Re: Error when trying to re-use Bayes database from one server to another

2016-02-12 Thread Sebastian Arcus
On 12/02/16 20:49, Bowie Bailey wrote: On 2/12/2016 3:45 PM, Sebastian Arcus wrote: On 12/02/16 20:31, Antony Stone wrote: On Friday 12 February 2016 at 17:29:23, Sebastian Arcus wrote: As per advice from this list, I have been re-using my bayes databases on several different servers running

Re: Error when trying to re-use Bayes database from one server to another

2016-02-12 Thread Sebastian Arcus
On 12/02/16 20:31, Antony Stone wrote: On Friday 12 February 2016 at 17:29:23, Sebastian Arcus wrote: As per advice from this list, I have been re-using my bayes databases on several different servers running SA. On one of the servers though, the database is not accepted. Are the servers all

Re: Error when trying to re-use Bayes database from one server to another

2016-02-12 Thread Sebastian Arcus
On 12/02/16 21:40, Kris Deugau wrote: Sebastian Arcus wrote: On 12/02/16 20:31, Antony Stone wrote: On Friday 12 February 2016 at 17:29:23, Sebastian Arcus wrote: As per advice from this list, I have been re-using my bayes databases on several different servers running SA. On one

Re: Error when trying to re-use Bayes database from one server to another

2016-02-12 Thread Sebastian Arcus
On 12/02/16 21:40, Kris Deugau wrote: Sebastian Arcus wrote: On 12/02/16 20:31, Antony Stone wrote: On Friday 12 February 2016 at 17:29:23, Sebastian Arcus wrote: As per advice from this list, I have been re-using my bayes databases on several different servers running SA. On one

Re: Word macros

2015-12-22 Thread Sebastian Arcus
On 22/12/15 10:07, Reindl Harald wrote: Am 22.12.2015 um 10:26 schrieb Sebastian Arcus: In terms of ClamAV, I've had next to zero hit rates for new viruses arriving over email in the last few months (although it is being updated regularly) - so I'm starting to wonder if there is any point

Re: Word macros

2015-12-22 Thread Sebastian Arcus
On 22/12/15 08:04, Axb wrote: On 12/21/2015 11:46 PM, Alex wrote: Hi all, For the past few days we've been hit with Word macro viruses/spam that isn't being tagged by clamav or spamassassin, and I thought someone might be able to take a look: http://pastebin.com/cAWcAbm2 This one still isn't

Re: Strange behaviour by the AWL module

2015-12-13 Thread Sebastian Arcus
On 12/12/15 23:43, Benny Pedersen wrote: On December 12, 2015 8:33:28 PM Sebastian Arcus <s.ar...@open-t.co.uk> wrote: I guess I must be using the default settings - as I don't think I've configured anything in particular for AWL change default /16 cidr to new default /24 for ipv4, fo

Re: Strange behaviour by the AWL module

2015-12-13 Thread Sebastian Arcus
On 12/12/15 19:57, John Hardin wrote: On Sat, 12 Dec 2015, Sebastian Arcus wrote: On 12/12/15 18:21, John Hardin wrote: On Sat, 12 Dec 2015, Sebastian Arcus wrote: > One of my servers received a spam message which SA missed, with the > following report: > &g

Strange behaviour by the AWL module

2015-12-12 Thread Sebastian Arcus
One of my servers received a spam message which SA missed, with the following report: Content analysis details: (3.1 points, 5.0 required) pts rule name description -- -- 0.0 FREEMAIL_FROM

Re: Strange behaviour by the AWL module

2015-12-12 Thread Sebastian Arcus
On 12/12/15 13:06, Benny Pedersen wrote: Sebastian Arcus skrev den 2015-12-12 12:51: Why would AWL now tilt things heavily towards ham, after the message has just been learned as spam? its how AWL works It seems to be making things worse instead of better. Unless I am misunderstanding

Re: Strange behaviour by the AWL module

2015-12-12 Thread Sebastian Arcus
On 12/12/15 18:21, John Hardin wrote: On Sat, 12 Dec 2015, Sebastian Arcus wrote: One of my servers received a spam message which SA missed, with the following report: -0.4 AWLAWL: Adjusted score from AWL reputation of From: address After learning the messages as spam

Re: Is it worth transferring bayes data between different sites?

