Re: Only running network tests when necessary - feature request

2010-10-31 Thread Henrik K
On Sat, Oct 30, 2010 at 09:28:27PM +0100, Justin Mason wrote: btw, I think this is already possible using the shortcircuit plugin. Just use rule priorities to run the non-net rules first, and shortcircuit if they are sufficient. Currently DNS queries are sent no matter what, but it's

Re: Full circle DNS test?

2010-10-31 Thread Joseph Brennan
dar...@chaosreigns.com wrote: I see there's a RDNS_NONE rule for when the sending IP address has no DNS PTR (reverse DNS) record. But no rule for when that PTR record doesn't have a matching A (forward DNS) record that matches the sending IP? Is this something that would be accepted into

Re: SA 3.3.1 and NetAddr::IP 4.034

2010-10-31 Thread Philip Prindeville
On 10/29/10 9:18 AM, Michael Scheidell wrote: On 10/29/10 12:11 PM, Mark Martinec wrote: Sure, go ahead, can't hurt. The patch is now in the SA trunk. Is it worth opening a ticket and putting it into the 3.3 branch too? Mark looks like Freebsd ports has an older version, so it should be

spamassassin - more children / faster scanning

2010-10-31 Thread Russ Sanders
I have an Ubuntu Linux server running SpamAssassin Server version 3.2.4 running on Perl 5.8.8 with zlib support (Compress::Zlib 2.008). I have at least one account that is having to process from 250 - 400 emails, 99% spam, per HOUR. This works out to be approximately 8,000 emails per day. The