Re: URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

2017-02-14 Thread Emin Akbulut
uot;reply" button and so you seem to need forward messages which breaks > threading in any sane mail-client and list-archive? > > Am 14.02.2017 um 15:43 schrieb Emin Akbulut: > >> >> -- Forwarded message -- >> From: *David Jones* <djo...@en

Fwd: Fwd: URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

2017-02-14 Thread Emin Akbulut
> -- Forwarded message -- > From: Bowie Bailey > Date: Tue, Feb 14, 2017 at 5:44 PM > Subject: Re: Fwd: URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL > was blocked. > To: users@spamassassin.apache.org > > That page is suggesting that you find the

Fwd: URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

2017-02-14 Thread Emin Akbulut
> -- Forwarded message -- > From: David Jones > Date: Tue, Feb 14, 2017 at 5:33 PM > Subject: Re: URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was > blocked. > To: "users@spamassassin.apache.org" > > > Note that if your

Fwd: URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

2017-02-14 Thread Emin Akbulut
I'm confused a bit. Should I use forwarders or not? I was trying to follow that guide: - As your issue with UTIBL_BLOCKED is a well-known one > > I would like to point you the FAQ section of our homepage: > > > >

URIBL_BLOCKED ADMINISTRATOR NOTICE: The query to URIBL was blocked.

2017-02-14 Thread Emin Akbulut
Hi URIBL checks are blocked. I think bec. of so many queries. I'm advised to set up conditional forwarder on Windows DNS Server. I've added uribl.com as DNS zone and 54.149.125.143 as IP. SA still tags the messages. How can I set the DNS conditional forwarders properly?

Re: Low spam score: -1.9

2017-01-17 Thread Emin Akbulut
sq/_high-and-then-low.zip?dl=0 I think I'm gonna install a fresh new SA. On Wed, Jan 18, 2017 at 9:43 AM, Emin Akbulut <eminakbu...@gmail.com> wrote: > Hi all > > I've disabled autolearn for a week and trained SA with tons of spams. > I still receive same spam messages wit

Low spam score: -1.9

2017-01-09 Thread Emin Akbulut
Hi all, Recently we receive spam messages and SA cannot block them. I've also checked the raw message at http://spamcheck.postmarkapp.com/ and score was very low either. I've trained the SA and it worked for a while but now it's useless. How can I prevent those spams? They look like poems *

Re: SA cannot block messages with attached zip

2016-05-24 Thread Emin Akbulut
I've switched from AVG File Server to ClamWin + Sanesecurity, Now It seems ok, I have to examine for false negatives, maybe I need to exclude some signatures. Here are the results for 9 hours of Sanesecurity: Passed msg: 912 Viruses detected: 446 Spam msg: 5523 AVG File Server was really really

Re: SA cannot block messages with attached zip

2016-05-23 Thread Emin Akbulut
AVG or ClamAV or any other antivirus couldn't delete all these attached viruses; VirusTotal says. My mail server checks blacklists & SURBL servers. Anyway we might receive mails from unlisted IPs like zombie PCs. In the message with Zip attachment includes javascipt files contains no url in the

SA cannot block messages with attached zip

2016-05-20 Thread Emin Akbulut
I tried to train SA with tons of spam messages which contains zip file (includes .js) The max spam score was lesser than 5 so I did set 4 to delete messsages. Then same kind of spam messages appear with the score of lesser than 2. In short; training the SA seems not helpful. What do you suggest

Re: scantime=249.2; scantime=175.0; scantime=190.9; scantime=68.9

2010-09-04 Thread Emin Akbulut
If cpu usage is normal then it's related to DNS or online things, it maybe wait for communication... I think the -L parameter disables online checks. Just try without online checks. Also use -D for debug. On Sat, Sep 4, 2010 at 7:25 PM, Michael Scheidell michael.scheid...@secnap.com wrote:

