Re: unblacklist_from_rcvd

2010-09-08 Thread William Taylor
On Sep 7, 2010, at 6:36 PM, Matt Kettler wrote: On 9/7/2010 7:11 PM, William Taylor wrote: I want to be able to only allow a certain email to be sent from one of several hosts. Currently im doing something like: blacklist_from sa...@foo.com whitelist_from_rcvd sa...@foo.com

unblacklist_from_rcvd

2010-09-07 Thread William Taylor
I want to be able to only allow a certain email to be sent from one of several hosts. Currently im doing something like: blacklist_from sa...@foo.com whitelist_from_rcvd sa...@foo.com mail.foo.com whitelist_from_rcvd sa...@foo.com sales.foo.com This doesn't really do what I want because the

Web Proxy RBL ?

2009-12-29 Thread William Taylor
Looking for an RBL or something to determine if a given IP is coming from a web proxy. Trying to cut down on spam coming from exploited users sites. Would like to do some logging and see if this helps. Thanks, William

is Pyzor worth it?

2008-10-13 Thread William Taylor
Is Pyzor worth running these days? Is it still effective? Can anyone using it comment on it? Thanks, William

Re: is Pyzor worth it?

2008-10-13 Thread William Taylor
On Mon, Oct 13, 2008 at 08:44:08AM -0700, Bill Landry wrote: Here are some stats for this past weekend comparing Pyzor to other hash tests: 36 CTYME_IXHASH 38 HOSTEUROPE_IXHASH 92 GENERIC_IXHASH 129 NIXSPAM_IXHASH 218 RAZOR2_CF_RANGE_E4_51_100 256 PYZOR_CHECK

Re: whitelist_from_rcvd propigating between users

2008-10-09 Thread William Taylor
On Mon, Oct 06, 2008 at 11:30:11AM -0700, William Taylor wrote: It would seem the whitelist_from_rcvd is incorrectly propigating to the wrong users in the same thread. For example usera has whitelist_from_rcvd *.sonic.net sonic.net setup. If userb gets sent mail that is processed

Re: whitelist_from_rcvd propigating between users

2008-10-09 Thread William Taylor
On Thu, Oct 09, 2008 at 05:53:30PM +0200, Karsten Bräckelmann wrote: To be a little more helpful and less snippy -- if you want more detailed answers, and check if it might be a different bug than the one mentioned, telling us about your SA version would be a smart first move... I wasn't

Re: whitelist_from_rcvd propigating between users

2008-10-09 Thread William Taylor
On Thu, Oct 09, 2008 at 06:16:30PM +0200, Karsten Bräckelmann wrote: William, please search bugzilla for duplicates first. If you're positive this issue hasn't been reported before, please feel free to file a new bug, adding as much details as possible. Thanks. I did search and could only

Re: whitelist_from_rcvd propigating between users

2008-10-09 Thread William Taylor
On Thu, Oct 09, 2008 at 06:31:03PM +0200, Karsten Bräckelmann wrote: However, given that other user settings actually do work, this might even be isolated to some particular code, rather than a widespread oops. I could be wrong but it seems to only be happening with the whitelist_from_rcvd

whitelist_from_rcvd propigating between users

2008-10-06 Thread William Taylor
It would seem the whitelist_from_rcvd is incorrectly propigating to the wrong users in the same thread. For example usera has whitelist_from_rcvd *.sonic.net sonic.net setup. If userb gets sent mail that is processed by that same thread it will pickup the whitelist_from_rcvd from usera Any

Re: dnsbl lookups for X-PHP-Script

2008-10-06 Thread William Taylor
On Mon, Oct 06, 2008 at 08:55:29PM +0300, Henrik K wrote: X-PHP-Script doesn't seem to be very widely patched - or PHP isn't abused that much, which is nice. I grepped 3 weeks worth of spam quarantine, 17335 messages. 46 contained it. 28 unique IPS, out of which 8 was on sbl-xbl and one or two

Re: ocr plugin

2008-05-02 Thread William Taylor
We are using the SVN version of FuzzyOCR. It seems to be working fine. -William On Fri, May 02, 2008 at 03:38:41PM +0200, polloxx wrote: Hi, Am I right to say that picture spam has dropped dramatically since the last months? Is it still reasonable to run an orc plugin? I see the latest

Re: ocr plugin

2008-05-02 Thread William Taylor
On Fri, May 02, 2008 at 06:06:05PM +0300, Henrik K wrote: On Fri, May 02, 2008 at 03:38:41PM +0200, polloxx wrote: Hi, Am I right to say that picture spam has dropped dramatically since the last months? Has there been any in a year? That's when I dropped using it. It's probably not

Tests Question

2008-04-25 Thread William Taylor
I recently started recieving complaints from some users about spam getting through. Upon looking at these messages they are scorring 0.0 from spamassassin. Not sure if something is jacked with my setup but running manually I see: [20309] dbg: check: tests= [20309] dbg: check:

Re: Errors from spamassassin -r

2008-04-24 Thread William Taylor
On Tue, Apr 22, 2008 at 06:17:54AM -0700, William Taylor wrote: Im still seeing this message is I have bayes disabled. Any ideas? [EMAIL PROTECTED] williamt]# formail -s spamassassin -r ./Missed-Spam 1 message(s) examined. Can't call method learn on an undefined value at /usr/lib/perl5

Errors from spamassassin -r

2008-04-22 Thread William Taylor
Im still seeing this message is I have bayes disabled. Any ideas? [EMAIL PROTECTED] williamt]# formail -s spamassassin -r ./Missed-Spam 1 message(s) examined. Can't call method learn on an undefined value at /usr/lib/perl5/site_perl/5.8.8/Mail/SpamAssassin/PerMsgLearner.pm line 109. 1

Dnsbl checks

2008-04-21 Thread William Taylor
it queries all the blacklists but I never see anything indicating that it matched them. Any thoughts on things I can check on to figure this out? DCC,Razor,Pyzor works fine. Thanks, William -- William Taylor - [EMAIL PROTECTED] Sonic.net System Administrator 2260 Apollo Way

Error using -r

2008-04-20 Thread William Taylor
Getting this error when running spamassassin -r ./MYSPAM I have bayes disabled so it shouldn't even be running this I think. If I enable bayes it doesn't do this. Plus I just the last version I was running didn't do this I think it was 3.1.9 what ever is in the default Centos tree. Running

Extend DNSEval.pm?

2008-04-18 Thread William Taylor
Is there anyway to extend this in DNSEval.pm locally without patching? Maybe with a plugin or something? my @originating = (); for my $header ('X-Originating-IP', 'X-Apparently-From') { my $str = $pms-get($header); next unless $str; push (@originating, ($str =~

Re: Extend DNSEval.pm?

2008-04-18 Thread William Taylor
On Fri, Apr 18, 2008 at 06:22:58PM +0100, Justin Mason wrote: William Taylor writes: Is there anyway to extend this in DNSEval.pm locally without patching? Maybe with a plugin or something? my @originating = (); for my $header ('X-Originating-IP', 'X-Apparently-From') { my