Re: My Newly Expanded DNS Blacklist - Who wants to try it?

2007-06-16 Thread Marc Perkel
Bart Schaefer wrote: On 6/16/07, Marc Perkel <[EMAIL PROTECTED]> wrote: Using my new ideas here's my raw blacklist file. It has about 80k IP addresses and is updated every 10 minutes. http://iplist.junkemailfilter.com/black.txt Just glancing through the list and reversing an IP address whos

Re: My Newly Expanded DNS Blacklist - Who wants to try it?

2007-06-16 Thread Bart Schaefer
On 6/16/07, Marc Perkel <[EMAIL PROTECTED]> wrote: Using my new ideas here's my raw blacklist file. It has about 80k IP addresses and is updated every 10 minutes. http://iplist.junkemailfilter.com/black.txt Just glancing through the list and reversing an IP address whose first two quads I reco

Re: My Newly Expanded DNS Blacklist - Who wants to try it?

2007-06-16 Thread Marc Perkel
Jari Fredriksson wrote: Marc Perkel wrote: Using my new ideas here's my raw blacklist file. It has about 80k IP addresses and is updated every 10 minutes. http://iplist.junkemailfilter.com/black.txt Here's instructions on how to use it with SpamAssassin and Exim. http://wiki.ctyme.com/in

Re: My Newly Expanded DNS Blacklist - Who wants to try it?

2007-06-16 Thread Jari Fredriksson
Marc Perkel wrote: > Using my new ideas here's my raw blacklist file. It has about 80k IP > addresses and is updated every 10 minutes. > > http://iplist.junkemailfilter.com/black.txt > > Here's instructions on how to use it with SpamAssassin and Exim. > > http://wiki.ctyme.com/index.php/Spam_DNS

Re: Testing Bayes filters

2007-06-16 Thread Lindsay Haisley
On Sun, 2007-06-17 at 01:41 +0200, Alex Woick wrote: > My bayes and awl tables were created according to the manual, but I > added a timestamp column to the awl table and to the bayes_seen table to > be able to expire them by date. I've added these fields, with "default=CURRENT_TIMESTAMP". When

My Newly Expanded DNS Blacklist - Who wants to try it?

2007-06-16 Thread Marc Perkel
Using my new ideas here's my raw blacklist file. It has about 80k IP addresses and is updated every 10 minutes. http://iplist.junkemailfilter.com/black.txt Here's instructions on how to use it with SpamAssassin and Exim. http://wiki.ctyme.com/index.php/Spam_DNS_Lists#Spam_Assassin_Examples I'

Re: Testing Bayes filters

2007-06-16 Thread Alex Woick
I saw a number of posts on this list earlier indicating that Bayesian filter learning and/or application of learned information wasn't working properly if the Bayesian analysis data were stored in a MySQL database What's the status of this bug, if it is one, or if it's a misconfiguration issue,

Re: Turning the Screws

2007-06-16 Thread Lindsay Haisley
On Sat, 2007-06-16 at 15:49 -0700, SM wrote: > Unfortunately, nobody reads that or else we would not be seeing one > week of messages about SARE RBJ failures. Oh well I guess you have to be an old-time UNIX geek to know to look in script files for clues on how to use them. -- Lindsay Hais

Re: Turning the Screws

2007-06-16 Thread SM
At 15:02 16-06-2007, Lindsay Haisley wrote: /var/lib/spamassassin/rules_du_jour has copious comments with usage instructions and commented settable options in the script itself. Take a look at it with your favorite text editor. Unfortunately, nobody reads that or else we would not be seeing on

RE: Innovative Host Blacklisting Idea

2007-06-16 Thread Jerry Durand
At 12:42 PM 6/15/2007, Brent Kennedy wrote: How did you setup your spamtrap address with postfix.. Do you have them delivered after they are scanned by spamassassin or do you scan them and send them on from there? If you bypass SA, how are you doing that? For the spamtraps, I have an address h

Re: Turning the Screws

2007-06-16 Thread Lindsay Haisley
Rules Emporium has been having some issues with a DDoS attack and made some configuration changes pursuant to overcoming this and probably balancing their load. Looks like they had a redirect and curl doesn't understand a http-equiv="refresh" or else the HTML was incorrect and curl just barfed on

