shutting down your email software, then spamd and killoff any spamd
occurances left over. Then redo your testing.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 5448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
My File share
to but here is a link for info
on what I think he is referring to:
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-1185
--
Kevin W. Gagel
Postmaster for
College of New Caledonia
(250) 562-2131 loc. 5448
[EMAIL PROTECTED]
http://www.cnc.bc.ca
Anti-Spam info
the honeypot project. I recomend it. See:
http://www.projecthoneypot.org
For info.
--
Kevin W. Gagel
Postmaster for
College of New Caledonia
(250) 562-2131 loc. 5448
[EMAIL PROTECTED]
http://www.cnc.bc.ca
Anti-Spam info at:
http://avas.cnc.bc.ca
.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 5448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
My File share:
http://mail.cnc.bc.ca/users/gagel
---
The College of New
so far has only 1.3 million rejects
I've been wondering why the sudden drop here. Hey I guess if you handling
all the spambots for I owe you a thanks! ;-)
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 5448
My Blog
in thinking that setting the score to zero will keep SA
from running the rule? I seem to recall seeing emails on the list that
indicate that but others that say the rule is still run...
Any advice on this would be welcome.
Thanks.
=
Kevin W. Gagel
Network Administrator
how I look at it, it seems a monumental job to me.
So I went with the idea of checking which rules trigger and which don't.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 5448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
My
improve
performance. Of course the trick is to ensure they are legitimate spam...
For those of you interested in using it, its located here:
http://mail.cnc.bc.ca/users/[EMAIL PROTECTED]/spamassassin/
=
Kevin W. Gagel
Network Administrator
Information Technology
.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 5448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
My File share:
http://mail.cnc.bc.ca/users/gagel
---
The College of New
- Original Message -
Kevin W. Gagel wrote:
Couldn't a whitelist shortcircut option be added? What I mean is a
feature that allows an admin to direct SA to check the
whitelist/blacklist first and then (if enabled) abandon further testing
if sender is listed.
AFAIK there's no reason why
is the complete results. The bottom of that file shows total
counts.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 5448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
My File share:
http://mail.cnc.bc.ca/users/gagel
notice because the message was
infected has turned into a bad thing and is now considered backscatter.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 5448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
My File share:
http
- Original Message -
From: mouss [EMAIL PROTECTED]
To:
Cc: users@spamassassin.apache.org
Subject: Re: Duplicate header question
Date: Tue, 04 Dec 2007 23:47:21 +0100
Kevin W. Gagel wrote:
- Original Message -
your amavisd-new is configured to reject mail with bad headers
an fqdn.
I agree. Besides, as much as I preach adherance to the RFC's they are not
law and each site must do what works best for them.
Here, I reject the connection if the helo is not a FQDN or it matches my
own domain.
=
Kevin W. Gagel
Network Administrator
-MachineGenerated: true
To: Kevin W. Gagel [EMAIL PROTECTED]
From: [EMAIL PROTECTED], [EMAIL PROTECTED]
MIME-Version: 1.0
Content-Type: multipart/alternative;
boundary=--=_--03bec287.03bec286.c2ce8a5c
X-Spam-Prev-Subject: NDN: Re: RDJ 404's
X-Rcpt-To: [EMAIL PROTECTED]
X-NotAscii: charset=iso
X
or the SpamAssassin documentation?
I am also having this same problem...
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
today...
The rules_du_jour site should also be updated to reflect that. I didn't see
anything there about except that you could use sa-update and a how to.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http
I'm not able to get to www.rulesemporium.com, what's up there? Any one
know?
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning
- Original Message -
At 10:18 07-06-2007, Kevin W. Gagel wrote:
I'm not able to get to www.rulesemporium.com, what's up there? Any one
know?
It's a denial of service.
The thread starts here
http://mail-archives.apache.org/mod_mbox/spamassassin-users/200706.mbox/browser
Regards,
-sm
.
Thanks.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia, Visit us at http
on the principle and purpose.
Perhaps this is what you're looking for:
http://wiki.apache.org/spamassassin/RuleUpdates
Thankyou Duane, That was exactly what I was looking for.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
mail to: [EMAIL PROTECTED]
--
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia
- Original Message -
sa-update
Usage info is located where?
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
about.
Thanks.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia, Visit us
What do I put in the messages.pm and where do I put it?
Thanks.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
not strong enough yet in perl to get to the bottom of it. Anyone
out there that could help out?
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
to date (1.31).
Any ideas...
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia
USA CN87 CW/SSB/DIGI :
: 10x56526, FISTS 7055, FISTS NW 57, Lighthouse Society 144 :
: Technical Writer for http://entirenet.net (Microsoft KB) :
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http
different result than you did.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia, Visit
- Original Message -
I notice that CPAN has the version listed as 3.001002, I
take it this is actually 3.1.2?
--
Yes, I just finished upgrading it myself using CPAN and it
is 3.1.2.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
out there?
-Philip
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia, Visit us
spamd:
Starting postfix: [ OK ]
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New
headers to my email.
Jonn
John,
Here is how I do it with my install:
rewrite_header Subject ***SPAM _SCORE_***
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
Scored _SCORE_ out of a required _REQD_
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New
I am running spamd/spamc and have spamc launching with -t
55. Yet I'm finding that scans are taking as long as 798
seconds to complete, not alot of them but the question is
why isn't it timing out?
Any suggestions on what to look for?
=
Kevin W. Gagel
Network
,
Thanks, that explains something. What man page do I read up
on to be able to figure out how to expire the bayes db
manually? I've a quick look but don't see anything jumping
out at me.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562
that does.
I've also adjusted for the UTF-8 problem that has been noted
elsewhere. I'll see what kind of scantimes I get next week
now.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs
?
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia, Visit us at http
script and spamc or something
else?
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New
.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
I'm using a script to pipe messages to spamc. Out of about
90,000 messages passed to spamc via the script about 7,000
failed with an error code of 74.
What does spamc mean by EX_IOERR?
Is this a failure between my script and spamc or something
else?
=
Kevin W
Someone posted an update to a stats collecting program, I
think it was this list I saw it on. The post was about two
weeks ago, I don't recall the name of the program but want
to take another look at it.
Anyone know what Im talking about?...
=
Kevin W. Gagel
building and installing to find it, otherwise
just download the tarball and grab it out of that.
I did mean the 3.1.0, and I did download the tarball and get
it from there. Thanks.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562
Where does one get the check_whitelist tool?
I used CPAN to install SpamAssassin (3.0.1) and a find on
the system does not locate the tool.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http
, will SA still add points to the e-mail? eg.
'.de' is marked on rfc-ignorant.org as having a duff WHOIS
listing. Will SA award points for any e-mail from Germany?
Blacklists work on the full IP address of a computer.
=
Kevin W. Gagel
Network Administrator
Information
On Wed, 23 Nov 2005, Kevin W. Gagel announced
authoritatively: Ultimately that was where my problem
was. I kept getting accounts from Telus.net that were
scoring high on the razor2 tests because - according to
SA's bayes db - razor2 had seen the message
This makes no sense, I'm afraid :( SA's
On Wed, 23 Nov 2005, Kevin W. Gagel announced
authoritatively: Ultimately that was where my problem
was. I kept getting accounts from
Telus.net that were scoring high on the razor2 tests
because - according to SA's bayes db - razor2 had seen
the message
This makes no sense, I'm afraid
Kevin W. Gagel wrote:
No, it doesn't as Vipul pointed out. But if your using it
via SpamAssassin like I am then look to your Bayes
database. Ultimately that was where my problem was. I
kept getting accounts from Telus.net that were scoring
high on the razor2 tests because - according to SA's
is.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs/gagel
---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all
as such.
I haven't started to do anything with them at work, but was
wondering if there were opinions WRT to this kind of email
and how they should be handled.
Kurt
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
their password. Security wise the forward or
automated message is prefered and giving someone access to
your email is just not recomended.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
My Blog:
http://mail.cnc.bc.ca/blogs
that this ruleset is
still valid. No index found for ruleset named SARE_URI0.
Check that this ruleset is still valid.
Most of my rulesets work but these 3 do not. Does anybody
else have this problem?
=
Kevin W. Gagel
Network Administrator
Information Technology Services
--
Kevin W. Gagel
Postmaster for
College of New Caledonia
(250) 562-2131 loc. 448
[EMAIL PROTECTED]
http://www.cnc.bc.ca
Anti-Spam info at:
http://avas.cnc.bc.ca
---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus
,
USER_IN_WHITELIST=-100]
My question is how do I fix the AWL score?
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 562-2131 local 448
---
The College of New Caledonia, Visit us at http
Thankyou.
