Abigail Marshall wrote:
I'm hoping to maybe get the list administrator's attention,
since this is such an easy fix. I will be glad to tell the
list administrator exactly how to prevent this and other
common worms from being disseminated through this list, if
he/she needs my help.
Then complain to
Abigail Marshall writes:
>BA> Sure, if the people who administer the list also administer the mail
>BA> system upon which the list depends. For [SA-Talk], this is not the case.
>
>I find that hard to believe. How did this list get set up?
>For any list running on Mailman, a list administrator also
Well, nevermind that last message (although it might make for a decent
laugh). It looks as if one of the admins set this to a subscriber-only
list, so I guess that means I can't rant about how much I detest
incessant whining :-)
On the bright side, those who don't filter their e-mail at the g
Abigail Marshall wrote:
I'm hoping to maybe get the list administrator's attention,
since this is such an easy fix. I will be glad to tell the
list administrator exactly how to prevent this and other
common worms from being disseminated through this list, if
he/she needs my help.
Then complain to
Jaysus.
Find me a machine that will not fall over with the bandwith considerations
(I'll admit, I have _NO_ idea how many people subscribe to SA-Talk and
SA-dev), and i'll be more than happy to set up mailman, clamd, and an
auto-update... Even better, just run exim or sendmail and do virus-scanni
Abigail Marshall <[EMAIL PROTECTED]> wrote:
>>> You know the old saying, if you don't have something constructive to
>>> say..
>>>
>> ...whine about it on a list.
>
> I'm hoping to maybe get the list administrator's attention,
> since this is such an easy fix. I will be glad to tell the
> list
BA> Sure, if the people who administer the list also administer the mail
BA> system upon which the list depends. For [SA-Talk], this is not the case.
I find that hard to believe. How did this list get set up?
For any list running on Mailman, a list administrator also
has direct access to the inter
On Thu, Jul 03, 2003 at 10:29:47PM -0400, Shaun T. Erickson wrote:
> So, no rant from me, but I *do* think the list admin (or the admin of
> the system that hosts the list) should be making every attempt to block
> virii from this list.
And who will pay for the software?
I think you are expecti
>> You know the old saying, if you don't have something constructive to
>> say..
>>
BAS> ...whine about it on a list.
I'm hoping to maybe get the list administrator's attention,
since this is such an easy fix. I will be glad to tell the
list administrator exactly how to prevent this and othe
Benjamin A. Shelton wrote:
You know the old saying, if you don't have something constructive to
say..
...whine about it on a list.
While I don't approve of the major rant that started this discussion, I
do think it's reasonable to ask the administrator, of the system that
hosts this list
SB> Well I belong to a lot of mailing lists, and I'm not aware of any of them
SB> that have actual virus scanning and blocking facilities.
I RUN a lot of mailing lists, and EVERY SINGLE ONE OF THEM
has a mechanism to stop most viruses. The most sensible is
to disallow attachments, but if attachm
Hi,
On Thu, 3 Jul 2003, Abigail Marshall wrote:
> This is really unacceptable.
I'd counter that since you're still subscribed to the list, there's a slim
chance that it is acceptable. But that's just being pedantic. :)
> There is NO reason that this virus can't be filtered from
> this list - it
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Fri, 4 Jul 2003 04:56:34 +0300 (IDT), Yuval Kojman wrote:
>On Thu, 3 Jul 2003, Federico Voges wrote:
>
>> Hi,
>
>hi ho
>
>> Some fscking spammer is sending spam using random email addresses
>> (@mydomain.com) for the sender & return addres:
>
>> An
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
On Thu, 3 Jul 2003, Federico Voges wrote:
> Hi,
hi ho
> Some fscking spammer is sending spam using random email addresses
> (@mydomain.com) for the sender & return addres:
> Any ideas about how to proceed??
if you desire a temporary solution: use
On Thu, Jul 03, 2003 at 04:09:54PM -0700, Gary Lopez wrote:
> Gurus of the spamassassin world,
No way I'm a guru, but...
>I am desperate need of help. I have spamassassin running on Solaris
> 8 using procmail. We relay messages to different offices around the
> world via thier ISP. The prob
You know the old saying, if you don't have something constructive to
say..
...whine about it on a list.
--
Benjamin A. Shelton
"What do you mean it won't turn on? Did you plug it in?"
