Re: upgrad spamassassin

2009-05-27 Thread Rick Macdougall
McDonald, Dan wrote: On Wed, 2009-05-27 at 07:44 -0700, hateSpam wrote: Running on... [ ] Redhat linux version 6.0 [ ] Minix [ ] OpenVMS [ ] Sun/OS 2.0 [X] Timex Sinclair ZX81 [ ] Windows NT 3.02B [ ] Something else? Installed using... [ ] tarball install [ ] CPAN [ ] RPM [ ] deb [

Re: upgrad spamassassin

2009-05-27 Thread Rick Macdougall
hateSpam wrote: Thanks for reply. Sorry, I should say that before. I am using CentOS Linux 5. For mailing delivery we are using Postfix version 2.3.3 and Procmail. Yes, but the most important question still remains. How did you originally install SpamAssassin ? Regards, Rick

Re: two databases

2009-06-05 Thread Rick Macdougall
Michael Grant wrote: On Fri, Jun 5, 2009 at 16:08, Micah Anderson mi...@riseup.net wrote: Michael Grant michael.gr...@gmail.com writes: I did not realize one could store the bayes scores in sql. So I'd store the bayes scores on a third server and let both mxes use the same database. I did

Re: Spoofed Email

2009-06-18 Thread Rick Macdougall
Jeff Drury wrote: SA is working for the most part beyond expectations, the only problem I’m having is filtering spoofed email address (i.e. valid_u...@ourdomain.com). I am able to filter out non-valid user addresses (i.e. spam...@ourdomain.com). I run SA-Update daily, have piped well over 500

Re: Spoofed Email

2009-06-18 Thread Rick Macdougall
Benny Pedersen wrote: On Tors, Juni 18, 2009 20:36, Rick Macdougall wrote: I'd recommend upgrading to the latest version (3.2.5) and running and sa-update to get the latest rules. how will this help on spoofed mail problem ? The improved rules should help catch them. Rick

Re: good Spamassassin Summary report

2009-07-03 Thread Rick Macdougall
Daniel Schaefer wrote: I have searched far and wide for a good Spamassassin report using numerous keywords in Google searches, but I can't find the one that fits my needs. I am looking for a script that can be run via cron job on a daily basis. I would pass the script the location of the mail

Re: OT: Website protection

2009-07-12 Thread Rick Macdougall
Mikael Bak wrote: schmero...@gmail.com wrote: One of our client's websites gets hacked frequently - 1x per month - usually with some kind of phishing scam. We've also had some problems lately. After deep investigations we saw that in 100% of the cases there were no break-ins at all. Not in

Re: Backscatter.org used as RBL??

2009-08-07 Thread Rick Macdougall
Marc Perkel wrote: What they should do is return different codes to indicate what got them on the list. SAV is not backscatter. So if it is from and there is DATA then it's someone who is sending bad bounce messages to faked sender addresses. But if there is nod DATA then it's SAV. These

Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Rick Macdougall
Charles Gregory wrote: On Sun, 9 Aug 2009, Res wrote: To be truthful, I have been doing this by default here, as well, but find that it creates some problems for some users. So I am thinking about opening up SMTP-AUTH ports. Trouble is (and its semi-relevance to this list) I have to wonder

Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Rick Macdougall
Matus UHLAR - fantomas wrote: On 10.08.09 11:24, Rick Macdougall wrote: I can't speak for others but at my main job (20K+ email accounts) it happens about once every 2 month's or so. Some how the spammer gets a hold of someone's password and either uses smtp-auth or webmail to send out

Re: [sa] Re: Slightly OT - Spam opprortunities in SMTP-AUTH

2009-08-10 Thread Rick Macdougall
Charles Gregory wrote: On Mon, 10 Aug 2009, Rick Macdougall wrote: I can't speak for others but at my main job (20K+ email accounts) it happens about once every 2 month's or so. Some how the spammer gets a hold of someone's password and either uses smtp-auth or webmail to send out spam

Re: Writing spamassassin rules

2009-08-27 Thread Rick Macdougall
Kevin Miller wrote: I'm sure I'm missing the obvious, but I can't seem to find a guide to writing spamassassin rules on the spamassassin web page. I'd like to write some custom rules, and some documentation would be really handy. Anybody got that URL handy?

