From ltirkkon at niksula.hut.fi Mon Jan 12 15:58:02 2015 From: ltirkkon at niksula.hut.fi (Lauri Tirkkonen) Date: Mon, 12 Jan 2015 15:58:02 +0200 Subject: [Gross] [PATCH] rm unused declaration for getline Message-ID: <20150112135802.GB16405@kekkonen.niksula.hut.fi> Hi, gross-1.0.2 fails compilation on illumos (OmniOS r151006) due to a conflicting declaration of getline. There is no definition, however, and the function is not used in gross, so removing the declaration fixes this. -- Lauri Tirkkonen Niksula systems specialist -------------- next part -------------- >From d1b4cbb2b691aa1ec321067c9a68446f58721acc Mon Sep 17 00:00:00 2001 From: Lauri Tirkkonen Date: Mon, 12 Jan 2015 15:44:06 +0200 Subject: [PATCH] rm unused declaration for getline --- include/utils.h | 1 - 1 file changed, 1 deletion(-) diff --git a/include/utils.h b/include/utils.h index 4f78717..89e812b 100644 --- a/include/utils.h +++ b/include/utils.h @@ -39,7 +39,6 @@ int clock_gettime(clockid_t clk_id, struct timespec *tp); #endif /* ! USE_GETTIMEOFDAY */ int readline(int fd, void *vptr, size_t maxlen); -int getline(int fd, char *line, size_t maxlen); ssize_t readn(int fd, void *vptr, size_t n); ssize_t writen(int fd, const void *vptr, size_t n); ssize_t writeline(int fd, const char *line); -- 1.9.1 From eino at utu.fi Fri Jan 16 08:41:26 2015 From: eino at utu.fi (Eino Tuominen) Date: Fri, 16 Jan 2015 06:41:26 +0000 Subject: [Gross] [PATCH] rm unused declaration for getline In-Reply-To: <20150112135802.GB16405@kekkonen.niksula.hut.fi> References: <20150112135802.GB16405@kekkonen.niksula.hut.fi> Message-ID: <93615BCE-935A-4A38-AFC5-D58E39818271@utu.fi> On 12.1.2015, at 15.58, Lauri Tirkkonen > wrote: Hi, gross-1.0.2 fails compilation on illumos (OmniOS r151006) due to a conflicting declaration of getline. There is no definition, however, and the function is not used in gross, so removing the declaration fixes this. Hi Lauri, This is a known issue, specifically https://code.google.com/p/gross/issues/detail?id=81. I just fixed the code in svn trunk. Thanks! ? Eino Tuominen -------------- next part -------------- An HTML attachment was scrubbed... URL: From ltirkkon at niksula.hut.fi Mon Jan 19 13:53:46 2015 From: ltirkkon at niksula.hut.fi (Lauri Tirkkonen) Date: Mon, 19 Jan 2015 13:53:46 +0200 Subject: [Gross] [PATCH 1/3] remove extraneous 'etc/' from manpages Message-ID: <1421668428-12728-1-git-send-email-ltirkkon@niksula.hut.fi> --- man/grossd.8.in | 2 +- man/grossd.conf.5.in | 4 ++-- 2 files changed, 3 insertions(+), 3 deletions(-) diff --git a/man/grossd.8.in b/man/grossd.8.in index a3d2197..09d1468 100644 --- a/man/grossd.8.in +++ b/man/grossd.8.in @@ -57,7 +57,7 @@ Run \fBgrossd\fP on foreground without daemonizing the process. \fBgrossd\fP will output to terminal instead of using syslog. .IP "\fB\-f\fP \fIconfig\fP" 4 Specifies the name of the configuration file. The default is -\fI at sysconfdir@/etc/grossd.conf\fP +\fI at sysconfdir@/grossd.conf\fP .IP "\fB\-h\fP" 4 Output short usage information and exit. .IP "\fB\-n\fP" 4 diff --git a/man/grossd.conf.5.in b/man/grossd.conf.5.in index ace2206..4553666 100644 --- a/man/grossd.conf.5.in +++ b/man/grossd.conf.5.in @@ -4,9 +4,9 @@ .SH "NAME" \fBgrossd.conf\fP \- Greylisting of Suspicious Sources daemon configuration file .SH "SYNOPSIS" -\fI at sysconfdir@/etc/grossd.conf\fP +\fI at sysconfdir@/grossd.conf\fP .SH "DESCRIPTION" -\fIgrossd\fP\|(8) reads configuration data from \fI at sysconfdir@/etc/grossd.conf\fP +\fIgrossd\fP\|(8) reads configuration data from \fI at sysconfdir@/grossd.conf\fP (or the file specified with \fB\-f\fP on the command line). An example configuration file is installed by default. You have to set some configuration options in order to get \fIgrossd\fP\|(8) running in -- 1.9.1 From ltirkkon at niksula.hut.fi Mon Jan 19 13:53:47 2015 From: ltirkkon at niksula.hut.fi (Lauri Tirkkonen) Date: Mon, 19 Jan 2015 13:53:47 +0200 Subject: [Gross] [PATCH 2/3] document actual default for stat_type In-Reply-To: <1421668428-12728-1-git-send-email-ltirkkon@niksula.hut.fi> References: <1421668428-12728-1-git-send-email-ltirkkon@niksula.hut.fi> Message-ID: <1421668428-12728-2-git-send-email-ltirkkon@niksula.hut.fi> Documentation differs from the default in include/conf.h, so fix the documentation. --- man/grossd.conf.5.in | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/man/grossd.conf.5.in b/man/grossd.conf.5.in index 4553666..b8f04d0 100644 --- a/man/grossd.conf.5.in +++ b/man/grossd.conf.5.in @@ -152,7 +152,7 @@ log processing delay statistics. .PD .PP .RS 4 -Default is `none'. Setting both `none' and `full' +Default is `delay', `status'. Setting both `none' and `full' is undefined. .RE .IP "\fBstat_interval\fP" 4 -- 1.9.1 From ltirkkon at niksula.hut.fi Mon Jan 19 13:53:48 2015 From: ltirkkon at niksula.hut.fi (Lauri Tirkkonen) Date: Mon, 19 Jan 2015 13:53:48 +0200 Subject: [Gross] [PATCH 3/3] fix setting log_level In-Reply-To: <1421668428-12728-1-git-send-email-ltirkkon@niksula.hut.fi> References: <1421668428-12728-1-git-send-email-ltirkkon@niksula.hut.fi> Message-ID: <1421668428-12728-3-git-send-email-ltirkkon@niksula.hut.fi> There is a default setting for log_level in include/conf.h, so it will never get changed from that default even if set otherwise in the config file. Fix below. --- src/gross.c | 3 +-- 1 file changed, 1 insertion(+), 2 deletions(-) diff --git a/src/gross.c b/src/gross.c index 97a8311..dae24c5 100644 --- a/src/gross.c +++ b/src/gross.c @@ -429,8 +429,7 @@ configure_grossd(configlist_t *config) if (strcmp(cp->name, "log_method") == 0) { if (strcmp(cp->value, "syslog") == 0) ctx->config.flags |= FLG_SYSLOG; - } else if (strcmp(cp->name, "log_level") == 0 && ctx->config.loglevel == 0) { - /* only set loglevel if it's still unset */ + } else if (strcmp(cp->name, "log_level") == 0) { if (strcmp(cp->value, "debug") == 0) ctx->config.loglevel = GLOG_DEBUG; else if (strcmp(cp->value, "info") == 0) -- 1.9.1 From nichot20 at yahoo.com Thu Jul 9 13:11:02 2015 From: nichot20 at yahoo.com (tim nicholson) Date: Thu, 09 Jul 2015 11:11:02 +0100 Subject: [Gross] Logging inormation. Message-ID: <559E48B6.2020203@yahoo.com> Just trying to get up to speed on gross, and understand the logging information. I have looked through the archives to no avail so any help appreciated. A typical log line will contain:- a=trust d=6 w=0 c=127.0.0.1 s=someone at somewhere r=other at elsewhere h=[178.63.43.86] c,s,r and h are self explanatory, but I'm not sure about d and w w could be weight but d I am clueless on. a is obviously the response, but I am unclear what moves an entry from match to trust (if indeed that happens and if not what causes a trust value to occur). AFAIK an unknown tuple starts as "greylist" and a subsequent occurrence returns "match". I presume that either of those correspond to the "OK" response referred to in the README, while "greylist" corresponds to the GREY response. Any enlightenment appreciated. -- Tim. Key Fingerprint 38CF DB09 3ED0 F607 8B67 6CED 0C0B FC44 8B0B FC83 From eino at utu.fi Thu Jul 9 16:56:50 2015 From: eino at utu.fi (Eino Tuominen) Date: Thu, 09 Jul 2015 13:56:50 +0000 Subject: [Gross] Logging inormation. In-Reply-To: <559E48B6.2020203@yahoo.com> References: <559E48B6.2020203@yahoo.com> Message-ID: <0F550B18D4C72142B1A18DF7402169C751F85219@exch-mbx-03.utu.fi> Hi, The codes are: a = action, d = delay in milliseconds, time between receiving the request and sending out the response, w = weight, the total weight of all the matched tests, c = client, s = sender, r = recipient, h = host Trust means that we have not found anything suspicious enough to prevent receiving the mail. Match means a match from the bloom filter, that is we have seen this triplet before and should accept the mail. Greylist means we should greylist this sender and Block means that the sender is suspicous enough to be blocked completely. -- Eino Tuominen -----Original Message----- From: gross-bounces at lists.utu.fi [mailto:gross-bounces at lists.utu.fi] On Behalf Of tim nicholson Sent: 9. hein?kuuta 2015 13:11 To: gross at lists.utu.fi Subject: [Gross] Logging inormation. Just trying to get up to speed on gross, and understand the logging information. I have looked through the archives to no avail so any help appreciated. A typical log line will contain:- a=trust d=6 w=0 c=127.0.0.1 s=someone at somewhere r=other at elsewhere h=[178.63.43.86] c,s,r and h are self explanatory, but I'm not sure about d and w w could be weight but d I am clueless on. a is obviously the response, but I am unclear what moves an entry from match to trust (if indeed that happens and if not what causes a trust value to occur). AFAIK an unknown tuple starts as "greylist" and a subsequent occurrence returns "match". I presume that either of those correspond to the "OK" response referred to in the README, while "greylist" corresponds to the GREY response. Any enlightenment appreciated. -- Tim. Key Fingerprint 38CF DB09 3ED0 F607 8B67 6CED 0C0B FC44 8B0B FC83 _______________________________________________ Gross mailing list Gross at lists.utu.fi https://lists.utu.fi/mailman/listinfo/gross From nichot20 at yahoo.com Thu Jul 9 17:35:42 2015 From: nichot20 at yahoo.com (tim nicholson) Date: Thu, 09 Jul 2015 15:35:42 +0100 Subject: [Gross] Logging inormation. In-Reply-To: <0F550B18D4C72142B1A18DF7402169C751F85219@exch-mbx-03.utu.fi> References: <559E48B6.2020203@yahoo.com> <0F550B18D4C72142B1A18DF7402169C751F85219@exch-mbx-03.utu.fi> Message-ID: <559E86BE.5090305@yahoo.com> On 09/07/15 14:56, Eino Tuominen wrote: > Hi, > > The codes are: > > a = action, > d = delay in milliseconds, time between receiving the request and sending out the response, > w = weight, the total weight of all the matched tests, > c = client, > s = sender, > r = recipient, > h = host > > Trust means that we have not found anything suspicious enough to prevent receiving the mail. Match means a match from the bloom filter, that is we have seen this triplet before and should accept the mail. Greylist means we should greylist this sender and Block means that the sender is suspicous enough to be blocked completely. > Thanks for that. Presumably the m= is the dnsbl host in which a match was made? But what is the +n suffix, does that imply +n other matches from other dnsbl hosts, the weighting seems to increase, but by one less than I expected. -- Tim. Key Fingerprint 38CF DB09 3ED0 F607 8B67 6CED 0C0B FC44 8B0B FC83 From eino at utu.fi Thu Jul 9 21:03:38 2015 From: eino at utu.fi (Eino Tuominen) Date: Thu, 09 Jul 2015 18:03:38 +0000 Subject: [Gross] Logging inormation. In-Reply-To: <559E86BE.5090305@yahoo.com> References: <559E48B6.2020203@yahoo.com> <0F550B18D4C72142B1A18DF7402169C751F85219@exch-mbx-03.utu.fi> <559E86BE.5090305@yahoo.com> Message-ID: <900E47E1-E9B0-4A48-94A8-BD7190F09421@utu.fi> No, m=test+n means "test" has matched with a weight of n. There is an m-record per every matched test. -- Eino Tuominen > tim nicholson kirjoitti 9.7.2015 kello 17.35: > >> On 09/07/15 14:56, Eino Tuominen wrote: >> Hi, >> >> The codes are: >> >> a = action, >> d = delay in milliseconds, time between receiving the request and sending out the response, >> w = weight, the total weight of all the matched tests, >> c = client, >> s = sender, >> r = recipient, >> h = host >> >> Trust means that we have not found anything suspicious enough to prevent receiving the mail. Match means a match from the bloom filter, that is we have seen this triplet before and should accept the mail. Greylist means we should greylist this sender and Block means that the sender is suspicous enough to be blocked completely. > > Thanks for that. > > Presumably the m= is the dnsbl host in which a match was made? But what > is the +n suffix, does that imply +n other matches from other dnsbl > hosts, the weighting seems to increase, but by one less than I expected. > > -- > Tim. > Key Fingerprint 38CF DB09 3ED0 F607 8B67 6CED 0C0B FC44 8B0B FC83 From nichot20 at yahoo.com Fri Jul 10 09:47:40 2015 From: nichot20 at yahoo.com (tim nicholson) Date: Fri, 10 Jul 2015 07:47:40 +0100 Subject: [Gross] Function of some config options. Message-ID: <559F6A8C.3070805@yahoo.com> Trying to understand one or two config options in grossd.conf as I find the explanations in the sample a little terse. grey_delay in this context what is meant by "kept on the greylist"? Surely the entry is put in the bloom filter from which it cannot be removed, so this is some other list? update Presumably the function of using 'always' is to continuously re-insert a triplet back into the bloom filter so that it never 'drops out' as the filters are cycled round. Thus sources that were originally 'trusted' due to no dnsbl matches eventually become 'matched' in the same way as greylist inserted values? -- Tim. Key Fingerprint 38CF DB09 3ED0 F607 8B67 6CED 0C0B FC44 8B0B FC83 From eino at utu.fi Fri Jul 10 11:31:46 2015 From: eino at utu.fi (Eino Tuominen) Date: Fri, 10 Jul 2015 08:31:46 +0000 Subject: [Gross] Function of some config options. In-Reply-To: <559F6A8C.3070805@yahoo.com> References: <559F6A8C.3070805@yahoo.com> Message-ID: <0F550B18D4C72142B1A18DF7402169C751F893FF@exch-mbx-03.utu.fi> Hi, grey_delay from the wiki page: "grey_delay is the number of seconds between accepting the second sending attempt after greylisting. The default value is 10, increasing the delay causes the amortized memory requirement to grow linearly. " This is implemented as an internal message queue. There is a thread that listens to the queue and inserts items from the queue into the bloom filter. The grey_delay is the the time the messages stand in the queue. update style is better left default. I think the 'always' style was before the possibility of blocking senders. If update=grey, bloom filter is updated if there was a match from the filter or the sender should be greylisted. The documentation could be better on that one, I admit. -- Eino Tuominen -----Original Message----- From: gross-bounces at lists.utu.fi [mailto:gross-bounces at lists.utu.fi] On Behalf Of tim nicholson Sent: 10. hein?kuuta 2015 9:48 To: gross at lists.utu.fi Subject: [Gross] Function of some config options. Trying to understand one or two config options in grossd.conf as I find the explanations in the sample a little terse. grey_delay in this context what is meant by "kept on the greylist"? Surely the entry is put in the bloom filter from which it cannot be removed, so this is some other list? update Presumably the function of using 'always' is to continuously re-insert a triplet back into the bloom filter so that it never 'drops out' as the filters are cycled round. Thus sources that were originally 'trusted' due to no dnsbl matches eventually become 'matched' in the same way as greylist inserted values? -- Tim. Key Fingerprint 38CF DB09 3ED0 F607 8B67 6CED 0C0B FC44 8B0B FC83 _______________________________________________ Gross mailing list Gross at lists.utu.fi https://lists.utu.fi/mailman/listinfo/gross From nichot20 at yahoo.com Fri Jul 10 11:46:37 2015 From: nichot20 at yahoo.com (tim nicholson) Date: Fri, 10 Jul 2015 09:46:37 +0100 Subject: [Gross] Function of some config options. In-Reply-To: <0F550B18D4C72142B1A18DF7402169C751F893FF@exch-mbx-03.utu.fi> References: <559F6A8C.3070805@yahoo.com> <0F550B18D4C72142B1A18DF7402169C751F893FF@exch-mbx-03.utu.fi> Message-ID: <559F866D.8080701@yahoo.com> On 10/07/15 09:31, Eino Tuominen wrote: > Hi, > > grey_delay from the wiki page: "grey_delay is the number of seconds between accepting the second sending attempt after greylisting. The default value is 10, increasing the delay causes the amortized memory requirement to grow linearly. " > Sorry, must have missed this, I looked at the README FAQ and 'complete configuration' pages to no avail... > This is implemented as an internal message queue. There is a thread that listens to the queue and inserts items from the queue into the bloom filter. The grey_delay is the the time the messages stand in the queue. > Ahhh, makes sense. > update style is better left default. I think the 'always' style was before the possibility of blocking senders. If update=grey, bloom filter is updated if there was a match from the filter or the sender should be greylisted. The documentation could be better on that one, I admit. > So matches are refreshed anyway, so I can see that 'always' is a bit superfluous then. Thanks for clarifying -- Tim. Key Fingerprint 38CF DB09 3ED0 F607 8B67 6CED 0C0B FC44 8B0B FC83 From nichot20 at yahoo.com Mon Jul 13 11:12:17 2015 From: nichot20 at yahoo.com (tim nicholson) Date: Mon, 13 Jul 2015 09:12:17 +0100 Subject: [Gross] Accumulative