I'm having a weird memory issue with one of our mail proxies that I am
hoping to get some help with.
We currently have 2 mail proxies that are set up identically. They run
Fedora Core 3, postfix 2.1.4, and SA 3.0.X. SA was installed via perl's
MCPAN. We are using a Foundry ServerIron to load ba
> Date: Thu, 20 Jan 2005 20:15:37 +0100
> From: "Chr. von Stuckrad" <[EMAIL PROTECTED]>
>
> On Thu, Jan 20, 2005 at 12:33:11PM -0500, Haines Brown wrote:
> > My spamassassin 3.0.2 can be directed to tag a test message as spam
> > (debian testing), but amavisd-new is not automatically sending
> ...
On Thu, Jan 20, 2005 at 02:37:12PM -0500, Matt wrote:
> Ok that works great if you KNOW the domain.. but what do you do when
> this happens once every 3 or 4 days to random domains?
Oops! No idea, had something like this by network glitches,
which made random DNS-Servers unavailable. But we cou
Ok that works great if you KNOW the domain.. but what do you do when
this happens once every 3 or 4 days to random domains?
On Thu, 20 Jan 2005 20:30:18 +0100, Chr. von Stuckrad
<[EMAIL PROTECTED]> wrote:
> On Thu, Jan 20, 2005 at 01:47:12PM -0500, Matt wrote:
> > Ahh ha! Got it.. it seems to be
On Thu, Jan 20, 2005 at 01:47:12PM -0500, Matt wrote:
> Ahh ha! Got it.. it seems to be domains that either the name servers
> are not responding.. or the domain doesn't exist yet.. for instance:
>
> debug: DNS MX records found: 0
>
> Is there anyway to get around this? It seems to hang and do t
On Thu, Jan 20, 2005 at 12:33:11PM -0500, Haines Brown wrote:
> My spamassassin 3.0.2 can be directed to tag a test message as spam
> (debian testing), but amavisd-new is not automatically sending
...
> I know spamd is running. In /etc/default/spamassassin I have ENABLED =
> 1, and in amavisd.conf,
Ahh ha! Got it.. it seems to be domains that either the name servers
are not responding.. or the domain doesn't exist yet.. for instance:
debug: DNS MX records found: 0
Is there anyway to get around this? It seems to hang and do this
twice for long enough to delay the system... any thoughts?
jdow wrote:
This probably explains the massive runs of emails with nothing in them
that fetchmail is failing on when it attempts to drag them from NG_Popper.
Maybe. Standard practice on these seems to be to drop the connection
before the transaction is finished, so in *theory* the mail should nev
Hello Kyle,
another solution to feed spam/ham and unlearn(!) messages from Lotus Notes
client to bayesian database would be to use my DSCLearner module.
As fact of this see the following graphic, which describes my solution to
that problem.
http://prenzel.dyndns.org/Anwendungen/Internet/Bulleti
This really belongs on the Amavis-users list, but I can tell you right
now that amavisd-new does not use spamd. The spamd daemon does not
need to be running. Make sure that your domain is listed in the
@local_domain_maps in amavisd.conf for tagging to be performed.
On Thu, 20 Jan 2005 12:33:11 -0
On Wed, 2005-01-19 at 09:39, Frank M. Cook wrote:
> > SA shouldn't have this problem. However, the larger issue of whether or
> not
> > any sort of SPAM filtering solution is considered legal is my concern.
>
> this is an argument for simply rewriting the subject so that the user can
> decide whe
My spamassassin 3.0.2 can be directed to tag a test message as spam
(debian testing), but amavisd-new is not automatically sending
messages to spamd for tagging as they come in. amavis does work to
filter viruses with clamAV. I'm running amavis as an interface for
postfix.
I know spamd is running.
