Re: Why does svn update pull in Mail-SpamAssassin-3.4.0.tar.gz?

2010-02-14 Thread Karsten Bräckelmann
On Sun, 2010-02-14 at 13:06 +0800, jida...@jidanni.org wrote: Why does svn update pull in Mail-SpamAssassin-3.4.0.tar.gz? Err, what do you mean exactly? You know, sometimes it really helps explaining your issue in detail. Anyway, svn update sure doesn't pull in any such archive here.

Re: MTX plugin functionally complete? Re: Spam filtering similar to SPF, less breakage

2010-02-14 Thread Jonas Eckerman
On 2010-02-13 04:24, dar...@chaosreigns.com wrote: panic.chaosreigns.com. IN SPF v=spf1 a:64.71.152.40 -all No. MTX defines 64.71.152.40 as a legitimate transmitting mail server, regardless of the domain in the envelope from, From: header, etc.. Popular misconception, it seems. The SPF

Re: Outbound SPAM filter

2010-02-14 Thread Karsten Bräckelmann
On Sat, 2010-02-13 at 12:42 -0800, an anonymous Nabble user wrote: Hello all, I'm having trouble getting my mail server to scan outbound emails for spam, incoming works fine (in as much as that it captures spammy email). Any feedback would be appreciated. My setup as follows: [550 lines

Re: MTX plugin functionally complete? Re: Spam filtering similar to SPF, less breakage

2010-02-14 Thread Jonas Eckerman
On 2010-02-13 04:24, dar...@chaosreigns.com wrote: Still http://www.chaosreigns.com/mtx/ I still have the following comments (wich you didn't answer previously): * I think there should be a way to tell the world wether you are using the scheme for a domain (not host) or not. This could

Re: MTX plugin functionally complete? Re: Spam filtering similar to SPF, less breakage

2010-02-14 Thread Jonas Eckerman
On 2010-02-13 21:48, dar...@chaosreigns.com wrote: Looks like it ties the helo domain to the delivering IP, breaking (broken) forwarding just like SPF? Tying the HELO domain to an IP has does not break forwarding. The host name (including domain) used in HELO is independent from the domain

SA 330 compile error. where do I start looking

2010-02-14 Thread Michael Scheidell
only does this on ONE system. all have similar setups, same ram, same cpu, same rev or re2c, same os. so out of hundreds of systems, why does this one die? why with sa 330 and not sa 325? (yes, its a sares rule, yes, we don't need them anymore), but sa-compile is seeing something that is

Re: SA 330 compile error. where do I start looking

2010-02-14 Thread Karsten Bräckelmann
On Sun, 2010-02-14 at 09:45 -0500, Michael Scheidell wrote: only does this on ONE system. all have similar setups, same ram, same cpu, same rev or re2c, same os. so out of hundreds of systems, why does this one die? why with sa 330 and not sa 325? (yes, its a sares rule, yes, we don't

Re: MTX plugin functionally complete? Re: Spam filtering similar to SPF, less breakage

2010-02-14 Thread Per Jessen
Jonas Eckerman wrote: (And of course, if this catches on, you'll have to provide RFC style documentation.) See Justins posting from two days back: http://tools.ietf.org/draft/draft-stumpf-dns-mtamark/ http://tools.ietf.org/draft/draft-stumpf-dns-mtamark/draft-stumpf-dns-mtamark-04.txt That

Yahoo Feedback Loop - off topic

2010-02-14 Thread Jeff Koch
Sorry this is off-topic but has anyone successful applied for the Yahoo Email Complaint Feedback Loop? On the one hand their website says they have an ISP program based on IP addresses and CIDR ranges that does not require emails to be signed with DomainKeys or DKIM and then, on the other

Re: Yahoo Feedback Loop - off topic

2010-02-14 Thread Ralf Hildebrandt
* Jeff Koch jeffk...@intersessions.com: Sorry this is off-topic but has anyone successful applied for the Yahoo Email Complaint Feedback Loop? Yes, I did. On the one hand their website says they have an ISP program based on IP addresses and CIDR ranges that does not require emails to be

Re: MTX plugin functionally complete? Re: Spam filtering similar to SPF, less breakage

2010-02-14 Thread --[ UxBoD ]--
- Per Jessen p...@computer.org wrote: Jonas Eckerman wrote: (And of course, if this catches on, you'll have to provide RFC style documentation.) See Justins posting from two days back: http://tools.ietf.org/draft/draft-stumpf-dns-mtamark/

Re: MTX plugin functionally complete? Re: Spam filtering similar to SPF, less breakage

2010-02-14 Thread Darxus
On 02/14, Jonas Eckerman wrote: The SPF record above says that a host using panic.chaosreigns.com in HELO should not be allowed to send mail unless it has the IP address 64.71.152.40, regardless of the domain in the envelope from, From: header, etc.. That's not exactly the same as your

MTAMark Re: MTX plugin functionally complete?

