Mail discarded

2010-06-25 Thread Sasa
Hi, from a few days much incomings mails are blocked and in log file I have always 'discarded, UBE': Jun 24 13:10:23 mail postfix/qmgr[445]: CB6FD26A1AF: from=x...@email.it, size=49182, nrcpt=1 (queue active) Jun 24 13:10:26 mail postfix/smtp[25251]: CB6FD26A1AF: to=y...@mail.mydomain.com,

Re: Mail discarded

2010-06-25 Thread Matus UHLAR - fantomas
On 25.06.10 11:24, Sasa wrote: Hi, from a few days much incomings mails are blocked and in log file I have always 'discarded, UBE': Jun 24 13:10:23 mail postfix/qmgr[445]: CB6FD26A1AF: from=x...@email.it, size=49182, nrcpt=1 (queue active) Jun 24 13:10:26 mail postfix/smtp[25251]:

Re: Nonsense spam

2010-06-25 Thread Henrik K
On Thu, Jun 24, 2010 at 03:59:24PM -0400, Michael Scheidell wrote: that is why, as Ned said, you have to only use it on the LAST UNTRUSTED ip. (or first received header). What you are referring to is the EXTERNAL border (MX-border). Trusted may not be the same on some configurations (big ISP

Re: Nonsense spam

2010-06-25 Thread Matus UHLAR - fantomas
On Thu, Jun 24, 2010 at 03:59:24PM -0400, Michael Scheidell wrote: that is why, as Ned said, you have to only use it on the LAST UNTRUSTED ip. (or first received header). On 25.06.10 13:27, Henrik K wrote: What you are referring to is the EXTERNAL border (MX-border). Trusted may not be the

A developers perspective on Spamassassin

2010-06-25 Thread Sharma, Ashish
Hi, I want to know how spamassassin works from a developers point of view, specifically I want an answer to following questions: 1. How is an email rendered on spamassassin once it's received? 2. How are email attachments handled on spamassassin for rule parsing? 3. How is spamassassin able

Re: A developers perspective on Spamassassin

2010-06-25 Thread Michael Scheidell
On 6/25/10 7:53 AM, Sharma, Ashish wrote: Hi, I want to know how spamassassin works from a developers point of view, specifically I want an answer to following questions: 1. How is an email rendered on spamassassin once it's received? I am not one of the spamassassin developers, but I am

Re: Mail discarded

2010-06-25 Thread Daniel McDonald
On 6/25/10 4:24 AM, Sasa s...@shoponweb.it wrote: Hi, from a few days much incomings mails are blocked and in log file I have always 'discarded, UBE': That is the standard message from amavisd-new when the spamscore exceeds the discard threshold but the domain 'email.it' (but I have this

Re: Nonsense spam

2010-06-25 Thread Randy Ramsdell
RW wrote: On Thu, 24 Jun 2010 15:59:24 -0400 Michael Scheidell scheid...@secnap.net wrote: On 6/24/10 3:51 PM, Ned Slider wrote: The danger comes when people use the PBL incorrectly and deep parse all headers which *will* lead to copious FPs. Either way, I'd have no hesitation

Re: Nonsense spam

2010-06-25 Thread Karsten Bräckelmann
On Fri, 2010-06-25 at 10:59 -0400, Randy Ramsdell wrote: The current scores are actually: RCVD_IN_PBL 0 3.558 0 3.335 Latest 3.3.x scores. I show these current scores which are much lower than what you have. It this because of the spamassassin version we use or maybe I did not use

Re: NO_RELAYS spam

2010-06-25 Thread Karsten Bräckelmann
On Fri, 2010-06-18 at 23:54 +0200, Karsten Bräckelmann wrote: Your issue is kind of weird and far less than common. Read, I cannot recall coming across such a report *ever* on this list. Thus, the collective list's lack of pin-pointing the cause with the info given. The very reason we need

Novel indentation

2010-06-25 Thread Kenneth Porter
I'm getting some nonsense spams that contain a big block of text/plain and matching HTML part, and the text/plain part has an interesting indentation pattern: The first line is indented with a single space, and all subsequent lines start with 3 spaces: Debate Over Vaccines And Autism/ADD

Re: A developers perspective on Spamassassin

2010-06-25 Thread Ted Mittelstaedt
Ashish, SA itself mainly does rule matching, it reads the decoded mail line by line, comparing it to it's rules and (optionally) bays database. SA would parse the entire attachment except that there's a default setting saying to stop processing after a certain amount of KB of data has