SA will segv on forged DomainKeys sig

]) by GSNJSPT01.galaxy.lan (Postfix) with ESMTP id 82BA9524C26 -- Michael Scheidell, CTO http://www.secnap.com/events for free and discounted seminar tickets _ This email has been scanned and certified safe by Spammer

RE: Why DUL hit?

mail server and dns servers. While you are at it, your biggest problems are the RFC ones. Assign a valid postmaster, abuse and make sure your contact info for whois is right. That is a total higher score much larger than the dul list. -- Michael Scheidell, CTO SECNAP Network Security Corporation

FW: RE: Solved: Was: DKIM vs DomainKeys plugins

Jul 2007 12:12:11 +0200 Subject: NDN: RE: Solved: Was: DKIM vs DomainKeys plugins X-Mailer: FirstClass 8.3 (build 8.283) X-FC-Icon-ID: 2031 X-FC-SERVER-TZ: 181272840 X-FC-MachineGenerated: true To: "Michael Scheidell" <[EMAIL PROTECTED]> From: [EMAIL PROTECTED], [EMAIL PROTECTED] M

RE: Solved: Was: DKIM vs DomainKeys plugins

> -Original Message- > From: Bill Landry [mailto:[EMAIL PROTECTED] > Sent: Monday, July 23, 2007 6:16 PM > To: Michael Scheidell > Cc: users@spamassassin.apache.org > Subject: Re: Solved: Was: DKIM vs DomainKeys plugins > > > Michael Scheidell wrote: >

RE: Solved: Was: DKIM vs DomainKeys plugins

> -Original Message- > From: Bill Landry [mailto:[EMAIL PROTECTED] > Sent: Monday, July 23, 2007 8:56 AM > To: Michael Scheidell > Cc: users@spamassassin.apache.org > Subject: Re: Solved: Was: DKIM vs DomainKeys plugins > > > Michael Scheidell wrote: &

RE: not everyone is happy with SA

> -Original Message- > From: Robot Terror [mailto:[EMAIL PROTECTED] > Sent: Friday, July 20, 2007 4:28 PM > To: Skip Brott; spamd > Subject: Re: not everyone is happy with SA > > > On 7/20/07 12:55 PM, "Skip Brott" <[EMAIL PROTECTED]> ostensibly wrote: > > > If I send an email to a val

RE: migrating from clamav before mta to SA ClamAV plugin experiences

> -Original Message- > From: Matus UHLAR - fantomas [mailto:[EMAIL PROTECTED] > Sent: Monday, July 23, 2007 7:27 AM > To: users@spamassassin.apache.org > Subject: Re: migrating from clamav before mta to SA ClamAV > plugin experiences > > On 23.07.07 10:59, Nigel Frankcom wrote: > > Ahh -

RE: Now its zip attachments ^^

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Monday, July 23, 2007 3:03 AM > To: Hendrik Helmvoigt > Cc: users@spamassassin.apache.org > Subject: Re: Now its zip attachments ^^ > > 1) Spammers just want to exasperate the smaller spam filter > provider

RE: DKIM vs DomainKeys plugins

> -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Sunday, July 22, 2007 11:21 AM > To: Michael Scheidell > Cc: users@spamassassin.apache.org > Subject: Re: DKIM vs DomainKeys plugins > > > Looking at the messages, apparently verizon

Solved: Was: DKIM vs DomainKeys plugins

INSTALL) Thanks for everyone who sent me signed email. -- Michael Scheidell, CTO SECNAP Network Security Corporation Keep up to date with latest information on IT security: Real time security alerts: http://www.secnap.com/news __

RE: DKIM vs DomainKeys plugins

Ok, seems to work now, not sure why it wasn't. Thanks all. -- Michael Scheidell, CTO SECNAP Network Security Corporation Keep up to date with latest information on IT security: Real time security alerts: http://www.secnap.com

RE: DKIM vs DomainKeys plugins

> -Original Message- > From: Matt Kettler [mailto:[EMAIL PROTECTED] > Sent: Friday, July 20, 2007 10:38 PM > To: Michael Scheidell > Cc: users@spamassassin.apache.org > Subject: Re: DKIM vs DomainKeys plugins > > However, AFAIK, the DKIM versions of the rul

RE: Screwed up Perl install [OT]

