Re: [SAtalk] Spamassassin2.63 breaks w/amavisd-new (Was: Perl -T switch)

2004-01-31 Thread Ryan Moore
I know Razor2 needed patching to work with SA 2.6x, I'm not sure about Pyzor or DCC though. You could simply disable those within your SA config for the time being. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Marc G. Fournier wrote

Re: [SAtalk] False positive

2003-12-11 Thread Ryan Moore
else might be able to give some insight. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Chris Barnes wrote: I got a false positive this morning, where it looks like the main culprit was bad information in SORBS and RJABL. The sender is a local

Re: [SAtalk] amavisd-new spamassassin = no headers. Ugh!

2003-12-09 Thread Ryan Moore
of that subsection). Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Jonathan Nichols wrote: Ryan Moore wrote: Your postfix isn't stripping them right? I use amavisd-new and it works like a charm. I do have $sa_tag_level_deflt set to -999, so

Re: [SAtalk] amavisd-new spamassassin = no headers. Ugh!

2003-12-08 Thread Ryan Moore
will likely score below 0 and not get any headers added. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Jonathan Nichols wrote: Vivek Khera wrote: j == jnichols [EMAIL PROTECTED] writes: 2. in your spamassassin local.cf file, make sure

Re: [SAtalk] spam report in headers

2003-12-03 Thread Ryan Moore
To my knowledge amavisd-new is limited to using those headers, it ignores the verbose ones added by SpamAssassin. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Fritz Mesedilla wrote: How does spamassassin include the spam report

Re: [SAtalk] Double bounce sa-learn

2003-11-24 Thread Ryan Moore
the burden on the box as well. Anyway, it probably would be useful in the end to help stop junk from getting through, I've not done anything with it so far since SA is running really well for us without rocking the boat too much. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704

Re: [SAtalk] (no subject)

2003-11-22 Thread Ryan Moore
* scores for all the scoresets in user_prefs/local.cf). Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Mairhtin O'Feannag wrote: Hello, Below are the first few lines of my local.cf file for the entire site. I do not have a local.cf for any

Re: [SAtalk] Bayes File Ownership

2003-11-21 Thread Ryan Moore
, if it has done it automatically the files are still owned by the amavisd user. My first guess would be that some script is doing something manually to the database (copying it perhaps without -a?). Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net

Re: [SAtalk] mysql spamc ignores the email in mailling list

2003-11-19 Thread Ryan Moore
for user defined rules, afaik, you might be able to do it via some hacks in the amavisd code (since spamassassin would have to be called as the recipient instead of the user that amavisd runs as). Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech

Re: [SAtalk] Empty Return-Path?

2003-11-14 Thread Ryan Moore
All DSNs have them afaik, such as bounces, return receipts, etc. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Charles Gregory wrote: Hallo! Another spam today, with the infamous empty return path. (Return-Path: ) But I didn't see any test

Re: [SAtalk] sa-learn via email

2003-11-06 Thread Ryan Moore
/spamtmp (or whatever you used) or use the --overwrite option to ripmime (which I *think* should also work. Sorry about that, I tend to add stuff interactively so I didn't notice the problem. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net

Re: [SAtalk] FW: sa-learn via email

2003-11-04 Thread Ryan Moore
it worked for Mozilla as that is the only browser I use. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net (the second line is 'cd /tmp', the sed line will probably get wrapped, and there is a single whitespace between \n name

Re: [SAtalk] yahoo redirect

2003-10-24 Thread Ryan Moore
Looks like YAHOO_REDIR looks for http://rd.yahoo.com;, adding the s into the hostname threw it off ;\ Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) Colin A. Bartlett wrote: Can anyone hazard a guess as to why a message with an image and several links

Re: [SAtalk] Highest Score

2003-10-03 Thread Ryan Moore
Highest I've got is a 75.8, but that was with SA 2.55 and with a few RBL scores set to 2.5 or 3.0 in local.cf (still would have been right around 70 with defaults though) Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Scott Rothgaber

Re: [SAtalk] RCVD_IN_DYNABLOCK problem

2003-09-25 Thread Ryan Moore
, as Gerry mentioned your daughter will want to use her isp's smtp server instead of sending directly into your system, as it sounds like that is what is happening. Or you can use the trusted_networks option Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech

Re: [SAtalk] Sendmail error help...

2003-09-25 Thread Ryan Moore
If your server is taking an abnormal amount of time to display the SMTP banner (the first 220 line), then the remote end might close the connection before issuing any commands. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Matt Chapman

Re: [SAtalk] RCVD_IN_DYNABLOCK problem

2003-09-24 Thread Ryan Moore
I'm writing this from so hopefully I understood what was going on ;] Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Terry Milnes wrote: But you are missing the point, mail is being identified as RCVD_IN_DYNABLOCK when it is the recipient

Re: [SAtalk] Monitoring which Rules are being used...

