Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Dave Goodrich
Jon LaBass wrote:
Jon LaBass wrote:
snip
Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
or
above will not be delivered.
Jon
I just upgraded four servers this morning to 5.4.6, that is not a
configure option that I know of. What vpopmail do you use?
DAve

Well, I use vpopmail on FreeBSD and that's how you define it with the ports.
After I wrote that I thought Doh!  Not everybody is using bsd so that
option may not be available.  But, on other systems where you have to
manually compile vpopmail, the option --enable-spam-threshold=10 should
work.
I use FreeBSD and NetBSD though I don't use ports. The stock vpopmail 
doesn't have this option, at least not the sources I downloaded Monday. 
Looking through the files directory in the port it seems the 
spamassassin code is a patch added by someone else to vdelivermail.c and 
vpopmail.c

Interested in knowing how well it works for you though.
DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Ken Jones
On Friday 17 September 2004 09:02 am, Dave Goodrich wrote:
 Jon LaBass wrote:
 Jon LaBass wrote:
 
 snip
 
 Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
 
  or
 
 above will not be delivered.
 
 Jon
 
 I just upgraded four servers this morning to 5.4.6, that is not a
 configure option that I know of. What vpopmail do you use?
 
 DAve
 
  Well, I use vpopmail on FreeBSD and that's how you define it with the
  ports. After I wrote that I thought Doh!  Not everybody is using bsd so
  that option may not be available.  But, on other systems where you have
  to manually compile vpopmail, the option --enable-spam-threshold=10
  should work.

 I use FreeBSD and NetBSD though I don't use ports. The stock vpopmail
 doesn't have this option, at least not the sources I downloaded Monday.
 Looking through the files directory in the port it seems the
 spamassassin code is a patch added by someone else to vdelivermail.c and
 vpopmail.c

 Interested in knowing how well it works for you though.

The devel version has --enable-spamassassin which checks the 
X-Spam-Flag: YES value set in the headers if the hit count is greater
than the required hits. It would not be much more work to add in the 
--enable-spam-threshold option too. I have that code in simscan now.

Ken Jones


Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Dave Goodrich
Ken Jones wrote:
On Friday 17 September 2004 09:02 am, Dave Goodrich wrote:
Jon LaBass wrote:
Jon LaBass wrote:
snip
Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
or

above will not be delivered.
Jon
I just upgraded four servers this morning to 5.4.6, that is not a
configure option that I know of. What vpopmail do you use?
DAve
Well, I use vpopmail on FreeBSD and that's how you define it with the
ports. After I wrote that I thought Doh!  Not everybody is using bsd so
that option may not be available.  But, on other systems where you have
to manually compile vpopmail, the option --enable-spam-threshold=10
should work.
I use FreeBSD and NetBSD though I don't use ports. The stock vpopmail
doesn't have this option, at least not the sources I downloaded Monday.
Looking through the files directory in the port it seems the
spamassassin code is a patch added by someone else to vdelivermail.c and
vpopmail.c
Interested in knowing how well it works for you though.

The devel version has --enable-spamassassin which checks the 
X-Spam-Flag: YES value set in the headers if the hit count is greater
than the required hits. It would not be much more work to add in the 
--enable-spam-threshold option too. I have that code in simscan now.
No, I was just curious, we are happy with the way it works now. I'd 
rather not have a compile time limit as we have our users used to 
determining the limit they want.

Thanks,
DAve
Ken Jones

--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Jon LaBass
 Jon LaBass wrote:

 Jon LaBass wrote:
 
 snip
 
 Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
 
  or
 
 above will not be delivered.
 
 Jon
 
 I just upgraded four servers this morning to 5.4.6, that is not a
 configure option that I know of. What vpopmail do you use?
 
 DAve
 
 
  Well, I use vpopmail on FreeBSD and that's how you define it with the
ports.
  After I wrote that I thought Doh!  Not everybody is using bsd so that
  option may not be available.  But, on other systems where you have to
  manually compile vpopmail, the option --enable-spam-threshold=10 should
  work.
 

 I use FreeBSD and NetBSD though I don't use ports. The stock vpopmail
 doesn't have this option, at least not the sources I downloaded Monday.
 Looking through the files directory in the port it seems the
 spamassassin code is a patch added by someone else to vdelivermail.c and
 vpopmail.c

 Interested in knowing how well it works for you though.

 DAve

 -- 
 Systems Administrator
 http://www.tls.net
 Get rid of Unwanted Emails...get TLS Spam Blocker!


It works quite well.  I'm surprised you don't take advantage of the FreeBSD
ports.  Install vpopmail with the SA flags and SA gets installed
automagically and it works normally.

Jon



Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Dave Goodrich
Jon LaBass wrote:
snip
Interested in knowing how well it works for you though.
DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!

It works quite well.  I'm surprised you don't take advantage of the FreeBSD
ports.  Install vpopmail with the SA flags and SA gets installed
automagically and it works normally.
Jon
I do use ports on some applications (portupgrade rocks), but often if I 
need to do a custom configure I just find it easier to do a manual 
install, as is the case with vpopmail. We use MySQL and a custom script 
to call spamc changing the delivery requirements based on the spamc 
results. Some users want the spam tagged, some want it delivered another 
spam box, some want it deleted. We also allow our users to decide the 
score they want mail marked as spam, for some it is a user determined 
score, some a domain determined score.

DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


[vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Andrew Niemantsverdriet
I am doing a major upgrade to our mail server and I am looking for
recommendations for programs and qmail patches to limit the amount of
spam that gets through. What are you guys using that has great success? 



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Matthew Walker
SPF/RBL/SpamAssassin is a great combo.

I merely flag with SPF and SpamAssassin right now, but I actively
reject based on the ORDB RBL. I've also added some custom SpamAssassin
rules to watch for the SPF flags, and adjust the score accordingly. If
you're interested, I can provide them.


On Thu, 16 Sep 2004 10:40:25 -0600, Andrew Niemantsverdriet
[EMAIL PROTECTED] wrote:
 I am doing a major upgrade to our mail server and I am looking for
 recommendations for programs and qmail patches to limit the amount of
 spam that gets through. What are you guys using that has great success?
 



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Ken Jones
On Thursday 16 September 2004 11:40 am, Andrew Niemantsverdriet wrote:
 I am doing a major upgrade to our mail server and I am looking for
 recommendations for programs and qmail patches to limit the amount of
 spam that gets through. What are you guys using that has great success?

I would recommend using an RBL list. Using a check-user patch to
qmail-smtpd. And using a combination of spamassassin and clamav.

Ken Jones


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Dave Goodrich
Andrew Niemantsverdriet wrote:
 I am doing a major upgrade to our mail server and I am looking for
 recommendations for programs and qmail patches to limit the amount of
 spam that gets through. What are you guys using that has great success?



SpamAssassin without a doubt. Depending on how much traffic you have I 
would not use any qmailqueu patch as I had seen ours use a lot of 
resources.

We process around 100k to 150k messages a day (inbound only). We use 
dot-qmail to call a script which runs SA with user specific prefs.

If you have a lot of traffic, I would look seriously at MailScanner. I 
run MailScanner on the gateway for SV scanning only but it does have 
hooks for SA.

DAve

--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Matthew Walker
Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).


On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones [EMAIL PROTECTED] wrote:
 
 
 On Thursday 16 September 2004 11:40 am, Andrew Niemantsverdriet wrote:
  I am doing a major upgrade to our mail server and I am looking for
  recommendations for programs and qmail patches to limit the amount of
  spam that gets through. What are you guys using that has great success?
 
 I would recommend using an RBL list. Using a check-user patch to
 qmail-smtpd. And using a combination of spamassassin and clamav.
 
 Ken Jones



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Dave Goodrich
Andrew Niemantsverdriet wrote:
I am doing a major upgrade to our mail server and I am looking for
recommendations for programs and qmail patches to limit the amount of
spam that gets through. What are you guys using that has great success? 


I forget to add we also use spamcop, but not in SpamAssassin, I let 
qmail do it. I would also highly recommend the SURBL in SpamAssassin. If 
I use no other tests, SURBL would catch 70% of my current caught spam.

DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


RE: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Jan Lange
Hi,

how can I use SA global in qmail, with dropping of Mails that
have more than 10 points of score?

So that this mails that are definitly spam don't deliver to the
user?

That would extremly reduce our traffic and spam mails in the customer
mailbox.

Greetings
Jan 

 -Original Message-
 From: Matthew Walker [mailto:[EMAIL PROTECTED] 
 Sent: Thursday, September 16, 2004 7:06 PM
 To: [EMAIL PROTECTED]
 Subject: Re: [vchkpw] Recomendations for best spam rejection
 
 Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).
 
