Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-26 Thread Reindl Harald
Am 26.03.2016 um 18:19 schrieb Yves Goergen: Thank you, Bill, for the extensive reply. There are some points in it which I could try, like the greeting delay on port 25. It seems I should really invest in blocking certain attachment types (executables and useless files) and finding a way to

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-26 Thread Yves Goergen
Thank you, Bill, for the extensive reply. There are some points in it which I could try, like the greeting delay on port 25. It seems I should really invest in blocking certain attachment types (executables and useless files) and finding a way to teach Bayes from messages. I'm using Maildir so

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-26 Thread Reindl Harald
Am 26.03.2016 um 05:56 schrieb Bill Cole: That implies that you are probably underutilizing spam-control measures in your MTA. I manage a diverse set of mail systems running multiple MTAs and in all cases the most effective anti-spam measure against ALL spam is delaying the initial greeting

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-25 Thread Bill Cole
On 24 Mar 2016, at 13:50, Yves Goergen wrote: Hello, I'm getting more and more spam every day and SpamAssassin can't handle it. Most of it looks very similar but it isn't filtered out. Have you tried creating local rules for it? I can't share the rules I've created for *some* of these

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-24 Thread Olivier Nicole
Yves, > I'm getting more and more spam every day and SpamAssassin can't handle > it. Most of it looks very similar but it isn't filtered out. Is your version of SA recent enought? > I've set up clamav-unofficial-sigs recently by installing the Ubuntu Even if it may pick-up some spam, clamav,

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-24 Thread Yves Goergen
I've looked into the logs and they say /var/lib/clamav, and the downloaded files are also located there. Sanesecurity also shows up in the logs, so I guess it is really installed. clamd is set up just normally with the Ubuntu package, nothing unusual. Exim checks that daemon for incoming mail

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-24 Thread Kris Deugau
Yves Goergen wrote: > The Bayes filter has never worked for me, but I can't train it either. Per-user Bayes is VERY good - stock SA3.3.2 with a mostly-autolearn-based Bayes lets through maybe three or four spams a week on my personal server/account (out of several hundred per day). Systemwide

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-24 Thread Reindl Harald
Am 24.03.2016 um 20:05 schrieb Bowie Bailey: It sounds like you may not have the Sanesecurity databases in the right spot. They should be catching a fair amount of junk. Check your clamd install by grepping the logfiles to see where clamd is reading the databases from. $ grep 'Reading

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-24 Thread Bowie Bailey
On 3/24/2016 2:45 PM, Yves Goergen wrote: The Bayes filter has never worked for me, but I can't train it either. This is a multi-user server and I can't put every single message I get manually into some script to teach it. It's not practical. And while Thunderbird has a Junk toolbar button it

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-24 Thread Reindl Harald
Am 24.03.2016 um 19:45 schrieb Yves Goergen: The Bayes filter has never worked for me, but I can't train it either. This is a multi-user server and I can't put every single message I get manually into some script to teach it. It's not practical. And while Thunderbird has a Junk toolbar button

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-24 Thread Yves Goergen
The Bayes filter has never worked for me, but I can't train it either. This is a multi-user server and I can't put every single message I get manually into some script to teach it. It's not practical. And while Thunderbird has a Junk toolbar button it doesn't report back to the server. So

Re: clamav-unofficial-sigs not helping in a spam flood

2016-03-24 Thread Reindl Harald
Am 24.03.2016 um 18:50 schrieb Yves Goergen: I'm getting more and more spam every day and SpamAssassin can't handle it. Most of it looks very similar but it isn't filtered out. I've set up clamav-unofficial-sigs recently by installing the Ubuntu package. My MTA is configured so that anything

clamav-unofficial-sigs not helping in a spam flood

2016-03-24 Thread Yves Goergen
Hello, I'm getting more and more spam every day and SpamAssassin can't handle it. Most of it looks very similar but it isn't filtered out. I've set up clamav-unofficial-sigs recently by installing the Ubuntu package. My MTA is configured so that anything detected by clamav is declared a