August 2012 - Roundtable

SpamAssassin false positives on DATE_IN_FUTURE_96_Q?
by Gilbert E. Detillieux 23 Feb '16

23 Feb '16

I mentioned this problem at the last round-table session, but didn't get a solution, so I thought I'd post it here, just in case anyone has any suggestions to offer. I'm still seeing a whole bunch of false positives in SpamAssassin, since an update was installed in mid-September on a CentOS 5.7 system, for a rule called DATE_IN_FUTURE_96_Q, which is only supposed to be triggered when the "Date:" header has a date that is 4 days to 4 month ahead of the date in the "Received" header that has the _smallest_ difference in date. Here are the headers from the latest e-mail I've received with this false-positive. (I've stripped out irrelevant headers, for the sake of clarity and simplicity.) From topfivestories(a)messagent.itworldcanada.com Mon Nov 14 07:50:13 2011 Received: from mail.messagent.itworldcanada.com (mail.messagent.itworldcanada.com [207.112.10.80]) by palladium.cs.umanitoba.ca (8.13.8/8.13.8) with SMTP id pAEDoAxV028594 for <gedetil(a)cs.umanitoba.ca>; Mon, 14 Nov 2011 07:50:12 -0600 Date: Mon, 14 Nov 2011 08:50:13 -0500 X-Spam-Status: No, score=-0.3 required=5.0 tests=BAYES_00,DATE_IN_FUTURE_96_Q, HTML_MESSAGE,RP_MATCHES_RCVD autolearn=no version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on palladium.cs.umanitoba.ca Note that I'm calling spamd via the spamass-milter on a system running sendmail. Note also, that in the above example, the only "Received" header was the one generated by my own server. (I've had other false positives, however, with multiple "Received" headers, all of which were within seconds of the time in the "Date" header.) Any ideas? -- Gilbert E. Detillieux E-mail: <gedetil(a)muug.mb.ca> Manitoba UNIX User Group Web: http://www.muug.mb.ca/ PO Box 130 St-Boniface Phone: (204)474-8161 Winnipeg MB CANADA R2H 3B4 Fax: (204)474-7609

6 11

Forward of moderated message
by muug-announce-bounces＠muug.mb.ca 23 Sep '12

23 Sep '12

3 3

linuxcon live feed
by Kat 29 Aug '12

29 Aug '12

LinuxCon has started... live feed of LinuxCon speakers (should continue until Friday): http://events.linuxfoundation.org/events/linuxcon/live-video-streaming Schedule listed here: http://lcna2012.sched.org/overview/type/keynote#.UD5Igs8X73x -- ------------------------------------------------------------ Katherine Scrupa Network Technology CCNA, Hons.

1 0

Multiple Outgoing Interfaces Linux
by Robert Keizer 28 Aug '12

28 Aug '12

Hey hey, So I've got an annoying issue. I've got a Linux machine ( ubuntu 12.04 ) which has 3 physical interfaces into it. Two interfaces go to separate ISP's and one is internal. Because one of the upstream ISP's filters like crazy, specific traffic ( udp port 1194 ) needs to go out the non-default upstream provider. I've got that I need to use a combination of iptables with marking, and ip rules from iproute. I've been trying to follow this: http://unix.stackexchange.com/questions/21093/output-traffic-on-different-i… . Here's what I've got so far: iptables -> mangle -> prerouting : Mark packet ip table with default set to the alternate gateway ip rule to match marked packet to table I wasn't able to get the POSTROUTING rule to match. I'm still getting traffic on the primary link, which is then getting firewalled and blocked before it reaches its source. Has anyone had this issue before? Any help would be appreciated - I'm just banging my head against the wall.

2 2

Sunsolve ressurected (sort of)
by Adam Thompson 20 Aug '12

20 Aug '12

http://wesunsolve.net/ It's actually been around for a while, but I haven't seen anyone mention it. BigAdmin and all the other useful resources are still DOA thanks to Oracle, but a community effort has resurrected something very much like SunSolve. So if you still have Sun hardware, without a current service contract, check it out! -Adam Thompson athompso(a)athompso.net

1 0

Final Day + New Ebooks Added - Discover our 5-★ Ebooks and Save 50%
by Gilbert E. Detillieux 16 Aug '12

16 Aug '12

FYI... ------------------------------- View in browser <http://post.oreilly.com/rd/9z1z6qglvvpmpcmtd95fmvf227nnf3rb3mng58497k0>. O'Reilly - Books and Videos Discover Our 5–Star Ebooks Final Day! Save 50% on the Top 25 (We just added 5 additional NEW titles.) Animal with Reader Review <http://post.oreilly.com/rd/9z1zif5qre2k2k1santou5652kaauiashmpjj7i4t38> We keep a running tally of our top-performing, five-star titles. These are the books that have *most impressed and earned praise from readers like you*. We're now sharing the list with the added incentive of a special offer: get our *top five-star ebooks for 50% off*. Ebooks from oreilly.com <http://post.oreilly.com/rd/9z1zk7g27o2kcc26t6f5v90mb0188qrfqqmracqqn38> are *DRM-free*. You get *free lifetime access, multiple file formats,* and *free updates.* Now includes*Dropbox syncing.* View the Top 20 5-Star Rated Ebooks <http://post.oreilly.com/rd/9z1z11nl61df5i2mfpj5hlapt3vjgabvsrbg66ahog0> Use discount code: WK5STAR This deal expires August 16, 2012 at 11:59pm PT and cannot be combined with other offers. Spreading the knowledge of innovators. oreilly.com <http://post.oreilly.com/rd/9z1z8ngljucdmtpf7t70og1671jjklvkico2q3rdf48> You are receiving this message because you purchased directly from O'Reilly or registered titles. Keep up on all things O'Reilly by signing up for our *email alerts and newsletters* <http://post.oreilly.com/rd/9z1zond17rfug1om3dl239bttumod7ut93u4i66v3fg>. To ensure delivery to your inbox (not bulk or junk folders), please add *oreilly(a)post.oreilly.com* <mailto:oreilly@post.oreilly.com> to your address book. To unsubscribe from all email announcements from O'Reilly, click here <http://post.oreilly.com/rd/9z1zvk71ja2rrl1jp4hi1ij24nim4hm36io1l4tm768>. O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000