2003-09-23 Thread Ryan Moore
could parse through that and do what you will, we do some parsing of the file and stick data into a database for our users. That is assuming you are logging to syslog, which I think is the default for amavis and I'm pretty sure that is configurable within amavisd. Ryan Moore -- Perigee.net

Re: [SAtalk] 2.60 and Dynamic IP Checks

2003-09-23 Thread Ryan Moore
By default SA will check the 9 previous hosts listed in the RECEIVED headers. You could lower that by using num_check_received directive in your usr_prefs/local.cf, I currently use a setting of four. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech

Re: [SAtalk] 2.60 and Dynamic IP Checks

2003-09-23 Thread Ryan Moore
Doh, I remember looking in the perldoc and thinking ok it isn't in the deprecated section, obviously I was wrong since it actually is. Is there another config option that would perform the same behavior or has that functionality been lost in 2.60? Ryan Moore -- Perigee.net Corporation

Re: [SAtalk] why is sa not catching the microsoft emails ?

2003-09-23 Thread Ryan Moore
Is there a size limit that SA implements to avoid scanning huge messages whose content is primarily binary? I know amavisd has a limit such as that, but I'm not sure if spamassassin has one as well or not. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech

Re: [SAtalk] Amavis-New, PostFix, SA, MAILTO_TO_SPAM_ADDR

2003-09-17 Thread Ryan Moore
for localhost, but I wouldn't think that SA wouldn't query for 127.0.0.1 since that will hit a few rbl zones that include it for some reason (when they should be including 127.0.0.2 or something). Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net

Re: [SAtalk] Re: Spam using invalid Mime headers to bypass SpamAssassin?

2003-08-26 Thread Ryan Moore
a dozen of these on one account. Guess I'll give 2.60 a try and see how it handles these. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Fuzzy Fox wrote: Ryan Moore [EMAIL PROTECTED] wrote: I got an email that made it by spamassassin

Re: [SAtalk] RFC-ignorant usage?

2003-08-26 Thread Ryan Moore
(MUA wrapped it I think). The variables starting with $ should be edited for whatever zone you want to use. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Fred I-IS.COM wrote: Is it possible to use the dsn listing from RFC-ignorant.org

Re: [SAtalk] Re: Spam using invalid Mime headers to bypass SpamAssassin?

2003-08-26 Thread Ryan Moore
As an addendum, it appears as if SA 2.60-rc2 is able to parse the message. Hooray! Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Ryan Moore wrote: There is alot there for SA to trigger on, as noticed in the headers for the fixedmime.txt

[SAtalk] Spam using invalid Mime headers to bypass SpamAssassin?

2003-08-25 Thread Ryan Moore
if that is a valid thing to do or not. In any case, is this a bug of some sort with SpamAssassin? Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net --- This SF.net email is sponsored by: VM Ware

Re: [SAtalk] How can i connect to remote mysql db?

2003-08-22 Thread Ryan Moore
starting with $. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net swapna ghosh wrote: Hi i have sent one email asking for - that i am unable to connect mysql database from my server. The database is under a different host but is *spamassassin

Re: [SAtalk] rbl test hangs for osirusoft.com

2003-08-16 Thread Ryan Moore
Appears to be working here doing a manual test. I think setting the score to 0 disables the test, which you can do in your local.cf. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net ~$ dig 2.0.0.127.relays.osirusoft.com ; DiG 9.2.1

Re: [SAtalk] archives for seeding bayes?

2003-08-15 Thread Ryan Moore
greater than 15 by default) will have precedence and older entries will be expired from the database. This how I understand that it works at least, could be wrong though. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Ricardo Kleemann wrote

Re: [SAtalk] user_prefs configuration

2003-08-14 Thread Ryan Moore
it was pretty easy to setup. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Scott Fraser wrote: Good Morning Folks, Well, after fighting with it longer than I care to admit, I do believe I now have a working Postfix/SpamAssassin/Amavisd

Re: [SAtalk] implementation

2003-08-14 Thread Ryan Moore
We use Amavisd-new (which works great) that calls SpamAssassin, and it then forwards it (via SMTP) to our real POP server. We also have a sendmail machine in front of Amavisd that calls DNSRBL's and Milter-Sender. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017

[SAtalk] Blocking mail with the same From and To lines

2003-08-14 Thread Ryan Moore
spam like this? Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net --- This SF.Net email sponsored by: Free pre-built ASP.NET sites including Data Reports, E-commerce, Portals, and Forums

Re: [SAtalk] USER IN WHITELIST spammer scam

2003-08-14 Thread Ryan Moore
to that DNSRBL and define another rbl test in your local.cf file that checks that zone and give any hits from that test a negative score, like the BONDED_SENDERS test. Ryan Moore -- Perigee.net Corporation 704-849-8355 (sales) 704-849-8017 (tech) www.perigee.net Greg Webster wrote: Thanks