Re: Disable a Rule

2011-11-02 Thread Matus UHLAR - fantomas
On 31.10.11 02:33, Jeremy McSpadden wrote: Thanks Ned, my question being now - why create a rule that can reduce the spam count the DNSWL rules are not created to reduce spam count, but to reduce FP count. when the provider decides to enforce such a policy; any provider can enforce any po

Re: Disable a Rule

2011-10-30 Thread Karsten Bräckelmann
On Mon, 2011-10-31 at 02:33 +, Jeremy McSpadden wrote: > Thanks Ned, my question being now - why create a rule that can reduce > the spam count when the provider decides to enforce such a policy; and > start returning incorrect queries. It's almost irrelevant whether the score is negative or p

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Thanks Ned, my question being now - why create a rule that can reduce the spam count when the provider decides to enforce such a policy; and start returning incorrect queries. Denied or not, it should NEVER return any value that would lower the spam count, if it cannot provide the correct answer

Re: Disable a Rule

2011-10-30 Thread Jim Popovitch
On Sun, Oct 30, 2011 at 21:46, RW wrote: > On Sun, 30 Oct 2011 20:25:25 + > Jeremy McSpadden wrote: > >> Very well. DNSMasq setup and running local, yet still returns HI > > AFAIK DNSMasq isn't a recursive nameserver, it's just a DNS forwarder. Correct. pdns_resolver is an excellent replacem

Re: Disable a Rule

2011-10-30 Thread RW
On Sun, 30 Oct 2011 20:25:25 + Jeremy McSpadden wrote: > Very well. DNSMasq setup and running local, yet still returns HI AFAIK DNSMasq isn't a recursive nameserver, it's just a DNS forwarder.

Re: Disable a Rule

2011-10-30 Thread John Hardin
On Sun, 30 Oct 2011, Jeremy McSpadden wrote: Very well. DNSMasq setup and running local, yet still returns HI Are you still forwarding to somebody else's DNS servers? If your ISP is large and hosting many people using SA, you may be in the same position. The local DNS server supporting your

Re: Disable a Rule

2011-10-30 Thread Ned Slider
On 30/10/11 20:45, Jeremy McSpadden wrote: Thanks for the help Benny. .. Anyone besides this guy have anything to say ? -- See here: http://www.dnswl.org/news/archives/24-Abusive-use-of-dnswl.org-infrastructure-enforcing-limits.html and also the thread on this list from the archives dated 17t

Re: [OT] Disable a Rule

2011-10-30 Thread Walter Hurry
On Sun, 30 Oct 2011 21:48:16 +0100, Marcin Mirosław wrote: > W dniu 2011-10-30 21:36, Jeremy McSpadden pisze: >> Yes, that is in place. (not a newbie here) > > Only newbie can say "I'm not newbie". And top post at the same time.

Re: [OT] Disable a Rule

2011-10-30 Thread Marcin Mirosław
W dniu 2011-10-30 21:36, Jeremy McSpadden pisze: > Yes, that is in place. (not a newbie here) Only newbie can say "I'm not newbie".

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Thanks for the help Benny. .. Anyone besides this guy have anything to say ? -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Oct 30, 2011, at 3:40 PM, Benny Pedersen wrote: On Su

Re: Disable a Rule

2011-10-30 Thread Benny Pedersen
On Sun, 30 Oct 2011 20:36:14 +, Jeremy McSpadden wrote: Yes, that is in place. (not a newbie here) seems your hosters is not newbee either, you are firewalled to use there dns server if it still does not work, ask them :)

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Yes, that is in place. (not a newbie here) -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Oct 30, 2011, at 3:14 PM, Benny Pedersen wrote: On Sun, 30 Oct 2011 20:05:08 +, Jer

Re: Disable a Rule

2011-10-30 Thread Benny Pedersen
On Sun, 30 Oct 2011 20:25:25 +, Jeremy McSpadden wrote: Very well. DNSMasq setup and running local, yet still returns HI check /etc/resolv.conf nameserver 127.0.0.1

