Re: Disable a Rule

On Mon, 2011-10-31 at 02:33 +, Jeremy McSpadden wrote: > Thanks Ned, my question being now - why create a rule that can reduce > the spam count when the provider decides to enforce such a policy; and > start returning incorrect queries. It's almost irrelevant whether the score is negative or p

Re: Disable a Rule

Thanks Ned, my question being now - why create a rule that can reduce the spam count when the provider decides to enforce such a policy; and start returning incorrect queries. Denied or not, it should NEVER return any value that would lower the spam count, if it cannot provide the correct answer

Re: Rule updates

On Sun, 30 Oct 2011, Jim Popovitch wrote: I just got a new update. THANKS Now, what can I do to contribute to providing updates? Start generating hand-classified spam and ham corpora, set up SVN to keep a local up-to-date snapshot of SA and the rules sandboxes, then start running local

Re: Disable a Rule

On Sun, Oct 30, 2011 at 21:46, RW wrote: > On Sun, 30 Oct 2011 20:25:25 + > Jeremy McSpadden wrote: > >> Very well. DNSMasq setup and running local, yet still returns HI > > AFAIK DNSMasq isn't a recursive nameserver, it's just a DNS forwarder. Correct. pdns_resolver is an excellent replacem

Re: Rule updates

On Wed, Oct 19, 2011 at 13:51, John Hardin wrote: > On Wed, 19 Oct 2011, dar...@chaosreigns.com wrote: > >> On 10/19, Jim Popovitch wrote: >>> >>> Is the missing entity one person, several people, many people?  Was >>> there an untimely death?   I believe everyone is now aware that there >>> exist

Re: Disable a Rule

On Sun, 30 Oct 2011 20:25:25 + Jeremy McSpadden wrote: > Very well. DNSMasq setup and running local, yet still returns HI AFAIK DNSMasq isn't a recursive nameserver, it's just a DNS forwarder.

Re: Disable a Rule

On Sun, 30 Oct 2011, Jeremy McSpadden wrote: Very well. DNSMasq setup and running local, yet still returns HI Are you still forwarding to somebody else's DNS servers? If your ISP is large and hosting many people using SA, you may be in the same position. The local DNS server supporting your

Re: Disable a Rule

On 30/10/11 20:45, Jeremy McSpadden wrote: Thanks for the help Benny. .. Anyone besides this guy have anything to say ? -- See here: http://www.dnswl.org/news/archives/24-Abusive-use-of-dnswl.org-infrastructure-enforcing-limits.html and also the thread on this list from the archives dated 17t

Re: [OT] Disable a Rule

On Sun, 30 Oct 2011 21:48:16 +0100, Marcin Mirosław wrote: > W dniu 2011-10-30 21:36, Jeremy McSpadden pisze: >> Yes, that is in place. (not a newbie here) > > Only newbie can say "I'm not newbie". And top post at the same time.

Re: [OT] Disable a Rule

W dniu 2011-10-30 21:36, Jeremy McSpadden pisze: > Yes, that is in place. (not a newbie here) Only newbie can say "I'm not newbie".

Re: Disable a Rule

Thanks for the help Benny. .. Anyone besides this guy have anything to say ? -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Oct 30, 2011, at 3:40 PM, Benny Pedersen wrote: On Su

Re: Disable a Rule

On Sun, 30 Oct 2011 20:36:14 +, Jeremy McSpadden wrote: Yes, that is in place. (not a newbie here) seems your hosters is not newbee either, you are firewalled to use there dns server if it still does not work, ask them :)

Re: Disable a Rule

Yes, that is in place. (not a newbie here) -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Oct 30, 2011, at 3:14 PM, Benny Pedersen wrote: On Sun, 30 Oct 2011 20:05:08 +, Jer

Re: Disable a Rule

On Sun, 30 Oct 2011 20:25:25 +, Jeremy McSpadden wrote: Very well. DNSMasq setup and running local, yet still returns HI check /etc/resolv.conf nameserver 127.0.0.1

