MMEDIATELY on any FPs you may encounter. This version runs even
faster and is smaller then all previous versions.
http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rule
ports this. I'd start
checking other things like is spamd restarted? Does everything --lint
ok? Are there other rules with similar name? Does the real (not
"testing") rule have a typo? Does -D report your rules really being
loaded from where you think they are?
rs likely to severely restrict the income and thus
> motivations for
> doing so :)
> --
>
> Orxder your Vjiagmra and Skupter Vimagera saifely and
> securfely onlijne.
>
> Esntper Hekre
>
aHAHAHAHAHAH
Thyat ixs a dfunmny qone!
:)
--Chris
---
to be classified as spam.
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes AOL IM: CNBarnes
[EMAIL PROTECTED] Yahoo IM: chrisnbarnes
Computer Systems Manager ph: 979-845-7801
Department of Ph
Yeah, my bigevil thoughts post was sent ages ago! almost 2 weeks before it
showed up on the list. I posted a bigevil update and haven't seen it yet!
WTF?
--Chris
> -Original Message-
> From: Gary Funck [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 29, 200
It's great, I run it at the MTA level and it drops tons of junk without
any false positives to date (after about 4 months usage).
Chris
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Dan
Wilder
Sent: Monday, January 26, 2004 5:50 PM
To: Spamass
report them to playaudiomessage.com. But by the looks from their
website, they don't want to hear from you anyway.
They stay.
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of the sp
trial_tripwire.cf
input file is tripwire.cf
output file is trial_tripwire.cf (with all scores set to 0.01)
copy trial_tripwire.cf to your /etc/mail/spamassassin
Repeat for each ruleset you are trying out.
HTH.
--
Chris Thielen
Easily generate
/mail/Spam/Filtered mailbox, I would rather
a) run sa-learn on that message
b) dump that message into /dev/null.
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes AOL IM: CNBarnes
[EMAIL PROTECTED] Yah
t installed
on their interactive machine, sa-learn isn't there.
My question - do we need to install SA on each Linux machine, or is
there some minor bits (the sa-learn module, DB_File, etc) we can simply
copy over?
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + +
story :-)
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of the species that survives,
not the most intelligent, but the one most responsive to change.'
like so:
spamassassin -x
SA will read all the *.cf files in ~/.spamassassin/user_prefs/ just like
it does for the system-wide /etc/mail/spamassassin/.
Hope this comes in handy for those of you who use user_prefs but don't
administer the machine SA runs on.
--
Chris Thielen
Easily gen
SA_RESTART"
instead of just
$SA_RESTART
This should do the trick, methinks.
(Version 1.07e is up)
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES):
http://www.sandgnat.com/cmos/
-
Doh!
*humble appologise*
You are correct sir! Removed in next update. Don't ask what is taking so
long for the next update. You don't want to know :)
--Chris
> -Original Message-
> From: Kelson Vibber [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, January 27, 2004 1
;t fun being the "helpdesk to the
community").
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes AOL IM: CNBarnes
[EMAIL PROTECTED] Yahoo IM: chrisnbarnes
Computer Systems Manager
ll be very greatly appreciated.
Chris Miller
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipseco
that is for
another list ;)
--Chris
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Friday, January 23, 2004 11:50 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] bigevil_54 smonitor
>
>
>
>
> smonitor in bigevil_54 would
Your Bayes must be hosed if what you think is spam gets BAYES_00.
Chris
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Paul
Diaguila
Sent: Monday, January 26, 2004 10:44 AM
To: [EMAIL PROTECTED]
Subject: [SAtalk] too much spam...
Greetings
I'm sure this is an FP left over from my pull from initial scripts. I don't
remember adding them by hand. They check out as legit. They will be removed
from next update. (Which was meant for last Sat. but something came up.
--Chris
> -Original Message-
> From: Paul
Why does it take your SA 69 seconds to process an email? Our systems
take about 3 seconds, using network tests and bayes with
Postfix/amavisd-new.
