wrote:
  A fourth option is to introduce a spam folder, where you file
  suspected spams. We already use this currently. Then if you cannot
  reject an email for one user (because another user does want to
  receive the email), flag the message to be delivered to the 
  spam folder.
 
 This doesn't work because most of the people using the mail system use
 POP3.  I would love for people to ditch pop3, but due to poor support
 for IMAP in widely-used-but-marginal (as David puts it) clients make
 IMAP pretty lame.

We actually currently use a spam folder that is a completely separate
account. Each user has a shadow account as a spam drop box. Everyone
can use that, just setup another account in your mail client. We
even provide a hotlink log in to my spam account from webmail.

This also makes it very easy on the MIMEDefang side: to divert to
a spambox, simply remove the recipient and add the recipient's spambox.

I'd like to introduce an optional spam/ folder to be used for our
IMAP customers, but I'm still not entirely sure how to pass a flag
to mail.local to _one specific_ recipient from within MIMEDefang.
And because of privacy, you can't have a header this should go into
joe's spambox, of course.

 This is an interesting idea, temp-failing recipients with dissimilar
 spam settings, but due to lame email clients, it sounds like it would be
 a lot of trouble.

Erm... what do you care about insufficiently conforming email clients on
your incoming mail server? There shouldn't be any clients talking to
that MTA directly anyway.

-- 
Jan-Pieter Cornet [EMAIL PROTECTED]
!! Disclamer: The addressee of this email is not the intended recipient. !!
!! This is only a test of the echelon and data retention systems. Please !!
!! archive this message indefinitely to allow verification of the logs.  !!
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] IMAP (was: Questions about stream_by_recipient and problems it creates.)

2007-01-24 Thread Jan-Pieter Cornet
On Tue, Jan 23, 2007 at 04:05:21PM -0800, Kenneth Porter wrote:
 --On Tuesday, January 23, 2007 1:36 PM -0900 Matthew Schumacher 
 [EMAIL PROTECTED] wrote:
 
 This doesn't work because most of the people using the mail system use
 POP3.  I would love for people to ditch pop3, but due to poor support
 for IMAP in widely-used-but-marginal (as David puts it) clients make
 IMAP pretty lame.
 
 Mulberry recently went free, and will go open-source soon. (The author is 

That's not the point, I think. Thunderbird and Evolution are already
open source, and free, and pretty decent IMAP email clients (but thanks
for the hint, I like having different mail clients to test with).

Users actually need to _do_ something to switch to imap, and rethink
the way they store and view email. And last I heard Eudora and
Outlook Express still didn't support imap anyway...

Hell, if we could just teach users not to be stupid the entire spam
problem would vanish overnight too...

-- 
Jan-Pieter Cornet [EMAIL PROTECTED]
!! Disclamer: The addressee of this email is not the intended recipient. !!
!! This is only a test of the echelon and data retention systems. Please !!
!! archive this message indefinitely to allow verification of the logs.  !!
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] IMAP (was: Questions about stream_by_recipient and problems it creates.)

2007-01-24 Thread leloup
Am Mittwoch Januar 24 2007 11:04 schrieb Jan-Pieter Cornet:

 Users actually need to _do_ something to switch to imap,

right, give new config in their clients :-)

 and rethink 
 the way they store and view email. And last I heard Eudora and
 Outlook Express still didn't support imap anyway...

Don't know about Outlook Express, but Eudora supports IMAP since quite a 
while. Only problem we have here: it seems you can not tell Eudora to use the 
Out-Box on the IMAP-Server for your outgoing mail... (we solve this with a 
client-side filter for outgoing mail)
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Some spam tests not running Timeout maybe

2007-01-24 Thread Jan-Pieter Cornet
On Tue, Jan 23, 2007 at 06:24:53PM -0800, David Reta wrote:
 I am having an issue with some spam slipping through. When I check the
 MSG.0 file from the quarantine against a manual run of the
 ENTIRE_MESSAGE file from the quarantine there are rules that are not
 hit. I am running them manually as the same user as mimedefang so I
 don't think it could be a permission issue. Is there a timeout setting
 or something else I could be missing that could be causing this?
  
