Re: How to catch gibberish spam before URIBL lists it?

2008-03-17 Thread Bob Proulx
Michael Hutchinson wrote: You may just need to modify some scoring of these rules, which hit the garbage you're talking about without a doubt: TW_AQ,TW_BM,TW_BX,TW_GP,TW_HM,TW_LP,TW_MQ,TW_PX,TW_QD,TW_QL,TW_TR,TW_WF, TW_ZX, What ruleset are those rules in? Bob

Re: SpamAssassin hogs the CPU

2008-03-17 Thread FC Mario Patty
Guys, I've followed the instruction in http://wiki.apache.org/spamassassin/FasterPerformance and run `sa-compile` (after installed re2c), but the problem still exists. Since some-one had said that it might be a DNS problem, I stopped using Mail::SpamAssassin::Plugin::DNSEval plugin (put a #

Re: SpamAssassin hogs the CPU

2008-03-17 Thread --[ UxBoD ]--
What RBL lookup lists are you using ? Regards, -- --[ UxBoD ]-- // PGP Key: curl -s http://www.splatnix.net/uxbod.asc | gpg --import // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 845 869 2749 SIP Phone: [EMAIL

Re: How to catch gibberish spam before URIBL lists it?

2008-03-17 Thread Loren Wilton
TW_AQ,TW_BM,TW_BX,TW_GP,TW_HM,TW_LP,TW_MQ,TW_PX,TW_QD,TW_QL,TW_TR,TW_WF, TW_ZX, What ruleset are those rules in? Tripwire. Available at SARE in other rules. Beware, these are english-biased rules and will FP on other languages. Loren

Re: SpamAssassin hogs the CPU

2008-03-17 Thread FC Mario Patty
Thank-you for the response. By the way, I don't use RBL checking, at least in my /var/qmail/control/qmail-smtpd.rules. FYI, this is a qmail-ldap installation with simscan, spamassassin, and clamav. Here a snip of my qmail-smtpd.rules

RBL's at Spamassassin time.

2008-03-17 Thread Michael Hutchinson
Hi Everyone. I need to implement some RBL's at the Spamassassin stage in our mail server. We already have spamhaus setup on the firewall, amongst other SMTP rejection lists. What RBL's are people using with Spamassassin to tag email? As far as I can see, we are only using URIBL and Spamcop, which

ways to react faster to spam attacks

2008-03-17 Thread Arvid Ephraim Picciani
greetings. most of the spam we get (like 90%) is the usual internet noise. sa filters them perfectly with 10 to 20 points. Unfortunatly from time to time there are waves of very prefessional spam. I wonder how you react on those. Do you quickly hack up an sa rule to filter by specific words?

Re: RBL's at Spamassassin time.

2008-03-17 Thread mouss
Michael Hutchinson wrote: Hi Everyone. I need to implement some RBL's at the Spamassassin stage in our mail server. We already have spamhaus setup on the firewall, amongst other SMTP rejection lists. What RBL's are people using with Spamassassin to tag email? As far as I can see, we are only

Was: : How to report 120,000 spams a day

2008-03-17 Thread Tuc at T-B-O-H.NET
Hi, I wanted to thank everyone who responded both on and off list. In the end there was still alot of confusion from people about my configuration, my intentions, my set up, some things I said But its really not worth rehashing again. The end result is I've changed my setup.

RE: ways to react faster to spam attacks

2008-03-17 Thread James E. Pratt
-Original Message- From: Arvid Ephraim Picciani [mailto:[EMAIL PROTECTED] Sent: Monday, March 17, 2008 4:43 PM To: users@spamassassin.apache.org Subject: ways to react faster to spam attacks greetings. most of the spam we get (like 90%) is the usual internet noise. sa filters