URIBL blocked

2012-01-23 Thread Tom Kinghorn
Good afternoon list. Please could someone explain the following 0.0 URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked. See http://wiki.apache.org/spamassassin/DnsBlocklists#dnsbl-block for more information. The link shows:

Re: URIBL blocked

2012-01-23 Thread spamassassin
On 23/01/12 12:22, Tom Kinghorn wrote: Resolving the block might be as simple as using your own caching nameserver to avoid being lumped together with other users queries; setting up your own mirror of the DNS-blocklist; or paying to use the blocklist. The choice is up to the DNS-Blocklist

Re: URIBL blocked

2012-01-23 Thread Giles Coochey
I would look at getting a datafeed: http://www.uribl.com/datafeed.shtml [7] Out of interest, how much volume of email are you processing to experience this? Are you sharing your external IP with any other of your ISP customers? Does your ISP do anything strange with DNS queries? On

Re: Identifying actual performance on rules

2012-01-23 Thread John Hardin
On Sun, 22 Jan 2012, Munroe Sollog wrote: I am trying to locate reason for performance spikes. I have read the various wiki pages, and they suggest solutions but not a way to identify the bottleneck. Is there way to increase logging so that I can begin to identify or rule out the actual

ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
Hi, recently, my spamassassin started to score system messages as spam, mentioning IP numbers not in the email: Return-Path: x...@w1.oeko.net Delivered-To: xx...@oeko.net Received: from localhost (localhost [127.0.0.1]) by w3.oeko.net (Postfix) with ESMTP id AB1E725CEA for

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Kevin A. McGrail
Am I looking at a bug in SA? And/Or, how do I debug this, please? Kind regards, --Toni++ Baffling. Checking your maillogs, you don't see that IP anywhere?

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
On Mon, Jan 23, 2012 at 11:59:43AM -0500, Kevin A. McGrail wrote: Am I looking at a bug in SA? And/Or, how do I debug this, please? Baffling. Checking your maillogs, you don't see that IP anywhere? I do see this IP number several times, but it tried to send a completely different email to

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread darxus
On 01/23, Toni Mueller wrote: On Mon, Jan 23, 2012 at 11:59:43AM -0500, Kevin A. McGrail wrote: Am I looking at a bug in SA? And/Or, how do I debug this, please? Baffling. Checking your maillogs, you don't see that IP anywhere? I do see this IP number several times, but it tried to send

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Kevin A. McGrail
On 1/23/2012 12:19 PM, dar...@chaosreigns.com wrote: On 01/23, Toni Mueller wrote: On Mon, Jan 23, 2012 at 11:59:43AM -0500, Kevin A. McGrail wrote: Am I looking at a bug in SA? And/Or, how do I debug this, please? Baffling. Checking your maillogs, you don't see that IP anywhere? I do see

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
Hi, On Mon, Jan 23, 2012 at 12:19:52PM -0500, dar...@chaosreigns.com wrote: On 01/23, Toni Mueller wrote: I do see this IP number several times, but it tried to send a completely different email to someone else on my server. I was just about to ask if it might be showing up in other

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Kevin A. McGrail
On 1/23/2012 12:25 PM, Toni Mueller wrote: Hi, On Mon, Jan 23, 2012 at 12:19:52PM -0500, dar...@chaosreigns.com wrote: On 01/23, Toni Mueller wrote: I do see this IP number several times, but it tried to send a completely different email to someone else on my server. I was just about to ask

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
Hi, On Mon, Jan 23, 2012 at 12:29:29PM -0500, Kevin A. McGrail wrote: My thoughts were definitely the threads in amavis getting mixed up. I would definitely look at that path because I'm sure if you do spamassassin -t -D on the mbox format email post-amavis, you'll find it doesn't repeat the

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Benny Pedersen
On Mon, 23 Jan 2012 17:50:42 +0100, Toni Mueller wrote: recently, my spamassassin started to score system messages as spam, mentioning IP numbers not in the email: is your own ip listed as internal_networks or and trusted_networks, your own ip must be listed there, but this wont be stable if

Re: Identifying actual performance on rules

2012-01-23 Thread Karsten Bräckelmann
On Mon, 2012-01-23 at 08:03 -0800, John Hardin wrote: On Sun, 22 Jan 2012, Munroe Sollog wrote: I am trying to locate reason for performance spikes. I have read the various wiki pages, and they suggest solutions but not a way to identify the bottleneck. Is there way to increase

Re: Identifying actual performance on rules

2012-01-23 Thread John Hardin
On Tue, 24 Jan 2012, Karsten Bräckelmann wrote: On Mon, 2012-01-23 at 08:03 -0800, John Hardin wrote: On Sun, 22 Jan 2012, Munroe Sollog wrote: I am trying to locate reason for performance spikes. I have read the various wiki pages, and they suggest solutions but not a way to identify the