training messages that do not have Message-Id:

2008-05-30 Thread Matus UHLAR - fantomas
Hello, afaik Message-Id is uses by Bayes filter to index all tokens from one message, to be able to le-learn or forget the messsage. How does bayes process messages that do not have Message-Id header? Is it worth use them to train bayes or can it cause any problems? Thank you. -- Matus UHLAR -

Re: rDNS none in stats with IPv6

2008-05-30 Thread Justin Mason
Steve Bertrand writes: I've added debugging code to new_dns_packet() and bgsend() (DnsResolver.pm) to print out $host, $type and $class to a log file. What I found is that the mapped address entries are not even seen by DnsResolver.pm at all, hence, there is no DNS lookup even attempted

Re: training messages that do not have Message-Id:

2008-05-30 Thread Justin Mason
Matus UHLAR - fantomas writes: Hello, afaik Message-Id is uses by Bayes filter to index all tokens from one message, to be able to le-learn or forget the messsage. How does bayes process messages that do not have Message-Id header? Is it worth use them to train bayes or can it cause any

Re: DNS ISP Host List Available

2008-05-30 Thread Matus UHLAR - fantomas
Marc Perkel wrote: I've also created a DNS based list of domains that provide consumer dynamic IP address space. I'm using this list internally but thought I'd make it public in case others can use it. Trying to inspire innovation. Example: dig

Re: SARE_SPOOF included in base rules?

2008-05-30 Thread Justin Mason
Bowie Bailey writes: I just got an email that hit the following: * 2.0 SPOOF_COM2OTH URI: URI contains .com in middle * 2.3 SPOOF_COM2COM URI: URI contains .com in middle and end * 2.5 SARE_SPOOF_COM2OTH URI: a.com.b.c * 2.5 SARE_SPOOF_COM2COM URI: a.com.b.com Did the SARE_SPOOF

WrongMX plugin

2008-05-30 Thread Matus UHLAR - fantomas
Hello, I'd like to use WrongMX plugin on our mailservers (I found it very good idea and I was explicitly searching for it), but I'd like to ask a few questions, if someone of you uses it: - did you modify score of it? - did you modify the maximum time difference allowed for the plugin to hit?

Re: rDNS none in stats with IPv6

2008-05-30 Thread Steve Bertrand
SpamAssassin doesn't perform DNS lookups on the Received headers if at all possible -- it's assumed that your MTA will do that in advance. Thanks for that. I found this out late last night, and I believe I've got the issue resolved. Regards, Steve

Re: DNS ISP Host List Available

2008-05-30 Thread Ken A
John Hardin wrote: On Thu, 29 May 2008, Ken A wrote: http://www.rhyolite.com/anti-spam/you-might-be.html So how is a proponent of the Hunt down and kill spammers very messily FUSSP classified? I'm suggesting that some homework should be done before creating a list of this or that and

Re: DNS ISP Host List Available

2008-05-30 Thread Marc Perkel
Matus UHLAR - fantomas wrote: Marc Perkel wrote: I've also created a DNS based list of domains that provide consumer dynamic IP address space. I'm using this list internally but thought I'd make it public in case others can use it. Trying to inspire innovation. Example: dig

program failures of spamassassin

2008-05-30 Thread jon schatz
hi, i call spamassassin diretly from procmail like so: :0fw |/usr/bin/spamassassin -D #|/usr/bin/spamassassin -D 2/dev/null (i recently started looking at debug info again to try and solve this problem without much luck). my procmail log file is full of entries like this: procmail:

Re: Whitelisting via MySQL

2008-05-30 Thread JDavila
John We kinda figured 12K is alot but we want to ensure that our business is not interuppted but spam rejection and etc . I will also check w/ the Exim Forums to see what they say. Do you have any suggestions on what can we from a SA point. Thank you again -Jeremy On Thu, 29 May 2008,

Re: can we make AWL ignore mail from self to self?

