Re: Problems with high spam

Hi! Also consider the invalument block lists, see http://dnsbl.invaluement.com/ A very, very good list that is usable for blocking. Not free, but very affordable. I don't like how involvement does their pricing structure, actually. Firstly, I don't feel comfortable telling a 3rd party how ma

Do I need to do anything to maintain MySQL?

Every so often, I see some large MySQL accesses taking place from SA. Is there any regular maintenance needed or should I just leave it alone? -- Time flies like the wind. Fruit flies like a banana. Stranger things have .0. happened but none stranger than this. Does your driver's license say Or

Re: Problems with high spam

On Tue, Sep 22, 2009 at 10:21 PM, LuKreme wrote: > On 22-Sep-2009, at 14:42, Aaron Wolfe wrote: > >> Also consider the invalument block lists, see >> http://dnsbl.invaluement.com/ >> A very, very good list that is usable for blocking. Not free, but >> very affordable. >> > > I don't like how inv

Re: Problems with high spam

On 22-Sep-2009, at 14:42, Aaron Wolfe wrote: Also consider the invalument block lists, see http://dnsbl.invaluement.com/ A very, very good list that is usable for blocking. Not free, but very affordable. I don't like how involvement does their pricing structure, actually. Firstly, I don't fe

Fwd: Episode 17 of the Who and Why Show: SpamAssassin

Hi all -- FYI, I had a chat with Steve Santorelli a while back for Team Cymru's 'Who and Why Show' podcast -- an occasional series designed to directly assist network administrators, looking at various Open Source Tools that can be used to check and secure systems. It's now up: Today we talk wi

Re: Re-running SA on an mbox

On Tue, 22 Sep 2009, Jeff Mincy wrote: From: MySQL Student Date: Tue, 22 Sep 2009 15:38:47 -0400 > Try using a local SA setup for stripping the headers. By local, I mean > don't use your main production SA - run a separate copy with its own > (cut down) configuration and all data bas

Re: Re-running SA on an mbox

From: MySQL Student Date: Tue, 22 Sep 2009 15:38:47 -0400 > Try using a local SA setup for stripping the headers. By local, I mean > don't use your main production SA - run a separate copy with its own > (cut down) configuration and all data base accesses and UBL calls etc >

Re: Re-running SA on an mbox

On Tue, 22 Sep 2009 13:03:16 +0100 Martin Gregorie wrote: > gawk ' > BEGIN { act = "copy" } > /^X-Spam/ { act = "skip" } > /^[A-WYZ]/ { act = "copy" } > { >

Re: Problems with high spam

On Tue, Sep 22, 2009 at 4:02 PM, Jose Luis Marin Perez wrote: > Dear Sirs. > > Thank you for your answers > > Qmail-Smtpd have the following RBL configured: > > bl.spamcop.net > cbl.abuseat.org > combined.njabl.org Consider zen. It is excellent. Spamcop and NJABL have caused too many false posi

RE: Problems with high spam

On Tue, 22 Sep 2009, Jose Luis Marin Perez wrote: echo "70_sare_highrisk.cf.sare.sa-update.dostech.net" >> /etc/mail/spamassassin/sare-sa-update-channels.txt Did you read the ruleset descriptions before choosing which ones to use? Inquire about rules SOUGHT http://wiki.apache.org/spamassa

Re: Problems with high spam

Jose Luis Marin Perez wrote: > Dear Sirs. > > Thank you for your answers > > Qmail-Smtpd have the following RBL configured: > > * bl.spamcop.net > cbl.abuseat.org > combined.njabl.org > * You might want to try zen.spamhaus.org. That is the only one I trust enough to block mail on my MTA. > These

Re: About reporting

spamassassin -r and spamassassin -k do other things - report to network services like razor/pyzor/dcc and SpamCop. Hum, then how do the default spam filters that come with a clean spam assassin installation know what's spam and what's not ? Is there service we can report spam to ?

RE: Problems with high spam

Dear Sirs. Thank you for your answers Qmail-Smtpd have the following RBL configured: bl.spamcop.net cbl.abuseat.org combined.njabl.org These are the SARE rules which adds to SA: echo "70_sare_adult.cf.sare.sa-update.dostech.net" >> /etc/mail/spamassassin/sare-sa-update-channels.txt

Re: Re-running SA on an mbox

Hi, > Try using a local SA setup for stripping the headers. By local, I mean > don't use your main production SA - run a separate copy with its own > (cut down) configuration and all data base accesses and UBL calls etc > turned off. Much better idea, thanks. Thanks for the script, too. Best, Al

RE: Problems with high spam

On Tue, 22 Sep 2009, Jose Luis Marin Perez wrote: I'll gather some examples of emails that my users are considered as SPAM (Latest I could configure SA to display the report in the headers) Regarding the questions: 1. Yes I have set up qmail-smtpd to use rblsmtpd and definitively blocks a

RE: Problems with high spam

Dear Sirs. Thank you for your answers I'll gather some examples of emails that my users are considered as SPAM (Latest I could configure SA to display the report in the headers) Regarding the questions: 1. Yes I have set up qmail-smtpd to use rblsmtpd and definitively blocks a lot of

