From lololuy at freegates.be  Tue Feb 10 12:06:28 2004
From: lololuy at freegates.be (Laurent Luyckx)
Date: Tue Feb 10 03:06:46 2004
Subject: [SA-exim] disable local_scan fro bounces
Message-ID: <1076411156.747.14.camel@laurent.luyckx.net>

Hi all,

I'm actually receiving a lot of bounce due to spam with mail from of one
of my domain.

Problem is that spamassassin is launched on each of this (bad) mails and
the load on my machines are too high and I'm queuing a lot.

Is there a way to disable sa-exim for that type of message.

I believe I should do somethin in SAEximRunCond but I didn't any
suitable string yet.

Thanks for your help.

Laurent.
-- 
-=[ "When you know Debian you know Linux. When you know Red Hat, all you know is Red Hat" ]=-


From ssmeenk at freshdot.net  Tue Feb 10 13:05:02 2004
From: ssmeenk at freshdot.net (Sander Smeenk)
Date: Tue Feb 10 04:05:22 2004
Subject: [SA-exim] disable local_scan fro bounces
In-Reply-To: <1076411156.747.14.camel@laurent.luyckx.net>
References: <1076411156.747.14.camel@laurent.luyckx.net>
Message-ID: <20040210120502.GD7720@freshdot.net>

Quoting Laurent Luyckx (lololuy@freegates.be):

> Problem is that spamassassin is launched on each of this (bad) mails and
> the load on my machines are too high and I'm queuing a lot.
> Is there a way to disable sa-exim for that type of message.

If those mailerdeamon messages are the cause of your high load, there
must be a LOT of messages coming your way ;)

I don't know if this is possible off hand, you'd have to consult the
exim documentation, but you CAN pass acl_mX variables from inside exim
to sa-exim (or rather, sa-exim cann access those..)

So you can do this in your RCPT acl:

warn condition = ${if message looks like valid mail instead of mailerdaemon}
	set acl_m0 = run-sa

and in your SARunCond test for ${if eq{{$acl_m0}{run-sa}}{1}{0}}

HTH,
Sander.
-- 
| Do pilots take crash-courses?
| 1024D/08CEC94D - 34B3 3314 B146 E13C 70C8  9BDB D463 7E41 08CE C94D

From thomask at mtnns.net  Mon Feb 16 08:52:55 2004
From: thomask at mtnns.net (Thomas Kinghorn)
Date: Sun Feb 15 22:53:33 2004
Subject: [SA-exim] [OT} sa-exim-stats
Message-ID: <4625C59C329BC447AFFB52E7F8BFF2750E1F21C1@protea.int.citec.net>

Hi List.

Firstly, sorry for posting here. Its the only place i could think of posting
to.

Does anyone use sa-exim-stats to graph the log file?

If yes could someone assist me with the graphing part.

If i use the "/usr/bin/sa-exim-stats -rebuild -f
/var/spool/exim/log/mainlog" command, 
the graphs appear.

However, using the "/usr/bin/php  /usr/bin/sa-exim-stats -rrd" command from
the cron messes everything up.
either the graphs vanish or the same stats are logged, resulting in a flat
line in the graph.

Thanks

Regards, 
Tom Kinghorn
specifically stating otherwise in such correspondence.  Binding agreements
with MTN NS may only be concluded if printed in hard copy and signed by an
authorised representative of MTN NS.


From balamw at suptech.com  Tue Feb 24 11:32:44 2004
From: balamw at suptech.com (Balam Willemsen)
Date: Tue Feb 24 11:32:59 2004
Subject: [SA-exim] How to save only "suspect" notspam?
Message-ID: <288B49C9EBDEAA4286D52A5CABD38531019239@eos.suptech.com>

Hi all,
 
I'm just migrating over to sa-exim from calling spamc from the system filter in exim3 and it works great!
 
One thing I was doing before though that I can't seem to figure out how to do now is to save mail that was scored as ham, but scored over some threshold. This is really useful for learning false negatives since it saves the main in the pristine form in which it was received unlike what we get back once it has been deivered to our Exchange server.
 
I was doing this with:
 
if ("$h_X-Spam-Status:" contains "No, ") and
   ("$h_X-Spam-Level:" contains "***") 
then
   unseen save /var/archives/spam/probable/$message_id
endif

 
I tried 
 
SAnotspamSavCond: ${if and { {match {$h_X-Spam-Status:}{"No, "}} {match {$h_X-Spam-Level:}{"***"}} } {1}{0}}
 
But that doesn't seem to work. I tried escaping the *s, but that didn't help.
 
Is there any way to do this with sa-exim without resorting to a system filter?
 
Thanks!
 
Balam
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.merlins.org/archives/sa-exim/attachments/20040224/92d6f0b5/attachment.html
From marc at merlins.org  Tue Feb 24 22:57:32 2004
From: marc at merlins.org (Marc MERLIN)
Date: Tue Feb 24 22:57:33 2004
Subject: [SA-exim] sa-exim cvs with greylisting support
Message-ID: <20040225065732.GQ2347@merlins.org>

I've implemented greylisting support in sa-exim mostly via a patch to
SpamAssassin.
This implementation is actually better than regular greylisting as it only
happens for messages that SA scores in the middle (i.e. not certain it's ham
or spam)

You can find everything here:
http://marc.merlins.org/linux/exim/files/sa-exim-3.1+cvs.tar.gz

the docs and explanations are here:
http://marc.merlins.org/linux/exim/files/sa-exim-cvs/README.greylisting

My spamassassin patch is here:
http://marc.merlins.org/linux/exim/files/sa-exim-cvs/SA-greylisting.diff

I'd love feedback before I release this as sa-exim 3.2
This is the changelog BTW:
http://marc.merlins.org/linux/exim/files/sa-exim-cvs/Changelog.html


Let me know what you think or problems you find

Thanks
Marc
-- 
"A mouse is a device used to point at the xterm you want to type in" - A.S.R.
Microsoft is to operating systems & security ....
                                      .... what McDonalds is to gourmet cooking
Home page: http://marc.merlins.org/   |   Finger marc_f@merlins.org for PGP key