via http://www.slashdot.org
http://slashdot.org/article.pl?sid=03/08/27/0214238&mode=thread&tid=111&tid=126
ariehk writes "As of today, Osirusoft, distributer of the SPEWS and open
relay blocklists, among others, is no longer operational. Servers using
these lists (including the FTC) are currentl
On Wed, Aug 27, 2003 at 09:48:03PM +, Jim wrote:
> I may be paranoid, but I suspect malicious fraud.
Just out of further curiosity, I Googled for one of their "testimonial"
texts on that site.
http://www.google.com/search?hl=en&ie=UTF-8&oe=UTF-8&q=%22An+unobtrusive+spam-basher%22&btnG=Google+
Hi all,
I just upgraded to 2.55 and followed the directions for changing
local.cf (allow_user_rules 1) to allow the user_prefs file to be read
from ~/.spamassassin however I'm still not seeing spamd reading this
file. I just installed spamc to run as a filter in postfix and call
spamd which
At Tue Aug 26 13:03:59 2003, 'Carlo Wood' wrote:
>
> Ah, damn... there are FOUR types of Message ID's:
>
> Message-id:
> Message-Id:
> Message-ID:
> MessageID:
That bottom one is not a "Message-ID" - there's no hyphen present.
The header is case-insensitive - so "MessaGe-iD" is also possible
(al
Thanks,
For people having the same problem as I do: This was the solution:
at /usr/share/spamassassin/local.cf
score RCVD_IN_OSIRUSOFT_COM 0
score score X_OSIRU_DUL 0
score X_OSIRU_DUL_FH0
score X_OSIRU_OPEN_RELAY0
score X_OSIRU_SPAMWARE_SITE 0
score X_OSIRU_S
On Wed, Aug 27, 2003 at 03:52:17PM -0400, Chuck Peters wrote:
> http://vww.spamcop.com/download.aspx?PID=A22090C and no mention of
Note that the "real" SpamCop is spamcop.net, NOT spamcop.com.
I may be paranoid, but I suspect malicious fraud.
On Wed, Aug 27, 2003 at 04:43:41PM -0400, Larry Gilson wrote:
> And shouldn't the first received line indicate
> that the host that sent the message?
Not necessarily,
for example, I use a single copy of Mutt to send mail from address is
several domains. Each outbound message will use the same HE
jeje... I can´t beleive it! :)
I install the last version of SA today with 'perl -MCPAN -e shell' I
think SA should be updated with this.. don't you?
About the conf... then I should put a line link this (at
~user/.spamassassin/user_pref)... and that's all?
score*OSIRU*0
David
On Wednesday, August 27, 2003, at 02:33 PM, Theo Van Dinter wrote:
On Wed, Aug 27, 2003 at 03:15:44PM -0500, David Vel?squez Restrepo
wrote:
1. Pentium IV - 2.4Ghz - 512 Ram RIM
2. Pentium III - 1000Mhz - 512 Ram DIM
The problem is, that the good machine (PIV) is taken a lot of time in
one of th
See the thread from yesterday and news.spamassassin.org.
osirusoft is DEAD, GONE, Forget it.
Yes, turn it off.
LER
--On Wednesday, August 27, 2003 16:15:02 -0500 David Velásquez Restrepo
<[EMAIL PROTECTED]> wrote:
Thanks man You're right. What´s happening with osirusoft? Can I jump this
verif
Hello,
I seen a post a few days back which explained that you could
use -D with an extra parameter to specify the debug the RTBL tests.
Can someone re-post this information, I find the docs for 2.55
to be lacking this information.
Thank you,
Frederic TaraseviciusInternet Information Servic
On Wed, Aug 27, 2003 at 02:12:38PM -0700, Ben Gertzfield wrote:
> Yes:
>
> [EMAIL PROTECTED]:~$ sa-learn --dump magic | grep ntokens
> 0.000 0461 0 non-token data: ntokens
>
> [EMAIL PROTECTED]:~$ sa-learn --dump data | wc -l
> 1131
Just curious, are there by chanc
On Wed, Aug 27, 2003 at 04:15:02PM -0500, David Vel?squez Restrepo wrote:
> Thanks man You're right. What?s happening with osirusoft? Can I jump this
> verification (only osirusoft) from the conf?
haha. you haven't been reading the list (or slashdot, or ...) lately?