RE: Problems with high spam

On Tue, 22 Sep 2009, Jose Luis Marin Perez wrote: Additionally I noticed that there are emails that should detect as SPAM (for example those of 100 points - Advertising) but not filtered. What more could add or remove the configuration of the SA? First we need to see why they aren't being sc

RE: Problems with high spam

Dear friends, I appreciate your support. Yesterday at approximately 15:00 make some changes: - Add to SA skip_rbl_checks RBL 0 - Increase required_score from 3.5 to 5.0 Spam Statistics from yesterday were: Total messages:Ham: Spam: % Spam: -

Re: RBL error with SA

On tir 22 sep 2009 17:24:30 CEST, Luis campo wrote [4315] dbg: rules: local tests only, ignoring RBL eval --lint will disable rbl testing so: spamassassin 2>&1 -D | less any errors ? -- xpoint

Re: Eliminating russian spam

Thank you, John! Both "how-to" (http://sa-russian.narod.ru/no_russian.html) and the ruleset (http://sa-russian.narod.ru/files/20090916/99_no_russian_mail.cf) are updated.

Re: partial (lazy) scoring? - run a second time?

> ArtemGr gmail.com> writes: > > I would like to configure Spamassassin to only do certain tests > > when the "required_score" is not yet reached. > > For example, do the usual rule-based and bayesian tests first, > > and if the score is lower than the "required_score", > > then do the DCC and RAZ

Re: partial (lazy) scoring? (shortcircuit features)

> Matt Kettler verizon.net> writes: > > In theory, a feature could be added to let you do something like this > > (SA doesn't have this feature, but I'm proposing it could be added): On 22.09.09 11:46, ArtemGr wrote: > That would be a nice optimization: most of the spam we receive have a >10 > sc

Re: RBL error with SA

Luis campo wrote: > hi, > > I set to work with RBL Spamassasin by skip_rbl_checks option 0. > > But in my statistics were not reporting any RBL test > > Run spamassassin-D-lint > One of the side-effects

RBL error with SA

hi, I set to work with RBL Spamassasin by skip_rbl_checks option 0. But in my statistics were not reporting any RBL test Run spamassassin-D-lint And these messages came out [5563] dbg: dns: no ipv6 [5563] dbg: dns: is Net::DNS::Resolver available? yes [5563] dbg: dns: Net::DNS vers

Re: partial (lazy) scoring? - run a second time?

ArtemGr gmail.com> writes: > I would like to configure Spamassassin to only do certain tests > when the "required_score" is not yet reached. > For example, do the usual rule-based and bayesian tests first, > and if the score is lower than the "required_score", > then do the DCC and RAZOR2 tests. >

Re: Re-running SA on an mbox

On Mon, 2009-09-21 at 23:18 -0400, MySQL Student wrote: > How can I tell when another process is using the database and when it > is free for my script to use? > > Is there a faster way to run spamassassin just to strip the SA headers? > Try using a local SA setup for stripping the headers. By lo

Re: partial (lazy) scoring? (shortcircuit features)

Matt Kettler verizon.net> writes: > In theory, a feature could be added to let you do something like this > (SA doesn't have this feature, but I'm proposing it could be added): That would be a nice optimization: most of the spam we receive have a >10 score. It seems a real waste of resource to pe

Re: partial (lazy) scoring? (shortcircuit features)

ArtemGr wrote: > I would like to configure Spamassassin to only do certain tests > when the "required_score" is not yet reached. > For example, do the usual rule-based and bayesian tests first, > and if the score is lower than the "required_score", > then do the DCC and RAZOR2 tests. > > Is it poss

Re: Understanding SpamAssassin

On tir 22 sep 2009 09:43:23 CEST, LuKreme wrote bayes learning from ham helps score messages as ham that might otherwise be tagged as ham. ups :) -- xpoint

partial (lazy) scoring?

I would like to configure Spamassassin to only do certain tests when the "required_score" is not yet reached. For example, do the usual rule-based and bayesian tests first, and if the score is lower than the "required_score", then do the DCC and RAZOR2 tests. Is it possible?

Re: About reporting

Hello, please configure your mailer to wrap lines below 80 characters per line. 72 to 75 is usually OK. Thank you. >>> On 19.09.09 22:45, João Eiras wrote: I still haven't got the answer to my last question, so here it goes again: Can I report a full mbs file with many mails in one go

Re: Re-running SA on an mbox

On Tuesday September 22 2009 06:32:12 Benny Pedersen wrote: > On man 21 sep 2009 20:33:57 CEST, MySQL Student wrote > >> but this will invalidtate dkim headers if this headers > >> is signed, are spamassassin aware of this problem ? (in general) > > > > Are you saying there is a bug? > > partly ye

Re: Understanding SpamAssassin

On 21-Sep-2009, at 13:05, poifgh wrote: Mails which have very high or very low score are fed to bayesian learning. Since we are confident about them being HAM or SPAM what do we want to learn from them - The regex filters have identified that the mail is a spam (say), what additional does ba