You are viewing a plain text version of this content. The canonical link for it is here.
Posted to users@spamassassin.apache.org by Andy Firman <an...@firman.us> on 2005/02/28 04:03:43 UTC

curious question about sa-spamd contacting cloudmark.com?

Running a fresh install of p5-Mail-SpamAssassin-3.0.2_1 on FreeBSD 5.3.
Everytime I start sa-spamd I get hundreds of these in my firewall logs:

Feb 27 21:59:06 sockeye ipmon[187]: 21:59:05.550795 em0 @0:16 b sockeye[192.168.1.89],62782 -> 
charisma.cloudmark.com[66.151.150.12],2703PR tcp len 20 64 -S 3257201644 0 65535 OUT
Feb 27 21:59:06 sockeye ipmon[187]: 21:59:05.564123 em0 @0:16 b sockeye[192.168.1.89],62783 -> 
charisma.cloudmark.com[66.151.150.12],2703PR tcp len 20 64 -S 1904528235 0 65535 OUT
Feb 27 21:59:06 sockeye ipmon[187]: 21:59:05.576903 em0 @0:16 b sockeye[192.168.1.89],62784 -> 
charisma.cloudmark.com[66.151.150.12],2703PR tcp len 20 64 -S 1016607269 0 65535 OUT
Feb 27 21:59:06 sockeye ipmon[187]: 21:59:05.589889 em0 @0:16 b sockeye[192.168.1.89],62785 -> 
charisma.cloudmark.com[66.151.150.12],2703PR tcp len 20 64 -S 334621558 0 65535 OUT

Just curious as to what the heck is going on???

Re: curious question about sa-spamd contacting cloudmark.com?

Posted by Theo Van Dinter <fe...@kluge.net>.
On Sun, Feb 27, 2005 at 10:32:01PM -0500, Andy Firman wrote:
> Ahh.  Okay, for others out there with tight firewalls:
[...]
> http://www.spamassassinbook.com/chapter11_preview.htm

Alternately, BTW:

http://wiki.apache.org/spamassassin/NetTestFirewallIssues

:)

-- 
Randomly Generated Tagline:
I think Smithers picked me because of my motivational skills.
 
 		-- Homer Simpson
 		   Homer the Smithers

Re: curious question about sa-spamd contacting cloudmark.com?

Posted by Andy Firman <an...@firman.us>.
On Sun, Feb 27, 2005 at 10:11:14PM -0500, Theo Van Dinter wrote:
> On Sun, Feb 27, 2005 at 10:03:43PM -0500, Andy Firman wrote:
> > Feb 27 21:59:06 sockeye ipmon[187]: 21:59:05.589889 em0 @0:16 b sockeye[192.168.1.89],62785 -> 
> > charisma.cloudmark.com[66.151.150.12],2703PR tcp len 20 64 -S 334621558 0 65535 OUT
> > 
> > Just curious as to what the heck is going on???
> 
> You're running Razor, which uses the servers at Cloudmark.

Ahh.  Okay, for others out there with tight firewalls:

 To operate, Razor requires a constant internet connection. The Razor communication uses TCP 
port 2703, and Razor also uses TCP pings on port 7 to determine which servers are closest, so 
firewalls will have to be configured to enable these ports.

http://www.spamassassinbook.com/chapter11_preview.htm

Off to open up the ports on my firewall.........    Thanks.



Re: curious question about sa-spamd contacting cloudmark.com?

Posted by Theo Van Dinter <fe...@kluge.net>.
On Sun, Feb 27, 2005 at 10:03:43PM -0500, Andy Firman wrote:
> Feb 27 21:59:06 sockeye ipmon[187]: 21:59:05.589889 em0 @0:16 b sockeye[192.168.1.89],62785 -> 
> charisma.cloudmark.com[66.151.150.12],2703PR tcp len 20 64 -S 334621558 0 65535 OUT
> 
> Just curious as to what the heck is going on???

You're running Razor, which uses the servers at Cloudmark.

-- 
Randomly Generated Tagline:
"1) Your kid mistakenly gets sent to the principal's office for asking
 the cafeteria ladies if they macerate."
         - From the Top 12 Signs You've Been Watching Too Much FoodTV