> -Original Message- > From: Marc Perkel [mailto:[EMAIL PROTECTED] > Sent: Saturday, July 21, 2007 12:14 PM > To: users@spamassassin.apache.org > Subject: Screwed up Perl install [OT] > > > If I have a machine with a screwed up perl configuration, > some installed > in /usr/lib/perl5

Re: DKIM vs DomainKeys plugins

Matt Kettler wrote: Michael Scheidell wrote: > SA 3.2.1 INSTALL seems to indicate that if I use Mail-DKIM .20 or > better, I don't need Mail-DomainKeys. > I loaded Mail-DomainKeys perl libraries and will be doing some testing to see if I can see what and why, and will post it

RE: not everyone is happy with SA

> -Original Message- > From: David B Funk [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 19, 2007 8:17 PM > To: spamassassin-users > Subject: Re: not everyone is happy with SA > > > On Thu, 19 Jul 2007, Dave Pooser wrote: > their 'PC' interpretation of the error code. Thus Exchange >

RE: not everyone is happy with SA

> -Original Message- > From: John Rudd [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 19, 2007 6:06 PM > To: Graham Murray > Cc: users@spamassassin.apache.org > Subject: Re: not everyone is happy with SA > > Graham Murray wrote: > > John Rudd <[EMAIL PROTECTED]> writes: > > > >> Howev

DKIM vs DomainKeys plugins

SA 3.2.1 INSTALL seems to indicate that if I use Mail-DKIM .20 or better, I don't need Mail-DomainKeys. Because of this, I removed the Mail-DomainKeys dependency from the FreeBsd SA port (I am the official maintainer) I have seen a couple of issues that indicate that maybe, Mail-DKIM isn't

PDFInfo.pm now noisy..

Not sure if its something I enabled between .2 and .4, but now I get this in headers of any email with pdf: (not sure I want it, is is needed?) =0A=/Producer (BCL easyPDF 4.30 \(0615\))=0A=/Creator (easyPDF SDK 4.3)=0A=8 0 obj=0A=0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0=0A=0 0 0 0 0 0 0 0 0 0 0 0 0 0 7

RE: not everyone is happy with SA

No problem, just uninstall it troll and go away. -- Michael Scheidell, CTO SECNAP Network Security Corporation Keep up to date with latest information on IT security: Real time security alerts: http://www.secnap.com/news

RE: Conversion

So much for your stupid whitelist: RCVD_IN_DNSWL_MED=-4, I am setting the score to 0 for this stupid rule. -- Michael Scheidell, CTO SECNAP Network Security Corporation Keep up to date with latest information on IT security: Real time security alerts: http://www.secnap.com/news

RE: Whats wrong with dateformat?

> -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Wednesday, July 18, 2007 4:22 PM > To: users@spamassassin.apache.org > Subject: Re: Whats wrong with dateformat? > > On Wed, Jul 18, 2007 at 03:30:29PM -0400, Michael Scheidell wrote:

Whats wrong with dateformat?

X-Spam-Status: No, score=-1.19 tagged_above=-999 required=5 tests=[AWL=0.164, BAYES_00=-2.599, DKIM_POLICY_SIGNSOME=0, DK_POLICY_SIGNSOME=0, INVALID_DATE=1.245] Date: 18 Jul 07 11:01:52 -0700 I THINK day is optional: >From rfc: 3.6.1: The origination date field The originati

Potential DOS in spamassassin/perl-Net-DNS FW: rPSA-2007-0142-1 perl-Net-DNS

Don't know if anyone has mentioned this, if so, I missed it. Potential DOS in spamassassin if perl-Net-DNS < .60. (previously recommended version was .58) Freebsd ports has .60, for the last two weeks. -Original Message- From: rPath Update Announcements [mailto:[EMAIL PROTECTED] Sent: Tue

RE: OT Alert: Forward low scoring SPAM to sa-learn.

> -Original Message- > From: Anthony Kamau [mailto:[EMAIL PROTECTED] > Sent: Monday, July 16, 2007 8:40 PM > To: users@spamassassin.apache.org > Subject: OT Alert: Forward low scoring SPAM to sa-learn. > > > Hello all. > > > The next step is what has me stunned - is there a standard >

RE: Please(don't) remove this bozo if you can figure out which he is

mail.secnap.com [204.89.241.129], pleased to meet you mail from: <[EMAIL PROTECTED]> 250 2.1.0 <[EMAIL PROTECTED]>... Sender ok rcpt to: <[EMAIL PROTECTED]> 250 2.1.5 <[EMAIL PROTECTED]>... Recipient ok -- Michael S

RE: __ rules can't call multiple __ rules?

> -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 12, 2007 12:56 PM > To: users@spamassassin.apache.org > Subject: Re: __ rules can't call multiple __ rules? > FWIW, having a meta which is simply the result of another > rule (TEST2) is wastef

__ rules can't call multiple __ rules?

ROM_Y5? and you can't have two __ (meta rules with score 0) combine results? -- Michael Scheidell, CTO SECNAP Network Security Corporation http://www.secnap.com _ This email has been scanned and certified safe

RE: FORGED_AOL_TAGS hitting on real AOL mail

> -Original Message- > From: Bret Miller [mailto:[EMAIL PROTECTED] > Sent: Thursday, July 05, 2007 7:14 PM > To: users@spamassassin.apache.org > Subject: FORGED_AOL_TAGS hitting on real AOL mail > > > I'm starting to see a lot of AOL mail getting pushed into the > review folder (above

RE: confusion with postfix+spamassassin+amavisd-new

> -Original Message- > From: JOYDEEP [mailto:[EMAIL PROTECTED] > Sent: Friday, June 29, 2007 2:26 AM > To: users@spamassassin.apache.org > Subject: confusion with postfix+spamassassin+amavisd-new > > > Dear list, > > I am using suse 9.3 and confused with postfix+spamassassin+amavisd-n

RE: mailing list being tagged

> -Original Message- > From: Jerry Durand [mailto:[EMAIL PROTECTED] > Sent: Monday, June 18, 2007 8:10 AM > To: users@spamassassin.apache.org > Subject: mailing list being tagged > > > I've started having a mailing list tagged as spam. In the past the > list always received scores li

RE: what happened to DATE_IN_PAST_48_96 ??

-Original Message- From: Anne [mailto:[EMAIL PROTECTED] Sent: Monday, June 18, 2007 6:21 AM To: users@spamassassin.apache.org Subject: what happened to DATE_IN_PAST_48_96 ?? Hi, DATE_IN_PAST_48_96 was taken out since 3.2.x. Why?? What happens with spam between 48 and 96 hours in the pas

RE: My Newly Expanded DNS Blacklist - Who wants to try it?

> -Original Message- > From: Marc Perkel [mailto:[EMAIL PROTECTED] > Sent: Monday, June 18, 2007 12:21 AM > To: Shane Williams > Cc: Daryl C. W. O'Shea; users@spamassassin.apache.org > Subject: Re: My Newly Expanded DNS Blacklist - Who wants to try it? ok - that's a different IP and that

RE: My Newly Expanded DNS Blacklist - Who wants to try it?

> -Original Message- > From: Marc Perkel [mailto:[EMAIL PROTECTED] > Sent: Monday, June 18, 2007 12:55 AM > To: Michael Scheidell > Cc: users@spamassassin.apache.org > Subject: Re: My Newly Expanded DNS Blacklist - Who wants to try it? > > > > >

RE: My Newly Expanded DNS Blacklist - Who wants to try it?

> -Original Message- > From: Robert - eLists [mailto:[EMAIL PROTECTED] > Sent: Monday, June 18, 2007 12:24 AM > To: users@spamassassin.apache.org > Subject: RE: My Newly Expanded DNS Blacklist - Who wants to try it? > > Michael, > > Them's scrappin words partner.:-| > > Maybe you c

RE: My Newly Expanded DNS Blacklist - Who wants to try it?

> -Original Message- > From: Marc Perkel [mailto:[EMAIL PROTECTED] > Sent: Sunday, June 17, 2007 8:27 PM > To: Shane Williams; Spamass > Subject: Re: My Newly Expanded DNS Blacklist - Who wants to try it? > As to what I'm doing I talked about it in a different thread. > The idea > is tha

Re: spamd crashes when using sa-compile body (undefined symbol)

Eric W. Bates wrote: -BEGIN PGP SIGNED MESSAGE- Also, you do have re2c version .12.0 or better, right? pkg_info -cQ 're2c=>0.12.0' Nope. Current FreeBSD port is pushing version 0.11.1. I can update that manually without a lot of trouble (sent a note to the maintainer) but