2010-02-14 Thread Darxus
On 02/14, --[ UxBoD ]-- wrote: http://tools.ietf.org/draft/draft-stumpf-dns-mtamark/ Personally I think it is a great idea and anything to help combat the spam is always a worthwhile effort. Is it possible to resurrect that proposal and worth with the original authors and perhaps combine

MTX public blacklist implemented Re: MTX plugin functionally complete?

2010-02-14 Thread Darxus
Very simple, via HTTP and a small perl script: http://www.chaosreigns.com/mtx/#blacklist It's currently empty. On 02/14, dar...@chaosreigns.com wrote: On 02/14, Jonas Eckerman wrote: * I think there should be a way to tell the world wether you are using the scheme for a domain (not host)

Re: MTX public blacklist implemented Re: MTX plugin functionally complete?

2010-02-14 Thread Jonas Eckerman
On 2010-02-14 20:06, dar...@chaosreigns.com wrote: I remembered why (else) I didn't want to do that. It effectively says Everything else should be rejected. Which will discourage some people from using it. So you would at least need to provide a way to say Yes, I'm participating, but

Re: MTX public blacklist implemented Re: MTX plugin functionally complete?

2010-02-14 Thread Darxus
On 02/14, Jonas Eckerman wrote: 1: The participation record is optional, so you only use it if you want everything else to be rejected. Yeah. I'm thinking of using the 4th octet to indicate participation, and the third octet to indicate delegation. Check for the MTX record first, and if it

sa-update channel problem

2010-02-14 Thread mbeis
Hi, After upgrading SpamAssassin to 3.3.0 on FreeBSD 8-Stable, spamd doesn't start anymore and exits with an error: child process [x] exited or timed out without signaling production of a PID file: exit 25 at /usr/local/bin/spamd line 2544. It seems that I have to run sa-update first in

RES: Re: SA 3.3 w/MailScanner

2010-02-14 Thread Noel Butler
On Fri, 2010-02-05 at 13:58 +1000, Noel Butler wrote: Hi, Is anyone else using this combination, and who uses attachment to, in particular for low score spam, seeing no results in the initial warning.txt, as ... (no report template found) instead of the SA report? If you do, I ask

Re: MTX plugin functionally complete? Re: Spam filtering similar to SPF, less breakage

2010-02-14 Thread Darxus
On 02/14, Jonas Eckerman wrote: * I think you should follow conventions in DNS naming, using an underscore to signify that the DNS record is a special type of record. This is quite common. I didn't like this idea, but I have realized it's the right thing to do. Now should I use _mtx, or

Re: Outbound SPAM filter

2010-02-14 Thread Karsten Bräckelmann
Nabble allows off-list replies, and apparently even makes it easy to use? WTF, shouldn't the default be list reply, and anything else guarded by serious confirmation dialogs? Awesome, and it even breaks threading. How utterly annoying. Please keep the thread on-list, replying to the list. Do

MTX Participant records Re: MTX plugin functionally complete?

2010-02-14 Thread Darxus
http://www.chaosreigns.com/mtx/participant/ Let me know what you think. I'd really like suggestions on something to use other than participant. -- If one out of every two hundred American men have the guts to fight for freedom alone, in secret and from ambush, this country will never be

Re: sa-update fails: daryl.dostech...404

2010-02-14 Thread Daryl C. W. O'Shea
On 13/02/2010 6:35 PM, jida...@jidanni.org wrote: $ sa-update http: GET http://daryl.dostech.ca/sa-update/asf/909775.tar.gz request failed: 404 Not Found There was an issue on the source host that has since been resolved. Daryl