Re: Turning the Screws

2007-06-16 Thread Michael B Allen
On Sat, 16 Jun 2007 17:02:29 -0500 Lindsay Haisley <[EMAIL PROTECTED]> wrote: > On Sat, 2007-06-16 at 17:53 -0400, Michael B Allen wrote: > > When I run ./rules_du_jour I just get a mess of errors about trying > > to write to /etc/spamassassin which does not exist. > > Make /etc/spamassassin a sy

Re: Turning the Screws

2007-06-16 Thread Lindsay Haisley
On Sat, 2007-06-16 at 17:53 -0400, Michael B Allen wrote: > When I run ./rules_du_jour I just get a mess of errors about trying > to write to /etc/spamassassin which does not exist. Make /etc/spamassassin a symlink to /etc/mail/spamassassin. This is how Gentoo Linux has it set up. > Apparently

Re: Turning the Screws

2007-06-16 Thread Michael B Allen
On Sat, 16 Jun 2007 16:25:48 -0500 Daniel J McDonald <[EMAIL PROTECTED]> wrote: > On Sat, 2007-06-16 at 17:01 -0400, Michael B Allen wrote: > > Hi, > > > > I just setup a new server with vanilla SA > > What version? 3.1.9 on CentOS 5 > > on CentOS 5 and a lot of obvious > > drug/stock/foreign

Re: Turning the Screws

2007-06-16 Thread Daniel J McDonald
On Sat, 2007-06-16 at 17:01 -0400, Michael B Allen wrote: > Hi, > > I just setup a new server with vanilla SA What version? > on CentOS 5 and a lot of obvious > drug/stock/foreign stuff is getting through. I have verified that DNSBL > is being used. In general, I would like to know what the pre

Turning the Screws

2007-06-16 Thread Michael B Allen
Hi, I just setup a new server with vanilla SA on CentOS 5 and a lot of obvious drug/stock/foreign stuff is getting through. I have verified that DNSBL is being used. In general, I would like to know what the prevailing wisdom is as to increasing the agressiveness of my filter. Are there certain p

Testing Bayes filters

2007-06-16 Thread Lindsay Haisley
I saw a number of posts on this list earlier indicating that Bayesian filter learning and/or application of learned information wasn't working properly if the Bayesian analysis data were stored in a MySQL database, as is the case on my server at fmp.com. I have a couple of questions. What's the s

Re: Why doesn't Spamassassin bounce spam?

2007-06-16 Thread Matt
> I agree, bouncing that way is bad. Something I have thought about > lately is rejecting. We have run ClamAV on Exim for years now. It > scans messages at MTA time and rejects any that contain viruses. Does > not 'really' bounce them just refuses them. There is talk of a mod to > Exim to do

Re: Why doesn't Spamassassin bounce spam?

2007-06-16 Thread John Rudd
Tom Allison wrote: John Rudd wrote: Matt wrote: ExiScan has been part of exim for quite a while now. We reject spam at SMTP with exim and SA when it scores above 15. We have not, as of yet, had a FP near that high. The spams are logged in such a way it makes it easy to create a report includ

Re: Why doesn't Spamassassin bounce spam?

2007-06-16 Thread John Thompson
On 2007-06-15, WLamotte <[EMAIL PROTECTED]> wrote: > Sorry if this is an obvious question but why isn't there an option for > Spamassassin to bounce spam? Sure it does a good job at filtering spam but I > don't want it from my web(mail)server to my inbox. I want my web- or > mailserver to bounce s

Re: Why doesn't Spamassassin bounce spam?

2007-06-16 Thread John Thompson
On 2007-06-15, Matt <[EMAIL PROTECTED]> wrote: >> Bounce spam? Are you nuts? This is as worse as the spammers sending them. >> Please dont even consider this. Any idea where all these 'bounces' end up? >> Innocent victems... > I agree, bouncing that way is bad. Something I have thought about > l

Re: Why doesn't Spamassassin bounce spam?

