Re: private networks are default rbl tested :/

2018-11-05 Thread RW
On Mon, 05 Nov 2018 23:37:59 +0100 Benny Pedersen wrote: > https://en.wikipedia.org/wiki/Private_network > > why are this network not default internal_networks trusted_networks > msa_networks They are if you let SA guess your networks. If you specify the networks manually you have to specify

private networks are default rbl tested :/

2018-11-05 Thread Benny Pedersen
https://en.wikipedia.org/wiki/Private_network why are this network not default internal_networks trusted_networks msa_networks spamassassin makes many wasted rbl tests with not knowing what to skip i like to make a good default config file for all this wastes :)

Re: How to deel with time limit exceeded

2018-11-05 Thread Rob McEwen
Another thing that helps - is to lighten the load on your SA by putting high quality low-FP DNSBLs in front of SA, that are first called by your MTA, where spams blocked by those aren't even scanned by SA. --Rob McEwen On 11/5/2018 2:48 PM, Andreas Thienemann wrote: Hi, I've got a

Re: How to deal with time limit exceeded

2018-11-05 Thread Henrik K
On Mon, Nov 05, 2018 at 09:11:22PM +0100, Andreas Thienemann wrote: > > > On Mon, 5 Nov 2018, Henrik K wrote: > > >prineg90 = priority -90 = BAYES rules. > > Right. Thanks for that. > Is there a good mapping table one can consult? grep priority

Re: config files in spamasassin is unintended tlds :/

2018-11-05 Thread RW
On Mon, 05 Nov 2018 12:14:50 -0500 Bill Cole wrote: . I would guess that with some authoritative > servers refusing to serve invalid names and some resolvers refusing > to resolve them, it would be a low-yield tactic to use them to evade > filtering. Authoritative nameservers are potentially

Re: How to deal with time limit exceeded

2018-11-05 Thread Andreas Thienemann
On Mon, 5 Nov 2018, Henrik K wrote: prineg90 = priority -90 = BAYES rules. Right. Thanks for that. Is there a good mapping table one can consult? So your MySQL is too slow / bad settings / not using InnoDB etc. If you want easy solution, switch database to Redis and never worry about

Re: config files in spamasassin is unintended tlds :/

2018-11-05 Thread Kenneth Porter
--On Monday, November 05, 2018 12:14 PM -0500 Bill Cole wrote: FWIW, BIND 9.x (since 9.4-ish) will parse and load a zone with such an A in it, but complains and does not serve the record: NXDOMAIN for a normal query, no hint of it in a zone transfer. BIND's check-names directive controls

Re: How to deel with time limit exceeded

2018-11-05 Thread Henrik K
On Mon, Nov 05, 2018 at 08:48:47PM +0100, Andreas Thienemann wrote: > > The setup has a spamassassin 3.4.2 with a mysql database for bayes and to do > a minimum of logging. > > I've recently seen a lot of mail scans not completing due to running out of > time. The message I am seeing most often

How to deel with time limit exceeded

2018-11-05 Thread Andreas Thienemann
Hi, I've got a mailserver dealing with a moderate amount of mails... Say about 20k mails a day. The setup has a spamassassin 3.4.2 with a mysql database for bayes and to do a minimum of logging. I've recently seen a lot of mail scans not completing due to running out of time. The

Re: config files in spamasassin is unintended tlds :/

2018-11-05 Thread Bill Cole
On 5 Nov 2018, at 9:44, RW wrote: I created an A-record at Namecheap for a_b.mydomain.tld and neither firefox nor chromium had a problem with it. That's interesting and unfortunate because 'a_b' is unequivocally a violation of the syntax for hostnames. It may be acceptable as a DNS label,

Re: config files in spamasassin is unintended tlds :/

2018-11-05 Thread Henrik K
On Mon, Nov 05, 2018 at 02:44:29PM +, RW wrote: > On Sun, 04 Nov 2018 19:28:02 -0500 > Bill Cole wrote: > > > On 4 Nov 2018, at 16:27, Henrik K wrote: > > > > > Can someone actually register and use a domain with underscore in > > > it? > > > > No. > > > ... > > I support the concept of

Re: config files in spamasassin is unintended tlds :/

2018-11-05 Thread RW
On Sun, 04 Nov 2018 19:28:02 -0500 Bill Cole wrote: > On 4 Nov 2018, at 16:27, Henrik K wrote: > > > Can someone actually register and use a domain with underscore in > > it? > > No. > ... > I support the concept of not treating domain-name-like strings that > are not valid hostnames as if