Re: Bayes is causing MySQL performance issues

2010-03-30 Thread Martin Svensson
Thanks for your response. The problem is unfortunately still not solved. Yesterday I dropped the database and re-created it from bayes_mysql.sql file that is bundled with the SpamAssassin package (and added a lastupdate field). 12 hours or so after I re-enabled bayes the load avg and I/O wait

Re: ATTN DEVELOPERS: Mega-Spam

2010-03-30 Thread Jonas Eckerman
On 2010-03-30 01:29, Brent Kennedy wrote: Graylisting does work. I know it works. That's why I said I like it because it stops spam. Been using my own implementation for years. I think after I turned it on, the botnet plug-in got bored. My stats for it dropped significantly. So that’s

Re: ATTN DEVELOPERS: Mega-Spam

2010-03-30 Thread Kai Schaetzl
Jonas Eckerman wrote on Tue, 30 Mar 2010 11:52:43 +0200: I suspect that If the botnets were short on bandwidth and computer power, the programmers would have fix those issues a long time ago. And the simple fact that they still haven't adapted to greylisting indicates that it's impact is

Re: ATTN DEVELOPERS: Mega-Spam

2010-03-30 Thread Kai Schaetzl
Jonas Eckerman wrote on Tue, 30 Mar 2010 00:41:01 +0200: Unless the greylisting is done *after* receiving the body. Of course, this will spank innocent senders as well. Ooops? It spanks *yourself*. Good strategy. Kai -- Get your web at Conactive Internet Services: http://www.conactive.com

Re: Bayes is causing MySQL performance issues

2010-03-30 Thread Martin Gregorie
On Tue, 2010-03-30 at 11:04 +0200, Martin Svensson wrote: Thanks for your response. The problem is unfortunately still not solved. Yesterday I dropped the database and re-created it from bayes_mysql.sql file that is bundled with the SpamAssassin package (and added a lastupdate field). 12

Re: ATTN DEVELOPERS: Mega-Spam

2010-03-30 Thread Jonas Eckerman
On 2010-03-30 13:31, Kai Schaetzl wrote: Jonas Eckerman wrote on Tue, 30 Mar 2010 00:41:01 +0200: Unless the greylisting is done *after* receiving the body. Of course, this will spank innocent senders as well. Ooops? It spanks *yourself*. Not really. It does force us to accept the mail

Scanning large-body spam

2010-03-30 Thread Alex
Hi, What settings do people typically have these days for the maximum scanned message size? Surprisingly, at least to me, I'm seeing spam in the 650k and 700k range, at least a few per hour, and are not scanned. Does anyone have any suggestions for optimizing the process for spam containing just

Re: Bayes is causing MySQL performance issues

2010-03-30 Thread Jari Fredriksson
On 30.3.2010 12:04, Martin Svensson wrote: Thanks for your response. The problem is unfortunately still not solved. Yesterday I dropped the database and re-created it from bayes_mysql.sql file that is bundled with the SpamAssassin package (and added a lastupdate field). Just a double

Re: Bayes is causing MySQL performance issues

2010-03-30 Thread Martin Svensson
Again, thanks for your contributions all. Martin: We are running SA on separate servers, our MySQL is running on a dedicated server. The servers running Amavis/SA are running smoothly, no swap and no insanse I/O operations. Jari: The engine is InnoDB on all Bayes-tables. According to

Re: ATTN DEVELOPERS: Mega-Spam

2010-03-30 Thread John Hardin
On Tue, 30 Mar 2010, Jonas Eckerman wrote: On 2010-03-30 01:29, Brent Kennedy wrote: I think after I turned it on, the botnet plug-in got bored. My stats for it dropped significantly. So that’s my proof it does adversely affect botnets. No, that's your proof that it has a positive

Re: Mega-Spam

2010-03-30 Thread Charles Gregory
(Subject line changed to remove the 'flag' to developers) On Mon, 29 Mar 2010, Karsten Bräckelmann wrote: .. But then again, this is a topic for the dev list [1] to start a discussion, not here. Uh, no, I'm not a developer. And the description of that list specifically says... For

Re: Mega-Spam

2010-03-30 Thread Karsten Bräckelmann
On Tue, 2010-03-30 at 09:38 -0400, Charles Gregory wrote: (Subject line changed to remove the 'flag' to developers) On Mon, 29 Mar 2010, Karsten Bräckelmann wrote: .. But then again, this is a topic for the dev list [1] to start a discussion, not here. Uh, no, I'm not a developer.

Re: FREEMAIL_ENVFROM_END_DIGIT score

2010-03-30 Thread Matt Garretson
On 3/29/2010 3:31 PM, Michael Scheidell wrote: WAY too many gmail and hotmail and yahoo accounts out there, and they HAVE TO END IN DIGITS.so, FREEMAIL-ENVFROM_END_DIGIT is redundant with FREEMAIL. Agreed. My data point FWIW: since yesterday, FREEMAIL_ENVFROM_END_DIGIT here has hit on 2304

Re: KHOP_RCVD_TRUST

2010-03-30 Thread Adam Katz
Dennis B. Hopp began: I received the following e-mail http://pastebin.com/JXr9buxi It had a total score of 4.973 (blocked at 5). [...] it hit: KHOP_RCVD_TRUST=-1.75,RCVD_IN_DNSWL_MED=-0.5,SPF_PASS=-0.001 Michael Scheidell responded: is that an old rule? i just checked SA updates, and I

Re: Scanning large-body spam

2010-03-30 Thread Lee Dilkie
Alex wrote: Hi, What settings do people typically have these days for the maximum scanned message size? Surprisingly, at least to me, I'm seeing spam in the 650k and 700k range, at least a few per hour, and are not scanned. Does anyone have any suggestions for optimizing the process for

Re: Increase in scan time from 3.3 to 3.3.1

2010-03-30 Thread Adam Katz
Alex wrote: What would be involved with making the PSBL DNSBL work with v3.2.5? Alex, I'm pretty sure that you are already using PSBL through my khop-bl channel, which adds PSBL, BRBL, Spam-eating Monkey (SEMBLACK), HostKarma/JunkEmailFilter, and, more recently, MSPIKE (as per a request from

Re: Increase in scan time from 3.3 to 3.3.1

2010-03-30 Thread Alex
Hi, What would be involved with making the PSBL DNSBL work with v3.2.5? Alex, I'm pretty sure that you are already using PSBL through my khop-bl channel, which adds PSBL, BRBL, Spam-eating Monkey (SEMBLACK), HostKarma/JunkEmailFilter, and, more recently, MSPIKE (as per a request from João)