Re: Alternative to Postfix header_checks?

2009-01-10 Thread mouss
Gerald Turner a écrit :
 [snip]
 
 It is before-queue while the SMTP connection is still active.  I like to
 bounce in case legitimate people that have yet to be whitelisted trigger
 a false-positive.
 

yes, reject is generally better than discard.


 
 Other than possibly dropping a false-positive is there anything else I
 should know of?
 

No. just false positives. but this is a real problem. of course, this is
site/person dependent.

Instead of discarding mail, deliver it to a mailbox or folder that you
can review. This review can be done quickly (sort by subject, ... etc).

 
 Yes but I think I'm getting what I want in this case: list spam is
 discarded, whether forged or not.
 

Indeed. I hope you are aware that mail from some lists (such as this
one) may contain spammy text or patterns (people sending a sample, ...
etc).

 - There are other cases when you don't want to reject (mail to
 ab...@example.com, ... etc).
 
 That's the other problem I'm trying to solve (don't reject mail sent to
 these quasi-spamtrap addresses, simply discard) - I can see how to do
 it now with custom rules checked in X-Spam-Status header.  Thanks for
 the suggestion.
 

No, mail to ab...@* should be read. if there is a problem with your
server, this is how we would tell you. and to avoid N steps
conversations, we will include headers or the content of the spam we
received from you... etc. abuse@ and postmaster@ are part of the mail
system. don't let spammers destroy this system.




Re: Whitelist not working - Ugh please help

2009-01-10 Thread mouss
Benny Pedersen a écrit :
 On Fri, January 9, 2009 22:44, mouss wrote:
 
 # spf/dkim/dk
 whitelist_from_auth  payme...@paypal.com
 
 this one does not exists
 
 whitelist_auth
 def_whitelist_auth
 unwhitelist_auth
 
 does
 

thanks for the correction. next time, I'll cut-n-paste instead of
inventing new keywords ;-p

 see perldoc Mail::SpamAssassin::Conf and corsponding plugin docs
 
 you should also make sure your trusted_networks are correctly
 configured.
 
 and is ONLY ones own ips that can be 112% trusted !
 

Not necessarily. you can extend trust if this brings you more benefits
than problems.


Re: more habeas spam

2009-01-10 Thread mouss
McDonald, Dan a écrit :
 On Fri, 2009-01-09 at 13:21 +0300, Sergey Kovalev wrote:
 mouss wrote:
 On 6-Jan-2009, at 08:51, Greg Troxel wrote:
 I realize that HABEAS_ACCREDITED_SOI has or had a reasonable ruleqa
 value.  But, I wonder if SA should apply higher standards than that, and
 not give negative scores to databases that don't behave reasonably.
 meta DNS_FROM_DOB (0)
 meta RCVD_IN_DOB (0)
 meta URIBL_RHS_DOB (0)

 They weren't bringing anything, so I preferred to reduce the network
 usage...
 I may be wrong, but I thought that 0 disables the rule, not (0).

 Probably I should re-read Mail::SpamAssassin::Conf(3).
 
 score 0 disables the rule.  meta (0) always returns false.
 So he is still querying the RBLs, but throwing the results on the floor.
 

really? I see

meta RCVD_IN_DSBL (0)

in the updates. I doubt this means SA still queries dsbl.

Can someone please clarify?




Re: Whitelist not working - Ugh please help

2009-01-10 Thread Benny Pedersen

On Sat, January 10, 2009 09:15, mouss wrote:
 Not necessarily. you can extend trust if this brings you more
 benefits than problems.

msa_networks depends on trusted_networks, does it make sense ?

maybe, maybe not but i keep my trusted at very few, olso so dns
whitelist will be quered to give more whole view of the sender

-- 
Benny Pedersen
Need more webspace ? http://www.servage.net/?coupon=cust37098



Re: Daily run output

2009-01-10 Thread Decibel!
If the actual subject is Daily Run Output, it's most likely being
generated by a FreeBSD system. By default those emails go to root. I'm
not sure how to change that, but at least this should help with the
googling.

On Wed, Jan 07, 2009 at 09:18:47PM -0800, Simon.Baker wrote:
 
 Hi,
 
 We have a spamassassin server filtering our companies emails currently.
 Each day we recieve an email from the root account of our server overviewing
 the previous days spam filtered emails, network status and disk status.
 
 As i was not the one who setup the server, i'm not sure exactly how it's all
 configured.
 
 Could someone tell me what configuration file i need to change in order to
 change the email address this email is being sent to? 
 
 Regards,
 -- 
 View this message in context: 
 http://www.nabble.com/Daily-run-output-tp21346040p21346040.html
 Sent from the SpamAssassin - Users mailing list archive at Nabble.com.
 

-- 
Decibel!, aka Jim C. Nasby, Database Architect  deci...@decibel.org 
Give your computer some brain candy! www.distributed.net Team #1828


Spam assaassin config

2009-01-10 Thread bernard rule

Hi I am a relative newbie at this and you have helped me before

i have just installed the latest spamassassin on a VPS server on following how 
to guides etc, all seems to be working, 
my question is now that spamasaassin is installed and i have sent the test line 
via email and it has marked it as spam ok.
My question is do I need to do any more configurations/run any updates 
perodically or do any more to enhance the spam filtering
Basically what do I do next

Thanks Bernard


_
Free Windows Live software. Chat, search, share pics and more
http://get.live.com/

custom post-processing. Howto?

2009-01-10 Thread JVlad

Hi,

Spamassassin 3.2 works very good for me. Now I want to write a plugin in 
Perl that will be executed by spamassassin after each email is processed. 
This script would have to know sender address, sender ip, and score 
assigned by SA. Is it possible?




Re: custom post-processing. Howto?

2009-01-10 Thread Matus UHLAR - fantomas
On 08.01.09 02:45, JVlad wrote:
 Spamassassin 3.2 works very good for me. Now I want to write a plugin in 
 Perl that will be executed by spamassassin after each email is processed. 
 This script would have to know sender address, sender ip, and score 
 assigned by SA. Is it possible?

it is, but why do you want it to be a plugin? what do you want to use it for?

-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
They say when you play that M$ CD backward you can hear satanic messages.
That's nothing. If you play it forward it will install Windows.


RE: Daily run output

2009-01-10 Thread Anthony Kamau
 -Original Message-
 From: Simon.Baker [mailto:simon_ba...@medfin.com.au]
 Sent: Thursday, 8 January 2009 4:19 PM
 To: users@spamassassin.apache.org
 Subject: Daily run output


 Hi,

 We have a spamassassin server filtering our companies emails
 currently.
 Each day we recieve an email from the root account of our
 server overviewing
 the previous days spam filtered emails, network status and
 disk status.

 As i was not the one who setup the server, i'm not sure
 exactly how it's all
 configured.

 Could someone tell me what configuration file i need to
 change in order to
 change the email address this email is being sent to?

 Regards,

To change the address where cron job messages are sent, follow
directions given by Rubin Bennett.

If you only want to change where logwatch messages go, then add a
'MailTo = ' entry into the file '/etc/logwatch/conf/logwatch.conf' -
defaults are saved in the file
'/usr/share/logwatch/default.conf/logwatch.conf'

If however, you want to redirect all messages sent to user 'root' to
another user account or even to a group, here's what you need to do:

1/  Create a new user account - a good name is 'sysnotify'
2/  Locate the line starting with 'root:' in the file '/etc/aliases' and
change it to look like this:
root:   sysnotify
3/  Create the file 'home/sysnotify/.forward' and add the follwing to
it:
us...@domain.com,us...@domain.com,us...@domain.com,[local logon id],...

You can add as many e-mail addresses as you like as long as you comma
separate them!  If you want the message sent a user on the same system
that has an account on the box, then you can simply enter that users
logon id.  If you want a copy left in the 'sysnotify' account, then you
need to enter '\sysnotify' into that file.  The '\' ensure that a loop
is not created!

The assumption I made for the above is that you are running a Red Hat
Linux based Linux server such as Red Hat itself, Fedora Core, or CentOS.

Cheers,
Anthony.