2007-06-16 Thread Magnus Holmgren
Matt wrote: > I agree, bouncing that way is bad. Something I have thought about > lately is rejecting. We have run ClamAV on Exim for years now. It > scans messages at MTA time and rejects any that contain viruses. Does > not 'really' bounce them just refuses them. There is talk of a mod to >

Re: Why doesn't Spamassassin bounce spam?

2007-06-16 Thread Tom Allison
John Rudd wrote: Matt wrote: ExiScan has been part of exim for quite a while now. We reject spam at SMTP with exim and SA when it scores above 15. We have not, as of yet, had a FP near that high. The spams are logged in such a way it makes it easy to create a report including the SA report, t

Re: Why doesn't Spamassassin bounce spam?

2007-06-16 Thread John Rudd
Matt wrote: ExiScan has been part of exim for quite a while now. We reject spam at SMTP with exim and SA when it scores above 15. We have not, as of yet, had a FP near that high. The spams are logged in such a way it makes it easy to create a report including the SA report, the from, to, subjec

RE: Problems with Received: header checks and ALL_TRUSTED rule...

2007-06-16 Thread Anthony Kamau
Daryl, You'll be glad to know that I'm now rejecting at RCPT instead of blindly forwarding to the exchange box! We don't have numerous updates in active directory so for now I'm doing a manual export to the sendmail box. Cheers, AK. -Original Message- From: Daryl C. W. O'Shea [mailto:[

RE: RDJ AUTOBAN

2007-06-16 Thread Ed Kasky
That did the trick. Thanks!!! Ed . . . . . . . . . . . . . . . Randomly generated quote: All the world's a stage and most of us are desperately unrehearsed. -Sean O'Casey, playwright (1880-1964) On Sat, 16 Jun 2007, Simon Standley wrote: I had this problem too, and I run RDJ "every so often

Re: Why doesn't Spamassassin bounce spam?

2007-06-16 Thread Matt
ExiScan has been part of exim for quite a while now. We reject spam at SMTP with exim and SA when it scores above 15. We have not, as of yet, had a FP near that high. The spams are logged in such a way it makes it easy to create a report including the SA report, the from, to, subject, etc and revi

RE: RDJ AUTOBAN

2007-06-16 Thread Simon Standley
I had this problem too, and I run RDJ "every so often, by hand". I figured problem was maybe something to do with recent DDOS problems they were having. I fixed it by deleting all .cf files in /etc/mail/spamassassin/RulesDuJour and running RDJ once again. Hope this helps Si. -Original M

Re: Installing 3.2.1 fails

2007-06-16 Thread Jari Fredriksson
MIKE YRABEDRA wrote: > Hello, > > I just tried to install 3.2.1 on Mac OS X Panther, but it had issues > building. Has anyone else had a simialr issue(s)? > > BTW, I already have have 3.1.8 running just fine. > > --- > > Failed TestStat Wstat Total Fail Failed List of > Failed

Re: RDJ AUTOBAN

2007-06-16 Thread Michele Neylon :: Blacknight
Ed Kasky wrote: Good morning: I currently have a cron set to run RDJ once a week but am getting AUTOBAN messages since the DOS on rulesemporium. Anyone know how I can fix this? [5633] warn: config: failed to parse line, skipping, in "/etc/mail/spamassassin/70_sare_evilnum1.cf": AUTOBAN: Ov

RDJ AUTOBAN

2007-06-16 Thread Ed Kasky
Good morning: I currently have a cron set to run RDJ once a week but am getting AUTOBAN messages since the DOS on rulesemporium. Anyone know how I can fix this? [5633] warn: config: failed to parse line, skipping, in "/etc/mail/spamassassin/70_sare_evilnum1.cf": AUTOBAN: Over 500 *.cf requ

Installing 3.2.1 fails

2007-06-16 Thread MIKE YRABEDRA
Hello, I just tried to install 3.2.1 on Mac OS X Panther, but it had issues building. Has anyone else had a simialr issue(s)? BTW, I already have have 3.1.8 running just fine. --- Failed TestStat Wstat Total Fail Failed List of Failed --