tips and tricks?
Howdy - Last time I set up SA I used http://www.spamtips.org/p/ultimate-setup-guide.html, but it appears to be somewhat dated (2011). Is it still a good guide? Is there a better simple collection of tips and tricks? Thanks! Thomas
Re: tips and tricks?
On 20.07.14 01:30, Thomas Cameron wrote: Last time I set up SA I used http://www.spamtips.org/p/ultimate-setup-guide.html, but it appears to be somewhat dated (2011). Is it still a good guide? Is there a better simple collection of tips and tricks? looks as a good guide, but I for addon rules I'd only use Sought rules, not SMF_BRACKETS_TO -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. There's a long-standing bug relating to the x86 architecture that allows you to install Windows. -- Matthew D. Fuller
Re: mass check tips and tricks - need advice
Damn, I thought I had you in my junk list - play nice spammer and keep one address? On Sun, 17 Feb 2013 08:34:15 -0800, Marc Perkel supp...@junkemailfilter.com wrote: OK - I'm getting mass checking set up and working. I'm still in the testing phase. Right now the process of selecting spam and ham is automated. It's not manually selected. Is that a problem? I'm only including email streams that I'm sure of. The spam comes from sources that are on multiple black lists, URIBL links, and committed other sins that only spammers do, and SA scores over 15.. The white list is from 100% trusted sources. Eventually I hope to include some hand sorting of messages in the middle but for now these are extreme ham and spam. Looks like it takes me 70 minutes to process 46k messages. I'll probably process 100k messages nightly and they will all be fresh. Right now I'm going through to verify the ham and spam just to ensure it's accurate and doesn't contain anything that shouldn't be there. Not reading every message but not finding any errors. Looking for advice at this point about anything I should be doing that I'm not, or any useful feedback.
Re: mass check tips and tricks - need advice
OK - I'm getting mass checking set up and working. I'm still in the testing phase. Right now the process of selecting spam and ham is automated. It's not manually selected. Is that a problem? I'm only including email streams that I'm sure of. The spam comes from sources that are on multiple black lists, URIBL links, and committed other sins that only spammers do, and SA scores over 15.. The white list is from 100% trusted sources. Eventually I hope to include some hand sorting of messages in the middle but for now these are extreme ham and spam. Looks like it takes me 70 minutes to process 46k messages. I'll probably process 100k messages nightly and they will all be fresh. Right now I'm going through to verify the ham and spam just to ensure it's accurate and doesn't contain anything that shouldn't be there. Not reading every message but not finding any errors. Looking for advice at this point about anything I should be doing that I'm not, or any useful feedback. -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400
Re: mass check tips and tricks - need advice
Am 13.02.2013 08:54, schrieb Patrick Ben Koetter: * Robert Schetterer r...@sys4.de: Am 13.02.2013 05:13, schrieb Marc Perkel: I'm thinking about setting up to do nightly mass checks and looking for advice. Thanks in advance. I'm thinking about creating a virtual server that will receive a forked copy of email that I pass that is delivered eith to ham@ or spam@ accounts. Does this sound reasonable? I have been using maildir format. i wouldnt do that, more the filter spam mails in users junk folders isnt needed ( use a global sieve rule ) additional i.e create some public imap folder for users copy untagged spam there, and some folder for false positve tagged ham ( or configure some email adresse ham/spam postfix transport. ( dont complete trust users about spam their meaning ! ) What mailbox format you might choose is academic, with maildir you have every mail one file, very robust but get a performance killer someday, dovecot mdbox union stuff from both formats, might best choice I'd concur with Robert if it wasn't for a little detail: AFAIK sa-learn can only handle mbox or maildir so you can't use any of the other, more optimized mailbox formats Dovecot supports such as mdbox. ups yeah, Patrick is right about mdbox, but it might be posssible convert mdbox public spam folders to maildir by script with dsync and then sa-learn invoked by cron etc, i see no problem with postfix transport method look something like here http://www.localside.net/sal-wrapper/README.txt after all, i my real big setup, nearly noone uses this the false postive rate is near null, and users have the chance to black/whitelist list their own stuff Since you run on SSD maildir shouldn't be a real performance problem. We're about to do some speed testing in this area within the next months, but the testbed hasn't been setup yet, so I can't give a definite advice. I am going to be running on SSD drives. should I use mbox? Test it and let us know. Switching between mailbox formats is done within less than a minute in Dovecot. p@rick Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich
mass check tips and tricks - need advice
I'm thinking about setting up to do nightly mass checks and looking for advice. Thanks in advance. I'm thinking about creating a virtual server that will receive a forked copy of email that I pass that is delivered eith to ham@ or spam@ accounts. Does this sound reasonable? I have been using maildir format. I am going to be running on SSD drives. should I use mbox? I'm just looking for general advice about how to do it right. Any good advice appreciated. -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot com 415-992-3400
Re: mass check tips and tricks - need advice
Am 13.02.2013 05:13, schrieb Marc Perkel: I'm thinking about setting up to do nightly mass checks and looking for advice. Thanks in advance. I'm thinking about creating a virtual server that will receive a forked copy of email that I pass that is delivered eith to ham@ or spam@ accounts. Does this sound reasonable? I have been using maildir format. i wouldnt do that, more the filter spam mails in users junk folders isnt needed ( use a global sieve rule ) additional i.e create some public imap folder for users copy untagged spam there, and some folder for false positve tagged ham ( or configure some email adresse ham/spam postfix transport. ( dont complete trust users about spam their meaning ! ) What mailbox format you might choose is academic, with maildir you have every mail one file, very robust but get a performance killer someday, dovecot mdbox union stuff from both formats, might best choice I am going to be running on SSD drives. should I use mbox? I'm just looking for general advice about how to do it right. Any good advice appreciated. look dovecot wiki, ask on their list Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich
Re: mass check tips and tricks - need advice
* Robert Schetterer r...@sys4.de: Am 13.02.2013 05:13, schrieb Marc Perkel: I'm thinking about setting up to do nightly mass checks and looking for advice. Thanks in advance. I'm thinking about creating a virtual server that will receive a forked copy of email that I pass that is delivered eith to ham@ or spam@ accounts. Does this sound reasonable? I have been using maildir format. i wouldnt do that, more the filter spam mails in users junk folders isnt needed ( use a global sieve rule ) additional i.e create some public imap folder for users copy untagged spam there, and some folder for false positve tagged ham ( or configure some email adresse ham/spam postfix transport. ( dont complete trust users about spam their meaning ! ) What mailbox format you might choose is academic, with maildir you have every mail one file, very robust but get a performance killer someday, dovecot mdbox union stuff from both formats, might best choice I'd concur with Robert if it wasn't for a little detail: AFAIK sa-learn can only handle mbox or maildir so you can't use any of the other, more optimized mailbox formats Dovecot supports such as mdbox. Since you run on SSD maildir shouldn't be a real performance problem. We're about to do some speed testing in this area within the next months, but the testbed hasn't been setup yet, so I can't give a definite advice. I am going to be running on SSD drives. should I use mbox? Test it and let us know. Switching between mailbox formats is done within less than a minute in Dovecot. p@rick -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstraße 15, 81669 München Sitz der Gesellschaft: München, Amtsgericht München: HRB 199263 Vorstand: Patrick Ben Koetter, Axel von der Ohe, Marc Schiffbauer Aufsichtsratsvorsitzender: Joerg Heidrich
Re: mass check tips and tricks - need advice
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 02/13/2013 05:13 AM, Marc Perkel wrote: I'm thinking about setting up to do nightly mass checks and looking for advice. Thanks in advance. I'm thinking about creating a virtual server that will receive a forked copy of email that I pass that is delivered eith to ham@ or spam@ accounts. Does this sound reasonable? I have been using maildir format. I am going to be running on SSD drives. should I use mbox? I'm just looking for general advice about how to do it right. Any good advice appreciated. Depending on what type of organisation you are working for I would suggest that you start with analyzing the data you can extract from the maillogs. If you collect information about what spamassassin rules that trigger to and from which ip and emailaddresses you probably find plenty of interesting patterns without poking thru the users mailboxes. -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.11 (GNU/Linux) Comment: Using GnuPG with undefined - http://www.enigmail.net/ iQEcBAEBAgAGBQJRG0fOAAoJEOVOmoKjmKMksL8IAIsT+PkH8dIPKMwcH9XEbt6+ 3APfjE+CpSoE0QA4qNJRFU7Y9au6Ezw4hJG+n70Orbedmw0FRi5tKqsd/efleB6z jvMTN6kfSvoFpCRj4agq8Uk20TRuC2Y4YYktVNvVEl+kFikP6NOTGWYYCxKRJcpJ KzG9rulTxggtVtj9IuGonCSKykElfQYKYL4ZNyMvurfQIlUv1ozWAsxVzOZuprTV g0z83tLePN42sr6UlOyP8khGYlFDumoK54+9svXKJ5ZyEWLxIW39f2/qFEj/u16G xOHUl1b0csT0gREfW62FgyjEuinFAZzY1i2NdcBzKZiD4/K+2POO4EczjZsJn0s= =R6pS -END PGP SIGNATURE-
