Re: Setting up DKIM and DomainKeys mail signing and verification

2006-09-28 Thread Henrik Ostergaard
Thanks for a splendid howto! I do however have a small problem: My usesrs submit their messages for relaying on port 25 like normal incoming messages - meaning that they will be verified before they are signed, causing the verification to fail. If I set up the DNS record to enforce signing, this

RE: Spamassassin headers

2006-09-28 Thread KimSorensen
Email Lists-2 wrote: Kim Please forgive, I had my email client set wrong and it didn't wrap your .cf file in the email so... it was uncommented. My fault. Interesting though... maybe you just didn't stop and restart the service? :-) -rh -- Robert - Abba Communications

Re: Earthlink emails

2006-09-28 Thread Ramprasad
On Tue, 2006-09-26 at 21:28 -0700, jdow wrote: Before you blame Earthlink note that it has NOT gone through Earthlink servers. relay2.corp.good-sam.com is the receiving email server. It's a forged email, at a guess. (It also has mangled headers. Newlines are missing. MAYBE it would do

Re: duplicate emails

2006-09-28 Thread Rick Macdougall
Steve Ingraham wrote: mail.okcca.net. 21592 IN A 204.87.111.225 ;; Query time: 2 msec ;; SERVER: 216.55.144.5#53(216.55.144.5) ;; WHEN: Wed Sep 27 21:16:14 2006 ;; MSG SIZE rcvd: 48 [EMAIL PROTECTED] ~]# telnet 204.87.111.225 Trying 204.87.111.225... telnet: connect

Re: duplicate emails

2006-09-28 Thread Matt Kettler
Steve Ingraham wrote: I want to thank Jake, Andrew, George, Eric, Loren, Jimmy and anyone else who has sent information to help me with my email problems the last couple of days. Despite all of your good advice our domain is still having email problems. I am not exactly sure what the root of

Move to Junk Email

2006-09-28 Thread Shue, Daniel G.
I have seen some info of SA working with Exchange and using event sinks. However, what I want to do may be a little different. I want to be able to take any spam that our Linux box running SA tags as spam (either by header or preferably subject) that gets forwarded to our Exchange 2003 server be

RE: duplicate emails

2006-09-28 Thread Steve Ingraham
Matt Kettler wrote: First, I'd have Jake try his telnet again, but this time use port 25 to connect to: (note the extra 25 on the end) telnet 204.87.111.225 25 *I* can do this just fine. I get back: 220 dellapp02.occa.state.ok.us ESMTP Jake should to. If he can't, the problem isn't in your

Re: Move to Junk Email

2006-09-28 Thread Theo Van Dinter
On Thu, Sep 28, 2006 at 09:43:22AM -0400, Shue, Daniel G. wrote: this with event sink, or do I need to take my question to an Exchange newsgroup? I would highly recommend that since you'll be more likely to get an answer. 1) It's not a question about SpamAssassin, 2) the super vast majority of

Re: really slow spamd scan

2006-09-28 Thread John D. Hardin
On Thu, 28 Sep 2006, Deephay wrote: On 9/28/06, Olivier Nicole [EMAIL PROTECTED] wrote: I am quite new to SA (a week of SA life), and the SA is working, the thing is, SA is incredibly slow on my server (2.8GHZ CPU + 2GB Memory + Qmail + Qmail-scanner). Here's a typical scan log:

Re: really slow spamd scan

2006-09-28 Thread Justin Mason
John D. Hardin writes: On Thu, 28 Sep 2006, Deephay wrote: On 9/28/06, Olivier Nicole [EMAIL PROTECTED] wrote: I am quite new to SA (a week of SA life), and the SA is working, the thing is, SA is incredibly slow on my server (2.8GHZ CPU + 2GB Memory + Qmail + Qmail-scanner). Here's a

Re: Non-blocklisted embedded URLs are getting hits on URIBL_AB_SURBL and URIBL_PH_SURBL in SpamAssassin 3.1.5

2006-09-28 Thread Donald Craig
And Theo Van Dinter pointed out: You're not by chance using the opendns.{com,org} folks for DNS, are you? Of course. I'm an idiot. I switched to OpenDNS a couple of weeks back. Time to return from whence I came. Thank you, Don Craig

RE: sa-learn and Caught spams

2006-09-28 Thread Bowie Bailey
Mike Woods wrote: Why not simply turn off autolearning? Then you can feed everything to sa-learn and not worry about it. Feeding everything through sa-learn again and again would take huge amounts of time, if i take the spam folders of me and one of the directors there are over 100,000