2015-12-03 Thread Sebastian Arcus
On 03/12/15 01:40, Reindl Harald wrote: Am 03.12.2015 um 01:14 schrieb Alex: On Wed, Dec 2, 2015 at 6:34 PM, Dave Warren <da...@hireahit.com> wrote: On 2015-12-02 09:14, Sebastian Arcus wrote: Perfect - that's exactly the sort of real-life based advice I was looking for. Many thank

Re: Is it worth transferring bayes data between different sites?

2015-12-03 Thread Sebastian Arcus
On 03/12/15 00:29, Charles Sprickman wrote: Reindl Harald <h.rei...@thelounge.net> wrote: Am 02.12.2015 um 21:50 schrieb Charles Sprickman: Reindl Harald <h.rei...@thelounge.net> wrote: Am 02.12.2015 um 12:51 schrieb Sebastian Arcus: I hope I'm not exceeding the patience

Re: Detecting which shortcircuit rule fires

2015-12-02 Thread Sebastian Arcus
On 02/12/15 12:56, Reindl Harald wrote: Am 02.12.2015 um 12:29 schrieb Sebastian Arcus: On 02/12/15 09:49, Reindl Harald wrote: Am 02.12.2015 um 10:30 schrieb Sebastian Arcus: After properly configuring a bayes database and training it following the great advice from this list, I am now

Re: Is it worth transferring bayes data between different sites?

2015-12-02 Thread Sebastian Arcus
On 02/12/15 12:55, Reindl Harald wrote: Am 02.12.2015 um 12:51 schrieb Sebastian Arcus: I hope I'm not exceeding the patience of the list by posting a third question in two days :-) I realise the above question is a "soft" question, probably without a definite "yes"

Re: How to tell if DnsBlocklists are definitely being used by my Spamassassin setup

2015-12-02 Thread Sebastian Arcus
On 01/12/15 18:59, RW wrote: On Mon, 30 Nov 2015 20:45:25 + Sebastian Arcus wrote: After setting up a site-wide bayes database as per the wiki instructions and fixing file permissions etc., and feeding it about 300 spam messages (I don't get a lot of spam in general) and 12,000 ham

Detecting which shortcircuit rule fires

2015-12-02 Thread Sebastian Arcus
After properly configuring a bayes database and training it following the great advice from this list, I am now having this problem where some spam is not detected properly due to a shortcircuit rule. However, I'm having some difficulty figuring out which one of them is causing the problem.

Re: Detecting which shortcircuit rule fires

2015-12-02 Thread Sebastian Arcus
On 02/12/15 09:49, Reindl Harald wrote: Am 02.12.2015 um 10:30 schrieb Sebastian Arcus: After properly configuring a bayes database and training it following the great advice from this list, I am now having this problem where some spam is not detected properly due to a shortcircuit rule

Is it worth transferring bayes data between different sites?

2015-12-02 Thread Sebastian Arcus
I hope I'm not exceeding the patience of the list by posting a third question in two days :-) I realise the above question is a "soft" question, probably without a definite "yes" or "no" answer. I am hoping that people with experience of using SA in various environments might be able to throw

How to tell if DnsBlocklists are definitely being used by my Spamassassin setup

2015-11-30 Thread Sebastian Arcus
OK - this might be a basic question, but recently the detection rate on my SA install has been really unreliable, so I decided that the first step is to be sure it is using the public dns blocklists and razor. My setup: 1. Spamassassin 3.4.1 2. I have Bind configured as recursive,

Re: How to tell if DnsBlocklists are definitely being used by my Spamassassin setup

2015-11-30 Thread Sebastian Arcus
On 30/11/15 16:41, Reindl Harald wrote: Am 30.11.2015 um 17:24 schrieb Sebastian Arcus: OK - this might be a basic question, but recently the detection rate on my SA install has been really unreliable, so I decided that the first step is to be sure it is using the public dns blocklists

Re: How to tell if DnsBlocklists are definitely being used by my Spamassassin setup

2015-11-30 Thread Sebastian Arcus
On 30/11/15 18:01, Reindl Harald wrote: Am 30.11.2015 um 18:30 schrieb Sebastian Arcus: spamassassin -D < /path/to/spam-example.eml Thank you Harald. I did - and it looks like SA does contact lots of DNSBL's and it receives various messages in reply. Nothing that looks like failu

<    1   2