Re: [exim] Spam not being spam checked

On Wed, 2010-06-02 at 16:13 +0100, a.sm...@ukgrid.net wrote: > actually the high load has been a problem in the last 24 hours when > Ive been making config changes. The high load could be the *cause* of the problem rather than a symptom - spamc could well be timing out, or unable to run because

Re: [exim] Pipelining

On 02/06/10 10:12, Steffen Heil wrote: > 2010-06-02 08:33:29 1OJhW4-000368-JI<=<> H=xxx (xxx) [134.147.xxx.xxx] > P=esmtp S=661369 id=xxx > 2010-06-02 08:33:29 SMTP protocol synchronization error (next input sent too > soon: pipelining was not advertised): rejected "" H=xxx (xxx) > [134.147.xxx.xx

[exim] Time based ACL ........

i would like to know if it's possible to institute time based ACL's. So for eg. if i had a ratelimit that limited a to 200 per IP per hour and the person hits the limit it defers the IP for fifteen minutes in the connect phase or perhaps even slows down he connection further. So In the exam

Re: [exim] Spam not being spam checked

Quoting Graeme Fowler: > Methinks your problems are more serious than Exim and SA not playing > well together, given the load average your box has. That said, > presumably if SA thinks a message isn't spam, it has nothing to > report so no output is logged. That's a local config thing for SA

Re: [exim] Spam not being spam checked

On Wed, 2010-06-02 at 14:45 +0100, a.sm...@ukgrid.net wrote: > So looking again, its actually looks like I just have something very > broken. > Its not listed anywhere in the spamassassin logs and has no spam score > etc. However you can clearly see its being recieved via SMTP, passed > to t

Re: [exim] Spam not being spam checked

So looking again, its actually looks like I just have something very broken. Here´s a log of a spam mail with no spam score: 2010-06-02 10:10:08 [70746] 1OJjxf-000IP4-Cm <= info...@czechinfo.info H=(1x1.cz) [87.236.199.164]:37410 I=[89.21.28.37]:25 P=esmtp S=3670 T="NOTIFICATION FOR RELEASE

Re: [exim] Spam not being spam checked

On 01/06/10 22:35, a.sm...@ukgrid.net wrote: > Ok, > > think Ive got it.Quoting a.sm...@ukgrid.net: > >> Hmm, I just tried removed the spam-scanned section of this statement: >> >> spamcheck: >>verify = false >>condition = \ >> ${if !or{ \ >> {eq{$received_protocol}{asmtp}

Re: [exim] Spam not being spam checked

Quoting Graeme Fowler: > Er... your pipe transport sets the protocol as follows: command = > "/usr/local/sbin/exim -oMr spam-scanned -bS" Hi, Yes Im aware of that, sorry I didnt explain this fully enough. Within a few minutes a spam mail arrived that had bypassed spamassassin completely. W

[exim] whitelist hosts on spamcheck

Hi, I have the following for my spamcheck director.. see the commented out line of 'hosts'... If I uncomment it I get the following: 2010-06-02 13:46:56 Exim configuration error in line 372 of /usr/local/etc/exim/configure: hostlist relay_from_hosts = ${lookup mysql{MYSQL_Q_RELAYIP}{${sg{$

Re: [exim] Spam not being spam checked

On Wed, 2010-06-02 at 12:58 +0100, a.sm...@ukgrid.net wrote: > I changed the value of spam-scanned to spam-scannedukgsa and within a > few minutes a spam mail arrived with "P=spam-scannedukgsa" (this is in > the logs). I wonder how they do that, it must be an exploit of some > time. Er... yo

Re: [exim] Spam not being spam checked

On 2 June 2010 12:58, wrote: > Quoting a.sm...@ukgrid.net: > >> Ok, >> >>   think Ive got it >> >> with protocol spam-scanned and my dumb mail config accepts the mails >> without spam checking them. What I can do is change the spam-scanned >> string to some other value > > I changed the value of

Re: [exim] Spam not being spam checked

Quoting a.sm...@ukgrid.net: > Ok, > > think Ive got it > > with protocol spam-scanned and my dumb mail config accepts the mails > without spam checking them. What I can do is change the spam-scanned > string to some other value I changed the value of spam-scanned to spam-scannedukgsa and wi

Re: [exim] exim central filter

ReHi, On Tue, Jun 01, 2010 at 01:45:10AM +0200, MadTh wrote: > > Is it possible to identify or log the regex/keyword( or while line of the > filter), if the email had header/subject or body matches the central filter > and intercepted with a bounced message? no - at least not in a simple way. Y

[exim] Pipelining

Hi I have a problem with a "protocol synchronization error": We use an exchange server internally and an external exim server as relay and spam and virus filter. Usually this works fine. We have pipelining generally disabled and enforce protocol synchronization to fight spam. This would not be n