Re: Rule PTR != localhost

2009-09-03 Thread Rick Macdougall
Benny Pedersen wrote: On Thu 03 Sep 2009 03:05:50 PM CEST, Justin Mason wrote On Thu, Sep 3, 2009 at 12:18, Benny Pedersenm...@junc.org wrote: On Thu 03 Sep 2009 07:19:35 AM CEST, Clunk Werclick wrote Forgive the stupidity of the question, but I'm not sure how to, or even if it can be

Re: Non scoring 'Bank Deposit' spam

2009-09-14 Thread Rick Macdougall
John Hardin wrote: On Mon, 14 Sep 2009, LuKreme wrote: On 14-Sep-2009, at 05:24, --[ UxBoD ]-- wrote: If the OP cannot refrain from that sort of foul language when presented with counter arguments then please ban. The list would be far happier IMHO. Based on his reply to LuKreme, +1 on a

Re: Hostkarma: to be or not to be in SA defaults

2009-09-30 Thread Rick Macdougall
Yet Another Ninja wrote: On 9/30/2009 10:25 PM, Raymond Dijkxhoorn wrote: I sincerly hope people realize its a serious thing, and take this mail to improove things and setups. And please dont include lists that are not up to the task yet). This may be of interest..

Re: Constant Contact

2009-10-16 Thread Rick Macdougall
Adam Katz wrote: Does anybody here know anything about the legitimacy of Constant Contact http://www.constantcontact.com/anti_spam.jsp ? Hi, Very legitimate. We have 4 or 5 clients who use it to send out emails to their subscribers. How ever, it can and does get abused by spammers from

Re: rbl checks not running

2009-11-20 Thread Rick Macdougall
Mark Hedges wrote: As I've already confirmed by including the debugging log attachment in my first message, the test rule is loaded, it expects to be looking at spammers.rbl.dmz. (I have a somewhat complex setup due to multiple scanners with different preferences and mostly shared options.)

Re: Problems with whitelists and simscan

2009-11-25 Thread Rick Macdougall
Jose Luis Marin Perez wrote: Dear Sirs I noticed a problem with Spamassassin whitelists and Simscan: Spamassassin is configured to use white lists using mysql (for example) *mysql select * from userpref; +--++-++ |

Re: Problems with whitelists and simscan

2009-11-26 Thread Rick Macdougall
Jose Luis Marin Perez wrote: Hi Rick, Thanks for your answer. So for these cases as could do to work whitelists? It can be solution in spamassassin or simscan? Hello, When more than one recipient for an email is received simscan uses the default user when passing to spamd. So

Re: ANNOUNCE: Apache SpamAssassin 3.3.0 available

2010-01-26 Thread Rick Macdougall
On 26/01/2010 11:33 AM, Warren Togami wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.0 Introduction This is a major release, incorporating enhancements and bug fixes that have accumulated in a year and a half of development since the 3.2.5 release. Apart from some new

Re: how can i finetune to spamassassin to handle spams

2010-01-28 Thread Rick Macdougall
On 28/01/2010 9:52 AM, Bowie Bailey wrote: ram wrote: * 3.4 FH_DATE_PAST_20XX The date is grossly in the future. This rule started causing problems at the beginning of the year and was fixed. Have you run sa-update to get the latest rules? And don't forget to restart spamd and, if

Re: Automatic Deployment

2007-09-13 Thread Rick Macdougall
Rense Buijen wrote: Hi Group, I was wondering, setting up a mailserver with spamassassin and optionaly amavis and/or mailscanner takes a big amount of time if you want to do it right. Is there a system or set of scripts that can speed things up and maybe with some dialoques to configure a

MIPSpace

2007-10-11 Thread Rick Macdougall
Hi, Anyone ever hear of or use them? www.mipspace.org Looks like they block commercial senders. Regards, Rick

Re: how to auto create spam folder in in webmail ( before ise can log in )

2007-10-23 Thread Rick Macdougall
Jari Fredriksson wrote: HI I had a query, i am using a webmail interface called squerrel mail , i need to make changes on the ./conf.pl file ( folders option ) so that when the user first time logs a folder called spam is already created . can this be possible ?? Agnello . G .Dsouza

Re: spamd throughput issues

2007-12-10 Thread Rick Macdougall
Mark Rigby-Jones wrote: On 9 Dec 2007, at 21:40, Steven Stern wrote: Have you tried running a local caching name server? That can cut down on times to do repetitive name lookups. Yes indeed, it's something we've always had on mail servers even before we had SpamAssassin, for exactly that

Re: Score all emails and delete some of them

2007-12-13 Thread Rick Macdougall
Chris wrote: Does anyone know if there's a way to score *all* emails at the server with scores from 0-100, then delete all emails at the server with scores of over 10 and deliver the rest with the scores in the subject title please ? Any help much appreciated. Chris. simscan for qmail can

Re: spamc/spamd failure

2007-12-21 Thread Rick Macdougall
Michael Grant wrote: I'm running 3.2.3. I'm noticing that spamc/spamd fails when it's presented large messages containing rather large mime attachments (like more than a megabyte or so). When I run the messages through spamc by hand, it returns immediately with a not-spam result with headers

Re: Apache SpamAssassin 3.2.4

2008-01-07 Thread Rick Macdougall
James Lay wrote: New upgrade is running GREAT here :) James Same here, seems quite a bit faster! Great job! Rick

Re: How to skip checking emails over a certain size?

2008-01-10 Thread Rick Macdougall
Henry Kwan wrote: Hi, Is there a way to have SA skip messages over a certain size? I tried using this procmailrc recipe: :0fw * 256000 | /usr/bin/spamc But it resulted in this error: spamd[2492]: razor2: razor2 check failed: razor2: razor2 had unknown error during check at

Re: Feedback on 3.2.4

2008-01-23 Thread Rick Macdougall
Skip wrote: Other than the initial reports of performance boost from 3.2.4, I haven't seen much discussion on it as yet. Perhaps it is still too soon to know, but has anyone been seeing other benefits - or identified potential problems? No problems with it at all here (around 7 servers

Re: Feedback on 3.2.4

2008-01-23 Thread Rick Macdougall
Jorge Valdes wrote: No problems with it at all here (around 7 servers upgraded) and the performance is greatly increased. I went from a 1.4 second average scan time to 0.6 seconds average. HTH, Rick Is this without network tests? Because on my server I had Begin : 2008-01-01 End

Re: FW: Suggestions to block this spam

2008-02-20 Thread Rick Macdougall
Bazooka Joe wrote: Do you think anyone has notified blogspot.com that their site is being abused by spammers? I have submitted urls 4 or 5 times to them. I've never heard back but the sites did vanish pretty quickly. You can do it here

Re: [OT] Yahoo Deferred

2008-02-25 Thread Rick Macdougall
Tony Bunce wrote: Sorry for the Off Topic thread but I’m at a loss. Is anyone else having issues sending mail to Yahoo? They are returning 421 Message temporarily deferred to every message my servers try to send. My server then retries like it should but yahoo never accepts the

Re: rule checking environment variable

2008-02-26 Thread Rick Macdougall
Miguel Angel wrote: Hello, i am using spamassassin 3.2.3 with qmail and simscan, the problem i have it is that my authenticated smtp users have any mails rejected because a high score, i know i can use other ip not listed in mx of the domains to create a server with required authentication

Re: rule checking environment variable

2008-02-26 Thread Rick Macdougall
Miguel Angel wrote: The latest versions of simscan will not run spamc on email where RELAYCLIENT is set. This can happen via smtp auth or via tcp.smtp. You might want to take this over to the simscan mailing list and post your ./configure options so we can help you figure out why it is

Re: Spamassassin not checking a particular Email.

2008-03-10 Thread Rick Macdougall
Michael Hutchinson wrote: Hi all, Another query.. another busy SA day. I have a piece of Spam that is getting through to one of our biggest clients. I have written rules to tag this Spam, but it is as if it isn't even being checked by Spamassassin. I have checked our qmail control files to

Re: FW: Why is this spam passing my SA (counterfeit goods)

2008-04-11 Thread Rick Macdougall
Josie Walls wrote: Hello, Would this group agree that requiring 5 hits in order to classify an email as spam is too conservative a number? I suspect ISPs have their filter settings at 3 or less. Any insight would be appreciated. I'm an ISP and we use 5 to mark and 10 to reject at smtp time

Re: multiple SA machines running against same Bayes-DB

2008-04-28 Thread Rick Macdougall
Koopmann, Jan-Peter wrote: Hi, is there a simple way of using the same Bayes-DB (mysql based) for multiple Spamassassin installations concurrently? Can I just point all machines to the same DB or will this lead to corruption? I've been doing it like that for over 2 years without a

[OT} Spam in qmail queue

2008-05-23 Thread Rick Macdougall
Somebody will send SPAM to [EMAIL PROTECTED] mailto:[EMAIL PROTECTED], and: - Spamassassin marks it as SPAM (which is correct) - But user doesn’t exist on somedomain1.com (it happen) - So qmail is storage this mail in queue as long as it can. My question is, what is the best practice and how

Possible denial of service bug ?

