Re: How do I disable spews?

2004-12-26 Thread Thomas Cameron
On Sat, 2004-12-25 at 10:06 -0800, SA wrote:
 On Fri, 2004-12-24 at 17:42, Thomas Cameron wrote:
 
  
  Didn't SPEWS shut down and blacklist the world?
  
  Thomas
 
 No.

Yes, they did - I found this article on Slashdot.  Did they go down and
then come back later?

http://slashdot.org/article.pl?sid=03/08/27/0214238

Thomas



Re: How do I disable spews?

2004-12-26 Thread Matt Kettler
At 12:32 AM 12/26/2004 -0600, Thomas Cameron wrote:
  Didn't SPEWS shut down and blacklist the world?
 
  Thomas

 No.
Yes, they did - I found this article on Slashdot.  Did they go down and
then come back later?
http://slashdot.org/article.pl?sid=03/08/27/0214238
Thomas
No, that's OSIRUSOFT that went down and set it's records to blacklist 
everything.  OSIRUSOFT included SPEWS as a part of their data, but they 
also included half a dozen other blacklists and their own data.

OSIRUSOFT was nothing but a very popular aggregate blacklist that included 
SPEWS data. SPEWS is a separate entity. SPEWS never went down. 



Re: How do I disable spews?

2004-12-26 Thread Thomas Cameron
On Sun, 2004-12-26 at 09:48 -0500, Matt Kettler wrote:
 At 12:32 AM 12/26/2004 -0600, Thomas Cameron wrote:
Didn't SPEWS shut down and blacklist the world?
   
Thomas
  
   No.
 
 Yes, they did - I found this article on Slashdot.  Did they go down and
 then come back later?
 
 http://slashdot.org/article.pl?sid=03/08/27/0214238
 
 Thomas
 
 No, that's OSIRUSOFT that went down and set it's records to blacklist 
 everything.  OSIRUSOFT included SPEWS as a part of their data, but they 
 also included half a dozen other blacklists and their own data.
 
 OSIRUSOFT was nothing but a very popular aggregate blacklist that included 
 SPEWS data. SPEWS is a separate entity. SPEWS never went down. 

Ah, I see.  Thanks for the correction.

Thomas



Re: How do I disable spews?

2004-12-25 Thread Thomas Cameron
On Thu, 2004-12-23 at 20:29 -0500, Brenda Bell wrote:
 I upgraded from 3.0.1 to 3.0.2 this morning and all of a sudden,
 I can't send myself email from work because spews blacklisted an
 entire block of uunet addresses and my company is in the middle
 of the block.  (side note:  we do not spam and we fight it with
 every bit of technology we have).
 
 I've searched both local.cf and all of the rules files for spews
 and for the life of me, I can't figure out why my SA is checking
 spews.  Could someone please point me in the right direction?
 
 Brenda Bell
 Liquid Machines
 The Freedom of Security
 http://www.liquidmachines.com

Didn't SPEWS shut down and blacklist the world?

Thomas



Re: How do I disable spews?

2004-12-25 Thread SA
On Fri, 2004-12-24 at 17:42, Thomas Cameron wrote:

 
 Didn't SPEWS shut down and blacklist the world?
 
 Thomas

No.
-- 
Robin Lynn Frank  Director of Operations
 (0 0)Paradigm-Omega, LLC
   V  http://www.paradigm-omega.com/
=
Infinite spamtraps at http://paradigm-omega.net/cgi-bin/custmail.cgi
=
And they shall beat their swords into plowshares, for if you hit a man
with a plowshare, he's going to know he's been hit.


How do I disable spews?

2004-12-24 Thread Brenda Bell
I upgraded from 3.0.1 to 3.0.2 this morning and all of a sudden,
I can't send myself email from work because spews blacklisted an
entire block of uunet addresses and my company is in the middle
of the block.  (side note:  we do not spam and we fight it with
every bit of technology we have).

I've searched both local.cf and all of the rules files for spews
and for the life of me, I can't figure out why my SA is checking
spews.  Could someone please point me in the right direction?

Brenda Bell
Liquid Machines
The Freedom of Security
http://www.liquidmachines.com



Re: How do I disable spews?

2004-12-24 Thread Jeff Chan
On Thursday, December 23, 2004, 5:29:23 PM, Brenda Bell wrote:
 I upgraded from 3.0.1 to 3.0.2 this morning and all of a sudden,
 I can't send myself email from work because spews blacklisted an
 entire block of uunet addresses and my company is in the middle
 of the block.  (side note:  we do not spam and we fight it with
 every bit of technology we have).

