Re: URIBL/DNSBL from a database

2016-02-14 Thread Noel Butler
On 15/02/2016 09:02, Reindl Harald wrote: Am 14.02.2016 um 23:34 schrieb Noel Butler: On 14/02/2016 01:46, Alex wrote: rejecting outright at the SMTP level for IPs reaching my honeypots could be dangerous if not checked. how so? if your honey pots use specific non human used (ever) addresse

Re: URIBL/DNSBL from a database

2016-02-14 Thread Reindl Harald
Am 14.02.2016 um 23:34 schrieb Noel Butler: On 14/02/2016 01:46, Alex wrote: rejecting outright at the SMTP level for IPs reaching my honeypots could be dangerous if not checked. how so? if your honey pots use specific non human used (ever) addresses, then there should never ever be a genuin

Re: URIBL/DNSBL from a database

2016-02-14 Thread Noel Butler
On 14/02/2016 01:46, Alex wrote: rejecting outright at the SMTP level for IPs reaching my honeypots could be dangerous if not checked. how so? if your honey pots use specific non human used (ever) addresses, then there should never ever be a genuine mail destined for it. I dont care who

TxRep & Redis 'Not connected to any server' error messages

2016-02-14 Thread Skeffling
Hello, I've got TxRep running with the redis backend, and it seem to be working ok - I've only just started learning messages so time will tell how well this improves scores etc. I notice in my spamd log that I get: Sun Feb 14 20:23:46 2016 [26560] warn: rules: failed to run TXREP test, skippi

[Solved] Re: Error when trying to re-use Bayes database from one server to another

2016-02-14 Thread Sebastian Arcus
On 13/02/16 18:58, Bill Cole wrote: On 13 Feb 2016, at 3:49, Sebastian Arcus wrote: Thank you. The donor machine has db42, db44 and db44 packages installed, Based on the question below, I'll assume the second db44 above was a typo for db48, i.e. a Berkeley DB v4.8.x package. Tangentially:

Re: URIBL/DNSBL from a database

2016-02-14 Thread John Hardin
On Sun, 14 Feb 2016, Allen Chen wrote: On 2/12/2016 8:48 AM, Axb wrote: On 02/12/2016 02:39 PM, Alex wrote: > For some time now I've been cycling URLs and IPs through a mariadb > database gathered from incoming mail on a honeypot I've created. > Surprising how many are received ahead of sp

Re: Test results differ when input from MTA vs spamc cmdline

2016-02-14 Thread John Hardin
On Sun, 14 Feb 2016, RW wrote: On Sun, 14 Feb 2016 12:22:36 +0800 Tino de Bruijn wrote: I have some trouble filtering my spam, as everything I try from the commandline works fine (spamc -t < spam.eml , where spam.eml is a spam message i dragged out of Mail.app and uploaded to the server), but

Re: Test results differ when input from MTA vs spamc cmdline

2016-02-14 Thread RW
On Sun, 14 Feb 2016 12:22:36 +0800 Tino de Bruijn wrote: > Hi, > > I have some trouble filtering my spam, as everything I try from the > commandline works fine (spamc -t < spam.eml , where spam.eml is a > spam message i dragged out of Mail.app and uploaded to the server), > but when delivered to

Re: URIBL/DNSBL from a database

2016-02-14 Thread Allen Chen
On 2/12/2016 8:48 AM, Axb wrote: On 02/12/2016 02:39 PM, Alex wrote: Hi, For some time now I've been cycling URLs and IPs through a mariadb database gathered from incoming mail on a honeypot I've created. Surprising how many are received ahead of spamhaus/barracuda. I'm looking for ideas on h

Re: URIBL/DNSBL from a database

2016-02-14 Thread David Jones
>> DNS is very effective to block at the MTA level. I setup my own private >> RBL on the DNS servers my SA boxes point to. Dump your IPs into a >> rbldnsd formatted zone file and setup your private RBL zone (doesn't >> have to be a real zone on the Internet) to forward to rbldnsd. Rbldnsd >> wil

Re: Test results differ when input from MTA vs spamc cmdline

2016-02-14 Thread Reindl Harald
Am 14.02.2016 um 05:22 schrieb Tino de Bruijn: I have some trouble filtering my spam, as everything I try from the commandline works fine (spamc -t < spam.eml , where spam.eml is a spam message i dragged out of Mail.app and uploaded to the server), but when delivered to SA by my MTA (Haraka), i