2008-05-28 Thread Rick Macdougall
Hi, I've got have a message that seems to tie up spamd forever. I'm not sure if it's my setup or spamd itself. I run a very generic stable release setup with bayes in mysql, although the hang up does not appear to be bayes. Would one of the developers like to contact me off list to get a

Re: spamd on a remote server - user_prefs

2008-06-02 Thread Rick Macdougall
Jonathan Nichols wrote: Hi. I'm testing a setup with DirectAdmin boxes and a dedicated spamd box, but so far I've found that spam_required is a global setting and you can't seem to send user_prefs across since they live on the spamc server. Is there a workaround for this at all? Can SA be

Re: Gmail spam

2006-06-09 Thread Rick Macdougall
Jason Staudenmayer wrote: Is anyone else getting spam from gmail? The ones I'm getting are very lengthy but doesn't look like bayes poison. headers Microsoft Mail Internet Headers Version 2.0 Received: from mail2.adventureaquarium.com ([10.0.0.205]) by MAIL-I.adventureaquarium.com with

Re: spamassassin on a mail relay

2006-06-19 Thread Rick Macdougall
Michael Grant wrote: Do any of you out there run spamassassin on a mail relay or pop/imap server to add the X-Spam headers to all mail that passes through your gateway? If you do, how do you let individual users (who don't have accounts on your relay) tweak their user_prefs file to whitelist

Re: Can SA be used to implement greylisting?

2006-06-19 Thread Rick Macdougall
JamesDR wrote: Logan Shaw wrote: On Mon, 19 Jun 2006, David B Funk wrote: On Mon, 19 Jun 2006, Justin Mason wrote: [snip] 1) Message comes in, check against AWL, if sender/ip pair do not exist, send the tempfail, if sender/ip pair do exist: 2) Check the average score against some

Re: Can SA be used to implement greylisting?

2006-06-20 Thread Rick Macdougall
jdow wrote: From: Jonas Eckerman [EMAIL PROTECTED] Logan Shaw wrote: Basically, greylisting has an achilles heel: legit messages from unknown senders are delayed a long time. This is fine for Only if you use a long delay. In my experience a grey period of 3 minutes is enough to stop most

Re: sa-learn with another mail server

2006-06-23 Thread Rick Macdougall
kazabe wrote: Hi Im using SA with a postfix mail server. But i need use this server, to protect another server (puntually a MS EXchange). So the postfix receive the messages, process it and pass the filtered messages to the MS Ech. Normally my users use imap to read the messages, using a

Re: Training Bayes properly

2006-06-29 Thread Rick Macdougall
Nigel Frankcom wrote: On Fri, 30 Jun 2006 09:45:07 +1000, Leigh Sharpe [EMAIL PROTECTED] wrote: So it looks like I have to reset my Bayes and re-train it. I want to do it properly this time. I will be making sure I personally review every message that our users put into the spam folder first,

Re: Training Bayes properly

2006-06-29 Thread Rick Macdougall
jdow wrote: From: Rick Macdougall [EMAIL PROTECTED] K! I bet you are running system wide Bayes for a very non-homogeneous collection of people. I've appended my figures (not the best I have seen but very good) below yours. Your BAYES_00 is better than mine only if you do not consider

Re: Spam success stats

2006-07-05 Thread Rick Macdougall
Joe Zitnik wrote: Does anyone have a source for statistics on spam victims, ie. the number of people who actually click on the Remove Me line, or who update their banking information, or who actually buy those pencil enlargement pills? Not as such but there was one client who hadn't payed

Strange problem

2006-07-08 Thread Rick Macdougall
Hi, I'm having a strange problem on one of my spamd servers since upgrading to 3.1.3. After awhile under heavy load, children are not exiting, ie the log show BBBIII, and eventually it's all B. I've started hupping the server every night but I do not have the same problem on

Re: Strange problem

2006-07-09 Thread Rick Macdougall
jdow wrote: From: Rick Macdougall [EMAIL PROTECTED] Hi, I'm having a strange problem on one of my spamd servers since upgrading to 3.1.3. After awhile under heavy load, children are not exiting, ie the log show BBBIII, and eventually it's all B. I've started hupping

Re: Strange problem

2006-07-10 Thread Rick Macdougall
Sanford Whiteman wrote: Both servers have exactly the same config except for the auto-learn and bayes/user prefs are stored in mysql on the FreeBSD server. Thanks to all who replied. I found the problem and it's related to ixhash, the timeout doesn't work correctly / work at all. I see

Re: Strange problem

2006-07-10 Thread Rick Macdougall
at how fast DNS is for you Dirk Dallas Engelken schrieb: -Original Message- From: Rick Macdougall [mailto:[EMAIL PROTECTED] Sent: Monday, July 10, 2006 11:59 To: [EMAIL PROTECTED] Cc: users@spamassassin.apache.org Subject: Re: Strange problem Sanford Whiteman wrote: Both servers

Re: Strange problem

2006-07-10 Thread Rick Macdougall
Dallas L. Engelken wrote: -Original Message- Both servers have exactly the same config except for the auto-learn and bayes/user prefs are stored in mysql on the FreeBSD server. Thanks to all who replied. I found the problem and it's related to ixhash, the

Re: Strange problem

2006-07-10 Thread Rick Macdougall
Dallas L. Engelken wrote: -Original Message- well, the pyzor/razor plugins now (svn) use the Mail::SpamAssassin::Timeout code, instead of M::SA::Util-trap_sigalrm_fully i'm not sure if that would help or not, but you'd have to be running something newer than 3.1.3. anyways, check by

Re: Strange problem

2006-07-10 Thread Rick Macdougall
Daryl C. W. O'Shea wrote: Rick Macdougall wrote: Dallas L. Engelken wrote: -Original Message- well, the pyzor/razor plugins now (svn) use the Mail::SpamAssassin::Timeout code, instead of M::SA::Util-trap_sigalrm_fully i'm not sure if that would help or not, but you'd have

Re: Strange problem

2006-07-10 Thread Rick Macdougall
Daryl C. W. O'Shea wrote: Rick Macdougall wrote: Dallas L. Engelken wrote: -Original Message- well, the pyzor/razor plugins now (svn) use the Mail::SpamAssassin::Timeout code, instead of M::SA::Util-trap_sigalrm_fully i'm not sure if that would help or not, but you'd have

Re: Strange problem

2006-07-10 Thread Rick Macdougall
Dallas L. Engelken wrote: || 5; + my $timer = Mail::SpamAssassin::Timeout-new({ secs = $timeout }); + my $err = $time-run_and_catch(sub { + $answer = I assume you mean $timer- (vs $time-) there? D This diff seems to work. I'm going to

Re: Strange problem

2006-07-10 Thread Rick Macdougall
Daryl C. W. O'Shea wrote: Rick Macdougall wrote: Further, I don't know why it even uses it's own DNS resolver. It would make much more sense to use SA's and do all this in the background. I'm just assuming that the original author wasn't aware of it's existence or was too lazy

Re: Strange problem

2006-07-11 Thread Rick Macdougall
Rick Macdougall wrote: Daryl C. W. O'Shea wrote: Rick Macdougall wrote: Further, I don't know why it even uses it's own DNS resolver. It would make much more sense to use SA's and do all this in the background. I'm just assuming that the original author wasn't aware of it's existence

Re: URIBL and SURBL no lnger hitting

2006-08-08 Thread Rick Macdougall
Jeff Chan wrote: On Monday, August 7, 2006, 1:56:41 PM, DAve DAve wrote: In frustration I edited /etc/resolv.conf and removed 127.0.0.1, URI lookups are completing and MailScanner is blasting through the queues on both machines exceedingly fast now. No idea what could have possibly changed,

Re: URIBL and SURBL no lnger hitting

2006-08-08 Thread Rick Macdougall
Jeff Chan wrote: On Tuesday, August 8, 2006, 7:53:45 AM, Rick Macdougall wrote: Unlikely to be a dnscache issue. I run over 10 SA servers, all with local djb dnscaches. Aha, but do you use Linux or FreeBSD? I can't remember the details but I remember a FreeBSD/SA issue recently. Hi

Re: local PHP mails messed up

2006-08-19 Thread Rick Macdougall
Matt Adair wrote: We recently upgraded our spamassassin from 2.64 to 3.1.4, upgrading to Perl 5.8.4 in the process. We also run PHP 4.4.1. Everything seems to be running OK, except for email that is sent through PHP's mail command to local user accounts. In this situation, the email in our

Re: USER_IN_WHITELIST problem

2006-08-22 Thread Rick Macdougall
Nick Rout wrote: Hi, I am new to this list and certainly not a SA expert, however I have moderate experience in general linux issues and mailer issues. I am getting a series of messages allowed through on the basis of USER_IN_WHITELIST. I have searched the mailing list archive and pored over my

Re: USER_IN_WHITELIST problem

2006-08-22 Thread Rick Macdougall
Nick Rout wrote: On Tue, 22 Aug 2006 19:58:59 -0400 Thanks, quick reply! (Thanks too Daryl, also quick) So I take it USER_IN_WHITELIST also checks Return-Path? I wonder where Return-Path is being set? Is it likely to be set by the spammer? Or is my system adding it in somewhere (probably in

Re: Getting Spamassasin to work.

