Re: pager.icq.com spam storm :(

2006-03-24 Thread Yousef Raffah
On Sat, 2006-03-25 at 01:09 -0500, Matt Kettler wrote: > Yousef Raffah wrote: > > Hello Everyone, > > > > I've been under a spam storm for the last two days and most of the > > message I get are similar to the one below, message for > > [EMAIL PROTECTED], I really don't understand how come I'm rece

Re: pager.icq.com spam storm :(

2006-03-24 Thread Matt Kettler
Yousef Raffah wrote: > Hello Everyone, > > I've been under a spam storm for the last two days and most of the > message I get are similar to the one below, message for > [EMAIL PROTECTED], I really don't understand how come I'm receiving > such messages! Can someone help me prevent these messages?

pager.icq.com spam storm :(

2006-03-24 Thread Yousef Raffah
Hello Everyone, I've been under a spam storm for the last two days and most of the message I get are similar to the one below, message for [EMAIL PROTECTED], I really don't understand how come I'm receiving such messages! Can someone help me prevent these messages? Return-Path: <> Received: from

On RelayCountry, IP::Country, etc.

2006-03-24 Thread Philip Prindeville
I was looking at IP::Country and trying to figure out how it works and how it's packaged... Noticed that the code and data are both part of the same tarball or RPM... That's unfortunate. I suspect the data changes more often than the code. In fact, it would be nice if the data were cached on a

Re: trusted networks help

2006-03-24 Thread Matt Kettler
Jim Knuth wrote: > Gestern (24.03.2006/22:43 Uhr) schrieb Matt Kettler, > >> Bowie Bailey wrote: >>> Craig McLean wrote: Bowie Bailey wrote: [snip] > You should define all of the IP addresses of your mailserver. > > I don`t know yet how I must determine the trusted network. :(

Re: Training Bayesian filter

2006-03-24 Thread Rick Macdougall
Larry wrote: I sat up and read till about 1:00 this morning all about training the bayesin filter. I have a question. Should I turn spamassassin off while I collect a load of spam so when I train the filter it doesn't have the spamassassin markup in it?? I wouldn't think you should train the

RE: Training Bayesian filter

2006-03-24 Thread Matthew.van.Eerde
Larry wrote: > I sat up and read till about 1:00 this morning all about training > the bayesin filter. I have a question. > > Should I turn spamassassin off while I collect a load of spam so when > I train the filter it doesn't have the spamassassin markup in it?? > I wouldn't think you should tra

Re: Webadmin tool for Spamassassin??

2006-03-24 Thread mouss
Abel Jeffcoat wrote: All, I have gotten a couple of replies, (thank you) but I thought I could be more clear. I'm looking for a tool that will all users to adminstor their blacklist and/or whitelist. I use Qmail and have mail delivered to a Spam folder. I would like my users to be able to l

Training Bayesian filter

2006-03-24 Thread Larry
I sat up and read till about 1:00 this morning all about training the bayesin filter. I have a question. Should I turn spamassassin off while I collect a load of spam so when I train the filter it doesn't have the spamassassin markup in it?? I wouldn't think you should train the filter with the

Re: trusted networks help

2006-03-24 Thread Jim Knuth
Gestern (24.03.2006/22:43 Uhr) schrieb Matt Kettler, > Bowie Bailey wrote: >> Craig McLean wrote: >>> Bowie Bailey wrote: >>> [snip] >>> You should define all of the IP addresses of your mailserver. I don`t know yet how I must determine the trusted network. :( 192.168.1/24 127/8 is clear for

Re: trusted networks help

2006-03-24 Thread Matt Kettler
Bowie Bailey wrote: > Craig McLean wrote: >> Bowie Bailey wrote: >> [snip] >> >>> You should define all of the IP addresses of your mailserver. >>> >>> trusted_networks 192.168.128.4 >>> trusted_networks 69.27.243.222 >> (I'm not the OP...) >> >> Do those addresses need to be CIDR? Or will SA take

RE: trusted networks help

2006-03-24 Thread Matthew.van.Eerde
Daryl C. W. O'Shea wrote: > When automatically set, yes. When you manually define your > trusted/internal networks, no -- you really get to define them. OK, that makes sense. -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Softw

RE: trusted networks help

2006-03-24 Thread Bowie Bailey
Craig McLean wrote: > Bowie Bailey wrote: > [snip] > > > > > You should define all of the IP addresses of your mailserver. > > > > trusted_networks 192.168.128.4 > > trusted_networks 69.27.243.222 > > (I'm not the OP...) > > Do those addresses need to be CIDR? Or will SA take straight-out IP?

Re: trusted networks help

2006-03-24 Thread Daryl C. W. O'Shea
[EMAIL PROTECTED] wrote: Daryl C. W. O'Shea wrote: You might as well through in trusted_networks 127.0.0.1 ... that's not hardcoded? When automatically set, yes. When you manually define your trusted/internal networks, no -- you really get to define them.

RE: trusted networks help

2006-03-24 Thread Matthew.van.Eerde
Daryl C. W. O'Shea wrote: > You might as well through in trusted_networks 127.0.0.1 ... that's not hardcoded? -- Matthew.van.Eerde (at) hbinc.com 805.964.4554 x902 Hispanic Business Inc./HireDiversity.com Software Engineer

Re: trusted networks help

2006-03-24 Thread Daryl C. W. O'Shea
Jim Maul wrote: Bowie Bailey wrote: My question is, with this setup, what trusted_networks should i have defined? You should define all of the IP addresses of your mailserver. trusted_networks 192.168.128.4 trusted_networks 69.27.243.222 I see that 167.206.112.76 (mx1.lightpath.net) also ac

Re: its not spam

2006-03-24 Thread Sander Holthaus
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 JuNiOx wrote: > hi all > my spamassassin is adding "*SPAM*" in some messages witch > isnt one!! > how can i fix it? > i would like configure to "say" it: "hei, the [EMAIL PROTECTED] > is not spam, stop to change its

Re: exceptions

2006-03-24 Thread List Mail User
>Larry wrote: >> >> Can I blacklist a domain but make an exception for one person in that >> domain? >> >> Like; >> >> blacklist_from [EMAIL PROTECTED] >> >> with the exception of [EMAIL PROTECTED] > >blacklist_from [EMAIL PROTECTED] won't blacklist [EMAIL PROTECTED] or >[EMAIL PROTECTED] > >

Re: Training SA with Thunderbird Junk folder

2006-03-24 Thread mouss
Mike Pepe wrote: If your mail server and users are using IMAP, the "Junk E-mail" folder is on the server already. I've got a script that runs from cron that will learn from that folder and then delete its contents several times a day. My issue is when spam is missed, I'd like to "J" it so

Re: trusted networks help

2006-03-24 Thread Jim Maul
Bowie Bailey wrote: My question is, with this setup, what trusted_networks should i have defined? You should define all of the IP addresses of your mailserver. trusted_networks 192.168.128.4 trusted_networks 69.27.243.222 I see that 167.206.112.76 (mx1.lightpath.net) also accepts mail for yo

RE: trusted networks help

2006-03-24 Thread Bowie Bailey
Jim Maul wrote: > I believe i am having an issue with my trusted networks and am hoping > someone can help me figure out what to do. I currently do not have > any defined and am running a nat'ed server which from what i read will > pretty much always have problems with trusted networks. The thing

trusted networks help

2006-03-24 Thread Jim Maul
I believe i am having an issue with my trusted networks and am hoping someone can help me figure out what to do. I currently do not have any defined and am running a nat'ed server which from what i read will pretty much always have problems with trusted networks. The thing is, im not entirely

Re: rulesdujour, lint, and whitelist_spf

2006-03-24 Thread Theo Van Dinter
On Fri, Mar 24, 2006 at 09:26:25AM +0100, Michael Monnerie wrote: > As I use SPF on MTA level, I wanted to disable SPF. So I have to disable > the SPF list from RDJ also, thank you. FWIW, rules that require plugins should be wrapped in "ifplugin/endif" containers. Especially if those rules are b

