Checkspam parser to spamd

2011-10-05 Thread Pedro Sánchez
Hi every one! this is a little homemade parse writen on bash to analyze spamd.log file, hope it help some one... -- ↑ Grab this Headline Animator checkspam.sh Description: application/shellscript

Re: How do I stop SA checking mail from authenticated users - Solved

2011-10-05 Thread Benny Pedersen
On Wed, 05 Oct 2011 00:45:32 +0100, Frank Leonhardt wrote: Now solved! The solution is really simple but I'll collate all the facts and write it up properly. The quick answer is to add "InputMailFilters=" into the DaemonOptions imho there is no quick answer, what you have now is just limited

Re: How do I stop SA checking mail from authenticated users

2011-10-05 Thread Benny Pedersen
On Tue, 04 Oct 2011 18:48:44 +0100, Frank Leonhardt wrote: Is there an easy way I can treat trusted mail differently? only if you have all ips untrusted, and make sure authed clients use submission not port 25, where submission reject if not sasl authed, then you can have diff milter for thi

Re: Rule updates

2011-10-05 Thread Jim Popovitch
On Wed, Oct 5, 2011 at 17:41, RW wrote: > The usual reason for a hiatus is that too much spam or ham has aged-out > in the corpora, and a top-up is needed. So, how do we get it top-up'ed? -Jim P.

Re: Rule updates

2011-10-05 Thread RW
On Wed, 05 Oct 2011 09:50:08 +0200 Lars Jørgensen wrote: > On 04-10-2011 15:39, Michael Scheidell wrote: > > what is 'long'? > > As you can see from your own example, rules were updated daily until > august 26th. Then there hasn't been any updates since. That is 'long' > for me. > > I can also

Re: Blacklisting based on SPF

2011-10-05 Thread Benny Pedersen
On Wed, 5 Oct 2011 11:01:12 -1000, Julian Yap wrote: Ive noticed some trojans with addresses from usps.com [1] slip through. ups.com ? Does anyone blacklist based on SPF? not needed since all spf domains is blacklisted, and scored neotral in spamassassin, until you use whitelist_from_spf o

Re: Blacklisting based on SPF

2011-10-05 Thread Michael Scheidell
On 10/5/11 5:01 PM, Julian Yap wrote: I've noticed some trojans with addresses from usps.com slip through. Does anyone blacklist based on SPF? I took a look at the source for SpamAssassin/Plugin/SPF.pm but it only has evaluation rules for whitelisting: $self->register_eva

Blacklisting based on SPF

2011-10-05 Thread Julian Yap
I've noticed some trojans with addresses from usps.com slip through. Does anyone blacklist based on SPF? I took a look at the source for SpamAssassin/Plugin/SPF.pm but it only has evaluation rules for whitelisting: $self->register_eval_rule ("check_for_spf_whitelist_from"); $self->register_ev

Re: How do I stop SA checking mail from authenticated users

2011-10-05 Thread Benny Pedersen
On Wed, 05 Oct 2011 17:02:12 +0100, Frank Leonhardt wrote: As I mentioned elsewhere, the problem is solved for my purposes but I'm planning to write a comprehensive answer to this whole issue. whitelist_auth m...@junc.org priority USER_IN_DKIM_WHITELIST -2000 shortcircuit USER_IN_DKIM_WHITELIST

Re: How do I stop SA checking mail from authenticated users

2011-10-05 Thread Giles Coochey
On Wed, October 5, 2011 18:02, Frank Leonhardt wrote: > > On 05/10/2011 16:23, Giles Coochey wrote: >> On Tue, October 4, 2011 20:59, Frank Leonhardt wrote: >>> On 04/10/2011 19:22, Kris Deugau wrote: Frank Leonhardt wrote: > Here's the problem: > > I have a single mail server (not

Re: How do I stop SA checking mail from authenticated users

2011-10-05 Thread Frank Leonhardt
On 05/10/2011 16:23, Giles Coochey wrote: On Tue, October 4, 2011 20:59, Frank Leonhardt wrote: On 04/10/2011 19:22, Kris Deugau wrote: Frank Leonhardt wrote: Here's the problem: I have a single mail server (not commercial) using sendmail to accept incoming mail from all sources, and filteri

Re: How do I stop SA checking mail from authenticated users

2011-10-05 Thread Giles Coochey
On Tue, October 4, 2011 20:59, Frank Leonhardt wrote: > On 04/10/2011 19:22, Kris Deugau wrote: >> Frank Leonhardt wrote: >>> Here's the problem: >>> >>> I have a single mail server (not commercial) using sendmail to accept >>> incoming mail from all sources, and filtering using spamassassin. It >>

Re: Minimal server specs for SA question

2011-10-05 Thread Henrik K
On Mon, Oct 03, 2011 at 01:59:59PM -0400, Alex B. wrote: > > > On 2011-10-03, at 6:08 AM, Simon Loewenthal wrote: > > > Hi there, > > > >I have to set-up a few low power SA boxes. Currently I'm used to > > using Intel Xeon 2.6Ghz with 16Gb of memory, but these proposed boxes > > are small.

Re: Minimal server specs for SA question

2011-10-05 Thread Frank Leonhardt
by LOEWENTHAL Simon-2 Oct 03, 2011; 11:08amHi there: I have to set-up a few low power SA boxes. Currently I'm used to using Intel Xeon 2.6Ghz with 16Gb of memory, but these proposed boxes are small. I won't buy one unless I know it c

Re: Minimal server specs for SA question

2011-10-05 Thread Matus UHLAR - fantomas
On 2011-10-03, at 6:08 AM, Simon Loewenthal wrote: I have to set-up a few low power SA boxes. Currently I'm used to using Intel Xeon 2.6Ghz with 16Gb of memory, but these proposed boxes are small. I won't buy one unless I know it can do the job. I know the figures below are tiny, but I don'

Suggestions Please..

2011-10-05 Thread gweeny
Can anyone suggest :confused: a way to do the following steps in order to prevent outgoing spam through postfix&SA? 1. Block outgoing mail with from:<> (no sender’s address) – WITH EXCEPTIONS. 2. Block by sender\domain\IP who have reached a pre-defined limit of messages which were reje

Re: Rule updates

2011-10-05 Thread Lars Jørgensen
On 04-10-2011 15:43, Jim Popovitch wrote: what is 'long'? Since 27-Aug-2011 ? So, not just me then. -- Lars

Re: Rule updates

2011-10-05 Thread Lars Jørgensen
On 04-10-2011 15:39, Michael Scheidell wrote: what is 'long'? As you can see from your own example, rules were updated daily until august 26th. Then there hasn't been any updates since. That is 'long' for me. I can also see that updates are daily for 3.4.0 currently. Does that mean that up