*silence*
[EMAIL PROTECTED]
---
This SF.Net email
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
After having successfully integrated spamassassin via procmail to my
home based mailserver i've started corresponding with my parents'
university, regarding filtering in their facilities.
In my dad's department there's a SunOS mailserver, which does t
Abigail Marshall wrote:
This is really unacceptable.
There is NO reason that this virus can't be filtered from
this list - it is a simple regexp to get rid of it.
If you're not running Win32, you have nothing to worry about
Is there an administrator or moderator for this list?
Mailman has really
Federico Voges writes:
> Some fscking spammer is sending spam using random email addresses
> (@mydomain.com) for the sender & return addres:
The best idea I've heard, is to write a script that goes through the mail
queue grepping for your IP range in the Received headers of the message
that's bee
Abigail Marshall wrote:
This is really unacceptable.
There is NO reason that this virus can't be filtered from
this list - it is a simple regexp to get rid of it.
If you're not running Win32, you have nothing to worry about :-)
Is there an administrator or moderator for this list?
Mailman has re
At 17:07 3/07/03 -0700, Abigail Marshall wrote:
This is really unacceptable.
Was there really a need for this rant ?
Yes, the viruses are annoying, but I think the SA developers have plenty to
do as it is.
There is NO reason that this virus can't be filtered from
this list - it is a simple reg
At 17:06 3/07/03 -0700, Patrick Murphy wrote:
Is there a better method of keeping all spam for users in folders than
just setting filters on their email clients to look for the
"SPAM*" string and forward the email into a given folder.
I would ideally like to do this at the server level but
--On Thursday, July 03, 2003 5:07 PM -0700 Abigail Marshall
<[EMAIL PROTECTED]> wrote:
This is really unacceptable.
You could ask for your money back. :)
There is NO reason that this virus can't be filtered from
this list - it is a simple regexp to get rid of it.
Sure. If you start to filter o
'bonjour,
I'm using SA with a mysql database for a few months, and I
wanted to test the bayes system.
Unfortunately, the spamd is reporting that:
Jul 3 01:24:30 omega spamd[21676]: debug: retrieving prefs for [EMAIL PROTECTED] from
SQL server
Jul 3 01:24:30 omega spamd[21676]: debug: Failed
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Hi,
Some fscking spammer is sending spam using random email addresses
(@mydomain.com) for the sender & return addres:
Received: from 73.42.33.233 ([66.200.90.226]) by
mc7-f2.law1.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600);
Wed, 2 Jul
Hello Rick,
Thursday, July 3, 2003, 12:58:49 PM, you wrote:
RB> Don Krause wrote:
>> How can "PENIS" be offensive? It's a medically correct term.
>>
>> Just offer to turn off SA for those who are so easily offended. I'm sure
>> they'd prefer PENIS to the content of the actual mail.
RB> Yes,
Is there a better method of keeping all spam for users in folders than
just setting filters on their email clients to look for the
"SPAM*" string and forward the email into a given folder.
I would ideally like to do this at the server level but still have a
folder for every user. I run So
This is really unacceptable.
There is NO reason that this virus can't be filtered from
this list - it is a simple regexp to get rid of it.
It makes no sense that people who develop software like
Spamassassin can't figure out how to stop a simple virus
that ALWAYS has the same line of text plus an
Hi,
We implemented it for 10K+ users at our ISP with a default required_hits
of 15 and we allow the users to modify their settings.
No false positives and the users are happy with the level of control
they have.
I've also installed a similar setup for about 30 clients over the last 3
month's
Gurus of the spamassassin world,
I am desperate need of help. I have spamassassin running on Solaris
8 using procmail. We relay messages to different offices around the
world via thier ISP. The problem is spam gets re-routed and they have no
protection. Is there a way of having spamd check th
At 15:49 3/07/03 -0700, Justin Mason wrote:
Simon Byrnand writes:
>Ok, I've got a great idea here, how about the list administrator (is there
>one ?) unsubscribes the 4 or so people who have badly behaving virus
>scanners, until they sort out their problems ?
LOL -- there's about 200 ;)I'm not
-On Thursday, July 03, 2003 3:49 PM -0700 Justin Mason <[EMAIL PROTECTED]>
wrote:
Simon Byrnand writes:
Ok, I've got a great idea here, how about the list administrator (is
there one ?) unsubscribes the 4 or so people who have badly behaving
virus scanners, until they sort out their problems ?
At 16:13 3/07/03 -0500, Richard Humphrey wrote:
My apologies for the long post. I had (at one time) SA running on RH 8.0
and using /etc/procmailrc to send all tagged spam to a single spam
mailbox located in /var/spool/mail/sharedspam. Since then I have
reinstalled RedHat (yeah i know, shoulda sav
Simon Byrnand writes:
>Ok, I've got a great idea here, how about the list administrator (is there
>one ?) unsubscribes the 4 or so people who have badly behaving virus
>scanners, until they sort out their problems ?
LOL -- there's about 200 ;)I'm not joking. Every few days for the
last wee
Yes I implemented this for Linksys. So go ahead and ask away :)
My setup is as follows:
Qmail
qmail-scanner
clamav
spamassassin
qss (reporting)
hand script (for spam reporting)
-Original Message-
From: Vance, Trevor [mailto:[EMAIL PROTE
My recommendation would be to use MailScanner (http://www.mailscanner.info)
to call SpamAssassin, and then use MailWatch for MailScanner
(http://www.smf.f2s.com/mailscanner/) to generate your reports (it
conveniently logs all MailScanner traffic to a MySQL database).
MailScanner is very easy to in
Marek,
I'm curious if you implemented this in a site wide configuration for
Linksys or if you're using it on a personal basis. I'm investigating
putting this in for my company and another. Any tips that you could
share to the list, I'm sure would be appreciated... at least by me.
Thanks for th
At 06:13 3/07/03 -0700, [EMAIL PROTECTED] wrote:
Incident Information:-
Originator: [EMAIL PROTECTED]
Recipients: [EMAIL PROTECTED]
Subject:Spamassassin-talk digest, Vol 1 #1342 - 12 msgs
WARNING: The file your_details.zip you received was infected with the
W32/[EMAIL PROTECTED] virus. The
On Thu, 3 Jul 2003, Kai Schaetzl wrote:
> Rick Beebe wrote on Thu, 03 Jul 2003 15:58:49 -0400:
>
> > They were legitimate email messages which, for whatever
> > reason, failed the PENIS_ENLARGE test.
>
> Simple solution: if that is true, submit it as a bug.
That doesn't necessarily help. See
Rick Beebe wrote on Thu, 03 Jul 2003 15:58:49 -0400:
> They were legitimate email messages which, for whatever
> reason, failed the PENIS_ENLARGE test.
>
Simple solution: if that is true, submit it as a bug. This should not
happen.
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conact
Tim wrote on Thu, 3 Jul 2003 09:30:56 -0400 (EDT):
> Question: The header mentions "autolearn=no". . .I thought autolearn was
> "on" by default?
>
This indicates whether it gets learned or not. Since it was within the
threshold it wasn't.
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at
Hi,
OS: Redhat Linux 9.0
KERNEL: 2.4.20-smp
MTA:Exim 3.36
SPAM: SpamAssassin 2.55
PROCMAIL: Procmail 3.22
HOW OUR MAIL WORKS
--
USERS: 4000
DOMAINS:160
Each users mail resides in /var/spool/mail/$LOGN
My apologies for the long post. I had (at one time) SA running on RH 8.0
and using /etc/procmailrc to send all tagged spam to a single spam
mailbox located in /var/spool/mail/sharedspam. Since then I have
reinstalled RedHat (yeah i know, shoulda saved config files etc) and now
I am trying to set th
Hi,
When I set always_add_report to 1, I get
X-Spam-Report headers for non spam mails.
Is it possible to get this headers in mail
that is spam too? Maybe it is a combination
of options?
I took a quick look into the source and it seems that
this should be already happening.
Using SA 2.55.
Well darn it.. No more such interesting things like: "Herbal Viagra" or the
great opportunities to make money from Nigeria. Terrible!! All these
wonderful and helpful e-mails gone from my mailbox!
Whatever will I do now ;)
To the developers of SA. Guys you did a great job. My hat off to you! (
Don Krause wrote:
How can "PENIS" be offensive? It's a medically correct term.
Just offer to turn off SA for those who are so easily offended. I'm sure
they'd prefer PENIS to the content of the actual mail.
Yes, it's medically correct. In all the cases where someone complained,
however, there wa
Eric Sandquist wrote:
I am looking for something that will generate reports, with or without
graphics.
I need something that will collect the number of spam caught per day, per
week, and per month. and generate a report. This tool should be able to
keep a history from past reports. Something tha
John
You can e-mail me and I can attempt to answer your questions. I have full
implementation of Qmail and spamassassin running.
-Original Message-
From: Tony Earnshaw [mailto:[EMAIL PROTECTED]
Sent: Thursday, July 03, 2003 9:14 AM
To: John McGivern
Cc: [EMAIL PROTECTED]
John McGiver
Alan Leghart wrote:
Ah
Now the SA list admin is getting into the auto-responder business?
Oh, the humanity!
You should get the buggers (Windows Virus specialists like ...
___
Sender = [EMAIL PROTECTED]
Recipient(s) = [EMAI
I am looking for something that will generate reports, with or without
graphics.
I need something that will collect the number of spam caught per day, per
week, and per month. and generate a report. This tool should be able to
keep a history from past reports. Something that uses a MySQL databa
--On Thursday, July 03, 2003 6:07 AM -0700
[EMAIL PROTECTED] wrote:
Your mail to 'Spamassassin-announce' with the subject
Re: Movie
Is being held until the list moderator can review it for approval.
The reason it is being held:
Post to moderated list
Either the message will get poste
Jon Miller wrote:
Looks like someone on the list has been infected with the sobig virus.
I just received an e-mail from this address on list
[EMAIL PROTECTED] It has an attachment
your_details.zip
Welcome to the wonderful world of reality, Jon. Now just hope that you
can escape Joe jobs for th
John McGivern wrote:
I tried this question a couple of times but I'm kind of desperate so I'll try again. Any suggestions would really help me out.
Well, when you switch from Qmail to Exim 4 or Postfix 2, I'll help you
out :-)
Best,
Tony
--
Tony Earnshaw
Humor him and he'll go away
http://j-
With version 2.55 on OpenBSD 3.3, I can't see the X-Spam-Report on the
email header.
Could you help me?
Best Regards
Dott. Andrea Riela
---
This SF.Net email sponsored by: Free pre-built ASP.NET sites including
Data Reports, E-commerce, Portal
Hi,
Is there a possibility to configure a debug-logfile for spamassassin where
it can write it whole debug-output in, like with spamd -D ?
I do not want to start it on the commandline, but want to normally invoke
it through /etc/init.d and want than a detailed logfile, which I can watch
and gr
Hi!
I tried this question a couple of times but I'm kind of desperate so I'll try again.
Any suggestions would really help me out.
I am calling spamassassin from within my .qmail-default file like this:
| /var/qmail/bin/preline -d /var/qmail/bin/bouncesaying "SPAM Bounce message"
/var/qmail/
Looks like someone on the list has been infected with the sobig virus.
I just received an e-mail from this address on list
[EMAIL PROTECTED] It has an attachment
your_details.zip
--
Jon Miller <[EMAIL PROTECTED]>
MMT Networks Pty Ltd
---
T
Title: Houghton Internationals' Anti-virus Service, Antigen, found FILE FILTER= *.pif file
Houghton Internationals' Anti-virus Service (Antigen for Exchange) found your_details.zip
->details.pif matching FILE FILTER= *.pif file filter.
The file is currently Removed. The message, "[SAtalk] Re:
Hi Again
I figured out why the spam made it through. It was addressed to one of
my alternative e-mail addresses, which was white_listed, but isn't
anymore.
Sorry to add to the noise level!
Tim
On Thu, 3 Jul 2003, Tim wrote:
> Hi Guys,
>
> Here's another one that sneaked by SpamAssassin 2.60-
An Internet e-mail message was sent to you from an outside source that
contained an prohibited file type, but was removed for security
purposes.
The message header is attached below. If you must use e-mail to receive
business-related .exe files, there is a workaround. Please inform the
sender of
I'm, for the first time, installing spamassassin in my RH9, i have a
sendmail+procmail server, and i put the procmailrc in the /etc/, i think
that would make the changes for all mail.
My procmailrc is like this:
:0fw: spamassassin.lock
* < 256000
| /usr/bin/spamassassin
:0e
Hi Guys,
Here's another one that sneaked by SpamAssassin 2.60-cvs.
Question: The header mentions "autolearn=no". . .I thought autolearn was
"on" by default?
Thanks,
Tim
-- Forwarded message --
Return-Path: <[EMAIL PROTECTED]>
Delivered-To: [EMAIL PROTECTED]
Received: from loca
Title: ScanMail Message: To Recipient virus found and action taken.
ScanMail for Microsoft Exchange has detected virus-infected attachment(s).
Sender = [EMAIL PROTECTED]
Recipient(s) = [EMAIL PROTECTED]
Subject = Spamassassin-talk digest, Vol 1 #1342 - 12 msgs
Scanning Time = 07/03/2003 06:0
Incident Information:-
Originator: [EMAIL PROTECTED]
Recipients: [EMAIL PROTECTED]
Subject:Spamassassin-talk digest, Vol 1 #1342 - 12 msgs
WARNING: The file your_details.zip you received was infected with the
W32/[EMAIL PROTECTED] virus. The file attachment was not successfully cleaned,
and
Incident Information:-
Originator: [EMAIL PROTECTED]
Recipients: [EMAIL PROTECTED]
Subject:Spamassassin-talk digest, Vol 1 #1342 - 12 msgs
WARNING: The file your_details.zip you received was infected with the
W32/[EMAIL PROTECTED] virus. The file attachment was not successfully cleaned,
and
David B Funk wrote on Wed, 2 Jul 2003 18:30:19 -0500 (CDT):
> So you see that the simple-minded sed stripping won't work here.
>
Only solution would be to define a set of tags where we just strip the
contents as well.
Kai
--
Kai Schätzl, Berlin, Germany
Get your web at Conactive Internet Se
Your mail to 'Spamassassin-announce' with the subject
Re: Movie
Is being held until the list moderator can review it for approval.
The reason it is being held:
Post to moderated list
Either the message will get posted to the list, or you will receive
notification of the moderator's dec
Kris Deugau wrote on Wed, 02 Jul 2003 18:03:05 -0400:
> Worse, a few will send directly to an A record-
I think that is okay. If you remove all MX records for a domain you can
still send mail to it over regular SMTP servers. I was surprised when I
once tried it but it works.
or to a system whi
Tom Diehl wrote:
I recently installed SA+amavis-new+postfix on my mail server. I have been
feeding it spam and ham on a daily basis for about 2 weeks. It suddenly occurred
to me that I may be screwing up the results. I have spam quarantine set to
forward to me with procmail putting it in a separat
Ian Zabel wrote:
Where should I start looking to make sure that any emails sent FROM my mail
server are not marked as spam? (All users must use SMTP AUTH, so I'm not
worried about relaying)
I only started using Postfix (2.0.12) recently after many years of Exim.
I've configured it such, that it u
Hi there,
Excuses if this issue is not new for you. SA is new for me.
Running SpamAssissin 2.54 since 3 weeks. Fed the system 2000 hammies
and 2000 spammies that I had lying about in the backups of the
mailserver. All sorts of timestamps, since beginning of this year.
Yes, checked and double chec
Ian Zabel wrote on Wed, 2 Jul 2003 15:09:50 -0400:
> I see no
> reason for this to be marked as spam.
Sure there is. Just look at the hits. They may be not valid (at least the
FORGED_MUA_EUDORA isn't, you could bug it), but it's quite clear why it got
tagged as spam.
>
> Where should I start
>I am using sendmail with cyrus-imap.
>for the filtering I am using sieve which comes with cyrus-imap.
>So my local deliver mailer is cyrus.
>Procmail is not used in the chain of operations when new mail
>is arriving.
>
>Can I use spamassassin for spam filtering without using procmail ?
Yes you c
Hello,
I am using sendmail with cyrus-imap.
for the filtering I am using sieve which comes with cyrus-imap.
So my local deliver mailer is cyrus.
Procmail is not used in the chain of operations when new mail is arriving.
Can I use spamassassin for spam filtering without using procmail ?
-
Hi!
why those rules don't work?
full UNSAFE_ATTACHMENT /Content-
(Disposition|Type):.+file.+="?.+.(pif|
com|scr|lnk|com|exe|vbs)"?/
describe UNSAFE_ATTACHMENT unsafe attachment
score UNSAFE_ATTACHMENT 15
full DOS_EXE/TV.QAA.EAA.A/
/8AALgAQAA.AAA
Bart Schaefer <[EMAIL PROTECTED]> writes:
> One thing I'm not clear on is whether any tests look at intermediate
> stages of decoding. That is, if a message has a base64'd HTML body, I
> think "rawbody" sees the base64 and "body" sees the rendered content,
> but nothing sees the un-rendered HTML.
76 matches
Mail list logo