1 0

Discover Our ★★★★★ Ebooks - Save 50% on the Top 20
by Gilbert E. Detillieux 09 Aug '12

09 Aug '12

FYI... ----------------------------------- View in browser <http://post.oreilly.com/rd/9z1z8ph78qfqfjun886r39svvu1pnvggkb512mf7d5o>. O'Reilly - Books and Videos Discover Our 5–Star Ebooks Save 50% on the Top 20 – One Week Only Animal with Reader Review <http://post.oreilly.com/rd/9z1zv2glesqg4gn8d0lqbmgsj003fmud341dn9q17u8> We keep a running tally of our top-performing, five-star titles. These are the books that have *most impressed and earned praise from readers like you*. We're now sharing the list with the added incentive of a special offer: for one week only, get our *top five-star ebooks for 50% off*. Ebooks from oreilly.com <http://post.oreilly.com/rd/9z1zmbdtiaqk3un2cik13395kapn2gvu7gked3qpfg8> are *DRM-free*. You get *free lifetime access, multiple file formats,* and *free updates.* Now includes*Dropbox syncing.* View the Top 20 5-Star Rated Ebooks <http://post.oreilly.com/rd/9z1zcnc4i6bcerfufjh09f6e4cgql646493jlap0pb8> Use discount code: WK5STAR This deal expires August 16, 2012 at 11:59pm PT and cannot be combined with other offers. Spreading the knowledge of innovators. oreilly.com <http://post.oreilly.com/rd/9z1z7634sdkp9fu60bmuej5b8mujp1agaei826oh4o8> You are receiving this message because you purchased directly from O'Reilly or registered titles. Keep up on all things O'Reilly by signing up for our *email alerts and newsletters* <http://post.oreilly.com/rd/9z1zea35vhea152sbv6q13cf31ntusfjo4bvdnrfkpg>. To ensure delivery to your inbox (not bulk or junk folders), please add *oreilly(a)post.oreilly.com* <mailto:oreilly@post.oreilly.com> to your address book. To unsubscribe from all email announcements from O'Reilly, click here <http://post.oreilly.com/rd/9z1z8krjd42mqs83kpnghjdrcocphpv8ln9jsk0r078>. O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000

1 0

Save 50% - Velocity Conference: Complete Video Compilation - Web Performance and Operation
by Gilbert E. Detillieux 01 Aug '12

01 Aug '12

FYI... ------------------------------------ View in browser <http://post.oreilly.com/rd/9z1za22fjs4brd1dvbvcliqnqbc3glkjhg0tjivo37o>. O'Reilly - Books and Videos Web Performance & Ops -- Your Front Row Seat Get Instant Access to Every Workshop, Session, and Keynote Save 50% on the Velocity 2012 Complete Video Compilation <http://post.oreilly.com/rd/9z1znedfgu7eiu0oe52du0ms8394q0861kj60qd63k0> New! Velocity 2012 Complete Video Compilation <http://post.oreilly.com/rd/9z1z4la7ad88mp4mo99u2rmlc7ii7j6unidtcm7b1n8> *Discover the latest tools, skills, and ideas in web performance and operations* with this complete video compilation of O'Reilly's Velocity Conference 2012. Watch luminaries such as Steve Souders, John Allspaw, Jay Parikh, Mike Brittain, and Stoyan Stefanov lead sessions in four tracks: *Web Performance, Operations, Velocity Culture*, and *the ever important---Mobile Performance*. The only things expanding faster than new techniques and technologies to build a faster, stronger Web are the expectations of web and mobile users---it's a race you cannot afford to lose. The cost to attend Velocity Conference (and workshops) was $1595. *Get instant access to every workshop, session, and keynote---over 50 hours of video---for just $199*. Use discount code *WKVCTY5* in the cart. Learn more <http://post.oreilly.com/rd/9z1z2acok8d6iul32h3sar4aitrgb9tvmkaspc5132g> This deal expires August 7, 2012 at 11:59pm PT, and cannot be combined with other offers. Spreading the knowledge of innovators. oreilly.com <http://post.oreilly.com/rd/9z1zb39lat9duiv91mbf9s0c0d4b6k0v5pfs77807f8> You are receiving this message because you attended an O'Reilly Velocity Conference, or expressed an interest in a Web ops and performance related technology. To ensure delivery to your inbox (not bulk or junk folders), please add *oreilly(a)post.oreilly.com* <mailto:oreilly@post.oreilly.com> to your address book. To unsubscribe from all email announcements from O'Reilly, click here <http://post.oreilly.com/rd/9z1z6eeg3eonrdelr2c99m0vu47opet6qdi3ahur1l0>. O'Reilly Media, Inc. 1005 Gravenstein Highway North, Sebastopol, CA 95472 (707) 827-7000

1 0