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Very well. DNSMasq setup and running local, yet still returns HI -- Jeremy McSpadden Flux Labs, Inc http://www.fluxlabs.net Endless Solutions Office : 850-588-4626 Cell : 850-890-2543 Fax : 850-254-2955 On Oct 30, 2011, at 3:14 PM, Benny Pedersen wrote: On Sun, 30 Oct 2

Re: Disable a Rule

2011-10-30 Thread Benny Pedersen
On Sun, 30 Oct 2011 20:05:08 +, Jeremy McSpadden wrote: Then why would this rule be enabled by default, or even setup for SA out of the box. So your telling me that in order to use this rule, i have to setup a local dns ? i don't think so. I've run SA boxes for years and never had to run a lo

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Then why would this rule be enabled by default, or even setup for SA out of the box. So your telling me that in order to use this rule, i have to setup a local dns ? i don't think so. I've run SA boxes for years and never had to run a local dns server. -- Jeremy McSpadden Flux Labs, Inc On Oc

Re: Disable a Rule

2011-10-30 Thread Benny Pedersen
On Sun, 30 Oct 2011 19:18:12 +, Jeremy McSpadden wrote: I am using local dns servers. The server is at SoftLayer's DC. Using their local DNS servers, 10.0.X there ip need datafeed or you need to have dns server on 127.0.0.1 to get the free use at dnswl i cant find this ip listed anywher

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
Don't edit the files that are deep in the SpamAssassin working directories, they will get overwritten with updates as you have seen. If you want to disable a rule, set its score to zero in your _local_ configuration file, typically under /etc/mail/spamassassin. If you're getting spams

Re: Disable a Rule

2011-10-30 Thread John Hardin
ectories, they will get overwritten with updates as you have seen. If you want to disable a rule, set its score to zero in your _local_ configuration file, typically under /etc/mail/spamassassin. If you're getting spams from hosts in DNSWL HI, please let the DNSWL people know so they can

Re: Disable a Rule

2011-10-30 Thread Karsten Bräckelmann
On Sun, 2011-10-30 at 18:17 +, Jeremy McSpadden wrote: > This is for hundreds of emails. DNSWL thinks just because one > yahoo/gmail/hotmail account is clean; all are. Does not make sense to > me. I'd be surprised to see these listed in DNSWL high. Which IPs are these precisely? Also, what DN

Re: Disable a Rule

2011-10-30 Thread Jeremy McSpadden
they will get overwritten with updates as you have seen. If you want to disable a rule, set its score to zero in your _local_ configuration file, typically under /etc/mail/spamassassin. If you're getting spams from hosts in DNSWL HI, please let the DNSWL people know so they can deal with it.

Re: Disable a Rule

2011-10-30 Thread John Hardin
On Sun, 30 Oct 2011, Jeremy McSpadden wrote: It seems nightly the rule is re-enabled. Don't edit the files that are deep in the SpamAssassin working directories, they will get overwritten with updates as you have seen. If you want to disable a rule, set its score to zero in your _l

Re: Disable a Rule

2011-10-30 Thread Benny Pedersen
On Sun, 30 Oct 2011 17:37:01 +, Jeremy McSpadden wrote: I have several MS boxes and it seems that the RCVD_IN_DNSWL_HI rule in 72_active is allowing way to much through. Running at a score of 5 for spam, and it -5 on score is pushing it as clean. How do i disable the rule completely, even on

Re: Disable a Rule

2011-10-30 Thread Marcin Mirosław
W dniu 2011-10-30 18:37, Jeremy McSpadden pisze: > I have several MS boxes and it seems that the RCVD_IN_DNSWL_HI rule in > 72_active is allowing way to much through. Running at a score of 5 for > spam, and it -5 on score is pushing it as clean. How do i disable the > rule completely, even on sa-up

Disable a Rule

2011-10-30 Thread Jeremy McSpadden
I have several MS boxes and it seems that the RCVD_IN_DNSWL_HI rule in 72_active is allowing way to much through. Running at a score of 5 for spam, and it -5 on score is pushing it as clean. How do i disable the rule completely, even on sa-updates. It seems nightly the rule is re-enabled. -- Je