Re: Must-Have Plugins?

2015-06-09 Thread Matus UHLAR - fantomas
On Jun 9, 2015, at 12:29 PM, John Hardin wrote: (2) Check the HELO the other guy sends and reject if it's not a FQDN (i.e. it's not got any periods at all). This probably shouldn't be done on mail originating locally, but for mail coming in from the Internet the other MTA should always be send

Re: Must-Have Plugins?

2015-06-09 Thread Michael B Allen
On Tue, Jun 9, 2015 at 8:36 AM, David Jones wrote: >>>On 08.06.15 23:03, Michael B Allen wrote: >>>So I have had SA running for about 2 days on a very small site with a >>>handful of users. I've been running the default config just to see how >>>well it would do by itself. Unfortunately quite a lo

Re: [Announce] SA-Plugins: RedisAWL, RuleTimingRedis

2015-06-09 Thread RW
On Tue, 09 Jun 2015 21:35:18 +0200 Axb wrote: > > suggest you provide a dedicated redisawl.pre including loadplugin > command > > init.pre can be overwritten by an upgrade That's not supposed to happen.

Re: Question about TO_NO_BRKTS_HTML_ONLY

2015-06-09 Thread Kevin A. McGrail
On 6/9/2015 4:25 PM, RW wrote: On Tue, 09 Jun 2015 10:16:00 -0400 Kevin A. McGrail wrote: On 6/9/2015 9:55 AM, Reindl Harald wrote: I have two different mails with nearly identical rule hits. On with TO_NO_BRKTS_HTML_ONLY hit and one without. Can one please explain to me why message A gets TO_

Re: Question about TO_NO_BRKTS_HTML_ONLY

2015-06-09 Thread RW
On Tue, 09 Jun 2015 10:16:00 -0400 Kevin A. McGrail wrote: > On 6/9/2015 9:55 AM, Reindl Harald wrote: > >> > >> I have two different mails with nearly identical rule hits. On with > >> TO_NO_BRKTS_HTML_ONLY hit and one without. > >> Can one please explain to me why message A gets > >> TO_NO_BRKTS

Re: [Announce] SA-Plugins: RedisAWL, RuleTimingRedis

2015-06-09 Thread Axb
On 09.06.2015 17:57, Benning, Markus wrote: Hello, i want to announce the release of the SpamAssassin Plugins: RedisAWL - redis support for spamassassin AWL/TxRep RuleTimingRedis - collect SA rule timings in redis Both can be downloaded from CPAN or GitHub: https://metacpan.org/author/BENNING

Re: Must-Have Plugins?

2015-06-09 Thread Amir Caspi
On Jun 9, 2015, at 12:51 PM, RW wrote: > Bogofilter is pretty easy to use without a plugin. Typically it's just > a matter of piping your mail through bogofilter -e -p > In general the most efficient way to score-in an external filter is to > run it separately and have SA score the result - by s

Re: Must-Have Plugins?

2015-06-09 Thread John Hardin
On Tue, 9 Jun 2015, Amir Caspi wrote: On Jun 9, 2015, at 12:29 PM, John Hardin wrote: (2) Check the HELO the other guy sends and reject if it's not a FQDN (i.e. it's not got any periods at all). This probably shouldn't be done on mail originating locally, but for mail coming in from the Inte

Re: Must-Have Plugins?

2015-06-09 Thread John Hardin
On Tue, 9 Jun 2015, Matus UHLAR - fantomas wrote: On 09.06.15 11:29, John Hardin wrote: Two things that I have found very useful at the MTA level are: (1) Delay sending your SMTP banner a second or two and reject any sender that starts sending information before that. This is a built-in optio

Re: Must-Have Plugins?

2015-06-09 Thread RW
On Tue, 9 Jun 2015 12:36:58 + David Jones wrote: > I also have added CRM114 and BOGOFILTER plugins which are similar to > BAYES but don't require the manual training. They need manual training to the same extent that Bayes needs it. > These are fairly difficult to install Bogofilter is

Re: Must-Have Plugins?

2015-06-09 Thread Amir Caspi
On Jun 9, 2015, at 12:29 PM, John Hardin wrote: > (2) Check the HELO the other guy sends and reject if it's not a FQDN (i.e. > it's not got any periods at all). This probably shouldn't be done on mail > originating locally, but for mail coming in from the Internet the other MTA > should always

Re: Must-Have Plugins?

2015-06-09 Thread Matus UHLAR - fantomas
On 09.06.15 11:29, John Hardin wrote: Two things that I have found very useful at the MTA level are: (1) Delay sending your SMTP banner a second or two and reject any sender that starts sending information before that. This is a built-in option in Sendmail, google "greet_pause". even 15...

Re: Must-Have Plugins?