RE: Innovative Host Blacklisting Idea

> -Original Message- > From: Marc Perkel [mailto:[EMAIL PROTECTED] > Sent: Friday, June 15, 2007 3:19 AM > To: users@spamassassin.apache.org > Subject: Innovative Host Blacklisting Idea > > > I'm trying out a new idea for blacklisting hosts. I have > several email > servers for proces

RE: spamd crashes when using sa-compile body (undefined symbol)

> -Original Message- > From: Eric W. Bates [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 14, 2007 2:17 PM > To: users@spamassassin.apache.org > Subject: spamd crashes when using sa-compile body (undefined symbol) > > > After eagerly compiling my ruleset I was sad to discover that >

RE: Freebsd Port of SA 3.2.1

> -Original Message- > From: Jack L. Stone [mailto:[EMAIL PROTECTED] > Sent: Wednesday, June 13, 2007 9:29 AM > To: Michael Scheidell; [EMAIL PROTECTED] > Cc: users@spamassassin.apache.org; [EMAIL PROTECTED] > Subject: Re: Freebsd Port of SA 3.2.1 > > At

Re: Freebsd Port of SA 3.2.1

Jack L. Stone wrote: At 10:47 PM 6.12.2007 -0400, Michael Scheidell wrote: If anyone wants a 'pre release' of the Freebsd sa 3.2.1 portfile, you can download it here: http://www.secnap.com/downloads/sa321.tgz Instructions: rm everything in /usr/ports/mail/p5-Mail-SpamAssassin, u

RE: emails to non existent recipients -- netzero.com fixed this problem?

g net abuse with more net abuse is still net abuse. -- Michael Scheidell, CTO SECNAP Network Security Corporation Keep up to date with latest information on IT security: Real time security alerts: http://www.secnap.com/news -Original Message- From: Mike Kenny [mailto:[EMAIL PROTECTED]

Freebsd Port of SA 3.2.1

you include that and patches against the current 3.2.0, it will likely be included in freebsd 3.2.1 port since I am the official ports maintainer. (note: thanks jimmy I have included the libspamc* support as you requested in http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/106441 -- Michae

RE: DKIM / Domainkey feature ins spamassassin

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Thursday, June 07, 2007 5:12 AM > To: users@spamassassin.apache.org > Subject: DKIM / Domainkey feature ins spamassassin > > > hello > i got a question , Domainkey is now unsupportet, Dkim is > supportet,

RE: Scanning outgoing e-mails

messages coming from only > internal networks, so it marks it as "ALL_TRUSTED." I have We use amavisd-new in our product to handle SA. Amavisd-new allows out clients to set a 'MYNETS' policy and do spam scanning on outgoing email if they wish. You might look into it. Go

RE: Installing 3.20 in FreeBSD

> -Original Message- > From: LuKreme [mailto:[EMAIL PROTECTED] > Sent: Friday, June 01, 2007 3:17 AM > To: users@spamassassin.apache.org > Subject: Installing 3.20 in FreeBSD > > > OK, so I downloaded the test sa320.tgz file and followed the > instructions and when I go to make I get:

RE: What score do you get on this Nigerian Scam?

them. -- Michael Scheidell, CTO SECNAP Network Security Corporation Keep up to date with latest information on IT security: Real time security alerts: http://www.secnap.com/news _ This email has been scanned and certified sa

Clamav *zoo insecure dependency

If you built clamav with optional zoo or unzoo depencencies, you may wish to remove unzoo (not maintained anymore) and at least patch zoo. https://wwws.clamav.net/bugzilla/show_bug.cgi?id=522 -- Michael Scheidell, CTO Join SECNAP at SFTA Ft. Lauderdate, FL May 31 Free event http

Re: sa-compile and SARE

Doc Schneider wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Michael Scheidell wrote: Please give it an hour or so to become available. And also let me know if you're still seeing these issues. Are they only available via channel? This brought old rule up:

RE: sa-compile and SARE

> > Please give it an hour or so to become available. And also > let me know if you're still seeing these issues. > Are they only available via channel? This brought old rule up: http://www.rulesemporium.com/rules/70_sare_stocks.cf _

RE: SA and Amavisd-new 2.5.0

> -Original Message- > From: Jerry Durand [mailto:[EMAIL PROTECTED] > Sent: Tuesday, May 15, 2007 1:00 AM > To: Jerry Durand > Cc: users@spamassassin.apache.org > Subject: Re: SA and Amavisd-new 2.5.0 > > > Sorry for the posting on this list, someone mentioned that even > though the

