Re: .pw / Palau URL domains in spam

2013-05-08 Thread Benny Pedersen
Michael Orlitzky skrev den 2013-05-08 17:24: (replying randomly in the thread) We've been getting complaints about these, so while I don't like to target a TLD indiscriminately, I think I'd like to add a few points to mail from *.pw for a couple of months until things clear up. What's the cor

Re: .pw / Palau URL domains in spam

2013-05-08 Thread Benny Pedersen
Karsten Bräckelmann skrev den 2013-05-08 01:03: Reporting abuse of a domain specifically registered with the clear intention to spam, to the very domain's abuse@ address, is pointless. It's like letting the spammers know you've read it... that is correct if pw domains using there own mailserve

Re: .pw / Palau URL domains in spam

2013-05-08 Thread Benny Pedersen
Steve Prior skrev den 2013-05-08 05:02: Problem went away completely, sorry Palau. postmap -q localpw.org hash:/path/to/map it should not reject that one :) bind9 rpz zone will be better solution, *.pw.rpz.localhost cname . and then follow it with bind9 guide on setup the rpz in bind its n

Re: Default Bayes Database

2013-05-08 Thread Karsten Bräckelmann
On Wed, 2013-05-08 at 14:09 -0400, Andrew Talbot wrote: > Well, I certainly hope someone offers to help! Heh! I am really confident, Alex didn't mean to be rude, neither that he actually hopes no one will help you. Quite the contrary... He DID try to help you by explaining why a "default Bayes d

Re: autolearn_discriminator callback not getting called.

2013-05-08 Thread Karsten Bräckelmann
On Wed, 2013-05-08 at 09:18 -0700, psychobyte wrote: > My goal is to ignore several types of address from getting into the AWL > database. So I'm creating a plugin that will set a lower priority for > autolearn_discriminator(), run the autolearn_discriminator callback, > check a list of ignored

Re: Default Bayes Database

2013-05-08 Thread Axb
On 05/08/2013 08:15 PM, Bob Proulx wrote: Andrew Talbot wrote: Well, I certainly hope someone offers to help! If only to say "there is no default database." There is no default database. :-) As we've spoken about off-list, my boss is being very particular about the deployment of Bayes, and

Re: Default Bayes Database

2013-05-08 Thread Bob Proulx
Andrew Talbot wrote: > Well, I certainly hope someone offers to help! > > If only to say "there is no default database." There is no default database. :-) > As we've spoken about off-list, my boss is being very particular about the > deployment of Bayes, and it sounds like one of his caveats

Re: .pw / Palau URL domains in spam

2013-05-08 Thread Richard Doyle
Hypotheticians might want to look at jwhois, which is a caching whois client. Cache expiration time is configurable ... On 05/08/2013 06:45 AM, Chris Santerre wrote: > RE: .pw / Palau URL domains in spam > > Hypothetically if one were running a reputation system and didn't want > to block all of

RE: Default Bayes Database

2013-05-08 Thread Andrew Talbot
Well, I certainly hope someone offers to help! If only to say "there is no default database." As we've spoken about off-list, my boss is being very particular about the deployment of Bayes, and it sounds like one of his caveats is that we don't start from a blank database. For the record, I a

Re: Default Bayes Database

2013-05-08 Thread Axb
On 05/08/2013 07:26 PM, Andrew Talbot wrote: Hey all - I remember seeing somewhere that there was a default Bayes database for Bayes to start using right away, but can't seem to find that information again on the Wiki or in my notes. Can someone please help? I hope nobody offers to help. Why

Default Bayes Database

2013-05-08 Thread Andrew Talbot
Hey all - I remember seeing somewhere that there was a default Bayes database for Bayes to start using right away, but can't seem to find that information again on the Wiki or in my notes. Can someone please help?

Re: Bayes_vars records on MySQL not created automatically

2013-05-08 Thread Michael Parker
On May 8, 2013, at 8:06 AM, Matteo Dessalvi wrote: > > I always thought that SA would be able to operate autonomously and that it > will create the > proper records in all the tables of the DB. Am I missing something? Is this > the designed behavior? > It's been awhile since I wrote and loo

Re: Bayes scores

2013-05-08 Thread Bowie Bailey
On 5/8/2013 12:06 PM, Niamh Holding wrote: Hello Bowie, Wednesday, May 8, 2013, 4:35:35 PM, you wrote: BB> makes a bit more sense. Not a lot, though to have BAYES_20 and BAYES_$) scoring the same. A 20-40% confidence level is not high enough to have a significant positive score nor is it lo

autolearn_discriminator callback not getting called.

2013-05-08 Thread psychobyte
Hi, My goal is to ignore several types of address from getting into the AWL database. So I'm creating a plugin that will set a lower priority for autolearn_discriminator(), run the autolearn_discriminator callback, check a list of ignored address types, then call inhibit_further_callbacks()

Re: Bayes scores

2013-05-08 Thread Niamh Holding
Hello Bowie, Wednesday, May 8, 2013, 4:35:35 PM, you wrote: BB> makes a bit more sense. Not a lot, though to have BAYES_20 and BAYES_$) scoring the same. -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpqBdg1MLCZD.pgp Description: PGP signature

Re: Bayes scores

2013-05-08 Thread Bowie Bailey
On 5/8/2013 3:07 AM, Niamh Holding wrote: Hello Same score for BAYES_20 and BAYES_40 seems a bit strange 50_scores.cf:score BAYES_20 0 0 -0.001 -0.001 50_scores.cf:score BAYES_40 0 0 -0.001 -0.001 A score of -0.001 basically means that the rule is active, but has no real effect on the fi

RE: .pw / Palau URL domains in spam

2013-05-08 Thread Chris Santerre
I posted this yesterday for those wanting an SA rule, here: header PW_IS_BAD_TLDFrom =~ /\.pw\b/ describe PW_IS_BAD_TLDPW TLD ABUSE score PW_IS_BAD_TLD3 Change score to whatever you want. Enjoy. --Chris > -Original Message- > From: Michael Orlitzky [mailto:mich...@orli

Re: .pw / Palau URL domains in spam

2013-05-08 Thread Michael Orlitzky
(replying randomly in the thread) We've been getting complaints about these, so while I don't like to target a TLD indiscriminately, I think I'd like to add a few points to mail from *.pw for a couple of months until things clear up. What's the correct way to do this? A regexp on the from/return-

sa-update from Feb 23 to May 8 ALL_TRUST problem

2013-05-08 Thread starlight . 2013q2
Hello, Ran 'sa-update' after a few months and ALL_TRUST stopped scoring for local network systems. Put back the old rules from backup and it works again. Searched for change log or explanation and found nothing. Does anyone know what the story is with this? Running 3.3.2 under 'mimedefang' 2.7

Re: .pw / Palau URL domains in spam

2013-05-08 Thread Bowie Bailey
On 5/7/2013 7:03 PM, Karsten Bräckelmann wrote: On Sun, 2013-05-05 at 22:49 +0200, Benny Pedersen wrote: John Hardin skrev den 2013-05-05 22:44: We request you to report the domain names at abuse.alert @registry.pw and also cc the same mail to abuse.alert @directi.com. why does abuse @any-send

RE: .pw / Palau URL domains in spam

2013-05-08 Thread Chris Santerre
Hypothetically if one were running a reputation system and didn't want to block all of a TLD like .pw, one could: Locally cache whois info create a local rbl check against a sending domain on the whois info based on both the registrar and the creation date Created On:08-May-2013 05:24:04 UTC Name

Bayes_vars records on MySQL not created automatically

2013-05-08 Thread Matteo Dessalvi
Hi all. I do hope that this question is not outside the scope of the list and I apologize in advance if that is the case. Currently I'am running this configuration on an email gateway server: - Debian Linux Wheezy - Postfix 2.9.6-2 - Spamassassin 3.3.2 - Amavisd-new 2.7.1 - Perl 5.14.2 - MySQL 5

RE: dns*.registrar-servers.com as a rogue registrar?

2013-05-08 Thread hospice admin
> From: lcon...@go2france.com > To: users@spamassassin.apache.org > Subject: dns*.registrar-servers.com as a rogue registrar? > Date: Tue, 7 May 2013 13:15:24 -0500 > > > Nearly all of the .pw domains have their authoritative NS at > dns*.registrar-servers.com. > > that registrar and few othe

Bayes scores

2013-05-08 Thread Niamh Holding
Hello Same score for BAYES_20 and BAYES_40 seems a bit strange 50_scores.cf:score BAYES_20 0 0 -0.001 -0.001 50_scores.cf:score BAYES_40 0 0 -0.001 -0.001 -- Best regards, Niamh mailto:ni...@fullbore.co.uk pgpY3KK2wQ_uW.pgp Description: PGP signature