Re: Botnet + p0f (was: Botnet Score)

2007-06-25 Thread Vincent Li
d can be inserted by p0f+p0fanalyzer+amavisd (which I use), or by p0f+p0fanalyzer + p0f pluging for SA by Vincent Li Another alternative is my stuff at: <http://whatever.frukt.org/p0fstats.text.shtml> The stuff there uses UDP to send p0f info from the system running p0f (probably the

Re: v3.2.1 gives "spamd: handle_user unable to find user:"

2007-06-13 Thread Vincent Li
andle_user unable to find user: $username\n"); Since you don't run spamd in paranoid mode "-P" option, spamd will not die and fall back to user nobody Vincent Li http://bl0g.blogdns.com

Re: R: new system

2007-06-13 Thread Vincent Li
On Wed, 13 Jun 2007, Giampaolo Tomassoni wrote: -Messaggio originale- Da: Vincent Li [mailto:[EMAIL PROTECTED] On Wed, 13 Jun 2007, Jerry Durand wrote: Sometime later this summer I'm going to be replacing our server. It's currently a Mac (1.42GHz G4) running OS X Serv

Re: new system

2007-06-13 Thread Vincent Li
, moving mail boxes, reducing the memory load...You can run Amavisd-new/SpamAssassin on a seperate Linux box and let Postfix on OS X talk to Amavisd-new on the Linux box. Vincent Li http://bl0g.blogdns.com

Re: [SPAM] RE: Poor performance with v3.2.0

2007-05-09 Thread Vincent Li
sa-compile took 3 hours to run. (System is a SunFire v210 with 2 processors and 2 GB ram.) Vincent Li http://bl0g.blogdns.com

Re: Re: ANNOUNCE: Apache SpamAssassin 3.2.0-rc3 PRERELEASE available!

2007-04-25 Thread Vincent Li
On Wed, 25 Apr 2007, Rick Macdougall wrote: Justin Mason wrote: Rick Macdougall writes: > Vincent Li wrote: > > On Wed, 25 Apr 2007, Rick Macdougall wrote: > > > It's running here but I'm getting hammered by joe job bounces and I > > > don'

Re: Re: ANNOUNCE: Apache SpamAssassin 3.2.0-rc3 PRERELEASE available!

2007-04-25 Thread Vincent Li
On Wed, 25 Apr 2007, Rick Macdougall wrote: Vincent Li wrote: On Wed, 25 Apr 2007, Rick Macdougall wrote: > > It's running here but I'm getting hammered by joe job bounces and I > don't see any VBounce rules firing. It is not commented out in > v320.p

Re: [SPAM] Re: ANNOUNCE: Apache SpamAssassin 3.2.0-rc3 PRERELEASE available!

2007-04-25 Thread Vincent Li
red by joe job bounces and I don't see any VBounce rules firing. It is not commented out in v320.pre. Am I missing something ? Regards, Rick Have you specified whitelist_bounce_relays hostname_of_your_MTA in /etc/mail/spamassassin/local.cf ? It works on my site.

Re: spamd: server killed by SIGTERM (every hour!)

2007-04-13 Thread Vincent Li
13 17:00:08 2007 [22160] info: spamd: got connection over /var/run/spamd.socket Fri Apr 13 17:00:08 2007 [22160] info: spamd: processing message (unknown) for root:0 Fri Apr 13 17:00:13 2007 [29550] info: spamd: server killed by SIGTERM, shutting down Thanks, Andy. Are you running spamd/spamc as root? it is not recommended to run spamd as root. Vincent Li http://bl0g.blogdns.com

Re: [SPAM] Install spamassassin

2007-03-08 Thread Vincent Li
anyan There is wiki about intergrating spamc/spamd pair (spamassassin) with postfix: http://wiki.apache.org/spamassassin/IntegratedSpamdInPostfix?highlight=%28spamd%29 Vincent Li Bloghttp://bl0g.blogdns.com

Re: RelayChecker (now Botnet ) 0.4

2006-11-28 Thread Vincent Li
server, seems working well. Caution: It does tag email from hotmail :) http://www.vcn.bc.ca/~vli/P0f.pm Thank Mark for the inspiration! Mark Vincent Li http://pingpongit.homelinux.com Opensource .Implementation. .Consulting. Platform.Fedora. .Debian. .Mac OS X. Bloghttp://bl0g.blogdns.com

Re: Max-children setting not high enough causing spamassassin to hang?