Chris
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Thomas Kinghorn
Sent: Friday, January 23, 2004 5:32
> the archive only shows till Dec 2003. Any way to see the archives from
> January?
http://news.gmane.org/gmane.mail.spam.spamassassin.general/cutoff=40042
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases:
htt
h. Guess I've got a
lot to learn.
Thanks for any advice.
Chris
--
Regards
Chris
A 100% Microsoft free computer
Registered Linux User 283774 http://counter.li.org
8:34pm up 21 days, 6:13, 8 users, load average: 0.47, 0.36, 0.43
---
il server I downloaded and my run for my home domain uses SA, I'll
> probably be more active. :)
Always good to have another helpful person around!
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES):
http://www.sandgnat.
ev/null" redirect. Run it interactively and see if
there's anything interesting being dumped to the console.
As for "postfix start" even if "spamassassin restart" fails, use ";"
instead of "&&".
--
Chris Thielen
Eas
. The only way to do this is with an EVAL function. Not a
bad idea to look at the overall length of email and see what percentage of
it is html link. SA has a rule like this, but might need some tweaking for
smaller emails?
--Chris (Already having a day from hell.) Santerre
--
> Brad
>
header __CS_FROM_ME From =~ /[EMAIL PROTECTED]/i
header __CS_TO_ME To =~ /[EMAIL PROTECTED]/i
meta CS_SPAM_TRICK __CS_FROM_ME && __CS_TO_ME
describe CS_SPAM_TRICK Spammer forged From + To my domain.
score CS_SPAM_TRICK 114.11 # Silly, isn't it?
Change to your own
On Thu, 2004-01-22 at 14:49, Smart,Dan wrote:
> Chris:
> Great job on the scripts. I have modified the munging on Tripwire (set name
> to TW) and BigEvil (comment out WXYZ). How do I add these custom munges to
> my_rules_du_jour?
Dan,
I'm going to suggest that you igno
core up to 5.0 for that rule.
--Chris
> -Original Message-
> From: John Fleming [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 22, 2004 8:53 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] v+word problem
>
>
> BTW, I AM using BigEvil and Anti_D
settings when an updated
version of rules_du_jour is available:
http://www.exit0.us/index.php/MyRulesDuJour
- I moved the download urls: http://sandgnat.com/rdj/rules_du_jour and
http://sandgnat.com/rdj/my_rules_du_jour
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated
Soon there will be one place to go ;)
> -Original Message-
> From: Frank Pineau [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, January 20, 2004 8:51 PM
> To: Spamassassin-Talk (E-mail)
> Subject: Re: [SAtalk] UPDATES Tripwire 1.16 and Bigevil 2.06k
>
>
>
> >http://www.merchantsoverseas.com/
On Wed, 2004-01-21 at 18:23, Erik Slooff wrote:
> Hi Chris,
>
> Small change for RulesDuJour: when sa is not in path lint will not succeed
> (line 313). Maybe you could add a variable that contains the path to sa in
> the settings?
>
> Erik
>
Will do. Should have it
egit and not a scam, then why oh why on earth would they
hire a spammer. Also the products website is no where to be found in the
email source. Only thru a redirect.
I'm thinking the product website should be larted just for hiring the
spammers!
mesg attached.
Chris Santerre
System Admi
er on the net. They are busy scratching out a living.
It needs to be made safer by the people who understand it. I can only effect
my immediate family/friends. And despite my best efforts, they still get
whacked now and then.
Airbags make me safer. But there wasn't anyway in hell I was going t
aaap :)
Just send them to me offlist. However FP reports you might want to copy
here. As I remove them from the NEXT update. But people might want to remove
them right away. They still trickle in now and then.
--Chris (bored today for some reason)
> -Original Mess
udes ANTIDRUG and
EVILNUMBER configured by default. POPCORN has been removed from the
default config. Thanks to whoever added configs for ANTIDRUG and
EVILNUMBER to the wiki.
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES):
http:/
iff...) need Popcorn...
So if I grab Jennifer's backhair I don't need any popcorn? There must
be some hidden meaning there.
I've removed popcorn from the default list of thinggies to snag in
RulesDeJour.
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated sp
(not
data) of those 5%.