RE: SA and Amavisd-new 2.5.0

Not 100% sure I would call this a surprise, as it was discussed on the amavisd-new list and is in README. (and you should join the amavisd-new list where issues like this are discussed since they are not dependent on SA) -- Michael Scheidell, CTO Join Me at SecureWorld Philadelphia May 17 for

RE: Inappropriate use of E-Mail addresses

dged to NEVER > EVER find in > > favor of a spammer if I find myself on a jury with him as the > > plaintiff or defendant. Vbounce in SA 3.20 might help. But it takes some setting up. -- Michael Scheidell, CTO Join SECNAP at SecureWorld Philadelphia

RE: Poor performance with v3.2.0

> -Original Message- > From: Rosenbaum, Larry M. [mailto:[EMAIL PROTECTED] > Sent: Wednesday, May 09, 2007 10:10 AM > To: users@spamassassin.apache.org > Subject: RE: Poor performance with v3.2.0 > > sa-compile took 3 hours to run. (System is a SunFire v210 > with 2 processors and 2 GB

RE: ANNOUNCE: Apache SpamAssassin 3.2.0 available

work. -- Michael Scheidell, CTO Join SECNAP at SecureWorld Philadelphia May 16-17 http://www.secnap.com/events for free and discounted seminar tickets _ This email has been scanned and certified safe by SpammerTrap(tm)

RE: Poor performance with v3.2.0

> -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Tuesday, May 08, 2007 10:01 PM > To: users@spamassassin.apache.org > Subject: Re: Poor performance with v3.2.0 > > > On Tue, May 08, 2007 at 06:45:32PM -0700, Marc Perkel wrote: > > I have to admit that I'm s

[Fwd: Re: ports/112524: patches to update re2c to .12.0]

/112524: patches to update re2c to .12.0 Date: Tue, 8 May 2007 16:40:04 GMT From: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED], [EMAIL PROTECTED] To: Michael Scheidell <[EMAIL PROTECTED]> Thank you very much for your problem report. It has the internal identification `ports/

RE: ANNOUNCE: Apache SpamAssassin 3.2.0 available

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Monday, May 07, 2007 6:59 PM > To: Duane Hill > Cc: users@spamassassin.apache.org > Subject: Re: ANNOUNCE: Apache SpamAssassin 3.2.0 available > > really? news to me ;) Not sa-compile, just sa-compile on

RE: ANNOUNCE: Apache SpamAssassin 3.2.0 available

SO C90 forbids mixed declarations and code > > I also uncommented the loadplugin line in v320.pre for the > Rule2XSBody > plugin. > > The compiled rules must be active according to the response I > received > from starting spamd: And randomly, spamd will crash

RE: ANNOUNCE: Apache SpamAssassin 3.2.0 available

> -Original Message- > From: Duane Hill [mailto:[EMAIL PROTECTED] > Sent: Monday, May 07, 2007 12:51 PM > To: users@spamassassin.apache.org > Subject: RE: ANNOUNCE: Apache SpamAssassin 3.2.0 available > > On Sat, 5 May 2007, Michael Scheidell wrote: > > [S

Re: Problem upgrading from 3.1.8 to 3.2.0, check.pm

Ruben Cardenal wrote: Michael Scheidell wrote: -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Sent: Monday, May 07, 2007 4:47 AM To: users@spamassassin.apache.org Subject: Problem upgrading from 3.1.8 to 3.1.20, check.pm Hi, I've been upgrading se

RE: Problem upgrading from 3.1.8 to 3.1.20, check.pm

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Monday, May 07, 2007 4:47 AM > To: users@spamassassin.apache.org > Subject: Problem upgrading from 3.1.8 to 3.1.20, check.pm > > > Hi, > >I've been upgrading several stable servers running 3.1.8 > for

RE: ANNOUNCE: Apache SpamAssassin 3.2.0 available

> -Original Message- > From: Jack L. Stone [mailto:[EMAIL PROTECTED] > Sent: Friday, May 04, 2007 9:20 AM > To: Justin Mason; users@spamassassin.apache.org; > [EMAIL PROTECTED]; [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: Re: ANNOUNCE: Apache SpamAssassin 3.2.0 available > > A

RE: notice diff between using 3.1.8 and 3.2.0 ?

> -Original Message- > From: Abba Communications [mailto:[EMAIL PROTECTED] > Sent: Thursday, May 03, 2007 11:20 PM > To: users@spamassassin.apache.org > Subject: notice diff between using 3.1.8 and 3.2.0 ? > > > > > Greetings, > > Is anyone noticing small, medium, or large improvement

Re: ANNOUNCE: Apache SpamAssassin 3.2.0 available

Jakob Hirsch wrote: Michael Scheidell wrote: sa-compile didn't show any errors (which is bad, I'd say). see http://issues.apache.org/SpamAssassin/show_bug.cgi?id=5435 and http://sourceforge.net/tracker/index.php?func=detail&aid=1708378&group_id=96864&atid=616200

Re: ANNOUNCE: Apache SpamAssassin 3.2.0 available

Craig Carriere wrote: I receive the exact same error on SLES10 FWIW. I am assuming it's something to do with loader paths', but I haven't figured it out yet. as for the FREEBSD port (which I maintain) I think I am going to publish the package without sa-compile, so it gets out there (any f

RE: ANNOUNCE: Apache SpamAssassin 3.2.0 available

> -Original Message- > From: Justin Mason [mailto:[EMAIL PROTECTED] > Sent: Wednesday, May 02, 2007 8:43 AM > To: users@SpamAssassin.apache.org; > [EMAIL PROTECTED]; [EMAIL PROTECTED] > Subject: ANNOUNCE: Apache SpamAssassin 3.2.0 available > > Apache SpamAssassin 3.2.0 is now availab

RE: pre-release of SA 3.18_2 Freebsd port

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Monday, April 30, 2007 11:55 AM > To: Michael Scheidell > Cc: users@spamassassin.apache.org; [EMAIL PROTECTED] > Subject: Re: pre-release of SA 3.18_2 Freebsd port > > &g

pre-release of SA 3.18_2 Freebsd port

there are no problems. I am especially interested in Freebsd 6.2 users testing spamd. pre-release of port found here: http://www.secnap.com/downloads/sa318_2.tgz Thanks. -- Michael Scheidell, CTO SECNAP Network Security Corp. See us at SecureWorld in Atlanta, May 1-2, In Philadelphia May 16-17.

RE: cannot install it on BSD

try using the ports. works fine. -- Michael Scheidell, CTO Join SECNAP at SecureWorld Atlanta, May 1-2 http://www.secnap.com/events for free and discounted seminar tickets -Original Message- From: Mailing List [mailto:[EMAIL PROTECTED] Sent: Saturday, April 28, 2007 1:00 PM To

RE: RBL tests on MTA vs. RBL rules on SA

> spam/virus mail had been blocking before this). We stopped > using bayesian at all since 1.-Many of our customers get Ps, bayesian isn't just for manual training. Maybe set a high/low score in auto learning, but it does help. __

RE: Mail Lost? How can this happen?

ail list. If SA was done with it and sent it to procmail, then procmail dropped it. -- Michael Scheidell, CTO Join SECNAP at SecureWorld Atlanta, May 1-2, May 16-17 in Philadelphia http://www.secnap.com/events for free and discounted seminar tickets ___

RE: RBL tests on MTA vs. RBL rules on SA

accounts to send email, a lot of it, then you WILL bounce legit aol email because 'that one' (or two or three) aol smtp servers is blacklisted. Try using the BL's in graylist instead. -- Michael Scheidell, CTO Join SECNAP at SecureWorld Atlanta, May 1-2, May 16-17 in Philadel

RE: IP -> Responsible Person

er example: if you looked up our routing/AS number, it would be for our tier1 provider. Yes, you could submit abuse reports there, but why bother?. I think spamcop TRIES, and if you sign up for a spamcop account and use spamassassin -r they will attempt to backtrace it. -- Michael Scheidell, CTO Join

Re: ANNOUNCE: Apache SpamAssassin 3.2.0-rc3 PRERELEASE available!

Justin Mason wrote: Apache SpamAssassin 3.2.0-rc3 is now available! This is a *PRERELEASE*, not the full release of 3.2.0. on Freebsd 5.5, after (what I think) is a successful sa-compile: /libexec/ld-elf.so.1: /var/lib/spamassassin/compiled/3.002000/auto/Mail/SpamAssassin/CompiledRegexps/b

RE: Newsletter gets declared as spam

> -Original Message- > From: Merlin Morgenstern [mailto:[EMAIL PROTECTED] > Sent: Tuesday, April 24, 2007 9:52 AM > To: users@spamassassin.apache.org > Subject: Newsletter gets declared as spam > > > X-Spam-score: 1.9 > X-Spam-hits: BAYES_00 -0.7, EXTRA_MPART_TYPE 1.091, > FORGED_RCVD

Re: ANNOUNCE: Apache SpamAssassin 3.2.0-rc3 PRERELEASE available!

Justin Mason wrote: Apache SpamAssassin 3.2.0-rc3 is now available! This is a *PRERELEASE*, not the full release of 3.2.0. Downloads are available from: http://people.apache.org/~jm/devel/ are we missing the tools subdirectory? is is being remov

RE: How to workaround RFCI / DNS issue with frontbridge clients?

> -Original Message- > From: Dan Barker [mailto:[EMAIL PROTECTED] > Sent: Wednesday, April 18, 2007 11:02 AM > To: users@spamassassin.apache.org > Subject: RE: How to workaround RFCI / DNS issue with > frontbridge clients? > > I don't know what's wrong with your nslookup, but dig is

How to workaround RFCI / DNS issue with frontbridge clients?

30 com - D.GTLD-SERVERS.NET 192.31.80.30 com Now, funny thing, lookup for 'frontbride.com' shows all TLD's, including G. But lookup for subdomains doesn't. Any dns experts know why? -- Michael Scheidell, CTO SECNAP Network Security 561-999-5000 x

RE: Handling blocked ham

All you can do is wiatelist them, or reduce scores for everyone for those rules. -- Michael Scheidell, CTO Join SECNAP at SecureWorld Atlanta, May 1-2 http://www.secnap.com/events for free and discounted seminar tickets > -Original Message- > From: Robert Fitzpatrick [mailto:

RE: Handling blocked ham

If its just one sender, just whitelist them. Those rules below do indicate that that email may be coming from a 'permission[sic] based email marketing' company. -- Michael Scheidell, CTO Join SECNAP at SecureWorld Atlanta, May 1-2 http://www.secnap.com/events for free and discount

RE: Sa-update

> -Original Message- > From: Emre BALCI [mailto:[EMAIL PROTECTED] > Sent: Friday, April 06, 2007 6:59 AM > To: users@spamassassin.apache.org > Subject: Sa-update > > > Hi all > I am using sa on gentoo when I run sa-update its > copying rules into /var/lib/spamassassin/version > I sho

RE: Stop the CCing please. (was "Who is APEWS.ORG" & "Sender Address Verification is NOT abouse and very effective")

So for all of you even TALKING about this, stop even POSTING about .t. > -Original Message- > From: Jonas Eckerman [mailto:[EMAIL PROTECTED] > Sent: Friday, March 30, 2007 6:36 AM > To: users@spamassassin.apache.org > Subject: Stop the CCing please. (was "Who is APEWS.ORG" & > "Sender A

RE: proper whitelist to stop spoofing

> -Original Message- > From: Bill McCormick [mailto:[EMAIL PROTECTED] > Sent: Thursday, March 29, 2007 8:51 PM > To: users@spamassassin.apache.org > Subject: proper whitelist to stop spoofing > > > Hello: > > my user_prefs has: At least get rid of this one: > whitelist_from [EMAIL PR

RE: SA scanning my outgoing emails

1) USE amavisd-new and set up a special policy bank for 'mynets' 2) Set up second smtp filter in postfix (look at special entries in master.cf. listen on a second ip address or different port) lots of examples for postfix setups, google around. -Original Message- From: Jörg Hanke [

RE: Spam goes to spamtrap instead of users

If this is the case, it is because of something you set up or the person who set up your mail server. in SA, there is no 'spamtrap', and nothing in SA sends email to a spamtrap. All SA does is mark the spam with [*** SPAM ***] in the subject line and adds some headers. What happens to it afte

Re: Spamassassin scanning slower on Linux compared to FreeBSD

Julian Yap wrote: Are you using pyzor,razor or dcc? Razor and DCC. I should try disabling both of these. I don't think you need to, but if you like 2 second emails ;-) set the timeouts to 1 second or less . (i think default is 5 seconds each) I've tried doing some tests in debugging mode

RE: Spamassassin scanning slower on Linux compared to FreeBSD

inux systems. > > Even the older FreeBSD systems running 5.x (and worse > hardware) beat the pants off the GNU/Linux systems. > Is FBSD 6.0 faster than 5.x? Does 64 bit help? -- Michael Scheidell, CTO SECNAP Network Security Corporation http://www.secnap.com __

