Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
Hi, On Mon, Jan 23, 2012 at 12:29:29PM -0500, Kevin A. McGrail wrote: > My thoughts were definitely the threads in amavis getting mixed up. > I would definitely look at that path because I'm sure if you do > spamassassin -t -D on the mbox format email post-amavis, you'll find > it doesn't repeat

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
Hi, On Mon, Jan 23, 2012 at 12:19:52PM -0500, dar...@chaosreigns.com wrote: > On 01/23, Toni Mueller wrote: > > I do see this IP number several times, but it tried to send a completely > > different email to someone else on my server. > > I was just about to ask if it m

Re: ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
On Mon, Jan 23, 2012 at 11:59:43AM -0500, Kevin A. McGrail wrote: > > Am I looking at a bug in SA? And/Or, how do I debug this, please? > Baffling. Checking your maillogs, you don't see that IP anywhere? I do see this IP number several times, but it tried to send a completely different email to s

ham marked as spam: bogus IP in report

2012-01-23 Thread Toni Mueller
Hi, recently, my spamassassin started to score system messages as spam, mentioning IP numbers not in the email: Return-Path: Delivered-To: xx...@oeko.net Received: from localhost (localhost [127.0.0.1]) by w3.oeko.net (Postfix) with ESMTP id AB1E725CEA for ; Sun, 22 Jan 2012 0

Re: SpamTips.org: Why run your own DNS server?

2011-07-05 Thread Toni Mueller
Hi, On Tue, 05.07.2011 at 07:18:30 +, Jason Ede wrote: > Andreas Schulze [mailto:s...@andreasschulze.de] wrote: > > - bind (off course) although I'm sure that it was meant in a different way, "off course" hits the nail right onto the head, imnsho. > Are there any figures on the relative

Re: SpamTips.org: Why run your own DNS server?

2011-07-04 Thread Toni Mueller
Hi, On Mon, 04.07.2011 at 13:23:42 +0200, Axb wrote: > >Well, together with the auth server it creates an "ecosystem" with > >some (limited) vendor lock-in capability. > > "vendor lock-in" ? be explicit, please. last I looked PowerDNS highlighted some custom DNS RR types (on the wire) that wer

Re: SpamTips.org: Why run your own DNS server?

2011-07-04 Thread Toni Mueller
Hi Warren, On Mon, 04.07.2011 at 01:03:46 -1000, Warren Togami Jr. wrote: > I heard others recommend unbound, but I haven't tried it yet. Is it > more RAM efficient than other alternatives, and fast? I haven't specifically conducted tests about its memory efficiency, but I do use it on severa

Re: SpamTips.org: Why run your own DNS server?

2011-07-04 Thread Toni Mueller
Hi Warren, On Mon, 04.07.2011 at 00:46:15 -1000, Warren Togami Jr. wrote: > http://www.spamtips.org/2011/07/spamassassin-why-run-your-own-dns.html > > Anyone have any better tips of an alternate DNS resolver, or > configuration options to improve this suggested configuration? while I do agree

Re: High Performance Bayes Database Configuration?

2011-06-21 Thread Toni Mueller
Hi, On Tue, 21.06.2011 at 07:30:51 -0700, Marc Perkel wrote: > Thanks David but I need real time updating and it's spread across > multiple servers. So need PostgreSQL or MySQL. just a shot in the dark: Maybe you can use mnesia, which is distributed and should be _quite_ fast. It's not SQL, ho

Re: Server site-wide installation HOWTO

2011-06-15 Thread Toni Mueller
Hi, On Wed, 15.06.2011 at 08:35:09 -0700, julio maidanik wrote: > Are there any HOWTOs  with clear instructions  of how to install on a > site-wide basis.? what are you looking for? On my server(s), I can say "pkg_add p5-Mail-SpamAssassin" or "aptitude install spamassassin", and then I have t

Re: Fake MX

2010-12-08 Thread Toni Mueller
On Wed, 08.12.2010 at 11:33:11 -0600, Matt wrote: > Anyone using the Fake MX trick? > http://www.webhostingtalk.com/wiki/Fake_MX > Is it safe to use a fake high and low mx? I tried the high MX for some time, but in my experience, spammers usually only hit the first two MXes. So if you were usin

Re: Do we need a new SMTP protocol? (OT)

2010-12-01 Thread Toni Mueller
Hi, On Wed, 01.12.2010 at 16:13:06 +, Martin Gregorie wrote: > I don't think that would help at all. Bots would just pretend to be mail > servers and use SMTP. Any other form of spam could be circumvented by > setting up spammer-owned MTAs that spammers would use to inject spam. nothing ne

Re: Do we need a new SMTP protocol? (OT)

2010-12-01 Thread Toni Mueller
Hi, On Wed, 01.12.2010 at 11:02:54 -0500, Michael Scheidell wrote: > On 12/1/10 10:56 AM, Toni Mueller wrote: > >Ok, now let's be serious, there*must* be a reason why this didn't > >happen long ago, right? > Because the internet 'must be free'. as in acc

Re: Do we need a new SMTP protocol? (OT)

2010-12-01 Thread Toni Mueller
Hi, On Wed, 01.12.2010 at 10:50:49 -0500, Michael Scheidell wrote: > On 12/1/10 10:33 AM, David F. Skoll wrote: > >And authentication will stop spam... how? > >>> Thoughts? > >You're wasting your time. > Ditto. we can't even get big providers (Microsoft/blackberry) or > ISP's to adhere to cur

Re: thanks to thinking people.

2010-07-19 Thread Toni Mueller
Hi, On Mon, 19.07.2010 at 09:43:20 -0600, Brian Godette wrote: > I hope you realize you still need to deal with the issues of users > with weak/guessable passwords and phishing of account info as well > as the newer bots that recover account info from Outlook/Outlook > Express/Thunderbird. this

Re: .qmail

2010-02-24 Thread Toni Mueller
Hi, On Wed, 24.02.2010 at 22:18:04 -0500, alexus wrote: > On Wed, Feb 24, 2010 at 4:49 AM, Toni Mueller > wrote: > > On Tue, 23.02.2010 at 14:08:30 -0500, alexus wrote: > >> is there a way to put sa-learn --spam inside of .qmail? > -bash-3.2# man preline > No manua

Re: .qmail

2010-02-24 Thread Toni Mueller
On Tue, 23.02.2010 at 14:08:30 -0500, alexus wrote: > is there a way to put sa-learn --spam inside of .qmail? man preline HTH, --Toni++

Re: Debian maintainers online? 3.3.0 availability Q

2010-01-27 Thread Toni Mueller
Hi, On Wed, 27.01.2010 at 10:35:20 +0200, Jari Fredriksson wrote: > Will the new 3.3 be announced for Lenny (possibly via backports) or do I > need to use CPAN? you could probably file a wishlist bug against spamassassin, and/or prod someone to do it? http://www.debian.org/Bugs/Reporting Kin

Re: SA Tag Spam from compromised web mails

2009-12-15 Thread Toni Mueller
On Tue, 15.12.2009 at 12:52:44 -0500, Jeff Koch wrote: > Of course an iPhone can see IMAP folders. But what's going to sort mail > into folders when I'm traveling for a week and the office PC is turned > off? The server on which the imap server runs? Kind regards, --Toni++

Re: Spam from compromised web mails

2009-12-15 Thread Toni Mueller
Hi, On Tue, 15.12.2009 at 11:44:49 -0500, Charles Gregory wrote: > On Tue, 15 Dec 2009, Jeff Koch wrote: >> I have to say that it is extremely annoying that this mailing list does >> not put a tag identifying itself in the subject line. Every other >> mailing list of a similar technical natur

Slightly OT: HTML in emails

2009-12-15 Thread Toni Mueller
Hi, On Tue, 15.12.2009 at 17:40:55 +0100, Benny Pedersen wrote: > On tir 15 dec 2009 17:36:56 CET, Toni Mueller wrote >> HTML in emails is usually a synonym for "F*CKING SH*T". > > most users that try doing it is maybe just trying to write in red or white :) this is imh

Re: FP on blacklist hostkarma

2009-12-15 Thread Toni Mueller
Hi, On Tue, 15.12.2009 at 08:22:44 -0800, Marc Perkel wrote: > Get a modern email client. > > Kai Schaetzl wrote: >> Mark, can you *please* stop sending HTML-only messages to the list? looks like I should start blacklisting individual subscribers. HTML in emails is usually a synonym for "F*CKI