Re: its not spam

2006-03-24 Thread JamesDR
JuNiOx wrote: right... i saw something about that.. but... in my spamassassin there isnt "whitelist" or "blacklist" how do i create them? - Original Message - From: "JamesDR" <[EMAIL PROTECTED]> To: Sent: Friday, March 24, 2006 11:58 AM Subject: Re: its not spam JuNiOx wrote: hi

Re: Razor2

2006-03-24 Thread Matt Kettler
Rick Macdougall wrote: > Wess wrote: >> Hello, >> >> I am trying to use Razor2 with Spamassassin 3 on Gentoo. I have >> Razor2 installed, but Spamassassin will not use it. If I enable the >> "use_razor2 1" in my config, I get a warning when I lint/debug that >> it failed to parse the line. I hav

RE: Add Rules From SARE and/or SA for Spamassassin

2006-03-24 Thread Bowie Bailey
Num ber wrote: > > the last question, > > What rules i need to take ? all ? or only somes (but what ...) > > Nobody ?? I answered your question the first time you asked... > They have to many rules on the SARE website... > And i don't know what rules i need to take .. ALL ? There are only 21 SA

Re: Training SA with Thunderbird Junk folder

2006-03-24 Thread Mike Pepe
mouss wrote: Edward Diener a écrit : Does anybody know the instructions for training SA with the contents of the Thunderbird Junk folder ? My web host, where SA is tunning, suggests I do this in order to reduce the amount of spam I get, and I can login to my web host, transfer files from my loc

Re: Razor2

2006-03-24 Thread Rick Macdougall
Wess wrote: Hello, I am trying to use Razor2 with Spamassassin 3 on Gentoo. I have Razor2 installed, but Spamassassin will not use it. If I enable the "use_razor2 1" in my config, I get a warning when I lint/debug that it failed to parse the line. I have this same problem with DCC, which i

Re: 2nd mail server problem

2006-03-24 Thread John Hall
"Bowie Bailey" <[EMAIL PROTECTED]> wrote in message news:[EMAIL PROTECTED] > 1) Get rid of the secondary > 2) Make the secondary capable of rejecting messages based on spam, > virus, unknown user, etc the same way the primary does. > 3) Find a way to have the secondary only accept mail when the

Razor2

2006-03-24 Thread Wess
Hello, I am trying to use Razor2 with Spamassassin 3 on Gentoo. I have Razor2 installed, but Spamassassin will not use it. If I enable the "use_razor2 1" in my config, I get a warning when I lint/debug that it failed to parse the line. I have this same problem with DCC, which is also insta

Re: Training SA with Thunderbird Junk folder

2006-03-24 Thread Michael Parker
Sander Holthaus wrote: > The problem with using that approach is that you can't authenticate > users. In small, closed, trusted environments it can be useful, but in > most situations, I don't think it will be usable. The nice thing about > using an IMAP-based sollution is that the user is authenti

Re: its not spam

2006-03-24 Thread JamesDR
JuNiOx wrote: hi all my spamassassin is adding "*SPAM*" in some messages witch isnt one!! how can i fix it? i would like configure to "say" it: "hei, the [EMAIL PROTECTED] is not spam, stop to change its subject" =) Whitelist them. -- Thanks, James

Re: Add Rules From SARE and/or SA for Spamassassin

2006-03-24 Thread Dimitri Yioulos
On Friday March 24 2006 6:47 am, Num ber wrote: > >the last question, > >What rules i need to take ? all ? or only somes (but what ...) > > Nobody ?? > They have to many rules on the SARE website... > And i don't know what rules i need to take .. ALL ? > > (Can i test if the new rules was installed

Re: SQL Bayes

2006-03-24 Thread Jim C. Nasby
Peraps a better option would be to have a users table and setup referential integrity. Of course that would do no good for MyISAM, but using that isn't really any better than using BDB, so... On Tue, Mar 21, 2006 at 09:26:30AM -0800, [EMAIL PROTECTED] wrote: > Duane Hill wrote: > > delete from

Re: Training SA with Thunderbird Junk folder

2006-03-24 Thread Sander Holthaus
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Matt Kettler wrote: > Forrest Aldrich wrote: >> Such a mechanism would still depend upon some organization on the >> server side... as far as I can tell, it's very much to the local >> sysadmin (ie: aliases to send to, forward or attach properly, >> e