Osirusoft is dead. you shoul
Theo Van Dinter wrote:
Are there more than the listed count of tokens if you did a "sa-learn --dump"?
Not only is my newly-created database out of sync with regards to
ntokens, nspam, and nham, my old one is even more out of sync when
upgraded to 2.60rc2.
If I run sa-learn --dump data on my ol
Thanks man You're right. What´s happening with osirusoft? Can I jump this
verification (only osirusoft) from the conf?
.
.
.
debug: Check_rbl returning 0
debug: checking RBL results in set njabl for 127.0.0.2
debug: checking RBL results in set osirusoft for 127.0.0.2
debug: checking RBL query.bond
Theo Van Dinter wrote:
What DB library are you using?
Looks like Berkeley DB:
[EMAIL PROTECTED]:~/.spamassassin$ file bayes_toks
bayes_toks: Berkeley DB (Hash, version 5, native byte-order)
[EMAIL PROTECTED]:~/.spamassassin$ dpkg -l 'libdb*' | grep ^.i
ii libdb1-compat 2.1.3-7The Berk
Hello -
I am running an older version of SA (2.51). I just installed an updated to
version 0.2.0 of spamass-milter. The intent of this change is to offload the
spamd processing to another box. This config works okay with the new
milter.
But now, I cannot start spamd on the original box. I wou
Theo Van Dinter wrote:
how about just a -D output?
Theo,
Just to make sure I wasn't crazy, I backed up my old tokens and seen
files, and re-ran 2.60rc2's sa-learn -D on all my 16,000+ spams. The
end result:
Learned from 16263 messages (16397 messages examined).
debug: bayes: 4026 untie-ing
d
On Wed, Aug 27, 2003 at 01:59:47PM -0700, Ben Gertzfield wrote:
> Just to make sure I wasn't crazy, I backed up my old tokens and seen
> files, and re-ran 2.60rc2's sa-learn -D on all my 16,000+ spams. The
> end result:
hrm.
> Do I just have too many spams? Or is auto-learning somehow messing
On Wed, Aug 27, 2003 at 03:44:19PM -0500, David Vel?squez Restrepo wrote:
> What exactly do you think is bad?
> - DNS works fine and fast
> - Razor2 works fine and fast
> - DCC works fine and fast
The easy check: run with -L. if it fixes your speed problem, it's definately net
related.
> What c
What exactly do you think is bad?
- DNS works fine and fast
- Razor2 works fine and fast
- DCC works fine and fast
What can I do to make a debug to understand what is timing out?
Thanks,
David
- Original Message -
From: "Theo Van Dinter" <[EMAIL PROTECTED]>
To: "David Vel?squez Restrepo
BTW further discussion on this should go "on the record" by using
http://bugzilla.spamassassin.org/show_bug.cgi?id=2321 .
--j.
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
Thanks for taking the time to discuss this with me Dave. You probably have
a better understnding than me which helps educate me! I guess this whole
discussion is really moot as mail can easily be forged.
> -Original Message-
> From: Yorkshire Dave
> > I think the problem lies in that t
Hello,
Just a FYI the domain name is also mis-spelled, it says:
spamasassin.org
where the proper name is:
spamassassin.org
They are missing an S in the first ASS.
Frederic Tarasevicius
Internet Information Services, Inc.
http://www.i-is.com/
810-794-4400
mailto:[EMAIL PROTECTED]
Chuck Peters w
At 8/27/03 11:15 AM , Kris Deugau wrote:
> I don't understand why this is happening. Why should the FOOBAR_CAPS
> rule -- a body rule -- be triggering at all?
For whatever reason, the Subject: line is considered part of the message
body in SA's processing.
So, you mean all those rules I've been t
> -Original Message-
> how sucessfull is pyzor in detecting spam? Any experiences?
> I'm alread
> using razor, which works quite nice. Would I get better results using
> pyzor instead or should I use a combination of both?
I've been using SA w/Pyzor for about 2 months now with ~600 or s
On Wed, Aug 27, 2003 at 03:15:44PM -0500, David Vel?squez Restrepo wrote:
> 1. Pentium IV - 2.4Ghz - 512 Ram RIM
> 2. Pentium III - 1000Mhz - 512 Ram DIM
>
> The problem is, that the good machine (PIV) is taken a lot of time in one of the
> steps of spamassasin, but the other no, with exactly the
On Wed, 2003-08-27 at 14:01, jherschel wrote:
> Thanks for your input, though I never really gave this a second thought as
> someone trying to promote a legitimate business.
