Re: Script to generate whitelist based on INCOMING email????

2011-03-17 Thread phuong hanu
actually, that's not the pb with mySQL command. i just wanna suggestion abt the script that can extract info from email header in my email db to create a list (whitelist) for future purpose. --> whitelist process. I'm working on the plugin but that's not the process of generating db for my white

Re: how to disable network tests?

2011-03-17 Thread Karsten Bräckelmann
On Fri, 2011-03-18 at 02:38 +0400, Hamad Ali wrote: > > I take it you no longer want to disable network test? ;) > > yeah, thank you for all the help; also thanks to other folks that > told me how to disable network tests (it helped me see the need of > network tests). Great. To see a proper sol

Re: Performance on Spear Phishing?

2011-03-17 Thread Karsten Bräckelmann
On Thu, 2011-03-17 at 12:58 +, Nigel Frankcom wrote: > Unrelated but reminded me I hadn't posted a thanks to all those that > responded about the sa-update rules. That's partly because I'm > awaiting permission from clients to add their mails to the corpus. Unrelated indeed. ;) That short ran

Re: how to disable network tests?

2011-03-17 Thread Karsten Bräckelmann
On Fri, 2011-03-18 at 01:49 +0100, Benny Pedersen wrote: > On Thu, 17 Mar 2011 21:30:16 +0100, Karsten Bräckelmann wrote: > > > Don't do that. Run a local, caching, non-forwarding DNS server. And make > > sure this server (most likely 127.0.0.1) is the first nameserver entry > > in your /etc/resol

RE: how to disable network tests?

2011-03-17 Thread Benny Pedersen
On Thu, 17 Mar 2011 21:30:16 +0100, Karsten Bräckelmann wrote: > Don't do that. Run a local, caching, non-forwarding DNS server. And make > sure this server (most likely 127.0.0.1) is the first nameserver entry > in your /etc/resolv.conf. when local dns server is working there must only be one s

Re: plugin for CIDR matching

2011-03-17 Thread David B Funk
On Thu, 17 Mar 2011, Matus UHLAR - fantomas wrote: On 14.03.11 13:41, Markus Reschke wrote: Currently I'm writing a small SA plugin for checking if IP addresses of relaying MTAs (in the Received: lines) are within a list of defined CIDR blocks. Most admins filter specific CIDR blocks, e.g. from

RE: how to disable network tests?

2011-03-17 Thread Hamad Ali
> Subject: Re: how to disable network tests? > From: guent...@rudersport.de > To: users@spamassassin.apache.org > Date: Thu, 17 Mar 2011 23:04:59 +0100 > Did you clear your local (forwarding) DNS's cache between these runs? > Hmm, or maybe both are essentially suffering from the same major > non

Re: how to disable network tests?

2011-03-17 Thread Karsten Bräckelmann
On Fri, 2011-03-18 at 01:43 +0400, Hamad Ali wrote: > > [...] Does your caching DNS act as a forwarder? > > > > Don't do that. Run a local, caching, non-forwarding DNS server. And make > > sure this server (most likely 127.0.0.1) is the first nameserver entry > > in your /etc/resolv.conf. > > Ye

RE: how to disable network tests?

2011-03-17 Thread Hamad Ali
> Subject: RE: how to disable network tests? > From: guent...@rudersport.de > To: users@spamassassin.apache.org > Date: Thu, 17 Mar 2011 21:30:16 +0100 > The new timings strongly suggest there indeed are some network or DNS > issues. Installing a local caching nameserver already helped. > > How

RE: how to disable network tests?

2011-03-17 Thread Karsten Bräckelmann
Oh, and FWIW... > On Thu, 2011-03-17 at 22:17 +0400, Hamad Ali wrote: > > Regarding my problem, I am still investigating the cause of the > > network delay. I have installed a DNS cac he server, and speed did > > increase for "cached" entries. [...] This is precisely what you should have posted i

Re: SA and Spear Phishing

2011-03-17 Thread Karsten Bräckelmann
On Thu, 2011-03-17 at 15:58 -0400, dar...@chaosreigns.com wrote: > On 03/17, Hamad Ali wrote: > >- Michael Scheidell said: "Ditto. I was about to tell him how to stop > >spear phishing"; it seems because I'm not eligible for participation in > >nightly masschecks, Michael decided to n

RE: how to disable network tests?

