Re: [toaster] Simscan 1.3.1.shupp2
On Mon, 2007-05-07 at 11:51 -0700, Bill Shupp wrote: > Shane Chrisp wrote: > > On Mon, 2007-05-07 at 13:58 +0800, Shane Chrisp wrote: > > > > Well I can confirm that raising the score to 10 as below fixed the > > issue. It would appear that if SA marks the message as spam, then > > simscan would bounce it regardless of the score in the simcontrol file. > > Im using a score of 10 as none of the domains are using a score higher > > than this, but you would probably be able to set the required_hits to > > 100 if you wanted to. > > > > Spamd: > > 2007-05-07 21:08:06.336703500 [678] info: spamd: clean message > > (8.6/10.0) for clamav:89 in 6.9 seconds, 18645 bytes. > > > > simscan: > > 2007-05-07 21:08:06.448404500 simscan:[2406]:SPAM REJECT > > (8.60/5.50):9.3654s:Any idea:... > > > > Shane > > > > > > I thought spam_hits was to be used with spam_passthru. So you would not > rely on rejecting spam via spam_assassin's threshold, but only spam_hits > in simcontrol. So that the point of spam_hits is so you can allow spam > in under a certain threshold, say for going through an optional spam > folder, rather than SMTP rejection. This is the only way that I've used > spam_hits in the past rather than just turning off passthru. > > Regards, > > Bill I tried using spam_passthru but had too many issues with maildrop that in the end I just stuck with this setup and it worked well until this I recompiled. My compile options for simscan are ./configure --enable-user=clamav --enable-clamav=y --enable-spam=y --enable-spam-hits=10 --enable-per-domain=y --enable-custom-smtp-reject=y --enable-attach=y --enable-ripmime --enable-received=y --enable-spam-auth-user=y --enable-spamassassin-path=/usr/local/bin/spamassassin --enable-spamc=/usr/local/bin/spamc According to the wiki if you want to use the options --enable-spam and --enable-spam-hits=number you should not use --enable-spam-passthru. Although reading the wiki it would appear that this is not happening as the description says: quote: "Perhaps the most popular method is a mix of the others. Which is to reject email that scores very high and to pass through other email to the user even if it is marked as spam. This seems to help with the "false positive" issue; email marked as spam but not really spam. Use these options: --enable-spam --enable-spam-hits=number where number is the spamassassin score at which you want to reject the email" Anyway this is working well for me now, so no need to change anything. I can live with simply telling SA that spam has an incredibly high score and letting simscan work it out from there. cheers Shane
Re: [toaster] Simscan 1.3.1.shupp2
Shane Chrisp wrote: > On Mon, 2007-05-07 at 13:58 +0800, Shane Chrisp wrote: > > Well I can confirm that raising the score to 10 as below fixed the > issue. It would appear that if SA marks the message as spam, then > simscan would bounce it regardless of the score in the simcontrol file. > Im using a score of 10 as none of the domains are using a score higher > than this, but you would probably be able to set the required_hits to > 100 if you wanted to. > > Spamd: > 2007-05-07 21:08:06.336703500 [678] info: spamd: clean message > (8.6/10.0) for clamav:89 in 6.9 seconds, 18645 bytes. > > simscan: > 2007-05-07 21:08:06.448404500 simscan:[2406]:SPAM REJECT > (8.60/5.50):9.3654s:Any idea:... > > Shane > > I thought spam_hits was to be used with spam_passthru. So you would not rely on rejecting spam via spam_assassin's threshold, but only spam_hits in simcontrol. So that the point of spam_hits is so you can allow spam in under a certain threshold, say for going through an optional spam folder, rather than SMTP rejection. This is the only way that I've used spam_hits in the past rather than just turning off passthru. Regards, Bill
Re: [toaster] Simscan 1.3.1.shupp2
On Mon, 2007-05-07 at 13:58 +0800, Shane Chrisp wrote: Well I can confirm that raising the score to 10 as below fixed the issue. It would appear that if SA marks the message as spam, then simscan would bounce it regardless of the score in the simcontrol file. Im using a score of 10 as none of the domains are using a score higher than this, but you would probably be able to set the required_hits to 100 if you wanted to. Spamd: 2007-05-07 21:08:06.336703500 [678] info: spamd: clean message (8.6/10.0) for clamav:89 in 6.9 seconds, 18645 bytes. simscan: 2007-05-07 21:08:06.448404500 simscan:[2406]:SPAM REJECT (8.60/5.50):9.3654s:Any idea:... Shane > On Mon, 2007-05-07 at 13:25 +0800, Shane Chrisp wrote: > > In reply to my own message, I thought about the fact that I updated > spamassassin to version 3.2.0 the other day so I added > > required_hits 10.0 > > to spamassassin's local.cf and now the spamd logs are showing that the > tests are being compared against the score of 10. Im yet to see a > message which is above one of the client domains scores and below the > 10.0 threshold so im not sure if it fixes the issue yet. I will let you > know when it happens. > > Shane > > > Bill, (and others) > > > > Ive compiled the 1.3.1.shupp2 from your site and im noticind that the > > spamd logs show all messages testing against a score of 5.0 regardless > > of what the score is assigned to the domain or user in the simcontrol > > file. > > > > eg: > > 2007-05-07 13:01:29.778242500 [1621] info: spamd: identified spam > > (5.7/5.0) for clamav:89 in 7.5 seconds, 15920 bytes. > > > > and the message was rejected, yet the domain in question has a score of > > 6.8 in the simcontrol file. > > > > Has anyone else seen this and do you know of a fix for it at all? > > > > cheers > > Shane > > >
Re: [toaster] Branch offices
On Monday 07 May 2007 6:27 am, Mark wrote: > Dear all, > > I have a toaster setup in our HO serving around 200 > users. I have remote offices with around 100-50 users > each. At prsent all the users use SMTP AUTh to relay > through our toaster in HO. This is producing a heavy > load on the server. If the remote offices have fixed ip addresses, give them each a rule in tcp.smtp, so that they don't have to AUTH, no rbl check and don't go through simscan. That might help reduce load. 200 users is not that many. something like 10.10.10.10:allow,RELAYCLIENT="",RBLSMTPD="" > I was thinking of setting up another mail server at > the remote branches through which the users at the > site will use for smtp access.Also maybe use some > program like fetch mail for certain users and thus act > as POP3 for them. > Please advice the best possible steps for cases such > as this. I know I am asking too much but would like to > start correctly. Thanks very much. > > Reg, > Mark > > __ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com
