From MailScanner at ecs.soton.ac.uk Wed Nov 1 19:43:18 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed, 01 Nov 2006 19:43:18 +0000 Subject: Extension I'm working on In-Reply-To: <45253223.5000400@coders.co.uk> References: <4524B777.6040109@coders.co.uk> <452522AC.2050805@pacific.net> <45253223.5000400@coders.co.uk> Message-ID: <4548F8D6.5000409@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I haven't come across DMOZ before. Who are they and what do they do? Matt Hampton wrote: > Ken A wrote: > >> Sounds interesting. How do you generate the DNS zone? >> > > I take a dump from DMOZ of their complete directory (2Gb of uncompressed > data) and parse it. > > I calculate the md5sum of the URL and then use this as the basis of the > lookup > > i.e. abcdef01234567890abcdef01234567890.zone.file > > Will return the TXT record of the appropriate classification. This > method means that the complete URL can be tested anonymously. > > >> Why not make it an SA plugin, similar to the 'urirhssub' tests, so it could take advantage >> of scoring system and wider testing? >> > > Because it may not be Spam as such. It might be someone mailing a friend > - "did you see this film last night: http://link". > > In this case it won't be spam and is more a content thing and so more > relevant to MailScanner than SA. Well that was my thinking! > > It would also make more sense to "block" (gives the option of sending a > "this email was inappropriate" to the recipient rather than just > dropping it because it was classified as spam. > > Thanks for the comments. > > > Matt > Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store MailScanner customisation, or any advanced system administration help? Contact me at Jules at Jules.FM PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 For all your IT requirements visit www.transtec.co.uk -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.0 (Build 1112) Comment: Fetch my public key foot-print from www.mailscanner.info Charset: ISO-8859-1 wj8DBQFFSPlGEfZZRxQVtlQRAtEqAKCRgYeCZuAz23UK4jK5GthzOlzc+ACgu1mf 76cBtAomVfTahKgFku9TZmM= =f8ne -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From ugob at lubik.ca Thu Nov 2 02:12:45 2006 From: ugob at lubik.ca (Ugo Bellavance) Date: Wed, 01 Nov 2006 21:12:45 -0500 Subject: Extension I'm working on In-Reply-To: <4548F8D6.5000409@ecs.soton.ac.uk> References: <4524B777.6040109@coders.co.uk> <452522AC.2050805@pacific.net> <45253223.5000400@coders.co.uk> <4548F8D6.5000409@ecs.soton.ac.uk> Message-ID: <4549541D.1010304@lubik.ca> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I haven't come across DMOZ before. Who are they and what do they do? > http://www.dmoz.org/ Open directory project... > Matt Hampton wrote: >> Ken A wrote: >> >>> Sounds interesting. How do you generate the DNS zone? >>> >> I take a dump from DMOZ of their complete directory (2Gb of uncompressed >> data) and parse it. >> >> I calculate the md5sum of the URL and then use this as the basis of the >> lookup >> >> i.e. abcdef01234567890abcdef01234567890.zone.file >> >> Will return the TXT record of the appropriate classification. This >> method means that the complete URL can be tested anonymously. >> >> >>> Why not make it an SA plugin, similar to the 'urirhssub' tests, so it could take advantage >>> of scoring system and wider testing? >>> >> Because it may not be Spam as such. It might be someone mailing a friend >> - "did you see this film last night: http://link". >> >> In this case it won't be spam and is more a content thing and so more >> relevant to MailScanner than SA. Well that was my thinking! >> >> It would also make more sense to "block" (gives the option of sending a >> "this email was inappropriate" to the recipient rather than just >> dropping it because it was classified as spam. >> >> Thanks for the comments. >> >> >> Matt >> > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info > Buy the MailScanner book at www.MailScanner.info/store > > MailScanner customisation, or any advanced system administration help? > Contact me at Jules at Jules.FM > > PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 > For all your IT requirements visit www.transtec.co.uk > > > > -----BEGIN PGP SIGNATURE----- > Version: PGP Desktop 9.5.0 (Build 1112) > Comment: Fetch my public key foot-print from www.mailscanner.info > Charset: ISO-8859-1 > > wj8DBQFFSPlGEfZZRxQVtlQRAtEqAKCRgYeCZuAz23UK4jK5GthzOlzc+ACgu1mf > 76cBtAomVfTahKgFku9TZmM= > =f8ne > -----END PGP SIGNATURE----- > -- Ugo Bellavance (ugob at lubik.ca) Consultant en S?curit? Informatique Lubik Inc. Site Web: http://www.lubik.ca # T?l.: 514-907-3253 # Fax.: 1-866-334-1426 Telephone IP (SIP): ugo at sip.lubik.ca Protection de courriel par LastSpam (www.lastspam.com) From martinh at solidstatelogic.com Mon Nov 27 17:21:35 2006 From: martinh at solidstatelogic.com (Martin Hepworth) Date: Mon, 27 Nov 2006 17:21:35 +0000 Subject: MS 4.57.4 quarantine logs Message-ID: <456B1E9F.4010606@solidstatelogic.com> Jules Rather then bug you direct i thought I resurrect this list ;-) No emails go to quatantine directories....major problem when running with MailWatch. -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** From res at ausics.net Mon Nov 27 22:19:19 2006 From: res at ausics.net (Res) Date: Tue, 28 Nov 2006 08:19:19 +1000 (EST) Subject: MS 4.57.4 quarantine logs In-Reply-To: <456B1E9F.4010606@solidstatelogic.com> References: <456B1E9F.4010606@solidstatelogic.com> Message-ID: On Mon, 27 Nov 2006, Martin Hepworth wrote: > Jules > > Rather then bug you direct i thought I resurrect this list ;-) > > No emails go to quatantine directories....major problem when running with > MailWatch. Confirmed also on my test box, set to 'store notify' delivered: 1 Nov 28 To: Res (2166) {Spam?} Re: hi you have a greeting card from blah Related header: X-foxy-MailScanner-SpamCheck: spam, SpamAssassin (cached, score=98.56, required 6, ALL_TRUSTED -1.44, FRIEND_GREETINGS2 100.00) X-foxy-MailScanner-SpamScore: 98 Log: Nov 28 08:11:36 fox MailScanner[28807]: Message 3237977 from 192.168.0.150 (res at ausics.net) to ausics.net,log is spam, SpamAssassin (cached, score=98.56, required 6, ALL_TRUSTED -1.44, FRIEND_GREETINGS2 100.00) ...Same log output as on MailScanner-4.56.8 which does store and notify -- Cheers Res "Just a world that we all must share, it's not enough just to stand and stare, is it only a dream that there'll be no more turning away" - Floyd -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From res at ausics.net Mon Nov 27 22:32:52 2006 From: res at ausics.net (Res) Date: Tue, 28 Nov 2006 08:32:52 +1000 (EST) Subject: MS 4.57.4 quarantine logs In-Reply-To: References: <456B1E9F.4010606@solidstatelogic.com> Message-ID: Upda teot this... On Tue, 28 Nov 2006, Res wrote: > delivered: > 1 Nov 28 To: Res (2166) {Spam?} Re: hi you have a greeting card from blah store and notify are the cuplrits, I set this on normal low level spam and it still delivers...hope this helps > > Related header: > > X-foxy-MailScanner-SpamCheck: spam, SpamAssassin (cached, score=98.56, > required 6, ALL_TRUSTED -1.44, FRIEND_GREETINGS2 100.00) > X-foxy-MailScanner-SpamScore: 98 > > > Log: > Nov 28 08:11:36 fox MailScanner[28807]: Message 3237977 from 192.168.0.150 > (res at ausics.net) to ausics.net,log is spam, SpamAssassin (cached, > score=98.56, required 6, ALL_TRUSTED -1.44, FRIEND_GREETINGS2 100.00) > > ...Same log output as on MailScanner-4.56.8 which does store and notify > > > -- Cheers Res "Just a world that we all must share, it's not enough just to stand and stare, is it only a dream that there'll be no more turning away" - Floyd -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. From jaearick at colby.edu Tue Nov 28 02:08:43 2006 From: jaearick at colby.edu (Jeff A. Earickson) Date: Mon, 27 Nov 2006 21:08:43 -0500 (EST) Subject: 4.57.4: changes to spam.lists.conf Message-ID: Julian, opm.blitzed.org should be commented out in this list, they closed down in May 2006. relays.visi.com also seems dead, as does list.dsbl.org. Jeff Earickson Colby College From steve.freegard at fsl.com Tue Nov 28 02:18:51 2006 From: steve.freegard at fsl.com (Steve Freegard) Date: Tue, 28 Nov 2006 02:18:51 +0000 Subject: 4.57.4: changes to spam.lists.conf In-Reply-To: References: Message-ID: <456B9C8B.2010304@fsl.com> Jeff A. Earickson wrote: > Julian, > > opm.blitzed.org should be commented out in this list, they closed > down in May 2006. relays.visi.com also seems dead, as does list.dsbl.org. > list.dsbl.org is very much alive and causing me some grief at this very moment... Kind regards, Steve. From MailScanner at ecs.soton.ac.uk Wed Nov 29 13:49:00 2006 From: MailScanner at ecs.soton.ac.uk (Julian Field) Date: Wed, 29 Nov 2006 13:49:00 +0000 Subject: Problems fixed? 