Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Dave Goodrich
Jon LaBass wrote:

Interested in knowing how well it works for you though.
DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!

It works quite well.  I'm surprised you don't take advantage of the FreeBSD
ports.  Install vpopmail with the SA flags and SA gets installed
automagically and it works normally.
Jon
I do use ports on some applications (portupgrade rocks), but often if I 
need to do a custom configure I just find it easier to do a manual 
install, as is the case with vpopmail. We use MySQL and a custom script 
to call spamc changing the delivery requirements based on the spamc 
results. Some users want the spam tagged, some want it delivered another 
spam box, some want it deleted. We also allow our users to decide the 
score they want mail marked as spam, for some it is a user determined 
score, some a domain determined score.

DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Jon LaBass
> Jon LaBass wrote:
>
> >>Jon LaBass wrote:
> >>
> >>
> >>
> >>>Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
> >
> > or
> >
> >>>above will not be delivered.
> >>>
> >>>Jon
> >>
> >>I just upgraded four servers this morning to 5.4.6, that is not a
> >>configure option that I know of. What vpopmail do you use?
> >>
> >>DAve
> >
> >
> > Well, I use vpopmail on FreeBSD and that's how you define it with the
ports.
> > After I wrote that I thought "Doh!  Not everybody is using bsd so that
> > option may not be available."  But, on other systems where you have to
> > manually compile vpopmail, the option --enable-spam-threshold=10 should
> > work.
> >
>
> I use FreeBSD and NetBSD though I don't use ports. The stock vpopmail
> doesn't have this option, at least not the sources I downloaded Monday.
> Looking through the files directory in the port it seems the
> spamassassin code is a patch added by someone else to vdelivermail.c and
> vpopmail.c
>
> Interested in knowing how well it works for you though.
>
> DAve
>
> -- 
> Systems Administrator
> http://www.tls.net
> Get rid of Unwanted Emails...get TLS Spam Blocker!
>

It works quite well.  I'm surprised you don't take advantage of the FreeBSD
ports.  Install vpopmail with the SA flags and SA gets installed
automagically and it works normally.

Jon



Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Dave Goodrich
Ken Jones wrote:
On Friday 17 September 2004 09:02 am, Dave Goodrich wrote:
Jon LaBass wrote:
Jon LaBass wrote:

Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
or

above will not be delivered.
Jon
I just upgraded four servers this morning to 5.4.6, that is not a
configure option that I know of. What vpopmail do you use?
DAve
Well, I use vpopmail on FreeBSD and that's how you define it with the
ports. After I wrote that I thought "Doh!  Not everybody is using bsd so
that option may not be available."  But, on other systems where you have
to manually compile vpopmail, the option --enable-spam-threshold=10
should work.
I use FreeBSD and NetBSD though I don't use ports. The stock vpopmail
doesn't have this option, at least not the sources I downloaded Monday.
Looking through the files directory in the port it seems the
spamassassin code is a patch added by someone else to vdelivermail.c and
vpopmail.c
Interested in knowing how well it works for you though.

The devel version has --enable-spamassassin which checks the 
X-Spam-Flag: YES value set in the headers if the hit count is greater
than the required hits. It would not be much more work to add in the 
--enable-spam-threshold option too. I have that code in simscan now.
No, I was just curious, we are happy with the way it works now. I'd 
rather not have a compile time limit as we have our users used to 
determining the limit they want.

Thanks,
DAve
Ken Jones

--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Ken Jones
On Friday 17 September 2004 09:02 am, Dave Goodrich wrote:
> Jon LaBass wrote:
> >>Jon LaBass wrote:
> >>
> >>
> >>
> >>>Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
> >
> > or
> >
> >>>above will not be delivered.
> >>>
> >>>Jon
> >>
> >>I just upgraded four servers this morning to 5.4.6, that is not a
> >>configure option that I know of. What vpopmail do you use?
> >>
> >>DAve
> >
> > Well, I use vpopmail on FreeBSD and that's how you define it with the
> > ports. After I wrote that I thought "Doh!  Not everybody is using bsd so
> > that option may not be available."  But, on other systems where you have
> > to manually compile vpopmail, the option --enable-spam-threshold=10
> > should work.
>
> I use FreeBSD and NetBSD though I don't use ports. The stock vpopmail
> doesn't have this option, at least not the sources I downloaded Monday.
> Looking through the files directory in the port it seems the
> spamassassin code is a patch added by someone else to vdelivermail.c and
> vpopmail.c
>
> Interested in knowing how well it works for you though.

The devel version has --enable-spamassassin which checks the 
X-Spam-Flag: YES value set in the headers if the hit count is greater
than the required hits. It would not be much more work to add in the 
--enable-spam-threshold option too. I have that code in simscan now.

