Re: ruleset for German Bettchen and Schlafzimmer spam

2010-03-15 Thread Robert Schetterer
Am 15.03.2010 03:14, schrieb Marcus: Am Sonntag, den 14.03.2010, 23:31 +0100 schrieb Kai Schaetzl: Marcus wrote on Sun, 14 Mar 2010 21:16:31 +0100: The messages differ in subject and body. Do they? Hm, I must have overlooked this in your first message. Oh, wait, after reading it a second

Re: Timeouts

2010-03-15 Thread Kai Schaetzl
LuKreme wrote on Sun, 14 Mar 2010 19:04:22 -0600: Anything I can do to further trouble shoot this or eliminate these timeout errors? Process the same message with spamc again. Does it take that long again? Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Timeouts

2010-03-15 Thread Mark Martinec
LuKreme, Running spamd (SA-3.3.0) under FreeBSD 6.2 I see frequent timeout errors and message. When these occur, the mailserver seems to stop responding for seconds: 04:18:19 mail spamd[67527]: (__alarm__ignore__(141359)) 04:18:58 mail spamd[67527]: check: exceeded time limit, skipping

Re : RDNS_NONE

2010-03-15 Thread Christian Gregoire
Using SA 3.3.0. Any reason why RDNS_NONE now scores 1.3, when it was down to 0.1 with the previous releases ? The score was pretty much informational only previously and arbitrarily set. The current score is what the mass-checks and GA result in. The below headers trigger the rule only

Re: Re : RDNS_NONE

2010-03-15 Thread Benny Pedersen
On man 15 mar 2010 14:42:22 CET, Christian Gregoire wrote Using SA 3.3.0. Any reason why RDNS_NONE now scores 1.3, when it was down to 0.1 with the previous releases ? The score was pretty much informational only previously and arbitrarily set. The current score is what the mass-checks

Re: RDNS_NONE

2010-03-15 Thread RW
On Mon, 15 Mar 2010 15:06:22 +0100 Benny Pedersen m...@junc.org wrote: On man 15 mar 2010 14:42:22 CET, Christian Gregoire wrote Here is the picture : a PC whose local IP address is 10.10.3.4 (with no rDNS) submits a message to its SMTP gateway (john.fr), which in turn delivers it to my

Re: [sa] Re: ruleset for German Bettchen and Schlafzimmer spam

2010-03-15 Thread Charles Gregory
On Sun, 14 Mar 2010, Jörg Frings-Fürst wrote: take a look at http://wiki.apache.org/spamassassin/CustomRulesets and search to German Language Ruleset. H. I guess this goes back to my inquiry about the Brazilian spam I'm still looking for a way (hopefully) to simply identify the

Re: whitelist_from and whitelst_from_rcvd

2010-03-15 Thread RW
On Mon, 15 Mar 2010 21:43:03 +0800 Ron nha...@gmail.com wrote: Hi All, Newbie here, i have a qmail server, and i installed qmail-scanner+clav+spamassassin. I'm trying to allow all my users using whitelist_from but filter spoofed e-mail address using whitelist_from_rcvd. Whitelist rules

Re: whitelist_from and whitelst_from_rcvd

2010-03-15 Thread Ron
Hi Sir, Please see inline. Thank You On 3/16/2010 12:05 AM, RW wrote: On Mon, 15 Mar 2010 21:43:03 +0800 Ronnha...@gmail.com wrote: Hi All, Newbie here, i have a qmail server, and i installed qmail-scanner+clav+spamassassin. I'm trying to allow all my users using whitelist_from but filter

Re: whitelist_from and whitelst_from_rcvd

2010-03-15 Thread John Hardin
On Mon, 15 Mar 2010, Ron wrote: whitelist_from *...@imagetransforms.com Do not do this. The From: address is trivially easy to spoof. You should not trust it to this degree. whitelist_from should only be used in unusual situations, when you know exactly why one of the other whitelist

Re: whitelist_from and whitelst_from_rcvd

2010-03-15 Thread John Hardin
On Tue, 16 Mar 2010, Ron wrote: i think the only way to not scan outgoing mails in qmail is to add the users IP address to /etc/tcp.smtp, unfortunately my users are on dynamic IP that i cannot add it one by one. Are you authenticating your users in any way? There are ways to whitelist users

Re: [sa] Re: ruleset for German Bettchen and Schlafzimmer spam

2010-03-15 Thread Karsten Bräckelmann
On Mon, 2010-03-15 at 11:15 -0400, Charles Gregory wrote: H. I guess this goes back to my inquiry about the Brazilian spam I'm still looking for a way (hopefully) to simply identify the *language* of the mail (when not determined from CHARSET_FARAWAY rules), so that our users may

Re: DNSWL --report plugin

2010-03-15 Thread Andrzej Adam Filip
dar...@chaosreigns.com wrote: You must create an account here to use this: http://www.dnswl.org/registerreporter.pl It is still experimental. I expect it to work flawlessly. If it doesn't, please email me details off-list. It causes the spamassassin --report (or -r) command to also

Re: What happened to SOUGHT rules' server?

2010-03-15 Thread j
I've been having the same problem from several locations/ISPs, since mid-Saturday. 500 Can't connect to yerp.org:80 (connect: timeout) Dave Anyone figure this out? I have received the same yerp.org down errors and it's screwing up my SA royally. I guess this is what we get when we rely on

Re: What happened to SOUGHT rules' server?

2010-03-15 Thread Daryl C. W. O'Shea
On 15/03/2010 11:07 PM, j wrote: I've been having the same problem from several locations/ISPs, since mid-Saturday. 500 Can't connect to yerp.org:80 (connect: timeout) Dave Anyone figure this out? I have received the same yerp.org down errors and it's screwing up my SA royally. I guess