2008-05-30 Thread Jo Rhett
On May 29, 2008, at 4:18 AM, Jonas Eckerman wrote: Please do remember that I am in no way trying to stop or hinder you in implementing your fix. The fact that I have other suggestions does not mean that I'm opposing you. Of course. This is normal discussion. A lot of work to hack around a

Re: Whitelisting via MySQL

2008-05-30 Thread John Hardin
On Fri, 30 May 2008, [EMAIL PROTECTED] wrote: We kinda figured 12K is alot but we want to ensure that our business is not interuppted but spam rejection and etc . Fair enough as a stopgap, but having to put that many whitelist entries in says there's a problem with either your scoring or

Re: DNS ISP Host List Available

2008-05-30 Thread Ken A
Marc Perkel wrote: Matus UHLAR - fantomas wrote: Marc Perkel wrote: I've also created a DNS based list of domains that provide consumer dynamic IP address space. I'm using this list internally but thought I'd make it public in case others can use it. Trying to inspire innovation.

RE: DNS ISP Host List Available

2008-05-30 Thread Larry Ludwig
IMHO regex setups are even more reliable we do this with our postfix setup. For example: /^c-.+-.+-.+-.+\..+\..+\.comcast\.net$/ REJECT dynamic ip address use isp for outgoing email - access.regex I think is more reliable than just by name or especially by IP since IP

FW: DNS ISP Host List Available

2008-05-30 Thread Larry Ludwig
IMHO regex setups are even more reliable we do this with our postfix setup. For example: /^c-.+-.+-.+-.+\..+\..+\.comcast\.net$/ REJECT dynamic ip address use isp for outgoing email - access.regex I think is more reliable than just by name or especially by IP since IP

double rules hits?

2008-05-30 Thread Greg Troxel
I have been seeing several occasions where two rules hit for the same underlying issue, and it seems that this isn't really desired. Example 1: I got ham that had a line with dig [some.isp.name.].isphosts.junkemailfilter.com in it. It seems giving it 2.3 points for SPOOF_COM2COM is fair, but

AWL aging?

2008-05-30 Thread Greg Troxel
I have recently understood AWL better, and am wondering if there should be some minimum number of entries before AWL is applied. I often get spam that doesn't score that high due to being a fresh relay. If I rescore it with '|spamassassin -t' after a few days, often it's on blacklists and scores

RE: double rules hits?

2008-05-30 Thread Bowie Bailey
Greg Troxel wrote: I have been seeing several occasions where two rules hit for the same underlying issue, and it seems that this isn't really desired. Example 1: I got ham that had a line with dig [some.isp.name.].isphosts.junkemailfilter.com in it. It seems giving it 2.3 points for

Re: double rules hits?

2008-05-30 Thread Karsten Bräckelmann
On Fri, 2008-05-30 at 16:18 -0400, Greg Troxel wrote: I have been seeing several occasions where two rules hit for the same underlying issue, and it seems that this isn't really desired. Example 1: I got ham that had a line with dig [some.isp.name.].isphosts.junkemailfilter.com in it.

Re: AWL aging?

2008-05-30 Thread Karsten Bräckelmann
On Fri, 2008-05-30 at 16:21 -0400, Greg Troxel wrote: I have recently understood AWL better, and am wondering if there should be some minimum number of entries before AWL is applied. I often get spam that doesn't score that high due to being a fresh relay. If I rescore it with '|spamassassin

Re: program failures of spamassassin

2008-05-30 Thread Karsten Bräckelmann
On Fri, 2008-05-30 at 09:35 -0700, jon schatz wrote: hi, i call spamassassin diretly from procmail like so: :0fw |/usr/bin/spamassassin -D #|/usr/bin/spamassassin -D 2/dev/null Why do you use the SA *debug* switch in procmail? FWIW, output on STDERR may cause procmail to lose the F from

New error below when restarting spamassassin

2008-05-30 Thread Chris
Noticed someting in my log tonight when I restarted spamassassin by running, as I usually do: service spamassassin stop service spamassassin start Both gave me an 'ok' May 29 19:26:52 localhost spamassassin: spamd startup succeeded May 29 19:26:57 localhost spamd[32570]: Can't locate

Re: New error below when restarting spamassassin

2008-05-30 Thread Chris
On Friday 30 May 2008 9:33 pm, Chris wrote: Noticed someting in my log tonight when I restarted spamassassin by running, as I usually do: May 29 19:26:52 localhost spamassassin: spamd startup succeeded May 29 19:26:57 localhost spamd[32570]: Can't locate Log/Agent.pm in @INC (@INC contains: