Re: Spam troubleshooting

2009-07-23 Thread Matus UHLAR - fantomas
> >> Can I also ask where the best place to start with to implement razor > >> and/or pyzor in SA3.2 on Linux with postfix? > > > > EHM? implement it on your mailserver... On 22.07.09 22:38, MySQL Student wrote: > Heh, no, I mean where can I go to learn how to implement it? Where's > the docs? :-)

Re: Spam troubleshooting

2009-07-22 Thread MySQL Student
>> Can I also ask where the best place to start with to implement razor >> and/or pyzor in SA3.2 on Linux with postfix? > > EHM? implement it on your mailserver... Heh, no, I mean where can I go to learn how to implement it? Where's the docs? :-) I think I'm headed towards razor first, as it does

Re: Spam troubleshooting

2009-07-22 Thread Matus UHLAR - fantomas
> >> How effective are razor/pyzor and SPF/DKIM? > > > > very effective, razor/pyzor altogether with DCC. > > > > SPF also helps much, although it should be implemented at SMTP level and > > refuse all messages that cause (hard) fail. > > > > While DKIM is currently in SA, the only place it current

Re: Spam troubleshooting

2009-07-22 Thread MySQL Student
>> How effective are razor/pyzor and SPF/DKIM? > > very effective, razor/pyzor altogether with DCC. > > SPF also helps much, although it should be implemented at SMTP level and > refuse all messages that cause (hard) fail. > > While DKIM is currently in SA, the only place it currently applies is >

Re: Spam troubleshooting

2009-07-10 Thread Matus UHLAR - fantomas
On 04.07.09 20:50, MySQL Student wrote: > I am stuck trying to figure out why the attached spam isn't caught properly. > In fact, BAYES_99 isn't flagged > and I know it should be, and the total score is 0.0, despite several rules > being flagged. The LOCAL_BODY_1577053434 and LOCAL_BODY_4046600451

Re: Spam troubleshooting

2009-07-10 Thread Matus UHLAR - fantomas
> ALL_TRUSTED is a bit odd. If you you look back through the debug, it > > has identified untrusted relays: > > > > [11689] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=194.230.33.137 > > rdns=mx.xm-rz.net helo=mail.xm-rz.net by=myhost.mydomain.com ident= > > envfrom= intl=0 id=B94C2118004 auth= ms

Re: Spam troubleshooting

2009-07-10 Thread Matus UHLAR - fantomas
> spamassassin 2>&1 -D --lint > > > > search here for missing perl modules On 05.07.09 18:57, MySQL Student wrote: > How effective are razor/pyzor and SPF/DKIM? very effective, razor/pyzor altogether with DCC. SPF also helps much, although it should be implemented at SMTP level and refuse all me

Re: Spam troubleshooting

2009-07-06 Thread MySQL Student
Hi, have any of you tryed going to dnswl.org homepage ?, even tryed to lookup > the ip ?, got refused submit of new ticket ? Yes, I went to the site, but didn't try to resolve either of them because I knew they were already on the list. They now appear to no longer be on the list. Now I know to

Re: Spam troubleshooting

2009-07-06 Thread Benny Pedersen
On Mon, July 6, 2009 14:59, LuKreme wrote: > On 5-Jul-2009, at 18:55, MySQL Student wrote: >>* -4.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/ > >> What the hell is RECVD_IN_DNSWL_MED and why is it trusted in >> dnswl.org? > > Did you look at the URL? > > I put the follo

Re: Spam troubleshooting

2009-07-06 Thread LuKreme
On 5-Jul-2009, at 18:55, MySQL Student wrote: * -4.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/ What the hell is RECVD_IN_DNSWL_MED and why is it trusted in dnswl.org? Did you look at the URL? I put the following in local.cf score RCVD_IN_DNSWL_LOW -1 score RCVD_

Re: Spam troubleshooting

2009-07-05 Thread MySQL Student
Hi again, I have more information on those untrusted hosts. ALL_TRUSTED is a bit odd. If you you look back through the debug, it >> has identified untrusted relays: >> >> [11689] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=194.230.33.137 >> rdns=mx.xm-rz.net helo=mail.xm-rz.net by=myhost.mydomai

Re: Spam troubleshooting

2009-07-05 Thread MySQL Student
Hi, ALL_TRUSTED is a bit odd. If you you look back through the debug, it > has identified untrusted relays: > > [11689] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=194.230.33.137 > rdns=mx.xm-rz.net helo=mail.xm-rz.net by=myhost.mydomain.com ident= > envfrom= intl=0 id=B94C2118004 auth= msa=0 ] [

Re: Spam troubleshooting

2009-07-05 Thread RW
On Sun, 5 Jul 2009 18:17:21 +0200 (CEST) "Benny Pedersen" wrote: > and the spam mail have all_trusted ?, you trust a spammer in > trusted_networks > ALL_TRUSTED is a bit odd. If you you look back through the debug, it has identified untrusted relays: [11689] dbg: metadata: X-Spam-Relays-Untrus

Re: Spam troubleshooting

2009-07-05 Thread Benny Pedersen
On Mon, July 6, 2009 01:00, MySQL Student wrote: > I meant to add, how can I determine which IP it was that is being trusted, > anyway? spamassassin 2>&1 -D -t spammsg | grep trusted | less there you see all trusted ip, is all safe ? grep untrusted aswell to see where other ips is, hopefully t

Re: Spam troubleshooting

2009-07-05 Thread Benny Pedersen
On Mon, July 6, 2009 00:57, MySQL Student wrote: > spamassassin 2>&1 -D --lint >> search here for missing perl modules > How effective are razor/pyzor and SPF/DKIM? I've always been a bit hesitant > to use any of those. well it helps, if used properly, how thay works is depending on your need an

Re: Spam troubleshooting

2009-07-05 Thread MySQL Student
Hi again, and the spam mail have all_trusted ?, you trust a spammer in > trusted_networks I meant to add, how can I determine which IP it was that is being trusted, anyway? Thanks again, Alex

Re: Spam troubleshooting

2009-07-05 Thread MySQL Student
Hi, spamassassin 2>&1 -D --lint > > search here for missing perl modules How effective are razor/pyzor and SPF/DKIM? I've always been a bit hesitant to use any of those. and the spam mail have all_trusted ?, you trust a spammer in > trusted_networks trusted_networks isn't at all defined. It l

Re: Spam troubleshooting

2009-07-05 Thread Benny Pedersen
On Sun, July 5, 2009 02:50, MySQL Student wrote: > The X-MailCleaner headers were there when I received the email. I've > obfuscated our customers domain for security. > > Any ideas greatly appreciated. Where can I start? Am I doing something wrong > or is there something in the header that is re