RE: Lowering spam threshold

2011-07-08 Thread Lars Jørgensen
$sa_tag2_level_deflt = 5.2; # add 'spam detected' headers at that level $sa_kill_level_deflt = 6.2; # triggers spam evasive actions (e.g. blocks mail) That seems a little aggressive to me. Personally I'd prefer a larger margin of error for FPs, and would set the discard level to 9 or

RE: Lowering spam threshold

2011-07-08 Thread John Hardin
On Fri, 8 Jul 2011, Lars Jørgensen wrote: $sa_tag2_level_deflt = 5.2; # add 'spam detected' headers at that level $sa_kill_level_deflt = 6.2; # triggers spam evasive actions (e.g. blocks mail) That seems a little aggressive to me. Personally I'd prefer a larger margin of error for FPs, and

Re: Lowering spam threshold [avoid discarding at high cost]

2011-07-08 Thread Andrzej Adam Filip
John Hardin jhar...@impsec.org wrote: On Fri, 8 Jul 2011, Lars Jørgensen wrote: $sa_tag2_level_deflt = 5.2; # add 'spam detected' headers at that level $sa_kill_level_deflt = 6.2; # triggers spam evasive actions (e.g. blocks mail) That seems a little aggressive to me. Personally I'd

Autowhitelist based on Return-Path: (envelope sender) for mailing list

2011-07-08 Thread Andrzej Adam Filip
Would not it make sense to add autowhitelisting based on Return-Path: header (envelope sender) to auto whitelist mailing lists? [ It may be triggered only when List-Id: header is present. ] -- [plen: Andrew] Andrzej Adam Filip : a...@onet.eu Fame is a vapor; popularity an accident; the only

Re: Reduce filtering time by white-listing [Mail::SpamAssassin::Plugin::Shortcircuit]

2011-07-08 Thread Kārlis Repsons
On Thursday 07 July 2011 16:46:42 Andrzej Adam Filip wrote: Have you considered using Shortcircuit plugin? Mail::SpamAssassin::Plugin::Shortcircuit Partially I use it. I gave up for anything more than using it with whitelist_from.

Securing spamd

2011-07-08 Thread Kārlis Repsons
All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still run by root: ps -C spamd -o user,cmd USER CMD root /usr/sbin/spamd -d -r /var/run/spamd.pid -m 2 -u spamd

Re: Securing spamd

2011-07-08 Thread Benny Pedersen
On Fri, 8 Jul 2011 16:41:36 +, Kārlis Repsons wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still run by root: ps -C spamd -o user,cmd USER CMD root

Re: Securing spamd [single (non root) OS user]

2011-07-08 Thread Andrzej Adam Filip
Kārlis Repsons karlis.reps...@gmail.com wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still run by root: ps -C spamd -o user,cmd USER CMD root

Re: Securing spamd

2011-07-08 Thread Kārlis Repsons
On Friday 08 July 2011 16:54:22 Benny Pedersen wrote: On Fri, 8 Jul 2011 16:41:36 +, Kārlis Repsons wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is

Re: Lowering spam threshold [avoid discarding at high cost]

2011-07-08 Thread John Hardin
On Fri, 8 Jul 2011, Andrzej Adam Filip wrote: John Hardin jhar...@impsec.org wrote: On Fri, 8 Jul 2011, Lars Jørgensen wrote: $sa_tag2_level_deflt = 5.2; # add 'spam detected' headers at that level $sa_kill_level_deflt = 6.2; # triggers spam evasive actions (e.g. blocks mail) That seems

Re: Securing spamd

2011-07-08 Thread Benny Pedersen
On Fri, 8 Jul 2011 17:03:35 +, Kārlis Repsons wrote: Stop what? questions ? I tried with --port=2580, but still one root process. But you meant it's not worth worrying about? some have answered this already On Friday 08 July 2011 17:00:50 Andrzej Adam Filip wrote: Do you need

Re: Securing spamd

2011-07-08 Thread Kārlis Repsons
On Friday 08 July 2011 17:34:13 Benny Pedersen wrote: On Friday 08 July 2011 17:00:50 Andrzej Adam Filip wrote: Do you need spamd changing OS user ids? (e.g. to access ~/.spamassassin/ ) No, I don't! one could ask how to configure it A small server. And configuration is

Re: Securing spamd

2011-07-08 Thread Andrzej Adam Filip
Kārlis Repsons karlis.reps...@gmail.com wrote: On Friday 08 July 2011 16:54:22 Benny Pedersen wrote: On Fri, 8 Jul 2011 16:41:36 +, Kārlis Repsons wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are

Re: Securing spamd [single (non root) OS user]

2011-07-08 Thread m...@smtp.fakessh.eu
Le vendredi 8 juillet 2011 19:00, Andrzej Adam Filip a écrit : Kārlis Repsons karlis.reps...@gmail.com wrote: All, I'd like you to review approximately how I'm running spamd. My concern is security. You can see that the child processes are run by spamd user, but the main process is still

Re: Autowhitelist based on Return-Path: (envelope sender) for mailing list

2011-07-08 Thread Michelle Konzack
Hello Andrzej Adam Filip, Am 2011-07-08 18:05:11, hacktest Du folgendes herunter: Would not it make sense to add autowhitelisting based on Return-Path: header (envelope sender) to auto whitelist mailing lists? [ It may be triggered only when List-Id: header is present. ] Not even the half of

Re: Autowhitelist based on Return-Path: (envelope sender) for mailing list

2011-07-08 Thread Andrzej Adam Filip
Michelle Konzack linux4miche...@tamay-dogan.net wrote: Hello Andrzej Adam Filip, Am 2011-07-08 18:05:11, hacktest Du folgendes herunter: Would not it make sense to add autowhitelisting based on Return-Path: header (envelope sender) to auto whitelist mailing lists? [ It may be triggered only