 Any help is appreciated.

spamassassin as a standalone binary uses another configuration file
as the spamassassin integrated into mimedefang does. That is
likely your problem... try to compare with:

spamassassin -p /etc/mail/sa-mimedefang.cf  ENTIRE_MESSAGE

Then possibly tweak your sa-mimedefang.cf
  
 Here is an example from the quarantine
  
 [EMAIL PROTECTED] qdir-2007-01-23-16.27.29-001]$ more MSG.0 
[...]
 Content analysis details:   (0.6 points, 5.0 required)
  
  0.603 5 BAYES_00,HTML_MESSAGE,MIME_HTML_ONLY,NO_DNS_FOR_FROM
  
 Here is the output from when it manually
  
 [EMAIL PROTECTED] qdir-2007-01-23-16.27.29-001]$  spamassassin  
 ENTIRE_MESSAGE 
[...]
 X-Spam-Status: Yes, score=5.8 required=5.0 tests=BAYES_50,DBL_12_LETTER_FLDR,
 DBL_12_LETTER_PGIMG,HTML_MESSAGE,MIME_HTML_ONLY,SARE_FORGED_PAYPAL,
 SARE_FORGED_PAYPAL_C,SARE_SPOOF_BADURL,SPF_HELO_PASS autolearn=no 
 version=3.1.7

Note that you also use a different bayes database, apparently. Compare
the configs of sa-mimedefang.cf and all *.cf files under
/etc/mail/spamassassin. You could if you like put something like
include /etc/mail/spamassassin/local.cf in your sa-mimedefang.cf,
along with any other *.cf files you want to use.

(This assumes spamassassin actually uses /etc/mail/spamassassin,
and mimedefang uses /etc/mail. Substitute the appropriate paths for
your setup, if necessary)

-- 
Jan-Pieter Cornet [EMAIL PROTECTED]
!! Disclamer: The addressee of this email is not the intended recipient. !!
!! This is only a test of the echelon and data retention systems. Please !!
!! archive this message indefinitely to allow verification of the logs.  !!
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] IMAP (was: Questions about stream_by_recipient and problems it creates.)

2007-01-24 Thread Rob MacGregor

On 1/24/07, Jan-Pieter Cornet [EMAIL PROTECTED] wrote:


Users actually need to _do_ something to switch to imap, and rethink
the way they store and view email. And last I heard Eudora and
Outlook Express still didn't support imap anyway...


Outlook Express has had IMAP support since at least v4.

--
Please keep list traffic on the list.

Rob MacGregor
 Whoever fights monsters should see to it that in the process he
   doesn't become a monster.  Friedrich Nietzsche
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Some spam tests not running Timeout maybe

2007-01-24 Thread Kees Theunissen
On Tue, 23 Jan 2007, David Reta wrote:

I am having an issue with some spam slipping through. When I check
the MSG.0 file from the quarantine against a manual run of the
ENTIRE_MESSAGE file from the quarantine there are rules that are not
hit. I am running them manually as the same user as mimedefang so I
don't think it could be a permission issue. Is there a timeout setting
or something else I could be missing that could be causing this?


Mimedefang uses its own config file for SpamAssassin. So running
SpamAssassin manually will still differ from running under MimeDefang,
even if you do this as the same user.

The config file used by MimeDefang is probably /etc/mail/sa-mimedefang.cf.
The default file in the MimeDefang distribution contains the following
lines:

   # By default, SpamAssassin will run RBL checks.  If your ISP already
   # does this, set this to 1.

   skip_rbl_checks 1




Regards,

Kees.

-- 
Kees Theunissen
F.O.M.-Institute for Plasma Physics Rijnhuizen, Nieuwegein, Netherlands
E-mail: [EMAIL PROTECTED],  Tel: (+31|0)306096724,  Fax: (+31|0)306031204

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] IMAP

2007-01-24 Thread Kevin A. McGrail

Users actually need to _do_ something to switch to imap, and rethink
the way they store and view email. And last I heard Eudora and
Outlook Express still didn't support imap anyway...


I've use Outlook Express on a daily basis for many years (8+ I'm thinking) 
using only IMAP protocol.  It's got quirks but overall, if you appreciate 
the benefits of IMAP, they are easy to ignore.  So not sure what you mean 
when you say doesn't support it.  And paired with Dovecot, it's really quite 
nice.


Regards,
KAM 


___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


[Mimedefang] Re: IMAP

2007-01-24 Thread Scott Silva
Jan-Pieter Cornet spake the following on 1/24/2007 2:04 AM:
 On Tue, Jan 23, 2007 at 04:05:21PM -0800, Kenneth Porter wrote:
 --On Tuesday, January 23, 2007 1:36 PM -0900 Matthew Schumacher 
 [EMAIL PROTECTED] wrote:

 This doesn't work because most of the people using the mail system use
 POP3.  I would love for people to ditch pop3, but due to poor support
 for IMAP in widely-used-but-marginal (as David puts it) clients make
 IMAP pretty lame.
 Mulberry recently went free, and will go open-source soon. (The author is 
 
 That's not the point, I think. Thunderbird and Evolution are already
 open source, and free, and pretty decent IMAP email clients (but thanks
 for the hint, I like having different mail clients to test with).
 