2006-08-28 Thread Rick Macdougall
DuBois, Joseph wrote: Ok. Last week was hoping to get Spamassassin to work, but still no luck. My hosting provider is pretty much useless saying everything is running fine. I have removed all custom rules except for the following two, which lowers the score down to a one(1) and should rewrite

Re: Spammed by Non-delivery-report? (someone is using my email to spam)

2006-08-31 Thread Rick Macdougall
John D. Hardin wrote: On Fri, 1 Sep 2006, Christian Purnomo wrote: I am having so much trouble at present that some people are using my email address to send their spam messages, in return I get hundreds and hundres of non-delivery email + other misc reply such as out of office. The first

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-08-31 Thread Rick Macdougall
Will Duff wrote: Hi everyone, I've been working with SpamAssassin for the course of Google's Summer of Code to create 'SpamAssassin Coach' - an add-in available for Mozilla Thunderbird and Microsoft Outlook. The purpose of the add-in is to allow users to report spam and ham to SpamAssassin

Re: SpamAssassin Coach - Outlook/Thunderbird Plugin

2006-09-01 Thread Rick Macdougall
Rob McEwen wrote: RE: SpamAssassin Coach - Outlook/Thunderbird Plugin Any chance that an Outlook Express version might be forthcoming? I know that many of the Unix admins on this list hate any thing Microsoft produces and probably especially Outlook Express... but the fact is that a very

Re: Antidrug.cf, call to cease RDJ updates.

2006-09-05 Thread Rick Macdougall
Matt Kettler wrote: Chris Thielen wrote: Matt, Does antidrug still get updates? If you are going to continue publishing updates to antidrug I will change the URL in RDJ to wherever eventually move it. If, however, there are no additional updates foreseen it should probably be removed from

Re: Can I hard bounce with qmail?

2006-09-18 Thread Rick Macdougall
Robert Nicholson wrote: So, I'm looking at mail being sent to my domain and it's overwhelmingly mail people who don't exist at my domain. I'd rather this was trapped before my qmail script executed. every one of these mails is forking the perl interpreter and executing my perl script

Re: duplicate emails

2006-09-26 Thread Rick Macdougall
SM wrote: At 08:53 26-09-2006, Steve Ingraham wrote: I need help with a problem. Our users are seeing some multiple duplicate emails coming from the same sender. This is not occurring with every email so there does not seem to be any pattern to which incoming emails will be duplicated and

Re: duplicate emails

2006-09-28 Thread Rick Macdougall
Steve Ingraham wrote: mail.okcca.net. 21592 IN A 204.87.111.225 ;; Query time: 2 msec ;; SERVER: 216.55.144.5#53(216.55.144.5) ;; WHEN: Wed Sep 27 21:16:14 2006 ;; MSG SIZE rcvd: 48 [EMAIL PROTECTED] ~]# telnet 204.87.111.225 Trying 204.87.111.225... telnet: connect

Increase in scan time from 3.3 to 3.3.1

2010-03-24 Thread Rick Macdougall
Hi, Any one have any idea what might cause an increase of scan times when going from 3.3 to 3.3.1. I've upgraded one server and the average scan time is now 4.3 seconds. The 3 other servers still running 3.3 average 1.38 All running Centos on exactly the same hardware. Thanks in advance.

Re: Increase in scan time from 3.3 to 3.3.1

2010-03-24 Thread Rick Macdougall
On 24/03/2010 2:40 PM, Michael Scheidell wrote: On 3/24/10 2:23 PM, Rick Macdougall wrote: Hi, Any one have any idea what might cause an increase of scan times when going from 3.3 to 3.3.1. I've upgraded one server and the average scan time is now 4.3 seconds. The 3 other servers still

Re: Increase in scan time from 3.3 to 3.3.1

2010-03-24 Thread Rick Macdougall
On 24/03/2010 2:40 PM, Michael Scheidell wrote: On 3/24/10 2:23 PM, Rick Macdougall wrote: Hi, Any one have any idea what might cause an increase of scan times when going from 3.3 to 3.3.1. I've upgraded one server and the average scan time is now 4.3 seconds. The 3 other servers still

Re: Increase in scan time from 3.3 to 3.3.1

2010-03-24 Thread Rick Macdougall
On 24/03/2010 4:09 PM, Kris Deugau wrote: Michael Scheidell wrote: several more RBL's, check your dns performance? Looks like the new PSBL DNSBL is a bit slow. I wonder if the new load from SA 3.3 is the cause? g A quick walk through the SA log shows it isn't helping much here, so I've

Re: Question URIBL

2010-04-08 Thread Rick Macdougall
On 08/04/2010 2:00 PM, Frederic De Mees wrote: Hello All, It seems that the rule URIBL_BLACK is never matched in my installation, even when it should. My server is a debian Lenny, postfix, spampd (policy daemon), spamassassin 3.2.5-2+lenny2 When I run 'spamassassin -D some_spam_mail', the

Re: Worthwhile to scan outgoing?

