[Mimedefang] redirecting/dropping spoofed sender and null sender

2004-07-23 Thread Joe Arnstein
Hi All, Could someone please help me with these custom anti-spoofing rules I'm putting in? I would like to drop all messages from <> not destined for [EMAIL PROTECTED] and am not sure whether I should do it through Sendmail or Mimedefang, or if the syntax below is correct. Also, because this i

[Mimedefang] blocking | and bad syntax in "from" address

2004-06-18 Thread Joe Arnstein
D]> from= from= from=<[EMAIL PROTECTED]> from=<80/[EMAIL PROTECTED]> from= Do any of the rfc's say this is improper syntax or forbiden characters? Should I block this? Can I block it? And if so can someone recommend a good way to do it? Thanks, Joe Arnstein __

OT: RE: [Mimedefang] Graphdefang not graphing virus types

2004-05-17 Thread Joe Arnstein
Jonas and all , Grep'ing through the logs manually, I see a virus called "mailto:[EMAIL PROTECTED] On Behalf Of Joe Arnstein Sent: Monday, May 17, 2004 12:09 PM To: [EMAIL PROTECTED] Subject: RE: [Mimedefang] Graphdefang not graphing virus types Hi Jonas, Thanks for your response. T

RE: [Mimedefang] Graphdefang not graphing virus types

2004-05-17 Thread Joe Arnstein
To: [EMAIL PROTECTED] Subject: Re: [Mimedefang] Graphdefang not graphing virus types On Fri, 14 May 2004 10:54:43 -0400, Joe Arnstein wrote: > senders of viruses show up OK, but Graphdefang generates an empty > .png file for the list of virus types (daily/hourly/monthly Check your mimedefan

[Mimedefang] Graphdefang not graphing virus types

2004-05-14 Thread Joe Arnstein
ings }; snip from log: May 13 18:46:36 server1 mimedefang.pl[6438]: MDLOG,i4DMngVX022386,virus,W32/[EMAIL PROTECTED],65.100.10.44,<[EMAIL PROTECTED] .com>,<[EMAIL PROTECTED]>,Important notify about your e-mail account. Can anyone point me in the right direction to get it working? T

[Mimedefang] OT: question about graphdefang

2004-04-07 Thread Joe Arnstein
graphdefang.pl --nodb' and it seems to be reading only one of those datafiles. Can anyone offer some tips? Thanks, Joe Arnstein ___ Visit http://www.mimedefang.org and http://www.canit.ca MIMEDefang mailing list [EMAIL PROTECTED] http://l

[Mimedefang] gobs of logs--how to graph them all?

2004-03-02 Thread Joe Arnstein
Hi all, I have about 4 months worth of logs saved mostly in weeklong files for which I'd like to generate graphs and make them available for viewing online. For the first month we used graphdefang to do the spam logs, but with all the traffic going through the box, we ran out of mem and CPU causi

RE: [Mimedefang] Training SA when mail is not stored locally?

2004-02-05 Thread Joe Arnstein
How would learning be affected on a machine that receives ONLY spam? For example, our secondary server receives a steady flow of garbage all day and night, and only gets good stuff when the primary one goes down. If all it ever gets is garbage, how will it know what is legitimate when it sees it?

RE: [Mimedefang] Training SA when mail is not stored locally?

2004-02-04 Thread Joe Arnstein
Michael, Thanks for the reply. Is it OK to turn on bayes_auto_learn without first training SA manually? My thinking is that the server might learn the wrong thing out of the gate which would be bad since it is difficult to see what is being tagged. Is that a misguided notion? If SA learns w

[Mimedefang] Training SA when mail is not stored locally?

2004-02-04 Thread Joe Arnstein
t would be suboptimal for them to do this much work, and I'm worried that the extra header info etc might taint the Bayes database (?) There must be a good/better way tho. Any recommendations? Thanks, Joe Arnstein insert clever .sig file here--- this space intention

RE: [Mimedefang] spam filtering per user on a gateway

2004-01-28 Thread Joe Arnstein
Hi Rick, Great! Thanks a lot for the tip. I'm assuming it should go first in the list to avoid too much re-writing on Mimedefang's part. Thanks again for your help. Joe Arnstein -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Rick Ma

[Mimedefang] spam filtering per user on a gateway

2004-01-28 Thread Joe Arnstein
nd SA 2.60;  the other with MD 2.39 and SA 2.60. Thanks for your help!   Joe Arnstein     ---insert clever .sig file here this space intentionally left blank     ___ Visit http://www.mimedefang.org and