ISPs used to complain about the costs of hardware vs. traffic. I'd say this
would help them in the long run. DON't raise my broadband bill, decrease the
spam traffic on your net!
--Chris
> -Original Message-
> From: James [mailto:[EMAIL PROTECT
> http://www.eclipsecon.org/osdn
> ___
> Spamassassin-talk mailing list
> [EMAIL PROTECTED]
> https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfus
t;
I also try the same. Some ISPs are useless to try to talk to, Above.net.
THey will end up blacklisting the complainee! (Is that a word?) :)
I'm trying to find some stats on spam origins. Particularly by ISP. I see
very little spam coming from cox.net cable modems vs. a buttload from
Comc
I'm not sure where the post is, but about 3 weeks ago I think Dallas put a
semi-end to the spell-checker debate :) He ran one and the outcome wasn't so
good.
--Chris
> -Original Message-
> From: Charles Gregory [mailto:[EMAIL PROTECTED]
> Sent: Tuesday, January 20
pparently you only subconsciously knew what the term "magic" meant :)
>
>
> >Thanks to Ralf and Matt who both suggested this.
>
> YW.
>
I agree, "magic" is a little confusing. I suggest the devs change it to
"one_ring_to_bind_them_all". That
Just posted 2.06M wich contains 1 single additional entry for:
oem-expert.biz
Why just for one domain? Because they are doing a dictionary attack on a
fellow list member resulting in a DOS.
Let the larting begin!
http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf
Chris Santerre
n.com/[EMAIL PROTECTED]@.ee8c9cf
Might have better luck finding experienced people there.
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases
(0BFU$C/\TED SPA/\/\ P|-|RA$ES):
http://www.sandgnat.com/cmos/
---
The SF
s up spamvertised urls in certain blackholes
(those CHINA* scores are indeed very high; I've been meaning to lower
them, but I'm not very motivated since I haven't personally seen any
false positives yet)
The LOCAL_OBFU are generated from http://sandgnat.com/cmos/
HTH
--
Chris Thi
http://sandgnat.com/cmos/rules_du_jour
I save
WY to many emails :)
--Chris
-Original Message-From: JRiley
[mailto:[EMAIL PROTECTED]Sent: Tuesday, January 20, 2004 1:52
PMTo: [EMAIL PROTECTED]Subject:
[SAtalk] Automated ruleset download
Just curious, if there is
> describe SUBJECT_VICODIN Mentions vicodin
> > score SUBJECT_VICODIN 4.0
> > (I took this example from Chris' site
> http://sandgnat.com/cmos/cmos.jsp
> > )
David,
Are you aware that the rule you have asked about does not detect
obfuscation? The rules at the cmos.jsp
Just posted 2.60L.
http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of the species that survives,
not the most intelligent, bu
3 Fax -- 4156341323
Domain servers in listed order:
NS0O01.GOODWEBRX.COM
NS0O01.MYEFUTURE.NET
Chris Santerre
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integrati
FVGT - Contains a URL in the
> BZ, TC, US or
> WS top-level domain
>
Yup, this is correct. We are going thru all the rules in the SARE and will
prbly rescore them all based on RM's formula. This one seems a tad high :) I
would lower that to around .45-.65 for my taste.
HTH
--Chris
ce, so I
> thought I'd pass the idea on :)
Might be neat, but I think this sort of thing is best left to scripts
specifically for each operating system. For instance, both razor and
pyzor are kept up to date via apt-get on my Debian system.
--
Chris Thielen
Easily generate SpamAssassi
ching as much as possible, and go with
[\s\(\)\-\.]+ (heck, I would probably go as far as just doing \W+ or \W*
to catch any characters the spammers might try to throw in).
--
Chris Petersen
Programmer / Web Designer
Silicon Mechanics: http://www.siliconmechanics.com/
Blade Servers: http://www.
> Lets not forget parentheses. Here is how I would have it look.
> [\s(\(|\-|\)\.]+
> Well I hope it is correct.
[\s\(\)\-\.]+
--
Chris Petersen
Programmer / Web Designer
Silicon Mechanics: http://www.siliconmechanics.com/
Blade Servers: http://www.siliconmechanics.com/c
Bah! What was that quote? Something about real men put there files on the
internet and letting the world be their backup? Theo has it. :)
--Chris (OH I hate EDI! Standard my #$^!)
> -Original Message-
> From: Gary Smith [mailto:[EMAIL PROTECTED]
> Sent: Monday, January 19, 200
> -Original Message-
> From: SpamTalk [mailto:[EMAIL PROTECTED]
> Sent: Monday, January 19, 2004 3:32 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] BigEvil Archive
>
>
> > -Original Message-
> > From: Chris Santerre [mailto:[EMAIL PROTECT
e him at the keyboard now, with a cig hanging from
his mouth and a bottle of JD in one hand! OH man.I need to photoshop a
pic like that!
Thanks for the laugh! I needed it today as well! Sprinkler pipe in building
froze and burst over the weekend. 1 CPU gone. *whew*
--Chris (Pats by 10 point
Huh? That was posted 2 days ago! And I had tested it longer then that! IF
there was an error, I would have heard about it within an hour of posting.
What kind of errors in the log? ANyone else having a problem
--Chris
> -Original Message-
> From: Carl Chipman [mailto:[EMAIL PRO
review by IT for FPs.
Chris
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
vagabond
Sent: Tuesday, January 13, 2004 5:07 PM
To: 'Dan'; [EMAIL PROTECTED]
Subject: RE: [SAtalk] Exchange and autolearn
I do something like this - SA/spamass-mil
an go ahead and grab the 90_FVGT.cf rules.
--Chris
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]
> Sent: Monday, January 19, 2004 11:22 AM
> To: [EMAIL PROTECTED];
> [EMAIL PROTECTED]
> Subject: RE: [SAtalk] UPDATES Tripwire 1.16 and B
I was hoping more people would be running this by now. What is the average
scan time per msg when using this? Any timeouts? I know this was being
worked on for 2.70, but heck you got it here as a patch already!
--Chris (Really needs to upgrade but still proving a point.)
> -Origi
_UnsubscribePHPtext uri to unsubscribe link
> score RM_uwd_UnsubscribePHP3.000 # 236s/0h of 92209
> corpus (74874s/17335h) 01/17/04
>
These last four rules are SURPRISING! I would never have guessed those
results! Looks good!
--Chris
-
sting,
having to complete work for my real job, and maybe some time with the family
;)
I'll take a look at all of these. I prefer to have an example of each spam
that I'm adding to the list. This way if someone asks, I can show them :)
--Chris
> -Original Message-
> From: Da
ore rules_du_jour was invoked). I also changed the
default behavior when running interactively to output the debug
information.
I put the new version (1.04) up at:
http://sandgnat.com/cmos/rules_du_jour
If this doesn't address somebody's issue or suggestion, yell again
1 ] ; then
/etc/init.d/spamassassin restart 2>/dev/null 1>/dev/null
echo "Restarted SpamAssassin"
fi
--
Chris Petersen
Programmer / Web Designer
Silicon M
_rb_HTML_HAS_AHREF && __FVGT_rb_HTML_HAS_IMG &&
> __FVGT_rb_A_THEN_IMG)
> describe FVGT_m_IMAGE_ONLY_SPAM Short HTML message with IMG
> and A HREF
> score FVGT_m_IMAGE_ONLY_SPAM 3.5
>
>
> The size of 80,375 might need to be tweaked but this rule
> does
to find them
by now, you must be under a rock (Or a Colts Fan!) ;) Go Pats!
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of the species that survives,
not the most intelligent, but the
oned a few times of
course. :)
There is some other small things I still want to digest and talk to the rule
writers about. Talk about becoming less reactive got me thinking on some
stuff. I urge anyone with the time to view the webcasts. I understood a HELL
of a lot more then last year ;)
Hopefuly I&
how to convert all my bash-isms to POSIX, by all
means share the knowledge :).
Thanks.
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases:
http://www.sandgnat.com/cmos/
---
The SF.Net email is sponsored by Ecl
spams and any methods in spamassassin to stop them ?
Regards
Chris
Get advanced SPAM filtering on Webmail or POP Mail ... Get Lycos Mail!
http://login.mail.lycos.com/r/referral?aid=27005
amp; __VDRUG3 && __VDRUG4)
describe MRWIGGLY Mr. Wiggly enhance drug spam.
score MRWIGGLY 1.0
rawbody __VDRUG1B /^$/
rawbody __VDRUG2B /^pic is loading/
rawbody __VDRUG3B /\/(?:[a-zA-Z]|\d)\.gif\" border\=0\>\<\/a\>$/
rawbody __VDRUG4B />0pt out<\/a>$/
meta MRWI
"Rules De Jour": An automated way to keep up with the latest rulesets.
http://www.exit0.us/index.php/RulesDeJour
--
Chris Thielen
Easily generate SpamAssassin rules to catch obfuscated spam phrases:
http://www.sandgnat.com/cmos/
-
This is some pretty good info. Can you trow something up on either wiki
about exim users/lots of rules/long headers/and default buffer size? I'm
sure others might start having this problem.
good find!
--Chris
> -Original Message-
> From: Zarjazz [mailto:[EMAIL PROTECTED]
>
UBE/UCE policy, or I
will put them back in.
--Chris (cold, so very cold) Santerre
> -Original Message-
> From: JRiley [mailto:[EMAIL PROTECTED]
> Sent: Friday, January 16, 2004 10:16 AM
> To: Overdijk, Harrie; 'Chris Santerre'
> Cc: 'Spamassassin-Ta
cause
the only place that has a clue how to work on my car is 40+ miles away!
So for those people I was to meet, I'm sorry I missed you! Looks like its
webcast for me again. Next year I won't drive my preeeciiooouusss. :(
I'm now getting hot choco intravenously.
Chris (So sad
nly have 64 megs! SA
is taking only 20 megs with all those rules loaded.
Take each one out seperetly and see if they each run.
I'll try to check in tomorrow.
--Chris (Under 35 degrees, New Englanders just call it cold!)
> -Original Message-
> From: Scott Harris [mailto:[EM
! lol.
--Chris
> -Original Message-
> From: Daniel Kleinsinger [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 15, 2004 10:10 PM
> To: Chris Santerre
> Subject: BigEvil FP
>
>
> BigEvilList_37 hits on biz.yahoo.com which gave me an FP on an email
> from t
ic ends up being a spam tag. :)
--Chris
> -Original Message-
> From: Steve Thomas [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 15, 2004 4:30 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] most rules hit (so far)
>
>
>
> You asked for it!
>
> http
that you don't fully understand to under .50 (Well
except for Bigevil!)
So the answer to your questions is.soon. We are woking on cleaning up
what we have now.
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
$/
What do you think?
And I've looked at the numbers. The spam traffic is still increasing since
the begining of the year, but my MTA level denials have also increased. The
guys at the DNSRBLs are really doing a bang up job. So the amount of spams
that gets caught for me to play with have gone
Fred thawd out. Added the PGP stuff that was requested. Update posted to my
site. Link in sig.
Who says opensource doesn't respond quickly?
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the
This thread is useless without pics!
Oh wait, sorry.
This post is useless without the spam! :)
Try the new version of Tripwire (1.14) posted today. It's been beechwood
aged for twice the flavor!
--Chris
> -Original Message-
> From: Steve Thomas [mailto:[EMAIL PROTEC
Not that I don't like this discussion, but this really is getting way off
topic for Spamassassin.
Can it be taken offlist now?
--Chris
> -Original Message-
> From: Brian May [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 15, 2004 12:30 PM
> To: Greg Cirino - Ci
Sorry it took so long, I was waiting to hear back from Fred. He is trapped
in the North :)
Veriosn 1.14 has been posted to web with Bart Schaefer's changes! Nice work
Bart!
http://www.merchantsoverseas.com/wwwroot/gorilla/99_FVGT_Tripwire.cf
Chris Santerre
System Admin and SA Custom
that
address is in replies to people that contacted me first. I do not send
out email to more than 1 person at a time using that address (for any
reason).
Ergo - .biz addresses are no more defacto spam than a .com address.
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + +
ayes a corpus of Ham.
Getting them to do that is somewhat more problematic...
--
+ + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +
Chris Barnes AOL IM: CNBarnes
[EMAIL PROTECTED]Yahoo IM: chrisnbarnes
Comp
how to I fix it?
Chris
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
ly got a rule to nail that sucker and now I'm not
getting any :(
--Chris (Where is my spam?) Santerre
> -Original Message-
> From: Ralf Guenthner [mailto:[EMAIL PROTECTED]
> Sent: Thursday, January 15, 2004 7:22 AM
> To: Sönke Ruempler
> Cc: [EMAIL PROTECTED]
> S
> -Original Message-
> From: Kurt Yoder [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 14, 2004 4:54 PM
> To: Chris Santerre
> Cc: 'Matthew Trent'; Spamassassin-Talk
> Subject: RE: [SAtalk] RE: New Ruleset Available!!! TRIPWIRE! You don't
> want
> -Original Message-
> From: Kurt Yoder [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 14, 2004 4:45 PM
> To: Chris Santerre
> Cc: 'Matthew Trent'; Spamassassin-Talk
> Subject: Re: [SAtalk] RE: New Ruleset Available!!! TRIPWIRE! You don't
> want
de, especially when it's a LOT of code and you don't really know what
you're looking for.
--
Chris Petersen
Programmer / Web Designer
Silicon Mechanics: http://www.siliconmechanics.com/
Blade Servers: http://www.siliconmechanics.com/c
very high traffic.
So you say, "That's a George Orwell 1984 society of being watched!"
I said traffic, not data. And only port 25.
So you say, " But" *WHAM* "ouch."
That was the point I slapped you with a fish ;)
--Chris
ever heard of a long hitlist causing this. I've CC'd the
SATALK on it.
Hm...
--Chris
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branch
be
a LOT more.
--Chris
> -Original Message-
> From: Pierre Thomson [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, January 14, 2004 2:52 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] a goof-proof (?) test for evil mailers
>
>
> I have noticed that some sp
have to test them.
For you lazy people:
http://www.merchantsoverseas.com/wwwroot/gorilla/bigevil.cf
http://www.merchantsoverseas.com/wwwroot/gorilla/99_FVGT_Tripwire.cf
Boston on Friday? Could be rabbit, could be.
Chris (trying to finish work to go to MIT on Friday) Santerre
y tokens?
(if not, it should) What about message headers? Does it tokenize
rawbody or body? Does it tokenize only word-based characters, or would
something like "[EMAIL PROTECTED]@" become a token?
I'd honestly like some answers to these questions - I've asked before
but didn
en
> rules myself before.
>
> Hein Zelle
Yeah this has been discussed and already answered by others. I just wanted
to say thanks for making me laugh! I can't believe I recognized the subject
line for what it was!
--Chris, his sails unfurled!
-
is about to go thru EVERY rule in the SARE. We are looking at
the highest spam + ham hitters first. So this should be cleared up soon.
Chris Santerre
System Admin and SA Custom Rules Emporium keeper
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
'It is not the strongest of
I suggest an additional meta for airport ham :) Nice find!
Yeah Fred is like a pitbull for this stuff! Most of the rule writers in the
group think about spam a little too much. Myself included. We won't even go
into someone's Wizard of Oz dream ;)
--Chris(Cursing Apple today!
this is strictly based on english. SO YMMV if that is not your lanquage
of choice.
1-3 FP hits in a ham won't do much. That is why they are scored .07 .
Don't thank me on this one. I'm just the Monkey with the loudest voice in
the group ;)
--Chris
x27;ll need MTA-level integration.
| I use Postfix as my MTA, so I'm waiting for an integration that happens
| at MTA handshake.
Right.
--
Chris Edwards, Glasgow University Computing Service
---
This SF.net email is sponsored b
On Wed, 14 Jan 2004, Sascha Huedepohl <[EMAIL PROTECTED]> wrote:
> Hi,
> is there a log analyser for amavis or spamassassin?
>
http://rekudos.net/amavis-stats/
--
Chris Hastie
---
This SF.net email is sponsored by: Pe
1 - 100 of 1090 matches
Mail list logo