 Users actually need to _do_ something to switch to imap, and rethink
 the way they store and view email. And last I heard Eudora and
 Outlook Express still didn't support imap anyway...
 
 Hell, if we could just teach users not to be stupid the entire spam
 problem would vanish overnight too...
 
Outlook express does support IMAP, but it is very kludgy.
And after users are used to POP3, they get lost with the differences.
I just had a user that asked me why when he deleted and then purged mail, it
didn't go into the deleted folder. I had to tell him that the deleted folder
is a trash can, not a storage location, and wanted to tell him to look up
purge in the dictionary.
-- 

MailScanner is like deodorant...
You hope everybody uses it, and
you notice quickly if they don't

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Questions about stream_by_recipient and problems it creates.

2007-01-24 Thread Michael Sofka
 I don't know if I can bring myself to do that, occasionally
 we have problems with false positives, so silently dropping
 mail would seriously aggravate the issue.  People around
 here depend on the bounce messages.

I'm sure we have false-positives, and misaddresses email,
etc.   But, the number of spurious bounce is so high that
real problems get lost in the noise.  We'll be switching
to reject from 127.0.0.1 real soon (maybe this weekend).
I expect the result will be an improved ability to track
real errors.

Mike

--
Michael D. Sofka
Sr. Systems Programmer, Postmaster pro tem
Rensselaer Polytechnic Institute



___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] IMAP

2007-01-24 Thread Matthew Schumacher
Rob MacGregor wrote:
 On 1/24/07, Jan-Pieter Cornet [EMAIL PROTECTED] wrote:

 Users actually need to _do_ something to switch to imap, and rethink
 the way they store and view email. And last I heard Eudora and
 Outlook Express still didn't support imap anyway...
 
 Outlook Express has had IMAP support since at least v4.
 

Yea, and it's terrible.

schu
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] IMAP

2007-01-24 Thread Ben Kamen

Matthew Schumacher wrote:

Outlook Express has had IMAP support since at least v4.


Yea, and it's terrible.


I concurr.

And the problems outlook has with IMAP people
attribute to IMAP...

When I was on the IMAP mailing list..
several people brought up those kinds of issues with some
amount of pith only to incite Mark Crispin having to
explain exactly WHY IMAP didn't work so well due
to (specific examples) MS's lack of adherence to
the protocol.

 -Ben


--
Ben Kamen - O.D.T., S.P.
==
Email: bkamen AT benjammin DOT net   Web: http://www.benjammin.net
begin:vcard
fn:Ben Kamen
n:Kamen;Ben
adr:;;USA
email;internet:[EMAIL PROTECTED]
title:O.D.T. - S.P.
x-mozilla-html:FALSE
url:http://www.benjammin.net/
version:2.1
end:vcard

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] IMAP

2007-01-24 Thread Joseph Brennan


Ben Kamen [EMAIL PROTECTED] wrote:


MS's lack of adherence to the protocol.



To bring this closer to Mimedefang, let's look at MS's adherence to
the smtp protocol.

Outlook, under some circumstance, understands a 550 permanent error to
mean try again forever.  At the present time we have a user whose PC
tries 6,000 times a day to send a message to our smtp server without
smtp auth, and it gets 550'd every time, and it has been doing this
for over a year.  The user says no error is shown on screen, and the
user cannot find the message in an outgoing queue.  Since the PC is
on a changing dynamic connection from an ISP, and since the user needs
to send other mail, we have not filtered by IP or sender address.

We currently have a few other cases of this, but they don't send as
many times daily.  Maybe it means the people don't have Outlook running
all day, or maybe it means something else.

In our case the smtp auth test is done by sendmail, but, look, it
*could* be implemented in Mimedefang, and then this would be on topic!

Joseph Brennan
Lead Email Systems Engineer
Columbia University Information Technology


___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


RE: [Mimedefang] Some spam tests not running Timeout maybe

2007-01-24 Thread David Reta
Thanks for the help. The output of the following two commands is
matching up.

Spamassassin -p /etc/mail/sa-mimedefang.cf  ENTIRE_MESSAGE 
Spamassassin -p /etc/mail/spamassassin/sa-mimedefang.cf 
ENTIRE_MESSAGE.

The 2 files are linked, also local.cf is linked to
/etc/mail/spamassassin/sa-mimedefang.cf

The bayes is the same. I fed it through bayes before I sent the second
output, sorry about that.