Re: Fw: users specific configuration

2009-12-11 Thread Toni Mueller
Hi, On Fri, 11.12.2009 at 11:46:31 +0100, bernics.gabor wrote: > Nobody? > > -- Forwarded Message --- > My SP dont view the users specific configuration > (/home/$user/.spamassassin/user_prefs) only the main configuration > (/etc/spamassassin/*). man 8 spamd I find the descri

Re: outlook 2007 "Test" email scores 30+

2009-10-31 Thread Toni Mueller
Hi, On Fri, 30.10.2009 at 15:09:20 -0700, djjmj wrote: > Thank you for your interest and support. I will keep pushing our ISP to use > this forum for a resolution. please learn about how email works. Really. You only sent an obfuscated log about an email conversation with your ISP, but not th

Re: bringing clamav into the loop?

2009-10-31 Thread Toni Mueller
Hi, On Sat, 31.10.2009 at 09:16:07 -0400, Gene Heskett wrote: > Does anyone have a procmail recipe that incorporates clamav into the checks, > and one that handles the clamav output to /dev/null the viri etc? which mail system do you use? I'm using this setup together with qmail-ldap and qma

Re: outlook 2007 "Test" email scores 30+

2009-10-30 Thread Toni Mueller
Hi, On Fri, 30.10.2009 at 14:13:45 -0700, djjmj wrote: > Outlook 2007 for most of the clients under our domain are now having outgoing > emails blocked by Spam Assassin, which our ISP uses. This started in late > September (Outlook/MS update??). Simple Text emails with "hello" or "test" > get s

Re: Is spamming legal in the UK ?

2009-10-23 Thread Toni Mueller
Hi, On Fri, 23.10.2009 at 11:32:16 +0200, Per Jessen wrote: > Toni Mueller wrote: > > I seriously doubt it, besides this probably not being applicable to > > spamming from the UK (not Germany). > > One interesting thing about the T-Mobile spam I got is - it was clearly

Re: Is spamming legal in the UK ?

2009-10-23 Thread Toni Mueller
Hi, On Fri, 23.10.2009 at 10:54:02 +0200, Andreas Rehmer wrote: > i dont know it exactly but i dont think it. One day before the > Bundestagswahl in Germany. Guido Westerwelle (Leader from an big faction) > send around a Spam-Mail to vote for his faction. I think its enough that > you can s

Re: OT bad news

2009-10-05 Thread Toni Mueller
Hi, On Mon, 05.10.2009 at 14:11:46 -0700, John Hardin wrote: > On Mon, 5 Oct 2009, Thomas Mullins wrote: >> I will pull out our BSD box, and I will let them connect the Exchange >> box straight to the Net. > Second bet: how long it takes after doing that before the box is 0wned. I wouldn't ho

Re: OT bad news

2009-10-05 Thread Toni Mueller
Hi, On Mon, 05.10.2009 at 15:42:04 -0400, Thomas Mullins wrote: > We have been running Spamassassin for maybe eight years now. But, my > coworkers do not like OpenSource. So they have finally complained > enough that my boss is going to replace our reliable > FreeBSD/Spamassassin boxes. more

Re: Image Spam: FuzzyOcr doesn't hit

2009-08-24 Thread Toni Mueller
Hi Romain, On Mon, 24.08.2009 at 13:25:33 +0200, Romain Dolbeau wrote: > Normally all are being run. The default settig is to stop when one has > returned a 'spam' status (i.e. it runs everything for 'ham'). ok. > Check the detailed log of FuzzyOcr (not of SA) ; it's likely it's > missing some

Image Spam: FuzzyOcr doesn't hit

2009-08-24 Thread Toni Mueller
Hi, I've installed FuzzyOcr and "all" OCR programs that I could find, which apparently resulted in tesseract being chosen, but when I run "spamassassin -D " on a message containing image spam, I can only see that the FuzzyOcr plugin is being called, that it creates it's databases, but nothing els

Re: your mail

2009-08-22 Thread Toni Mueller
Hi, On Fri, 21.08.2009 at 13:43:26 -0600, Karl Pearson wrote: > Nothing free is worth a cent. this only goes to show that money isn't that much of a universal metric as it's touted to be. If you've lost all other metrices, then I'm sorry for you. "Can't buy me love" (Beatles) Kind regards

To ISP or not to ISP, was: Re: your mail

2009-08-22 Thread Toni Mueller
Hi, although I missed out on the bulk of the discussion, I have to say this to Ted's email: On Fri, 21.08.2009 at 10:46:55 -0700, Ted Mittelstaedt wrote: > I agree. We're and ISP and I don't want us to be associated with > companies like Google. I don't want Google operating in my market and

Re: SA and mail from backup mx?

2009-08-19 Thread Toni Mueller
Hi, On Wed, 19.08.2009 at 18:26:40 -0400, Dave wrote: > Postfix on my server, the backup mx is using qmail. do you control the backup MX, or is it something external? Unfortunately, plain qmail can't do that much to block spam w/o some help. If you control the machine in question, try to

Re: gpgkey failures with sa-update

2009-08-19 Thread Toni Mueller
Hi, On Wed, 19.08.2009 at 13:33:20 -0400, Gene Heskett wrote: > In /var/lib/sa/keys I have neither such a directory, nor any keys in either of /var/lib/spamassassin nor /var/db/spamassassin (depending on which of my machines I look at). But > [r...@coyote keys]# cd /etc/mail/spamassassin/sa

Re: gpgkey failures with sa-update

2009-08-19 Thread Toni Mueller
Hello, On Wed, 19.08.2009 at 12:09:43 -0400, Gene Heskett wrote: > On Wednesday 19 August 2009, Karsten Bräckelmann wrote: > >[2] http://taint.org/2007/08/15/004348a.html > > This site has the procedure I used. Several times. I used this procedure just today, with no problem at all. > [g..

Re: Image Spam

2009-08-19 Thread Toni Mueller
On Wed, 19.08.2009 at 11:40:24 -0400, Terry Carmen wrote: > Nothing says "Buy my stuff" better than an email done in fuzzy distorted > letters. 8-) Ok, got it. ;} Although I'm still amazed about how spam does bring in business in the first place. Sorry for being a bit thick. Kind regards

Re: Image Spam

2009-08-19 Thread Toni Mueller
Hi, On Wed, 19.08.2009 at 14:38:12 +0100, RW wrote: > It's like a traditional anonymous letter, with letters cut from > different sources, with different colours, fonts and backgrounds. thank you. > To be fair it is in Cyrillic, so FuzzyOCR wouldn't have caught it > without an appropriate wor

Re: Image Spam

2009-08-19 Thread Toni Mueller
On Wed, 19.08.2009 at 08:28:21 -0400, Dan Schaefer wrote: > Dan Schaefer wrote: >> Why haven't spammers think about this approach before? I can image it >> is very difficult for Fuzzy OCR to tag this with a high score. >> >> http://pastebin.com/m247b74c8 > Oops. Why haven't spammers *thought a

Re: SA-Update - SHA1 Verification failed

2009-08-19 Thread Toni Mueller
Hi, On Wed, 19.08.2009 at 08:49:22 +0100, Arthur Dent wrote: > I only run sa-update once per day and the last two days it has failed > with a SHA1 verification error. I just discovered a very similar problem: # sa-update -D --channelfile /etc/mail/spamassassin/sare-sa-update-channels.txt --g

Re: sa-update: stuck at 795855?

2009-08-18 Thread Toni Mueller
Hi, On Tue, 18.08.2009 at 12:06:30 -0700, Ted Mittelstaedt wrote: > Toni Mueller wrote: >> Understood. FWIW, (not only) I need newer rules because the current >> rules are becoming ineffective at a fast pace. >> Of course, but what do you want to say with that? From my

Re: sa-update: stuck at 795855?

2009-08-18 Thread Toni Mueller
Hi Ted, On Tue, 18.08.2009 at 11:06:32 -0700, Ted Mittelstaedt wrote: > http://svn.apache.org/viewvc/spamassassin/tags/ > you will find that > > sa-update_3.2_20090720142344/ 795855 4 weeks jm tagging latest > update release for 3.2 > > 795855 -is- the latest rules release for 3.2.5 o

sa-update: stuck at 795855?

2009-08-18 Thread Toni Mueller
Hi, I notice that there are no rules updates for 3.2.5 since about 2009-07-21, with the latest version shipped being 795855. FWIW, I queried different DNS servers in different networks to forestall stale DNS cache data for the number, but uniformly got this result. The "daily QA testing pages",