Re: [Mimedefang] Using DCC in SpamAssassin which is called by MimeDefang
At 02:34 PM 6/16/2004, [EMAIL PROTECTED] wrote: I asked a similar question recently: who has had what experience with DCC/Razor/Pyzor, presumably via MIMEDefang and SpamAssassin? All three will work with MD/SA. Razor is probably the simplest, since SA is already running in Perl and can call the Razor Perl modules directly. It also has the advantage that SA has different rules to handle various Razor results - if Razor gives a message a 50-100% probability of being spam, SA will score it higher than if Razor gives it a 10-50% change. The main drawback to Razor is that it presently has the lowest hit rate of the three, although this should change soon since the next version of the client will add one of the more effective hashes being used by the SpamNet client (Razor's commercial sibling). One trick I've found: I usually have to run make install twice, or it doesn't set up all the links in /usr/(local/)bin. Pyzor hits more spam than Razor, but has two drawbacks: first, it runs in Python, and firing up a Python instance for each hit is slower than just calling a Perl module in an already runnng Perl. Second, the client doesn't do much in the way of error recovery when it encounters a message it doesn't recognize. This isn't much of a problem when called from SA - it just counts as if Pyzor didn't find it - but can be frustrating when you try to report a mailbox full of confirmed spam and it dies because the third message claims to use the plain content transfer encoding. Be sure to check the Readme's section on file permissions. I've actually seen the pyzor client get installed non-executable. DCC has the highest hit rate, but that's partly because its stated goal is not to identify spam, but to identify bulk mail. By definition that includes wanted newsletters, mailing lists, etc, although few people actually report mail according to that standard. Because of this, I've lowered the SA score for DCC_CHECK from 2.9 to 1. I remember having a bit more trouble getting it running than either Razor or Pyzor, but it's been long enough that I don't remember exactly what I had to do. Several people posted some comparisons a fe months ago. I think this was on the SA list. There is certainly overlap among the three databases (about 60% of spam we see that trips one of them trips at least two), but there's enough difference that it could be worth running two or even all three. In any case, I would recommend using the razor_timeount, pyzor_timeout, and dcc_timeout options in your SA config so that network slowdowns and server outages don't add too much time to your mail processing. Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Using DCC in SpamAssassin which is called by MimeDefang
At 01:30 PM 6/16/2004, Al Sparks wrote: A simple question, so I know whether it can be done or not. Is anyone using SA to access DCC iff SA is called by MD? === Al Is that a misspelling, or do you mean if and only if? If it's just a misspelling, then I can tell you yes, we use DCC through SA called by MD Kelson Vibber SpeedGate Communications www.speed.net ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Using DCC in SpamAssassin which is called by MimeDefang
On 16 Jun 2004 at 13:30, Al Sparks wrote: A simple question, so I know whether it can be done or not. Is anyone using SA to access DCC iff SA is called by MD? Yes. If you implement DCC, I highly recommend using dccifd rather than dccproc due to the dramatic performance improvement. Nels Lindquist * Information Systems Manager Morningstar Air Express Inc. ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
Re: [Mimedefang] Using DCC in SpamAssassin which is called by MimeDefang
This answers my question: http://www.mimedefang.org/node.php?id=15 Well I found the problem. I didn't have $SALocalTestsOnly = 0; in my filter. I placed this problem on the backburner about a month ago, 'cause I had other priorities. It sure is nice that I've gotten past this problem. === Al --- Al Sparks [EMAIL PROTECTED] wrote: --- Kelson Vibber [EMAIL PROTECTED] wrote: At 01:30 PM 6/16/2004, Al Sparks wrote: A simple question, so I know whether it can be done or not. Is anyone using SA to access DCC iff SA is called by MD? === Al Is that a misspelling, or do you mean if and only if? If it's just a misspelling, then I can tell you yes, we use DCC through SA called by MD Thanks. I admit it wasn't a misspelling, and I didn't put that much thought into its use. Are there any special settings in SpamAssassin I should know about? Here are my /etc/mail/spamassassin/sa-mimedefang.cf settings: required_hits 1 ok_locales en rewrite_subject 0 use_terse_report 1 skip_rbl_checks 0 dcc_path /usr/local/bin/dccproc dcc_home /var/dcc use_dcc 1 score DCC_CHECK 5 score RCVD_IN_RBL 5 I at least know that SA is being run by MD, because it's adding headers to the messages. Another question for the group. Has anyone had a problem getting DCC to run via MD - SA? === Al ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
