Re: hostkarma junkemailfilter
mouss schrieb: Micah Anderson a écrit : Benny Pedersen [EMAIL PROTECTED] writes: On Tue, November 18, 2008 22:16, Henrik K wrote: postfwd and trusted_networks msa_networks is what i do use here, then minimal dns lookups is needed olso, facebook have random helo so need to be whitelisted hard in postfwd and in spamassassin, i have contacted facebook about it, but the problem might still be there i like your postfwd config Where is this postfwd config you refer to? I would like to see this. he probably meant http://hege.li/howto/spam/etc/postfwd/postfwd.conf A real-world configuration by Henrik Krohns on http://postfwd.org.
Re: hostkarma junkemailfilter
Benny Pedersen [EMAIL PROTECTED] writes: On Tue, November 18, 2008 22:16, Henrik K wrote: postfwd and trusted_networks msa_networks is what i do use here, then minimal dns lookups is needed olso, facebook have random helo so need to be whitelisted hard in postfwd and in spamassassin, i have contacted facebook about it, but the problem might still be there i like your postfwd config Where is this postfwd config you refer to? I would like to see this. micah
Re: hostkarma junkemailfilter
Micah Anderson a écrit : Benny Pedersen [EMAIL PROTECTED] writes: On Tue, November 18, 2008 22:16, Henrik K wrote: postfwd and trusted_networks msa_networks is what i do use here, then minimal dns lookups is needed olso, facebook have random helo so need to be whitelisted hard in postfwd and in spamassassin, i have contacted facebook about it, but the problem might still be there i like your postfwd config Where is this postfwd config you refer to? I would like to see this. he probably meant http://hege.li/howto/spam/etc/postfwd/postfwd.conf
Re: hostkarma junkemailfilter
Micah Anderson wrote on Thu, 20 Nov 2008 11:04:44 -0500: Where is this postfwd config you refer to? I found it yesterday easily by just googling for, uh, postfwd. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com
Re: hostkarma junkemailfilter
Henrik K wrote: On Sun, Nov 16, 2008 at 03:29:07PM -0500, Micah Anderson wrote: Over at another post about Phishing[0], Brent suggested setting up hostkarma.junkemailfilter to my RBL list, which I have done... However it seems to hit a lot of spams giving them a -5 scoring. I've either got this configured backwards, or this isn't working very well because it whitelists too much actual spam. I copied the examples[1] directly from their wiki... Does anyone have any experience with these? I'm removing the JMF-WHITE because its not helping at all, but I wonder if others have experience? I still maintain my position. Good for point or two, but way too many big legimate smtp gateways and listservers listed for my traffic. Almost 30% of hits are FPs. Marc has good ideas, but the execution is lacking. http://marc.info/?l=spamassassin-usersm=120611144819910 If we had a 30% FP rate we would be out of business. I think that's an exaggeration.
Re: hostkarma junkemailfilter
On Tue, Nov 18, 2008 at 12:34:36PM -0800, Marc Perkel wrote: If we had a 30% FP rate we would be out of business. I think that's an exaggeration. What do you call 294 hams out of 836 JMF hits then? Don't take it personally, even barracuda has similar ratio. I can't add many points with it either. Spamcop and Spamhaus are pretty much 0% FP over here, but of course you can't expect every list have the same resources. The problem is catching smallish local ISP type relays. If such users send lots of ham inside Finland and only the occasional spam/virus leak to some US honeypot, it's no surprise your list can't be foolproof. I guess I have to build my own trust database to counteract that..
Re: hostkarma junkemailfilter
On Tue, Nov 18, 2008 at 11:16:27PM +0200, Henrik K wrote: On Tue, Nov 18, 2008 at 12:34:36PM -0800, Marc Perkel wrote: If we had a 30% FP rate we would be out of business. I think that's an exaggeration. What do you call 294 hams out of 836 JMF hits then? To be fair, I do have zen etc blocking most stuff at MTA directly. So the real FP rate of course isn't the value that shows up in SA. So it does sound worse than it is.
Re: hostkarma junkemailfilter
On Tue, November 18, 2008 22:16, Henrik K wrote: The problem is catching smallish local ISP type relays. If such users send lots of ham inside Finland and only the occasional spam/virus leak to some US honeypot, it's no surprise your list can't be foolproof. I guess I have to build my own trust database to counteract that.. postfwd and trusted_networks msa_networks is what i do use here, then minimal dns lookups is needed olso, facebook have random helo so need to be whitelisted hard in postfwd and in spamassassin, i have contacted facebook about it, but the problem might still be there i like your postfwd config -- Benny Pedersen Need more webspace ? http://www.servage.net/?coupon=cust37098
hostkarma junkemailfilter
Over at another post about Phishing[0], Brent suggested setting up
hostkarma.junkemailfilter to my RBL list, which I have done... However
it seems to hit a lot of spams giving them a -5 scoring. I've either got
this configured backwards, or this isn't working very well because it
whitelists too much actual spam. I copied the examples[1] directly from
their wiki...
Does anyone have any experience with these? I'm removing the JMF-WHITE
because its not helping at all, but I wonder if others have experience?
header __RCVD_IN_JMF
eval:check_rbl('JMF-lastexternal','hostkarma.junkemailfilter.com.')
describe __RCVD_IN_JMF Sender listed in JunkEmailFilter
tflags __RCVD_IN_JMF net
header RCVD_IN_JMF_W eval:check_rbl_sub('JMF-lastexternal', '127.0.0.1')
describe RCVD_IN_JMF_W Sender listed in JMF-WHITE
tflags RCVD_IN_JMF_W net nice
score RCVD_IN_JMF_W -5
header RCVD_IN_JMF_BL eval:check_rbl_sub('JMF-lastexternal', '127.0.0.2')
describe RCVD_IN_JMF_BL Sender listed in JMF-BLACK
tflags RCVD_IN_JMF_BL net
score RCVD_IN_JMF_BL 3.0
header RCVD_IN_JMF_BR eval:check_rbl_sub('JMF-lastexternal', '127.0.0.4')
describe RCVD_IN_JMF_BR Sender listed in JMF-BROWN
tflags RCVD_IN_JMF_BR net
score RCVD_IN_JMF_BR 1.0
0. http://permalink.gmane.org/gmane.mail.spam.spamassassin.general/113625
1. http://wiki.junkemailfilter.com/index.php/Spam_DNS_Lists
micah
Re: hostkarma junkemailfilter
On Sun, Nov 16, 2008 at 03:29:07PM -0500, Micah Anderson wrote: Over at another post about Phishing[0], Brent suggested setting up hostkarma.junkemailfilter to my RBL list, which I have done... However it seems to hit a lot of spams giving them a -5 scoring. I've either got this configured backwards, or this isn't working very well because it whitelists too much actual spam. I copied the examples[1] directly from their wiki... Does anyone have any experience with these? I'm removing the JMF-WHITE because its not helping at all, but I wonder if others have experience? I still maintain my position. Good for point or two, but way too many big legimate smtp gateways and listservers listed for my traffic. Almost 30% of hits are FPs. Marc has good ideas, but the execution is lacking. http://marc.info/?l=spamassassin-usersm=120611144819910
