Re: [SAtalk] Postfix and Spamassasin

2003-12-30 Thread Greg Webster
o run with Postfix. I have looked at http://wiki.spamassassin.org/w/IntegratedInMta but I can't seem to locate the amavisd.conf that it refers to and I am not at liberty to open a hole in our firewall to talk to razor... Any other related documentation out there or hint/tips/suggestions? Brian

[SAtalk] Postfix unknown user (peripherally related)

2003-12-30 Thread Greg Webster
t quite to the point of a denial-of-service, but close). Does anyone know how to tell Postfix not to respond to emails sent to users that don't exist? Thanks, Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-

[SAtalk] Single image spams with random info

2003-12-23 Thread Greg Webster
letely random it appears - sometimes with words (like whosout.com) or a random set of characters. Suggestions on how to block them? I've been adding the domains to a special rule, but they must own hundreds of them. Thanks, Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corp

[SAtalk] Punctuation in text rule I sent

2003-12-10 Thread Greg Webster
7;s". It also has a case-insensitive flag that nulls the second part of the regexp! Don't use it without knowing that this is the case. Test it, see if you can do better, and please post the results. Thanks, Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph:

RE: [SAtalk] Obfuscation by Punctuation

2003-12-10 Thread Greg Webster
good high score for that one. Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-0515 - Fax: (604)608-3112 --- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen y

[SAtalk] Re: Simplifying BigEvilList rules

2003-12-04 Thread Greg Webster
eg On Thu, 2003-12-04 at 16:11, Scott A Crosby wrote: > On Thu, 04 Dec 2003 11:43:30 -0800, Greg Webster <[EMAIL PROTECTED]> writes: > > > Seems like it would be much better to simplify and shorten these rules > > with better regexp. > > > > Samples: > &

[SAtalk] Simplifying BigEvilList rules

2003-12-04 Thread Greg Webster
BigEvilListNets_1 rawbody BigEvilListOrgs_1 rawbody BigEvilListBizs_1 rawbody BigEvilListCoAu_1 ...and so on...Less rules, less text, more clarity. BTW, it's safer to escape '-' as well. Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-0515 - Fax

Re: [SAtalk] Autolearn not on?

2003-11-28 Thread Greg Webster
were my own additions (prefixed with GW_) Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-0515 - Fax: (604)608-3112 --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help y

Re: [SAtalk] Autolearn not on?

2003-11-28 Thread Greg Webster
Heya! On Fri, 2003-11-28 at 07:27, Matt Kettler wrote: > At 01:48 PM 11/27/03 -0800, Greg Webster wrote: > >An example header: > >X-Spam-Status: Yes, hits=9.0 required=5.0 tests=BIZ_TLD,CLICK_BELOW, > > DATE_IN_PAST_96_XX,HTML_50_60,HTML_LINK_CL

Re: [SAtalk] Autolearn not on?

2003-11-27 Thread Greg Webster
ely restarted spamd. Thanks, Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-0515 - Fax: (604)608-3112 --- This SF.net email is sponsored by: SF.net Giveback Program. Does SourceForge.net help you be more p

[SAtalk] Autolearn not on?

2003-11-27 Thread Greg Webster
1 Any ideas what I've done wrong? Thanks, Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-0515 - Fax: (604)608-3112 --- This SF.net email is sponsored by: SF.net Giveback Program. Does

[SAtalk] 'random' character sets

2003-11-06 Thread Greg Webster
legitimate situations where 5+ consonents will be seen? - Will other languages (such as German and Welsh with long strings of consonents) be penalized for using this? - Can we determine any other sorts of patterns from spammers use of these? Any more thoughts? Greg -- Greg Webster - [EMAIL PRO

[SAtalk] stats script, by (fairly) popular demand

2003-10-30 Thread Greg Webster
0 ( 0.00%) Oct 5 47425 0 ( 0.00%)0 ( 0.00%)0 ( 0.00%) 0 ( 0.00%) Sep 28 42819 1 ( 0.00%)0 ( 0.00%)0 ( 0.00%) 1 ( 0.00%) Any idea what I've done wrong? Thanks, Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-0515 - Fax

Re: [SAtalk] USER IN WHITELIST spammer scam

2003-08-14 Thread Greg Webster
>At 10:58 AM 8/14/2003 -0700, Greg Webster wrote: >>'[EMAIL PROTECTED]' is not in our whitelist, and neither is '[EMAIL PROTECTED]' or >>any variant. >> >>It appears that there is a problem with the USER_IN_WHITELIST regexp >to>me, but I may

