[SAtalk] False Positives with sorbs.net

2003-11-30 Thread mwestern
Title: To bounce or not to bounce Hi Guys, How many of you use sorbs.net without too much trouble? I'm just testing it at the moment and have had excellent results, but have had two complains about FPs. the two complains we're about softwareobjectives.com.au and bigpond.net.au

RE: [SAtalk] Blocking of bouncing addresses

2003-11-27 Thread mwestern
so I'm guessing that spamhaus is a thing which you can plug into spamassassin and mark as spam incoming? or how would I completely block those IP addresses with firewall or some kind of deny rules that's what we need around here. complete and utter shutdown... :)thanks for the

RE: [SAtalk] Blocking of bouncing addresses

2003-11-27 Thread mwestern
crap. stupid outhouse sent before i was ready. sorry, ignore last message. --- Hi All, I've figured out how to use DNSBL with sendmail and am very pleased, apart from being burnt by this page (ie i use www.orbz.org as a blacklist and our mail server suddenly became very

RE: [SAtalk] Blocking of bouncing addresses

2003-11-27 Thread mwestern
Hi All, I've figured out how to use DNSBL with sendmail and am very pleased, apart from being burnt by this page (ie i use www.orbz.org as a blacklist and our mail server suddenly became very obscene)... my question is, i read in the archives that if you have too many of these DNS lookups then

[SAtalk] Blocking of bouncing addresses

2003-11-26 Thread mwestern
We have a number of hosts spamming us using the mailing to a wrong address which doesn't exist but crafting the reply to address as someone else so they receive a bounce message and open it and it's spam. I've tried blocking about 10-15 hosts with iptables and that shuts them up for a while but

[SAtalk] Forged MUA on Outlook2003?

2003-11-23 Thread mwestern
Hi All, Outlook 2003 comes up with FORGED_MUA_OUTLOOK. obviously i can change the score in this to not score this any more. I don't know how to fix rules as i'm not a regex guru. anyone know how to fix this? or even how that one works? hehe. some would say all outlook should be classed as

RE: [SAtalk] Spam forward

2003-11-12 Thread mwestern
err, i'm not sure how you setup your spamassasin but i have mailscanner going well cos it supports a virus scanner as well. in my mailscanner.conf file i have the option of: # # What to do with spam # # # This is a list of actions to take when a message is spam. # It can

[SAtalk] Razor Timeout Case SpamAssassin to stop?

2003-11-12 Thread mwestern
Hi All, I had a strange thing last night. my spam assassin stop processing messages. sendmail was still receiving. i stopped and restarted MailScanner (which is what i use) once and it complained about address in use. i then stopped it and saw that sendmail was still running and did a killall

RE: [SAtalk] Spam forward

2003-11-12 Thread mwestern
Now you've got me interested. how did you get those stats? -Original Message- From: ian douglas [mailto:[EMAIL PROTECTED] Sent: Thursday, November 13, 2003 8:34 AM To: [EMAIL PROTECTED] Subject: RE: [SAtalk] Spam forward err, i'm not sure how you setup your spamassasin but i have

RE: [SAtalk] (semi)automatic Razor reporting options? anyone don e it like thi s before?

2003-11-11 Thread mwestern
Yers, they started to charge for it. i ran the beta for a long time and was very happy with it, but i needed to do something with the server, not on everyone's outlook. looks like anti-spam software will go the way of the virus with signatures updates and anti-spam build into anti-virus

RE: [SAtalk] (semi)automatic Razor reporting options? anyone don e it like thi s before?

2003-11-10 Thread mwestern
Ah.sadly we have winblows here and outhouse so spam will get modified as i forward it. i do have several unused mailboxes which fill with spam quite a bit and i tried to submit a mailbox full which i checked to be all spam to razor and it seemed to work, with a few perl errors here and there

[SAtalk] (semi)automatic Razor reporting options? anyone done it like thi s before?

