New plugin: reaper

2012-06-01 Thread Matt Simerson
Introducing zombies and a reaper. 24184 Accepted connection 0/15 from 64.185.226.20 / mx.olnews.com 24184 Connection from mx.olnews.com [64.185.226.20] 24184 (connect) ident::geoip: US, United States 24184 (connect) ident::p0f: Windows 7 or 8 24184 (connect) karma: fail, ZOMBIFIED, 1 naughty, 0 n

Re: New plugin: reaper

2012-06-01 Thread Steve Kemp
On Fri Jun 01, 2012 at 15:17:51 -0700, Matt Simerson wrote: > Introducing zombies and a reaper. Cute names.. > Notice the bolded lines. Instead of rejecting the message early, > plugins like dnsbl and karma can zombify it. To increase efficiency, > other plugins detect the zombie state and sk

Re: New plugin: reaper

2012-06-01 Thread Matt Simerson
On Jun 1, 2012, at 3:30 PM, Steve Kemp wrote: > On Fri Jun 01, 2012 at 15:17:51 -0700, Matt Simerson wrote: > >> Introducing zombies and a reaper. > > Cute names.. Thanks. >> Notice the bolded lines. Instead of rejecting the message early, >> plugins like dnsbl and karma can zombify it. To

Re: New plugin: reaper

2012-06-02 Thread Steve Kemp
On Fri Jun 01, 2012 at 18:40:04 -0700, Matt Simerson wrote: > But reducing code and simplifying plugins is just as important. This > implementation adds more control and flexibility to plugins without > additional code. For example, now it's possible (without writing code) > to configure all plugi

Re: New plugin: reaper

2012-06-02 Thread Jared Johnson
> Yup. Part of the motivation for this plugin was to short circuit all the > intermediate plugins and handlers so I can feed the message to sa-learn > and dspam. Until dspam is trained, that's a very important step in > training it. But there's no gain in validating the HELO name, SPF, or > Domain

Re: New plugin: reaper

2012-06-02 Thread Jared Johnson
> Yup. Part of the motivation for this plugin was to short circuit all the > intermediate plugins and handlers so I can feed the message to sa-learn > and dspam. Until dspam is trained, that's a very important step in > training it. But there's no gain in validating the HELO name, SPF, or > Domain

Re: New plugin: reaper

2012-06-02 Thread Jared Johnson
>> Why hasn't your rejected idea been worked into qpsmtpd yet? > > Because I came to view qpsmtpd in a different way than many > do (many view it as a service with useful plugins which they > can deploy, use, and enjoy). Instead I view it more as a > framework for rejecting/processing/handlin

Re: New plugin: reaper

2012-06-02 Thread Matt Simerson
On Jun 2, 2012, at 11:15 AM, Jared Johnson wrote: >> Yup. Part of the motivation for this plugin was to short circuit all the >> intermediate plugins and handlers so I can feed the message to sa-learn >> and dspam. Until dspam is trained, that's a very important step in >> training it. But there'

Re: New plugin: reaper

2012-06-03 Thread Matt Simerson
On Jun 2, 2012, at 11:22 AM, Jared Johnson wrote: >>> Why hasn't your rejected idea been worked into qpsmtpd yet? >> >> Because I came to view qpsmtpd in a different way than many >> do (many view it as a service with useful plugins which they >> can deploy, use, and enjoy). Instead I view it

Re: New plugin: reaper

2012-06-03 Thread Matt Simerson
https://github.com/smtpd/qpsmtpd/pull/24 Instead of zombies, undead, and a reaper, the plugin has been renamed 'naughty'. NAME naughty - dispose of naughty connections BACKGROUND Rather than immediately terminating naughty connections, plugins often mark the connection

Re: New plugin: reaper

2012-06-04 Thread Stevan Bajić
On 02.06.2012 23:23, Matt Simerson wrote: On Jun 2, 2012, at 11:15 AM, Jared Johnson wrote: Yup. Part of the motivation for this plugin was to short circuit all the intermediate plugins and handlers so I can feed the message to sa-learn and dspam. Until dspam is trained, that's a very important

Re: New plugin: reaper

2012-06-04 Thread Matt Simerson
On Jun 4, 2012, at 6:40 AM, Stevan Bajić wrote: > On 02.06.2012 23:23, Matt Simerson wrote: >> On Jun 2, 2012, at 11:15 AM, Jared Johnson wrote: >> Yup. Part of the motivation for this plugin was to short circuit all the intermediate plugins and handlers so I can feed the message to sa

Re: New plugin: reaper

2012-06-04 Thread Matt Simerson
Bayes is a little bit of a black box to me, so I can't really quantify just how useful this is, but I'd say it's greater than zero. Dspam even treats headers in a special way to ensure that their usefulness is maximized. >>> Usefulness != gain. There may be some gain, but I'm

Re: New plugin: reaper

2012-06-04 Thread Stevan Bajić
On 04.06.2012 21:09, Matt Simerson wrote: On Jun 4, 2012, at 6:40 AM, Stevan Bajić wrote: On 02.06.2012 23:23, Matt Simerson wrote: On Jun 2, 2012, at 11:15 AM, Jared Johnson wrote: Yup. Part of the motivation for this plugin was to short circuit all the intermediate plugins and handlers so

Re: New plugin: reaper

2012-06-05 Thread Matt Simerson
On Jun 4, 2012, at 2:56 PM, Stevan Bajić wrote: > On 04.06.2012 21:09, Matt Simerson wrote: >> On Jun 4, 2012, at 6:40 AM, Stevan Bajić wrote: >>> >>> Care to explain little more to me what this is all about? > >> 49237 (data_post) dspam: training naughty as spam >> >> Overnight, dpsam's spam