It seems that the SARE rules I have are not being picked up. These are
in /var/lib/spamassassin/3.001007.
None of the messages that are running through Mimedefang are hitting any
of these rules. Should I put all those files as includes in the
/etc/mail/spamassassin/sa-mimedefang.cf? Something like 
include
/var/lib/spamassassin/3.001007/99_sare_adult_cf_sare_sa-update_dostech_n
et.cf

Content preview:  Genuie and from the Original manufacturer are selling
by
  Trusted vendor. Don't miss this chance to buy Hight-Quality
production!
  Our online shop: http://golfmaywood.info [...] 

Content analysis details:   (12.9 points, 5.0 required)

 pts rule name  description
 --
--
 1.1 EXTRA_MPART_TYPE   Header has extraneous Content-type:...type=
entry
 1.1 SPF_NEUTRALSPF: sender does not match SPF record
(neutral)
[SPF failed: Please see
http://spf.pobox.com/why.html?sender=berry%40artstheatreschool.comip=89
.35.3
9.20receiver=mx1]
 1.3 INFO_TLD   URI: Contains an URL in the INFO top-level
domain
 0.0 HTML_MESSAGE   BODY: HTML included in message
 4.0 BAYES_99   BODY: Bayesian spam probability is 99 to
100%
[score: 1.]
 0.5 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of
words
 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
 2.0 RAZOR2_CHECK   Listed in Razor2 (http://razor.sf.net/)
 1.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]

Content preview:  Genuie and from the Original manufacturer are selling
by
  Trusted vendor. Don't miss this chance to buy Hight-Quality
production!
  Our online shop: http://golfmaywood.info [...] 

Content analysis details:   (34.9 points, 5.0 required)

 pts rule name  description
 --
--
  10 FH_MSGID_XXX   Message-Id = @xxx
 1.1 EXTRA_MPART_TYPE   Header has extraneous Content-type:...type=
entry
-0.0 NO_RELAYS  Informational: message was not relayed via
SMTP
 1.3 INFO_TLD   URI: Contains an URL in the INFO top-level
domain
 0.0 HTML_MESSAGE   BODY: HTML included in message
 4.0 BAYES_99   BODY: Bayesian spam probability is 99 to
100%
[score: 1.]
 0.5 HTML_IMAGE_ONLY_16 BODY: HTML: images with 1200-1600 bytes of
words
 0.8 SARE_GIF_ATTACHFULL: Email has a inline gif
 1.5 RAZOR2_CF_RANGE_E8_51_100 Razor2 gives engine 8 confidence level
above 50%
[cf: 100]
 2.0 RAZOR2_CHECK   Listed in Razor2 (http://razor.sf.net/)
 1.5 RAZOR2_CF_RANGE_51_100 Razor2 gives confidence level above 50%
[cf: 100]
 3.0 URIBL_BLACKContains an URL listed in the URIBL
blacklist
[URIs: golfmaywood.info]
 0.9 MY_CID_AND_CLOSING SARE cid and closing
 0.7 MY_CID_AND_STYLE   SARE cid and style
 1.2 MY_CID_ARIAL2_CLOSING  SARE cid arial2 closing
 1.1 MY_CID_ARIAL_STYLE SARE cid arial2 style
 0.7 MY_CID_AND_ARIAL2  SARE CID and Arial2
 0.9 FM_NO_STYLEFM_NO_STYLE
-0.0 NO_RECEIVEDInformational: message has no Received
headers
 1.7 SARE_GIF_STOX  Inline Gif with little HTML
 1.1 FM_MULTI_ODD2  FM_MULTI_ODD2
 0.7 FM_MULTI_ODD3  FM_MULTI_ODD3

[EMAIL PROTECTED] MD-Quarantine]# more /etc/mail/spamassassin/sa-mimedefang.cf

rewrite_header Subject *SPAM*
ok_locales all
lock_method nfssafe
required_score 5.0
dns_available yes
uridnsbl_timeout 30
use_razor2 1
use_auto_whitelist 0
use_bayes 1
bayes_auto_learn 1
rbl_timeout 20

bayes_store_module  Mail::SpamAssassin::BayesStore::SQL
bayes_sql_dsn   DBI:mysql:Spam:mx1:3306
bayes_sql_username  defang
bayes_sql_password  defang
bayes_auto_learn_threshold_spam 10.0
bayes_auto_learn_threshold_nonspam -2.0

score SARE_DIPLOMA2 10.0
score RCVD_IN_BL_SPAMCOP_NET 10.0
score RAZOR2_CHECK 2.0
score RAZOR2_CF_RANGE_51_100 1.5
score RAZOR2_CF_RANGE_E4_51_100 2.0
score FUZZY_SOFTWARE 10.0
score ALL_TRUSTED 0
score SPF_PASS -1.0
score SPF_HELO_PASS -1.0
score BAYES_99 4.0

