Re: [Mimedefang] DCC, Pyzor, and Razor header additions

2009-05-29 Thread Casper Kristiansson
Hi.

In sa-mimedefan.cf add something like

use_razor2 1
razor_timeout 30

use_dcc 1
dcc_timeout 30
dcc_path /usr/local/bin/dccproc
add_header all DCC _DCCB_: _DCCR_

use_pyzor 1
pyzor_timeout 30
pyzor_options --homedir /etc/mail/spamassassin/pyzor
pyzor_path /usr/bin/pyzor
add_header all Pyzor _PYZOR_

and reread your filterrules

/C

Från: mimedefang-boun...@lists.roaringpenguin.com 
[mimedefang-boun...@lists.roaringpenguin.com] för afo cliff 
[afocl...@gmail.com]
Skickat: den 30 maj 2009 00:00
Till: mimedefang@lists.roaringpenguin.com
Ämne: Re: [Mimedefang] DCC, Pyzor, and Razor header additions

John,

While we wait for a response, I'd be interested in knowing how you tag and log.

Cliff

On Fri, May 29, 2009 at 8:11 AM, Dr John Halewood  wrote:
> Actually, this made me curious, as I always tag and log DCC/Pyzor and Razor
> hits. But looking through the logs, I haven't had any hits from Pyzor or
> Razor for a couple of weeks, when they used to happen all the time. Anyone
> else noticed this?
>
> Regards
> John
> ___
> NOTE: If there is a disclaimer or other legal boilerplate in the above
> message, it is NULL AND VOID.  You may ignore it.
>
> Visit http://www.mimedefang.org and http://www.roaringpenguin.com
> MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Greylisting post-data (was Re: [PATCH] filter_data implementation)

2009-05-29 Thread -

--- On Fri, 5/29/09, Richard Laager  wrote:
> On Thu, 2009-05-28 at 13:17 -0700, - wrote:
> > Then again, I kill messages that have improperly formatted "Received:"
> > header lines.  (Those that claim "with *smtp*"(wildcarded) ...
> 
> Would you be willing to share this code?

Message sent directly since it uses M4 code (i.e. sendmail rulesets), not perl 
and MimeDefang.
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] DCC, Pyzor, and Razor header additions

2009-05-29 Thread afo cliff
John,

While we wait for a response, I'd be interested in knowing how you tag and log.

Cliff

On Fri, May 29, 2009 at 8:11 AM, Dr John Halewood  wrote:
> Actually, this made me curious, as I always tag and log DCC/Pyzor and Razor
> hits. But looking through the logs, I haven't had any hits from Pyzor or
> Razor for a couple of weeks, when they used to happen all the time. Anyone
> else noticed this?
>
> Regards
> John
> ___
> NOTE: If there is a disclaimer or other legal boilerplate in the above
> message, it is NULL AND VOID.  You may ignore it.
>
> Visit http://www.mimedefang.org and http://www.roaringpenguin.com
> MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
> http://lists.roaringpenguin.com/mailman/listinfo/mimedefang
>
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] Greylisting post-data (was Re: [PATCH] filter_data implementation)

2009-05-29 Thread Richard Laager
On Thu, 2009-05-28 at 13:17 -0700, - wrote:
> Then again, I kill messages that have improperly formatted "Received:"
> header lines.  (Those that claim "with *smtp*"(wildcarded) must
> conform to 5321 instead of the looser syntax in 5322 and as such, they
> must have "from" and "by" clauses that are domain names (or address
> literals).  If they don't, I reject them as malformed spam.

Would you be willing to share this code?

Thanks,
Richard

___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang


Re: [Mimedefang] DCC, Pyzor, and Razor header additions

2009-05-29 Thread Dr John Halewood
Actually, this made me curious, as I always tag and log DCC/Pyzor and Razor
hits. But looking through the logs, I haven't had any hits from Pyzor or
Razor for a couple of weeks, when they used to happen all the time. Anyone
else noticed this?

Regards
John
___
NOTE: If there is a disclaimer or other legal boilerplate in the above
message, it is NULL AND VOID.  You may ignore it.

Visit http://www.mimedefang.org and http://www.roaringpenguin.com
MIMEDefang mailing list MIMEDefang@lists.roaringpenguin.com
http://lists.roaringpenguin.com/mailman/listinfo/mimedefang