Re: scantime=249.2; scantime=175.0; scantime=190.9; scantime=68.9

2010-09-04 Thread Emin Akbulut
Plus; parallel scans give a clue too. Next time compare one session vs. 2 or more sessions . If both times are nearly equal then it's not related to cpu usage or any other machine related bottleneck, coz probably SA waits for something -then timeout occurs? - On Sun, Sep 5, 2010 at 3:55 AM, John

Re: Delivery Status Notification (Failure)

2010-09-03 Thread Emin Akbulut
of -UNSENT- false positives. False negatives are better than false positives huh? Now SA system looks working. On Fri, Sep 3, 2010 at 1:09 AM, John Hardin jhar...@impsec.org wrote: On Fri, 3 Sep 2010, Emin Akbulut wrote: Relay is the system that submitted the message. For the purposes of the HELO

Re: Delivery Status Notification (Failure)

2010-09-02 Thread Emin Akbulut
2010/9/2 Karsten Bräckelmann guent...@rudersport.de Kind of repeating myself here, but... HOW does SA running on the third machine get the message? The headers you showed us aren't necessarily the ones SA ultimately gets to see. Oh god, it's not mystery, my mail server got two IP, an

More info about the rules

2010-09-01 Thread Emin Akbulut
Hi, I sent a test message from my Outlook, below are the results. How can I fix these two checks -probably at my mail server- FSL_HELO_NON_FQDN_1 HELO_NO_DOMAIN Thanks. pts rule name description -- -- 1.8

Re: More info about the rules

2010-09-01 Thread Emin Akbulut
Yes it's my very own MailEnable mail server, SA integrated. I sent the message from home. 2010/9/1 Karsten Bräckelmann guent...@rudersport.de If that was an SMTP server, fix that. It should, however, not be part of *your* infrastructure, since it's external. If it is under your control, you

Re: More info about the rules

2010-09-01 Thread Emin Akbulut
it? 2010/9/1 Karsten Bräckelmann guent...@rudersport.de On Wed, 2010-09-01 at 17:13 +0300, Emin Akbulut wrote: Yes it's my very own MailEnable mail server, SA integrated. I sent the message from home. Hrm, I'm not sure if that answers the question. Maybe I'm just still too low on caffeine. So

Re: Delivery Status Notification (Failure)

2010-09-01 Thread Emin Akbulut
Good. My test mail headers rejected here: : P Delivery to the following recipient failed permanently: users@spamassassin.apache.org Technical details of permanent failure: Google tried to deliver your message, but it was rejected by the recipient domain. We recommend contacting the

Re: SPF soft fail problem

2010-08-23 Thread Emin Akbulut
To everybody; one of the best online diagnostic tool http://www.intodns.com/nawilliams.com http://www.intodns.com/nawilliams.com On Mon, Aug 23, 2010 at 11:55 PM, vergottini.n...@tatravelcenters.comwrote: Matus UHLAR - fantomas uh...@fantomas.sk wrote on 08/23/2010 04:50:39 PM: Looking

Re: Sought False Positives

2010-08-20 Thread Emin Akbulut
Training SA instead of debugging is much easier sometime, I did give up with errors and do my own workarounds; I made _spam and _ham dirs in SA dir and fill them with spam or ham messages when I find a few, then fire the script: @REM Train Spamassassin c: cd \NET\SpamAssassinWin32-EX @REM Learn

Re: Installing spamd as a Windows service

2010-08-18 Thread Emin Akbulut
Simply schedule a batch file in 5 min. intervals -Windows Server 2008 minimum interval is 5 minute- It's not high cpu or memory consuming process. You also need freeware *cryping* utility. I use MailEnable as MTA, you may ignore it. Script produces 2 files: check.log error.log I also test SA

Re: Installing spamd as a Windows service

2010-08-17 Thread Emin Akbulut
I use srvman, it's easy to use, it has a gui, and it's free. I just run C:\NET\SpamAssassinWin32-EX\spamd-service.bat as Win32 service, as LocalSystem account. spamd-service.bat is below: taskkill /F /IM:spamd.exe C: CD C:\NET\SpamAssassinWin32-EX @rem spamd.exe --max-spare=6 spamd.exe -D