weighting and grey_delay query Message-ID: <55A372E1.9070806@yahoo.com> If a query of the configured dnsbl servers results in multiple hits, so that the weighting is the sum of those hits. Do the responses from the dnsbl servers have to come within the grey_delay window to add to the score? Or in other words, if there is some latency on the dnsbl responses, would a more accurate weigthing be obtained by increasing the grey_delay or does the bloom filter get updated by late responses? -- Tim. Key Fingerprint 38CF DB09 3ED0 F607 8B67 6CED 0C0B FC44 8B0B FC83 From nichot20 at yahoo.com Tue Jul 14 14:48:02 2015 From: nichot20 at yahoo.com (tim nicholson) Date: Tue, 14 Jul 2015 12:48:02 +0100 Subject: [Gross] Python hooks Message-ID: <55A4F6F2.6010700@yahoo.com> Did the python hooks (issue 30) accepted for milestone 1.0 ever make it into the code-base? I cannot see any reference to it anywhere. -- Tim. From eino at utu.fi Tue Jul 14 16:12:14 2015 From: eino at utu.fi (Eino Tuominen) Date: Tue, 14 Jul 2015 13:12:14 +0000 Subject: [Gross] Python hooks In-Reply-To: <55A4F6F2.6010700@yahoo.com> References: <55A4F6F2.6010700@yahoo.com> Message-ID: <1A0EA357-8FA5-4ED0-BB54-1FA751BA419A@utu.fi> No, that is not implemented at all. -- Eino Tuominen > tim nicholson kirjoitti 14.7.2015 kello 14.48: > > Did the python hooks (issue 30) accepted for milestone 1.0 ever make it > into the code-base? > > I cannot see any reference to it anywhere. > > -- > Tim. > _______________________________________________ > Gross mailing list > Gross at lists.utu.fi > https://lists.utu.fi/mailman/listinfo/gross From tja.gross at tja-server.de Thu Sep 17 00:21:05 2015 From: tja.gross at tja-server.de (tja.gross at tja-server.de) Date: Wed, 16 Sep 2015 23:21:05 +0200 Subject: [Gross] Changing the rating / trust of a sender Message-ID: <55F9DD41.7080302@tja-server.de> Hello together, i am new :) Since some time, i get more and more spam. The only anti-spam tool i use, is grossd. I think, i get more "trust" than i should: Sep 16 17:05:03 euve35947 grossd: #6b935700: a=trust d=3442 w=0 c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] Sep 16 17:06:58 euve35947 grossd: #6b935700: a=trust d=5000 w=0 c=168.100.1.3 s=XXX r=XXX h=camomile.cloud9.net Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com Sep 16 17:51:32 euve35947 grossd: #6bc38700: a=trust d=782 w=0 c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com Sep 16 18:00:12 euve35947 grossd: #6b935700: a=trust d=2817 w=0 c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com Sep 16 18:28:29 euve35947 grossd: #6be3a700: a=trust d=4380 w=0 c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] Sep 16 18:30:27 euve35947 grossd: #6be3a700: a=trust d=4382 w=0 c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com Sep 16 19:01:36 euve35947 grossd: #6ba36700: a=trust d=5000 w=0 c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com Sep 16 19:15:41 euve35947 grossd: #6ba36700: a=trust d=3440 w=0 c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com Sep 16 19:36:15 euve35947 grossd: #6be3a700: a=greylist d=13 w=1 c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt m=cbl.abuseat.org+1 Sep 16 19:36:17 euve35947 grossd: #6be3a700: a=greylist d=0 w=2 c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt m=bl.spamcop.net+2 Sep 16 19:41:21 euve35947 grossd: #6be3a700: a=trust d=5000 w=0 c=212.227.15.3 s=XXX r=XXX h=mout.web.de Is there any way to reduce trust of a sender, recipient or client? I cannot find any documentation - if you could point me to something? That would be very nice ;-) From tja.gross at tja-server.de Thu Sep 17 00:50:32 2015 From: tja.gross at tja-server.de (tja.gross at tja-server.de) Date: Wed, 16 Sep 2015 23:50:32 +0200 Subject: [Gross] Changing the rating / trust of a sender In-Reply-To: <55F9DD41.7080302@tja-server.de> References: <55F9DD41.7080302@tja-server.de> Message-ID: <55F9E428.7060009@tja-server.de> My configuration: root at euve35947:~# grep -v ^\# /etc/grossd.conf | grep -v ^$ protocol = postfix stat_type full stat_interval = 3600 check = dnsbl check = rhsbl dnsbl = bl.spamcop.net;2 dnsbl = cbl.abuseat.org dnsbl = dnsbl.sorbs.net rhsbl = rhsbl.sorbs.net No much :-) Any help or idea is appreciated ... tja.gross at tja-server.de wrote: > Hello together, > i am new :) > > Since some time, i get more and more spam. > > The only anti-spam tool i use, is grossd. > > I think, i get more "trust" than i should: > > Sep 16 17:05:03 euve35947 grossd: #6b935700: a=trust d=3442 w=0 > c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] > Sep 16 17:06:58 euve35947 grossd: #6b935700: a=trust d=5000 w=0 > c=168.100.1.3 s=XXX r=XXX h=camomile.cloud9.net > Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 > c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > Sep 16 17:51:32 euve35947 grossd: #6bc38700: a=trust d=782 w=0 > c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com > Sep 16 18:00:12 euve35947 grossd: #6b935700: a=trust d=2817 w=0 > c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > Sep 16 18:28:29 euve35947 grossd: #6be3a700: a=trust d=4380 w=0 > c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] > Sep 16 18:30:27 euve35947 grossd: #6be3a700: a=trust d=4382 w=0 > c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > Sep 16 19:01:36 euve35947 grossd: #6ba36700: a=trust d=5000 w=0 > c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com > Sep 16 19:15:41 euve35947 grossd: #6ba36700: a=trust d=3440 w=0 > c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > Sep 16 19:36:15 