another problem in disable in spamassassin

2024-04-12 Thread natan
Hi I have problem with disabled spamhaus.org in spamassassin: In local.cf I disable check like: ... dns_query_restriction deny spamhaus.org dns_query_restriction deny zen.spamhaus.org dns_query_restriction deny dbl.spamhaus.org ... But in mail.log I fund still checking RCVD_IN_PBL, URIBL_CSS_A,

Re: Weird whitelist

2024-04-08 Thread natan
DOMAIN              2 On Mon, Apr 8, 2024 at 5:38 PM Benny Pedersen wrote: natan skrev den 2024-04-08 12:31: >>> >>> Apr  6 01:15:09 amavis3 amavis[3887068]: (3887068-17) Passed >>> BAD-HEADER-7 {RelayedInbound}, [34.23.17.0]:38582 [34.23.17.0] <> >&

Re: Weird whitelist

2024-04-08 Thread natan
it if you configured them correctly.. On Mon, Apr 8, 2024 at 5:38 PM Benny Pedersen wrote: natan skrev den 2024-04-08 12:31: >>> >>> Apr  6 01:15:09 amavis3 amavis[3887068]: (3887068-17) Passed >>> BAD-HEADER-7 {RelayedInbound}, [34.23.17.0]:385

Re: Weird whitelist

2024-04-08 Thread natan
W dniu 8.04.2024 o 12:38, Benny Pedersen pisze: natan skrev den 2024-04-08 12:31: Apr  6 01:15:09 amavis3 amavis[3887068]: (3887068-17) Passed BAD-HEADER-7 {RelayedInbound}, [34.23.17.0]:38582 [34.23.17.0] <> -> , Queue-ID: 4VBDq04Bn7z1Q9qQ, mail_id: 6LRhEwtUmP7u, Hits: -, si

Re: Weird whitelist

2024-04-08 Thread natan
W dniu 8.04.2024 o 12:26, Matus UHLAR - fantomas pisze: On 08.04.24 12:09, natan wrote: I use amavis+SA and In log I get "whitlisted" ... Apr  6 01:15:08 amavis3 amavis[3887068]: (3887068-17) wbl: whitelisted sender <>, ... Log: Apr  6 01:15:08 amavis3 amavis[38870

Weird whitelist

2024-04-08 Thread natan
Hi I use amavis+SA and In log I get "whitlisted" ... Apr  6 01:15:08 amavis3 amavis[3887068]: (3887068-17) wbl: whitelisted sender <>, ... Log: Apr  6 01:15:08 amavis3 amavis[3887068]: (3887068-17) Checking: 6LRhEwtUmP7u [34.23.17.0] <> -> Apr  6 01:15:08 amavis3 amavis[3887068]:

Re: disable URIBL_ and spamhaus.net

2024-04-03 Thread natan
W dniu 3.04.2024 o 15:25, Matus UHLAR - fantomas pisze: On 03.04.24 11:18, natan wrote: Where in  pdns-recursor? I use pdns-recursor /etc/powerdns/recursor.conf W dniu 3.04.2024 o 13:17, Matus UHLAR - fantomas pisze: This is not about pdns-recursor itself. It's about using own recursing

Re: disable URIBL_ and spamhaus.net

2024-04-03 Thread natan
W dniu 3.04.2024 o 13:17, Matus UHLAR - fantomas pisze: On 03.04.24 11:18, natan wrote: Where in  pdns-recursor? I use pdns-recursor /etc/powerdns/recursor.conf This is not about pdns-recursor itself. It's about using own recursing DNS server - you you don't use DNS server of your ISP

Re: disable URIBL_ and spamhaus.net

2024-04-03 Thread natan
Hi In this machine I use cat /etc/resolv.conf nameserver 127.0.0.1 W dniu 3.04.2024 o 14:18, Benny Pedersen pisze: natan skrev den 2024-04-03 11:06: I must chane or disable permanently spamhaus.net and all everything he uses. +1 They calculated the rate so much that I couldn't afford

Re: disable URIBL_ and spamhaus.net

2024-04-03 Thread natan
W dniu 3.04.2024 o 11:20, Marc pisze: I must chane or disable permanently spamhaus.net and all everything he uses. They calculated the rate so much that I couldn't afford to use their toys Does anyone have an interesting solution to this problem? Or maybe some other lists connected? Do you

Re: disable URIBL_ and spamhaus.net

2024-04-03 Thread natan
Hi IRTFM beacuse I use pdns-recursor where max-cache-ttl default is 86400 ecs-minimum-ttl-override=60 minimum-ttl-override=60 W dniu 3.04.2024 o 11:23, Reindl Harald (privat) pisze: Am 03.04.24 um 11:18 schrieb natan: Hi Where in  pdns-recursor? I use pdns-recursor /etc/powerdns

Re: disable URIBL_ and spamhaus.net

2024-04-03 Thread natan
Hi Where in  pdns-recursor? I use pdns-recursor /etc/powerdns/recursor.conf W dniu 3.04.2024 o 11:10, Reindl Harald (privat) pisze: use unbound as caching resolver and configure TTL properly cache-min-ttl: 60 cache-max-negative-ttl: 60 Am 03.04.24 um 11:06 schrieb natan: Hi I must chane

disable URIBL_ and spamhaus.net

2024-04-03 Thread natan
Hi I must chane or disable permanently spamhaus.net and all everything he uses. They calculated the rate so much that I couldn't afford to use their toys Does anyone have an interesting solution to this problem? Or maybe some other lists connected? --

Re: URIBL_SBL and spamhouse problem

2024-03-15 Thread natan
Hi Yes but this disable all URIBL_* where I use *.spamhouse.net I have spamassassin-3.4.6 and URIBL_* works fine but payment is not so cool W dniu 14.03.2024 o 22:21, Benny Pedersen pisze: natan skrev den 2024-03-14 16:04: in 00_init_dns.cf: # dns_query_restriction (allow|deny) domain1

Re: URIBL_SBL and spamhouse problem

2024-03-14 Thread natan
W dniu 14.03.2024 o 13:13, Benny Pedersen pisze: natan skrev den 2024-03-14 12:20: I have disable only spamahause rules URIBL_SBL URIBL_CSS URIBL_SBL_A URIBL_CSS_A URIBL_ZEN_BLOCKED_OPENDNS URIBL_ZEN_BLOCKED URIBL_DBL_SPAM URIBL_DBL_PHISH  URIBL_DBL_MALWARE URIBL_DBL_BOTNETCC

URIBL_SBL and spamhouse problem

2024-03-14 Thread natan
Hi Today I get e-mail from spamhouse "Hello Support, I recently sent over a email regarding IP addresses querying the Spamhaus threat feeds.  The mentioned IP addresses are actively querying our public mirrors, and exceeding our usage limits.  Checking our database, I’m unable to locate an

Re: some problem with spam

2023-12-12 Thread natan
Hi thenx i try in this ruleset W dniu 12.12.2023 o 14:59, Jimmy pisze: These rules should matched rawbody __DOUBLE_HTML /<\/a>\s*/ uri           __LONG_LINK_URL  /https?:\/\/.{50,128}\.[a-z]{2,}\/\.[a-z]{2,}\//i On Tue, Dec 12, 2023 at 8:44 PM natan wrote: Hi Thenx bu

Re: some problem with spam

2023-12-12 Thread natan
e. Since I don't have visibility into all headers, consider create rules based on specific headers or other rule that match these. Append these rules to the meta-rule and boost the overall score accordingly. Jimmy On Tue, Dec 12, 2023 at 5:53 PM natan wrote: Hi I have a SpamAssass

some problem with spam

2023-12-12 Thread natan
Hi I have a SpamAssassin version 3.4.6 And I try resolv two problem 1)I put eml with spam and learn SA like: sa-learn --spam /root/spamik/ In /root/spamik/ is 4 e-mail Worsk great but after 7 day i must learn agin like SA forgot what he learned 2)I have a problem with one type a spam like:

Re: Spamassassin rule

2023-11-17 Thread natan
Can upu send examle or working conf with dmarc plugin ? W dniu 17.11.2023 o 14:21, Benny Pedersen pisze: natan skrev den 2023-11-17 11:19: How it realy realy works in SA ? I ask beacuse warking not so cool: its a hack, and bad example on expect it hits unaligned mail aswell as aligned, we

Re: Spamassassin rule

2023-11-17 Thread natan
W dniu 17.11.2023 o 12:31, Matus UHLAR - fantomas pisze: On 17.11.23 11:19, natan wrote: How it realy realy works in SA ? I ask beacuse warking not so cool: example: ifplugin Mail::SpamAssassin::Plugin::AskDNS askdns __DMARC_POLICY_NONE _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=none

Spamassassin rule

2023-11-17 Thread natan
HI How it realy realy works in SA ? I ask beacuse warking not so cool: example: ifplugin Mail::SpamAssassin::Plugin::AskDNS askdns __DMARC_POLICY_NONE _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=none;/ askdns __DMARC_POLICY_QUAR _dmarc._AUTHORDOMAIN_ TXT /^v=DMARC1;.*\bp=quarantine;/ askdns

Re: spamassassin4.x - problem

2023-06-21 Thread natan
check tmp path in all software used, this includes how perl versions handle tmp dirs and files, in your case its amavisd that create dirs, and its amavisd that tells spamassassin in with dir to scan email with embed spamassassin engine in amavisd, check if other spamscanners works in

Re: spamassassin4.x - problem

2023-06-21 Thread natan
Hi Files such as .spamassassin are deleted but not all. Files that are not deleted do not appear to be invalid I build spamassassin-4.x from cpan - not from repo Workaound solutions is not good but works find /var/lib/amavis/tmp/.spam* -mmin +200 -delete; I'd rather not use it though I

Re: Fwd: spamassassin4.x - problem

2023-06-20 Thread natan
W dniu 20.06.2023 o 16:50, Damian pisze: For test I downgrade one spamassassin from 4.x to 3.4.6 and problem not exists Hm, I don't see any significant code-difference regarding tempfiles. any idea ? root@a48c6a1d5fb0:~# sudo -u amavis perl -Mv5.14 -MFile::Spec -e 'say File::Spec->tmpdir'

Fwd: spamassassin4.x - problem

2023-06-20 Thread natan
Hi I have extrenal serwers with amavis+spamassassin (via cpan) 4 of them debian10 and spamassin-3.4.4 2 of them debian11 and spamassassin-4.x I have a problem (only debianb10 and spamassassin-4.x) with many many files like ".spamassassin99712ZzMoDatmp" in /var/lib/amavis/tmp/ example: