Re: Fake MX

highly recommend it. But again, not the low MX. You'd be playing with fire there. -- Jon Trulson | A828 C19D A087 F20B DFED mailto:j...@radscan.com | 67C9 6F32 31AB E647 B345 What can be asserted without evidence, can also be dismissed without evidence

Re: Hostkarma White list Updated and Improved

-net vs. a 'lone wolf'? -- I drank what? | Jon Trulson -Socrates | mailto:j...@radscan.com | A828 C19D A087 F20B DFED | 67C9 6F32 31AB E647 B345

Re: more habeas spam

a year ago. They were only hitting on SPAM emails and pushing them into the FN range. I second that - habeas stopped being useful a long time ago (IMO of course :). Just zero them out. -- Happy cheese in fear | Jon Trulson against oppressor, rebel!| mailto:j

Re: more habeas spam

On Fri, 9 Jan 2009, John Hardin wrote: On Fri, 9 Jan 2009, Jon Trulson wrote: On Wed, 7 Jan 2009, Anthony Peacock wrote: I zeroed the scores for all of these rules about a year ago. They were only hitting on SPAM emails and pushing them into the FN range. I second that - habeas

Re: Fake MX Record(s) Trick

blacklist. You can use this host for your fake high numbered MX. (Not a low numbered MX though) Que the spamvertising... mail.yourdomain.com 10 tarbaby.junkemailfilter.com 20 -- Happy cheese in fear | Jon Trulson against oppressor, rebel!| mailto:[EMAIL

Re: [OT] Volume of mail thru SpamAssassin.

the count there. Has anyone done anything like this? Any suggestions on how to do it? Any other way to get the count? man mailstats -- Happy cheese in fear | Jon Trulson against oppressor, rebel!| mailto:[EMAIL PROTECTED] Brocolli, hostage. -Unknown| #include

Re: Bit OT but it's about SPAM

love my spamassassins :) -- Happy cheese in fear | Jon Trulson against oppressor, rebel!| mailto:[EMAIL PROTECTED] Brocolli, hostage. -Unknown| #include std/disclaimer.h

Re: FW: List of 700,000 IP addresses of virus infected computers

On Wed, 12 Sep 2007, Luis Hernán Otegui wrote: 2007/9/12, Jon Trulson [EMAIL PROTECTED]: On Wed, 12 Sep 2007, Jason Bertoch wrote: On Tuesday, September 11, 2007 7:07 PM Marc Perkel wrote: The details are a little to complex for this forum ... OK - had quite a few trolls here who seem

Re: FW: List of 700,000 IP addresses of virus infected computers

. Is there any chance we can get a moderator on this, please? This is clearly not a SA topic and I'm weary of insults, flames, and advertisements from Marc. FWIW, +1 -- Jon Trulson mailto:[EMAIL PROTECTED] #include std/disclaimer.h No Kill I -Horta

Re: Question - How many of you run ALL your email through SA?

that was the reason your messages started tagging as spam. One such list I remember was ordb.org. Yes, ordb. Knew it was something like that. It may be true that they posted something to a list - unfortunately, I was not subscribed. Nonetheless, we won't do that again. -- Jon Trulson

Re: Question - How many of you run ALL your email through SA?

/fail on RBL's. They can be wrong, or go away. -- Jon Trulson mailto:[EMAIL PROTECTED] #include std/disclaimer.h No Kill I -Horta

Re: Question - How many of you run ALL your email through SA?

. Works great. -- Jon Trulson mailto:[EMAIL PROTECTED] #include std/disclaimer.h No Kill I -Horta

Re: OT Question

stock onslaught. Without hard data available at the moment, I'd guess we are seeing a less than a third of what we were getting 24hrs ago. -- Jon Trulson mailto:[EMAIL PROTECTED] #include std/disclaimer.h No Kill I -Horta

Re: Bayes failure on hi, it's Somebody spam

catching every one for me. There may be something else going wrong with your setup - no idea what offhand though, sorry. -- Jon Trulson mailto:[EMAIL PROTECTED] #include std/disclaimer.h No Kill I -Horta

Re: Bayesian scores

I would second that definitely. I only upped the bayes 95 and 99 rules to the pre3.0 scores - didn't mess with the others. -- Jon Trulson mailto:[EMAIL PROTECTED] #include std/disclaimer.h No Kill I -Horta

Re: BIG increase in spam today

from where I sit. At home, I've also seen an increase - approx 150 a day from around 80-90 previously. -- Jon Trulson mailto:[EMAIL PROTECTED] #include std/disclaimer.h No Kill I -Horta

Re: Q. about spam directed towards highest MX Record?

On Fri, 29 Sep 2006, Rob McEwen (PowerView Systems) wrote: Jon Trulson said: Hehe, that is an old spammer trick... Our secondary MX is pretty much 100% spam. I implemented greylisting on the secondary which reduced spam through it by about 99% :) The secondary does not do spam scanning, it's

Re: Q. about spam directed towards highest MX Record?

which reduced spam through it by about 99% :) The secondary does not do spam scanning, it's simply store and forward. Greylisting really helps in these cases. -- Jon Trulson mailto:[EMAIL PROTECTED] http://radscan.com/~jon #include std/disclaimer.h No Kill I -Horta

Re: Bombarded by German political spam

they are being trapped... -- Jon Trulsonmailto:[EMAIL PROTECTED] ID: 1A9A2B09, FP: C23F328A721264E7 B6188192EC733962 PGP keys at http://radscan.com/~jon/PGPKeys.txt #include std/disclaimer.h I am Nomad. -Nomad

Re: more spam with SpamAssassin version 3.0.2

onslaught we've been seeing today :) HTH Nigel On Sat, 14 May 2005 16:35:37 +0400, Valery V. Bobrov [EMAIL PROTECTED] wrote: Hello! I upgraded to SpamAssassin version 3.0.2 from 2.64 and I noticed the amount of spam messages has been increased! What sort of problem? Yours faithfully, Valery -- Jon

Re: Memory issues have forced me back to 2.64

rulesets with v3 currently. At least on my system, the memory issues had nothing to do with a custom ruleset or 3. The --max-children=1 flag to spamd has 'solved' the issue for me... Average child size is around 19-20MB, until 'the event' happens, at which point it jumps to around 320MB. -- Jon

Re: Memory issues have forced me back to 2.64

On Mon, 15 Nov 2004, Jon Trulson wrote: On Sat, 6 Nov 2004, Justin Mason wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 The --max-children=1 flag to spamd has 'solved' the issue for me... Sorry, that should be '--max-conn-per-child=1'. -- Jon Trulsonmailto:[EMAIL PROTECTED] ID

Re: ver 3.0 opinions

through 2.6x are generally (a) those that match BAYES_99, which by itself in the default configuration is no longer a large enough score to make me happy, or True. Some spam we get is soley BAYES_99. I've bumped it back up to 5.2 (like in 2.6x). -- Jon Trulsonmailto:[EMAIL PROTECTED] ID

Re: Memory footprint of spamd 3.0

On Thu, 7 Oct 2004, Jon Trulson wrote: On Thu, 7 Oct 2004, Michael Parker wrote: On Thu, Oct 07, 2004 at 10:53:30AM -0600, Jon Trulson wrote: FWIW, in our case a child would go to 320MB and just stay there until the child was terminated (even after finishing a message). We do use AWL

Re: Memory footprint of spamd 3.0

on a whitelist or bayes database maintenance event of some sort. Better question. Of all the folks seeing memory issues, are you using ok_languages in your config somewhere? If not, please speak up as well. I am using 'ok_locales en'. -- Jon Trulsonmailto:[EMAIL PROTECTED] ID: 1A9A2B09, FP

Re: SA 3.0 is eating up all my memory!!!

more beefy host. On Tue, 5 Oct 2004 15:09:50 -0500, Doug Block [EMAIL PROTECTED] wrote: I had this problem till I set the max per child option to = 1 This caused spamd to kill the process used to scan every msg once it's done. Not the best answer I know but it keeps it in check -- Jon Trulson

Re: Memory footprint of spamd 3.0

finishing a message). We do use AWL and bayes. Michael -- Jon Trulsonmailto:[EMAIL PROTECTED] ID: 1A9A2B09, FP: C23F328A721264E7 B6188192EC733962 PGP keys at http://radscan.com/~jon/PGPKeys.txt #include std/disclaimer.h I am Nomad. -Nomad

Re: Memory footprint of spamd 3.0

On Thu, 7 Oct 2004, Michael Parker wrote: On Thu, Oct 07, 2004 at 10:53:30AM -0600, Jon Trulson wrote: FWIW, in our case a child would go to 320MB and just stay there until the child was terminated (even after finishing a message). We do use AWL and bayes. Is it possible to try and find

Re: 3.0 scanning delays

777C BF3F Listening to: The Courtship of Birdy Numnum - The Parapalegic-Homoerotic Episode -- Shane Hickey [EMAIL PROTECTED]: Network/System Consultant GPG KeyID: 777CBF3F Key fingerprint: 254F B2AC 9939 C715 278C DA95 4109 9F69 777C BF3F Listening to: The Styrenes - Cold Meat -- Jon Trulson

RE: SA 3.0 is eating up all my memory!!!

instead of as a daemon. The load time was never terribly bad, and they certainly can't leak. See my response in a previous thread on this problem. For kicks, try --max-conn-per-child=1 to spamd see and see if your machine will last longer :) Mine did... -- Jon Trulsonmailto:[EMAIL