4.57.5 Message-ID: <456D8FCC.8060106@ecs.soton.ac.uk> -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 I hope all the problems with 4.57.4 are now fixed in 4.57.5. Please can you test it again for me? Thanks folks! Jules - -- Julian Field MEng CITP www.MailScanner.info Buy the MailScanner book at www.MailScanner.info/store Need help customising MailScanner? Contact me! Need help fixing or optimising your systems? Contact me! Need help getting you started solving new requirements from your boss? Contact me! PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654 -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.5.1 (Build 1557) Comment: (pgp-secured) Charset: ISO-8859-1 wj8DBQFFbZAaEfZZRxQVtlQRAof5AKDZ/cdiiTU4r8ZZbEUJmlz90wYWHQCgyNIM aM/4GlcGHk8v1QHmYC9TKV0= =VmfW -----END PGP SIGNATURE----- -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. For all your IT requirements visit www.transtec.co.uk From martinh at solidstatelogic.com Wed Nov 29 14:32:27 2006 From: martinh at solidstatelogic.com (Martin Hepworth) Date: Wed, 29 Nov 2006 14:32:27 +0000 Subject: Problems fixed? 4.57.5 In-Reply-To: <456D8FCC.8060106@ecs.soton.ac.uk> References: <456D8FCC.8060106@ecs.soton.ac.uk> Message-ID: <456D99FB.5090501@solidstatelogic.com> Julian Field wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > I hope all the problems with 4.57.4 are now fixed in 4.57.5. > Please can you test it again for me? > > Thanks folks! > > Jules > > - -- > Julian Field MEng CITP > www.MailScanner.info Jules I can confirm the quarantine 'store' problem is fixed with this release. -- Martin Hepworth Senior Systems Administrator Solid State Logic Tel: +44 (0)1865 842300 ********************************************************************** This email and any files transmitted with it are confidential and intended solely for the use of the individual or entity to whom they are addressed. If you have received this email in error please notify the system manager. This footnote confirms that this email message has been swept for the presence of computer viruses and is believed to be clean. ********************************************************************** From jaearick at colby.edu Wed Nov 29 14:50:59 2006 From: jaearick at colby.edu (Jeff A. Earickson) Date: Wed, 29 Nov 2006 09:50:59 -0500 (EST) Subject: Problems fixed? 4.57.5 In-Reply-To: <456D99FB.5090501@solidstatelogic.com> References: <456D8FCC.8060106@ecs.soton.ac.uk> <456D99FB.5090501@solidstatelogic.com> Message-ID: Julian, Looks good here. Spam getting marked, and/or deleted, per my rules. Thanks, Jeff Earickson Colby College On Wed, 29 Nov 2006, Martin Hepworth wrote: > Date: Wed, 29 Nov 2006 14:32:27 +0000 > From: Martin Hepworth > Reply-To: MailScanner Beta-testers > To: MailScanner Beta-testers > Subject: Re: Problems fixed? 4.57.5 > > Julian Field wrote: >> -----BEGIN PGP SIGNED MESSAGE----- >> Hash: SHA1 >> >> I hope all the problems with 4.57.4 are now fixed in 4.57.5. >> Please can you test it again for me? >> >> Thanks folks! >> >> Jules >> >> - -- Julian Field MEng CITP >> www.MailScanner.info > > Jules > I can confirm the quarantine 'store' problem is fixed with this release. > > > -- > Martin Hepworth > Senior Systems Administrator > Solid State Logic > Tel: +44 (0)1865 842300 > > ********************************************************************** > > This email and any files transmitted with it are confidential and > intended solely for the use of the individual or entity to whom they > are addressed. If you have received this email in error please notify > the system manager. > > This footnote confirms that this email message has been swept > for the presence of computer viruses and is believed to be clean. > ********************************************************************** > > -- > MailScanner-Beta mailing list > mailscanner-beta at lists.mailscanner.info > http://lists.mailscanner.info/mailman/listinfo/mailscanner-beta > > Before posting, read http://wiki.mailscanner.info/posting > > Support MailScanner development - buy the book off the website! >