Re: [SAtalk] USER IN WHITELIST spammer scam

2003-08-14 Thread Greg Webster
eg On Thu, 14 Aug 2003 15:10:13 -0400: Matt Kettler skribon: > At 10:58 AM 8/14/2003 -0700, Greg Webster wrote: > >'[EMAIL PROTECTED]' is not in our whitelist, and neither is '[EMAIL PROTECTED]' > >or any variant. > > > >It appears that there is a pr

[SAtalk] USER IN WHITELIST spammer scam

2003-08-14 Thread Greg Webster
er is '[EMAIL PROTECTED]' or any variant. It appears that there is a problem with the USER_IN_WHITELIST regexp to me, but I may be mistaken. I can't think of any other way that this would have made it through. Help? If someone needs unaltered info, I can send it to them directly, but I can'

[SAtalk] Errors in PerMsgStatus.pm

2003-07-23 Thread Greg Webster
ntinuation byte 0xa0, with no preceding start byte) in transliteration (tr///) at /usr/lib/perl5/site_perl/5.8.0/Mail/SpamAssassin/PerMsgStatus.pm line 1186. And then: Warning, unable to report spam Is there a bug? I'm using 2.55, and Mail::Audit::Razor is installed. Thanks, Greg -- Greg W

[SAtalk] Updated doc

2003-07-21 Thread Greg Webster
; is here: http://www.geekly.com/entries/archives/0178.htm Which one applies to you is heavily dependent on how and why you use SA, and what you want to do with it. Thanks! Feedback appreciated. Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-0515 - Fax

[SAtalk] NEVERMIND!! (was: Interesting...empty message returned.)

2003-07-17 Thread Greg Webster
Was just some incorrect paths. :) I'll update the doc. Greg Begin forwarded message: Date: Thu, 17 Jul 2003 14:15:24 -0700 From: Greg Webster <[EMAIL PROTECTED]> To: [EMAIL PROTECTED] Subject: Interesting...empty message returned. Hi all, Here's an interesting one... U

[SAtalk] Interesting...empty message returned.

2003-07-17 Thread Greg Webster
155.htm. Thanks, Greg -- Greg Webster - [EMAIL PROTECTED] In-Touch Software Corporation Ph: (604)278-0515 - Fax: (604)608-3112 --- This SF.net email is sponsored by: VM Ware With VMware you can run multiple operating systems on a single machin

Re: [SAtalk] I hate Mandatory Mail Filtering!!!! - speakeasy.net bites the dust. (was "I hate SpamAsssassin")

2003-06-09 Thread Greg Webster
Heya, One possible fix here is to use formail to remove the headers in question (with the -I switch?). I haven't used it, just read up on it during my travels. Greg --- This SF.net email is sponsored by: Etnus, makers of TotalView, The best t

[SAtalk] The Postfix + site-wide SpamAssassin + Procmail doc webpage

2003-06-03 Thread Greg Webster
Well, actually it's a blog entry, but that works too :) This is a better formatted version of the doc I posted last week. If this can be officially mirrored somewhere on the official site, that would be best, but here it will remain anyhow. http://www.geekly.com/entries/archives/0155.htm Do

[SAtalk] New doc: Postfix + site-wide SpamAssassin + Procmail for individual 'spam' mailboxes

2003-05-31 Thread Greg Webster
Hello, SpamAssassin mailing list :) Some new documentation I've created. I'll be placing this online, but figured I'd post it here as well. Maybe of some use to people :) Please note: File locations are based on my own install. Yours may be different, and should be checked and appropriate changes

[SAtalk] News site down?

2003-05-30 Thread Greg Webster
The spamassassin news site is dead, and just when I had a spam to submit to the Highest Score contest :) Greg --- This SF.net email is sponsored by: eBay Get office equipment for less on eBay! http://adfarm.mediaplex.com/ad/ck/711-11697-6916-5

[SAtalk] Converting away from site-wide

2003-05-27 Thread Greg Webster
Hi all, I've got a user that needs to bow -completely- out of SA. This means no headers added, his mail must not be altered in any way by spamassassin. No choice there, it's what has to be done. I've got SA installed site-wide using Postfix, by having the following lines in /etc/postfix/master.cf

[SAtalk] Re: Spamassassin-talk -- confirmation of subscription -- request 624005

2002-12-13 Thread Greg Webster
On Fri, 13 Dec 2002 16:20:56 -0800, [EMAIL PROTECTED] wrote with a subject of "Spamassassin-talk -- confirmation of subscription -- request 624005": > Spamassassin-talk -- confirmation of subscription -- request 624005 > > We have received a request from 24.76.225.37 for subscription of your > ema