Search found 274 matches

by nicola.piazzi
20 Jun 2019 09:45
Forum: 3.x How-to
Topic: Uriskip, software
Replies: 6
Views: 136

Re: Uriskip, software

thank you,
by nicola.piazzi
19 Jun 2019 15:49
Forum: 3.x How-to
Topic: Uriskip, software
Replies: 6
Views: 136

Re: Uriskip, software

Yes, but what you have at line ./uriskip.sh: line 10:
: command not found
?
by nicola.piazzi
19 Jun 2019 13:07
Forum: 3.x How-to
Topic: Uriskip, software
Replies: 6
Views: 136

Re: Uriskip, software

You ran script as is or you modified it ?
by nicola.piazzi
14 Jun 2019 14:41
Forum: 3.x How-to
Topic: new Plugin [sadwl]
Replies: 3
Views: 78

Re: new Plugin [sadwl]

New release correct a bug that doenst update after user assigning score
then added table maintanence that delete older record with low hiots and no score assigned
by nicola.piazzi
13 Jun 2019 10:32
Forum: 3.x How-to
Topic: new Plugin [sadwl]
Replies: 3
Views: 78

Re: new Plugin [sadwl]

yes
by nicola.piazzi
13 Jun 2019 09:05
Forum: 3.x How-to
Topic: new Plugin [sadwl]
Replies: 3
Views: 78

new Plugin [sadwl]

sadwl is a simple plugin that i made now It create a sql table that have a list of combination fromdomain + reverse sender host domain You can see this table using a table browser in Windows connected to efa MySQL and give a bonus or penality to each domain ! This plugin is very simple to install, u...
by nicola.piazzi
22 May 2019 13:28
Forum: 3.x How-to
Topic: Refining your Scores
Replies: 0
Views: 84

Refining your Scores

efa.automasscheck.zip There is a great way to have more accurate scores ! You can partecipate in spamassassin community (https://ruleqa.spamassassin.org/) to have scores that consider also your samples and are more accurate also for you when you update official spamassassin channel. I wrote a littl...
by nicola.piazzi
21 May 2019 07:53
Forum: 3.x How-to
Topic: Training Bayes Script
Replies: 1
Views: 137

Training Bayes Script

Bayesian database is very useful to fight spam if correctly trained http://artinvoice.hu/spams/ mantain daily archive of spam This script can be put in cron and train our bayes system # bayeslearn.sh # ------------- # # Download daily spam samples from http://artinvoice.hu/spam and learn bayes # Scr...
by nicola.piazzi
17 May 2019 12:25
Forum: 3.x How-to
Topic: Uriskip, software
Replies: 6
Views: 136

Uriskip, software

Hi, I devepoped a piece of software, a sample script that create a list of most used 2nd level domains based on latest headers received most used domains are checked for URIBL one time only and saved into a .cf that is used to skip URIBL check so these domains most used are skipped and save tons of ...
by nicola.piazzi
15 May 2019 10:05
Forum: 3.x How-to
Topic: How to skip rbl check locally ?
Replies: 4
Views: 187

Re: How to skip rbl check locally ?

this cannot be done because i wrote a lot of rules / plugins that get data from outgoing emails to analyze incoming emails
i know that i can use same database for all mailservers but it will be too complex
by nicola.piazzi
15 May 2019 08:30
Forum: 3.x How-to
Topic: How to skip rbl check locally ?
Replies: 4
Views: 187

Re: How to skip rbl check locally ?

I found this solution
select count(from_domain) as a, from_domain from maillog group by from_domain order by a;
Then i take all most count domains and put into

uridnsbl_skip_domain gmail.com mrsend.com
etc etc

someone know if writing msend.com include also mail.mrsend.com
?
by nicola.piazzi
15 May 2019 08:07
Forum: 3.x How-to
Topic: How to skip rbl check locally ?
Replies: 4
Views: 187

Re: How to skip rbl check locally ?

In effect seems that RBL are skipped when come from internal network but all URIBL are done in all domains found in the email
is possible to stop uribl check when email come from internal network ?
by nicola.piazzi
14 May 2019 12:34
Forum: 3.x How-to
Topic: How to skip rbl check locally ?
Replies: 4
Views: 187

How to skip rbl check locally ?