** This is a very quick and raw howto. I should spend some time putting
something webanized together with screenshots and everything. **
I have attached the 3 files I use on my FreeBSD box. GetHam.txt and
GetSpam.txt are the bash scripts. Pretty straight forward. I also
attached a copy of my fe
On Wed, 2005-01-19 at 09:39, Frank M. Cook wrote:
> > SA shouldn't have this problem. However, the larger issue of whether or
> not
> > any sort of SPAM filtering solution is considered legal is my concern.
>
> this is an argument for simply rewriting the subject so that the user can
> decide whe
That sounds perfect! if you would be so kind, could you send the pertinent
bits of the bash script (absolutely no hurry...)? We are also running
spamassassin on freeBSD, and I think I can (and our notes admin) set up the
mailboxes and notes stuff, but the script might take me a while to get
righ
We created 2 mailboxes on our Notes server called SpamCollector and
HamCollector.
We then set up an Agent in the template that added an action to move
selected untagged spam to the Spam Collector mailbox and copy the
selected HAM messages to the Ham collector mailbox.
I created a bash script o
Help... I need to feed spam and ham to sa-learn. We are using lotus notes
R5 and I need to get the messages into a format that sa-learn can use. The
closest I have found is to export messages as "structured text", and this
exports multiple messages as one file, the example below is how they are
At 07:22 AM 1/20/2005, you wrote:
Greetings!
I'm using SA 3.0.2 with postfix and amavisd. (so no spamd is running)
A message came in that was not spam that got blocked. I took it to
sa-learn and learned it as ham.
I want to take the message now and re-score it to see how it holds up.
What is
At 06:58 AM 1/20/2005, Thomas Kinghorn [MTNNS -Rosebank] wrote:
Is there a way to limit spamd child processes?
# ps -ef | grep spam
root 602 1 0 13:28 ?00:00:12 /usr/bin/spamd -d -c -m5 -H
xadmin 649 602 0 13:29 ?00:00:09 spamd child
xadmin 650 602 0 13:29 ?
> Greetings!
>
> I'm using SA 3.0.2 with postfix and amavisd. (so no spamd is running)
> A message came in that was not spam that got blocked. I took it to
> sa-learn and learned it as ham.
>
> I want to take the message now and re-score it to see how it holds up.
> What is the best way of acco
At 10:22 AM 1/20/2005, Jason Gauthier wrote:
I'm using SA 3.0.2 with postfix and amavisd. (so no spamd is running)
A message came in that was not spam that got blocked. I took it to
sa-learn and learned it as ham.
I want to take the message now and re-score it to see how it holds up.
What is
Title: Testing a message
Greetings!
I'm using SA 3.0.2 with postfix and amavisd. (so no spamd is running)
A message came in that was not spam that got blocked. I took it to sa-learn and learned it as ham.
I want to take the message now and re-score it to see how it holds up.
What is
From: Martin Hepworth [mailto:[EMAIL PROTECTED]
>
> Craig Zeigler wrote:
>
> > I am getting very obvious spam through my SA filters. The only
> > thing I think is that the value for ALL_TRUSTED is pushing it
> > below the threshold. Where do I go to alter this test's effect on
> > the spam count?
Craig Zeigler wrote:
I am getting very obvious spam through my SA filters. The only thing I
think is that the value for ALL_TRUSTED is pushing it below the
threshold. Where do I go to alter this test's effect on the spam count?
I have searched through all of the .cf files in /usr/share/spamassas
I am getting very obvious spam through my SA filters. The only thing I
think is that the value for ALL_TRUSTED is pushing it below the
threshold. Where do I go to alter this test's effect on the spam count?
I have searched through all of the .cf files in /usr/share/spamassassin
and /etc/mail/sp
Title: Spamassassin 3.0.2 child processes
Hi List.
Is there a way to limit spamd child processes?
# ps -ef | grep spam
root 602 1 0 13:28 ? 00:00:12 /usr/bin/spamd -d -c -m5 -H
xadmin 649 602 0 13:29 ? 00:00:09 spamd child
xadmin 650 602 0 13:29
Thanks Martin, that helps let me know
I haven't completely lost it.