>
> I think the point to my original message has gotten lost. Basically, this
> is still spam and I'm pleading ignorance on
Hi Marcus,
> -Original Message-
> From: Marcus Schopen
> how sucessfull is pyzor in detecting spam? Any experiences?
> I'm alread using razor, which works quite nice. Would I get better
> results using pyzor instead or should I use a combination of both?
I can't remember who, but I beli
Jim writes:
>qmail also sets Return-Path.
>
>Recent versions of Postfix can add an X-Original-To header.
Just to confirm -- that's what's used in RCPT TO: , right?
>Another nice method of passing these data along would be through command-
>line arguments or environment variables, which could be
At 8/27/03 11:01 AM , jherschel wrote:
Thanks for your input, though I never really gave this a second thought as
someone trying to promote a legitimate business.
Indeed, it seems to be a (black-hat) hacker forum site with a sense of humor.
I think the point to my original message has gotten lost.
Keep in mind when you modify 20_head_tests.cf it'll be overwritten with
each subsequent upgrade of SpamAssassin. Your local.cf won't.
> -Original Message-
> From: Larry Gilson [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 27, 2003 2:06 PM
> To: '[EMAIL PROTECTED]'; [EMAIL PROTECTE
I have 2 machines, their Both have Linux Red Hat
7.3
1. Pentium IV - 2.4Ghz - 512 Ram RIM
2. Pentium III - 1000Mhz - 512 Ram DIM
The problem is, that the good machine (PIV) is
taken a lot of time in one of the steps of spamassasin, but the other no, with
exactly the same email file.
Pl
Hi,
I was having a minor problem with spamassassin 2.53 (OSIRUSOFT) and
decided to do a search for backports of Debian stable (Google spamassassin
site:people.debian.org) and this deceptive ad comes up, see below.
The ad mentions "SpamAssassin for Outlook" and links to
wwv.SpamAsassin.org, note
I had something very similar to this a few days ago - the bastard was
running through every possible email address: a b c ... z aa ab ..
zy zz aaa ... zzz. He was up into low 4-letter combos before I
discovered it. Fortunately, though, he was using two IPs that I was
able to blackhole. I f
At 8/27/03 09:37 AM , Robin Witkop-Staub wrote:
I was trying the following filter found on the suggested script sharing
page. For some reason it was tagging emails that had the word "pizza" in
them. Why?
body RAVEN_MaskedWordsF
/\b(?:excIusive|GiangBiang|sIut|ganigbainged|duides|hairdciore|Ex
Hey Chris,
> -Original Message-
> From: Chris Santerre
> See why I don't need bayes or net tests ;) I catch 99% of
> spam. I've had a breakthru today that should catch the ones
> that have been sneaking in. (Matt and JMason, the doc I sent
> you guys has a pattern in the Message-ID he
Larry Gilson writes:
>There was another suggestion that the tests could be commented out in
>20_head_tests.cf. Which is the best and/or recommended method?
either works fine. This way is easier.
>> -Original Message-
>> From: [EMAIL PROTECTED]
>
>>
>> Alexander Skwar writes:
>> >Good
Hey Justin,
There was another suggestion that the tests could be commented out in
20_head_tests.cf. Which is the best and/or recommended method?
--Larry
> -Original Message-
> From: [EMAIL PROTECTED]
>
> Alexander Skwar writes:
> >Good morning,
> >
> >now that osirusoft is officially
On 27 Aug 2003, K Old wrote:
> Why is it called a "joe-job"?
http://www.everything2.com/index.pl?node=Joe%20Job
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
__
On Wednesday, August 27, 2003, at 09:31 AM, Fred I-IS.COM wrote:
Welcome to the site it's us again, now we extended our
offerings,
here is a list:
1. Heroin, in liquid and crystal form.
2. Rocket fuel and Tomohawk rockets (serious enquiries only).
3. Other rockets (Air-to-Air), orders in bat
hi.
i think authentication is not really the issue here.
and a firewall would not do much good in this situation either.
it would if you could identify a set of ips or domains, but if it´s
completely random there´s really no way to block that.
i think you should implement some kind of logrotation
On Wed, Aug 27, 2003 at 11:31:44AM -0700, Justin Mason wrote:
> We currently support:
>
> Envelope-Sender - qmail
> X-Envelope-From - procmailrc says this may occur
> Return-Path - Postfix, sendmail, rfc821
qmail also sets Return-Path.
