Re: [SAtalk] Should I just outright block *.biz domains?

2004-01-14 Thread Dragoncrest
was a good idea or not. Sounds like it's not. At 04:02 PM 1/14/04 -0800, Kelson Vibber wrote: At 03:30 PM 1/14/2004, Dragoncrest wrote: Just curious, but I've never noticed once where someone sent me legitimate mail from a .biz domain name. How about you guys? Would you think that it

[SAtalk] Should I just outright block *.biz domains?

2004-01-14 Thread Dragoncrest
Just curious, but I've never noticed once where someone sent me legitimate mail from a .biz domain name. How about you guys? Would you think that it would be safe to go ahead and just outright block all email coming from .biz domain names? Are there any other domain names or TLD's I should a

[SAtalk] AWL scoring spam as ham?? WTH??

2004-01-07 Thread Dragoncrest
In recent efforts to stop the flow of spam that's somehow getting through my best attempts at blocking it, I've been studying the spam that does get caught and have found something dreadfully scary. On several messages that are obviously blatent spam, I've been seeing things like this: -4.5 A

[SAtalk] Adjusting scores and weights

2004-01-04 Thread Dragoncrest
Hi there. Just wondering something. My little leak of spam is back again (*sigh* filty spammers.) and I've noticed something I think may help curtail that once again. In one of my spam messages I noticed something that said "RCVD_IN_SORBS" and in another it said "RCVD_IN_DSBL" complete with a sc

Re: [SAtalk] Re: Problem with Zero points spam messages.

2004-01-03 Thread Dragoncrest
Bayes database location defaults to ~/.spamassassin The Bayes files are named such that they begin like, bayes_. Those are the ones you want to remove. Well, I tried that and interestingly enough my spam leakage became a flood. So just for grins and giggles (I had no other ideas at the

Re: [SAtalk] Re: Problem with Zero points spam messages.

2004-01-02 Thread Dragoncrest
That's cool. So, which file do I need to nuke or edit or whatever to reset everything back to day one values? I don't want to delete or edit the wrong thing and end up with a total mess. :) By, "setting things back to zero," I assume you mean defaults. Probably not a bad idea. Setti

Re: [SAtalk] Re: Problem with Zero points spam messages.

2003-12-31 Thread Dragoncrest
Though his friends and family getting scored sounds very possibly like some Bayes corruption going on because of the false negative autolearn(ing) -- not a good thing. Granted though, as the scoring from friends and family was not posted, Bayes may not have had anything to do with it. Hmm,

[SAtalk] Problem with Zero points spam messages.

2003-12-31 Thread Dragoncrest
Not sure what to make of this, but for some reason lately I've been getting some emails getting through with either zero points or very low points scores that are obvious spam. Here's an example of the header on one of these emails. X-Spam-Status: No, hits=0.0 required=4.5 tests=BAYES_50 auto

Re: the problem with SA RE: [SAtalk] OT: Spam: Behind the scenes

2003-12-31 Thread Dragoncrest
Unfortunately the problem with SpamAssassin is that all the spam we should be complaining to ISPs about we are simply silently accepting and ignoring (perhaps reporting to DCC, Pyzor, Razor and Bayes...) and /dev/null, that's it. For spammers, SA, it "only makes them stronger" so to speak. Maybe

Re: [SAtalk] Problems sending to list

2003-09-30 Thread Dragoncrest
Actually, now that you mention it, I did mention about vi, er...niagara spam that was getting through. :) Hmm, I'll have to be a little more alert to that in the future then. Thanks. At 09:08 PM 9/30/03 +0100, Martin Radford wrote: At Tue Sep 30 03:21:09 2003, Dragon

[SAtalk] Problems sending to list

2003-09-29 Thread Dragoncrest
I got a message back today on a question I posted that says "this message matches blacklisted regular expression." Is there something I'm missing that my question got blacklisted? --- This sf.net email is sponsored by:ThinkGeek Welcome to g

[SAtalk] Question about GameSpy spam

2003-09-17 Thread Dragoncrest
Friend of mine and myself got into an argument about the website GameSpy. In my past experience I've been spammed by GameSpy and have a bit of a beef against them. They didn't do the spamming directly but instead sold their registered user lists to a number of high volumn spamhaus groups aft

Re: [SAtalk] moving spam mails to a seperate folder

2003-08-29 Thread Dragoncrest
Have you considered using Procmail to filter the mail once its tagged or not tagged? That's what I use and it's awesome. Does everything I need. If you need a good working example procmailrc file, let me know and I'll pass along mine. Now if you had something else in mind lik

Re: [SAtalk] OSIRUSOFT

2003-08-29 Thread Dragoncrest
Quite. They got pummelled to death by a DDoS. See: Yeah, stupid pathetic cowardly spammers (I can think of some much more colorful choice words for this, but I'll save those for later) are now fighting back by DDoS'ing all the blacklists off the planet just so they can continue to propa

Re: [SAtalk] Distributed Server Blacklists??

2003-08-14 Thread Dragoncrest
I thought as much. That's why I asked to be sure. At 05:16 PM 8/5/03 -0400, Matt Kettler wrote: At 04:22 PM 8/5/2003 -0400, Dragoncrest wrote: Just started hearing about something called a Distributed Mail Server blacklist today. Never heard of it before. Apparently if

Re: [SAtalk] Spam Filtering for outbound mail

2003-08-14 Thread Dragoncrest
Best of luck. I would seriously suggest NOT /dev/nulling suspicious e-mail. I've seen a fair number of false positives. And... well, as for 'viewing' the e-mail - I for one would not give my services to a company that will read e-mail based on the content. If I send a message and somehow put some

[SAtalk] Spam Filtering for outbound mail

2003-08-14 Thread Dragoncrest
Not sure if this is a procmail thing or an SA thing, so I'm asking the procmail people the same thing just in case. :) What I'm wanting to do is to start filtering all of our outbound mail for spam and viruses sometime soon. We're getting enough of our clients who work off our SMTP server f

Re: [SAtalk] Re: wow, this was a nice change

2003-08-05 Thread Dragoncrest
I fully agree. In fact this email has inspired me to start filtering all of our outgoing emails as well. I personally think it's a good idea. If more companies would actively filter their outgoing email servers, I think spam and viruses would be drastically cut in half at the very le

[SAtalk] Distributed Server Blacklists??

2003-08-05 Thread Dragoncrest
Just started hearing about something called a Distributed Mail Server blacklist today. Never heard of it before. Apparently if your mail server is part of a distributed mail server cluster, it's blacklisted until you're no longer part of one? Don't know a whole lot about this cause I only go

Re: [SAtalk] Getting Razor error

2003-07-16 Thread Dragoncrest
Since it is sporadic, I suspect that it is related to connectivity and/or congestion issues at (a/the) razor2 server(s). This suspicion is strengthened in my mind by the comment in the code about providing a better diagnostic than "Bad file descriptor" when the server is unavailable. Well,

Re: [SAtalk] Getting Razor error

2003-07-16 Thread Dragoncrest
Erm ... _no_, actually. What's in the vicinity of line 420 of /usr/local/lib/perl5/site_perl/5.005/Mail/SpamAssassin/Dns.pm on the machine with the problem? I've got the same thing you do on like 420 that you have on Line 407. In fact what you have and what I have (I've got SA v2.55) are

Re: [SAtalk] Getting Razor error

2003-07-15 Thread Dragoncrest
Nobody knows anything about this error? At 04:22 PM 7/14/03 -0400, Dragoncrest wrote: Just viewing my mail logs today because i started getting fetchmail errors saying I had duplicate processes running which usually singals that I've got a stuck email somewhere. In the proce

[SAtalk] Getting Razor error

2003-07-14 Thread Dragoncrest
ed as spam. Jul 14 15:18:46 dragoncrest spamd[6040]: razor2 check skipped: Bad file descriptor Died at /usr/local/lib/perl5/site_perl/5.005/Mail/SpamAssassin/Dns.pm line 420, chunk 1. Anybody know what this is? I'm guessing it has to do with DNS resolution, but I'm unsure. Can anyo

[SAtalk] Blacklists in SA?

2003-07-09 Thread Dragoncrest
Is there a way to apply blacklists in SpamAssassin? If there is, would there be a way to apply them if mail is being delivered via Fetchmail rather than through port 25 like a normal mail server? Cause I'm trying to filter mail on a machine that sits tucked behind a firewall and retrieves ma

[SAtalk] Wow, spam with scores as low as 2.1??

2003-07-09 Thread Dragoncrest
I just saw something weird today. I'm running SA 2.55 and I hit a spam message that scored as low as 2.1 and I still have yet to figure out how. It was a blatently obvious spam, but it scored very low. I know that a number of members talked about this not too long back, but I didn't really

[SAtalk] How soon till 2.6?

2003-07-05 Thread Dragoncrest
I heard just recently that v2.6 was either in final release or was just about to be released or something along those lines. Anyone know if it's out yet and if so, would this be a required or a recommended upgrade or just a patch upgrade? (aka a patch upgrade would be one that would fix know

[SAtalk] Need a little help with a proof of concept cgi.

2003-06-25 Thread Dragoncrest
hi all. I've got a little proof of concept idea I want to do and I was looking to get some advice from some of the CGI experts on this list to help me with it. What I want to do is simple. I have like 3 users I want to track and retrieve the following stats on. 1. Total number of total me

[SAtalk] What is the current preferred spam threshold?

2003-06-25 Thread Dragoncrest
Just curious what the preferred spam threshold is for spam these days. In my user prefs I'm running at a spam threshold of 5.0 and not having many problems with it save for the occasional 1 or 2 missed spam messages. I don't believe it's getting any false positives as I haven't seen any late

Re: [SAtalk] Is there a way to filter mail that's forwarded?

2003-06-19 Thread Dragoncrest
> > > I have this in there already but it is still not filtering. > Any > > > ideas on what I might have missed?? Ok, I kinda got this fixed. Silly me, I was forwarding things wrong. The only issues I still have is getting all the filtered mail into the right mail boxes. SO

Re: [SAtalk] Is there a way to filter mail that's forwarded?

2003-06-19 Thread Dragoncrest
i do something similar to what you're trying, namely, fetchmail off of several accounts, and then spamassassinate it before delivering it to my final clean mailbox. so, it's fetchmail --> procmail --> mbox [snip] Yep, already doing something similar to that. Here's the recipe I'm usi

Re: [SAtalk] Is there a way to filter mail that's forwarded?

2003-06-19 Thread Dragoncrest
At 05:33 PM 6/18/03 +0100, Peter Campion-Bye wrote: > Hi all. Trying to use my home mail server to filter my dad's mail for > spam. What I'm doing is I'm pulling it in off of his netzero account (oh > yeah, spam heaven) and it's supposed to be filtered as it goes through my > server and of

[SAtalk] Is there a way to filter mail that's forwarded?

2003-06-18 Thread Dragoncrest
Hi all. Trying to use my home mail server to filter my dad's mail for spam. What I'm doing is I'm pulling it in off of his netzero account (oh yeah, spam heaven) and it's supposed to be filtered as it goes through my server and off to the dumping account I have setup for delivering all mail