MailScanner --lint error

[Julian Field]

On 4/1/09 16:36, Greg J. McGreevy wrote:
> you mean this one?
>
> http://article.gmane.org/gmane.mail.virus.mailscanner/54241/match=how-to
>    
Yes, that's the one.
>
> What do you have your score set to for Mailscanner mine is currently set to 6 and 10 (defaults I guess)
Yes, that's pretty much what I use. 6 certainly, I think my high score 
might be 9, but users can tweak it.
>   most of the stuff I am seeing is hitting 1.5 to 3 for the SA score (all Spam) should I set these lower or tune Spamassassin to get a higher score?
Tune SA to get a higher score. Don't lower the 6 much or you'll start 
getting a lot of false positives.
> I am looking for a good start to finish tuning plan for everything that will get the majority of Spam caught (Quarantined) I am ok with some false positives. Right now it is not doing a very good job catching anything. I need to get this tuned ASAP and would be willing to pay someone to tweak things a bit to get this working
>    
What sort of spam is getting through?

I stop most of my own stuff these days with BarricadeMX (www.fsl.com) 
which is a brilliant product, and actually very cheap once you take into 
account the amount of hardware investment it will save you. It has saved 
us a lot of cash, and my users love it.

Also, take a look at my anti-spear-phishing posting from a few days ago 
(it was a thread about Happy New Year which morphed somewhat :) as I've 
got that problem pretty much cracked now too.

Jules.

>
>
> Thanks,
> Greg
>
> ________________________________
>
> From: mailscanner-bounces at lists.mailscanner.info on behalf of Julian Field
> Sent: Sun 1/4/2009 4:38 AM
> To: MailScanner discussion
> Subject: Re: MailScanner --lint error
>
>
>
> Back in about July 2007, I posted a HOWTO which you may find helps you,
> as a lot of it is still quite valid. It had HOWTO in the subject line,
> and will be in the list archive.
>
> On 3/1/09 22:23, Greg J. McGreevy wrote:
>    
>> Thanks Julian everyone has been very helpful here.  I do however have some additional questions I need to fine tune the spamassassin/MailScanner to catch more SPAM it does not seem like it is catching very much. everything is installed with defaults any step by step tuning is appreciated. Also I went here http://corebsd.com/node/6 for the Mailwatch install for the Qaurantine release info (which made sense to me) but the entries I added brought me back here with the errors described earlier. I have since removed them.
>>
>> Thanks Again,
>> Greg
>>
>> ________________________________
>>
>> From: mailscanner-bounces at lists.mailscanner.info on behalf of Julian Field
>> Sent: Sat 1/3/2009 2:29 PM
>> To: MailScanner discussion
>> Subject: Re: MailScanner --lint error
>>
>>
>>
>>
>>
>> On 3/1/09 16:16, Greg J. McGreevy wrote:
>>
>>      
>>> I am getting the following error when I run the test
>>> Cannot match against destination IP address
>>>
>>>        
>> Due to the way that email is delivered by a mail server, you don't know
>> the exact destination IP address until you're actually in the process of
>> delivering the message. So you can't match against a destination IP
>> address in a rule. So all rules that say
>> To: 123.123.123.123 yes
>> or anything similar are impossible to implement. It's not a restriction
>> in what MailScanner can do, you really don't know the destination IP
>> address until the message has been delivered. By which time it's too late.
>>
>> Jules
>>
>> --
>> Julian Field MEng CITP CEng
>> www.MailScanner.info
>> Buy the MailScanner book at www.MailScanner.info/store
>>
>> MailScanner customisation, or any advanced system administration help?
>> Contact me at Jules at Jules.FM
>>
>> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
>> For all your IT requirements visit www.transtec.co.uk
>>
>>
>> --
>> This message has been scanned for viruses and
>> dangerous content by MailScanner, and is
>> believed to be clean.
>>
>> --
>> MailScanner mailing list
>> mailscanner at lists.mailscanner.info
>> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>>
>> Before posting, read http://wiki.mailscanner.info/posting
>>
>> Support MailScanner development - buy the book off the website!
>>
>>
>>
>>      
>
> Jules
>
> --
> Julian Field MEng CITP CEng
> www.MailScanner.info
> Buy the MailScanner book at www.MailScanner.info/store
>
> MailScanner customisation, or any advanced system administration help?
> Contact me at Jules at Jules.FM
>
> PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
> For all your IT requirements visit www.transtec.co.uk
>
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
> believed to be clean.
>
> --
> MailScanner mailing list
> mailscanner at lists.mailscanner.info
> http://lists.mailscanner.info/mailman/listinfo/mailscanner
>
> Before posting, read http://wiki.mailscanner.info/posting
>
> Support MailScanner development - buy the book off the website!
>
>
>    

Jules

-- 
Julian Field MEng CITP CEng
www.MailScanner.info
Buy the MailScanner book at www.MailScanner.info/store

MailScanner customisation, or any advanced system administration help?
Contact me at Jules at Jules.FM

PGP footprint: EE81 D763 3DB0 0BFD E1DC 7222 11F6 5947 1415 B654
PGP public key: http://www.jules.fm/julesfm.asc


-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.