Re: Installing spamd as a Windows service

2010-08-17 Thread Emin Akbulut
Wow, the messages look like rocket science : ) Jerry, I'm happy that it helped. I think JAM version of spamd (3.3.1) cannot work if you don't change the working directory, so I invented that .bat file. I mean if you set the line spamd.exe -D --syslog=spamd.log --max-spare=6 in srvman, the

Re: sa-compile has no effect (under Windows.......)

2010-07-30 Thread Emin Akbulut
Simply disable regular ruleset and test again. If it takes 6.93-5.78 seconds or something similar, you are right. On Fri, Jul 30, 2010 at 12:20 PM, Daniel Lemke le...@jam-software.comwrote: Another Windows related question I (think I) successfully compiled my ruleset into native code. I

Re: First run score: 25.7 Second: 2.6

2010-07-28 Thread Emin Akbulut
and at DnsResolver.pm line 410 Those missed checks cost me 12 points: Tue Jul 20 16:11:43 2010 [-7196] dbg: rules: running head tests; score so far=0far=12.019 What can I do? On Tue, Jul 20, 2010 at 4:56 PM, Emin Akbulut eminakbu...@gmail.com wrote: OK I've found the wrong score's log however I'm

Re: Writing an MTA

2010-07-25 Thread Emin Akbulut
I know one; hMailServer has a wrapper like thing which one integrates itself with Spamassassin, written in C# and source is public available. On Sun, Jul 25, 2010 at 7:39 PM, Christopher Dobbs crdo...@lybredyne.netwrote: I am writing an MTA that uses mysql as a backend for storage. I want to

Re: how to make spamassassin work with ipfw?

2010-07-20 Thread Emin Akbulut
Spamassassin is just a tool to check a message's 'spam score'. Then you decide the message is spam or not, ie. if the score is greater than value x the message is considered as spam. spamassassin.exe is standalone version of SA. Usage: spamassassin input.eml output.eml Now you got the

Re: First run score: 25.7 Second: 2.6

2010-07-20 Thread Emin Akbulut
tests=BAYES_50,HTML_IMAGE_ONLY_32, On Tue, Jul 20, 2010 at 2:44 PM, Matus UHLAR - fantomas uh...@fantomas.skwrote: On 14.07.10 15:42, Emin Akbulut wrote: I run SA Win32 port 3.3.1 by JAM Software on Windows Server 2008 64 bit. Spamassassin.exe always calculates the same score, coz

Re: First run score: 25.7 Second: 2.6

2010-07-20 Thread Emin Akbulut
the online diff tool: * *http://www.quickdiff.com/index.php* * * *It looks like a few problems occured, * *before **running head tests; * *score so far=12.019 vs far=0* * * * * * * On Tue, Jul 20, 2010 at 3:48 PM, Martin Gregorie mar...@gregorie.orgwrote: On Tue, 2010-07-20 at 14:53 +0300, Emin

Re: [sa] Re: First run score: 25.7 Second: 2.6

2010-07-16 Thread Emin Akbulut
-responsive restarted. On Thu, Jul 15, 2010 at 7:20 PM, Charles Gregory cgreg...@hwcn.org wrote: On Thu, 15 Jul 2010, Emin Akbulut wrote: spamassassin.exe always calculates the same/correct score. Good... Goood. pamd second run reports only a few tests. Is it OK? I mean spamd runs all

Re: First run score: 25.7 Second: 2.6

2010-07-16 Thread Emin Akbulut
=HTML_IMAGE_ONLY_32, 16.07.2010, 17:35:00 OK X-Spam-Status: No, score=5.5 required=6.3 tests=HTML_IMAGE_ONLY_32, On Fri, Jul 16, 2010 at 5:11 PM, Charles Gregory cgreg...@hwcn.org wrote: On Fri, 16 Jul 2010, Emin Akbulut wrote: X-Spam-Status: No, score=2.6 required=6.3 tests

