RE: Spam: New to Spamassassin

2006-12-07 Thread Darren Cockburn
Absolutely!

 

All you have to do is set up your spamassassin email server as a
smarthost (gateway) email server then forward all scanned email to your
exchange or groupwise server.

 

- Darren.

 



From: Development [mailto:[EMAIL PROTECTED] 
Sent: Thursday, December 07, 2006 1:28 PM
To: users@spamassassin.apache.org
Subject: Spam: New to Spamassassin

 

I would like to know if it is possible to use spamassassin on one server
to filter mail and then deliver it to a seperate mail server on the
network running exchange, groupwise, etc?



RE: Could THIS have doubled my SA Speed...

2006-11-18 Thread Darren Cockburn
Yes,

I have tested this by pointing my entries in resolve.conf to our
non-caching server. . .  definitely slowed it down ... about 1/2 the
speed
(could not do r-DNS as quickly) :)

- Darren.

-Original Message-
From: Jeff Chan [mailto:[EMAIL PROTECTED] 
Sent: Saturday, November 18, 2006 1:36 AM
To: users@spamassassin.apache.org
Subject: Re: Could THIS have doubled my SA Speed...

On Friday, November 17, 2006, 12:13:20 PM, Rob Systems) wrote:
 I tried adding a resolv.conf file (which wasn't previously there)
and entered my local DNS caching server there.

 Then, I restarted SpamD and ran a corpus of 50 test files through SA
(using a batch file, processing them one-by-one)... and this 2nd time it
processed twice as fast. I ask if these results sound
 correct because I figure that my results might be anidotal. Does this
type of speedup sound correct?

 I know that using a local DNS caching server can speed things up, but
I was only specifying the SAME one what was already the default DNS
server in my NIC card setup... so I would have thought that
 this would have already been the one chosen.

Under *nix/nux Net::DNS wants to use the first resolv.conf record
as it's resolver.  I'd imagine it could get confused or delayed
if there were no resolv.conf.  To compound the wild guess,
perhaps it works that way under Windows too.

 It stands to reason that, even though I have RBLs and URI-checked
turned off, there must be something ELSE that is getting checked across
the network (via DNS)... or OTHER DNS traffic besides just
 RAZOR and DCC. Any ideas what that might be?

A packet sniffer might tell you.

Jeff C.
-- 
Jeff Chan
mailto:[EMAIL PROTECTED]
http://www.surbl.org/



RE: New Spam

2006-11-17 Thread Darren Cockburn
TORA TECHNOLOGIES (TORA.OB) ???

- Darren.

-Original Message-
From: Bob McClure Jr [mailto:[EMAIL PROTECTED] 
Sent: Friday, November 17, 2006 11:18 AM
To: users@spamassassin.apache.org
Subject: Re: New Spam

On Fri, Nov 17, 2006 at 10:40:17AM -0500, Billy Huddleston wrote:
 I'm getting some new spam coming through.. It's ASCII art (using
nothing but numbers) and spells out TORA.08 and nothing else..
 
 It looks to be coming from a Bot-Net..  Anyone seen this?
 
 Thanks, Billy

Yes, one of my virtual mailboxes just got one.  Came from
impsat.net.ar.  I sent off a nastygram to the network admin.

somewhat off-topic

Speaking of which, I have a policy such that if I have to deal with a
piece of spam, I use whois to find the abuse reporting point for the
network the zombie is on, and send them a copy of the spam, headers
and all.  Am I spitting (to use a nicer term) in the ocean, or is it
worthwhile?

In particular, this is an issue with a closed mailing list I manage,
which, alas, is not on my server, so I have no control over how the
MTA is set up.  So I get (as of a couple of days ago) 40 or 50 spams
per day I have to moderate.  So if I have to deal with it, the
spammer pays with (I hope) a shutdown zombie.  In case the spammer is
reading this, it's hammered_dulcimers (at) lists.fmp.com.

/somewhat off-topic

Cheers,
-- 
Bob McClure, Jr. Bobcat Open Systems, Inc.
[EMAIL PROTECTED] http://www.bobcatos.com
Where you go in the hereafter depends on what you were after here.
  - Thanks to Graffiti, 2 March 2004