euve35947 grossd: #6be3a700: a=greylist d=13 w=1 > c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt > m=cbl.abuseat.org+1 > Sep 16 19:36:17 euve35947 grossd: #6be3a700: a=greylist d=0 w=2 > c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt > m=bl.spamcop.net+2 > Sep 16 19:41:21 euve35947 grossd: #6be3a700: a=trust d=5000 w=0 > c=212.227.15.3 s=XXX r=XXX h=mout.web.de > > > Is there any way to reduce trust of a sender, recipient or client? > > > I cannot find any documentation - if you could point me to something? > That would be very nice ;-) > > > _______________________________________________ > Gross mailing list > Gross at lists.utu.fi > https://lists.utu.fi/mailman/listinfo/gross > From eino at utu.fi Thu Sep 17 07:52:08 2015 From: eino at utu.fi (Eino Tuominen) Date: Thu, 17 Sep 2015 04:52:08 +0000 Subject: [Gross] Changing the rating / trust of a sender In-Reply-To: <55F9E428.7060009@tja-server.de> References: <55F9DD41.7080302@tja-server.de> <55F9E428.7060009@tja-server.de> Message-ID: <4d73a75481df4479ad588052c5d05d51@EX13-01.utu.fi> Hello, Trust means that gross has not found the source suspicious. Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com For example the line above tells us that not one of the checks has matched. -- Eino Tuominen -----Original Message----- From: gross-bounces at lists.utu.fi [mailto:gross-bounces at lists.utu.fi] On Behalf Of tja.gross at tja-server.de Sent: 17. syyskuuta 2015 0:51 To: gross at lists.utu.fi Subject: Re: [Gross] Changing the rating / trust of a sender My configuration: root at euve35947:~# grep -v ^\# /etc/grossd.conf | grep -v ^$ protocol = postfix stat_type full stat_interval = 3600 check = dnsbl check = rhsbl dnsbl = bl.spamcop.net;2 dnsbl = cbl.abuseat.org dnsbl = dnsbl.sorbs.net rhsbl = rhsbl.sorbs.net No much :-) Any help or idea is appreciated ... tja.gross at tja-server.de wrote: > Hello together, > i am new :) > > Since some time, i get more and more spam. > > The only anti-spam tool i use, is grossd. > > I think, i get more "trust" than i should: > > Sep 16 17:05:03 euve35947 grossd: #6b935700: a=trust d=3442 w=0 > c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] > Sep 16 17:06:58 euve35947 grossd: #6b935700: a=trust d=5000 w=0 > c=168.100.1.3 s=XXX r=XXX h=camomile.cloud9.net > Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 > c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > Sep 16 17:51:32 euve35947 grossd: #6bc38700: a=trust d=782 w=0 > c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com > Sep 16 18:00:12 euve35947 grossd: #6b935700: a=trust d=2817 w=0 > c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > Sep 16 18:28:29 euve35947 grossd: #6be3a700: a=trust d=4380 w=0 > c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] > Sep 16 18:30:27 euve35947 grossd: #6be3a700: a=trust d=4382 w=0 > c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > Sep 16 19:01:36 euve35947 grossd: #6ba36700: a=trust d=5000 w=0 > c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com > Sep 16 19:15:41 euve35947 grossd: #6ba36700: a=trust d=3440 w=0 > c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > Sep 16 19:36:15 euve35947 grossd: #6be3a700: a=greylist d=13 w=1 > c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt > m=cbl.abuseat.org+1 > Sep 16 19:36:17 euve35947 grossd: #6be3a700: a=greylist d=0 w=2 > c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt > m=bl.spamcop.net+2 > Sep 16 19:41:21 euve35947 grossd: #6be3a700: a=trust d=5000 w=0 > c=212.227.15.3 s=XXX r=XXX h=mout.web.de > > > Is there any way to reduce trust of a sender, recipient or client? > > > I cannot find any documentation - if you could point me to something? > That would be very nice ;-) > > > _______________________________________________ > Gross mailing list > Gross at lists.utu.fi > https://lists.utu.fi/mailman/listinfo/gross > _______________________________________________ Gross mailing list Gross at lists.utu.fi https://lists.utu.fi/mailman/listinfo/gross From tja.gross at tja-server.de Thu Sep 17 09:31:34 2015 From: tja.gross at tja-server.de (tja) Date: Thu, 17 Sep 2015 08:31:34 +0200 Subject: [Gross] Changing the rating / trust of a sender In-Reply-To: <4d73a75481df4479ad588052c5d05d51@EX13-01.utu.fi> References: <55F9DD41.7080302@tja-server.de> <55F9E428.7060009@tja-server.de> <4d73a75481df4479ad588052c5d05d51@EX13-01.utu.fi> Message-ID: Hello Eino, i know. And this is what i wanted to chance. I know exactly which of those tuples are spam, so i wanted to give them less trust. As i read your answer, it seems this is not possible? Von meinem iPhone gesendet > Am 17.09.2015 um 06:52 schrieb Eino Tuominen : > > Hello, > > Trust means that gross has not found the source suspicious. > > Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > > For example the line above tells us that not one of the checks has matched. > > -- > Eino Tuominen > > > -----Original Message----- > From: gross-bounces at lists.utu.fi [mailto:gross-bounces at lists.utu.fi] On Behalf Of tja.gross at tja-server.de > Sent: 17. syyskuuta 2015 0:51 > To: gross at lists.utu.fi > Subject: Re: [Gross] Changing the rating / trust of a sender > > My configuration: > > root at euve35947:~# grep -v ^\# /etc/grossd.conf | grep -v ^$ > protocol = postfix > stat_type full > stat_interval = 3600 > check = dnsbl > check = rhsbl > dnsbl = bl.spamcop.net;2 > dnsbl = cbl.abuseat.org > dnsbl = dnsbl.sorbs.net > rhsbl = rhsbl.sorbs.net > > No much :-) > > Any help or idea is appreciated ... > > tja.gross at tja-server.de wrote: >> Hello together, >> i am new :) >> >> Since some time, i get more and more spam. >> >> The only anti-spam tool i use, is grossd. >> >> I think, i get more "trust" than i should: >> >> Sep 16 17:05:03 euve35947 grossd: #6b935700: a=trust d=3442 w=0 >> c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] >> Sep 16 17:06:58 euve35947 grossd: #6b935700: a=trust d=5000 w=0 >> c=168.100.1.3 s=XXX r=XXX h=camomile.cloud9.net >> Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 >> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> Sep 16 17:51:32 euve35947 grossd: #6bc38700: a=trust d=782 w=0 >> c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com >> Sep 16 18:00:12 euve35947 grossd: #6b935700: a=trust d=2817 w=0 >> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> Sep 16 18:28:29 euve35947 grossd: #6be3a700: a=trust d=4380 w=0 >> c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] >> Sep 16 18:30:27 euve35947 grossd: #6be3a700: a=trust d=4382 w=0 >> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> Sep 16 19:01:36 euve35947 grossd: #6ba36700: a=trust d=5000 w=0 >> c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com >> Sep 16 19:15:41 euve35947 grossd: #6ba36700: a=trust d=3440 w=0 >> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> Sep 16 19:36:15 euve35947 grossd: #6be3a700: a=greylist d=13 w=1 >> c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt >> m=cbl.abuseat.org+1 >> Sep 16 19:36:17 euve35947 grossd: #6be3a700: a=greylist d=0 w=2 >> c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt >> m=bl.spamcop.net+2 >> Sep 16 19:41:21 euve35947 grossd: #6be3a700: a=trust d=5000 w=0 >> c=212.227.15.3 s=XXX r=XXX h=mout.web.de >> >> >> Is there any way to reduce trust of a sender, recipient or client? >> >> >> I cannot find any documentation - if you could point me to something? >> That would be very nice ;-) >> >> >> _______________________________________________ >> Gross mailing list >> Gross at lists.utu.fi >> https://lists.utu.fi/mailman/listinfo/gross > > _______________________________________________ > Gross mailing list > Gross at lists.utu.fi > https://lists.utu.fi/mailman/listinfo/gross > _______________________________________________ > Gross mailing list > Gross at lists.utu.fi > https://lists.utu.fi/mailman/listinfo/gross From eino at utu.fi Thu Sep 17 10:55:23 2015 From: eino at utu.fi (Eino Tuominen) Date: Thu, 17 Sep 2015 07:55:23 +0000 Subject: [Gross] Changing the rating / trust of a sender In-Reply-To: References: <55F9DD41.7080302@tja-server.de> <55F9E428.7060009@tja-server.de> <4d73a75481df4479ad588052c5d05d51@EX13-01.utu.fi> Message-ID: <9010865b7b734d5b8587370fa665ed35@EX13-01.utu.fi> Not with gross. Gross only deals with the reputation of the senders, and if the reputation is OK the source is trusted. -----Original Message----- From: tja [mailto:tja.gross at tja-server.de] Sent: 17. syyskuuta 2015 9:32 To: Eino Tuominen Cc: tja.gross at tja-server.de; gross at lists.utu.fi Subject: Re: [Gross] Changing the rating / trust of a sender Hello Eino, i know. And this is what i wanted to chance. I know exactly which of those tuples are spam, so i wanted to give them less trust. As i read your answer, it seems this is not possible? Von meinem iPhone gesendet > Am 17.09.2015 um 06:52 schrieb Eino Tuominen : > > Hello, > > Trust means that gross has not found the source suspicious. > > Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com > > For example the line above tells us that not one of the checks has matched. > > -- > Eino Tuominen > > > -----Original Message----- > From: gross-bounces at lists.utu.fi [mailto:gross-bounces at lists.utu.fi] On Behalf Of tja.gross at tja-server.de > Sent: 17. syyskuuta 2015 0:51 > To: gross at lists.utu.fi > Subject: Re: [Gross] Changing the rating / trust of a sender > > My configuration: > > root at euve35947:~# grep -v ^\# /etc/grossd.conf | grep -v ^$ > protocol = postfix > stat_type full > stat_interval = 3600 > check = dnsbl > check = rhsbl > dnsbl = bl.spamcop.net;2 > dnsbl = cbl.abuseat.org > dnsbl = dnsbl.sorbs.net > rhsbl = rhsbl.sorbs.net > > No much :-) > > Any help or idea is appreciated ... > > tja.gross at tja-server.de wrote: >> Hello together, >> i am new :) >> >> Since some time, i get more and more spam. >> >> The only anti-spam tool i use, is grossd. >> >> I think, i get more "trust" than i should: >> >> Sep 16 17:05:03 euve35947 grossd: #6b935700: a=trust d=3442 w=0 >> c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] >> Sep 16 17:06:58 euve35947 grossd: #6b935700: a=trust d=5000 w=0 >> c=168.100.1.3 s=XXX r=XXX h=camomile.cloud9.net >> Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 >> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> Sep 16 17:51:32 euve35947 grossd: #6bc38700: a=trust d=782 w=0 >> c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com >> Sep 16 18:00:12 euve35947 grossd: #6b935700: a=trust d=2817 w=0 >> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> Sep 16 18:28:29 euve35947 grossd: #6be3a700: a=trust d=4380 w=0 >> c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] >> Sep 16 18:30:27 euve35947 grossd: #6be3a700: a=trust d=4382 w=0 >> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> Sep 16 19:01:36 euve35947 grossd: #6ba36700: a=trust d=5000 w=0 >> c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com >> Sep 16 19:15:41 euve35947 grossd: #6ba36700: a=trust d=3440 w=0 >> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> Sep 16 19:36:15 euve35947 grossd: #6be3a700: a=greylist d=13 w=1 >> c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt >> m=cbl.abuseat.org+1 >> Sep 16 19:36:17 euve35947 grossd: #6be3a700: a=greylist d=0 w=2 >> c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt >> m=bl.spamcop.net+2 >> Sep 16 19:41:21 euve35947 grossd: #6be3a700: a=trust d=5000 w=0 >> c=212.227.15.3 s=XXX r=XXX h=mout.web.de >> >> >> Is there any way to reduce trust of a sender, recipient or client? >> >> >> I cannot find any documentation - if you could point me to something? >> That would be very nice ;-) >> >> >> _______________________________________________ >> Gross mailing list >> Gross at lists.utu.fi >> https://lists.utu.fi/mailman/listinfo/gross > > _______________________________________________ > Gross mailing list > Gross at lists.utu.fi > https://lists.utu.fi/mailman/listinfo/gross > _______________________________________________ > Gross mailing list > Gross at lists.utu.fi > https://lists.utu.fi/mailman/listinfo/gross From tja.gross at tja-server.de Thu Sep 17 12:00:42 2015 From: tja.gross at tja-server.de (tja) Date: Thu, 17 Sep 2015 11:00:42 +0200 Subject: [Gross] Changing the rating / trust of a sender In-Reply-To: <9010865b7b734d5b8587370fa665ed35@EX13-01.utu.fi> References: <55F9DD41.7080302@tja-server.de> <55F9E428.7060009@tja-server.de> <4d73a75481df4479ad588052c5d05d51@EX13-01.utu.fi> <9010865b7b734d5b8587370fa665ed35@EX13-01.utu.fi> Message-ID: <72EF0199-C995-41A0-B3DF-E41277FC38EE@tja-server.de> Sad thing :) That would have great opportunities ... So, to better the greylisting, one would have to run an own dnsbl server - or change grossd to also look into a local file or database Von meinem iPhone gesendet > Am 17.09.2015 um 09:55 schrieb Eino Tuominen : > > Not with gross. Gross only deals with the reputation of the senders, and if the reputation is OK the source is trusted. > > -----Original Message----- > From: tja [mailto:tja.gross at tja-server.de] > Sent: 17. syyskuuta 2015 9:32 > To: Eino Tuominen > Cc: tja.gross at tja-server.de; gross at lists.utu.fi > Subject: Re: [Gross] Changing the rating / trust of a sender > > Hello Eino, > i know. > > And this is what i wanted to chance. > I know exactly which of those tuples are spam, so i wanted to give them less trust. > > As i read your answer, it seems this is not possible? > > > Von meinem iPhone gesendet > >> Am 17.09.2015 um 06:52 schrieb Eino Tuominen : >> >> Hello, >> >> Trust means that gross has not found the source suspicious. >> >> Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> >> For example the line above tells us that not one of the checks has matched. >> >> -- >> Eino Tuominen >> >> >> -----Original Message----- >> From: gross-bounces at lists.utu.fi [mailto:gross-bounces at lists.utu.fi] On Behalf Of tja.gross at tja-server.de >> Sent: 17. syyskuuta 2015 0:51 >> To: gross at lists.utu.fi >> Subject: Re: [Gross] Changing the rating / trust of a sender >> >> My configuration: >> >> root at euve35947:~# grep -v ^\# /etc/grossd.conf | grep -v ^$ >> protocol = postfix >> stat_type full >> stat_interval = 3600 >> check = dnsbl >> check = rhsbl >> dnsbl = bl.spamcop.net;2 >> dnsbl = cbl.abuseat.org >> dnsbl = dnsbl.sorbs.net >> rhsbl = rhsbl.sorbs.net >> >> No much :-) >> >> Any help or idea is appreciated ... >> >> tja.gross at tja-server.de wrote: >>> Hello together, >>> i am new :) >>> >>> Since some time, i get more and more spam. >>> >>> The only anti-spam tool i use, is grossd. >>> >>> I think, i get more "trust" than i should: >>> >>> Sep 16 17:05:03 euve35947 grossd: #6b935700: a=trust d=3442 w=0 >>> c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] >>> Sep 16 17:06:58 euve35947 grossd: #6b935700: a=trust d=5000 w=0 >>> c=168.100.1.3 s=XXX r=XXX h=camomile.cloud9.net >>> Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 >>> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >>> Sep 16 17:51:32 euve35947 grossd: #6bc38700: a=trust d=782 w=0 >>> c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com >>> Sep 16 18:00:12 euve35947 grossd: #6b935700: a=trust d=2817 w=0 >>> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >>> Sep 16 18:28:29 euve35947 grossd: #6be3a700: a=trust d=4380 w=0 >>> c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] >>> Sep 16 18:30:27 euve35947 grossd: #6be3a700: a=trust d=4382 w=0 >>> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >>> Sep 16 19:01:36 euve35947 grossd: #6ba36700: a=trust d=5000 w=0 >>> c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com >>> Sep 16 19:15:41 euve35947 grossd: #6ba36700: a=trust d=3440 w=0 >>> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >>> Sep 16 19:36:15 euve35947 grossd: #6be3a700: a=greylist d=13 w=1 >>> c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt >>> m=cbl.abuseat.org+1 >>> Sep 16 19:36:17 euve35947 grossd: #6be3a700: a=greylist d=0 w=2 >>> c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt >>> m=bl.spamcop.net+2 >>> Sep 16 19:41:21 euve35947 grossd: #6be3a700: a=trust d=5000 w=0 >>> c=212.227.15.3 s=XXX r=XXX h=mout.web.de >>> >>> >>> Is there any way to reduce trust of a sender, recipient or client? >>> >>> >>> I cannot find any documentation - if you could point me to something? >>> That would be very nice ;-) >>> >>> >>> _______________________________________________ >>> Gross mailing list >>> Gross at lists.utu.fi >>> https://lists.utu.fi/mailman/listinfo/gross >> >> _______________________________________________ >> Gross mailing list >> Gross at lists.utu.fi >> https://lists.utu.fi/mailman/listinfo/gross >> _______________________________________________ >> Gross mailing list >> Gross at lists.utu.fi >> https://lists.utu.fi/mailman/listinfo/gross > _______________________________________________ > Gross mailing list > Gross at lists.utu.fi > https://lists.utu.fi/mailman/listinfo/gross From eino at utu.fi Thu Sep 17 12:04:05 2015 From: eino at utu.fi (Eino Tuominen) Date: Thu, 17 Sep 2015 09:04:05 +0000 Subject: [Gross] Changing the rating / trust of a sender In-Reply-To: <72EF0199-C995-41A0-B3DF-E41277FC38EE@tja-server.de> References: <55F9DD41.7080302@tja-server.de> <55F9E428.7060009@tja-server.de> <4d73a75481df4479ad588052c5d05d51@EX13-01.utu.fi> <9010865b7b734d5b8587370fa665ed35@EX13-01.utu.fi> <72EF0199-C995-41A0-B3DF-E41277FC38EE@tja-server.de> Message-ID: <0094d725f996407eaec688217c3aa828@EX13-01.utu.fi> Hi, Yes, own dnsbl server is certainly possible and in fact not very hard to install and operate, see: http://www.corpit.ru/mjt/rbldnsd.html Or, you can try to get the spammers listed on some existing list. -- Eino Tuominen -----Original Message----- From: tja [mailto:tja.gross at tja-server.de] Sent: 17. syyskuuta 2015 12:01 To: Eino Tuominen Cc: gross at lists.utu.fi Subject: Re: [Gross] Changing the rating / trust of a sender Sad thing :) That would have great opportunities ... So, to better the greylisting, one would have to run an own dnsbl server - or change grossd to also look into a local file or database Von meinem iPhone gesendet > Am 17.09.2015 um 09:55 schrieb Eino Tuominen : > > Not with gross. Gross only deals with the reputation of the senders, and if the reputation is OK the source is trusted. > > -----Original Message----- > From: tja [mailto:tja.gross at tja-server.de] > Sent: 17. syyskuuta 2015 9:32 > To: Eino Tuominen > Cc: tja.gross at tja-server.de; gross at lists.utu.fi > Subject: Re: [Gross] Changing the rating / trust of a sender > > Hello Eino, > i know. > > And this is what i wanted to chance. > I know exactly which of those tuples are spam, so i wanted to give them less trust. > > As i read your answer, it seems this is not possible? > > > Von meinem iPhone gesendet > >> Am 17.09.2015 um 06:52 schrieb Eino Tuominen : >> >> Hello, >> >> Trust means that gross has not found the source suspicious. >> >> Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >> >> For example the line above tells us that not one of the checks has matched. >> >> -- >> Eino Tuominen >> >> >> -----Original Message----- >> From: gross-bounces at lists.utu.fi [mailto:gross-bounces at lists.utu.fi] On Behalf Of tja.gross at tja-server.de >> Sent: 17. syyskuuta 2015 0:51 >> To: gross at lists.utu.fi >> Subject: Re: [Gross] Changing the rating / trust of a sender >> >> My configuration: >> >> root at euve35947:~# grep -v ^\# /etc/grossd.conf | grep -v ^$ >> protocol = postfix >> stat_type full >> stat_interval = 3600 >> check = dnsbl >> check = rhsbl >> dnsbl = bl.spamcop.net;2 >> dnsbl = cbl.abuseat.org >> dnsbl = dnsbl.sorbs.net >> rhsbl = rhsbl.sorbs.net >> >> No much :-) >> >> Any help or idea is appreciated ... >> >> tja.gross at tja-server.de wrote: >>> Hello together, >>> i am new :) >>> >>> Since some time, i get more and more spam. >>> >>> The only anti-spam tool i use, is grossd. >>> >>> I think, i get more "trust" than i should: >>> >>> Sep 16 17:05:03 euve35947 grossd: #6b935700: a=trust d=3442 w=0 >>> c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] >>> Sep 16 17:06:58 euve35947 grossd: #6b935700: a=trust d=5000 w=0 >>> c=168.100.1.3 s=XXX r=XXX h=camomile.cloud9.net >>> Sep 16 17:44:57 euve35947 grossd: #6bf3b700: a=trust d=5000 w=0 >>> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >>> Sep 16 17:51:32 euve35947 grossd: #6bc38700: a=trust d=782 w=0 >>> c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com >>> Sep 16 18:00:12 euve35947 grossd: #6b935700: a=trust d=2817 w=0 >>> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >>> Sep 16 18:28:29 euve35947 grossd: #6be3a700: a=trust d=4380 w=0 >>> c=220.246.24.170 s=XXX r=XXX h=[220.246.24.170] >>> Sep 16 18:30:27 euve35947 grossd: #6be3a700: a=trust d=4382 w=0 >>> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >>> Sep 16 19:01:36 euve35947 grossd: #6ba36700: a=trust d=5000 w=0 >>> c=202.67.240.248 s=XXX r=XXX h=blackhole4.hknet.com >>> Sep 16 19:15:41 euve35947 grossd: #6ba36700: a=trust d=3440 w=0 >>> c=220.181.12.55 s=XXX r=XXX h=m12-55.163.com >>> Sep 16 19:36:15 euve35947 grossd: #6be3a700: a=greylist d=13 w=1 >>> c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt >>> m=cbl.abuseat.org+1 >>> Sep 16 19:36:17 euve35947 grossd: #6be3a700: a=greylist d=0 w=2 >>> c=79.168.47.123 s=XXX r=XXX h=a79-168-47-123.cpe.netcabo.pt >>> m=bl.spamcop.net+2 >>> Sep 16 19:41:21 euve35947 grossd: #6be3a700: a=trust d=5000 w=0 >>> c=212.227.15.3 s=XXX r=XXX h=mout.web.de >>> >>> >>> Is there any way to reduce trust of a sender, recipient or client? >>> >>> >>> I cannot find any documentation - if you could point me to something? >>> That would be very nice ;-) >>> >>> >>> _______________________________________________ >>> Gross mailing list >>> Gross at lists.utu.fi >>> https://lists.utu.fi/mailman/listinfo/gross >> >> _______________________________________________ >> Gross mailing list >> Gross at lists.utu.fi >> https://lists.utu.fi/mailman/listinfo/gross >> _______________________________________________ >> Gross mailing list >> Gross at lists.utu.fi >> https://lists.utu.fi/mailman/listinfo/gross > _______________________________________________ > Gross mailing list > Gross at lists.utu.fi > https://lists.utu.fi/mailman/listinfo/gross