Re: The most efficient SPAM implementation ever

Hi, Are you running sa-learn as the same user that spamd runs as ? Running sa-learn as root won't help the scores. Regards, Rick On 2020-10-11 10:03 a.m., Ramon F Herrera wrote: *Line of Defense No. 2:* Spamassassin. It have submitted over a thousand messages as follows: % sa-learn --spa

Re: Where is SA getting config info?

Hi, For the good of your blood pressure, just ignore h.rei...@thelounge.net I've plonked every thing from him into /dev/null so long ago I can't remember when I did it. Why he's still allowed to post here is beyond me. Regards, Rick On 2019-11-22 7:20 p.m., Jerry Malcolm wrote: Then I gues

Re: Is the SA Bayes implementation mathematically sound?

On 2018-12-24 12:39 p.m., Ian Zimmerman wrote: On 2018-12-23 17:02, Rick Macdougall wrote: I'm just going to jump in here and mention that I train my bayes in SA and in Thunderbird email client. Thunderbird catches 99%+ and SA catches under 60% with the same training data. Have you

Re: Is the SA Bayes implementation mathematically sound?

Hi, I'm just going to jump in here and mention that I train my bayes in SA and in Thunderbird email client. Thunderbird catches 99%+ and SA catches under 60% with the same training data. Take that as you will because, of course, there is mail that Thunderbird never sees due to SA rejecting

Re: New Install - Tons of Spam Getting Through

On 2016-08-18 2:10 PM, Jerry Malcolm wrote: Thanks for the quick response. I'll try to reply with what I know. But I purchased a package "SpamAssassin In A Box" from JAM Software. I ran the installer, and that's it. I'm sorry that I don't know more. But I don't know much about the inner work

Re: SA cannot block messages with attached zip

On 2016-05-20 11:00 AM, Reindl Harald wrote: Am 20.05.2016 um 16:50 schrieb Rick Macdougall: On 2016-05-20 10:36 AM, Paul Stead wrote: Second, the foxhole_js database is what you're looking for Paul On 20/05/16 13:11, Reindl Harald wrote: Am 20.05.2016 um 13:07 schrieb Dianne Skoll

Re: SA cannot block messages with attached zip

On 2016-05-20 10:36 AM, Paul Stead wrote: Second, the foxhole_js database is what you're looking for Paul On 20/05/16 13:11, Reindl Harald wrote: Am 20.05.2016 um 13:07 schrieb Dianne Skoll: On Fri, 20 May 2016 09:31:48 +0300 Emin Akbulut wrote: What do you suggest to fight these spams?

Re: Try my IXHASH

On 2015-12-09 11:58 AM, Marc Perkel wrote: On 12/09/15 05:50, Rick Macdougall wrote: Hi, The messages it flags are messages that would have been caught without it. About 2% of messages it flags are not seen by any other markers. Regards, Rick Any false positives? I suppose catching

Re: Try my IXHASH

On 2015-12-08 9:46 PM, Marc Perkel wrote: I'm confused. Are you saying it's catching the same spam messages you about the same amount? If they are new messages then it's doing well. On 12/08/15 12:43, Rick Macdougall wrote: Hi, Quick and dirty look. grep CTYME_IXHASH /var/lo

Re: Try my IXHASH

Hi, Quick and dirty look. grep CTYME_IXHASH /var/log/spamd/current | wc 1472058 79255 grep RAZOR /var/log/spamd/current | wc 1381932 73479 grep RCVD_IN_BL_SPAMCOP_NET /var/log/spamd/current | wc 1962744 97495 Almost all CTYME hits had a corresponding RAZOR hit.