2010-06-21 Thread Rick Macdougall
On 21/06/2010 11:39 AM, Adam Moffett wrote: My philosophy in the past has always been not to scan outgoing emails because my users are not likely to be spamming. However, a couple of issues recently with spambots and SMTP AUTH with weak passwords has me reconsidering that stance. Is anyone

Re: spamassassin or simscan ???

2010-07-27 Thread Rick Macdougall
On 27/07/2010 1:03 PM, Suhag P Desai wrote: Hi all, I can scan all the attachment as per rule define in simcontrol and tcp.smtp. But I am not able to detect the spam mail as define in rule set of /etc/mail/spamassassin/ ..please help [r...@spd tcprules.d]# cat tcp.smtp

Re: spamassassin or simscan ???

2010-07-27 Thread Rick Macdougall
On 27/07/2010 1:21 PM, Suhag P Desai wrote: Thanks Rick, Now my tcp.smtp file looks like below [r...@spd tcprules.d]# cat tcp.smtp 127.:allow,RELAYCLIENT=,QMAILQUEUE=/var/qmail/bin/simscan,DKSIGN=/var/q mail/control/domainkeys/%/private

Re: spamassassin or simscan ???

2010-07-27 Thread Rick Macdougall
On 27/07/2010 1:41 PM, Suhag P Desai wrote: Logs are as per below... @40004c4f187213960bb4 tcpserver: pid 4844 from 192.168.10.70 @40004c4f1872139a2294 tcpserver: ok 4844 spd:192.168.30.195:25 :192.168.10.70::60052 @40004c4f187216259034 CHKUSER accepted sender: from

Re: [OT] If you can read french please...

2011-04-11 Thread Rick Macdougall
On 11/04/2011 8:58 AM, Michelle Konzack wrote: If you can read french please look in this message http://devel.debian.tamay-dogan.net/tmp/joke_spam.001.txt read the Subject: and then the SA results. :-D How big must this idiots be? :-/ Note: They have bombed my

Re: Yahoo sent 5.5x as much spam as any other legit provider in April

2011-05-11 Thread Rick Macdougall
On 11/05/2011 4:01 PM, dar...@chaosreigns.com wrote: http://www.chaosreigns.com/dnswl/dnswlabusehistory.svg Percentage of total spam from legitimate email providers in April as reported as abuse to dnswl.org: 35.5% yahoo.com 6.4% google.com 2.9% tp.pl 2.3% tin.it 1.8% messagelabs.com

Re: Specify the user homedir in a non-standard setup (ISP)

2012-02-27 Thread Rick Macdougall
On 27/02/2012 11:18 AM, Sandro Tosi wrote: On 02/27/2012 05:06 PM, Bowie Bailey wrote: On 2/27/2012 9:12 AM, Sandro Tosi wrote: Hello, our mail setup is kinda different than usual configuration: we have a lot of mailboxes all owned by a single userid. The directories tree is composed using a

Re: MariaDB instead of MySQL

2013-05-16 Thread Rick Macdougall
Hi, Running a 4 server cluster of SA servers with MySQL running on one. 2 running auto learn and the other two just doing queries. Looks like I average about 6300 queries a minute. No noticeable problems with it. Recently looked at Maria but we are in the middle of a move here, would love

Re: MariaDB instead of MySQL

2013-05-16 Thread Rick Macdougall
Hi, One common bayes DB running MySql on one server. Spa001 running SA and MySQL plus auto learn Spa010 running SA no auto learn Spa011 running SA no auto learn Spa013 running SA with auto learn All Spas looking at the MySQL server on Spa001. Global bayes database btw, not per user as we are

Re: High CPU running SA in a VMware VM

2006-10-27 Thread Rick Macdougall
Sammy Anderson wrote: And there is one of these for each user, this is just for one user. Sounds like we may have to abandon Bayes or possibly use mysql. Not sure we are ready to invest in setting that all up... Bayes in MySQL is a snap to setup and it really runs rings around the dbm

Re: Relay Checker Plugin (code review please?)

