[SAtalk] Help needed with url rule

2004-01-15 Thread Brian Ipsen
Hi! I'm no expert in regular expressions, but a bunch of the spam I've received recently has a link like this: http://www.takrr.com?rid=1097 What would a rule look like to match a pattern like (I've read a little about matching, but not enough to get it working): http://(anything).(com|net|org

[SAtalk] Spam links with remove ID ?

2004-01-11 Thread Brian Ipsen
Hi! In most of the spam I receive at the moment there seems to be a link/text like: http://www.domain.com/rid?=1142 Everything is (of course) base64 encoded - The main issue is to detect the .domain.[com|net|biz]/rid?[1-x digits] ... Is it possible to make a rule for this ? I have only seen it

RE: [SAtalk] Being BigEvil inspired...

2003-12-05 Thread Brian Ipsen
Hi, > I'm predicting you are not running 2.60 of SA? Older versions don't catch > the BASE64. Fom a tagged message: X-Spam-Status: Yes, hits=8.4 required=5.0 tests=BIZ_TLD,DATE_IN_PAST_03_06, DCC_CHECK,HTML_IMAGE_ONLY_02,HTML_MESSAGE,MIME_BASE64_TEXT, MIME_HTML_NO_CHARSET,MIME_H

[SAtalk] Being BigEvil inspired...

2003-12-05 Thread Brian Ipsen
Hi, Inspired by the BigEvil list I've created my own little file in in /etc/mail/spamassassin like this; rawbody SpamLinks_1 /\b(?:rxwarehouseusa\.com|rxmoreusa\.com|self-entertainment\.biz|herbal9\.bi z|onlyzbestout.\biz|yunoz\.biz|naturalherbal\.biz)\b/i describe SpamLinks_1Generated Sp

[SAtalk] Changed spammer technique ?

2003-11-09 Thread Brian Ipsen
Hi! Consider the following headers: Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 323 invoked by uid 615); 9 Nov 2003 00:28:19 - Received: from [EMAIL PROTECTED] by worf.andebakken.dk by uid 81 with qmail-scanner-1.20 (clamscan: 20030806. uvscan: v4.1.60/v

[SAtalk] Installation probs - make test fails...

2003-11-02 Thread Brian Ipsen
Hi! Trying to run "make test" on a 2.60 installation gives me these errors (RedHat 8.0); t/spamd_protocol_10.ok 1/10 Not found: symbolshit = GTUBE # Failed test 2 in t/SATest.pm at line 385 Not found: response-11 = SPAMD/1.1 0 EX_OK # Failed test 3 in t/SATest.pm at line 38

[SAtalk] Installation probs - make test fails...

2003-10-30 Thread Brian Ipsen
Hi! Trying to run "make test" on a 2.60 installation gives me these errors (RedHat 8.0); t/spamd_protocol_10.ok 1/10 Not found: symbolshit = GTUBE # Failed test 2 in t/SATest.pm at line 385 Not found: response-11 = SPAMD/1.1 0 EX_OK # Failed test 3 in t/SATest.pm at line 38

[SAtalk] Qmail-scanner + SpamAssassin / domain-specific filters/databases

2003-08-27 Thread Brian Ipsen
Hi! I'm not quite sure where to put this, that's why it is cross-posted to both mailing-lists. Anyway, I wonder whether a "sort-of" domain setup is possible with qmail-scanner and SpamAssassin ? What I want to achieve, is that all mail for a specific domain uses its own bayesian database - and m

[SAtalk] Filter creation ?

2003-08-25 Thread Brian Ipsen
Hi! Okay, new style of sending spam - and since I'm no good at regular Expressions, I hope someone can tell me how to filter stuff like this out (didn't get caught by my SA 2.55): [Mail Body Qoute on] For the first time on the web, we are offering V*l*A*G*R*A F*R*E*E! Yes, check out this Lim

[SAtalk] Statistics ?

2003-08-24 Thread Brian Ipsen
Hi! One thing I really miss about SpamAssassin - and it is not quite covered in the FAQ - is whether any tools exist to create statistics/graphs over the processed mail, maybe the ability to split statistics up per recipient-domain, so that it will be easy to get an overview of how much spam is i

[SAtalk] spamd memory usage ?

2003-08-15 Thread Brian Ipsen
Hi! Does anyone have an idea of the memory-usage from spamd ?? I'm running the spamd daemon via daemontools, and have experienced "out of memory" errors in the debuglog when spamc is called from qmail-scanner-queue. The spamd daemon/service has been limited to 40MB so far, but I've raised it t

[SAtalk] bayes files ?

2003-08-14 Thread Brian Ipsen
Hi! I've set up SpamAssassin site-wide on my qmail system, invoking spamc from the qmail-scanner-queue.pl script. Anyway, when starting the spamd daemon, I get this in the maillog-file: Aug 10 13:19:41 mail spamd[11377]: debug: bayes: no dbs present, cannot scan: /tmp/spamassassin-11377/.spamas

[SAtalk] FW: [SPAM] Dept of Homeland Security - New Speaker Added - Cyber - 5June - Arl Va.

2003-06-02 Thread Brian Ipsen
Title: Protecting Americas Infrastructure: Hi!    Hmm I wonder why the message below hasn't been caught by my SpamAssassin - maybe tweaking of the score values i my setup needs to be adjusted ?? Some might think the message isn't spam - but I do. Comments regarding tweaking of scores and