Re: spamassassin logging

Hi, That information should be in the spamd log file. I don't know which Toaster you are using but mine is in /var/log/spamd/current Regards, Rick On 9/17/2015 3:27 PM, Rajesh M wrote: hi we are using qmailtoaster with spamassassin currently the spamassasin log details show as such is i

Re: sa-update cron failure

Hi, First HPUX 900 certified admin in Canada circa 1982. I too remember those days. Regards, Rick PS. Still under 50 :) Sent from my iPad > On Feb 5, 2015, at 7:37 PM, Martin Gregorie wrote: > >> On Thu, 2015-02-05 at 16:06 -0700, Bob Proulx wrote: >> >> Not quite. It was due to the phy

Re: Heads Up: Yahoo! goof

Hi, FTR = for the record as far as I know. Regards, Rick Sent from my iPad > On Feb 5, 2015, at 5:51 PM, Alex Regan wrote: > > > >> On 02/05/2015 11:11 AM, Axb wrote: >> >> adding FTR: > > Can you explain FTR? > >> Received: from [238.10.216.99] by web122903.mail.ne1.yahoo.com via HTTP;

Re: sa-learn from a remote imap folder

On 2014-09-12 1:24 PM, John Hardin wrote: On Fri, 12 Sep 2014, Reindl Harald wrote: Am 12.09.2014 um 15:26 schrieb Giles Coochey: On 12/09/2014 13:47, Rick Macdougall wrote: I have used imap-sa-learn.pl for years. Works great. Google imap-sa-learn.pl to get the perl source code

Re: sa-learn from a remote imap folder

Am Freitag, den 12.09.2014, 10:13 +0200 schrieb Axb: On 09/12/2014 10:05 AM, Marcus Schopen wrote: Hi, spamassassin and imap (cyrus) are running on different boxes. What is best practice to learn spam from a remote imap folder? Any good working scripts? Hi, I have used imap-sa-learn.pl for

Re: Filters Don't Seem to Be Learning

On 2014-07-23 3:05 PM, Asai wrote: Hi, I'm also not seeing any BAYES results in the Spam Status. Are you sure BAYES is turned on ? Regards, Rick That's a good question. As far as I can tell, it is. But is there a way to get a config dump from the command line? I have a feeling that Bay

Re: Filters Don't Seem to Be Learning

On 2014-07-23 1:59 PM, Asai wrote: Right, the AWL. Well, I think it gets added to the AWL because the spam scanning is failing... which is why it's not getting flagged as spam, and why it gets to my inbox where TB catches it, files it into my junk, and SA learn spams it nightly, but still no dic

Re: Who wants to trade data?

Err, I have received automated emails from Mark's service multiple times about compromised users. He and his services are definitely white hat, and have helped us knock infected users off line. Not sure what your problem is. Regards, Rick Sent from my iPad > On Feb 6, 2014, at 6:59 PM, Noe

Re: MariaDB instead of MySQL

Hi, One common bayes DB running MySql on one server. Spa001 running SA and MySQL plus auto learn Spa010 running SA no auto learn Spa011 running SA no auto learn Spa013 running SA with auto learn All Spas looking at the MySQL server on Spa001. Global bayes database btw, not per user as we are an

Re: MariaDB instead of MySQL

Hi, Running a 4 server cluster of SA servers with MySQL running on one. 2 running auto learn and the other two just doing queries. Looks like I average about 6300 queries a minute. No noticeable problems with it. Recently looked at Maria but we are in the middle of a move here, would love to

Re: Specify the user homedir in a non-standard setup (ISP)

On 27/02/2012 11:18 AM, Sandro Tosi wrote: On 02/27/2012 05:06 PM, Bowie Bailey wrote: On 2/27/2012 9:12 AM, Sandro Tosi wrote: Hello, our mail setup is kinda different than usual configuration: we have a lot of mailboxes all owned by a single userid. The directories tree is composed using a pr

Re: Yahoo sent 5.5x as much spam as any other legit provider in April

On 11/05/2011 4:01 PM, dar...@chaosreigns.com wrote: http://www.chaosreigns.com/dnswl/dnswlabusehistory.svg Percentage of total spam from legitimate email providers in April as reported as abuse to dnswl.org: 35.5% yahoo.com 6.4% google.com 2.9% tp.pl 2.3% tin.it 1.8% messagelabs.com

Re: [OT] If you can read french please...

On 11/04/2011 8:58 AM, Michelle Konzack wrote: If you can read french please look in this message read the "Subject:" and then the SA results. :-D How big must this idiots be? :-/ Note: They have bombed my domains and

Re: spamassassin or simscan ???

On 27/07/2010 1:41 PM, Suhag P Desai wrote: Logs are as per below... @40004c4f187213960bb4 tcpserver: pid 4844 from 192.168.10.70 @40004c4f1872139a2294 tcpserver: ok 4844 spd:192.168.30.195:25 :192.168.10.70::60052 @40004c4f187216259034 CHKUSER accepted sender: from remote rcpt<>

Re: spamassassin or simscan ???

On 27/07/2010 1:21 PM, Suhag P Desai wrote: Thanks Rick, Now my tcp.smtp file looks like below [r...@spd tcprules.d]# cat tcp.smtp 127.:allow,RELAYCLIENT="",QMAILQUEUE="/var/qmail/bin/simscan",DKSIGN="/var/q mail/control/domainkeys/%/private" 192.168.10.:allow,RELAYCLIENT="",QMAILQUEUE="/var/qm

Re: spamassassin or simscan ???

On 27/07/2010 1:03 PM, Suhag P Desai wrote: Hi all, I can scan all the attachment as per rule define in simcontrol and tcp.smtp. But I am not able to detect the spam mail as define in rule set of /etc/mail/spamassassin/ ..please help [r...@spd tcprules.d]# cat tcp.smtp 127.:allow,RELAYCLIENT=

Re: Worthwhile to scan outgoing?

On 21/06/2010 11:39 AM, Adam Moffett wrote: My philosophy in the past has always been not to scan outgoing emails because my users are not likely to be spamming. However, a couple of issues recently with spambots and SMTP AUTH with weak passwords has me reconsidering that stance. Is anyone here

Re: Question URIBL

On 08/04/2010 2:00 PM, Frederic De Mees wrote: Hello All, It seems that the rule URIBL_BLACK is never matched in my installation, even when it should. My server is a debian Lenny, postfix, spampd (policy daemon), spamassassin 3.2.5-2+lenny2 When I run 'spamassassin -D < some_spam_mail', the rul

Re: Increase in scan time from 3.3 to 3.3.1

On 24/03/2010 4:09 PM, Kris Deugau wrote: Michael Scheidell wrote: several more RBL's, check your dns performance? Looks like the new PSBL DNSBL is a bit slow. I wonder if the new load from SA 3.3 is the cause? A quick walk through the SA log shows it isn't helping much here, so I've disable

Re: Increase in scan time from 3.3 to 3.3.1

On 24/03/2010 2:40 PM, Michael Scheidell wrote: On 3/24/10 2:23 PM, Rick Macdougall wrote: Hi, Any one have any idea what might cause an increase of scan times when going from 3.3 to 3.3.1. I've upgraded one server and the average scan time is now 4.3 seconds. The 3 other servers

Re: Increase in scan time from 3.3 to 3.3.1

On 24/03/2010 2:40 PM, Michael Scheidell wrote: On 3/24/10 2:23 PM, Rick Macdougall wrote: Hi, Any one have any idea what might cause an increase of scan times when going from 3.3 to 3.3.1. I've upgraded one server and the average scan time is now 4.3 seconds. The 3 other servers

Increase in scan time from 3.3 to 3.3.1

Hi, Any one have any idea what might cause an increase of scan times when going from 3.3 to 3.3.1. I've upgraded one server and the average scan time is now 4.3 seconds. The 3 other servers still running 3.3 average 1.38 All running Centos on exactly the same hardware. Thanks in advance. R

Re: how can i finetune to spamassassin to handle spams

On 28/01/2010 9:52 AM, Bowie Bailey wrote: ram wrote: * 3.4 FH_DATE_PAST_20XX The date is grossly in the future. This rule started causing problems at the beginning of the year and was fixed. Have you run sa-update to get the latest rules? And don't forget to restart spamd and, if need

Re: ANNOUNCE: Apache SpamAssassin 3.3.0 available

On 26/01/2010 11:33 AM, Warren Togami wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.0 Introduction This is a major release, incorporating enhancements and bug fixes that have accumulated in a year and a half of development since the 3.2.5 release. Apart from some new

Re: Problems with whitelists and simscan

Jose Luis Marin Perez wrote: Hi Rick, Thanks for your answer. So for these cases as could do to work whitelists? It can be solution in spamassassin or simscan? > > Hello, > > When more than one recipient for an email is received simscan uses the > default user when passing to spamd. So i

Re: Problems with whitelists and simscan

Jose Luis Marin Perez wrote: Dear Sirs I noticed a problem with Spamassassin whitelists and Simscan: Spamassassin is configured to use white lists using mysql (for example) *mysql> select * from userpref; +--++-++ | us

Re: rbl checks not running

Mark Hedges wrote: As I've already confirmed by including the debugging log attachment in my first message, the test rule is loaded, it expects to be looking at spammers.rbl.dmz. (I have a somewhat complex setup due to multiple scanners with different preferences and mostly shared options.) Tr

Re: Constant Contact

Adam Katz wrote: Does anybody here know anything about the legitimacy of Constant Contact ? Hi, Very legitimate. We have 4 or 5 clients who use it to send out emails to their subscribers. How ever, it can and does get abused by spammers from

Re: Hostkarma: to be or not to be in SA defaults

Yet Another Ninja wrote: On 9/30/2009 10:25 PM, Raymond Dijkxhoorn wrote: I sincerly hope people realize its a serious thing, and take this mail to improove things and setups. And please dont include lists that are not up to the task yet). This may be of interest.. http://www.uribl.com/mirror

Re: Non scoring 'Bank Deposit' spam

John Hardin wrote: On Mon, 14 Sep 2009, LuKreme wrote: On 14-Sep-2009, at 05:24, --[ UxBoD ]-- wrote: If the OP cannot refrain from that sort of foul language when presented with counter arguments then please ban. The list would be far happier IMHO. Based on his reply to LuKreme, +1 on a

Re: Rule PTR != localhost

Benny Pedersen wrote: On Thu 03 Sep 2009 03:05:50 PM CEST, Justin Mason wrote On Thu, Sep 3, 2009 at 12:18, Benny Pedersen wrote: On Thu 03 Sep 2009 07:19:35 AM CEST, Clunk Werclick wrote Forgive the stupidity of the question, but I'm not sure how to, or even if it can be implemented? forgive

Re: Writing spamassassin rules

Kevin Miller wrote: I'm sure I'm missing the obvious, but I can't seem to find a guide to writing spamassassin rules on the spamassassin web page. I'd like to write some custom rules, and some documentation would be really handy. Anybody got that URL handy? http://wiki.apache.org/spamassa

Re: [sa] Re: Slightly OT - Spam opprortunities in SMTP-AUTH

Charles Gregory wrote: On Mon, 10 Aug 2009, Rick Macdougall wrote: I can't speak for others but at my main job (20K+ email accounts) it happens about once every 2 month's or so. Some how the spammer gets a hold of someone's password and either uses smtp-auth or webmail to

Re: Slightly OT - Spam opprortunities in SMTP-AUTH

Matus UHLAR - fantomas wrote: On 10.08.09 11:24, Rick Macdougall wrote: I can't speak for others but at my main job (20K+ email accounts) it happens about once every 2 month's or so. Some how the spammer gets a hold of someone's password and either uses smtp-auth or webmai

Re: Slightly OT - Spam opprortunities in SMTP-AUTH

Charles Gregory wrote: On Sun, 9 Aug 2009, Res wrote: To be truthful, I have been doing this by default here, as well, but find that it creates some problems for some users. So I am thinking about opening up SMTP-AUTH ports. Trouble is (and its semi-relevance to this list) I have to wonder if

Re: Backscatter.org used as RBL??

Marc Perkel wrote: What they should do is return different codes to indicate what got them on the list. SAV is not backscatter. So if it is from <> and there is DATA then it's someone who is sending bad bounce messages to faked sender addresses. But if there is nod DATA then it's SAV. These s

Re: OT: Website protection

Mikael Bak wrote: schmero...@gmail.com wrote: One of our client's websites gets hacked frequently - 1x per month - usually with some kind of phishing scam. We've also had some problems lately. After deep investigations we saw that in 100% of the cases there were no break-ins at all. Not in th

Re: good Spamassassin Summary report

Daniel Schaefer wrote: I have searched far and wide for a good Spamassassin report using numerous keywords in Google searches, but I can't find the one that fits my needs. I am looking for a script that can be run via cron job on a daily basis. I would pass the script the location of the mail l

Re: Spoofed Email

Benny Pedersen wrote: On Tors, Juni 18, 2009 20:36, Rick Macdougall wrote: I'd recommend upgrading to the latest version (3.2.5) and running and sa-update to get the latest rules. how will this help on spoofed mail problem ? The improved rules should help catch them. Rick

Re: Spoofed Email

Jeff Drury wrote: SA is working for the most part beyond expectations, the only problem I’m having is filtering spoofed email address (i.e. valid_u...@ourdomain.com). I am able to filter out non-valid user addresses (i.e. spam...@ourdomain.com). I run SA-Update daily, have piped well over 500

Re: two databases

Michael Grant wrote: On Fri, Jun 5, 2009 at 16:08, Micah Anderson wrote: Michael Grant writes: I did not realize one could store the bayes scores in sql. So I'd store the bayes scores on a third server and let both mxes use the same database. I did this, but my bayes in mysql and pointed t

Re: upgrad spamassassin

hateSpam wrote: Thanks for reply. Sorry, I should say that before. I am using CentOS Linux 5. For mailing delivery we are using Postfix version 2.3.3 and Procmail. Yes, but the most important question still remains. How did you originally install SpamAssassin ? Regards, Rick

Re: upgrad spamassassin

McDonald, Dan wrote: On Wed, 2009-05-27 at 07:44 -0700, hateSpam wrote: Running on... [ ] Redhat linux version 6.0 [ ] Minix [ ] OpenVMS [ ] Sun/OS 2.0 [X] Timex Sinclair ZX81 [ ] Windows NT 3.02B [ ] Something else? Installed using... [ ] tarball install [ ] CPAN [ ] RPM [ ] deb [ ]

Re: Spamcop Delays?

Clayton Keller wrote: I wanted to see if others began experiencing some delay in lookups to bl.spamcop.net -- roughly 4+ second lookups. Not here, moving along just fine. Large volume server with dnscache. Regards, Rick

Re: learning from IMAP spam collection

Michael Monnerie wrote: Finally measured again, it takes 1h7m to fetch from imap plus remove all markups: # time fetchmail -kasnp IMAP --folder $spamfolder--user $spamuser -m "formail -s |spamassassin -d >>/tmp/x" $mailhost real67m10.352s user51m41.350s sys 3m27.170s mfg zmi Why

Re: Increase in Spam since 7am EDT

Randy wrote: Rick Macdougall wrote: Hi, I'm seeing a massive increase in connection attempts since 7am EDT this morning. Most is being rejected because of not existing users but the majority that is getting through is hitting "Sanesecurity.Casino.11228.UNOFFICIAL". Back s

Increase in Spam since 7am EDT

Hi, I'm seeing a massive increase in connection attempts since 7am EDT this morning. Most is being rejected because of not existing users but the majority that is getting through is hitting "Sanesecurity.Casino.11228.UNOFFICIAL". I'm seeing this across 5 different servers, all hosting diffe

Re: trust SMTP authenticated users

Magnus Holmgren wrote: On lördagen den 25 april 2009, Arthur Kerpician wrote: Hi, I'm facing the following problem lately. Some of my users are connecting to the mail server (qmail) through mobile phones and the leased IPs from the GSM operator are blacklisted in spamhaus and spamcop. So, they a

Re: Why is the advertising for certain "berry" not caught

Igor Chudov wrote: I get a shipload of spams like this one: http://igor.chudov.com/tmp/spam007.txt These advertise certain berries, but also other equally worthless gimmicks. These spammers started "snowshoeing" but as time went on, predictably they became more brazen. I have the latest ubun

Re: sa-compile

jp wrote: It only takes a minute or three on my systems depending on load. 21 seconds on a zero load dual core virtual machine with 2gb ram. On Wed, Apr 15, 2009 at 08:56:22AM +1000, Res wrote: Is there a method of speeding this beast up? I can build four entire kernels and their modules from

Re: webmail phishing?

info-spamassassin-t...@cs.utexas.edu wrote: Hi, Before I try to roll my own, does anyone have a set of rules or a plugin designed to detect all these webmail account phishes. You know -- the kind that pretend to be a webmail administrator who informs the user his/her webmail account is being u

Re: negative scores for spam

Hoover Chan wrote: Can someone point me to what I can do to my Spam Assassin config for a situation like the following? X-Spam-Status: No, score=-1.496 tagged_above=-10 required=6.6 tests=[AWL=-1.103, BAYES_00=-2.599, HTML_MESSAGE=0.001, URIBL_BLACK=1.955, URIBL_GREY=0.25] That

Re: spam bots guessing mx???

J.D. Falk wrote: Bazooka Joe wrote: Last week all worked as expected. The hundreds of spam droped to 0; until this weekend. Looking at the headers, mail is going directly to the mail.domain.tld even though it isn't listed as mx anywhere. Yeah, I've heard other stories of spam bots caching

Re: Bayesian woes.

Adam Harrison wrote: Our database cannot keep up and we’re trying to figure out why. Symptoms: - Nagios is reporting too many processes, 100+ waiting to execute - Thousands of slow queries over 1 sec The facts: - We have a cluster of four mail servers runni

Re: I'm thinking about offering a free MX backup service

Marc Perkel wrote: Thanks Aaron, that is a good point. But I'm running Exim and I think I can code it so that it will not generate backscatter. I'll have to design that in up front. Interesting, how would you do that without dropping email (which is BAD). Rick

Re: Distributing the processing load

Micah Anderson wrote: Our poor spamassassin machine is not able to keep up with the mail load. We are constantly getting "prefork: server reached --max-children setting, consider raising it" errors, and our max-children are already set at the max that this machine can handle (50). Since we are

Re: Any other tuning tricks or is this it?

Len Conrad wrote: My guess is that you have too many processes running for the amount of ram you have. each vscan process take 60 - 75 MB. When the machine is way behind, there is 200 - 300 MB of free + inactive RAM. On this fbsd 6.2, "Top version 3.5beta12" doesn't show the swap info, "Swap:

Re: DnsBlocklists not working?

Tomasz Chmielewski wrote: Yes, I tried running spamassassin -D < /tmp/email.eml It checks against URIBL if there is a link inside the message body. It doesn't seem to check against DNSBL at all. Can you post a link to your .cf files and the spamd run arguments ? Regards, Rick

Re: is sa-update doing its thing?

Nathan wrote: Hi guys.. I would have expected to find this one so quickly, I tell you, either my google skills are on hold this week, or its not a common question at all!! How do i tell is sa-update is working? I assume either i can check a file date somewhere, or a log file, but tried look

Re: Another low scoring obvious spam message

Skip Morrow wrote: On Thu, September 18, 2008 9:33 am, John Hardin wrote: On Thu, 18 Sep 2008, Skip wrote: What can I do to increase my chances on spammies like this one: http://pastebin.com/m5f5d11e0 (1) train your bayes with it I am using bayes, but it didn't catch it. I was quite surp

Re: using RHEL / CentOS / Fedora perl?

Justin Mason wrote: have you seen this? http://blog.vipul.net/2008/08/24/redhat-perl-what-a-tragedy/ That bug in Red Hat perl will almost definitely slow down SpamAssassin, too, I would say. Can anyone verify? --j. I can verify that CentOS release 4.6 (Final) with perl, v5.8.5 built for

Re: spamd on a remote server - user_prefs

Jonathan Nichols wrote: Hi. I'm testing a setup with DirectAdmin boxes and a dedicated spamd box, but so far I've found that spam_required is a global setting and you can't seem to send user_prefs across since they live on the spamc server. Is there a workaround for this at all? Can SA be tol

Possible denial of service bug ?

Hi, I've got have a message that seems to tie up spamd forever. I'm not sure if it's my setup or spamd itself. I run a very generic stable release setup with bayes in mysql, although the hang up does not appear to be bayes. Would one of the developers like to contact me off list to get a co

[OT} Spam in qmail queue

Somebody will send SPAM to [EMAIL PROTECTED] , and: - Spamassassin marks it as SPAM (which is correct) - But user doesn’t exist on somedomain1.com (it happen) - So qmail is storage this mail in queue as long as it can. My question is, what is the best practice and ho

Re: multiple SA machines running against same Bayes-DB

Koopmann, Jan-Peter wrote: Hi, is there a simple way of using the same Bayes-DB (mysql based) for multiple Spamassassin installations concurrently? Can I just point all machines to the same DB or will this lead to corruption? I've been doing it like that for over 2 years without a probl

Re: FW: Why is this spam passing my SA (counterfeit goods)

Josie Walls wrote: Hello, Would this group agree that requiring 5 hits in order to classify an email as spam is too conservative a number? I suspect ISPs have their filter settings at 3 or less. Any insight would be appreciated. I'm an ISP and we use 5 to mark and 10 to reject at smtp time

Re: Spamassassin not checking a particular Email.

Michael Hutchinson wrote: Hi all, Another query.. another busy SA day. I have a piece of Spam that is getting through to one of our biggest clients. I have written rules to tag this Spam, but it is as if it isn't even being checked by Spamassassin. I have checked our qmail control files to ens

Re: rule checking environment variable

Miguel Angel wrote: The latest versions of simscan will not run spamc on email where RELAYCLIENT is set. This can happen via smtp auth or via tcp.smtp. You might want to take this over to the simscan mailing list and post your ./configure options so we can help you figure out why it is sca

Re: rule checking environment variable

Miguel Angel wrote: Hello, i am using spamassassin 3.2.3 with qmail and simscan, the problem i have it is that my authenticated smtp users have any mails rejected because a high score, i know i can use other ip not listed in mx of the domains to create a server with required authentication

Re: [OT] Yahoo Deferred

Tony Bunce wrote: Sorry for the Off Topic thread but I’m at a loss. Is anyone else having issues sending mail to Yahoo? They are returning 421 Message temporarily deferred to every message my servers try to send. My server then retries like it should but yahoo never accepts the messag

Re: FW: Suggestions to block this spam

Bazooka Joe wrote: Do you think anyone has notified blogspot.com that their site is being abused by spammers? I have submitted urls 4 or 5 times to them. I've never heard back but the sites did vanish pretty quickly. You can do it here http://help.blogger.com/?page=troubleshooter.cs&prob

Re: Feedback on 3.2.4

Jorge Valdes wrote: No problems with it at all here (around 7 servers upgraded) and the performance is greatly increased. I went from a 1.4 second average scan time to 0.6 seconds average. HTH, Rick Is this without network tests? Because on my server I had Begin : 2008-01-01 End

Re: Feedback on 3.2.4

Skip wrote: Other than the initial reports of performance boost from 3.2.4, I haven't seen much discussion on it as yet. Perhaps it is still too soon to know, but has anyone been seeing other benefits - or identified potential problems? No problems with it at all here (around 7 servers upgrad

Re: How to skip checking emails over a certain size?

Henry Kwan wrote: Hi, Is there a way to have SA skip messages over a certain size? I tried using this procmailrc recipe: :0fw * < 256000 | /usr/bin/spamc But it resulted in this error: spamd[2492]: razor2: razor2 check failed: razor2: razor2 had unknown error during check at /usr/lib/perl5/s

Re: Apache SpamAssassin 3.2.4

James Lay wrote: New upgrade is running GREAT here :) James Same here, seems quite a bit faster! Great job! Rick

Re: spamc/spamd failure

Michael Grant wrote: I'm running 3.2.3. I'm noticing that spamc/spamd fails when it's presented large messages containing rather large mime attachments (like more than a megabyte or so). When I run the messages through spamc by hand, it returns immediately with a not-spam result with headers li

Re: Score all emails and delete some of them

Chris wrote: Does anyone know if there's a way to score *all* emails at the server with scores from 0-100, then delete all emails at the server with scores of over 10 and deliver the rest with the scores in the subject title please ? Any help much appreciated. Chris. simscan for qmail can do