2006-10-30 Thread Rick Macdougall
John Rudd wrote: I've written a plugin for Spam Assassin that does the relay checks I used to do in MimeDefang. The purpose of these checks is to try to identify those messages that are likely to be coming directly (with no intermediary mail server) from a zombie-bot, and are thus likely to

Re: Relay Checker Plugin (code review please?)

2006-10-30 Thread Rick Macdougall
John Rudd wrote: I've written a plugin for Spam Assassin that does the relay checks I used to do in MimeDefang. The purpose of these checks is to try to identify those messages that are likely to be coming directly (with no intermediary mail server) from a zombie-bot, and are thus likely to

Re: Relay Checker Plugin (code review please?)

2006-10-31 Thread Rick Macdougall
John Rudd wrote: Rick Macdougall wrote: John Rudd wrote: Hi, Right off the bat I've disabled it. It, of course, hits on all mail my local users send. That's not really acceptable in an ISP situation so I've turned it off until tomorrow when I have the time to look at the code and see

Re: Using sa-learn on separate systems?

2006-11-08 Thread Rick Macdougall
Anders Norrbring wrote: I have a slight problem.. I thought I'd finally start using sa-learn to train the Bayes, the catch is that I have Cyrus and its mailboxes on another server.. I transport the mail via LMTP to Cyrus. So, is there a smooth way to use sa-learn on the remote IMAP folders,

Re: different threshold for one address

2006-11-15 Thread Rick Macdougall
Jean-Paul Natola wrote: Hi everyone, I'm not sure if this question should go to this list , my apologies if that is the case. My setup is as follows; BSD box gets all incoming SMTP traffic, then forwards to exchange server- no mailbox per say holds any mail- My goal is to is have one email

Re: Greylisting

2006-11-21 Thread Rick Macdougall
John Andersen wrote: On Monday 20 November 2006 15:08, Rick Macdougall wrote: It's possible that they could send it all twice but I've never seen it. Remember that some unbelievable number of infected Windows clients are the main source of spam and it would just be too much trouble

Re: postgres database

2006-11-24 Thread Rick Macdougall
Tom Allison wrote: I was reading through the man pages about the use of a database for the storage of bayesian tokens. Is this a list that is global to the mail server, or something that is distinct for each user of that mail server? In other words -- will I have the exact same bayesian

Re: Not sure what to do about this...

2006-11-26 Thread Rick Macdougall
Craig Zeigler wrote: it seems over the past couple of weeks, I'm getting 50-80 of these per day into my inbox. From what I can tell, it isn't hitting the bayes filters when other messages do. Anyone have any idea? I have sorted these and trained the bayes filters, but if it isn't hitting

Re: Percentage of email that is spam after filtering?

2006-11-27 Thread Rick Macdougall
Ed Kasky wrote: At 02:00 PM Monday, 11/27/2006, Bill Randle wrote -= Like other posters, I don't have real stats on the amount of spam that makes it past the filters, other than my own mailbox. I typically get from 2-3 spam messages per day, on rare occasions, maybe 6-10. We use blacklisting,

Re: RelayChecker (now Botnet ) 0.4

2006-11-28 Thread Rick Macdougall
Jonas Eckerman wrote: Mark Martinec wrote: Indeed. Also coupling it with p0f (passive operating system fingerprinting) Good idea. Should have thought of that. :-) About p0f see: Those who like SQL might like the stuff at http://whatever.frukt.org/p0fstats.text.shtml wich includes my

Re: [Slightly OT and long] Architectural question...

2006-12-04 Thread Rick Macdougall
Rubin Bennett wrote: SpamAssassin 3.1.5, FuzzyOCR 3.4.2 Rules_du_jour: TRUSTED_RULESETS= TRIPWIRE ANTIDRUG SARE_EVILNUMBERS0 SARE_EVILNUMBERS1 SARE_EVILNUMBERS2 RANDOMVAL BOGUSVIRUS SARE_ADULT SARE_FRAUD SARE_BML SARE_SPOOF SARE_BAYES_POISON_NXM SARE_OEM SARE_RANDOM SARE_HEADER SARE_HEADER_ENG

Re: SA not firing on every email

2006-12-06 Thread Rick Macdougall
Craig wrote: Yes I have asked this question previously, but with not as much detail. MY ENVIRONMENT SA 3.1.7 running on Windows 2000 Using Bayes In the past 2 days my email server has received 14,973 email messages, Spamassassin has scanned 10,951 of those messages, and my users have

  1   2   3   4   >