- Original Message -
From: Matt Kettler [EMAIL PROTECTED]
To: Kevin W. Gagel [EMAIL PROTECTED]
Cc: users@spamassassin.apache.org
Subject: Re: Small problem with autolearn
Date: Fri, 02 Sep 2005 17:40:39 -0400
Kevin W. Gagel wrote:
My question is how do I fix the AWL score
--lint yet?
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all
a few seconds. As it works you'll see
output about what its doing, which works also as a progress
indicator. The output lets you know what is working and what
is not.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
for, where is it
looking, and how do I give it what it wants?
Dirk,
Run this and report back to the list:
spamassassin -D --lint
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
there
been problems doing this?
When ever there is a problem rdj reverts back to what it was
replacing. In other words it does an automatic roll back on
errors.
At least that is what I've been seeing.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250
and what is not.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all
On Thu, 23 Jun 2005, Kevin W. Gagel wrote:
I think you might have a rights issue here. It looks like
your running sa with a user called admin. Does that user
have full rights within its own home directory? I ask
because it does not appear to be able to create what it
needs.
I don't
from http://www.stearns.org/sa-blacklist/
Have you restarted SA? Tried spamassassin -D --lint?
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
---
The College
.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
---
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all incoming
.
--
Kevin W. Gagel
Postmaster for
College of New Caledonia
(250) 562-2131 loc. 448
(250) 561-5848 loc. 448
[EMAIL PROTECTED]
http://www.cnc.bc.ca
Anti-Spam info at:
http://avas.cnc.bc.ca
---
The College of New Caledonia, Visit us
using CPAN, no previous install of sa on this
system.
--
Kevin W. Gagel
Postmaster for
College of New Caledonia
(250) 562-2131 loc. 448
(250) 561-5848 loc. 448
[EMAIL PROTECTED]
http://www.cnc.bc.ca
Anti-Spam info at:
http://avas.cnc.bc.ca
On Thu, May 12, 2005 at 02:45:56PM -0700, Kevin W. Gagel
wrote: I've just installed spamassassin on this new
server and have tried to launch spamd using the
/etc/init.d/spamassassin script but I get this error:
Starting spamd: ERROR! spamassassin script is v3.02,
but using modules
is injecting headers then you may
have the problem described above.
I never get this problem.
I use spamd's markup option and then swap the resulting
message with the original and let Postfix delivered that
instead.
--
Kevin W. Gagel
Postmaster for
College of New
Campbell Soup Company
Camden, NJ U.S.A. 08103-1701
--
Kevin W. Gagel
Postmaster for
College of New Caledonia
(250) 562-2131 loc. 448
(250) 561-5848 loc. 448
[EMAIL PROTECTED]
http://www.cnc.bc.ca
messages and should shed
some light on your problem.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
---
The College of New Caledonia, Visit us at http
what its inteded to do.
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
--
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all
]
X-Rcpt-To: [EMAIL PROTECTED]
X-DPOP: Version number supressed
Y-UIDL: 1102696774.4892
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
--
The College of New
local.cf has this:
rewrite_header subject ***SPAM {_Score(0)_}***
I think that's rewrite_header Subject, not rewrite_header
subject
Could be wrong though.
Regards,
Rick
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local
of
Subject. Its now tagging but not adding the score at all.
- Original Message Follows -
From: Michael Barnes [EMAIL PROTECTED]
To: Kevin W. Gagel [EMAIL PROTECTED]
Subject: Re: Subject rewriting not happening
Date: Wed, 8 Dec 2004 17:27:25 -0500
On Wed, Dec 08, 2004 at 01:28:11PM -0800
---
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
--
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all incoming and outgoing email.
--
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
--
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all incoming and outgoing email.
--
?
Are you using per user config or site wide? By the config I
expect your answer to be site wide.
I think droping the -f for the spamc call will cure your
ail's.
--
Kevin W. Gagel
Postmaster for
College of New Caledonia
(250) 562-2131 loc. 448
(250) 561-5848 loc
Systems Support Group
F+W Publications, Inc.
- www.fwpublications.com
Krause Publications, a division of F+W Publications, Inc.
- www.krause.com
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
. For those of you
wanting to read it its here:
http://www.t29.dk/header_check_notes.php
=
Kevin W. Gagel
Network Administrator
Information Technology Services
(250) 561-5848 local 448
--
The College of New
Kevin W. Gagel
Network Administrator
(250) 561-5848 local 448
(250) 562-2131 local 448
--
The College of New Caledonia, Visit us at http://www.cnc.bc.ca
Virus scanning is done on all incoming and outgoing email.
--
81 matches
Mail list logo
