Re: [Mimedefang] Spamhaus on SA

2004-09-10 Thread Jason Gurtz
On 9/9/2004 19:47, Al Sparks wrote:
> First,
> skip_rbl_checks 0
> is already unset in my SA.

I'm not sure why it wouldn't be working then.

> I just incorporated spamhaus into my sendmail.mc as you suggested and
> it works.
> 
> So, what runs first with this configuration?  Spamhaus or MD?

The sendmail "FEATURE(`dnsbl'...)" runs first.  That gives you a couple
of advantages.

  - It doesn't touch any perl, so it's faster.

  - If the sending MTA is in the dnsbl the mail is DSN rejected, which
means...

- The mail is never queued.

- No more processing is needed.


Disadvantages?  You don't get very much granularity.  It's either pass
or fail.  IOW, I know a lot of people who run mail servers on a "dynamic
IP" (or a range of addresses considered as dynamic; DSL, cable, etc...)
but I still want to take advantage of blocking the spammers doing the
same.  Letting MD run the SA dnsbl check means that I can assign a small
score increase instead of just rejecting it at the cost of greater CPU
usage.

For me, in general, dnsbls that I think are sane and fair go in the
sendmail.mc.  The nutty fanatics find themselves in MD/SA.  You may want
to consider the spamhaus xbl list also; I've had quite good luck with it.

Yet, some things will just get through, even with much training.  I've
been fighting some Cyrillic spams that come from another mailing list.
The Content-type header lies about the charset and most sail through
with a SA score of <2.  Most annoying...

Cheers,

~Jason

-- 
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Spamhaus on SA

2004-09-09 Thread Al Sparks
First,
skip_rbl_checks 0
is already unset in my SA.

I just incorporated spamhaus into my sendmail.mc as you suggested and
it works.

So, what runs first with this configuration?  Spamhaus or MD?
  === Al


--- Jason Gurtz <[EMAIL PROTECTED]> wrote:

> 
> I use spamhaus in sendmail
> 
> FEATURE(`dnsbl', `sbl-xbl.spamhaus.org', `"Listed on
> http://spamhaus.org/sbl or http://spamhaus.org/xbl";')
> 
> but maybe also check that you have
> 
> skip_rbl_checks 0
> 
> in your sa-mimedefang.cf.  I had to do that in order to implement the
> surbl checking.  I then just commented out the lines that I already have
> being checked in sendmail in /usr/share/spamassassin/20_dnsbl_tests.cf
> 
> Cheers,
> 
> ~Jason
> 
> -- 
> ___
> Visit http://www.mimedefang.org and http://www.canit.ca
> MIMEDefang mailing list
> [EMAIL PROTECTED]
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
> 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Spamhaus on SA

2004-09-09 Thread Jason Gurtz
On 9/9/2004 15:10, Al Sparks wrote:

> The FAQ you're referring to says that:
>$SALocalTestsOnly = 0;
> for DCC to work.  I already have that set (I guess I have it UNSET actually),
> and I already have DCC working.
> 
> I can't get Spamhaus to work, though.  So to start, has anyone out there
> gotten Spamhaus to work within SA using MD?  I'd at least like to know
> if it's possible.

I use spamhaus in sendmail

FEATURE(`dnsbl', `sbl-xbl.spamhaus.org', `"Listed on
http://spamhaus.org/sbl or http://spamhaus.org/xbl";')

but maybe also check that you have

skip_rbl_checks 0

in your sa-mimedefang.cf.  I had to do that in order to implement the
surbl checking.  I then just commented out the lines that I already have
being checked in sendmail in /usr/share/spamassassin/20_dnsbl_tests.cf

Cheers,

~Jason

-- 
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Spamhaus on SA

2004-09-09 Thread Al Sparks
The FAQ you're referring to says that:
   $SALocalTestsOnly = 0;
for DCC to work.  I already have that set (I guess I have it UNSET actually),
and I already have DCC working.

I can't get Spamhaus to work, though.  So to start, has anyone out there
gotten Spamhaus to work within SA using MD?  I'd at least like to know
if it's possible.
  === Al


--- "David F. Skoll" <[EMAIL PROTECTED]> wrote:

> On Wed, 8 Sep 2004, Al Sparks wrote:
> 
> >   header RCVD_IN_SBL eval:check_rbl_txt('sbl', 'sbl.spamhaus.org.')
> >   describe RCVD_IN_SBL mm added
> >   tflags RCVD_IN_SBL net
> >   score RCVD_IN_SBL 5.0
> 
> Probably a FAQ: http://www.mimedefang.org/node.php?id=15
> 
> --
> David.
> ___
> Visit http://www.mimedefang.org and http://www.canit.ca
> MIMEDefang mailing list
> [EMAIL PROTECTED]
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
> 

___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Spamhaus on SA

2004-09-08 Thread David F. Skoll
On Wed, 8 Sep 2004, Al Sparks wrote:

>   header RCVD_IN_SBL eval:check_rbl_txt('sbl', 'sbl.spamhaus.org.')
>   describe RCVD_IN_SBL mm added
>   tflags RCVD_IN_SBL net
>   score RCVD_IN_SBL 5.0

Probably a FAQ: http://www.mimedefang.org/node.php?id=15

--
David.
___
Visit http://www.mimedefang.org and http://www.canit.ca
MIMEDefang mailing list
[EMAIL PROTECTED]
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang