RE: Upgrading

2008-04-15 Thread hiram
Hi Mike, Thanks again for the advice. I've just managed to miss-configure Postfix by restarting SpamAssasin :(( Don't know why is sending spam from my account now, it's like bouncing it with my address as From. Probably will do the Virtual Machine reharsal for the upgrade. Best regards, /Hiram

Re: Returned mail spam

2008-04-15 Thread Matus UHLAR - fantomas
On Thu, April 10, 2008 18:29, Arvid Ephraim Picciani wrote: On Thursday 10 April 2008 17:16:40 mouss wrote: I personally have found that SPF causes more problems than it helps, and for that I do not recommend setting SPF record for general use domains. On 14.04.08 20:03, Benny Pedersen

Re: SPF and forwarding best practice

2008-04-15 Thread Matus UHLAR - fantomas
On 13.04.08 15:45, Moritz Borgmann wrote: [EMAIL PROTECTED] [smtp.X.com] - [EMAIL PROTECTED] [mx.B.com] - [EMAIL PROTECTED] [mx.A.com] mx.B.com is in trusted_networks, all machines at A.com are in internal_networks. always_trust_envelope_sender is enabled since the trusted relays do not

Re: SPF and Hotmail

2008-04-15 Thread Benny Pedersen
On Tue, April 15, 2008 00:35, Michael Hutchinson wrote: Can we do SPF checking for specific domains, or is it once it's on it checks everything type of thing? upgrade to 3.2.4 perldoc Mail::SpamAssassin::Conf see whitelist_auth perldoc Mail::SpamAssassin::Plugin::SPF see more spf options

Re: SPF and forwarding best practice

2008-04-15 Thread Benny Pedersen
On Mon, April 14, 2008 22:13, mouss wrote: 1: make all forwarded ips as trusted and that solves the problem? none of us have seen OP logs OP explictely said this does not and cited a comment in SPF.pm. well i am no perl guru :-) 2: add forwarders to the spf as A:ip this requires the

Filtering out delivery status notifications

2008-04-15 Thread Jarek
Hi all! I've a problem with mass of DSN messages, which are replays to spam sent by spammers with my address. How can I create rule to tag DSN as spam, if it is not the answer to messsage send from my IPs ? best regards JT

Re: Returned mail spam

2008-04-15 Thread Joseph Brennan
Matus UHLAR - fantomas [EMAIL PROTECTED] wrote: no, SPF does not break forwarding. Automatic forwarding without changing envelope from address is broken already SMTP is not Calvin Ball. If you make up your own rules about forwarding please do not be surprised that other people ignore them.

Re: Filtering out delivery status notifications

2008-04-15 Thread Luis HernĂ¡n Otegui
Hi, Jarek 2008/4/15, Jarek [EMAIL PROTECTED]: Hi all! I've a problem with mass of DSN messages, which are replays to spam sent by spammers with my address. How can I create rule to tag DSN as spam, if it is not the answer to messsage send from my IPs ? Boy, backscatter

Re: Filtering out delivery status notifications

2008-04-15 Thread Matus UHLAR - fantomas
On 15.04.08 14:25, Jarek wrote: I've a problem with mass of DSN messages, which are replays to spam sent by spammers with my address. How can I create rule to tag DSN as spam, if it is not the answer to messsage send from my IPs ? http://wiki.apache.org/spamassassin/VBounceRuleset

Re: Returned mail spam

2008-04-15 Thread Matus UHLAR - fantomas
Matus UHLAR - fantomas [EMAIL PROTECTED] wrote: no, SPF does not break forwarding. Automatic forwarding without changing envelope from address is broken already On 15.04.08 09:24, Joseph Brennan wrote: SMTP is not Calvin Ball. If you make up your own rules about forwarding please do not

Writing a rule according to some reverse names.

2008-04-15 Thread Yavuz Maslak
I use spamassassin3.2.x I want spamassassin to give a score according to reverse name of a source ip address. I think of doing for some dynamic ip addresses. How can I do that as a rule ?

Need help with bobax rules

2008-04-15 Thread Jack Pepper
This info popped up on the emerging-Threats list. I have watched our mail servers and have confirmed that it works. The problem is that my attempts to create Spamassin rules for it never fire off. Can I get some tutelage from the list on creating rules for these unique conditions:

Re: Need help with bobax rules

2008-04-15 Thread Jack Pepper
I guess I don't need those rules. I see now that INVALID_MSGID was already catching them. apologies for the noise on the list. jp -- Framework? I don't need no steenking framework! @fferent Security Labs:

Re: Need help with bobax rules

2008-04-15 Thread Justin Mason
Jack Pepper writes: I guess I don't need those rules. I see now that INVALID_MSGID was already catching them. apologies for the noise on the list. Henry Stern has added rules to SpamAssassin 3.3.0 trunk SVN to implement these. maybe he plans to backport them to 3.2.x sa-updates ;) --j.

Re: Returned mail spam

2008-04-15 Thread Joseph Brennan
what own rules? I'm talking that forwarding without changing sender's address is broken already and I described how and why. SPS just highlights this problem and SRS is trying to solve it... I don't see this necessity to change the sender address anywhere in RFC 2821. In fact it

Re: Need help with bobax rules

2008-04-15 Thread Jack Pepper
Quoting Justin Mason [EMAIL PROTECTED]: Jack Pepper writes: I guess I don't need those rules. I see now that INVALID_MSGID was already catching them. apologies for the noise on the list. I found my problem in the faq. I was missing the m on the end ogf the regex: score

Re: Returned mail spam

2008-04-15 Thread Kelson
Joseph Brennan wrote: what own rules? I'm talking that forwarding without changing sender's address is broken already and I described how and why. SPS just highlights this problem and SRS is trying to solve it... I don't see this necessity to change the sender address anywhere in RFC 2821.

Re: Returned mail spam

2008-04-15 Thread Joseph Brennan
I'm sensing a disconnect here. Me too! I don't call something broken if it follows the standard. I'm sure this is getting pointless. I'm done. Joseph Brennan Columbia University Information Technology

sa-learn incapable of handling large amounts of messages?

2008-04-15 Thread Caleb Cushing
I'm trying to run sa-learn --spam /spamdir/* on a directory with 2449 spam messages. But it doesn't seem to work. I'm not sure why. -- Caleb Cushing my blog http://xenoterracide.blogspot.com signature.asc Description: This is a digitally signed message part.

Re: Writing a rule according to some reverse names.

2008-04-15 Thread Matt Kettler
Yavuz Maslak wrote: I use spamassassin3.2.x I want spamassassin to give a score according to reverse name of a source ip address. I think of doing for some dynamic ip addresses. How can I do that as a rule ? You might want to look at how RDNS_DYNAMIC is implemented in 20_dynrdns.cf. That's

Re: sa-learn incapable of handling large amounts of messages?

2008-04-15 Thread D Hill
On Tue, 15 Apr 2008 at 21:53 -0400, [EMAIL PROTECTED] confabulated: I'm trying to run sa-learn --spam /spamdir/* on a directory with 2449 spam messages. But it doesn't seem to work. I'm not sure why. What format are the messages in? mdir? mbox? sa-learn --spam [EMAIL PROTECTED] spam/

Re: sa-learn incapable of handling large amounts of messages?

2008-04-15 Thread Matt Kettler
Caleb Cushing wrote: I'm trying to run sa-learn --spam /spamdir/* on a directory with 2449 spam messages. But it doesn't seem to work. I'm not sure why. That quantity should be no problem at all. The standard bayes benchmarks were based on 2000 message buckets.

Re: sa-learn incapable of handling large amounts of messages?

2008-04-15 Thread Caleb Cushing
On Tuesday 15 April 2008 11:27:55 pm Matt Kettler wrote: Really I'd just be wanting to see the start and end of it.. head [7750] dbg: logger: adding facilities: all [7750] dbg: logger: logging level is DBG [7750] dbg: generic: SpamAssassin version 3.2.4 [7750] dbg: config: score set 0 chosen.