 I've searched both local.cf and all of the rules files for spews
 and for the life of me, I can't figure out why my SA is checking
 spews.  Could someone please point me in the right direction?

 Brenda Bell
 Liquid Machines
 The Freedom of Security
 http://www.liquidmachines.com

Don't use SPEWS.

Jeff C.
-- 
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/



Re: How do I disable spews?

2004-12-24 Thread alan premselaar
Brenda Bell wrote:
I upgraded from 3.0.1 to 3.0.2 this morning and all of a sudden,
I can't send myself email from work because spews blacklisted an
entire block of uunet addresses and my company is in the middle
of the block.  (side note:  we do not spam and we fight it with
every bit of technology we have).
I've searched both local.cf and all of the rules files for spews
and for the life of me, I can't figure out why my SA is checking
spews.  Could someone please point me in the right direction?
Brenda,
  how are you calling SpamAssassin?  SA only tags mail that scores as 
spam, it doesn't (in and of itself) do any rejection or movement of mail 
. Another piece of the puzzle has to do those sort of things.

Chances are if your mail is being rejected (5xx errors), then there's 
something in your MTA configuration that's checking SPEWS and rejecting 
based on its results. (which I personally feel isn't such a great tactic 
for just THIS reason)

you should check that out, but considering the lack of any useful 
information, we can't offer you any further assistance.

alan


Re: How do I disable spews?

2004-12-24 Thread Kelson
Brenda Bell wrote:
I've searched both local.cf and all of the rules files for spews
and for the life of me, I can't figure out why my SA is checking
spews.  Could someone please point me in the right direction?
From what I can tell, spews isn't in the standard SpamAssassin config, 
so the timing is probably coincidental.

- Are you running any other spam filtering?  Directly checking DNSBLs 
through sendmail/postfix/etc, or through something like MIMEDefang or 
Amavis?

- Are you certain that was the system that blocked your mail?  It may 
have been at the other end or somewhere in between.

--
Kelson Vibber
SpeedGate Communications www.speed.net


Re: How do I disable spews?

2004-12-24 Thread Jeff Chan
On Thursday, December 23, 2004, 5:52:40 PM, Jeff Chan wrote:
 On Thursday, December 23, 2004, 5:29:23 PM, Brenda Bell wrote:
 I upgraded from 3.0.1 to 3.0.2 this morning and all of a sudden,
 I can't send myself email from work because spews blacklisted an
 entire block of uunet addresses and my company is in the middle
 of the block.  (side note:  we do not spam and we fight it with
 every bit of technology we have).

 I've searched both local.cf and all of the rules files for spews
 and for the life of me, I can't figure out why my SA is checking
 spews.  Could someone please point me in the right direction?

 Brenda Bell
 Liquid Machines
 The Freedom of Security
 http://www.liquidmachines.com

 Don't use SPEWS.

Clarification: I don't see spews in the default SA DNSBL rules:

http://spamassassin.apache.org/full/3.0.x/dist/rules/20_dnsbl_tests.cf

So perhaps the checking is in your MTA?

Jeff C.
-- 
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/



Re: How do I disable spews?

2004-12-24 Thread b311b-sa
On Fri, 24 Dec 2004 10:56:27 +0900
alan premselaar wrote:

 Chances are if your mail is being rejected (5xx errors), then there's 
 something in your MTA configuration that's checking SPEWS and rejecting 
 based on its results. (which I personally feel isn't such a great tactic 
 for just THIS reason)

I have qmail configured to check only relays.ordb.org and
bl.spamcop.net -- I intentionally avoid spews specifically
because of its reputation and listing policy.

However, I did misinterpret the bounce message.  What it said was this:

  There was a SMTP communication problem with the recipient's email server.  
  Please contact your system administrator.
  
  smtp;554 Service unavailable; Client host [65.244.125.66]
  blocked using l1.spews.dnsbl.sorbs.net; ! [1] Reinertsen, see
  http://spews.org/ask.cgi?S1519
  
So... the message was rejected because of the SPEWS zone at SORBS. 
The weird thing is this:  I sent myself another message this
morning and it came right through.  So I'll have to assume that
some interim hop blocked yesterday's message and I certainly
can't do anything about that.  It's times like this when all I
can do is curse Microsoft for hiding everything I need to track
down why this happened.

Thanks to everyone who responded for their suggestions.
  
Brenda Bell
Liquid Machines
The Freedom of Security
http://www.liquidmachines.com