Re: SA 330 compile error. where do I start looking

2010-02-14 Thread Michael Scheidell
On 2/14/10 9:50 AM, Karsten Bräckelmann wrote: Bad RAM? well, it didn't start till SA 3.30, and deleting those two rules stopped the seg fault and crash.. more likely a bad ST 504 controller. -- Michael Scheidell, CTO Phone: 561-999-5000, x 1259 *| *SECNAP Network Security

Re: MTX plugin functionally complete? Re: Spam filtering similar to SPF, less breakage

2010-02-14 Thread Darxus
On 02/14, dar...@chaosreigns.com wrote: Now should I use _mtx, or MTAMark style _smtp._srv? DNS records containing underscores are apparently a pain. In my Bind config I had to add check-names ignore;. My secondary DNS provider is responding with REFUSED (I asked them to fix it). Is it worth

Re: sa-update channel problem

2010-02-14 Thread Kai Schaetzl
Mbeis wrote on Sun, 14 Feb 2010 13:19:44 -0800 (PST): It seems that I have to run sa-update first in order for SA to work. But sa-update exits with an error too, sa-update -D gives: I think I have seen a few messages over this weekend about update problems. There must have been/be some server

Re: sa-update channel problem

2010-02-14 Thread John Hardin
On Sun, 14 Feb 2010, mbeis wrote: Feb 14 22:12:46.522 [11706] dbg: dns: query failed: 0.3.3.updates.spamassassin.org = NOERROR Feb 14 22:12:46.525 [11706] dbg: dns: query failed: mirrors.updates.spamassassin.org = NOERROR channel: no 'mirrors.updates.spamassassin.org' record found, channel

Re: Outbound SPAM filter

2010-02-14 Thread Mark Martinec
On Saturday February 13 2010 21:42:35 shawnbor wrote: I'm having trouble getting my mail server to scan outbound emails for spam, incoming works fine (in as much as that it captures spammy email). FreeBSD 6, postfix 2.3.2, amavisd-new 2.4.2, spamassassin 3.1.3, mysql 5 How do you know it is

_mtx Re: MTX plugin functionally complete?

2010-02-14 Thread Darxus
On 02/14, dar...@chaosreigns.com wrote: Is it worth the hassle to have the underscore? Response from my secondary DNS provider: Thank you for contacting us. An underscore is only legal for specific types of DNS records, such as 'SRV'. 'A' records should only contain letters, numbers and

Re: SA 330 compile error. where do I start looking

2010-02-14 Thread jdow
From: Michael Scheidell scheid...@secnap.net Sent: Sunday, 2010/February/14 15:27 On 2/14/10 9:50 AM, Karsten Bräckelmann wrote: Bad RAM? well, it didn't start till SA 3.30, and deleting those two rules stopped the seg fault and crash.. more likely a bad ST 504 controller. Somebody is

Re: spamassassin script is v3.003000, but using modules v3.004000

2010-02-14 Thread jidanni
MM The usual procedure is: MM perl Makefile.PL; make; make test; make install Ah, that now works only once! Now only set -e; perl Makefile.PL; make clean; perl Makefile.PL; make; make install will work each time, even if a few months pass between one's upgrades. Hmmm, they might want to

Re: X-Spam-Languages always blank?

2010-02-14 Thread Matt Kettler
On 2/13/2010 9:49 AM, Robert Nicholson wrote: ok looks like my problem is because I'm reprocessing a message that already has an X-Spam-Languages: nothing header in it. I expected that it wouldn't matter that it was there as it would be removed and populated accordingly but that is only

Re: Yahoo Feedback Loop - off topic

2010-02-14 Thread ram
On Sun, 2010-02-14 at 18:51 +0100, Ralf Hildebrandt wrote: * Jeff Koch jeffk...@intersessions.com: Sorry this is off-topic but has anyone successful applied for the Yahoo Email Complaint Feedback Loop? Yes, I did. On the one hand their website says they have an ISP program

Re: sa-update channel problem

2010-02-14 Thread mbeis
John Hardin wrote: On Sun, 14 Feb 2010, mbeis wrote: Feb 14 22:12:46.522 [11706] dbg: dns: query failed: 0.3.3.updates.spamassassin.org = NOERROR Feb 14 22:12:46.525 [11706] dbg: dns: query failed: mirrors.updates.spamassassin.org = NOERROR channel: no