2011-03-17 Thread Karsten Bräckelmann
On Thu, 2011-03-17 at 22:17 +0400, Hamad Ali wrote: > Thank you all for your extensive support. I have to say that this > thread told me that SA's list is one of the most lists out there. [...] > Regarding my problem, I am still investigating the cause of the > network delay. I have installed a DN

Re: SA and Spear Phishing

2011-03-17 Thread Darxus
On 03/18, Hamad Ali wrote: >> No. Michael doesn't want to help you and Karsten doesn't want you to >> participate in mass-checks because of your behavior on this list. >Are you referring to ban on masschecks, or ban on receiving any sort of >help what so ever? I'm saying it's the s

RE: SA and Spear Phishing

2011-03-17 Thread Hamad Ali
> Date: Thu, 17 Mar 2011 15:58:52 -0400 > From: dar...@chaosreigns.com > To: users@spamassassin.apache.org > Subject: Re: SA and Spear Phishing > No. Michael doesn't want to help you and Karsten doesn't want you to > participate in mass-checks because of your behavior on this list. Are you referr

Re: SA and Spear Phishing

2011-03-17 Thread Darxus
On 03/17, Hamad Ali wrote: >Alright guys, let's forget about me doing masschecks (I didn't know >limitations as I haven't seen the trust thingy policy anywhere >else [1]http://wiki.apache.org/spamassassin/NightlyMassCheck). Why do you think that page needs to say that we need to be abl

SA and Spear Phishing

2011-03-17 Thread Hamad Ali
Alright guys, let's forget about me doing masschecks (I didn't know limitations as I haven't seen the trust thingy policy anywhere else http://wiki.apache.org/spamassassin/NightlyMassCheck).This is a totally new mail, let's hope we all stick to the topic. So this is a summary from the previous

RE: how to disable network tests?

2011-03-17 Thread Hamad Ali
Thank you all for your extensive support. I have to say that this thread told me that SA's list is one of the most lists out there. Why didn't I reply back? I initially wanted to reply to thank you for the great friendly free help (at least). However, then I thought that sending a "thank you" m

Re: plugin for CIDR matching

2011-03-17 Thread Matus UHLAR - fantomas
On 14.03.11 13:41, Markus Reschke wrote: > Currently I'm writing a small SA plugin for checking if IP addresses of > relaying MTAs (in the Received: lines) are within a list of defined CIDR > blocks. Most admins filter specific CIDR blocks, e.g. from known SPAMming > ISPs, at the MTA level. That w

Re: Script to generate whitelist based on INCOMING email????

2011-03-17 Thread Bowie Bailey
On 3/17/2011 6:01 AM, phuong hanu wrote: > > Hi, > > I've just read ur post on nabble > > I just send this message to you to ask about one problem that I have to > solve now. I have a database of email in my linux virtual machine. this > table includes some fiedls such as ID, Spam, Data, Tim

Re: Unable to find ASNSMX rule description

2011-03-17 Thread Karsten Bräckelmann
On Thu, 2011-03-17 at 05:24 -0700, Artur Dampc wrote: > I'm having problems finding description of a rule that is giving spam points > (1.5) to mails that arrive at a mail server I use. The rule's name is So you're receiving the mail, not sending it. Who is scanning the mail then, who is in charge

Re: Performance on Spear Phishing?

2011-03-17 Thread Nigel Frankcom
Unrelated but reminded me I hadn't posted a thanks to all those that responded about the sa-update rules. That's partly because I'm awaiting permission from clients to add their mails to the corpus. So, thanks all. Apologies for forgetting my manners. Have no clue about Spear Phishing other than

Unable to find ASNSMX rule description

2011-03-17 Thread Artur Dampc
Hi everyone, I'm having problems finding description of a rule that is giving spam points (1.5) to mails that arrive at a mail server I use. The rule's name is ASNSMX. The odd thing is the people at the company that hosts the mail server also don't have any idea what this rule is about. I would g

Script to generate whitelist based on INCOMING email????

2011-03-17 Thread phuong hanu
Hi, I've just read ur post on nabble I just send this message to you to ask about one problem that I have to solve now. I have a database of email in my linux virtual machine. this table includes some fiedls such as ID, Spam, Data, Time, Sender_add, sender_ip, sender_domain, since