RE: really slow spamd scan

2006-09-28 Thread Sietse van Zanen
DNS time-outs are usually 10 seconds. 14-10 = 4, which is normal. I would check if your DNS tests run smoothly and do not time out somewhere. -Sietse From: Justin MasonSent: Thu 28-Sep-06 17:00To: John D. HardinCc: Deephay; Olivier Nicole; users@spamassassin.apache.orgSubject: Re: really

Re: sa-learn and Caught spams

2006-09-28 Thread Mike Woods
Bowie Bailey wrote: Why would you feed things through again and again? My point was that if you turn off auto-learning, you have complete control over what is learned. I wouldn't, but when you said Then you can feed everything to sa-learn and not worry about it I assumed that's what you

RE: sa-learn and Caught spams

2006-09-28 Thread Bowie Bailey
Mike Woods wrote: Bowie Bailey wrote: You don't have to figure out what has and has not already been learned. Just filter everything into directories for ham and spam learning and feed the entire directory to sa-learn. Once you have learned the messages, you can either delete them,

Re: duplicate emails

2006-09-28 Thread François Rousseau
I have alreay have a similar problem but with another mail server (ModusMail).It's not exactly the same problem and I'm not sure if that will help you.The user start downloading the email and the connection reset so the client have to redownload from the start... The email server only note the

RE: [qmailtoaster] duplicate emails

2006-09-28 Thread Steve Ingraham
Jake Vickers wrote: Steve, in looking at what I was doing late last night, I did not specify the port for the telnet connection. It was my outbound firewall that was causing the no route to host. Apologize for this. If email is working now, keep an eye on it. Are all of your clients

Re: duplicate emails

2006-09-28 Thread Mark Adams
This morning I am receiving emails but not sure everything is normal yet. My belief is that there are multiple problems with our domain that is causing my email problems. I would more than welcome any and all assistance. Thank you. What is your exchange server hosting? pop3? I have

RE: duplicate emails

2006-09-28 Thread Steve Ingraham
Mark Adams wrote: What is your exchange server hosting? pop3? I have noted problems before with clients recieving duplicate emails when connections timeout and the server does not know how far the client application has gone through the download of the mailbox - causing it to start downloading

local.cf auto learn configs and defaults?

2006-09-28 Thread Email Lists
I placed with some rules some time back because I didn't like to see list emails from this one person with very poor judgement and taste in his signature lines decisions... Looked like this and I added them to my local.cf # header LOCAL_DEMONSTRATION_ALL ALL =~ /thatjerksdomsin\.com/i

RE: local.cf auto learn configs and defaults?

2006-09-28 Thread Email Lists
- I placed with some rules some time back because I didn't like to see list - emails from this one person with very poor judgement and taste in his - signature lines decisions... - - Looked like this and I added them to my local.cf - - # -header LOCAL_DEMONSTRATION_ALL ALL =~

update rules

2006-09-28 Thread Benjamin Adams
I just install a new version of spamassassin. What do I need to do, so it learns everything?

RE: update rules

2006-09-28 Thread Bret Miller
I just install a new version of spamassassin. What do I need to do, so it learns everything? You may wish to run sa-update: Or install additional add-on rules: http://wiki.apache.org/spamassassin/CustomRulesets Or run sa-learn against a recent set of ham (non-spam) and spam messages. The

Re: local.cf auto learn configs and defaults?

2006-09-28 Thread Daniel T. Staal
On Thu, September 28, 2006 1:08 pm, Email Lists said: # Use Bayesian classifier (default: 1) # # use_bayes 1 # Bayesian classifier auto-learning (default: 1) # # bayes_auto_learn 1 Please notice that they are commented out and have never been put in service. Since those are the

no tokens ? How can that be ?

2006-09-28 Thread Michael Grey
I came across a situation that seems non-intuitive; Two emails this am were spam, but hit BAYES_00. So they were (presumably) learned as Ham somewhere along the way. So far so good Doing sa-learn forget ./message.txt gets me : Forgot tokens 0 from message(s) (1 message(s)

RE: no tokens ? How can that be ?