 
 On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones [EMAIL PROTECTED] wrote:
  
  
  On Thursday 16 September 2004 11:40 am, Andrew 
 Niemantsverdriet wrote:
   I am doing a major upgrade to our mail server and I am looking for
   recommendations for programs and qmail patches to limit 
 the amount of
   spam that gets through. What are you guys using that has 
 great success?
  
  I would recommend using an RBL list. Using a check-user patch to
  qmail-smtpd. And using a combination of spamassassin and clamav.
  
  Ken Jones
 
 



RE: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Jan Lange

 I forget to add we also use spamcop, but not in SpamAssassin, I let 
 qmail do it. I would also highly recommend the SURBL in 
 SpamAssassin. If 
 I use no other tests, SURBL would catch 70% of my current caught spam.

what is SURBL? have you an URL?

Jan



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Christopher Grello
Courtesy of Google:

http://www.google.com/search?q=SURBLsourceid=firefoxstart=0start=0ie=utf-8oe=utf-8

- Chris

On Thu, 16 Sep 2004 19:31:01 +0200, Jan Lange
[EMAIL PROTECTED] wrote:
 
  I forget to add we also use spamcop, but not in SpamAssassin, I let
  qmail do it. I would also highly recommend the SURBL in
  SpamAssassin. If
  I use no other tests, SURBL would catch 70% of my current caught spam.
 
 what is SURBL? have you an URL?
 
 Jan
 



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Joe Boyce

http://www.surbl.org/

We use it here too (Also a public DNS server for them), by far
the best spam filtering we do.

A would recommend again :-)

Regards,

Joe Boyce
---
InterStar, Inc. - Shasta.com Internet
Phone: +1 (530) 224-6866 x105
Email: [EMAIL PROTECTED]

Thursday, September 16, 2004, 10:31:01 AM, you wrote:


 I forget to add we also use spamcop, but not in SpamAssassin, I let
 qmail do it. I would also highly recommend the SURBL in 
 SpamAssassin. If 
 I use no other tests, SURBL would catch 70% of my current caught spam.

JL what is SURBL? have you an URL?

JL Jan




Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Jon LaBass
 Hi,

 how can I use SA global in qmail, with dropping of Mails that
 have more than 10 points of score?

 So that this mails that are definitly spam don't deliver to the
 user?

 That would extremly reduce our traffic and spam mails in the customer
 mailbox.

 Greetings
 Jan

  -Original Message-
  From: Matthew Walker [mailto:[EMAIL PROTECTED]
  Sent: Thursday, September 16, 2004 7:06 PM
  To: [EMAIL PROTECTED]
  Subject: Re: [vchkpw] Recomendations for best spam rejection
 
  Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).
 
 
  On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones [EMAIL PROTECTED] wrote:
  
  
   On Thursday 16 September 2004 11:40 am, Andrew
  Niemantsverdriet wrote:
I am doing a major upgrade to our mail server and I am looking for
recommendations for programs and qmail patches to limit
  the amount of
spam that gets through. What are you guys using that has
  great success?
  
   I would recommend using an RBL list. Using a check-user patch to
   qmail-smtpd. And using a combination of spamassassin and clamav.
  
   Ken Jones
  
 



Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0 or
above will not be delivered.

Jon



RE: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Joseph B Schmitt II


 -Original Message-
 From: Jon LaBass [mailto:[EMAIL PROTECTED]
 Sent: Thursday, September 16, 2004 10:49 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [vchkpw] Recomendations for best spam rejection


  Hi,
 
  how can I use SA global in qmail, with dropping of Mails that
  have more than 10 points of score?
 
  So that this mails that are definitly spam don't deliver to the
  user?
 
  That would extremly reduce our traffic and spam mails in the customer
  mailbox.
 
  Greetings
  Jan
 
   -Original Message-
   From: Matthew Walker [mailto:[EMAIL PROTECTED]
   Sent: Thursday, September 16, 2004 7:06 PM
   To: [EMAIL PROTECTED]
   Subject: Re: [vchkpw] Recomendations for best spam rejection
  
   Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).
  
  
   On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones [EMAIL PROTECTED] wrote:
   
   
On Thursday 16 September 2004 11:40 am, Andrew
   Niemantsverdriet wrote:
 I am doing a major upgrade to our mail server and I am looking for
 recommendations for programs and qmail patches to limit
   the amount of
 spam that gets through. What are you guys using that has
   great success?
   
I would recommend using an RBL list. Using a check-user patch to
qmail-smtpd. And using a combination of spamassassin and clamav.
   
