Re: Only running network tests when necessary - feature request

2010-10-31 Thread Henrik K

On Sat, Oct 30, 2010 at 09:28:27PM +0100, Justin Mason wrote:
 btw, I think this is already possible using the shortcircuit plugin.
 Just use rule priorities to run the non-net rules first, and
 shortcircuit if they are sufficient.

Currently DNS queries are sent no matter what, but it's fixable..

https://issues.apache.org/SpamAssassin/show_bug.cgi?id=5930


Re: Full circle DNS test?

2010-10-31 Thread Joseph Brennan



dar...@chaosreigns.com wrote:


I see there's a RDNS_NONE rule for when the sending IP address has no DNS
PTR (reverse DNS) record.  But no rule for when that PTR record doesn't
have a matching A (forward DNS) record that matches the sending IP?



Is this something that would be accepted into spamassassin if I created a
module?  Or a feature that would be added if I didn't do it?



There are legit mail servers with bad DNS.  Not the big ISPs or hosting
companies, but small businesses and nonprofits sometimes get this wrong,
and in a few countries nonmatching records seem to be routine.  We've
considered blocking for it, but we'd end up doing a lot of whitelisting
and interfering with mail that our users want.

It's worth scoring for, and RDNS_NONE already matches this case.

Joseph Brennan
Lead Email Systems Engineer
Columbia University Information Technology




Re: SA 3.3.1 and NetAddr::IP 4.034

2010-10-31 Thread Philip Prindeville

On 10/29/10 9:18 AM, Michael Scheidell wrote:

On 10/29/10 12:11 PM, Mark Martinec wrote:

Sure, go ahead, can't hurt. The patch is now in the SA trunk.
Is it worth opening a ticket and putting it into the 3.3 branch too?

   Mark

looks like Freebsd ports has an older version, so it should be ok.

 pkg_info | grep NetAddr
p5-NetAddr-IP-4.02.8 Perl module for working with IP addresses and blocks thereo




You might be able to get better results with: Net-Patricia-1.18 which I 
released earlier this week.



spamassassin - more children / faster scanning

2010-10-31 Thread Russ Sanders
I have an Ubuntu Linux server running SpamAssassin Server version 3.2.4 running
on Perl 5.8.8 with zlib support (Compress::Zlib 2.008).  I have at least one
account that is having to process from 250 - 400 emails, 99% spam, per HOUR. 
This works out to be approximately 8,000 emails per day.  The spamassassin just
can't keep up and it is backing the Queue upto 2500 messages.  I have made an
adjustment so that the one user can have multiple spamd children running for it,
but it doesn't seem to take on more that 2 spamd children.  

I have also recorded that scanning a single message appears to take
approximately 15 seconds.  I have adjusted the timeout to 5 seconds, but it
still appears to be taking 12 - 20 second per message.  This works out to 4 per
minute, or 240 per hour.  So, of course, it can't keep up if it has 450 per hour
coming at it.

The system is a basic Linode running Ubuntu Linux 8.04 with 512M of memory.
I would like to adjust appropriately

Number of Max Children
Number of Spare Children
Number of spamd services per account (upto max children if possible)
TimeOut on Scanning of the eMail

Suggestions will be appreciated.

Thank You
Russ