I mentioned this problem at the last round-table session, but didn't get
a solution, so I thought I'd post it here, just in case anyone has any
suggestions to offer.
I'm still seeing a whole bunch of false positives in SpamAssassin, since
an update was installed in mid-September on a CentOS 5.7 system, for a
rule called DATE_IN_FUTURE_96_Q, which is only supposed to be triggered
when the "Date:" header has a date that is 4 days to 4 month ahead of
the date in the "Received" header that has the _smallest_ difference in
date.
Here are the headers from the latest e-mail I've received with this
false-positive. (I've stripped out irrelevant headers, for the sake of
clarity and simplicity.)
From topfivestories(a)messagent.itworldcanada.com Mon Nov 14 07:50:13 2011
Received: from mail.messagent.itworldcanada.com
(mail.messagent.itworldcanada.com [207.112.10.80])
by palladium.cs.umanitoba.ca (8.13.8/8.13.8) with SMTP id
pAEDoAxV028594
for <gedetil(a)cs.umanitoba.ca>; Mon, 14 Nov 2011 07:50:12 -0600
Date: Mon, 14 Nov 2011 08:50:13 -0500
X-Spam-Status: No, score=-0.3 required=5.0
tests=BAYES_00,DATE_IN_FUTURE_96_Q,
HTML_MESSAGE,RP_MATCHES_RCVD autolearn=no version=3.3.1
X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on
palladium.cs.umanitoba.ca
Note that I'm calling spamd via the spamass-milter on a system running
sendmail. Note also, that in the above example, the only "Received"
header was the one generated by my own server. (I've had other false
positives, however, with multiple "Received" headers, all of which were
within seconds of the time in the "Date" header.)
Any ideas?
--
Gilbert E. Detillieux E-mail: <gedetil(a)muug.mb.ca>
Manitoba UNIX User Group Web: http://www.muug.mb.ca/
PO Box 130 St-Boniface Phone: (204)474-8161
Winnipeg MB CANADA R2H 3B4 Fax: (204)474-7609
Hey hey,
So I've got an annoying issue. I've got a Linux machine ( ubuntu 12.04 )
which has 3 physical interfaces into it. Two interfaces go to separate
ISP's and one is internal. Because one of the upstream ISP's filters
like crazy, specific traffic ( udp port 1194 ) needs to go out the
non-default upstream provider.
I've got that I need to use a combination of iptables with marking, and
ip rules from iproute. I've been trying to follow this:
http://unix.stackexchange.com/questions/21093/output-traffic-on-different-i…
.
Here's what I've got so far:
iptables -> mangle -> prerouting : Mark packet
ip table with default set to the alternate gateway
ip rule to match marked packet to table
I wasn't able to get the POSTROUTING rule to match.
I'm still getting traffic on the primary link, which is then getting
firewalled and blocked before it reaches its source.
Has anyone had this issue before? Any help would be appreciated - I'm
just banging my head against the wall.
http://wesunsolve.net/
It's actually been around for a while, but I haven't seen anyone mention
it. BigAdmin and all the other useful resources are still DOA thanks to
Oracle, but a community effort has resurrected something very much like
SunSolve. So if you still have Sun hardware, without a current service
contract, check it out!
-Adam Thompson
athompso(a)athompso.net
FYI...
------------------------------------
View in browser
<http://post.oreilly.com/rd/9z1za22fjs4brd1dvbvcliqnqbc3glkjhg0tjivo37o>.
O'Reilly - Books and Videos
Web Performance & Ops -- Your Front Row Seat
Get Instant Access to Every Workshop, Session, and Keynote
Save 50% on the Velocity 2012 Complete Video Compilation
<http://post.oreilly.com/rd/9z1znedfgu7eiu0oe52du0ms8394q0861kj60qd63k0>
New!
Velocity 2012 Complete Video Compilation
<http://post.oreilly.com/rd/9z1z4la7ad88mp4mo99u2rmlc7ii7j6unidtcm7b1n8>
*Discover the latest tools, skills, and ideas in web performance and
operations* with this complete video compilation of O'Reilly's Velocity
Conference 2012.
Watch luminaries such as Steve Souders, John Allspaw, Jay Parikh, Mike
Brittain, and Stoyan Stefanov lead sessions in four tracks: *Web
Performance, Operations, Velocity Culture*, and *the ever
important---Mobile Performance*. The only things expanding faster than
new techniques and technologies to build a faster, stronger Web are the
expectations of web and mobile users---it's a race you cannot afford to
lose.
The cost to attend Velocity Conference (and workshops) was $1595. *Get
instant access to every workshop, session, and keynote---over 50 hours
of video---for just $199*. Use discount code *WKVCTY5* in the cart.
Learn more
<http://post.oreilly.com/rd/9z1z2acok8d6iul32h3sar4aitrgb9tvmkaspc5132g>
This deal expires August 7, 2012 at 11:59pm PT, and cannot be combined
with other offers.
Spreading the knowledge of innovators.
oreilly.com
<http://post.oreilly.com/rd/9z1zb39lat9duiv91mbf9s0c0d4b6k0v5pfs77807f8>
You are receiving this message because you attended an O'Reilly Velocity
Conference, or expressed an interest in a Web ops and performance
related technology. To ensure delivery to your inbox (not bulk or junk
folders), please add *oreilly(a)post.oreilly.com*
<mailto:oreilly@post.oreilly.com> to your address book.
To unsubscribe from all email announcements from O'Reilly, click here
<http://post.oreilly.com/rd/9z1z6eeg3eonrdelr2c99m0vu47opet6qdi3ahur1l0>.
O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA
95472 (707) 827-7000