Ken Jones
   
  
 
 

 Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0 or
 above will not be delivered.

 Jon



as all others said SA and Clamd.

we use Clamd tapped into qmail-scanner w/virus updates as notifications are
sent.

we process SA though dot-qmail+maildrop with user-preferences as well as
only processing SA for *real* users.  the difficuly we've seen is there is
so much spam to non-existant accounts we needed to quit wasting SA
processing time.  in addition, we use a little SA cluster: 8 boxes
processing SA, with NFS'd bayesDB and a custom weighted random rotator
script.

--joey



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Dave Goodrich
Jan Lange wrote:
Hi,
how can I use SA global in qmail, with dropping of Mails that
have more than 10 points of score?
Lots of ways, .qmail-default file, qmailqueue replacements, custom 
scripts, ask the SpamAssassin list. I don't do that but I am sure others do.

Http://www.spamassassin.org
DAve
So that this mails that are definitly spam don't deliver to the
user?
That would extremly reduce our traffic and spam mails in the customer
mailbox.
Greetings
Jan 


-Original Message-
From: Matthew Walker [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 16, 2004 7:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [vchkpw] Recomendations for best spam rejection

Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).
On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones [EMAIL PROTECTED] wrote:
On Thursday 16 September 2004 11:40 am, Andrew 
Niemantsverdriet wrote:
I am doing a major upgrade to our mail server and I am looking for
recommendations for programs and qmail patches to limit 
the amount of
spam that gets through. What are you guys using that has 
great success?
I would recommend using an RBL list. Using a check-user patch to
qmail-smtpd. And using a combination of spamassassin and clamav.
Ken Jones



--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Dave Goodrich
Jon LaBass wrote:
snip
Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0 or
above will not be delivered.
Jon
I just upgraded four servers this morning to 5.4.6, that is not a 
configure option that I know of. What vpopmail do you use?

DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Brian Millar
Hi,
We started with Spamassassin called from users .qmail file (with user 
prefs), clamd with qmailscanner and

/usr/local/bin/rblsmtpd -b -C \
 -r 'relays.ordb.org:Your message was rejected because the mail server you 
use is configured to allow OPEN RELAY - More detailed information regarding 
this problem is available from http://www.ordb.org/lookup/?host=%IP% - 
Please forward this error through to your email server support staff for 
easy resolution.' \
 -t 5 \

in our qmail-smtp run file. IsoQLog shows that we recieved approx 3.5 - 4 
million messages each month from january to june. Mid june, we modified our 
qmail-smtp run file to:

/usr/local/bin/rblsmtpd -b -C \
 -r 'relays.ordb.org:Your message was rejected because the mail server you 
use is configured to allow OPEN RELAY - More detailed information regarding 
this problem is available from http://www.ordb.org/lookup/?host=%IP% - 
Please forward this error through to your email server support staff for 
easy resolution.' \
 -r 'sbl-xbl.spamhaus.org:Probable spam connection rejected. Details at 
http://www.spamhaus.org/query/bl?ip=%IP%' \
 -r 'list.dsbl.org:Probable spam connection rejected. Details at 
http://dsbl.org/listing?%IP%' \
 -t 5 \

July's recieved count was at 2.2 million and august's count was at 1.1 
million. we have had nothing but thanks from our customers who recieve 
less than half of the spammail they used to, before spamassassin come into 
play.

The ordb stopped very little spam, The XBL/SBL stops MORE THAN HALF of our 
incoming mail.
http://www.spamhaus.org

Brian

- Original Message - 
From: Andrew Niemantsverdriet [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, September 16, 2004 9:40 AM
Subject: [vchkpw] Recomendations for best spam rejection


I am doing a major upgrade to our mail server and I am looking for
recommendations for programs and qmail patches to limit the amount of
spam that gets through. What are you guys using that has great success?




Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Jon LaBass
 Jon LaBass wrote:

 snip

 
  Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
or
  above will not be delivered.
 
  Jon

 I just upgraded four servers this morning to 5.4.6, that is not a
 configure option that I know of. What vpopmail do you use?

 DAve

 -- 
 Systems Administrator
 http://www.tls.net
 Get rid of Unwanted Emails...get TLS Spam Blocker!



Well, I use vpopmail on FreeBSD and that's how you define it with the ports.
After I wrote that I thought Doh!  Not everybody is using bsd so that
option may not be available.  But, on other systems where you have to
manually compile vpopmail, the option --enable-spam-threshold=10 should
work.