RE: patches for FREEBSD sa-update

> -Original Message- > From: Michael Scheidell > Sent: Wednesday, March 21, 2007 10:22 PM > To: Mark Martinec > Cc: users@spamassassin.apache.org > Subject: RE: patches for FREEBSD sa-update > > SA 3.2 mentions changes to sa-update, so I think I will wa

RE: patches for FREEBSD sa-update

> -Original Message- > From: Mark Martinec [mailto:[EMAIL PROTECTED] > Sent: Wednesday, March 21, 2007 9:10 PM > To: users@spamassassin.apache.org > Subject: Re: patches for FREEBSD sa-update > > Ps, as an aside, thanks for an incredibly flexible engine (amavisd). I found a quandary wi

RE: Reporting spam by forwarded/attached message

re tricks to forwarding emails as attachments, but its not easy in outlook. Better have users drag the email to a public folder that imap can read. -- Michael Scheidell, CTO SECNAP Network Security Corporation http://www.secnap.com --

RE: patches for FREEBSD sa-update

> -Original Message- > From: Mark Martinec [mailto:[EMAIL PROTECTED] > Sent: Wednesday, March 21, 2007 10:54 AM > To: users@spamassassin.apache.org > Subject: Re: patches for FREEBSD sa-update > > I'd feel more comfortable if some FreeBSD master guru would > take a look and have a fina

RE: patches for FREEBSD sa-update

Maybe a 'non default' option? In make config? Sa-update path? --- This email has been scanned and certified safe by SpammerTrap(tm) For Information please see http://www.spammertrap.com --

RE: patches for FREEBSD sa-update

> -Original Message- > From: Mark Martinec [mailto:[EMAIL PROTECTED] > Sent: Tuesday, March 20, 2007 8:20 PM > To: users@spamassassin.apache.org > Subject: Re: patches for FREEBSD sa-update > > > > Perhaps the closest thing is /usr/local/libdata/, intended > for 'miscellaneous utility

RE: patches for FREEBSD sa-update

> -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Tuesday, March 20, 2007 2:40 PM > To: users@spamassassin.apache.org > Subject: Re: patches for FREEBSD sa-update > > On Tue, Mar 20, 2007 at 01:57:50PM -0400, Michael Scheidell wrot

patches for FREEBSD sa-update

d this to ports for updates. http://www.secnap.com/downloads/saport.tgz. Instructions for install, just unzip it into /usr/ports/mail/p5-Mail-SpamAssassin. (offer void where prohibited or taxed, your mileage may vary, use at one risk) -- Michael Scheidell, CTO SECNAP Network Secur

RE: Query Reg spam originate to Unknown user

> -Original Message- > From: sushma [mailto:[EMAIL PROTECTED] > Sent: Tuesday, March 20, 2007 7:55 AM > To: SpamAssassin Users > Subject: Query Reg spam originate to Unknown user > > > > hi, > Iam running spamassassin in another machine and > relaying mails to > local machine(

RE: Make Bayes more efficient?

> -Original Message- > From: Chris St. Pierre [mailto:[EMAIL PROTECTED] > Sent: Saturday, March 17, 2007 3:38 PM > To: Michael Scheidell > Cc: users@spamassassin.apache.org > Subject: RE: Make Bayes more efficient? > > > On Sat, 17 Mar 2007, Michael

RE: Make Bayes more efficient?

> -Original Message- > From: Chris St. Pierre [mailto:[EMAIL PROTECTED] > Sent: Saturday, March 17, 2007 12:03 PM > To: Michael Scheidell > Cc: users@spamassassin.apache.org > Subject: RE: Make Bayes more efficient? > > > On Sat, 17 Mar 2007, Michael Schei

RE: Make Bayes more efficient?

also said you are sharing a sql db for bayes between mx's. Ever think of making the secondary MX have a separate READ ONLY bayes DB? Feed it from the primary? (you don't want a secondary MX to have a different bayes from the primary since it will have a VERY jaded view of the world.

RE: help! i'm a newbie and just broke our spam assassin / clamav

ever, I would suggest that you either contact the original installer or find a freebsd expert in your local area who can help set this back up again. (or purchase a commercial system so you can get tech support) -- Michael Scheidell, CTO SECNAP Network Security Looking for security and privacy training? http://www.secnap.com/training

<    4   5   6   7   8   9   10   11   >