Re: Theories on blocking OUTGOING spam

2011-08-24 Thread Per Jessen
Simon Loewenthal wrote: On 08/23/2011 04:37 PM, Per Jessen wrote: Matus UHLAR - fantomas wrote: * Marc Perkel supp...@junkemailfilter.com: Just sharing some ideas on blocking outbound spam. On 20.08.11 21:55, Patrick Ben Koetter wrote: - We require humans to use submission instead of smtp

Re: Theories on blocking OUTGOING spam

2011-08-24 Thread Matus UHLAR - fantomas
When we look at the SMTP session we MUST NOT log anything that leads back to the real person or lets us track the person down. If we log we use hashes to destroy a trackable connection. * Matus UHLAR - fantomas uh...@fantomas.sk: I thought that the EU requires providers to log the sender and

updates mirror is down

2011-08-24 Thread Michael Cronenworth
Hello, For the past few days, my SpamAssassin instance has been trying to get its updates from one mirror and the mirror is down. Can someone contact the admin of the mirror or remove it from the mirror list? Mirror: daryl.dostech.ca Thanks, Michael

Re: updates mirror is down

2011-08-24 Thread Benny Pedersen
On Wed, 24 Aug 2011 09:02:58 -0500, Michael Cronenworth wrote: Mirror: daryl.dostech.ca remove self the mirrored.by file i remember this helped before, maybe also this time ?, could be a bug in update mirrored.by that can be staled with mirrors that are not mirror anymore

Re: updates mirror is down

2011-08-24 Thread Michael Scheidell
On 8/24/11 10:02 AM, Michael Cronenworth wrote: Hello, For the past few days, my SpamAssassin instance has been trying to get its updates from one mirror and the mirror is down. Can someone contact the admin of the mirror or remove it from the mirror list? Mirror: daryl.dostech.ca pccm

Re: updates mirror is down

2011-08-24 Thread Michael Cronenworth
Benny Pedersen wrote: remove self the mirrored.by file Where is this file? I cannot find it. I'm using SpamAssassin 3.3.2.

Re: updates mirror is down

2011-08-24 Thread Michael Scheidell
On 8/24/11 10:26 AM, Michael Cronenworth wrote: Michael Scheidell wrote: pccm mirror is back up again. Huh? $ wget daryl.dostech.ca --2011-08-24 09:25:17-- http://daryl.dostech.ca/ Resolving daryl.dostech.ca... 71.164.246.108 Connecting to daryl.dostech.ca|71.164.246.108|:80... (hangs

Re: updates mirror is down

2011-08-24 Thread Michael Scheidell
On 8/24/11 10:27 AM, Michael Cronenworth wrote: Benny Pedersen wrote: remove self the mirrored.by file Where is this file? I cannot find it. I'm using SpamAssassin 3.3.2. if you are trying to update this by hand, you are on your own. just use sa-update (-D to watch) it will delete

Re: updates mirror is down

2011-08-24 Thread Michael Cronenworth
Michael Scheidell wrote: if you are trying to update this by hand, you are on your own. just use sa-update (-D to watch) it will delete MIRRORED.BY for you, pull a new one, and use it. I *am* using sa-update. sa-update is continuously failing. Fedora 14 box. I'm using the default cron job,

Re: updates mirror is down

2011-08-24 Thread Michael Scheidell
On 8/24/11 10:37 AM, Michael Cronenworth wrote: Michael Scheidell wrote: if you are trying to update this by hand, you are on your own. just use sa-update (-D to watch) it will delete MIRRORED.BY for you, pull a new one, and use it. I *am* using sa-update. sa-update is continuously failing.

Re: updates mirror is down

2011-08-24 Thread Michael Cronenworth
Michael Scheidell wrote: sa-update doesn't pull a new one automatically? Nope! $ cat /var/lib/spamassassin/3.003002/updates_spamassassin_org/MIRRORED.BY # test mirror: zone, cached via Coral #http://buildbot.spamassassin.org.nyud.net:8090/updatestage/ http://daryl.dostech.ca/sa-update/asf/

Re: updates mirror is down

2011-08-24 Thread Michael Scheidell
On 8/24/11 10:46 AM, Michael Cronenworth wrote: http://www.sa-update.pccc.com/ weight=5 question is... why didn't it pull from pccc.com? -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 *| *SECNAP Network Security Corporation * Best Mobile Solutions Product of 2011 * Best

Re: updates mirror is down

2011-08-24 Thread Karsten Bräckelmann
On Wed, 2011-08-24 at 09:46 -0500, Michael Cronenworth wrote: What's disappointing is that when sa-update fails this is written to the log: http: GET http://daryl.dostech.ca/sa-update/asf/1160585.tar.gz request failed: 500 read timeout: 500 read timeout 24-Aug-2011 05:18:11: SpamAssassin:

Re: updates mirror is down

2011-08-24 Thread Michael Cronenworth
Karsten Bräckelmann wrote: Like a successful update from the second mirror, or any other non-stock channel? I'm thinking this is the case (second mirror) but the log file does not clearly state that the bad mirror is ignored and it continues with a good mirror for an update file. To my

Re: updates mirror is down

2011-08-24 Thread Axb
On 2011-08-24 16:02, Michael Cronenworth wrote: Hello, For the past few days, my SpamAssassin instance has been trying to get its updates from one mirror and the mirror is down. Can someone contact the admin of the mirror or remove it from the mirror list? Mirror: daryl.dostech.ca Would

Re: updates mirror is down

2011-08-24 Thread Karsten Bräckelmann
On Wed, 2011-08-24 at 10:46 -0500, Michael Cronenworth wrote: Karsten Bräckelmann wrote: Like a successful update from the second mirror, or any other non-stock channel? I'm thinking this is the case (second mirror) but the log file does not clearly state that the bad mirror is ignored

Re: updates mirror is down

2011-08-24 Thread Walter Hurry
On Wed, 24 Aug 2011 18:14:49 +0200, Karsten Bräckelmann wrote: On Wed, 2011-08-24 at 10:46 -0500, Michael Cronenworth wrote: Karsten Bräckelmann wrote: Like a successful update from the second mirror, or any other non-stock channel? I'm thinking this is the case (second mirror) but the

Re: updates mirror is down

2011-08-24 Thread Michael Cronenworth
Walter Hurry wrote: I don't think so. Fedora does not create a cron job for sa-update. Perhaps OP would be well advised to inspect the script run by cron. My guess is that it is something made locally. The cron job: 10 4 * * * root /usr/share/spamassassin/sa-update.cron 21 | tee -a

Re: updates mirror is down

2011-08-24 Thread Martin Gregorie
On Wed, 2011-08-24 at 16:26 +, Walter Hurry wrote: I don't think so. Fedora does not create a cron job for sa-update. Perhaps OP would be well advised to inspect the script run by cron. My guess is that it is something made locally. Fedora 13 and 15 do! I have copies of both running

Re: updates mirror is down

2011-08-24 Thread Benny Pedersen
On Wed, 24 Aug 2011 17:46:47 +0200, Axb wrote: Would any of the biggish hosters reading this list be willing to donate a small VPS to add a couple of update mirrors and offload Daryl's boxes? imho Daryl is not down becurse of bandwidth problems, but more mirrors is still nice

Re: updates mirror is down

2011-08-24 Thread Walter Hurry
On Wed, 24 Aug 2011 17:53:25 +0100, Martin Gregorie wrote: On Wed, 2011-08-24 at 16:26 +, Walter Hurry wrote: I don't think so. Fedora does not create a cron job for sa-update. Perhaps OP would be well advised to inspect the script run by cron. My guess is that it is something made

Re: updates mirror is down

2011-08-24 Thread Martin Gregorie
On Wed, 2011-08-24 at 11:35 -0500, Michael Cronenworth wrote: The cron job: 10 4 * * * root /usr/share/spamassassin/sa-update.cron 21 | tee -a /var/log/sa-update.log The cron job script: /usr/share/spamassassin/sa-update.cron Yep: I see exactly the same cron.d script in Fedora 13 and 15.

ShortCircuit?

2011-08-24 Thread Walter Hurry
I have been using SA on my home box for a couple of months now; really more as a learning exercise than anything else. Having noticed that my Bayes is almost always right, I tried uncommenting Mail::SpamAssassin::Plugin::Shortcircuit and shortcircuit BAYES_99 spam in my local.cf. It seems to

Re: updates mirror is down

2011-08-24 Thread John Hardin
On Wed, 24 Aug 2011, Axb wrote: On 2011-08-24 16:02, Michael Cronenworth wrote: Hello, For the past few days, my SpamAssassin instance has been trying to get its updates from one mirror and the mirror is down. Can someone contact the admin of the mirror or remove it from the mirror

Re: ShortCircuit?

2011-08-24 Thread John Hardin
On Wed, 24 Aug 2011, Walter Hurry wrote: I have been using SA on my home box for a couple of months now; really more as a learning exercise than anything else. Having noticed that my Bayes is almost always right, I tried uncommenting Mail::SpamAssassin::Plugin::Shortcircuit and shortcircuit

Re: updates mirror is down

2011-08-24 Thread Karsten Bräckelmann
On Wed, 2011-08-24 at 13:32 -0700, John Hardin wrote: On Wed, 24 Aug 2011, Axb wrote: Would any of the biggish hosters reading this list be willing to donate a small VPS to add a couple of update mirrors and offload Daryl's boxes? coughCoral/cough Granted a coralified reference to

Re: updates mirror is down

2011-08-24 Thread Axb
On 2011-08-24 22:32, John Hardin wrote: On Wed, 24 Aug 2011, Axb wrote: On 2011-08-24 16:02, Michael Cronenworth wrote: Hello, For the past few days, my SpamAssassin instance has been trying to get its updates from one mirror and the mirror is down. Can someone contact the admin of the

Re: ShortCircuit?

2011-08-24 Thread RW
On Wed, 24 Aug 2011 20:04:28 + (UTC) Walter Hurry wrote: I have been using SA on my home box for a couple of months now; really more as a learning exercise than anything else. Having noticed that my Bayes is almost always right, I tried uncommenting