Hi My efa receive emails from External and from internal addresses I want to skip RBL check for internal address, i put these in local.cf internal_networks 127.0.0.1 internal_networks 10.1.0.0/16 internal_networks 192.168.2.0/24 trusted_networks 127.0.0.1 trusted_networks 10.1.0.0/16 trusted_network...
by nicola.piazzi
09 May 2019 15:42
Forum: 3.x How-to
Topic: [vsender] PLUGIN
Replies: 0
Views: 86

[vsender] PLUGIN

Here vsender.zip a plugin that i made now Unzip under spamassassin dir and use instructions in init file customize vsender.pm with your banner this plugin detect if FROM email that write you is ready to accept mail on destination server sometimes is not ready because destination is greylisted and it...
by nicola.piazzi
06 May 2019 16:06
Forum: 3.x How-to
Topic: schuCheckMX, an useful plugin
Replies: 0
Views: 81

schuCheckMX, an useful plugin

This plugin uses sqlite that is included in efa so is simple to install (the only thing is to give permission so postfix user can write db file and folder that contains it) Plugin scans received emails for FROM field and have 2 scores : SCHUCHECKMX_MXRECORD give a penality if email received have a F...
by nicola.piazzi
02 May 2019 12:34
Forum: 3.x How-to
Topic: Envelope From & Spamassassin
Replies: 1
Views: 116

(solved by myself)Re: Envelope From & Spamassassin

I was writing a plugin but i found that there is already this
HEADER_FROM_DIFFERENT_DOMAINS

!!
by nicola.piazzi
30 Apr 2019 10:25
Forum: 3.x How-to
Topic: Envelope From & Spamassassin
Replies: 1
Views: 116

Envelope From & Spamassassin

sometimes happens that we receive mails that have a different FROM field in header and in envelope I make a check for spoofing my domain using header from because i cant find a way to use envelope from So when is different they came problems Is there a way to test envelope prom or a rule that tell w...
by nicola.piazzi
19 Apr 2019 16:35
Forum: 3.x How-to
Topic: Sender Verification
Replies: 1
Views: 185

Sender Verification

Postfix can do sender verification, and can mantain a cache table to avoid frequantly verifications of same address. But sender verification is too aggressive, i think that is bnot a good thing to reject unverified addresses Is there something in spamassassin so unverified can assigned a score ? A w...
by nicola.piazzi
19 Apr 2019 16:31
Forum: 3.x Bugs
Topic: Uribl Blocked also with dns recursive
Replies: 17
Views: 880

Re: Uribl Blocked also with dns recursive

Now it seems solved ,
some hour results :-)
thread0.num.queries=251792
thread0.num.cachehits=178785
thread0.num.cachemiss=73007
by nicola.piazzi
18 Apr 2019 10:23
Forum: 3.x Bugs
Topic: Uribl Blocked also with dns recursive
Replies: 17
Views: 880

Re: Uribl Blocked also with dns recursive

command to see hit % [root@EFA41 batch]# date;echo "100/$(unbound-control stats_noreset |grep total.num.queries| sed 's/.*=//')*$(unbound-control stats_noreset |grep total.num.cachehits| sed 's/.*=//')" | bc -l Thu Apr 18 12:20:41 CEST 2019 55.07517104789340933180 55% after 1 hour of run, now i conf...
by nicola.piazzi
18 Apr 2019 08:12
Forum: 3.x Bugs
Topic: Uribl Blocked also with dns recursive
Replies: 17
Views: 880

Re: Uribl Blocked also with dns recursive

Now i made these modifications : vi /etc/unbound/unbound.conf # msg-cache-size: 4m msg-cache-size: 64m # rrset-cache-size: 4m rrset-cache-size: 64m # cache-min-ttl: 0 # cache-min-ttl: 0 cache-min-ttl: 7200 # cache-max-ttl: 86400 cache-max-ttl: 172800 # infra-host-ttl: 900 infra-host-ttl: 1800 # infr...
by nicola.piazzi
17 Apr 2019 10:26
Forum: 3.x Bugs
Topic: Uribl Blocked also with dns recursive
Replies: 17
Views: 880

Re: Uribl Blocked also with dns recursive

*** Quite sure the uribl will happen again soon on your efa public IP ... Yes, this is my EFA IP because now is recursive without forwarders [root@EFA41 ~]# host -tTXT 2.0.0.127.multi.uribl.com 2.0.0.127.multi.uribl.com descriptive text "127.0.0.1 -> Query Refused. See http://uribl.com/refused.shtml...
by nicola.piazzi
17 Apr 2019 09:21
Forum: 3.x How-to
Topic: (how-to) sophossavi installation guide
Replies: 14
Views: 527

Re: (how-to) sophossavi installation guide

somewhere there is this, buit for me is ok so
by nicola.piazzi
16 Apr 2019 09:29
Forum: 3.x How-to
Topic: (how-to) sophossavi installation guide
Replies: 14
Views: 527

Re: (how-to) sophossavi installation guide

i modified report but i dont remember where

if you have echange consider to use OW plugin
by nicola.piazzi
16 Apr 2019 09:22
Forum: 3.x How-to
Topic: (how-to) sophossavi installation guide
Replies: 14
Views: 527

Re: (how-to) sophossavi installation guide

EICAR CATCH is excluded by report, you need to include it modifiyng source or wait to receive virus