Re: Disable a Rule

Very well. DNSMasq setup and running local, yet still returns HI -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Oct 30, 2011, at 3:14 PM, Benny Pedersen wrote: On Sun, 30 Oct 2

Re: Disable a Rule

On Sun, 30 Oct 2011 20:05:08 +, Jeremy McSpadden wrote: Then why would this rule be enabled by default, or even setup for SA out of the box. So your telling me that in order to use this rule, i have to setup a local dns ? i don't think so. I've run SA boxes for years and never had to run a lo

Re: Disable a Rule

Then why would this rule be enabled by default, or even setup for SA out of the box. So your telling me that in order to use this rule, i have to setup a local dns ? i don't think so. I've run SA boxes for years and never had to run a local dns server. -- Jeremy McSpadden Flux Labs, Inc On Oc

Re: Disable a Rule

On Sun, 30 Oct 2011 19:18:12 +, Jeremy McSpadden wrote: I am using local dns servers. The server is at SoftLayer's DC. Using their local DNS servers, 10.0.X there ip need datafeed or you need to have dns server on 127.0.0.1 to get the free use at dnswl i cant find this ip listed anywher

Re: Disable a Rule

No, i was editing the actual rule file itself. I have done a lookup on several of the IPs that SA is stating are HI on DNSWL, yet they come back as not whitelisted. http://www.dnswl.org/search.pl?s=98.126.47.12 = IP address 98.126.47.12 is not whitelisted at dnswl.org. spama

Re: Disable a Rule

On Sun, 30 Oct 2011, Jeremy McSpadden wrote: I am editing the local, thanks. sa-update should not touch your local configuration file. Are you saying it is doing so? Letting them know is fine and all, except the mail is still getting through my systems. I have noticed this on several of my

Re: Disable a Rule

On Sun, 2011-10-30 at 18:17 +, Jeremy McSpadden wrote: > This is for hundreds of emails. DNSWL thinks just because one > yahoo/gmail/hotmail account is clean; all are. Does not make sense to > me. I'd be surprised to see these listed in DNSWL high. Which IPs are these precisely? Also, what DN

Re: Disable a Rule

I am editing the local, thanks. Letting them know is fine and all, except the mail is still getting through my systems. I have noticed this on several of my MS gateways. The emails are blatant spam. This is for hundreds of emails. DNSWL thinks just because one yahoo/gmail/hotmail account is cle

Re: Disable a Rule

On Sun, 30 Oct 2011, Jeremy McSpadden wrote: It seems nightly the rule is re-enabled. Don't edit the files that are deep in the SpamAssassin working directories, they will get overwritten with updates as you have seen. If you want to disable a rule, set its score to zero in your _local_ co

Re: Disable a Rule

On Sun, 30 Oct 2011 17:37:01 +, Jeremy McSpadden wrote: I have several MS boxes and it seems that the RCVD_IN_DNSWL_HI rule in 72_active is allowing way to much through. Running at a score of 5 for spam, and it -5 on score is pushing it as clean. How do i disable the rule completely, even on

Re: Disable a Rule

W dniu 2011-10-30 18:37, Jeremy McSpadden pisze: > I have several MS boxes and it seems that the RCVD_IN_DNSWL_HI rule in > 72_active is allowing way to much through. Running at a score of 5 for > spam, and it -5 on score is pushing it as clean. How do i disable the > rule completely, even on sa-up

Disable a Rule

I have several MS boxes and it seems that the RCVD_IN_DNSWL_HI rule in 72_active is allowing way to much through. Running at a score of 5 for spam, and it -5 on score is pushing it as clean. How do i disable the rule completely, even on sa-updates. It seems nightly the rule is re-enabled. -- Je

iadb dns fails ?

it only works for me if i use forwards in bind here, if i delete my forwards in bind, no results from there dns servers :/ anyone that can confirm its just me ? tryed contacting tech from whois with bounced :(