2006-10-24 Thread Vincent Li
erisk system. Vincent Li http://pingpongit.homelinux.com Opensource .Implementation. .Consulting. Platform.Fedora. .Debian. .Mac OS X. Bloghttp://bl0g.blogdns.com

Re: Parsing Email

2006-10-11 Thread Vincent Li
;; binmode $out; print $out $p->decode(); }; #warn $@ if $@; } __END__ Use "perldoc Mail::SpamAssassin::Message" and "perldoc Mail::SpamAssassin::Message::Node" for more information about functions and such. :) -- Randomly Selected Tagline

Re: Quarantined Spam.

2006-09-08 Thread Vincent Li
Vincent Li System Admin On Fri, 8 Sep 2006, Jared wrote: Hi, Is there anyway I can resend the emails which have been quarantined. as some of the emails should not have been quarantined. I'm using plesk 7.5 reloaded with spam assassin. I am using Amavisd-new SQL quarantine and M

Re: DnsResolver.pm gives up unnecessarily on EACCES result

2006-08-04 Thread Vincent Li
2006/8/4, Rosenbaum, Larry M. <[EMAIL PROTECTED]>: SpamAssassin version 3.1.4 running on Perl version 5.8.7 SunOS email 5.9 Generic_118558-10 sun4u sparc SUNW,Sun-Fire-V210 In the connect_sock() method in DnsResolver.pm, there is a loop starting at line 177 that starts out like this: # find

Re: SpamAssassin 3.0.3 and MIME_BOUND_RKFINDY

2006-07-28 Thread Vincent Li
On 27-Jul-06, at 7:46 PM, Tao Lin wrote: Hi, John Now I understand what MIME_BOUND_RKFINDY mean. It means my email is generated by Indy component.  And I have some misuse of the Indy component that it gen the html email is not so clean. Once I fix it, my email score from 2.4 downto 0.5! A

Re: How to install iXhash

2006-06-22 Thread Vincent Li
sssin 6) run spamassassin --lint 7) if it passes, restart spamd or any other persistent daemons that use the spamassassin perl API. Thanks Matt - what directory would you put iXhash.pm in? If I get this to work I'll update the wiki. Should be under /Whatever/Mail/SpamAssassin/Plugin

Re: Messages Not detected as Spam

2006-04-25 Thread Vincent Li
On 24-Apr-06, at 9:25 PM, Paul Wetter wrote: Here is what I get when I reproduce the email: X-Spam-Status: No, hits=0.002 tagged_above=-1 required=1.5 tests=[BAYES_50=0.001, HTML_MESSAGE=0.001] spamassassin -t gives me this: Content analysis details: (9.1 points, 2.5 required) pts rule name

Re: 2nd mail server problem

2006-03-29 Thread Vincent Li
On 29-Mar-06, at 12:11 AM, Joshua, C.S. Chen wrote: Looks like I have to enable SA in the 2nd server. It might be a spam hole if the spam sent to 2nd first, then forcily relayed to the primary. If you are running postfix MTA on your 2nd server, you can map your email user list of main MTA serve

Re: How SpamAssassin recognize chinese character?

2006-01-09 Thread Vincent Li
On 9-Jan-06, at 2:16 PM, Matt Kettler wrote: Jon Armitage wrote: Vincent Li wrote: I have been using SpamAssassin for quite a while, and used SARE rules and other custom rules. I am interested in writing my own chinese spam rules to block chinese spam email. I cheat and use an Exim acl

Re: How SpamAssassin recognize chinese character?

2006-01-09 Thread Vincent Li
On 9 Jan 2006, at 10:08 PM, Jon Armitage wrote: Vincent Li wrote: I have been using SpamAssassin for quite a while, and used SARE rules and other custom rules. I am interested in writing my own chinese spam rules to block chinese spam email. I cheat and use an Exim acl statement to reject

How SpamAssassin recognize chinese character?

2006-01-09 Thread Vincent Li
Hi list: I have been using SpamAssassin for quite a while, and used SARE rules and other custom rules. I am interested in writing my own chinese spam rules to block chinese spam email. I found chinese rules at http://www.ccert.edu.cn/spam/sa/Chinese_rules.cf and http://www.geewhiz.ca/images/b/