On Mon, Jan 26, 2004 at 11:12:30AM -0500, AltGrendel is rumored to have said:
> >
> > scoreSUBJECT_ENCODED_MY_TEST 5.0
> >
> > X-Spam-Score: 3.422
> > BAYES_00
I think that's what's getting your score down.
> > ???
>
> Not sure what you're getting at here, try:
I think he d
On Mon, Jan 26, 2004 at 05:03:45PM +0100, PieterB is rumored to have said:
>
> Is there some way to prevent spamassassin from using SA-talk messages
> for Bayes auto_learning. My bayes filter seems to be less effective
> since a lot of spamphrases/tokens are discussed on this list.
It depends on
On Mon, Jan 19, 2004 at 09:01:36PM -0600, Michael Satterwhite is rumored to have said:
>
> You'd have to agree that a message with the
> headers is more likely spam than not ... right now.
...unless you converse with me via e-mail with any regularity...
Have you actually checked to see how many
On Thu, Jan 15, 2004 at 04:44:40PM -0600, Kang , Joseph S. is rumored to have said:
> >
> > Here's the thing, though. SA is a *filter*. The MTA (or
> > procmail, or whatever) hands the message to SA and expects to
> > get something back. If SA had the cability to delete
> > messages, it would b
On Thu, Jan 15, 2004 at 09:21:50PM -, Andrew Cranson is rumored to have said:
>
> I've read the archives, and I've seen numerous answers to posts saying
> that it's not supported. My question was to the developers - would they
> (you) consider adding it to a future version of spamassassin?
He
wire (1.14) posted today. It's been beechwood
> aged for twice the flavor!
>
> --Chris
>
> > -----Original Message-
> > From: Steve Thomas [mailto:[EMAIL PROTECTED]
> > Sent: Thursday, January 15, 2004 12:29 PM
> > To: [EMAIL PROTECTED]
> > Sub
Using the Tripwire set (obviously):
X-Spam-Status: Yes, hits=30.2 required=5.0 tests=BAYES_60,BIZ_TLD,
FVGT_TRIPWIRE_AJ,FVGT_TRIPWIRE_AV,FVGT_TRIPWIRE_BF,FVGT_TRIPWIRE_BH,
On Thu, Jan 15, 2004 at 08:48:52AM -0500, Matt Kettler is rumored to have said:
>
> I'd also be hesitant to say *every* message with the mark is spam.. At
> least one of the SA-devels (Theo) puts it on most of his messages.
As do I.
These people who arbitrarily decide to change the score of a
On Tue, Jan 13, 2004 at 06:57:13PM -0700, Jon Trulson is rumored to have said:
>
> Hmmm... Can you go after the website owners/operators themselves?
> Regardless of where the spam originated?
They are likely hosted on zombie servers as well. The only link in the chain that
can't be screwed
On Tue, Jan 13, 2004 at 10:09:39AM -0800, Robin Lynn Frank is rumored to have said:
>
> On Tuesday 13 January 2004 09:51, Steve Thomas wrote:
> > BTW, Paradigm-Omega, your "private RHSBL" (rhsbl.paradigm-omega.net) is
> > borked. I read your Email Policy and there
sbl.paradigm-omega.net;
Unauthorized source/domain listed by paradigm-omega.net RHSBL -
http://paradigm-omega.com/email_policy.php
Last-Attempt-Date: Tue, 13 Jan 2004 09:43:05 -0800
Date: Tue, 13 Jan 2004 09:42:47 -0800
From: Steve Thomas <[EMAIL PROTECTED]>
To: Robin Lynn Frank <[EMAIL P
On Mon, Jan 12, 2004 at 06:19:45PM -0800, Robin Lynn Frank is rumored to have said:
>
> Some time ago, I changed the Habeas rule from -8 to a low positive number.
So you give points to personal or list e-mail from me, just because I use the Habeas
headers? I would think that zeroing the test w
On Fri, Jan 09, 2004 at 09:27:11PM -, Andrew Cranson is rumored to have said:
>
> Is there a mySQL preference can be used to force spamassassin to
> drop/delete all emails above a certain score?
>
SpamAssassin does not, and can not, delete mail. It's simply a filter - data goes into
it, the
Yay. Yet another a-hole blatantly disregarding the various WHOIS directorys' terms of
use and raping it for marketing purposes. Gee, I can't wait to get three more copies
of the same spam for every domain I own...
On Fri, Jan 09, 2004 at 09:46:41AM -0800, Matt Van Gordon is rumored to have sai
On Thu, Jan 08, 2004 at 05:53:53PM -0500, WA9ALS - John is rumored to have said:
>
> header MY_CUSTOM_RULE Subject =~ /texttolookfor/i (I used the text I
> wanted, which included square brackets - Is that a problem? - e.g. [text to
> look for])
Square brackets are special characters within a re
On Thu, Jan 08, 2004 at 04:20:09PM -0600, Scott Gurley is rumored to have said:
>
> Anyone have a rule to stop this type of spam for cable filters and more. I
> get tons of these. They all have a subject like this:
> Re: BUESQY, with a completely
> Re: BAZYUQ, telegrams of inquiry
> Re: ABF, conti
On Thu, Jan 08, 2004 at 02:07:59PM -0500, John Fleming is rumored to have said:
>
> I want to specify a text string in the Subject header such that if it
> exists, the msg will NOT be considered spam, no matter what else might be
> wrong with it.