Thanks,
David

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Jan-Pieter Cornet
Sent: Wednesday, January 24, 2007 3:34 AM
To: 

Re: [Mimedefang] IMAP

2007-01-24 Thread Jan-Pieter Cornet
On Wed, Jan 24, 2007 at 07:27:31AM -0500, David F. Skoll wrote:
  Users actually need to _do_ something to switch to imap, and rethink
 
 Not only that, if a large ISP switches from POP3 to IMAP, they'll suddenly
 have to buy terabytes of storage...

Hmm... so how did you know that I got the bill for that storage (109T)
just this morning? :)

-- 
Jan-Pieter Cornet [EMAIL PROTECTED]
!! Disclamer: The addressee of this email is not the intended recipient. !!
!! This is only a test of the echelon and data retention systems. Please !!
!! archive this message indefinitely to allow verification of the logs.  !!
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Questions about stream_by_recipient and problems it creates.

2007-01-24 Thread Jan-Pieter Cornet
On Wed, Jan 24, 2007 at 08:41:58AM -0900, Matthew Schumacher wrote:
  IMAP customers, but I'm still not entirely sure how to pass a flag
  to mail.local to _one specific_ recipient from within MIMEDefang.
  And because of privacy, you can't have a header this should go into
  joe's spambox, of course.
 
 We use cyrus, so this would be very easy for us.  Simply write a sieve
 script that would read the SA report header and decide what to do.

I only looked at sieve very briefly, but I don't think it could fetch
data from an external database? You'd either need per-user sieve
scripts (or at least per-profile), to be able to differentiate
between different filtering demands by users.

  This is an interesting idea, temp-failing recipients with dissimilar
  spam settings, but due to lame email clients, it sounds like it would be
  a lot of trouble.
 
 Both the inbound and outbound MTA scan for spam so I currently have the
 users sending though the outbound MTA.

I suppose the outbound MTA has only one spamfiltering setting: the one
you (the administrator) choose. It should not depend on the recipient,
so it's a lot easier to configure.

-- 
Jan-Pieter Cornet [EMAIL PROTECTED]
!! Disclamer: The addressee of this email is not the intended recipient. !!
!! This is only a test of the echelon and data retention systems. Please !!
!! archive this message indefinitely to allow verification of the logs.  !!
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Questions about stream_by_recipient and problems it creates.

2007-01-24 Thread Jan-Pieter Cornet
On Wed, Jan 24, 2007 at 08:36:59AM -0900, Matthew Schumacher wrote:
 [customize 550 reject message after data to specify which user
 was accepted and which wasn't]
  
  Do you think this will work?
  
  In one sense, it will work.  However, in a very important sense, it will
  fail miserably.  Most senders don't have a clue how to interpret a DSN,
 
 I appreciate your comments, however, I've found the opposite to be true.
  During the last 2 years we have had the helpdesk email in the DSN error
 message so that people can request help with spam filtering.  This has

There's one type of sender that will fail horribly in interpreting that
reject message: the automated type. Particularly, mailinglists.

Suppose someone runs a controversial mailinglist which happens to
get flagged as spam a lot. Some of your users notice and either
disable the spamfilters or greenlist the mailinglist so it won't
be spamfiltered, but not all subscribers at your site do.

Then when the mailinglist next sends a spammy message, and suppose it
will send to most subscribers on your domain using a single message,
that message will get a 550 error after data, which might lead to
ALL subscribers being removed from the list... even though the message
said something like 550 successfully delivered to [EMAIL PROTECTED] and
[EMAIL PROTECTED], but rejected by [EMAIL PROTECTED].

Drusilla and Xander would still be out of luck...

-- 
Jan-Pieter Cornet [EMAIL PROTECTED]
!! Disclamer: The addressee of this email is not the intended recipient. !!
!! This is only a test of the echelon and data retention systems. Please !!
!! archive this message indefinitely to allow verification of the logs.  !!
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] IMAP

2007-01-24 Thread Ben Kamen


Kenneth Porter wrote:


Why support a free protocol with a quality implementation when you can 
*sell* them your proprietary alternative?! (Ie. Exchange.)



The IMAP mail list has eluded to the same thing.

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang