Re: dsbl.org down for good

2008-09-29 Thread Matthias Leisi
Michael Scheidell schrieb: Wasn't there a standard at one time, return something different (test) if you queries 2.0.0.127.{dnsblacklist}? If it returned (at least) '127.0.0.2' and a list of other valid bitflags. that meant that the dnsbl was up and running? Anything else and it wasn't? See

Re: dsbl.org down for good

2008-09-29 Thread mouss
Michael Scheidell wrote: ...and I bet there are still commercial anti-spam products using dsbl.org because they haven't figured it out either :-) Wasn't there a standard at one time, return something different (test) if you queries 2.0.0.127.{dnsblacklist}? There's a draft or two that

Yahoo I have a new email abuse

2008-09-29 Thread ram
419 scammers are abusing the Yahoos I have a new email announce service https://ecm.netcore.co.in/tmp/scam1.eml.txt The scammer sets the message and sends the spams thru yahoos servers And the mails would go thru clean Initially these were very few , but now the numbers are growing. Yahoo

Re: dsbl.org down for good

2008-09-29 Thread Justin Mason
Jason Haar writes: McDonald, Dan wrote: No, it boils down to the attitude in your e-mail - Why didn't the SpamAssassin benefactors do their job better. I for one am impressed with their willingness to provide such a useful piece of software, and maintain it. But most of them have real

Force score to a particular value

2008-09-29 Thread kerm1t
Hi, I seem to remember that SpamAssassin has a way to force the overall score of an email to a particular value, regardless of which rules match - very useful for testing how your mail setup deals with mail of different spam levels. Can anyone remind me how to do it please? I've spent some time

Long scan times with ctyme.ixhash.net

2008-09-29 Thread Wolfgang Zeikat
Adding bodyCTYME_IXHASH eval:ixhashtest('ctyme.ixhash.net') lets the scan times get significantly longer in SA 3.1.8 and 3.2.3 and in SA 3.1.8 generates: ixhash timeout reached at /etc/mail/spamassassin/iXhash.pm line 76 The timeout effect resembles last Wednesday when

Re: no rDNS and RDNS_NONE (Was: New free blacklist: BRBL - Barracuda Reputation Block List)

2008-09-29 Thread Justin Mason
mouss writes: Justin Mason wrote: [snip] In fairness -- if you drop mail with no rDNS, you are dropping 3.6% of legit email in general, going by the test results for our RDNS_NONE rule... ;) It just came to my mind that RDNS_NONE does not mean the client does not have a

Re: Long scan times with ctyme.ixhash.net

2008-09-29 Thread Jan Doberstein
Wolfgang Zeikat schrieb: Do others also see that effect with ctyme.ixhash.net? yes, thats why i added ixhash_timeout 10 to my configuration (maybe hardware/bandwith on ctyme will be upgraded) regards jd signature.asc Description: OpenPGP digital signature

Re: Long scan times with ctyme.ixhash.net

2008-09-29 Thread Dirk Bonengel
Jan Doberstein schrieb: Wolfgang Zeikat schrieb: Do others also see that effect with ctyme.ixhash.net? yes, thats why i added ixhash_timeout 10 to my configuration (maybe hardware/bandwith on ctyme will be upgraded) regards jd local issue, should be OK by now. Dirk

Re: sa-update?

2008-09-29 Thread Matthias Haegele
Gene Heskett schrieb: Greetings; I fired off this script, named sa-update.cron, but which has been disabled in the crontab since someone here said it was a waste of time, and now it seems to be hung. Running it as root this time. Maybe you want to run sa-update -D or check your logs for

BRBL hirate and accuracy [Re: New free blacklist: BRBL - Barracuda Reputation Block List]

2008-09-29 Thread Vidar Tyldum Hansen
On Sat, Sep 20, 2008 at 11:51:37PM -0700, Jeff Chan wrote: [Pardon the spam; thought this new blacklist might be worth at least trying.] Apparently Barracuda will be publishing a free-to-use sender blacklist called BRBL: http://www.barracudacentral.org/rbl In case someone shares my

Re: iXhash plugin and lists - feedback wanted

2008-09-29 Thread Vidar Tyldum Hansen
On Mon, Aug 04, 2008 at 11:13:29PM +0200, Dirk Bonengel wrote: Hi all, I'm the author of the iXhash plugin, a piece of code that computes a variety of 'fuzzy checksums' along the lines of the NiXSpam project (run by the German IT magazine iX). I would like to express my appreciation of

Re: iXhash plugin and lists - feedback wanted

2008-09-29 Thread Vidar Tyldum Hansen
On Sat, Sep 27, 2008 at 05:27:52PM +0200, Vidar Tyldum Hansen wrote: On Mon, Aug 04, 2008 at 11:13:29PM +0200, Dirk Bonengel wrote: Hi all, I'm the author of the iXhash plugin, a piece of code that computes a variety of 'fuzzy checksums' along the lines of the NiXSpam project (run

[Fwd: Travel Assistance to ApacheCon US 2008 - 3 days to apply!]

2008-09-29 Thread Daryl C. W. O'Shea
Original Message Subject: Travel Assistance to ApacheCon US 2008 - 3 days to apply! Date: Mon, 29 Sep 2008 20:10:19 +1000 From: Gav... [EMAIL PROTECTED] To: [EMAIL PROTECTED] *- Apologies to those PMCs that already got this email. The first attempt I made was rejected by at

Re: iXhash plugin and lists - feedback wanted

2008-09-29 Thread Dirk Bonengel
Vidar Tyldum Hansen schrieb: On Sat, Sep 27, 2008 at 05:27:52PM +0200, Vidar Tyldum Hansen wrote: On Mon, Aug 04, 2008 at 11:13:29PM +0200, Dirk Bonengel wrote: Hi all, I'm the author of the iXhash plugin, a piece of code that computes a variety of 'fuzzy checksums' along the lines

RDNS_NONE

2008-09-29 Thread Jimmy Stewpot
Hi There, I have recently been getting a huge increase in the number of emails which are being marked as spam. In those emails I see that the headers say RDNS_NONE. It seems that in most cases the remote servers in the header do in fact reverse resolve. I have checked randomly in about 30

Re: iXhash plugin and lists - feedback wanted

2008-09-29 Thread Yet Another Ninja
On 9/27/2008 5:27 PM, Vidar Tyldum Hansen wrote: On Mon, Aug 04, 2008 at 11:13:29PM +0200, Dirk Bonengel wrote: Hi all, I'm the author of the iXhash plugin, a piece of code that computes a variety of 'fuzzy checksums' along the lines of the NiXSpam project (run by the German IT magazine

Re: RDNS_NONE

2008-09-29 Thread Matus UHLAR - fantomas
On 29.09.08 14:14, Jimmy Stewpot wrote: I have recently been getting a huge increase in the number of emails which are being marked as spam. In those emails I see that the headers say RDNS_NONE. It seems that in most cases the remote servers in the header do in fact reverse resolve. I have

Re: iXhash plugin and lists - feedback wanted

2008-09-29 Thread Adam Stephens
Yet Another Ninja wrote: I guess this list is the best place to ask those of you who use the plugin for feedback. I'd appreciate any comments and information an hit rates, FPs and such Stats for the last 12 hours: 70% hitrate on spam. 0,1% hitrate on ham. 3000 emails in corpus. 0.1%

Re: Yahoo I have a new email abuse

2008-09-29 Thread mouss
ram wrote: 419 scammers are abusing the Yahoos I have a new email announce service https://ecm.netcore.co.in/tmp/scam1.eml.txt According to the Received headers, it travelled via: GB, India, Korea, US, then Taiwan before getting to its destination (munged by you for I don't know what

Re: RDNS_NONE

2008-09-29 Thread mouss
Jimmy Stewpot wrote: Hi There, I have recently been getting a huge increase in the number of emails which are being marked as spam. In those emails I see that the headers say RDNS_NONE. unless you modified the score, this is irrelevant. the default is score RDNS_NONE 0.1

Re: no rDNS and RDNS_NONE (Was: New free blacklist: BRBL - Barracuda Reputation Block List)

2008-09-29 Thread mouss
Justin Mason wrote: mouss writes: Justin Mason wrote: [snip] In fairness -- if you drop mail with no rDNS, you are dropping 3.6% of legit email in general, going by the test results for our RDNS_NONE rule... ;) It just came to my mind that RDNS_NONE does not mean the client does not

LogScannedMessages plugin

2008-09-29 Thread Roy McMorran
With the LogScannedMessages plugin - is there a way to capture the contents of a message *after* SA scans it? Cheers, -r -- Roy McMorran Systems Administrator MDI Biological Laboratory [EMAIL PROTECTED]

Re: LogScannedMessages plugin

2008-09-29 Thread Justin Mason
Roy McMorran writes: With the LogScannedMessages plugin - is there a way to capture the contents of a message *after* SA scans it? if you scan it with the command line scanner, using the same configuration, the results should be identical ;) --j.

Re: Long scan times with ctyme.ixhash.net

2008-09-29 Thread Marc Perkel
Jan Doberstein wrote: Wolfgang Zeikat schrieb: Do others also see that effect with ctyme.ixhash.net? yes, thats why i added ixhash_timeout 10 to my configuration (maybe hardware/bandwith on ctyme will be upgraded) regards jd For what it's worth I'm the one who is providing

Are my plugins working?

2008-09-29 Thread Jason Voorhees
Hi all: I'm learning a bit of SpamAssassin and its plugins. I'm not pretty sure if some of them are really working (i.e. SPF plugin) so I run: # spamassassin --lint -D 21 | less ... looking for error/warning messages and I found some of them. I would specially like to know if

RE: New free blacklist: BRBL - Barracuda Reputation Block List

2008-09-29 Thread Michael Hutchinson
Hello All, There were so many messages regarding this new Block List, I have to admit I have not read them all. I get the general idea that this new Barracuda Reputation Block List isn't all that hot. For instance, how do Barracuda generate their Block List? I don't think this has been answered

Re: sa-update?

2008-09-29 Thread Gene Heskett
On Monday 29 September 2008, Matthias Haegele wrote: Gene Heskett schrieb: Greetings; I fired off this script, named sa-update.cron, but which has been disabled in the crontab since someone here said it was a waste of time, and now it seems to be hung. Running it as root this time. Maybe

Re: Are my plugins working?

2008-09-29 Thread mouss
Jason Voorhees wrote: Hi all: I'm learning a bit of SpamAssassin and its plugins. I'm not pretty sure if some of them are really working (i.e. SPF plugin) so I run: # spamassassin --lint -D 21 | less ... looking for error/warning messages and I found some of them. I would specially like to

performance monitoring

2008-09-29 Thread Niels Przybilla
hi, is there some kind of tool, that can monitor spamassassin and tell, how many mails are processed and how much is marked as spam ... Many thanks BR Niels

quarantine mails

2008-09-29 Thread Niels Przybilla
hi, is there some kind of good working plugin/module/software that quarantines spam mails on server and sends a e.g. a daily, or weekly spam report to the according user, and the user can release some of the mails or delete them ? BR Niels

Re: performance monitoring

2008-09-29 Thread Sahil Tandon
Niels Przybilla [EMAIL PROTECTED] wrote: is there some kind of tool, that can monitor spamassassin and tell, how many mails are processed and how much is marked as spam ... Depending on how SA integrates into your mail flow, and how/where it logs, grep(1) along with wc(1) should suffice. You

Re: quarantine mails

2008-09-29 Thread Sahil Tandon
Niels Przybilla [EMAIL PROTECTED] wrote: is there some kind of good working plugin/module/software that quarantines spam mails on server and sends a e.g. a daily, or weekly spam report to the according user, and the user can release some of the mails or delete them ? Yes, but without knowing

re: quaratine mails

2008-09-29 Thread Niels Przybilla
Hi Sahil, I am sorry ... i forgot ... I use a centos Server where all the mails go through and then are delivered to mailboxes on the system. BR Niels