Re: config status

2009-02-28 Thread LuKreme
On 28-Feb-2009, at 23:34, David Morton wrote: Roger Marquis wrote: As full time mail/systems admins we get invaluable data from tripwire/integrit, 'postconf -n', dconf, 'rpm -qa', 'dpkg -l \*', 'pkg_info -a', ... whose output is checked in to RCS daily. This provides a nice configuration snap

to whom it may concern?

2009-02-28 Thread Roman Sergey
Hello to everybody involved in making Spam Assassin stronger! Where can I find all milestones for the project? Not only bugs. I'm looking for diploma topic and would like to contribute to your SA project. -- Best regrads, Roman

Re: How to disable DNSWL?

2009-02-28 Thread Matthias Leisi
Jeff Chan schrieb: >> Was wondering if the trusted_networks could be "pluginized" to use >> DNSEval so that one could query a dnswl (local or remote) - for bigger >> setups it would probably make management simpler. > > One counterargument is that if the data are relatively static, > i.e., not u

Re: config status

2009-02-28 Thread David Morton
Roger Marquis wrote: > As full time mail/systems admins we get invaluable data from > tripwire/integrit, 'postconf -n', dconf, 'rpm -qa', 'dpkg -l \*', > 'pkg_info > -a', ... whose output is checked in to RCS daily. This provides a nice > configuration snapshot and historical record but its real u

RE: not seeing any advantage to sa-learn?

2009-02-28 Thread Roger Marquis
This is not correct. AWL is *not* taken into account for auto-learning. Did not mean to imply that it was. Apologies for the lack of clarity. Most of our negative experience has been with autolearn. Based on your post we are retesting AWL starting with a low threshold (0.1). Roger Marquis

Re: config status; rewrite_header not taking

2009-02-28 Thread Ray
Karsten Bräckelmann rudersport.de> writes: > You must not assume or allow for mis-spelled configuration keywords or > otherwise illegal syntax. Just lint check. If it comes back clean, all > is good. If it doesn't, you NEED to fix it anyway. I don't have privs, and conceivably a misspelling isn'

Re: config status

2009-02-28 Thread Roger Marquis
Karsten Bräckelmann wrote: 'postconf' without the handy -n switch dumps about 500 lines. The equivalent dump for SA including the rules is about 6000 lines. And that's a plain dump, *without* following and unfolding meta rules or anything. Whether 6K or 60K would not necessarily make a differen

Re: How to disable DNSWL?

2009-02-28 Thread Benny Pedersen
On Fri, February 27, 2009 11:56, Michelle Konzack wrote: > since 2009-02-25 I become bombed by arround 430.000 spams like the > one below and I had to decrease my spamscore, since I was not able > to disable this crappy test of RCVD_IN_DNSWL_LOW which persists. > Can someone tell me where I find

Re: config status; rewrite_header not taking

2009-02-28 Thread Karsten Bräckelmann
Skipping all the "print my config" stuff. Maybe tomorrow. For now, there's more important things than custom config... On Sun, 2009-03-01 at 01:24 +, Ray wrote: > Karsten Bräckelmann rudersport.de> writes: > > > those privileged settings which are actually "administrator" privileged > > > s

Re: How to disable DNSWL?

2009-02-28 Thread Jeff Chan
On Saturday, February 28, 2009, 1:00:58 AM, Yet Ninja wrote: > On 2/28/2009 9:20 AM, Matthias Leisi wrote: >> In addition to what Karsten wrote about debian: >> You should add the debian mailservers to your trust path >> (trusted_networks/internal_networks depending on circumstances) so that >> RB

Re: config status; rewrite_header not taking

2009-02-28 Thread Ray
Karsten Bräckelmann rudersport.de> writes: > > just local.cf, IIUC, but potentially any of the 47 files in my hosting > > provider's /usr/share/spamassassin and /etc/mail/spamassassin dirs (or any > > Aah... no. :) The stuff in /usr/share/spamassassin (granted, plus the .pre > files) is exactly

Re: DKIM signature in header (or not...)

2009-02-28 Thread Matus UHLAR - fantomas
On 28.02.09 22:49, Seba Mueld wrote: > I'm using spamassassin (3.2.5) with Postfix and DKIM-Filter 2.6.0. > > Spamassassin runs as content filter (spamd/spamc) like this: > http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix > > In local.cf I've set the "report safe = 1". > > Sometimes

Re: spam count going down?

2009-02-28 Thread Matus UHLAR - fantomas
> Mathias Homann wrote on Sat, 28 Feb 2009 09:57:28 +0100: > > is it just me or did the average spam per day count drop by 75% > > lately? On 01.03.09 01:31, Kai Schaetzl wrote: > Yes, quite noticable, about 50% since Jan. 15 or so, or was it Feb. 15? Unless there was another issue than McColo s

Re: spam count going down?

2009-02-28 Thread Kai Schaetzl
Mathias Homann wrote on Sat, 28 Feb 2009 09:57:28 +0100: > is it just me or did the average spam per day count drop by 75% > lately? Yes, quite noticable, about 50% since Jan. 15 or so, or was it Feb. 15? I read something about it recently where some researcher mentioned that the spam influx t

DKIM signature in header (or not...)

2009-02-28 Thread Seba Mueld
I'm using spamassassin (3.2.5) with Postfix and DKIM-Filter 2.6.0. Spamassassin runs as content filter (spamd/spamc) like this: http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix In local.cf I've set the "report safe = 1". Sometimes I see E-Mails with a DKIM-Header like this: Return-

Re: config status

2009-02-28 Thread Karsten Bräckelmann
> > That pretty much equals your local.cf, no? > > No, the currently effective config is not equal to my local.cf (even for > postconf -n equivalency) because, as you say, users can change their > user_prefs. > > So we're lead to "Isn't that your local.cf plus your user_prefs?" Well, not > just

Re: config status

2009-02-28 Thread Martin Gregorie
On Sat, 2009-02-28 at 21:02 +, Ray wrote: > Karsten Bräckelmann rudersport.de> writes: > > > On Thu, 2009-02-26 at 16:12 +, Ray wrote: > > > Is there a feature like PostFix's `postconf` to display the currently > > > parsed > > > and calculated config? > > > > That pretty much equals yo

Re: config status

2009-02-28 Thread Ray
Karsten Bräckelmann rudersport.de> writes: > On Thu, 2009-02-26 at 16:12 +, Ray wrote: > > Is there a feature like PostFix's `postconf` to display the currently > > parsed > > and calculated config? > > That pretty much equals your local.cf, no? No, the currently effective config is not eq

Re: Something doofuzzled in a * ^To: line.

2009-02-28 Thread mouss
Duane Hill a écrit : > On Mon, 23 Feb 2009, Gene Heskett wrote: > >> I've seen both. but I didn't see a Bcc: line at all. > > There is no Bcc: line (email header). Therefore, a Bcc: is supplied as a > RCPT TO during SMTP time and that is it. > In theory, there is a Bcc: header. But since you

RE: not seeing any advantage to sa-learn?

2009-02-28 Thread Karsten Bräckelmann
On Fri, 2009-02-27 at 19:27 -0800, Roger Marquis wrote: > Has anyone seen good results from autolearn? I never did so disabled it > long ago. Have seen many (other's) Bayes DBs become corrupt from autolearn > / AWL... This is not correct. AWL is *not* taken into account for auto-learning. See t

RE: not seeing any advantage to sa-learn?

2009-02-28 Thread Karsten Bräckelmann
On Fri, 2009-02-27 at 11:45 -0700, Savoy, Jim wrote: > I would say that about 99% of our training comes from autolearn. I only > feed (with sa-learn) whatever untagged stuff is gathered up by our control > group of people and placed in the Public Folders (very little). My original I suggest not to

Re: ReturnPath, Habeas, BondedSender

2009-02-28 Thread Sahil Tandon
On Sat, 28 Feb 2009, Neil Schwartzman wrote: > We have created an entry on the Spamassassin wiki > http://wiki.apache.org/spamassassin/ReportingSpam Broken link in section "Setup of special aliases in Postfix to forward spams and hams": http://gtmp.org/publications/sa-postfix-en. -- Sahil Tando

Re: config status

2009-02-28 Thread Benny Pedersen
On Thu, February 26, 2009 17:12, Ray wrote: > Is there a feature like PostFix's `postconf` to display the > currently parsed and calculated config? spamassassin -D --lint > If not, how do I submit a feature request? if needed -- http://localhost/ 100% uptime and 100% mirrored :)

RE: dnsbl checks time out

2009-02-28 Thread Elsa Andrés
Giampaolo Tomassoni-2 wrote: > > You kidding... > > su -s /bin/sh -c '/the/abs/path/to/whatever {options}*' - vscan > No kidding, sir... just I didn't kown how to achieve it :-) Well, let's go: su -s /bin/sh -c 'spamassassin -D &1 | less' - vscan But I get the same results -> timeout

ReturnPath, Habeas, BondedSender

2009-02-28 Thread Neil Schwartzman
We have created an entry on the Spamassassin wiki http://wiki.apache.org/spamassassin/ReportingSpam -- Neil Schwartzman Director, Accreditation Standards & Security Sender Score Certified | Sender Score Safelist Return Path Inc. 0142002038

RE: dnsbl checks time out

2009-02-28 Thread Giampaolo Tomassoni
> -Original Message- > From: Elsa Andrés [mailto:e.and...@ist-sci.com] > Sent: Saturday, February 28, 2009 1:04 PM > To: users@spamassassin.apache.org > Subject: RE: dnsbl checks time out > > > > Jason Bertoch [Electronet] wrote: > > > > All of your tests should be run as the user that i

Re: dnsbl checks time out

2009-02-28 Thread Elsa Andrés
Justin Mason wrote: > > very odd! could you try one of the zones from the debug output? eg. > > dig 52.130.184.208.dnsbl.sorbs.net. @80.58.0.33 > In fact, this is quite rare :-/ dig 52.130.184.208.dnsbl.sorbs.net. @80.58.0.33 *** ; <<>> DiG 9.4.1-P1 <<>> 52.130.184.208.dnsbl.sorbs.net. @

RE: dnsbl checks time out

2009-02-28 Thread Elsa Andrés
Jason Bertoch [Electronet] wrote: > > All of your tests should be run as the user that is actually calling SA. > Sorry for the delay. Well, this is done by amavisd-new so the user who calls SA is "vscan" on my system. But this users does not have an account on the system (no shell) no I cann

Re: DNSWL as trusted_networks-entries

2009-02-28 Thread Henrik K
On Sat, Feb 28, 2009 at 10:14:11AM +0100, Matthias Leisi wrote: > > Andrzej Adam Filip schrieb: > > >> Speaking of which, it may actually make sense to use all of > >> dnswl.org's entries as trusted_networks-entries... > > > > Do you want it even for DNSWL trust levels of "none" and "low"? > > I

Re: DNSWL as trusted_networks-entries

2009-02-28 Thread Andrzej Adam Filip
Matthias Leisi wrote: > Andrzej Adam Filip schrieb: > >>> Speaking of which, it may actually make sense to use all of >>> dnswl.org's entries as trusted_networks-entries... >> >> Do you want it even for DNSWL trust levels of "none" and "low"? >> It would be a "brave" suggestion :-) > > Surprisin

Re: DNSWL as trusted_networks-entries

2009-02-28 Thread Matthias Leisi
Andrzej Adam Filip schrieb: >> Speaking of which, it may actually make sense to use all of >> dnswl.org's entries as trusted_networks-entries... > > Do you want it even for DNSWL trust levels of "none" and "low"? > It would be a "brave" suggestion :-) Surprisingly, I *am* suggesting to do exact

Re: How to disable DNSWL?

2009-02-28 Thread Yet Another Ninja
On 2/28/2009 9:20 AM, Matthias Leisi wrote: In addition to what Karsten wrote about debian: Michelle Konzack schrieb: Received: from localhost (server7.pinguin-hosting.de [127.0.0.1]) by server7.pinguin-hosting.de (Postfix) with SMTP id D1EFC613E6 for ; Thu, 26 Feb 2009 22:19:2

spam count going down?

2009-02-28 Thread Mathias Homann
Hey folks, is it just me or did the average spam per day count drop by 75% lately? bye, MH -- gpg key fingerprint: 5F64 4C92 9B77 DE37 D184 C5F9 B013 44E7 27BD 763C

Re: How to disable DNSWL? [DNSWL as trusted_networks-entries]

2009-02-28 Thread Andrzej Adam Filip
Matthias Leisi wrote: > [...] > Speaking of which, it may actually make sense to use all of > dnswl.org's entries as trusted_networks-entries... Do you want it even for DNSWL trust levels of "none" and "low"? It would be a "brave" suggestion :-) URL(s): http://www.dnswl.org/ -- [pl>en: Andrew

Re: How to disable DNSWL?

2009-02-28 Thread Matthias Leisi
In addition to what Karsten wrote about debian: Michelle Konzack schrieb: > Received: from localhost (server7.pinguin-hosting.de [127.0.0.1]) > by server7.pinguin-hosting.de (Postfix) with SMTP id D1EFC613E6 > for ; Thu, 26 Feb 2009 > 22:19:21 +0100 (CET) > Received: from master.