BigEvilList_170 catches vnunet.com. Is that appropriate?
---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash
I am using SA 2.60 under OS X with AmaVis-new. Today, I began to
receive several SA TIMED OUT errors in my log. One is quoted below. Any
ideas what this points to?
Dec 1 17:31:02 KenG3.local. amavisd[2098]: (02098-10) SA TIMED OUT,
backtrace: at
/opt/perl/lib/site_perl/5.8.0/Mail/SpamAssa
On Tuesday, November 11, 2003, at 05:51 PM, Dan wrote:
a.) I have been given the direction that we are going to be trapping
all
that we deem as spam and viruses. If we trap something that was not
spam or
a virus, we will forward it on to the end user after they call the help
desk. (I don't over
This looks to me to be a new, creative approach to spamming:
From: [EMAIL PROTECTED]
Date: Thu Oct 30, 2003 6:17:51 PM Canada/Mountain
To: Ken Gordon <[EMAIL PROTECTED]>
Subject: Undeliverable Mail: [SAtalk] SA Time out error
Return-Path: <>
X-Original-To: munged@
Delivered-To: mung
Here is an error I happened to notice today in my mail log. Don't know
if it's something that indicates a defect. The message being tested at
the time was rejected as Spam with a score of 53, but I don't know what
tests were run.
My environment is SA 2.60 running with Amavis-new and Postfix
I use SA with amavis-new, and have set the latter to discard anything
that scores over 15. I wish I hadn't done that, my amavis log tells me
that mail from [EMAIL PROTECTED] was discarded after
scoring 127.509. I'm impressed and would like to see how he did that :)
--
-r -D --lint gives no clue, i.e. shows nothing
anomalous. What does this mean?
Ken Gordon
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamass
On Wednesday, September 17, 2003, at 10:14 AM, Klaus Mueller wrote:
Kristoffersen wrote:
As you can see kristOFFERSen.us/.no would match this rule.
Create a rule matching exact you domain with the same negative score.
Or
add your domain to whitelist.
Klaus
I'm not sure this helps him. His probl
Kettler wrote:
At 08:40 AM 9/11/2003 -0600, Ken Gordon wrote:
I just noticed the following in a spamassassin report. I thought 2.60
(which I think I am running) didn't use this test. Am I wrong? Should
I be zeroing it in local.cf?
RCVD_IN_OSIRUSOFT_COM (0.9 points) RBL: Received via a
,
REMOVE_REMOVAL_2WORD,SORTED_RECIPS,SUSPICIOUS_RECIPS autolearn=no
version=2.60-rc4
Mime-Version: 1.0
Content-Type: multipart/mixed; boundary="--=_3F625D2B.113F39C0"
Any idea why not? Is there something wrong with the rule? Does rc4 want
local.cf to be somewhere else?
Ken Gor
BODY: HTML included in message
0.3 HTML_FONT_BIG BODY: HTML has a big font
0.6 HTML_FONT_INVISIBLEBODY: HTML font color is same as background
0.1 CLICK_BELOWAsks you to click below
4.2 OBFUSCATING_COMMENTHTML comments which obfuscate text
Ken Gordon
found 31.43.45.68.relays.osirusoft.com.]
spamassassin -V gives
SpamAssassin version 2.60-rc3
Ken Gordon
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.c
[To: address munged]
---
From [EMAIL PROTECTED] Tue Aug 19 00:32:38 2003
Received: from adsl-64-108-125-74.dsl.euclwi.ameritech.net
(adsl-64-108-125-74.dsl.euclwi.ameritech.net [64.108.125.74])
by dover.retry.com (8.12.6/8.12.6) with SMTP id h7J6WcQp022674
nd to your checking account).If you feel this transaction was made by our mistake, please press "No".If you confirm this transaction, please press "Yes" and fill in the form below.Enter your credit card number here:Enter your credit card expiration date: Contacts:Phone: +5982 902 5627
Using SA 2.55, a message with
Subject: DealBook: New York Community Bancorp to Buy Roslyn Bancorp for
$1.6 Billion
was tagged as spam partly because it failed the SUBJ_HAS_SPACES test.
(headers below).
Is the test properly specified?
From: The New York Times Direct <[EMAIL PROTECTED]>
Date: F
15 matches
Mail list logo