RE: 2nd mail server problem

2006-03-24 Thread Bowie Bailey
Joshua, C.S. Chen wrote: > Hi folks, > I am using spamassassin 3.1.0 and it works well. Now in my institute, > we have 2 mx (mail servers) see it's dns record > > myinstitute.edu.tw. 300 IN MX 100 mail2.myinstitute.edu.tw. > myinstitute.edu.tw. 300 IN MX 2 mail1.myinstitute.edu.tw. > > > > Now

Re: SA just stopped working

2006-03-24 Thread Liam-PrintingAutomation
mouss wrote: Liam-PrintingAutomation a écrit : I uhm, er, have no idea How do I find out? I can't find anything in the Sendmail settings to indicate. I use Webmin for server management, and since you mentioned Procmail I took a look at the Webmin GUI for that, and found this:

sa-learn --backup and --restore issue: duplicate key violations

2006-03-24 Thread C. Bensend
Hey folks, I'm going to be upgrading my mailserver in a month or two, so I'm running through some different configurations for SpamAssassin, IMAP, and anti-virus. I'm working on testing the SQL stuff for user configs and Bayes right now. So, here are the stats: Old mailserver

its not spam

2006-03-24 Thread JuNiOx
hi all my spamassassin is adding "*SPAM*" in some messages witch isnt one!! how can i fix it? i would like configure to "say" it: "hei, the [EMAIL PROTECTED] is not spam, stop to change its subject" =)

Re: Spamassassin Appliances?

2006-03-24 Thread Paolo Cravero as2594
Hi, this is a copy'n'paste from a message I wrote in December 2005 to the AMaViS list. Hi, I thought you might like to know how much a commercial solution _very_ similar to amavisd-new+ClamAV+SA+MySQL+mailzu costs. Something with AV+AS and webQuarantine to be instal

Re: some messages does not seem to get to spamassassin

2006-03-24 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sipos Gabor wrote: > Hello everyone, > Hi! [snip SA not marking some mail] > Where to start looking? > > thanks everyone > Gabor Sipos > I had a similar problem here, with only a couple of mail accounts and no real load to speak of. I added a

Re: INVALID_DATE

2006-03-24 Thread Craig McLean
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 David Lee wrote: > On Fri, 24 Mar 2006, mouss wrote: > >> Daryl C. W. O'Shea a écrit : >>> David Lee wrote: >>> If, conversely, it is not in breach, then SA has a problem: it shouldn't be marking it "INVALID_DATE". Incidentally, it is this

Re: some messages does not seem to get to spamassassin

2006-03-24 Thread Will Nordmeyer
I've seen this as well... it appears (to me) to be related to bayes token expiring timeouts. Whenever one of my clients has a timeout on their token expire, the headers don't get written to the SPAM and the message gets sent on without headers. --Will > Hello everyone, > > I'm a newbie her

Re: some messages does not seem to get to spamassassin

2006-03-24 Thread Will Nordmeyer
I've seen this as well... it appears (to me) to be related to bayes token expiring timeouts. Whenever one of my clients has a timeout on their token expire, the headers don't get written to the SPAM and the message gets sent on without headers. --Will > Hello everyone, > > I'm a newbie her

RE: Spamassassin Appliances?

2006-03-24 Thread Paul Hutchings
They look a little pricey, which I suppose is to be expected as you're paying for integration and support I suppose. I wonder if anything is available that would run on, say, a Mac Mini? Paul -- Paul Hutchings Network Administrator, MIRA Ltd. Tel: 44 (0)24 7635 5378, Fax: 44 (0)24 7635 8378 mailt

Re: Add Rules From SARE and/or SA for Spamassassin

2006-03-24 Thread Num ber
the last question, What rules i need to take ? all ? or only somes (but what ...) Nobody ?? They have to many rules on the SARE website... And i don't know what rules i need to take .. ALL ? (Can i test if the new rules was installed ?? ) Thanks and goodbye :-) ___

Re: Spamassassin Appliances?

2006-03-24 Thread Dhawal Doshy
Paul Hutchings writes: I currently run a Linux relay based around Postfix and Spamassassin. The hardware is getting old so I'm considering replacing it with an entry level rack mount server. I wondered if anyone had any suggestions on appliances that might be worth looking at that are bas

RE: Spamassassin Appliances?

2006-03-24 Thread Martin Hepworth
Paul The defenderMX product from fsl.com is good. No idea of prices, based on number of CPUs I believe. You provide the hardware and they manage the software once it's installed. It's basically a commercial vesrion of MailScanner with a more feature-full interface. -- Martin Hepworth Snr Syste

Spamassassin Appliances?

2006-03-24 Thread Paul Hutchings
I currently run a Linux relay based around Postfix and Spamassassin. The hardware is getting old so I'm considering replacing it with an entry level rack mount server. I wondered if anyone had any suggestions on appliances that might be worth looking at that are based around Spamassassin (and p

Re: 2nd mail server problem

2006-03-24 Thread hamann . w
Hi, I changed my first mailserver to not accept mail for non-existant accounts (so these mails do not take SA resources either), but a lot of spam seems to be sent to the 2nd MX anyway. So the consequence was to make an account list available to the 2nd server, so it can reject non-existent reci

Re: INVALID_DATE

2006-03-24 Thread David Lee
On Fri, 24 Mar 2006, mouss wrote: > Daryl C. W. O'Shea a écrit : > > David Lee wrote: > > > >> If, conversely, it is not in breach, then SA has a problem: it shouldn't > >> be marking it "INVALID_DATE". Incidentally, it is this aspect (rather > >> than any other) of the date that is triggering t

some messages does not seem to get to spamassassin

2006-03-24 Thread Sipos Gabor
Hello everyone, I'm a newbie here, so please forgive me for asking n00b questions, and also, I'm not sure whether this is a SA question, but I have to start somewhere. My setup is: debian/sarge 3.1, amavisd-new, spamassassin 3.03 (I think so) and ClamAV. The system is a relay-only server

Re: rulesdujour, lint, and whitelist_spf

2006-03-24 Thread Daryl C. W. O'Shea
Michael Monnerie wrote: On Freitag, 24. März 2006 09:01 Daryl C. W. O'Shea wrote: Is the SPF plugin enabled? The syntax looks fine, but it can't be parsed if the plugin isn't loaded. ARghl. I should not work late night... Thanks. As I use SPF on MTA level, I wanted to disable SPF. So I have

Re: rulesdujour, lint, and whitelist_spf

2006-03-24 Thread Michael Monnerie
On Freitag, 24. März 2006 09:01 Daryl C. W. O'Shea wrote: > Is the SPF plugin enabled?  The syntax looks fine, but it can't be > parsed if the plugin isn't loaded. ARghl. I should not work late night... Thanks. As I use SPF on MTA level, I wanted to disable SPF. So I have to disable the SPF list

2nd mail server problem

2006-03-24 Thread Joshua, C.S. Chen
Hi folks, I am using spamassassin 3.1.0 and it works well. Now in my institute, we have 2 mx (mail servers) see it's dns record myinstitute.edu.tw. 300 IN MX 100 mail2.myinstitute.edu.tw. myinstitute.edu.tw. 300 IN MX 2 mail1.myinstitute.edu.tw. Now in most cases, spam goes to mail1 and got dro

Re: Uninstalling SA on OS-X

2006-03-24 Thread Patrick Sneyers
(This applies to OSX "client", not Server) CPAN doesn't have an "uninstall". I use Webmin to install/remove modules. Install Webin http://www.webmin.com/osx.html Remove SA in Webmin In Terminal Upgrade CPAN with perl -MCPAN -e shell install Bundle::CPAN Then install (you can use webmin): Test

Re: rulesdujour, lint, and whitelist_spf

2006-03-24 Thread Daryl C. W. O'Shea
Michael Monnerie wrote: Anybody else got this problem? Lots of warnings suddenly. mfg zmi [31721] warn: config: failed to parse line, skipping: whitelist_from_spf[EMAIL PROTECTED] [31721] warn: config: failed to parse line, skipping: whitelist_from_spf Is the SPF plugin enabled? T