Re: whois plugin .. where to get it

2008-01-25 Thread Jeff Chan
Quoting Matt Kettler <[EMAIL PROTECTED]>: Matt Kettler wrote: Giampaolo Tomassoni wrote: It doesn't use whois *instead of* dns. It uses both and attempts even to detect any discrepancy between their responses. Both types of queries can cause problems. How are these going to be different??

RE: whois plugin .. where to get it

2008-01-25 Thread Giampaolo Tomassoni
> -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 2:21 AM > > Matt Kettler wrote: > > Giampaolo Tomassoni wrote: > >> > >> It doesn't use whois *instead of* dns. It uses both and attempts > even to > >> detect any discrepancy between their

RE: whois plugin .. where to get it

2008-01-25 Thread Giampaolo Tomassoni
> -Original Message- > From: Jeff Chan [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 9:37 AM > > Quoting Matt Kettler <[EMAIL PROTECTED]>: > > > Matt Kettler wrote: > >> Giampaolo Tomassoni wrote: > >>> > >>> It doesn't use whois *instead of* dns. It uses both and attempts >

Re: whois plugin .. where to get it

2008-01-25 Thread Justin Mason
> Giampaolo Tomassoni wrote: > > Well, I use and like URIBL_SBL, but please note that a centralized solution > > may easily be "fooled" the other way around, by giving it RRs which are not > > the ones most people will see and will query for through the URIBL_SBL > > itself. In order to do this sp

RE: whois plugin .. where to get it

2008-01-25 Thread Giampaolo Tomassoni
> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 11:25 AM > > > > Giampaolo Tomassoni wrote: > > > Well, I use and like URIBL_SBL, but please note that a centralized > solution > > > may easily be "fooled" the other way around, by g

No Bayes Headers (no errors in debug/logs)

2008-01-25 Thread Mitchell Hudson
Hello there, I have spamassassin loaded and is running pretty well, it's supposed to be using bayes and I can't find any errors that would tell me why it's not, but it's not. When I do a debug log there are no db connection errors, in fact it's auto-learning just fine. I've put in a few thousa

Gateway_antispam

2008-01-25 Thread Pardeep Sharma
Hello sir , Is it possible to configure spamassassin at the gateway machine without using any MTA or mail server to protect spam mail for internal mailserver -- With warm Regards:--> Pardeep Sharma

Re: Enable Spamcop only

2008-01-25 Thread Mofo_Jones
One more question. This site has multiple domains that it does a MX backup for and there are a few domains that I do not want SA to scan and add any header info. Can I exclude just those domains? Mofo_Jones wrote: > > Thank you John, you have benn a big help. I thing I have it working now. >

Re: Increase on Spambots?

2008-01-25 Thread Anthony Peacock
Hi, Marc Perkel wrote: I'm wondering if anyone is noticing an increase in the number of virus infected computers sending spam? Last month my hostkarma blacklist had about 700,000 IPs of infected computers. Today it's 1,200,000. I do have some new customers who have a lot of spam. But just wond

Re: unsubscribe

2008-01-25 Thread Matt Kettler
Post to the unsubscribe address, not the list. See the headers of any message: List-Unsubscribe: Andrew Xiang wrote:

unsubscribe

2008-01-25 Thread Andrew Xiang

RE: whois plugin .. where to get it

2008-01-25 Thread Jeff Chan
Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: From: Jeff Chan [mailto:[EMAIL PROTECTED] Yes, delegation is the other, more usual, way that the nameserver in the whois and TLD root server may differ. Some spammers do make use of a lot of delegation, more than usual and sometimes in long ch

Re: Increase on Spambots?

2008-01-25 Thread bgodette
Marc Perkel wrote: > I'm wondering if anyone is noticing an increase in the number of virus > infected computers sending spam? Last month my hostkarma blacklist had > about 700,000 IPs of infected computers. Today it's 1,200,000. I do have > some new customers who have a lot of spam. But just wo

Re: Increase on Spambots?

2008-01-25 Thread Joseph Brennan
--On Friday, January 25, 2008 8:05 -0800 Marc Perkel <[EMAIL PROTECTED]> wrote: I'm wondering if anyone is noticing an increase in the number of virus infected computers sending spam? Last month my hostkarma blacklist had about 700,000 IPs of infected computers. Today it's 1,200,000. I do ha

RE: whois plugin .. where to get it

2008-01-25 Thread Giampaolo Tomassoni
> -Original Message- > From: Jeff Chan [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 5:51 PM > > Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: > > > Please note that one generally can't issue a DNS request to a > specific > > server from SA, since its resolver engine only

Re: sa-update error wrong gpg key...

2008-01-25 Thread Justin Mason
Kevin -- I have bad news. ;) that's not coming from our channels, it's the sare.sa-update.dostech.net channel I'd guess. --j. Kevin W. Gagel writes: > - Original Message - > >hi Kevin -- what's the channel and command line? > > Hi Justin, > > Thanks for looking into this. I've copied

Re: Increase on Spambots?

2008-01-25 Thread Marc Perkel
Anthony Peacock wrote: Hi, Marc Perkel wrote: I'm wondering if anyone is noticing an increase in the number of virus infected computers sending spam? Last month my hostkarma blacklist had about 700,000 IPs of infected computers. Today it's 1,200,000. I do have some new customers who have a

Re: Enable Spamcop only

2008-01-25 Thread Mofo_Jones
Jon, What do I need to have in the spamfilter.sh file? Jan P. Kessler wrote: > > Mofo_Jones schrieb: >> Just Postfix. In postfix and I believe Sendmail. >> >> John D. Hardin wrote: >> >>> On Fri, 25 Jan 2008, Mofo_Jones wrote: >>> >>> One more question. This site has multiple domai

Increase on Spambots?

2008-01-25 Thread Marc Perkel
I'm wondering if anyone is noticing an increase in the number of virus infected computers sending spam? Last month my hostkarma blacklist had about 700,000 IPs of infected computers. Today it's 1,200,000. I do have some new customers who have a lot of spam. But just wondering where the jump cam

Re: Redo: Upgrade 3.2.3->3.2.4 breaks rule override

2008-01-25 Thread Kris Deugau
Karl Boyken wrote: We're running SpamAssassin from MIMEDefang 2.63 on RedHat Linux Enterprise Server 5. With previous versions, I'd hacked our site-wide configuration file to use a local Spamhaus mirror. The file I hacked was the MIMEDefang config file sa-mimedefang.cf, which is equivalent to

Re: whois plugin .. where to get it

2008-01-25 Thread Matt Kettler
Jeff Chan wrote: Quoting Matt Kettler <[EMAIL PROTECTED]>: Matt Kettler wrote: Giampaolo Tomassoni wrote: It doesn't use whois *instead of* dns. It uses both and attempts even to detect any discrepancy between their responses. Both types of queries can cause problems. How are these goin

Re: Gateway_antispam

2008-01-25 Thread Matt Kettler
Pardeep Sharma wrote: Hello sir , Is it possible to configure spamassassin at the gateway machine without using any MTA or mail server to protect spam mail for internal mailserver Do you mean like a transparent SMTP proxy? That's ugly business, but if you really want to go t

Re: Increase on Spambots?

2008-01-25 Thread Kevin W. Gagel
- Original Message - >--On Friday, January 25, 2008 8:05 -0800 Marc Perkel <[EMAIL PROTECTED]> >wrote: > >> I'm wondering if anyone is noticing an increase in the number of virus >> infected computers sending spam? Last month my hostkarma blacklist had >> about 700,000 IPs of infected comp

Re: whois plugin .. where to get it

2008-01-25 Thread Matt Kettler
Giampaolo Tomassoni wrote: -Original Message- From: Matt Kettler [mailto:[EMAIL PROTECTED] Sent: Friday, January 25, 2008 2:21 AM Ahh, I see what you're doing, you're looking up the SOA. Which is basically forcing the query down to the spammer's DNS server, and opening yourself up

Amavisd and Spamassassin hang

2008-01-25 Thread Paolo De Marco
Hi, I have a linux server with the latest version of amavisd and SpamAssassin. Sometimes some mail cause amavisd child to hang. After that the server stop delivering mail to recipient and increasing load of the server, and i must kill amavisd child. I have set the debug level og amavisd to 5, an

Re: sa-update error wrong gpg key...