2003-11-09 Thread mwestern
I have a very good working razor/spam assassin or 4 to be exact. i want to make a mailbox which i can simply forward spam to from any mail client and it will report to razor automatically. 1. i'll be calling it something very hard to guess for spammers to send to. ie [EMAIL PROTECTED] 2. i

RE: [SAtalk] Anti-SA article: ISP Assassin

2003-11-05 Thread mwestern
Yes i also found this 'Smart Gateway' rather entertaining. i hope he didn't just write an article but took out a patent on this new invention of his. even in 2002 NAT/port forwarding has been used for centuries before then. :)One shudders to think what massive breakthrough's hes made in his

RE: [SAtalk] Anti-SA article: ISP Assassin

2003-11-05 Thread mwestern
:) i find this kind of thing very therapudic. on the same equivilance of telling the evening news on TV how full of crap the politians are (that's true the world over).perhaps this was an experiment come from Dr Electron's psycology 'expertise'. muahahahahahah -Original

RE: [SAtalk] Razor question

2003-07-24 Thread mwestern
out of interest i wondering the same thing. mine was set to a default of 2.06 for a positive spam on RAZOR2_CHECK but some spam identified by that was still slipping through. i bumped my up to 3.06 to see what it did for a day. the joy of our setup is that even though it may mark it as spam it

RE: [SAtalk] Razor working?

2003-07-21 Thread mwestern
i use MailScanner so may be different, but i believe if you installed under root you'll find a /root/.razor/ directory which is where my log file lives.. doesn't say much but it tells me that it's working (as it checks each message). what i do what to know is how one logs all spamassassin

RE: [SAtalk] whitelists

2003-07-21 Thread mwestern
i could hazard a guess and say that 127.0.0.1 is in your whitelist? this baffled me for a while and no matter how much testing i did from the command line with a peice of spam i coulnd't get it to register. i tried from external and it worked fine. only found this out a few days later and went

[SAtalk] Configure Sendmail to not bounce messages that have been marked as spam?

2003-07-20 Thread mwestern
Hi All, I've got a working sendmail gateway for exchange server and if a message that has been marked as Spam attempts to get delivered and fails it generates a bounce. my question is, because most spam is a fake return address, is it possible to tell sendmail to not bother to bounce anything

[SAtalk] MailScanner opinion Razor setup q.

2003-07-17 Thread mwestern
Hi All, I tried to get amavis-new going with spamassassin but got a little bogged down when it came to reconfiguring sendmail (call me lazy or dumb or whatever). i tried MailScanner and it was _absolutly_ brilliant. all i had to do what basically untar and run ./install.sh it did all the good

RE: [SAtalk] Spamassassin log file

2003-07-17 Thread mwestern
you can turn on log all spam in your spamassassin tho. and you'll see stuff in your /var/log/maillog that's not too bad... -Original Message- From: YoloIts [mailto:[EMAIL PROTECTED] Sent: Friday, July 18, 2003 4:28 AM To: [EMAIL PROTECTED] Subject: [SAtalk] Spamassassin log file

RE: [SAtalk] Wow, spam with scores as low as 2.1??

2003-07-10 Thread mwestern
simply out of interest, may i ask what you define as a 'false negative'. -Original Message- From: Benjamin Tomhave [mailto:[EMAIL PROTECTED] Sent: Thursday, July 10, 2003 1:51 PM To: [EMAIL PROTECTED] Cc: Matt Kettler; Simon Byrnand Subject: RE: [SAtalk] Wow, spam with scores as low as

[SAtalk] How to do? Linux/Spam Assasin running as a gateway spam filter for another mail server.

2003-07-07 Thread mwestern
Hi All, I've got spam assassin working like a dream on our small sendmail box. works like a bought one.what i want to do is setup a gateway arrangment for an Exchange Server (everyone shudders, i know). like so: Internet - Linux Sendmail with SpamAssasin - Exchange Server has anybody