2006-09-28 Thread Bret Miller
I came across a situation that seems non-intuitive; Two emails this am were spam, but hit BAYES_00. So they were (presumably) learned as Ham somewhere along the way. Not a valid presumption. The tokens may have been learned as ham from other messages, but there is no implication that this

Re: Earthlink emails

2006-09-28 Thread Loren Wilton
Apparently they have removed SPF records after publishing them once. Thats a stupid idea IMHO. Today I am forced to TEMP FAIL earthlink ids whenever there is a spam attack on my servers SPF can be a pain for a number of reasons that have been discussed endlessly. I suspect Dirtlink found them

Re: sa-learn and Caught spams

2006-09-28 Thread Kelson
Daniel Staal wrote: Depends on the setup. For instance, given the explanations above, I'll start a system to automatically learn from my 'checkspam' folder, but not my 'highspam' folder. I have procmail automatically sort my spam by score, so I can pay extra attention to low-scoring spam.

Re: duplicate emails

2006-09-28 Thread Loren Wilton
I did notice one possible problem in that debug output. There was an 'inappropriate ioctl for device' message in the whitelist stuff near the end. This is something that has been a problem for other and has been discussed before, but I don't recall what the usual fix is to solve this

Re: local.cf auto learn configs and defaults?

2006-09-28 Thread Loren Wilton
After awhile I removed all of it and restarted everything yet the test domain I did this with at first is still getting really high spam scores and is causing me a problem cause it is a secondary mail account live domain etc. Its probably an AWL score, but without showing us a list of the

RE: local.cf auto learn configs and defaults?

2006-09-28 Thread Email Lists
- - Its probably an AWL score, but without showing us a list of the tests hit - on - one of these emails all we can do is throw straws in the air and guess. - - Loren - Ok, a box of straws will be on the way immediately... Any special colors? ;- I appreciate your time and that of

Re: Setting up DKIM and DomainKeys mail signing and verification

2006-09-28 Thread Noel Jones
On 9/28/06, Henrik Ostergaard [EMAIL PROTECTED] wrote: My usesrs submit their messages for relaying on port 25 like normal incoming messages - meaning that they will be verified before they are signed, The same dk-filter command usually provides both signing and verification, deciding which to

RE: local.cf auto learn configs and defaults?

2006-09-28 Thread Bowie Bailey
Email Lists wrote: Its probably an AWL score, but without showing us a list of the tests hit on one of these emails all we can do is throw straws in the air and guess. Loren Ok, a box of straws will be on the way immediately... Any special colors? ;- I appreciate

Re: Setting up DKIM and DomainKeys mail signing and verification

2006-09-28 Thread Henrik Ostergaard
Noel Jones wrote: # dk-filter -H -S mailgate -M {auth_author} -o Received -s /var/db/certificates/domainkey.private -d example.com -i /var/db/domainkey.clients -u milter -l -p inet:[EMAIL PROTECTED] and the /var/db/domainkey.clients file is a list of networks that should be signed, in

Re: Setting up DKIM and DomainKeys mail signing and verification

2006-09-28 Thread Noel Jones
On 9/28/06, Henrik Ostergaard [EMAIL PROTECTED] wrote: This sounds promissing! But I have distributed, moving users and therefore uses pop-before-smtp for authentication, which means that my IP list is in a hash table, which is not in CIDR format. :-( Your best choice is to set up SASL

RE: duplicate emails

2006-09-28 Thread Steve Ingraham
Loren Wilton wrote: I did notice one possible problem in that debug output. There was an 'inappropriate ioctl for device' message in the whitelist stuff near the end. This is something that has been a problem for other and has been discussed before, but I don't recall what the usual fix is to

RE: local.cf auto learn configs and defaults?

2006-09-28 Thread Email Lists
- - You can clear the AWL for a sender like this: - - spamassassin --remove-addr-from-whitelist [EMAIL PROTECTED] - - ([EMAIL PROTECTED] is the sender) - - Make sure you do this as the user who is having the problem. - - Thanks and kind regards - - If this doesn't help, post the headers

Re: Setting up DKIM and DomainKeys mail signing and verification

2006-09-28 Thread Mark Martinec
Henrik, I do however have a small problem: My usesrs submit their messages for relaying on port 25 like normal incoming messages - meaning that they will be verified before they are signed, causing the verification to fail. No, if you follow my setup. Mail from mynetworks and from

Re: Earthlink emails

2006-09-28 Thread jdow
From: Ramprasad [EMAIL PROTECTED] On Tue, 2006-09-26 at 21:28 -0700, jdow wrote: Before you blame Earthlink note that it has NOT gone through Earthlink servers. relay2.corp.good-sam.com is the receiving email server. It's a forged email, at a guess. (It also has mangled headers. Newlines are