I downloaded the patches, and am inexperienced
in how to use "patch". Tried several things, but assumed
to place the patch files in /SpamAssassin-3.0.2 directory, and then ran
patch -i, which didn't really work.
Is the patch pr
On Thu, Jan 20, 2005 at 03:12:44AM -0700, Bob Proulx wrote:
> Johann Spies wrote:
> > Mail-Followup-To: Johann Spies <[EMAIL PROTECTED]>,
> > users@spamassassin.apache.org,
> > [EMAIL PROTECTED]
>
> Please pick only one of these two aliases to the same list. Otherwise
> we all see
Johann Spies wrote:
> Mail-Followup-To: Johann Spies <[EMAIL PROTECTED]>,
> users@spamassassin.apache.org,
> [EMAIL PROTECTED]
Please pick only one of these two aliases to the same list. Otherwise
we all see duplicate messages.
> Yes, I am using the one form www.backports.org and
> Martin Hepworth wrote:
> problem with the ALL_TRUSTED rule. I give this a score of 0 (zero) in my
> local.cf as it give too many false hits for my liking.
Thanks for that info, I found some false hits here too, this 72.11.147.2
address for example is not trusted by me, see below..
Menno van Benn
John
problem with the ALL_TRUSTED rule. I give this a score of 0 (zero) in my
local.cf as it give too many false hits for my liking.
--
Martin Hepworth
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
John Fleming wrote:
I just got an email VERY obvious about selling drugs. Ar
On Wed, Jan 19, 2005 at 10:48:18PM -0900, John Andersen wrote:
> On Wednesday 19 January 2005 10:44 pm, Johann Spies wrote:
> > I could only get the network tests to work after installing Net::DNS
> > using CPAN. I would prefer however to do it the Debian way.
>
> CPAN is the Debian way. Its ev
On Wed, Jan 19, 2005 at 10:48:18PM -0900, John Andersen wrote:
> On Wednesday 19 January 2005 10:44 pm, Johann Spies wrote:
> > I could only get the network tests to work after installing Net::DNS
> > using CPAN. I would prefer however to do it the Debian way.
>
> CPAN is the Debian way. Its ev
On Thu, Jan 20, 2005 at 01:17:08AM -0700, Bob Proulx wrote:
>
> Your own backport? Or one from somewhere else?
>
> > I could only get the network tests to work after installing Net::DNS
>
> If www.backports.org then you should have gotten the libnet-dns-perl
> modules from there too.
Yes, I
On Thu, Jan 20, 2005 at 09:44:23AM +0200, Johann Spies wrote:
[ If you don't actually want a copy of messages, you should change
"lists ... to subscribe ... in your .muttrc so your mail-followup-to
header gets set correctly ]
> I have installed Spamassassin 3.02 on one of my three mail servers
>
Johann Spies wrote:
> I have installed Spamassassin 3.02 on one of my three mail servers
> which runs on Debian Woody with a backport of Exim4. I previously had
> 2.64 running on this machine with the Surbl checking working (after
> help from this list).
Your own backport? Or one from somewhere
John Andersen <[EMAIL PROTECTED]> writes:
> CPAN is the Debian way. Its every distro's way.
I disagree, dh-make-perl is the Debian way. :-)
How do you remove a package installed with CPAN, anyway? And how do you
remove old turds from old CPAN packages you've upgraded via CPAN? I
seem to reca
Johann Spies <[EMAIL PROTECTED]> writes:
> I could only get the network tests to work after installing Net::DNS
> using CPAN. I would prefer however to do it the Debian way.
dh-make-perl is your friend -- it makes it easy to Debianize any Perl
package from CPAN. (I don't install Perl packages
On Wednesday 19 January 2005 10:44 pm, Johann Spies wrote:
> I could only get the network tests to work after installing Net::DNS
> using CPAN. I would prefer however to do it the Debian way.
CPAN is the Debian way. Its every distro's way.
Spamassassin is a perl app, and installing the whole t
I have installed Spamassassin 3.02 on one of my three mail servers
which runs on Debian Woody with a backport of Exim4. I previously had
2.64 running on this machine with the Surbl checking working (after
help from this list).
I could only get the network tests to work after installing Net::DNS
Theo Van Dinter <[EMAIL PROTECTED]> writes:
> If it comes from a BSP host, report them!
> http://www.bondedse in hellnder.org/complaint/
Not so fast. (Disclaimer: I work for IronPort.)
First, I looked at the message -- *none* of the Received header IPs are
listed in Bonded Sender (I checked bo
From: "John Fleming" <[EMAIL PROTECTED]>
> SpamAssassin, running on "mail.dailyhills.com", has identified this
incoming
> email as possible spam. The original message has been attached to this
> email so you can view it (if it isn't spam).
> If you have any questions, contact [EMAIL PROTECTED] fo
From: "Justin Mason" <[EMAIL PROTECTED]>
> -BEGIN PGP SIGNED MESSAGE-
> Hash: SHA1
>
>
> jdow writes:
> > This probably explains the massive runs of emails with nothing in them
> > that fetchmail is failing on when it attempts to drag them from
NG_Popper.
> >
> > I guess simply dropping V
On Wed, Jan 19, 2005 at 09:04:06PM -0500, John Fleming wrote:
UGH! On looking at the default scores, I see it got -4 something from
being RCVD_IN_BSP_TRUSTED! Could someone elaborate on the utility of
BSP_TRUSTED? So much for "trust". I guess when I get [just a little]
older, maybe I will not co
See attached--- Begin Message ---
Online pharmacy - Visit our online store and save.
Save up to 80% compared to normal rates.
All popular drugs are available, including Vicodin and
Hydrocodone!
- World wide shipping
- No Doctor Visits
- No Prescriptions
- Next Day Priority Shipping
- Discreet Pa
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Theo Van Dinter writes:
> On Wed, Jan 19, 2005 at 09:04:06PM -0500, John Fleming wrote:
> > UGH! On looking at the default scores, I see it got -4 something from
> > being RCVD_IN_BSP_TRUSTED! Could someone elaborate on the utility of
> > BSP_TRUS
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
jdow writes:
> This probably explains the massive runs of emails with nothing in them
> that fetchmail is failing on when it attempts to drag them from NG_Popper.
>
> I guess simply dropping Verizon on the floor is the simplest answer.
> Explain to u
On Wed, Jan 19, 2005 at 09:04:06PM -0500, John Fleming wrote:
> UGH! On looking at the default scores, I see it got -4 something from
> being RCVD_IN_BSP_TRUSTED! Could someone elaborate on the utility of
> BSP_TRUSTED? So much for "trust". I guess when I get [just a little]
> older, maybe I
I just got an email VERY obvious about selling drugs. Aren't these headers
and score a little surprising? It even contained a URL with the v-word
misspelled by only one letter.
X-Spam-Status: No, score=1.6 required=5.0 tests=BAYES_99,DRUGS_PAIN,
RCVD_IN_BSP_TRUSTED,RCVD_IN_NJABL_SPAM,RCVD_IN_S
This probably explains the massive runs of emails with nothing in them
that fetchmail is failing on when it attempts to drag them from NG_Popper.
I guess simply dropping Verizon on the floor is the simplest answer.
Explain to users what you are doing and why. Verizon facilitating
spam and DDoS att
Ok - figured it out - silly DB problem - I figured a non-demonized spamd
would report an error - found it later in the logs.
Do have a couple other questions related to this way of working though:
Here is a typical message process ([EMAIL PROTECTED] has been substituted to
protect the innocent
51 matches
Mail list logo