Recent versions of Postfix can add an
Hi,
how sucessfull is pyzor in detecting spam? Any experiences? I'm alread
using razor, which works quite nice. Would I get better results using
pyzor instead or should I use a combination of both?
Thanks,
Marcus
--
Marcus Schopen(0>
P.O. Box 10 25 25 //\ Deutsche Zope User Grou
At 8/27/03 06:00 AM , Chris Santerre wrote:
This has been discussed. The rules will not hit because of the embedded
mime code. They simply ignore past the first level. I'm hoping someone
will write an eval for this. As far as I know, no version of SA handles
this. So we really need a simple eval
I am running spamassassin 2.55 out of spamass-milter 0.2.0, and I
recently had a problem in which spamd went crazy because it couldn't
write to a user's Bayes journal. Is there a way to have spamd give up
if it can't write to the journal? Below are detail of exactly what
happened.
As I said, spa
At Tue Aug 26 13:15:59 2003, 'Carlo Wood' wrote:
>
> On Tue, Aug 26, 2003 at 11:21:46AM +0100, Martin Radford wrote:
> > >From my own collections:
> >
> >with FQDNwith hostname only
> > ham: 2331 (85.6%) 391 (14.4%)
> > spam: 1925 (76%)
Hi,
On Wed, 27 Aug 2003, Louis LeBlanc wrote:
> On 08/27/03 05:52 PM, David sat at the `puter and typed:
> > The setup is pretty secure (I think) and and don't find any evidence
> > in my logs that I have an open relay. The problem is that I got a
> > LOT of connections from someone that tries t
Theo Van Dinter wrote:
I can put up my bayes_seen and bayes_toks files, if it will help for
debugging purposes.
how about just a -D output?
I assume you mean spamassassin -D, not sa-learn -D, but I've attached
both a run of spamassassin -D on a spam (which was missed due to Bayes
not bei
Marian Eichholz writes:
>As far as I can see in FAQ and manpages, there is no official way to provide
>the envelope-sender (the SMTP-"MAIL FROM:" argument) to SA for furtehr
>reference.
>
>There are good reasons to have the Envelope-Sender at hand:
>
>- the Sender: (as best bet) might be forged
>
Just saw this come thru:
Content-type: multipart/alternative;
boundary="---3832313337353739393830303030303031393433---"
So we need to change this rule from:
header L_MIME_BOUND_SIMPLE Content-Type =~
/boundary="-Simple-Boundry-"/
describe L_MIME_BOUND_SIMPLE Spam tool pattern in M
On Wed, 2003-08-27 at 13:40, Yorkshire Dave wrote:
> Before you react, think joe-job, think fake.
Why is it called a "joe-job"?
Kevin
--
K Old <[EMAIL PROTECTED]>
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
htt
Hi David,
> -Original Message-
> From: David
> The setup is pretty secure (I think) and and don't find any
> evidence in my logs that I have an open relay. The problem is
> that I got a LOT of connections from someone that tries to
> send e-mail to fake users at my domain. The logfile
Alexander Skwar writes:
>Good morning,
>
>now that osirusoft is officially dead, what should we SA admins do? Set
>all scores for OSIRUSOFT related test to 0? Which are all the tests? Is
>the following sufficient?
>
>score RCVD_IN_OSIRUSOFT_COM 0
>score X_OSIRU_DUL 0
>score X_O
I received 2 spamassassin rejections from your server today.
bottlenose.demon.co.uk
1) Orisoft is dead. Remove the test from SA ASAP. it Blacklists everyone
now.
2) Don't scan the spamassassin list. We often talk about spam.
3) Sending rejections based on Spamassassin score has generally been frow
On Wed, Aug 27, 2003 at 10:19:08AM -0700, Ben Gertzfield wrote:
> Has all my nice Bayes training from < 2.60r2 been expired away? When I
> run sa-learn on my collection of 16,000 old spam mails, it correctly
> reports that it's already learned all those Message-IDs:
No, the tokens get a new tim
Kai MacTane wrote:
> In particular, I want to catch use of their "real name" info in the
> Subject:, or capitalized versions in the body. For easy testing, I'm
> supposing just one user, a Mr. Foobar Wombat. My rules to catch
> things are as follows:
[snip extra rule bits]
> header SUBJ_FOOBAR_CA
John Owens writes:
>I've got a small problem with SpamAssassin that I hope you can help me
>with. I receive a significant amount of email forwarded through
>another account. I don't have any access to the way SpamAssassin is
>run on this account; it's run on every piece of mail. And it wraps the
>
Fred writes:
> Hello,
> I'm using 2.60 rc2.
