Re: Increasing spam level for MX backup server?

(which is what triggers spamassassin) and the SA-filtered spam came through. As an order of magnitude, graylisting filters 80-85% of incoming mail. The rest is about 50-50 ham and spam. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf

Re: Quarantine processing...

utput to an awk script which generates and mails the report. It is not in a shape immediately usable anywhere (it does other local things, and relies on the site having mail aliases in NIS maps), but if you ask me personally I could send you excerpts. -- Lucio Chiappetti - INAF/IASF - vi

Re: Better Post Processing

by spamassassin because it is stopped by graylisting BEFORE). -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html

Re: Which milter do you prefer?

On Fri, 13 Mar 2015, Patrick Ben Koetter wrote: amavisd-new via amavisd-milter. That what's we got since 2006. Since 2011 spamassassin is second choice after graylisting (i.e. it rejects what graylisting let through)

Re: rule for restricting incoming email

On Wed, 11 Feb 2015, Matus UHLAR - fantomas wrote: On Tue, 10 Feb 2015, Rajesh M wrote: now i need to set a rule such that u...@abc.com can receive emails only from specific external domains and rest all should be rejected On 11.02.15 10:47, Lucio Chiappetti wrote: To me this seems a task

Re: rule for restricting incoming email

or addresses whitelisted, and have all the rest delivered to /dev/null. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html

too picky RBL sites ?

. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html Do not like Firefox =29 ? Get Pale Moon ! http://www.palemoon.org

Re: Domain ages (was Re: SPAM from a registrar)

at least in France and UK .. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html

Re: Verifying .procmailrc settings to delete high scoring spam messages

the sender. The rest (ok) is delivered normally. So all variations on the theme ... keep it for a while and have the system get rid of them ! -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy

Re: log sender IP

On Thu, 17 May 2012, Brent Gardner wrote: I'm hoping to track scores by sender IP. Do any gurus know how I can get the original sender's IP address into this log line? Can you get what you need from Postfix logs? I use sendmail, and spamassassin/amavis as milter, and I run all sort of

Re: new paradigm

On Wed, 23 Nov 2011, spamassas...@lists.grepular.com wrote: If a message comes in to my MTA with one of those Message-Id's in the In-Reply-To header, it bypasses the spam filtering because it is a response to a message that I sent what about if your message was stored in a folder of your

Re: new paradigm

On Wed, 23 Nov 2011, Christian Grunfeld wrote: Greylists do great job stoping robots but there are spammers with well configured MTAs who tries and tries and tries and bypass greylists. Since the frequency of users checking quarantine has also been mentioned: We've been running spamassassin

autolearn Re: major upgrade of spamassassin

On Wed, 18 May 2011, Lucio Chiappetti wrote: We are in the process of doing a long awaited and overdue upgrade of our servers (from Suse 9.2 to 11.4), which involves upgrading the (bundled) spamassassin (used with sendmail and amavis milter) from 3.0 to 3.3. We progressed in our migration

major upgrade of spamassassin

We are in the process of doing a long awaited and overdue upgrade of our servers (from Suse 9.2 to 11.4), which involves upgrading the (bundled) spamassassin (used with sendmail and amavis milter) from 3.0 to 3.3. - the new bundled spamassassin has a very simple local.cf. We had a local.cf

Re: Describing AWL

... the expression awl policy was used in late '800 to indicate the government policy of (selective) public expenditure cuts ... see the reference in my signature) :-) -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I

Re: Blacklist for spam-words

, quenches the particular kind of spam in a few days. http://sax.iasf-milano.inaf.it/~lucio/Procmail/ -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy

Re: new kind of spam (apparently from mailer daemon)

. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html

new kind of spam (apparently from mailer daemon)

it into the sa-learn crontab we use for spam which escapes spamassassin, or the way it is forged will cause problems (e.g. filtering legitimate mailer daemon reports ?) -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I

Re: Top Ten Rules

| +++---+ -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html

Re: Quarantine Management

, it is listed. I do keep the reports in a folder for a week, and I have also additional procmail-based personal spam filtering. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy

Re: Putting your dead domains to use

-existing domain and caused the appropriate sendmail error). Like the spammers had stored the MX somewhere. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy

Re: HTML in Messages

? -- --- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html --- () ascii ribbon campaign - against html mail /\ http

clarification on whitelist_from_rcvd

-- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html Multi pertransibunt et augebitur scientia Francis

Re: Pulling my hair out

and have no access to my institute server, I suppose I'll use SA at home (and possibly I'd even start tweaking some rules). I'd never trust a commercial ISP to do proper filtering ! -- Lucio Chiappetti - INAF/IASF - via

Re: Got dead domains that get a lot of spam?

the same machine for all domains), and continue sending to it. Of course our sendmail rejects it immediately with a cannot relay, since it interprets the non-existing (aka really dead) domain as an external one. But still they attempt ... -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I

Re: Blocking email with a valid internal destination address from outside.

: 10.0.0.0/8 accept to: a...@mydomain.com from: *reject But this is actually a nice suggestion. Could be done for sendmail with access db. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio

update Re: quirks with bayes ?

that both servers sa-learn the daily quarantine of both) Thanks to all for the hints. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html

Re: quirks with bayes ?

On Tue, 31 Mar 2009, LuKreme wrote: On 31-Mar-2009, at 11:13, Lucio Chiappetti wrote: And even resetting the AWL ... Why would you reset the AWL? I can't see any circumstance on which that would be a good idea. I had the impression that the latest category of spam going through (online

quirks with bayes ?

filter diverts them to /dev/null) ? -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html --- Nature on government cuts to research http

Re: quirks with bayes ?

On Tue, 31 Mar 2009, John Hardin wrote: On Tue, 31 Mar 2009, Lucio Chiappetti wrote: users MAY forward spam ... to ... a daily crontab ... for sa-learn ... Do you retain those messages? If not, you have no way to review how SA has been manually trained. NO. We did an initial training

Re: quirks with bayes ?

On Tue, 31 Mar 2009, John Hardin wrote: On Tue, 31 Mar 2009, Lucio Chiappetti wrote: I suggest you also consider either disabling autolearn, or push the learn-as-ham threshold lower. I would be glad to do the latter, Would that be one of those two in /usr/share/spamassassin/10_misc.cf

why did spamassassin block this ?

and then things went through without any record in awlst. -- Lucio Chiappetti - INAF/IASF - via Bassini 15 - I-20133 Milano (Italy) For more info : http://www.iasf-milano.inaf.it/~lucio/personal.html --- Nature on government cuts