Re: Should I upgrade to 3.1.6?

2006-10-14 Thread jdow
3.1.7. Skip 6. {^_^} - Original Message - From: "Steve Lake" <[EMAIL PROTECTED]> To: Sent: Saturday, October 14, 2006 20:14 Subject: Should I upgrade to 3.1.6? Just looked over the bug fix list for 3.1.6 and it doesn't seem like anything *major* that would suggest that I shou

Re: Increase in Spam

2006-10-14 Thread jdow
It's a few lines of perl. Download it. Put the pieces in the appropriate places. Go. (The direct answer is "of course not." It's still beta and nobody has done rpms, debs, or ports of it. There might now be a zip or tar file of it.) {^_-} - Original Message - From: "Steve Lake" <[EMAIL

RE: Should I upgrade to 3.1.6?

2006-10-14 Thread R Lists06
> > Just looked over the bug fix list for 3.1.6 and it doesn't seem > like anything *major* that would suggest that I should make the leap. I'm > right now running 3.1.5 on my box. Is there other improvements, such as > rules and the like, that would make this a preferable upgrade? Or

Should I upgrade to 3.1.6?

2006-10-14 Thread Steve Lake
Just looked over the bug fix list for 3.1.6 and it doesn't seem like anything *major* that would suggest that I should make the leap. I'm right now running 3.1.5 on my box. Is there other improvements, such as rules and the like, that would make this a preferable upgrade? Or should I

Re: Increase in Spam

2006-10-14 Thread Steve Lake
Oh, this sounds spectacular. One question. Is there a port on Freebsd for this? I don't see one offhand. If there is, then that would assume that all the other necessary ports are present as well. If not, it'll be a royal b trying to get the nix versions installed instead if no

Re: senders domain has MX or not?

2006-10-14 Thread jdow
From: "Benny Pedersen" <[EMAIL PROTECTED]> On Sat, October 14, 2006 19:52, Michael Scheidell wrote: you could increase the score for DNS_FROM_RFC_BOGUSMX :-) this is just plain easy to reject from postfix cidr: mapping :-) rule of thumps, dont accept mail of you cannot bounce it back Yu

Re: senders domain has MX or not?

2006-10-14 Thread jdow
From: "Benny Pedersen" <[EMAIL PROTECTED]> On Sat, October 14, 2006 14:33, Suhas \(QualiSpace\) wrote: Which rule will help me in checking if senders domain has MX record or not. E.g I am getting email from [EMAIL PROTECTED], then the rule should check whether domain.com has an MX record or not

Re: Which release of spamassassin should I use on a Debian sarge system?

2006-10-14 Thread Gary V
There are a number of options. Volatile and backports are probably the safest. Braver souls can run unstable or testing (if they know how to install it without bringing planet earth along with it). And others may choose to completely remove the Debian package and install it from source or CPAN.

RE: senders domain has MX or not?

2006-10-14 Thread Michael Scheidell
> -Original Message- > From: Benny Pedersen [mailto:[EMAIL PROTECTED] > Sent: Saturday, October 14, 2006 2:18 PM > To: users@spamassassin.apache.org > Subject: RE: senders domain has MX or not? > > > > On Sat, October 14, 2006 19:52, Michael Scheidell wrote: > > you could increase the s

Re: Disable ALL_TRUSTED

2006-10-14 Thread Benny Pedersen
On Sat, October 14, 2006 20:01, Daryl C. W. O'Shea wrote: >> clear_internal_networks >> internal_networks 127.0.0.0/8 >> clear_trusted_networks >> trusted_networks 127.0.0.0/8 >> trusted_networks > This is incorrect. i forgot why i did it :/ > internal_networks *must* include the IPs of your ow

Re: Disable ALL_TRUSTED

2006-10-14 Thread Daryl C. W. O'Shea
Benny Pedersen wrote: On Sat, October 14, 2006 12:18, Suhas \(QualiSpace\) wrote: How to disable ALL_TRUSTED ? no local.cf: clear_internal_networks internal_networks 127.0.0.0/8 clear_trusted_networks trusted_networks 127.0.0.0/8 trusted_networks This is incorrect. internal_networks *mu

RE: senders domain has MX or not?

2006-10-14 Thread Benny Pedersen
On Sat, October 14, 2006 19:52, Michael Scheidell wrote: > you could increase the score for > DNS_FROM_RFC_BOGUSMX :-) this is just plain easy to reject from postfix cidr: mapping :-) rule of thumps, dont accept mail of you cannot bounce it back -- "This message was sent using 100% recycled sp

Re: Which release of spamassassin should I use on a Debian sarge system?