>
> Proposal: Should --lint check for orphan test scores?
>
> Reasons: When we upgrade and we have custom scores in local.cf or user prefs
> this will help us identify which tests are no longer in use.
> Other: If we somehow spell a test name wrong i
Thanks for your input, though I never really gave this a second thought as
someone trying to promote a legitimate business.
I think the point to my original message has gotten lost. Basically, this
is still spam and I'm pleading ignorance on how to tweak my rules to get
something as absurd as thi
> Having a problem with some users on our local network writing
> emails that get marked as spam. I dont want to whitelist by
> domain as this is easy to forge is there a way to whitelist
> by IP (and mask) that the mail was recieved from, being these
> users are all local on rfc1918 network s
At 11:37 AM 8/27/2003 -0500, Robin Witkop-Staub wrote:
body RAVEN_MaskedWordsF
/\b(?:excIusive|GiangBiang|sIut|ganigbainged|duides|hairdciore|ExcIude|pIz)/
i
describe RAVEN_MaskedWordsFmasked spam word(s)
scoreRAVEN_MaskedWordsF10.0
1) I bet you'll find that the "plz" isn't an L, i
On Wed, Aug 27, 2003 at 11:37:26AM -0500, Robin Witkop-Staub wrote:
> I was trying the following filter found on the suggested script sharing
> page. For some reason it was tagging emails that had the word "pizza" in
> them. Why?
>
> body RAVEN_MaskedWordsF
> /\b(?:excIusive|GiangBiang|sIut|
The ending,
pIz
It's a cap I, and the /i at the end tells it to ignore case.
I think you want a number 1 in there?
Frederic Tarasevicius
Internet Information Services, Inc.
Robin Witkop-Staub wrote:
> I was trying the following filter found on the suggested script
> sharing page. For some re
On Wed, 2003-08-27 at 03:03, Larry Gilson wrote:
> Hi Dave,
>
> > -Original Message-
> > From: Yorkshire Dave
>
> > I'm not sure that having an @foo or @foo.localdomain
> > message-id actually breaks any standards, although it may bend them
> > slightly.
> >
> > RFC822/2822 seem to refe
On 08/27/03 11:37 AM, Robin Witkop-Staub sat at the `puter and typed:
> I was trying the following filter found on the suggested script sharing
> page. For some reason it was tagging emails that had the word "pizza" in
> them. Why?
This is why. Notice the pIz? you have the case insensitive flag
On Wed, 27 Aug 2003 16:59:42 +0200 (CEST)
Morten Kjeldgaard <[EMAIL PROTECTED]> wrote:
> I've noticed recently that spam is starting to creep through the cracks of
> SA. I looked at one of them, and it seems this spammer is trying to foil
> the spam-filters, especially Bayes.
>
> The spam mess
On Wed, 2003-08-27 at 18:06, Rick Macdougall wrote:
> Patrick Morris wrote:
>
> > That has got to be the single funniest piece of spam I've seen in a long
> > time. :)
> >
> > jherschel wrote:
> >
> >> -Original Message-
> >> *From:* Tyler Madison [mailto:[EMAIL PROTECTED]
> >> *Sent:*
Thus spake Robin Witkop-Staub ([EMAIL PROTECTED]):
> I was trying the following filter found on the suggested script sharing
> page. For some reason it was tagging emails that had the word "pizza" in
> them. Why?
>
> /\b(?:excIusive|GiangBiang|sIut|ganigbainged|duides|hairdciore|ExcIude|pIz)/i
On Wed, 27 Aug 2003, Rick Macdougall wrote:
> Patrick Morris wrote:
>
> > That has got to be the single funniest piece of spam I've seen in a long
> > time. :)
> >
> > jherschel wrote:
> >
> >> -Original Message-
> >> *From:* Tyler Madison [mailto:[EMAIL PROTECTED]
> >> *Sent:* Wednesd
Hi, SpamAssassin folks.
I've been using SpamAssassin happily for the past 6 months or so, and
it's dramatically reduced my amount of spam.
Recently, I upgraded to 2.60rc2 for the upgraded rules sets (I was
getting a ton of spams with false X-Mailer headers set to Emacs Gnus
coming through).