Re: spamd throughput issues

Mark Rigby-Jones wrote: On 9 Dec 2007, at 21:40, Steven Stern wrote: Have you tried running a local caching name server? That can cut down on times to do repetitive name lookups. Yes indeed, it's something we've always had on mail servers even before we had SpamAssassin, for exactly that rea

Re: how to auto create spam folder in in webmail ( before ise can log in )

Jari Fredriksson wrote: HI I had a query, i am using a webmail interface called squerrel mail , i need to make changes on the ./conf.pl file ( folders option ) so that when the user first time logs a folder called spam is already created . can this be possible ?? Agnello . G .Dsouza

Re: uribl.com implementing ACLs

Oli Schacher wrote: I've just heard that uribl.com is implementing ACLs for heavy hitters. For those running ISP/ASPs doing millions of queries you may want to watch your logs. They not blocking queries (yet?) but return a "REFUSED" I believe we are already blocking some major heavy hitters

MIPSpace

Hi, Anyone ever hear of or use them? www.mipspace.org Looks like they block commercial senders. Regards, Rick

Re: Automatic Deployment

Rense Buijen wrote: Hi Group, I was wondering, setting up a mailserver with spamassassin and optionaly amavis and/or mailscanner takes a big amount of time if you want to do it right. Is there a system or set of scripts that can speed things up and maybe with some dialoques to configure a deb

Re: List of 600,000 IP addresses of virus infected computers

Marc Perkel wrote: Duane Hill wrote: On Mon, 10 Sep 2007 at 10:26 -0700, [EMAIL PROTECTED] confabulated: I've developed an extremely accurate of detecting virus infected spam zombies. I think it's 100% accurate can catches them on the first try. Here You think it's 100% accurate? What abo

Re: [OT] Seeing increase in smtp concurrency ?

Rajkumar S wrote: Hi, Does any one seeing increasing smtp concurrency for the past couple of weeks? I run couple of (qmail/simscan/spamassassin) mail servers and all experience the same problem. The spam does not increase, but this is hogging my mail servers. Probably a new crop of spamming tool

Re: is it possible to setup SA in a different machine?

Linooks wrote: I have no idea, but I think the server uses simscan to call clam and SA. I hope that helps.. If you are using simscan you can add [EMAIL PROTECTED]:spam=no,clam=yes to the /var/qmail/control/simcontrol file and then run /var/qmail/bin/simscanmk. [EMAIL PROTECTED] is the em

Re: completewhois

Greg Skouby wrote: With SA-3.2.0 I seem to be getting sub 5 second scan times pretty regularly but when I upgraded to SA-3.2.3 I was lucky to get sub 10 second. I flipped on debugging and see a bunch of these messages: Thu Aug 16 15:22:53 2007 [9050] dbg: dns: timeout for whois, __RCVD_IN_WHOI

Re: Bottleneck with external tests

Claudia Burman wrote: SM wrote: At 09:11 15-08-2007, Claudia Burman wrote: Since two days ago I have a huge perfomance problem. I think it is related to external tests, because when I disable them everything comes to normal. But the amount of spam that enters is unacceptable by our users. V

Re: ANNOUNCE: Apache SpamAssassin 3.2.3 available

Robert - eLists wrote: Check in a day or so. Last time there was a release update someone posted a good link that I cannot find in the list archives quite yet. Someone please feel free to repost. Thanks! - rh I just downloaded it from here. http://apache.mirror.rafal.ca/spamassassin/so

Re: How would you provide a 554 rejection notice for spam?

John D. Hardin wrote: On Tue, 31 Jul 2007, mouss wrote: running SA at smtp time requires that the client does not timeout. so you'd better scan fast! you're also more subject to DOS (your smtp listeners are busy). compare this to queue and filter... okay, here's a sick idea: (1) MTA complete

Re: How would you provide a 554 rejection notice for spam?

Hi, mouss wrote: Rick Macdougall wrote: simscan correctly uses an SMTP REJECT (55x code during the smtp conversation) and it is also possible to use custom reject messages with simscan so the sender, if any, knows exactly why the message was rejected. I have yet to see a good

  1   2   3   4   >