2015-06-09 Thread Reindl Harald
Am 09.06.2015 um 20:29 schrieb John Hardin: On Tue, 9 Jun 2015, David Jones wrote: Some of the best and easiest things you can enable to block spam are outside of SpamAssassin at your MTA (sendmail, postfix, etc.). - Enable greylisting. This is just about the only way you can block zero-

Re: Must-Have Plugins?

2015-06-09 Thread John Hardin
On Tue, 9 Jun 2015, David Jones wrote: Some of the best and easiest things you can enable to block spam are outside of SpamAssassin at your MTA (sendmail, postfix, etc.). - Enable greylisting. This is just about the only way you can block zero-hour spam from compromised accounts that come

[Announce] SA-Plugins: RedisAWL, RuleTimingRedis

2015-06-09 Thread Benning, Markus
Hello, i want to announce the release of the SpamAssassin Plugins: RedisAWL - redis support for spamassassin AWL/TxRep RuleTimingRedis - collect SA rule timings in redis Both can be downloaded from CPAN or GitHub: https://metacpan.org/author/BENNING https://github.com/benningm Timings gather

Re: Must-Have Plugins?

2015-06-09 Thread Reindl Harald
Am 09.06.2015 um 17:23 schrieb Alex Regan: My top hit counts from last week from dnsblcount.pl script (using postscreen so the numbers are most likely skewed based on ordering and thresholds being met with multiple RBL hits): Where did you find dnsblcount.pl? Or is this is your own? T

Re: Must-Have Plugins?

2015-06-09 Thread Alex Regan
Hi, My top hit counts from last week from dnsblcount.pl script (using postscreen so the numbers are most likely skewed based on ordering and thresholds being met with multiple RBL hits): Where did you find dnsblcount.pl? Or is this is your own? That sounds like a great compliment to

Re: Question about TO_NO_BRKTS_HTML_ONLY

2015-06-09 Thread Martin Fernau
Am 09.06.2015 um 15:55 schrieb Reindl Harald: Am 09.06.2015 um 15:49 schrieb Martin Fernau: Hello! I have two different mails with nearly identical rule hits. On with TO_NO_BRKTS

Re: Question about TO_NO_BRKTS_HTML_ONLY

2015-06-09 Thread Martin Fernau
Am 09.06.2015 um 16:16 schrieb Kevin A. McGrail: On 6/9/2015 9:55 AM, Reindl Harald wrote: I have two different mails with nearly identical rule hits. On with TO_NO_BRKTS_HTML_ONLY h

Re: Question about TO_NO_BRKTS_HTML_ONLY

2015-06-09 Thread Kevin A. McGrail
On 6/9/2015 9:55 AM, Reindl Harald wrote: I have two different mails with nearly identical rule hits. On with TO_NO_BRKTS_HTML_ONLY hit and one without. Can one please explain to me why message A gets TO_NO_BRKTS_HTML_ONLY and why message B didn't? HTML_ONLY means what it says - no plaintext a

Re: Question about TO_NO_BRKTS_HTML_ONLY

2015-06-09 Thread Kevin A. McGrail
On 6/9/2015 9:49 AM, Martin Fernau wrote: Hello! I have two different mails with nearly identical rule hits. On with TO_NO_BRKTS_HTML_ONLY hit and one without. Can one please explain to me why message A gets TO_NO_BRKTS_HTML_ONLY and why message B didn't? Message A: Content-Type: multipart

Re: Question about TO_NO_BRKTS_HTML_ONLY

2015-06-09 Thread Reindl Harald
Am 09.06.2015 um 15:49 schrieb Martin Fernau: Hello! I have two different mails with nearly identical rule hits. On with TO_NO_BRKTS_HTML_ONLY hit and one without. Can one please explain to me why message A gets TO_NO_BRKTS_HTML_ONLY and why message B didn't? HTML_ONLY means what it says - n

Question about TO_NO_BRKTS_HTML_ONLY

2015-06-09 Thread Martin Fernau
Hello! I have two different mails with nearly identical rule hits. On with TO_NO_BRKTS_HTML_ONLY hit and one without. Can one please explain to me why message A gets TO_NO_BRKTS_HTML_ONLY and why message B didn't? Message A: --cut Return-Path: X-Original-To: martin.fer...@venus.esw.cps-net.d

Re: Must-Have Plugins?

2015-06-09 Thread David Jones
>>On 08.06.15 23:03, Michael B Allen wrote: >>So I have had SA running for about 2 days on a very small site with a >>handful of users. I've been running the default config just to see how >>well it would do by itself. Unfortunately quite a lot of spam is >>getting through. So far 40 of 142 spams h

Re: Must-Have Plugins?

2015-06-09 Thread Matus UHLAR - fantomas
On 08.06.15 23:03, Michael B Allen wrote: So I have had SA running for about 2 days on a very small site with a handful of users. I've been running the default config just to see how well it would do by itself. Unfortunately quite a lot of spam is getting through. So far 40 of 142 spams have pass