Re: Messages received via OR
At 11:08 AM 11/29/2004, Rakotomandimby (R12y) Mihamina wrote: HEllo, I would like to know how to increase the rate or the mark of a message received from an open relay. In fact, we're 99,9% sure that it's a spam! are'nt we? I would like to set the rate of the RCVD_IN_ORBS to 4 (at least). How to ? in local.cf change the score with a new score statement: score RCVD_IN_ORBS 4.0 Is it a good idea ? Not really. ORBS at last check had a pretty noticeable FP rate. (3% of hits were nonspam, 97% spam in the 2.55 set3 mass-check data). Based on ORBS's FP rate, you clearly can't say we are 99.9% sure. In fact, we're only 97% sure, which is a factor of 30 different. By the way, how ancient a version of SA are you using? ORBS hasn't been used by SA since 2.55. (although alternate-language describes existed through 2.64, no actual rule exists in the 2.6x or 3.x families)
Re: Messages received via OR
At 01:19 PM 11/29/2004, Matt Kettler wrote: By the way, how ancient a version of SA are you using? ORBS hasn't been used by SA since 2.55. (although alternate-language describes existed through 2.64, no actual rule exists in the 2.6x or 3.x families) Side note on the subject.. ORBS is in fact dead. http://www.dorkslayers.com/ Due to circumstances beyond our control, the Dorkslayers DNSBLs are no longer available.
Re: Messages received via OR
On Mon, 2004-11-29 at 19:19, Matt Kettler wrote: By the way, how ancient a version of SA are you using? ORBS hasn't been used by SA since 2.55. (although alternate-language describes existed through 2.64, no actual rule exists in the 2.6x or 3.x families) # spamassassin -V SpamAssassin version 2.64 On Debian testing. -- ASPO Infogérance http://aspo.rktmb.org/activites/infogerance Unofficial FAQ fcolc http://faq.fcolc.eu.org/ LUG sur Orléans et alentours. Tél : 02 38 76 43 65 (France)
Re: Messages received via OR
At 02:49 PM 11/29/2004, Rakotomandimby (R12y) Mihamina wrote: How could I diagnosys such a thing ? Use grep to look for it. First check for it in /usr/share/spamassassin. Below is the proper output for 2.64. If you get more, you may have a problem. $ grep RCVD_IN_ORBS /usr/share/spamassassin/* /usr/share/spamassassin/30_text_it.cf:lang it describe RCVD_IN_ORBS Ricevuto tramite un relay presente in orbs.dorkslayers.com /usr/share/spamassassin/30_text_sk.cf:lang sk describe RCVD_IN_ORBS Prijaté prostredníctvom serveru v orbs.dorkslayers.com $ Then look for it in /etc/mail/spamassassin. Perhaps someone mistakenly copied old files there... $ grep RCVD_IN_ORBS /etc/mail/spamassassin/* $ After double check, I'm running SA 2.64 but with some pieces of older version ... How could it be ... Usually people copying files around into incorrect places. Sometimes it's an upgrade failure, but usually it's someone tweaking files they shouldn't.
