problem with RDNS_NONE: false positive

2008-10-02 Thread nik600
I'm experiencing a strange problem with RDNS_NONE. On the same sender host, sometimes it is marked with RDNS_NONE, and sometimes not. The host has a reverse dns! Example: Received: from dadosoftware.com (dns2.dadosoftware.com [217.199.13.2]) - OK Received: from dadosoftware.com (unknown

Re: problem with RDNS_NONE: false positive

2008-10-02 Thread Matthias Leisi
Example: Received: from dadosoftware.com (dns2.dadosoftware.com [217.199.13.2]) - OK Received: from dadosoftware.com (unknown [217.199.13.2]) - FALSE POSITIVE I get timeouts on one of the servers (dns2.bkom.it) responsible to resolve 217.199.13.2. This may explain the inconsistent behaviour

Re: problem with RDNS_NONE: false positive

2008-10-02 Thread nik600
On Thu, Oct 2, 2008 at 10:22 AM, Rasmus Haslund [EMAIL PROTECTED] wrote: From: nik600 [mailto:[EMAIL PROTECTED] And, in case of parse who decides to write dns2.dadosoftware.com [217.199.13.2] instead of unknown [217.199.13.2]? Your MTA decides to write unknown because it is most likely not

Re: problem with RDNS_NONE: false positive

2008-10-02 Thread nik600
On Thu, Oct 2, 2008 at 10:38 AM, Matthias Leisi [EMAIL PROTECTED] wrote: Example: Received: from dadosoftware.com (dns2.dadosoftware.com [217.199.13.2]) - OK Received: from dadosoftware.com (unknown [217.199.13.2]) - FALSE POSITIVE I get timeouts on one of the servers (dns2.bkom.it)

RE: not everyone is happy with SA

2008-10-02 Thread Robert Taylor
So incredibly funny to have Stub Email referenced in an email to me. I was in on the original specification (by Nathan Cheng to CircleID) regarding this idea. I wish that it would be quickly adopted! Robot Terror (IRL: Robert Taylor) -Original Message- From: Robot Terror

CFP open for ApacheCon Europe 2009 (fwd)

2008-10-02 Thread Justin Mason
--- Forwarded Message Date:Thu, 02 Oct 2008 09:22:06 +0100 From:Noirin Shirley [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: CFP open for ApacheCon Europe 2009 PMCs: Please send this on to your users@ lists! If you only have thirty seconds: The Call for Papers for

SPF rules

2008-10-02 Thread Ray Jette
Good morning, The SPF_PASS and SPF_HELO_PASS rules hit several hundred messages a day. I am doing SPF lockup's at the MTA. How do I go about stopping these tests from within SA? Thanks, Ray

Re: problem with RDNS_NONE: false positive

2008-10-02 Thread Quelonius
nik600 hotmail wrote: I'm experiencing a strange problem with RDNS_NONE. On the same sender host, sometimes it is marked with RDNS_NONE, and sometimes not. The host has a reverse dns! Example: Received: from dadosoftware.com (dns2.dadosoftware.com [217.199.13.2]) - OK Received:

Re: SPF rules

2008-10-02 Thread Matus UHLAR - fantomas
On 02.10.08 10:28, Ray Jette wrote: The SPF_PASS and SPF_HELO_PASS rules hit several hundred messages a day. I am doing SPF lockup's at the MTA. How do I go about stopping these tests from within SA? if your MTA pushes Received-SPF: headers to the mail, the SA will use it. There are still

Re: SPF rules

2008-10-02 Thread McDonald, Dan
On Thu, 2008-10-02 at 10:28 -0400, Ray Jette wrote: Good morning, The SPF_PASS and SPF_HELO_PASS rules hit several hundred messages a day. I am doing SPF lockup's at the MTA. How do I go about stopping these tests from within SA? score SPF_PASS 0 score SPF_HELO_PASS 0 or just remove the

Re: SPF rules

2008-10-02 Thread Ray Jette
Thanks for the quick reply. Do you know what .pre file this is contained in? From the /etc/spamassassin directory I ran the following: grep SPF_PASS *.pre but came up with nothing. Thanks. On Thu, 2008-10-02 at 09:44 -0500, McDonald, Dan wrote: or just remove the module from the .pre file that

Re: SPF rules

2008-10-02 Thread Matus UHLAR - fantomas
On Thu, 2008-10-02 at 10:28 -0400, Ray Jette wrote: Good morning, The SPF_PASS and SPF_HELO_PASS rules hit several hundred messages a day. I am doing SPF lockup's at the MTA. How do I go about stopping these tests from within SA? On 02.10.08 09:44, McDonald, Dan wrote: score SPF_PASS 0

Re: SPF rules

2008-10-02 Thread McDonald, Dan
On Thu, 2008-10-02 at 10:57 -0400, Ray Jette wrote: Thanks for the quick reply. Do you know what .pre file this is contained in? From the /etc/spamassassin directory I ran the following: grep SPF_PASS *.pre but came up with nothing. [EMAIL PROTECTED] spamassassin]$ grep -i -C 1 spf *.pre

Re: SPF rules

2008-10-02 Thread Kelson
Matus UHLAR - fantomas wrote: Of course, PASS tells nothing, but there are *FAIL, NEUTRAL etc. Actually, PASS can tell you quite a bit if you're trying to whitelist a specific address or domain (eg. whitelist_from_spf). -- Kelson Vibber SpeedGate Communications www.speed.net

Re: problem with RDNS_NONE: false positive

2008-10-02 Thread mouss
nik600 wrote: I'm experiencing a strange problem with RDNS_NONE. On the same sender host, sometimes it is marked with RDNS_NONE, and sometimes not. The host has a reverse dns! Example: Received: from dadosoftware.com (dns2.dadosoftware.com [217.199.13.2]) - OK Received: from dadosoftware.com

Re: SPF rules

2008-10-02 Thread Benny Pedersen
On Thu, October 2, 2008 16:28, Ray Jette wrote: Good morning, evening here :) The SPF_PASS and SPF_HELO_PASS rules hit several hundred messages a day. I am doing SPF lockup's at the MTA. How do I go about stopping these tests from within SA? perldoc Mail::SpamAssassin::Conf perldoc

Re: SPF rules

2008-10-02 Thread mouss
Benny Pedersen wrote: On Thu, October 2, 2008 16:28, Ray Jette wrote: Good morning, evening here :) it keeps changing here :) The SPF_PASS and SPF_HELO_PASS rules hit several hundred messages a day. I am doing SPF lockup's at the MTA. How do I go about stopping these tests from within

Re: Erroneous doubled letters in subject

2008-10-02 Thread Kenneth Porter
On Wednesday, September 17, 2008 4:02 PM +0100 Justin Mason [EMAIL PROTECTED] wrote: This is just in the dev ruleset -- for 3.3.0 -- so you're best off adding it manually. right now it's like this: # thanks to Phil Randal on the users list for this tip rawbody __PR_TD_NOWRAP /td

Uribl for myself

2008-10-02 Thread usenet
Hello, i want to start my own local uribl. Spamassassin should read a raw-textfile for example /home/spamblack.txt where some url's are in wunschurlaub.biz euromillion.de and another.. If match one of these entries, the Mail should marked with X Points. How do i implement this? Thx

Re: Uribl for myself

2008-10-02 Thread Kris Deugau
[EMAIL PROTECTED] wrote: Hello, i want to start my own local uribl. Spamassassin should read a raw-textfile for example /home/spamblack.txt where some url's are in wunschurlaub.biz euromillion.de and another.. If match one of these entries, the Mail should marked with X Points. How