Quarantine messages with SA and access with web-frontend?

2007-06-10 Thread Postmaster (Patrick von der Hagen)
Hi all, I hope to replace a proprietary antispam-appliace with SA but have one annoying requirement: the current one keeps spam in a quarantine which users can access with http. Using that web-frontend they can retrieve quarantined messages. Do you know of any software (preferably open-source)

Need webfrontend for quarantine based on spamassassin

2007-06-08 Thread Patrick von der Hagen
Hi all, I might soon be able to replace a proprietary antispam-appliance with a normal spamassassin-setup. However, the current solution quarantines messages considered suspicious and offers a webinterface for the endusers to access the special quarantine-store. While I don't like such a setup at

Re: First timer

2006-03-15 Thread Patrick von der Hagen
Ascensionwow wrote: I checked and my hosting company said EXIM. Does that make sense? When I look in cpanelX I can see there's a path to sendmail though. So maybe sendmail is the right answer? Regardless, they said the MTA software is EXIM. Hope that helps. Exim can invoke procmail but does

Re: SORBS unreasonable

2006-02-28 Thread Patrick von der Hagen
Clay Davis wrote: Maybe #3, in a strictly dictionary since of the word, but I doubt it. Never #2; SORBS holds no official position or power. When you make an accusation of extortion, you better be using the legal definition. I'm no lawyer, but I am pretty sure the legal definition involves

Re: Plain text spam not scoring

2006-02-23 Thread Patrick von der Hagen
Patrick Sneyers wrote: Op 21-feb-06, om 16:08 heeft Matt Kettler het volgende geschreven: Patrick Sneyers wrote: These don't hit very much in my setup. They get caught with the new Reverse-Check feature in CommuniGate. Do you know what this test does? I've been getting wuite a few of these

Re: bayes question (sa-learn)

2006-02-15 Thread Patrick von der Hagen
Philipp Snizek wrote: [...] However, I fear SA learns that headers coming from my internal MTA could be spam and so causing false results on real spam. Exactly. Forwarding e-mail breaks the original information and has to be avoided. What experiences have you made or how have you solved

Re: Antwort: Re: [exim] Exim4 and SA: Overloading the system

2006-01-18 Thread Patrick von der Hagen
[EMAIL PROTECTED] wrote: [...] Uhm, I wonder were you got this information from... It was quite some time ago... early Pentium 1, IIRC. I just hate oversimplifications and adding more RAM will certainly help is certainly wrong. I did mention several scenarios which might cause his problems

Re: strange bug, filling syslog

2006-01-04 Thread Patrick von der Hagen
Justin Mason wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 hi Patrick -- this message: Jan 2 23:09:25 mail7 spamd[16004]: spamd: copy_config timeout, respawning child process after 9 messages at /usr/spamassassin/current/bin/spamd line 96 9. is troublesome. What version of

strange bug, filling syslog

2006-01-03 Thread Patrick von der Hagen
userHi all, I've been surprised by an nagios-alert that my syslog-partition was running full. In Fact, in about 18 hours I got 26GB of syslog, all done by spamassassin. I installed Spamassassin in October and hardly changed anything since then (just some scores, some additional tests, but

Re: Confusing X-Spam-Status header

2005-12-29 Thread Patrick von der Hagen
tom wright wrote: This dosnt seem to have solved the issue. I'm using the exiscan-acl-4.42-27.patch (http://duncanthrax.net/exiscan-acl/) so exim send mails direct to spamassassin at smtp time. I'm no expert here but looking at the code it seems that this passes the message direct to spamd.

Re: sender-valid SMTP callbacks (Re: Does tuxorama.com sound fa miliar to anyone?)

2005-12-25 Thread Patrick von der Hagen
Tony Finch wrote: [...] I'm still working on a way to do this - I'm sure it's not impossible, but I haven't had much success yet. Ideally, the Linux machine would do an LDAP query to the Exchange server, but unless you can help me figure out how to do it, then I guess I'll just remain a

Re: Scoring for MAPS

2005-12-16 Thread Patrick von der Hagen
Kai Schaetzl wrote: Matt Kettler wrote on Mon, 12 Dec 2005 20:17:04 -0500: Using greylisting you'd delay their mail, but they'd be able to deliver even if they still are in the RBL if they retry after the greylist timer expires. That makes only sense if you greylist *only* hosts on these

University diplomas are back :-(

2005-10-11 Thread Patrick von der Hagen
Hi all, today I got lots of University diploma-spams, passing SA 3.1.0 easily. :-( 1.4 HTML_10_20 BODY: Message is 10% to 20% HTML 0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60% [score: 0.5002] 0.0 HTML_MESSAGE

False positives when using Outlook on Windows Mobile?

2005-10-11 Thread Patrick von der Hagen
Hi all, I received a mail today being classfied as spam. It's a perfeclty valid mail and the users claims to have sent it using Outlook for PocketPC (Windows Mobile), which passed it to an exchange-server. The pocket-pc is running Windows Mobile 2003 2nd edition, 4.21.1088 (Build 14132).

local cache of njabl.org: combined vs. dnsbl

2005-10-09 Thread Patrick von der Hagen
Hi all, I consider creating a local cache of njabl.org using rbldnsd. I can rsync their zones-information to my server, but their installation-instructions (http://combined.njabl.org/rsync.html) tell me that I get dnsbl.njabl.org. That's of littel benefit, since SpamAssassin accesses

Re: local cache of njabl.org: combined vs. dnsbl

2005-10-09 Thread Patrick von der Hagen
Jeff Chan schrieb: [...] The zone data for both zones is in their rsync directory. The dynablock data is in the rbldns.dynablock.easynet.nl file, so you would modify your rbldnsd config: I was confused about the filename and ignored rbldns.dynablock.easynet.nl. The njabl-Homepage mentioned

Re: Explosion in uk.geocities.com spam

2005-10-08 Thread Patrick von der Hagen
Kenneth Porter schrieb: Lately I've been seeing quite a bit of uncaught spam with a link to uk.geocities.com. Using 3.1.0 release with net tests. Here's my Same here, so I decided to add some points to uk.geocities.com-URLs. I'm assigning high scores if such a link is on a line by itself and

Re: 3.1.0 upgrade/installation difficulties

2005-10-08 Thread Patrick von der Hagen
Gregory P. Ennis schrieb: Everyone, I upgraded from 3.0.3 to 3.1.0 and have had a bunch of problems. I finally got a good install, but could not do it via cpan. There were many modules that I had to manually install. I have had it active for about a week and every night for some reason it

Re: Bombarded by German political spam

2005-05-15 Thread Patrick von der Hagen
Raymond Dijkxhoorn wrote: [...] This is the complete list so far: [...] Subject: Multi-Kulturell = Multi-Kriminell -- CU, Patrick.

Re: memory-usage going BOOM

2005-05-05 Thread Patrick von der Hagen
Dennis Davis wrote: [...] Some on this list recommended reducing --max-conn-per-child from the default of 200 to reduce possible memory leakage in earlier versions of SpamAssassin. I doubt that this is a problem now, but it might be worth trying as a precautionary measure. I am absulotely CERTAIN

Re: memory-usage going BOOM

2005-05-05 Thread Patrick von der Hagen
Justin Mason wrote: [...] on 3.1.0 or 3.0.2? 3.0.2 [...] Are you limiting the size of messages being passed to spamd? Scanning The limit is 200k. as far as I know, there is not a remotely-exploitable bug here. Obviously these would be more serious and we encourage those to be reported on the

memory-usage going BOOM

2005-05-04 Thread Patrick von der Hagen
Hi all, I've been using SpamAssassin 3.0.2 for quite some time (about three month) on my mailservers and so far I didn't notice any problems. Load and message-throughput have been quite constant. However, yesterday one of my servers went BANG, due to lack of memory. First I suspected Bind9, but