Ken Jones


Re: [vchkpw] Recomendations for best spam rejection

2004-09-17 Thread Dave Goodrich
Jon LaBass wrote:
Jon LaBass wrote:

Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
or
above will not be delivered.
Jon
I just upgraded four servers this morning to 5.4.6, that is not a
configure option that I know of. What vpopmail do you use?
DAve

Well, I use vpopmail on FreeBSD and that's how you define it with the ports.
After I wrote that I thought "Doh!  Not everybody is using bsd so that
option may not be available."  But, on other systems where you have to
manually compile vpopmail, the option --enable-spam-threshold=10 should
work.
I use FreeBSD and NetBSD though I don't use ports. The stock vpopmail 
doesn't have this option, at least not the sources I downloaded Monday. 
Looking through the files directory in the port it seems the 
spamassassin code is a patch added by someone else to vdelivermail.c and 
vpopmail.c

Interested in knowing how well it works for you though.
DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Jon LaBass
> Jon LaBass wrote:
>
> 
>
> >
> > Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0
or
> > above will not be delivered.
> >
> > Jon
>
> I just upgraded four servers this morning to 5.4.6, that is not a
> configure option that I know of. What vpopmail do you use?
>
> DAve
>
> -- 
> Systems Administrator
> http://www.tls.net
> Get rid of Unwanted Emails...get TLS Spam Blocker!
>
>

Well, I use vpopmail on FreeBSD and that's how you define it with the ports.
After I wrote that I thought "Doh!  Not everybody is using bsd so that
option may not be available."  But, on other systems where you have to
manually compile vpopmail, the option --enable-spam-threshold=10 should
work.



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Brian Millar
Hi,
We started with Spamassassin called from users .qmail file (with user 
prefs), clamd with qmailscanner and

/usr/local/bin/rblsmtpd -b -C \
 -r 'relays.ordb.org:Your message was rejected because the mail server you 
use is configured to allow OPEN RELAY - More detailed information regarding 
this problem is available from http://www.ordb.org/lookup/?host=%IP% - 
Please forward this error through to your email server support staff for 
easy resolution.' \
 -t 5 \

in our qmail-smtp run file. IsoQLog shows that we recieved approx 3.5 - 4 
million messages each month from january to june. Mid june, we modified our 
qmail-smtp run file to:

/usr/local/bin/rblsmtpd -b -C \
 -r 'relays.ordb.org:Your message was rejected because the mail server you 
use is configured to allow OPEN RELAY - More detailed information regarding 
this problem is available from http://www.ordb.org/lookup/?host=%IP% - 
Please forward this error through to your email server support staff for 
easy resolution.' \
 -r 'sbl-xbl.spamhaus.org:Probable spam connection rejected. Details at 
http://www.spamhaus.org/query/bl?ip=%IP%' \
 -r 'list.dsbl.org:Probable spam connection rejected. Details at 
http://dsbl.org/listing?%IP%' \
 -t 5 \

July's recieved count was at 2.2 million and august's count was at 1.1 
million. we have had nothing but "thanks" from our customers who recieve 
less than half of the spammail they used to, before spamassassin come into 
play.

The ordb stopped very little spam, The XBL/SBL stops MORE THAN HALF of our 
incoming mail.
http://www.spamhaus.org

Brian

- Original Message - 
From: "Andrew Niemantsverdriet" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 16, 2004 9:40 AM
Subject: [vchkpw] Recomendations for best spam rejection


I am doing a major upgrade to our mail server and I am looking for
recommendations for programs and qmail patches to limit the amount of
spam that gets through. What are you guys using that has great success?




Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Dave Goodrich
Jon LaBass wrote:

Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0 or
above will not be delivered.
Jon
I just upgraded four servers this morning to 5.4.6, that is not a 
configure option that I know of. What vpopmail do you use?

DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Dave Goodrich
Jan Lange wrote:
Hi,
how can I use SA global in qmail, with dropping of Mails that
have more than 10 points of score?
Lots of ways, .qmail-default file, qmailqueue replacements, custom 
scripts, ask the SpamAssassin list. I don't do that but I am sure others do.

Http://www.spamassassin.org
DAve
So that this mails that are definitly spam don't deliver to the
user?
That would extremly reduce our traffic and spam mails in the customer
mailbox.
Greetings
Jan 


-Original Message-
From: Matthew Walker [mailto:[EMAIL PROTECTED] 
Sent: Thursday, September 16, 2004 7:06 PM
To: [EMAIL PROTECTED]
Subject: Re: [vchkpw] Recomendations for best spam rejection

Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).
On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones <[EMAIL PROTECTED]> wrote:
On Thursday 16 September 2004 11:40 am, Andrew 
Niemantsverdriet wrote:
I am doing a major upgrade to our mail server and I am looking for
recommendations for programs and qmail patches to limit 
the amount of
spam that gets through. What are you guys using that has 
great success?
I would recommend using an RBL list. Using a check-user patch to
qmail-smtpd. And using a combination of spamassassin and clamav.
Ken Jones



--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


RE: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Joseph B Schmitt II


> -Original Message-
> From: Jon LaBass [mailto:[EMAIL PROTECTED]
> Sent: Thursday, September 16, 2004 10:49 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [vchkpw] Recomendations for best spam rejection
>
>
> > Hi,
> >
> > how can I use SA global in qmail, with dropping of Mails that
> > have more than 10 points of score?
> >
> > So that this mails that are definitly spam don't deliver to the
> > user?
> >
> > That would extremly reduce our traffic and spam mails in the customer
> > mailbox.
> >
> > Greetings
> > Jan
> >
> > > -Original Message-
> > > From: Matthew Walker [mailto:[EMAIL PROTECTED]
> > > Sent: Thursday, September 16, 2004 7:06 PM
> > > To: [EMAIL PROTECTED]
> > > Subject: Re: [vchkpw] Recomendations for best spam rejection
> > >
> > > Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).
> > >
> > >
> > > On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones <[EMAIL PROTECTED]> wrote:
> > > >
> > > >
> > > > On Thursday 16 September 2004 11:40 am, Andrew
> > > Niemantsverdriet wrote:
> > > > > I am doing a major upgrade to our mail server and I am looking for
> > > > > recommendations for programs and qmail patches to limit
> > > the amount of
> > > > > spam that gets through. What are you guys using that has
> > > great success?
> > > >
> > > > I would recommend using an RBL list. Using a check-user patch to
> > > > qmail-smtpd. And using a combination of spamassassin and clamav.
> > > >
> > > > Ken Jones
> > > >
> > >
> >
> >
>
> Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0 or
> above will not be delivered.
>
> Jon
>
>

as all others said SA and Clamd.

we use Clamd tapped into qmail-scanner w/virus updates as notifications are
sent.

we process SA though dot-qmail+maildrop with user-preferences as well as
only processing SA for *real* users.  the difficuly we've seen is there is
so much spam to non-existant accounts we needed to quit wasting SA
processing time.  in addition, we use a little SA cluster: 8 boxes
processing SA, with NFS'd bayesDB and a custom weighted random rotator
script.

--joey



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Jon LaBass
> Hi,
>
> how can I use SA global in qmail, with dropping of Mails that
> have more than 10 points of score?
>
> So that this mails that are definitly spam don't deliver to the
> user?
>
> That would extremly reduce our traffic and spam mails in the customer
> mailbox.
>
> Greetings
> Jan
>
> > -Original Message-
> > From: Matthew Walker [mailto:[EMAIL PROTECTED]
> > Sent: Thursday, September 16, 2004 7:06 PM
> > To: [EMAIL PROTECTED]
> > Subject: Re: [vchkpw] Recomendations for best spam rejection
> >
> > Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).
> >
> >
> > On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones <[EMAIL PROTECTED]> wrote:
> > >
> > >
> > > On Thursday 16 September 2004 11:40 am, Andrew
> > Niemantsverdriet wrote:
> > > > I am doing a major upgrade to our mail server and I am looking for
> > > > recommendations for programs and qmail patches to limit
> > the amount of
> > > > spam that gets through. What are you guys using that has
> > great success?
> > >
> > > I would recommend using an RBL list. Using a check-user patch to
> > > qmail-smtpd. And using a combination of spamassassin and clamav.
> > >
> > > Ken Jones
> > >
> >
>
>

Compile vpopmail with  SPAM_THRESHOLD=10 and any message scored at 10.0 or
above will not be delivered.

Jon



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Joe Boyce

http://www.surbl.org/

We use it here too (Also a public DNS server for them), by far
the best spam filtering we do.

A would recommend again :-)

Regards,

Joe Boyce
---
InterStar, Inc. - Shasta.com Internet
Phone: +1 (530) 224-6866 x105
Email: [EMAIL PROTECTED]

Thursday, September 16, 2004, 10:31:01 AM, you wrote:


>> I forget to add we also use spamcop, but not in SpamAssassin, I let
>> qmail do it. I would also highly recommend the SURBL in 
>> SpamAssassin. If 
>> I use no other tests, SURBL would catch 70% of my current caught spam.

JL> what is SURBL? have you an URL?

JL> Jan




Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Christopher Grello
Courtesy of Google:

http://www.google.com/search?q=SURBL&sourceid=firefox&start=0&start=0&ie=utf-8&oe=utf-8

- Chris

On Thu, 16 Sep 2004 19:31:01 +0200, Jan Lange
<[EMAIL PROTECTED]> wrote:
> 
> > I forget to add we also use spamcop, but not in SpamAssassin, I let
> > qmail do it. I would also highly recommend the SURBL in
> > SpamAssassin. If
> > I use no other tests, SURBL would catch 70% of my current caught spam.
> 
> what is SURBL? have you an URL?
> 
> Jan
> 
>


RE: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Jan Lange

> I forget to add we also use spamcop, but not in SpamAssassin, I let 
> qmail do it. I would also highly recommend the SURBL in 
> SpamAssassin. If 
> I use no other tests, SURBL would catch 70% of my current caught spam.

what is SURBL? have you an URL?

Jan



RE: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Jan Lange
Hi,

how can I use SA global in qmail, with dropping of Mails that
have more than 10 points of score?

So that this mails that are definitly spam don't deliver to the
user?

That would extremly reduce our traffic and spam mails in the customer
mailbox.

Greetings
Jan 

> -Original Message-
> From: Matthew Walker [mailto:[EMAIL PROTECTED] 
> Sent: Thursday, September 16, 2004 7:06 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [vchkpw] Recomendations for best spam rejection
> 
> Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).
> 
> 
> On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones <[EMAIL PROTECTED]> wrote:
> > 
> > 
> > On Thursday 16 September 2004 11:40 am, Andrew 
> Niemantsverdriet wrote:
> > > I am doing a major upgrade to our mail server and I am looking for
> > > recommendations for programs and qmail patches to limit 
> the amount of
> > > spam that gets through. What are you guys using that has 
> great success?
> > 
> > I would recommend using an RBL list. Using a check-user patch to
> > qmail-smtpd. And using a combination of spamassassin and clamav.
> > 
> > Ken Jones
> >
> 



Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Dave Goodrich
Andrew Niemantsverdriet wrote:
I am doing a major upgrade to our mail server and I am looking for
recommendations for programs and qmail patches to limit the amount of
spam that gets through. What are you guys using that has great success? 


I forget to add we also use spamcop, but not in SpamAssassin, I let 
qmail do it. I would also highly recommend the SURBL in SpamAssassin. If 
I use no other tests, SURBL would catch 70% of my current caught spam.

DAve
--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Matthew Walker
Oh, yes. I have to second the ClamAV (or /any/ antivirus, really).


On Thu, 16 Sep 2004 11:58:13 -0500, Ken Jones <[EMAIL PROTECTED]> wrote:
> 
> 
> On Thursday 16 September 2004 11:40 am, Andrew Niemantsverdriet wrote:
> > I am doing a major upgrade to our mail server and I am looking for
> > recommendations for programs and qmail patches to limit the amount of
> > spam that gets through. What are you guys using that has great success?
> 
> I would recommend using an RBL list. Using a check-user patch to
> qmail-smtpd. And using a combination of spamassassin and clamav.
> 
> Ken Jones
>


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Dave Goodrich
Andrew Niemantsverdriet wrote:
> I am doing a major upgrade to our mail server and I am looking for
> recommendations for programs and qmail patches to limit the amount of
> spam that gets through. What are you guys using that has great success?
>
>
>
SpamAssassin without a doubt. Depending on how much traffic you have I 
would not use any qmailqueu patch as I had seen ours use a lot of 
resources.

We process around 100k to 150k messages a day (inbound only). We use 
dot-qmail to call a script which runs SA with user specific prefs.

If you have a lot of traffic, I would look seriously at MailScanner. I 
run MailScanner on the gateway for SV scanning only but it does have 
hooks for SA.

DAve

--
Systems Administrator
http://www.tls.net
Get rid of Unwanted Emails...get TLS Spam Blocker!


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Ken Jones
On Thursday 16 September 2004 11:40 am, Andrew Niemantsverdriet wrote:
> I am doing a major upgrade to our mail server and I am looking for
> recommendations for programs and qmail patches to limit the amount of
> spam that gets through. What are you guys using that has great success?

I would recommend using an RBL list. Using a check-user patch to
qmail-smtpd. And using a combination of spamassassin and clamav.

Ken Jones


Re: [vchkpw] Recomendations for best spam rejection

2004-09-16 Thread Matthew Walker
SPF/RBL/SpamAssassin is a great combo.

I merely flag with SPF and SpamAssassin right now, but I actively
reject based on the ORDB RBL. I've also added some custom SpamAssassin
rules to watch for the SPF flags, and adjust the score accordingly. If
you're interested, I can provide them.


On Thu, 16 Sep 2004 10:40:25 -0600, Andrew Niemantsverdriet
<[EMAIL PROTECTED]> wrote:
> I am doing a major upgrade to our mail server and I am looking for
> recommendations for programs and qmail patches to limit the amount of
> spam that gets through. What are you guys using that has great success?
> 
>