2006-10-14 Thread Peter Teunissen
On 14-okt-2006, at 19:33, Bob Proulx wrote: Chris Purves wrote: You can also get newer versions of spamassassin from debian-volatile, which maintains packages that update often (such as spamassassin, antivirus, etc). You would need to add the following to your sources.list (although y

RE: senders domain has MX or not?

2006-10-14 Thread Michael Scheidell
Title: Message you could increase the score for DNS_FROM_RFC_BOGUSMX :-)  

Re: Which release of spamassassin should I use on a Debian sarge system?

2006-10-14 Thread Bob Proulx
Chris Purves wrote: > You can also get newer versions of spamassassin from > debian-volatile, which maintains packages that update often (such as > spamassassin, antivirus, etc). You would need to add the following > to your sources.list (although you'll probably want a closer mirror > http://www.

Re: Which release of spamassassin should I use on a Debian sarge system?

2006-10-14 Thread Chris Purves
On October 13, 2006 06:42 am, Bart Veltman wrote: > Currently I am using spamassassin version 3.0.3 on a Debian 3.1 sarge > (stable release) linux system. According to Debian this version is > stable but is more than a year old. Which version should I use, or must > I use, to maintain a stable envi

Re: senders domain has MX or not?

2006-10-14 Thread Spamassassin List
Which rule will help me in checking if senders domain has MX record or not. E.g I am getting email from [EMAIL PROTECTED], then the rule should check whether domain.com has an MX record or not. I think this should be a question on your mail daemon. Not spamassassin.

Re: senders domain has MX or not?

2006-10-14 Thread Benny Pedersen
On Sat, October 14, 2006 14:33, Suhas \(QualiSpace\) wrote: > Which rule will help me in checking if senders domain has MX > record or not. E.g I am getting email from [EMAIL PROTECTED], then the rule > should check whether domain.com has an MX record or not. its not a fail if a domain have no mx

senders domain has MX or not?

2006-10-14 Thread Suhas \(QualiSpace\)
Hello,     Which rule will help me in checking if senders domain has MX record or not. E.g I am getting email from [EMAIL PROTECTED], then the rule should check whether domain.com has an MX record or not.     Warm Regards, Suhas System Administrator QualiSpace - A QuantumPa

Re: Disable ALL_TRUSTED

2006-10-14 Thread Benny Pedersen
On Sat, October 14, 2006 12:18, Suhas \(QualiSpace\) wrote: > How to disable ALL_TRUSTED ? no local.cf: clear_internal_networks internal_networks 127.0.0.0/8 clear_trusted_networks trusted_networks 127.0.0.0/8 trusted_networks # and below here i add all trusted forwarding ips trusted_network

Re: Disable ALL_TRUSTED

2006-10-14 Thread jdow
You don't. Look it up on the wiki pages. If you do not set up SpamAssassin trust relationships properly then none of the DNS rules will work for you. Note that trust in this sense is NOT, repeat NOT, trust that a given MTA will never deliver spam to you. It IS trust that it will never forge any

Re: Message not flagged as spam

2006-10-14 Thread Benny Pedersen
On Fri, October 13, 2006 10:11, Suhas \(QualiSpace\) wrote: > Can anybody explain me why SA did not flagged this message as spam? > USER_IN_WHITELIST i bet USER_IN_WHITELIST gives -100 with is one of the problems 2 ways of solve it: 1: put a lower score on so the user is still whitelisted but

Disable ALL_TRUSTED

2006-10-14 Thread Suhas \(QualiSpace\)
How to disable ALL_TRUSTED ?   Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise === Tel India: +91 (22) 6792 - 1480 Tel US: +1 (614) 827 - 1224 Fax India: +91 (22) 2530 - 3166 URL: http://www.qualispace.com =

BOGUS_ATTACH_SCAN

2006-10-14 Thread Suhas \(QualiSpace\)
Anyone aware of BOGUS_ATTACH_SCAN , how it helps? From where to get it?   I need a rule which will scan zip attachment and report if it is password protected.   Warm Regards, Suhas System Administrator QualiSpace - A QuantumPages Enterprise === Tel India: +

Re: Concerned with scores for from rfc-ignorant.org

2006-10-14 Thread jdow
From: "Kenneth Porter" <[EMAIL PROTECTED]> --On Friday, October 13, 2006 9:23 AM +0100 Justin Mason <[EMAIL PROTECTED]> wrote: Please bear in mind, also, that there are 5 different rules that use RFCI data, and they have wildly varying accuracies and scores: SPAM%HAM%S/ORANKSC