Lol - yeah, I think it's DEA or something trying to set up a sting ;-)
... But is there a rule I could tweak to get something as obvious as "child
pornography" blasted as spam?
James Herschel
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Patrick
Morris
Sen
--On Wednesday, August 27, 2003 11:37:26 -0500 Robin Witkop-Staub
<[EMAIL PROTECTED]> wrote:
I was trying the following filter found on the suggested script sharing
page. For some reason it was tagging emails that had the word "pizza" in
them. Why?
body RAVEN_MaskedWordsF
/\b(?:excIusive|
Patrick Morris wrote:
That has got to be the single funniest piece of spam I've seen in a long
time. :)
jherschel wrote:
-Original Message-
*From:* Tyler Madison [mailto:[EMAIL PROTECTED]
*Sent:* Wednesday, August 27, 2003 2:05 PM
*To:* [EMAIL PROTECTED]
*Subject:* Best Child Pornogra
On 08/27/03 05:52 PM, David sat at the `puter and typed:
> Hi gurus,
>
> Sorry if this is a little bit off topic but I´m in deep trouble. I´m
> running a Postfix server for a couple of domains with just a few
> users.
>
> The setup is pretty secure (I think) and and don't find any evidence
> in m
Thanx Bob,
Would you know also how to integrate them in Spamassassin?
In the local.cf file??
Thanx!!
CR
Selon Bob Apthorpe <[EMAIL PROTECTED]>:
> On Wed, 27 Aug 2003 17:56:19 +0200 Céline REDON <[EMAIL PROTECTED]>
> wrote:
>
> > Hi all,
> >
> > Could anyone tell me if there is some free RBL ?
On Wed, 27 Aug 2003, Morten Kjeldgaard wrote:
> eutectic scarf tailing identifiable corresponded
Whenever I've seen this, it's looke like:
eutectic scarf tailing identifiable corresponded
ie -- opening a font over and over. I wrote a simple procmail rule to catch
that:
:0 B
* <1
* ^^$?$?
On Wed, 27 Aug 2003 17:56:19 +0200 Céline REDON <[EMAIL PROTECTED]> wrote:
> Hi all,
>
> Could anyone tell me if there is some free RBL ??
Yes, see http://openrbl.org and
http://www.declude.com/junkmail/support/ip4r.htm
-- Bob
---
This sf.ne
Hi all,
I'm getting this bizarre problem. My email accounts are hosted somewhere
where SpamAssassin is already installed. I enabled it and it works great.
However, they don't provide SpamBox, so I had to use procmail to
automatically move spam to a spam folder. I'm basically piping the mail
throug
I was trying the following filter found on the suggested script sharing
page. For some reason it was tagging emails that had the word "pizza" in
them. Why?
body RAVEN_MaskedWordsF
/\b(?:excIusive|GiangBiang|sIut|ganigbainged|duides|hairdciore|ExcIude|pIz)/
i
describe RAVEN_MaskedWordsFma
Yes, I was thinking it was an FBI project :)
-Russ
On Wed, 2003-08-27 at 08:46, Patrick Morris wrote:
> That has got to be the single funniest piece of spam I've seen in a long
> time. :)
>
> jherschel wrote:
>
> > -Original Message-
> > *From:* Tyler Madison [mailto:[EMAIL PROTECTED]
Having a problem with some users on our local network writing emails that
get marked as spam. I dont want to whitelist by domain as this is easy to
forge is there a way to whitelist by IP (and mask) that the mail was
recieved from, being these users are all local on rfc1918 network seems like
the
Hi!
I'm not quite sure where to put this, that's why it is cross-posted to both
mailing-lists.
Anyway, I wonder whether a "sort-of" domain setup is possible with
qmail-scanner and SpamAssassin ? What I want to achieve, is that all mail
for a specific domain uses its own bayesian database - and m
Gerry Maddock <[EMAIL PROTECTED]> wrote:
> I have been using spamassassin for a few days now and love it! I have
> been able to set up whitelists for users in in user_prefs with no
> problems so far. I do have two users that receive email from a yahoo
> group. Normally I'd add the email of the list
Hi gurus,
Sorry if this is a little bit off topic but I´m in deep trouble. I´m running a Postfix
server for a couple of domains with just a few users.
The setup is pretty secure (I think) and and don't find any evidence in my logs that I
have an open relay. The problem is that I got a LOT of co
Hi all,
Could anyone tell me if there is some free RBL ??