Re: First run score: 25.7 Second: 2.6

2010-07-16 Thread Emin Akbulut
I've stopped the mail server MTA during I was testing, so spamd has checked only one message at same time. It looks totaly random : ) Is the only difference between spamassassin.exe spamd.exe their very own User_Prefs config files? On Fri, Jul 16, 2010 at 5:54 PM, Martin Gregorie

Re: First run score: 25.7 Second: 2.6

2010-07-16 Thread Emin Akbulut
here and live with same addiction to both solve own other's problems. Thank you people!!! On Fri, Jul 16, 2010 at 7:34 PM, Martin Gregorie mar...@gregorie.orgwrote: On Fri, 2010-07-16 at 18:07 +0300, Emin Akbulut wrote: I've stopped the mail server MTA during I was testing, so spamd has

Re: First run score: 25.7 Second: 2.6

2010-07-15 Thread Emin Akbulut
@echo Everything seems OK! @echo %Date%, %Time%, OK recover.log @GoTo EXIT :EXIT @rem pause nul On Thu, Jul 15, 2010 at 2:58 AM, Matt Kettler mkettler...@verizon.netwrote: On 7/14/2010 11:27 AM, Emin Akbulut wrote: I noticed randomly while I was testing SA. All I did is below

Re: First run score: 25.7 Second: 2.6

2010-07-15 Thread Emin Akbulut
I don't know the default --max-spare value if any and what do you suggest, Daniel? Our MTA thread limit is 6. On Thu, Jul 15, 2010 at 9:59 AM, Daniel Lemke le...@jam-software.comwrote: Emin Akbulut wrote: I also have spamd crash problem, it crashes very often: Application: spamd.exe

Re: Stability of spamassassin command-line tool

2010-07-15 Thread Emin Akbulut
memory, especially spamassassin.exe (50 MB avg./ takes 5 seconds / per session) On Thu, Jul 15, 2010 at 3:41 PM, Emin Akbulut eminakbu...@gmail.com wrote: Testing hundreds of different email messages at the same time is a bit excessive; ram usage, harddisk I/O bottleneck, etc... In my case

Re: Stability of spamassassin command-line tool

2010-07-15 Thread Emin Akbulut
Ops sorry, I use Gmail, it stacks messages well but when I hit the Reply the message will send only the last person on thread. I have to modify To: field : ) On Thu, Jul 15, 2010 at 3:51 PM, Gnanam gna...@zoniac.com wrote: I'm posting a reply which I received from Emin Akbulut here:

Re: First run score: 25.7 Second: 2.6

2010-07-15 Thread Emin Akbulut
. On Thu, Jul 15, 2010 at 4:08 PM, Charles Gregory cgreg...@hwcn.org wrote: On Wed, 14 Jul 2010, Matt Kettler wrote: On 7/14/2010 11:27 AM, Emin Akbulut wrote: I noticed randomly while I was testing SA. All I did is below: WinSpamC realspam.txt result1.txt NET STOP Spamassassin NET

First run score: 25.7 Second: 2.6

2010-07-14 Thread Emin Akbulut
I run SA Win32 port 3.3.1 by JAM Software on Windows Server 2008 64 bit. Spamassassin.exe always calculates the same score, coz User_Prefs file is under my docs (C:\Users\ea\.spamassassin) However spamd.exe -which runs as service- calculates the right score at first time then score goes very low

Re: First run score: 25.7 Second: 2.6

2010-07-14 Thread Emin Akbulut
at 5:08 PM, Daniel Lemke le...@jam-software.comwrote: Emin Akbulut wrote: However spamd.exe -which runs as service- calculates the right score at first time then score goes very low at subsequent checks. spamd runs under system account and it's User_Prefs file is located under C