On Mon, 23 Sep 2002, Robin Lynn Frank wrote:
> On Monday 23 September 2002 21:24, Simon Matthews wrote:
> # Attached is a gzip version of Nigerian scam. Using SA 2.31, it only scored
> # 2.6.
> #
> Might be more helpful with the full headers an less your commentary
Is the attached file better? I
Hello,
First, I want to thank everyone involved for spamassassin. So far I
have been impressed.
I have a postfix setup that works with cyrus, lmtp, virus filtering with
AVP, and the sql settings with spamassassin. If anyone needs help with
this, I will be glad to give any info I can.
On Monday 23 September 2002 21:24, Simon Matthews wrote:
# Attached is a gzip version of Nigerian scam. Using SA 2.31, it only scored
# 2.6.
#
# Anyone care to look at it?
#
# Simon
#
#
Might be more helpful with the full headers an less your commentary
--
Robin Lynn Frank
Paradigm-Omega, LLC
==
Attached is a gzip version of Nigerian scam. Using SA 2.31, it only scored
2.6.
Anyone care to look at it?
Simon
Nigerian_low_score.gz
Description: GNU Zip compressed data
If anyone can tell me how to get information on
setting up this program to work in a beneficial way for me, I'd appreciate
it. ThanksI know nothing about it but have received lots of changed email
because of this being installed. I need to change some of the rules to go
by. Thanks agai
File::Spec is installed on Solaris 8 and I tested File::Spec->path(); in
a simple perl script and the array contains data but when used in Dns.pm
it doesn't contain anything. I even threw in a
my @PATH = File::Spec->path();
dbg ("@PATH");
Into sub is_dcc_available routine and the arra
Matt Kettler <[EMAIL PROTECTED]> writes:
> Ahh, you are deceived by truncation. They actually can match one
> nonspam and still be 0.000% because the nonspam corpus is > 100k
> messages :)
I think that's a bug. The output precision should be increased.
> If a given rule has 1 misplaced nonspa
In your message regarding Re: [SAtalk] Spam host? dated Mon, 23 Sep 2002
18:42:36 +0100, Justin Mason said that ...
>JM- True ratware tests are aimed at tools used *only* by spammers -- ie. the
>JM- tools will disguise addresses, insert forged Received lines, etc.
>JM- This isn't one of t
No I was just a little confused because I'm running procmail on a gateway
and sits between the external sendmail box and internal exchange bridgehead
server. So there isn't any delivery to the local system.
The only email it gets is inbound at the moment and we're looking to get rid
of complica
Looks like I was thinking too complicated again. Thanks.
-Original Message-
From: Jeremy Zawodny [mailto:[EMAIL PROTECTED]]
Sent: Monday, September 23, 2002 2:51 PM
To: Jason Qualkenbush
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] separate inbound and outbound
On Mon, Sep 23, 2002 at
Theo Van Dinter said:
> Has anyone else seen something like this? There's a spam message,
> followed by the standard formmail bit:
Sounds like some spammer read the advisory I cowrote, a few months ago.
There's lots more vulnerabilities like this one.
(Summary: any version of FormMail that is
On Mon, Sep 23, 2002 at 02:26:34PM -0700, Jason Qualkenbush wrote:
>
> Is there is way to separate inbound and outbound email so that I only check
> for spam on inbound mail and ignore the outbound?
>
> I'm using Sendmail and running procmail on the gateway to call spamassassin.
> I know it more
On Mon, Sep 23, 2002 at 02:26:34PM -0700, Jason Qualkenbush wrote:
>
> Is there is way to separate inbound and outbound email so that I only check
> for spam on inbound mail and ignore the outbound?
>
> I'm using Sendmail and running procmail on the gateway to call spamassassin.
> I know it more
In 2.50, should the Dns.pm module be getting the dcc_path or pyzor_path
set in Conf.pm? I see the refs there in Dns.pm, but no where else to
get the actual path so therefore the tests fail.
-=Bobby
---
This sf.net email is sponsored by:ThinkG
Hi,
I know this is definitively a muddy item, but I have to come through it... We are
planning to integrate SA into a border smtp gateway to process, tag and accept all
mail coming from the Internet for a large ISP.
We'll probably scan the mail server input queue with several processeses and c
Is there is way to separate inbound and outbound email so that I only check
for spam on inbound mail and ignore the outbound?
I'm using Sendmail and running procmail on the gateway to call spamassassin.
I know it more of a sendmail question, but my google searches have only
turned up people tryi
Hello,
i would like use spamassassin with rules they stored in mysql-db.
I have installed this but i have a question about it.
How work spamassassin with mail-aliases ?
i use postfix, and cyrus-imap with sieve-filter
i use also a webmailtool that authorizated users only about their
imap-accou
On Mon, Sep 23, 2002 at 03:38:10PM -0400, Jason Kohles wrote:
> person using the script intended. This way they can send all the spam
> they want that can only be traced back as far as the web server that has
> formmail.cgi installed.
Yes, but that wasn't the question. ;) I know about formmail.
I am running Postfix as a gateway MTA (no local delivery) and am using SA to
mark spam as it passes through.
I am familar with postfixes ability to reject mail based on header content,
so I know I could look for "X-SPAM: Yes" and reject. But I don't want to
outright reject it. I would rather for
On Mon, 2002-09-23 at 14:33, Theo Van Dinter wrote:
> Has anyone else seen something like this? There's a spam message,
> followed by the standard formmail bit:
>
There are literally thousands of formmail.cgi installations that are
installed with no security, anybody with a knowledge of cgi scri
Hi.
Realized i didn't give you my specs. They are running postfix + mysql +
virtual users in
/var/mail/vhosts/domain/username
I use the account "mail" for delivery.
Note that I saw an option in spamd called -v for vpopmail delivery to set
up user prefs. Is this the problem that I don't have
As opposed to using spamc with maildrop, if I simply use "spamassassin
-P", things work fine.
That is, the .spamassassin folder and prefs are created in the right
hierarchy, and the message is properly parsed and passed back with the
expected SPAM designation.
If anyone could give a pointer to f
Has anyone else seen something like this? There's a spam message,
followed by the standard formmail bit:
Below is the result of your feedback form. It was submitted by
Connie Hoang ([EMAIL PROTECTED]) on Monday, September 23, 2002 at 14:27:22
Hi.
When I use spamc directly with a message I know to be spam, I get the
right output with spam being tagged.
However, when I use maildrop, and a virtual user, the email seems to get
passed to spamd, but when it gets delivered into the mailbox (and before),
there are no tags!!! Very odd.
In m
"Mike Bostock" said:
> 1. Targeted bulk email obviously using a database that identifies me
> as a dentist.
> 2. The targets are US dentists and not UK dentists (ie of no interest
> to me).
> 3. I have not subscribed to the "newsletter" (it was this ploy which
> fooled Spamassassin)
Well, Vivek
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]]On Behalf Of Bob
> Proulx
> Sent: Sunday, September 22, 2002 11:44 AM
> To: Spamassassin List
> Subject: Re: [SAtalk] -P warning considered harmful
>
>
> Gary Funck <[EMAIL PROTECTED]> [2002-09-21 13:59:38 -0700]:
In your message regarding Re: [SAtalk] Spam host? dated Mon, 23 Sep
2002 10:44:23 -0400, Vivek Khera said that ...
>
>VK- Please try to remember that mass-mailing does not equal SPAM.
1. Targeted bulk email obviously using a database that identifies me
as a dentist.
2. The targets are US de
Of note, a thread over on microsoft.public.windowsxp.general implies she
thinks it's downloaded onto her PC and is running there :)
You might want to advise her that SpamAssassin runs on mailservers, so
she'll have to contact her mailserver admin.
From: Sue G ([EMAIL PROTECTED])
Subject: S
> "JM" == Justin Mason <[EMAIL PROTECTED]> writes:
>> 5.0.Patch121c.P121C_SchedEnhancement_09_05_02
>> (http://www.constantcontact.com)
>>
>> Is worthy of attention and a rule - if you go to their web site it
>> would appear that they are in the business of email mass marketing.
>> Unfortun
"Mike Bostock" said:
> Received: from tracking2 (tracking2.roving.com [10.20.40.142])
> by ccm01.roving.com (Postfix) with ESMTP id 4696633ED4
> for <[EMAIL PROTECTED]>; Sun, 22 Sep 2002 17:57:03 -0400 (EDT)
> X-Mailer: Roving Constant Contact
> 5.0.Patch121c.P121C_SchedEnhancement_0
LuChris wrote:
> How can i make SA recongize chinese and prevent it from labelling:-
> 4.5 -- Headers include 3 consecutive 8-bit characters
> 4.3 -- Subject is full of 8-bit characters
Upgrade to 2.4?
---
This sf.net email is sponsored by:T
On Monday 23 September 2002 12:51 CET Matt Sergeant wrote:
> I just got this in my inbox at home. Thought you guys would all get a
> kick out of it...
>
> Date: Sat, 21 Sep 2002 12:43:23 -0700
> From: Sue Guss <[EMAIL PROTECTED]>
> To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
> Subject: spamassassi
How can i make SA recongize chinese and prevent it from labelling:-
4.5 -- Headers include 3 consecutive 8-bit characters
4.3 -- Subject is full of 8-bit characters
Thanks
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven
I just got this in my inbox at home. Thought you guys would all get a
kick out of it...
Date: Sat, 21 Sep 2002 12:43:23 -0700
From: Sue Guss <[EMAIL PROTECTED]>
To: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]>
Subject: spamassassin
How do I make this very annoying product go away???
-
I 'think' the correct place to pop in a rule for korean character set is
'?20_head_tests.cf'. I'd appreciate confirnation of that &
advice on correct syntax
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://think
Received: from tracking2 (tracking2.roving.com [10.20.40.142])
by ccm01.roving.com (Postfix) with ESMTP id 4696633ED4
for <[EMAIL PROTECTED]>; Sun, 22 Sep 2002 17:57:03 -0400 (EDT)
X-Mailer: Roving Constant Contact
5.0.Patch121c.P121C_SchedEnhancement_09_05_02
(http://www.constant
36 matches
Mail list logo
