Re: Spam troubleshooting

2009-07-23 Thread Matus UHLAR - fantomas
Can I also ask where the best place to start with to implement razor and/or pyzor in SA3.2 on Linux with postfix? EHM? implement it on your mailserver... On 22.07.09 22:38, MySQL Student wrote: Heh, no, I mean where can I go to learn how to implement it? Where's the docs? :-) well,

Re: Spam troubleshooting

2009-07-22 Thread MySQL Student
How effective are razor/pyzor and SPF/DKIM? very effective, razor/pyzor altogether with DCC. SPF also helps much, although it should be implemented at SMTP level and refuse all messages that cause (hard) fail. While DKIM is currently in SA, the only place it currently applies is

Re: Spam troubleshooting

2009-07-22 Thread Matus UHLAR - fantomas
How effective are razor/pyzor and SPF/DKIM? very effective, razor/pyzor altogether with DCC. SPF also helps much, although it should be implemented at SMTP level and refuse all messages that cause (hard) fail. While DKIM is currently in SA, the only place it currently applies is

Re: Spam troubleshooting

2009-07-22 Thread MySQL Student
Can I also ask where the best place to start with to implement razor and/or pyzor in SA3.2 on Linux with postfix? EHM? implement it on your mailserver... Heh, no, I mean where can I go to learn how to implement it? Where's the docs? :-) I think I'm headed towards razor first, as it doesn't

Re: Spam troubleshooting

2009-07-10 Thread Matus UHLAR - fantomas
ALL_TRUSTED is a bit odd. If you you look back through the debug, it has identified untrusted relays: [11689] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=194.230.33.137 rdns=mx.xm-rz.net helo=mail.xm-rz.net by=myhost.mydomain.com ident= envfrom= intl=0 id=B94C2118004 auth= msa=0 ] [

Re: Spam troubleshooting

2009-07-10 Thread Matus UHLAR - fantomas
On 04.07.09 20:50, MySQL Student wrote: I am stuck trying to figure out why the attached spam isn't caught properly. In fact, BAYES_99 isn't flagged and I know it should be, and the total score is 0.0, despite several rules being flagged. The LOCAL_BODY_1577053434 and LOCAL_BODY_4046600451

Re: Spam troubleshooting

2009-07-10 Thread Matus UHLAR - fantomas
spamassassin 21 -D --lint search here for missing perl modules On 05.07.09 18:57, MySQL Student wrote: How effective are razor/pyzor and SPF/DKIM? very effective, razor/pyzor altogether with DCC. SPF also helps much, although it should be implemented at SMTP level and refuse all messages

Re: Spam troubleshooting

2009-07-06 Thread LuKreme
On 5-Jul-2009, at 18:55, MySQL Student wrote: * -4.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/ What the hell is RECVD_IN_DNSWL_MED and why is it trusted in dnswl.org? Did you look at the URL? I put the following in local.cf score RCVD_IN_DNSWL_LOW -1 score

Re: Spam troubleshooting

2009-07-06 Thread Benny Pedersen
On Mon, July 6, 2009 14:59, LuKreme wrote: On 5-Jul-2009, at 18:55, MySQL Student wrote: * -4.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/ What the hell is RECVD_IN_DNSWL_MED and why is it trusted in dnswl.org? Did you look at the URL? I put the following in

Re: Spam troubleshooting

2009-07-06 Thread MySQL Student
Hi, have any of you tryed going to dnswl.org homepage ?, even tryed to lookup the ip ?, got refused submit of new ticket ? Yes, I went to the site, but didn't try to resolve either of them because I knew they were already on the list. They now appear to no longer be on the list. Now I know to

Re: Spam troubleshooting

2009-07-05 Thread Benny Pedersen
On Sun, July 5, 2009 02:50, MySQL Student wrote: The X-MailCleaner headers were there when I received the email. I've obfuscated our customers domain for security. Any ideas greatly appreciated. Where can I start? Am I doing something wrong or is there something in the header that is

Re: Spam troubleshooting

2009-07-05 Thread MySQL Student
Hi, spamassassin 21 -D --lint search here for missing perl modules How effective are razor/pyzor and SPF/DKIM? I've always been a bit hesitant to use any of those. and the spam mail have all_trusted ?, you trust a spammer in trusted_networks trusted_networks isn't at all defined. It looks

Re: Spam troubleshooting

2009-07-05 Thread MySQL Student
Hi again, and the spam mail have all_trusted ?, you trust a spammer in trusted_networks I meant to add, how can I determine which IP it was that is being trusted, anyway? Thanks again, Alex

Re: Spam troubleshooting

2009-07-05 Thread Benny Pedersen
On Mon, July 6, 2009 00:57, MySQL Student wrote: spamassassin 21 -D --lint search here for missing perl modules How effective are razor/pyzor and SPF/DKIM? I've always been a bit hesitant to use any of those. well it helps, if used properly, how thay works is depending on your need and

Re: Spam troubleshooting

2009-07-05 Thread Benny Pedersen
On Mon, July 6, 2009 01:00, MySQL Student wrote: I meant to add, how can I determine which IP it was that is being trusted, anyway? spamassassin 21 -D -t spammsg | grep trusted | less there you see all trusted ip, is all safe ? grep untrusted aswell to see where other ips is, hopefully the

Re: Spam troubleshooting

2009-07-05 Thread RW
On Sun, 5 Jul 2009 18:17:21 +0200 (CEST) Benny Pedersen m...@junc.org wrote: and the spam mail have all_trusted ?, you trust a spammer in trusted_networks ALL_TRUSTED is a bit odd. If you you look back through the debug, it has identified untrusted relays: [11689] dbg: metadata:

Re: Spam troubleshooting

2009-07-05 Thread MySQL Student
Hi, ALL_TRUSTED is a bit odd. If you you look back through the debug, it has identified untrusted relays: [11689] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=194.230.33.137 rdns=mx.xm-rz.net helo=mail.xm-rz.net by=myhost.mydomain.com ident= envfrom= intl=0 id=B94C2118004 auth= msa=0 ] [

Re: Spam troubleshooting

2009-07-05 Thread MySQL Student
Hi again, I have more information on those untrusted hosts. ALL_TRUSTED is a bit odd. If you you look back through the debug, it has identified untrusted relays: [11689] dbg: metadata: X-Spam-Relays-Untrusted: [ ip=194.230.33.137 rdns=mx.xm-rz.net helo=mail.xm-rz.net by=myhost.mydomain.com