CR
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk mailing list
[EMAIL
Greetings SA Community,
I have a simple Sendmail->Procmail->SA setup working on RH 9.0. It is
great!! Thank you SA developers and list posters. I have been reading this
list for a few weeks in order to scale the learning curve and do more
advanced things with all three of these tools. Although
Hi all, I just received this spam, It made me laugh so I
thought to pass it on.
Welcome to the site it's us again, now we extended our offerings,
here is a list: 1. Heroin, in liquid and crystal form. 2.
Rocket fuel and Tomohawk rockets (serious enquiries only). 3. Other
rockets (Air
That has got to be the single funniest piece of spam I've seen in a long
time. :)
jherschel wrote:
-Original Message-
*From:* Tyler Madison [mailto:[EMAIL PROTECTED]
*Sent:* Wednesday, August 27, 2003 2:05 PM
*To:* [EMAIL PROTECTED]
*Subject:* Best Child Pornography Site
Welcome to th
jpf wrote:
Is there someway that I can edit the subject line to get the SA score in
there? I am using SA 2.55 and procmail.
TIA
jpf
Here is the top two lines from my local.cf file. Works great
rewrite_subject 1
subject_tag [SA Says: _HITS_]
It gives the following results:
[SA Says: 63.3
On Wed, Aug 27, 2003 at 04:26:19PM +0200, Alexander Skwar wrote:
> Rainer Sokoll wrote:
>
> > I think it is better to disable rblcheck for osirusoft completly in
> > 20_head_test.cf:
>
> Okay. What about those X_OSIRU_ tests? Are they related to
As far as I understand this, by disabling check_rb
> -Original Message-
> From: Larry Gilson [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 27, 2003 10:24 AM
> To: 'Chris Santerre'; spamassassin_list
> Subject: RE: [SAtalk] Custom Rules - spamd
>
>
> Hi Chris,
>
> > -Original Message-
> > From: Chris Santerre
>
> > Nope,
I've noticed recently that spam is starting to creep through the cracks of
SA. I looked at one of them, and it seems this spammer is trying to foil
the spam-filters, especially Bayes.
The spam message contains a large number of dictionary words written in
HTML in WHITE, so they don't appear on the
On Tue, 2003-08-26 at 15:47, Jennifer Fountain wrote:
> in the articles I am reading, you should see this in your
> /var/log/maillog:
>
> Jun 8 05:08:00 myhost spamd[11636]: info: setuid to qmailq succeeded
> Jun 8 05:08:00 myhost spamd[11636]: checking message
> <[EMAIL PROTECTED]> for qmailq:545
Here is how I do it - these lines are in
/etc/mail/spamassassin/local.cf on my system
# Whether to change the subject of suspected spam
rewrite_subject 1
# Text to prepend to subject if rewrite_subject is used
subject_tag [SPAM-Score-_HITS_]
jpf wrote:
Is there someway tha
I think that would be a bad idea. I jacked up the MS executable test to
+110 to make sure if some one was dumb enough to send an MS executable, but
was white listed, that the mail would still get tagged. Maybe as an option
it would be nice for some, such as
HALT_ON_WHITELISTED 1
or something s
Rainer Sokoll wrote:
> I think it is better to disable rblcheck for osirusoft completly in
> 20_head_test.cf:
Okay. What about those X_OSIRU_ tests? Are they related to
osirusoft.com? Seems so.
Alexander Skwar
--
-> Keine Kopien senden - ich lese die Listen in denen ich schreibe! <-
-> Do not
Hi,
On Tue, 26 Aug 2003 21:56:02 -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote:
> On Wed, Aug 27, 2003 at 03:34:46AM +0200, Marcus Schopen wrote:
> > I use amavisd-0.1. My sendmail is responsible for two domains (privat
> > and work stuff).
> >
> > Depending on to which domain a user is sendi
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, August 27, 2003 9:02 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Testing site-wide custom rules, how to?
>
>
> Good-day!
>
> We're using SA along with amavisd-new. After adding custom
> rule
Wow – I can’t
believe this only scored a 4.8 …this is way more offensive than the “get a
bigger ” emails that get caught no problem. I assumed there would be a basic rule
that would look for “child pornography” in the title.
Any ideas
on how to boost scores on this kind of filth?
J
1 - 100 of 166 matches
Mail list logo