2008-01-25 Thread Daryl C. W. O'Shea
Justin Mason wrote: > Kevin -- I have bad news. ;) that's not coming from our channels, > it's the sare.sa-update.dostech.net channel I'd guess. Hey, why's that bad news! :) > Kevin W. Gagel writes: >> Thanks for looking into this. I've copied and pasted everything below so >> that you have a c

RE: whois plugin .. where to get it

2008-01-25 Thread Jeff Chan
Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: Please note that one generally can't issue a DNS request to a specific server from SA, since its resolver engine only uses the globally-defined DNS server(s). Thereby, in the common case I should get the NSes published by root servers, which shoul

Redo: Upgrade 3.2.3->3.2.4 breaks rule override

2008-01-25 Thread Karl Boyken
Let me try this again: We're running SpamAssassin from MIMEDefang 2.63 on RedHat Linux Enterprise Server 5. With previous versions, I'd hacked our site-wide configuration file to use a local Spamhaus mirror. The file I hacked was the MIMEDefang config file sa-mimedefang.cf, which is equivale

Re: Enable Spamcop only

2008-01-25 Thread Mofo_Jones
Thank you John, you have benn a big help. I thing I have it working now. John D. Hardin wrote: > > On Thu, 24 Jan 2008, Mofo_Jones wrote: > >> > spamassassin -D > > >> > Where message.txt is containing the message to test. >> >> Sorry, What I meant was how do I send a email to the SA server >>

Re: Enable Spamcop only

2008-01-25 Thread John D. Hardin
On Fri, 25 Jan 2008, Mofo_Jones wrote: > One more question. This site has multiple domains that it does a > MX backup for and there are a few domains that I do not want SA to > scan and add any header info. Can I exclude just those domains? What is passing emails to SA? A milter? Procmail? Whate

Re: Enable Spamcop only

2008-01-25 Thread John D. Hardin
On Fri, 25 Jan 2008, Mofo_Jones wrote: > John D. Hardin wrote: > > > > On Fri, 25 Jan 2008, Mofo_Jones wrote: > > > >> One more question. This site has multiple domains that it does a > >> MX backup for and there are a few domains that I do not want SA to > >> scan and add any header info. Can I

Re: Enable Spamcop only

2008-01-25 Thread Mofo_Jones
Just Postfix. In postfix and I believe Sendmail. John D. Hardin wrote: > > On Fri, 25 Jan 2008, Mofo_Jones wrote: > >> One more question. This site has multiple domains that it does a >> MX backup for and there are a few domains that I do not want SA to >> scan and add any header info. Can I e

Re: Enable Spamcop only

2008-01-25 Thread Jan P. Kessler
Mofo_Jones schrieb: Just Postfix. In postfix and I believe Sendmail. John D. Hardin wrote: On Fri, 25 Jan 2008, Mofo_Jones wrote: One more question. This site has multiple domains that it does a MX backup for and there are a few domains that I do not want SA to scan and add any heade

RE: whois plugin .. where to get it

2008-01-25 Thread Giampaolo Tomassoni
> -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Friday, January 25, 2008 3:07 PM > > Jeff Chan wrote: > > Quoting Matt Kettler <[EMAIL PROTECTED]>: > > > >> Matt Kettler wrote: > >>> Giampaolo Tomassoni wrote: > > It doesn't use whois *instead of* dns.

Latest sa-update

2008-01-25 Thread Dag Ringdal
I run Kmail and uses Spamassasin. I have read that you should run the following command: sa-update && service spamassassin restart I have done this several times, but I can't verify if it's the right way to do the update, and I haven't found a way to check if I have got the latest rules. Can

Re: Latest sa-update

2008-01-25 Thread Theo Van Dinter
On Fri, Jan 25, 2008 at 09:59:47PM +0100, Dag Ringdal wrote: > sa-update && service spamassassin restart > > I have done this several times, but I can't verify if it's the right way to > do > the update, and I haven't found a way to check if I have got the latest > rules. > > Can anybody give

Re: Latest sa-update

2008-01-25 Thread Dag Ringdal
On Friday 25 January 2008 22:09:12 Theo Van Dinter wrote: > On Fri, Jan 25, 2008 at 09:59:47PM +0100, Dag Ringdal wrote: > > sa-update && service spamassassin restart > > > > I have done this several times, but I can't verify if it's the right way > > to do the update, and I haven't found a way to

Re: Latest sa-update

2008-01-25 Thread Theo Van Dinter
On Fri, Jan 25, 2008 at 10:49:22PM +0100, Dag Ringdal wrote: > dbg: channel: current version is 611820, new version is 611820, skipping > channel > > Does this mean I have the lastest version of Spamassassin? Yes. Current == New (ie: published). -- Randomly Selected Tagline: "Sex is like air;