In your /etc/mail/spamassassin/local.cf, add this
On Mon, Jan 05, 2004 at 04:25:15PM -0500, Andrew Lazarewicz is rumored to have said:
>
> Is it possible to run SA in my configuration at home? I am techincally savvy
> with UNIX / Linux, but not familiar with detailed configuration of mail
> servers (e.g., POP, IMAP).
What you'll probably wa
On Fri, Dec 12, 2003 at 01:35:09PM -0500, [EMAIL PROTECTED] is rumored to have said:
>
> How can I see a spamassassin report of an email ? I'd like to do something
> like pipe the email through a command.
spamassassin -t < email.txt
--
"I've had a wonderful time, but this wasn't it."
- Grouc
On Tue, Nov 25, 2003 at 01:22:51PM -0500, Tony Bunce is rumored to have said:
>
> I have been seeing lots of spam like this getting through recently
>
> Anyone have any ideas how to reduce this type of spam from getting
> through?
I noticed that this guy's using our domain name as the argument t
On Fri, Nov 21, 2003 at 06:26:02PM -0800, John Oliver is rumored to have said:
>
> I installed SpamAssassin from CPAN a couple of weeks ago, so version
> 2.55 I believe. I have a .spamassassin directory in my home now, but
> it's empty. The docs tell me I should have a user_prefs file, but I
> c
On Wed, Nov 19, 2003 at 10:12:51AM -0800, Harold Hallikainen is rumored to have said:
>
> AT&T PATENTS ANTI-ANTISPAM TECHNOLOGY
> ...
I read this on TheRegister.com yesterday. The only reasonal explaination is that they
wanted to make sure that the concept was never put into practice and they ne
On Fri, Nov 14, 2003 at 12:26:33PM -0500, Charles Gregory is rumored to have said:
>
> Another spam today, with the infamous empty return path.
> (Return-Path: <>)
>
> But I didn't see any test that was catching this. Is there something
> legitimate about an empty return path that makes it a bad
On Tue, Nov 11, 2003 at 03:51:37PM -0800, Robert Leonard III is rumored to have said:
>
> Okay, this one makes me mad.. anybody see or stop this one yet? How did
> this get through! ?
It didn't. You have your required hits set too high.
> --
>
>
> X-AntiVir
On Wed, Nov 05, 2003 at 07:40:24PM -0500, Terry Milnes is rumored to have said:
>
> Haha this guy "Doctor Electron" is a moron oops I defamed him...
As any lawyer (I'm not one) would tell you, the truth is an absolute defense. If what
you say is true, it can't be considered slander/defamati
On Tue, Nov 04, 2003 at 06:13:25PM -0500, David A. Roth is rumored to have said:
>
> I found several messages today which were entirely skipped by SA 2.60.
> The odd thing is, those addresses in the To: line had previously been
> blacklisted on my site. So this is very puzzling, and the headers
On Mon, Nov 03, 2003 at 04:14:13PM -0600, Chris Barnes is rumored to have said:
>
> I turned SA off in Mailscanner, letting it handle just
> the the running of ClamAV. SA is still being called by procmail.
>
> Q: Is it just a "wierd way"?
Not weird to me - it's how I do it. I prefer separate to
On Thu, Oct 30, 2003 at 10:34:53PM -0500, [EMAIL PROTECTED] is rumored to have said:
>
> What am I missing??
firewall? what happens if you try telnetting to port 783 on the remote machine?
--
"The man who goes alone can start today; but he who travels with another must wait
till that other is r
On Wed, Oct 22, 2003 at 03:23:28PM -0700, Ian Douglas is rumored to have said:
>
> Currently I have most of Asia Pacific blocked since I don't personally
> know anybody over there that would have any need to Email me or the few
> remaining web hosting clients I have on my server.
I use cn-kr.blac
On Tue, Sep 30, 2003 at 06:32:23PM -0400, Jeff Koch is rumored to have said:
>
> Does it make sense that our maillog would report it take 30 seconds for
> spamassassin to analyze a message - and they seem to be short messages.
> We're running 2.55 via maildrop on a qmail system. The machine is a
I just installed this and am now seeing this in the logs when Razor2 is called (yes, I
patched razor [2.36] before compiling):
razor2 check skipped: Bad file descriptor Insecure dependency in connect while running
setuid at /usr/lib/perl5/5.6.1/i386-linux/IO/Socket.pm line 108.
I wasn't getting
On Fri, Sep 19, 2003 at 02:29:21PM -0400, Frank DeChellis is rumored to have said:
>
> I was just fiddling around and I entered a rule to catch some of the text in
> the MS Security Alert patch but it never seems to go over the threshold.
>
> Has anybody come up with a solid rule for this email w
On Thu, Sep 18, 2003 at 01:15:53AM +, Jim is rumored to have said:
>
> People,
>
> if you are posting to this (or any) list to start a new thread, can you
> please REALLY start a new message from scratch instead of replying to one
> that's already gone by on the list?
>
> For those of us usi
network ... they are in a FIDUCIARY role,
> enTRUSTed to carry out a role by that pulicly accepted standard. Their
> action simply *breaks* that public trust.
>
> - Burt
>
>
> Steve Thomas wrote:
>
> >On Tue, Sep 16, 2003 at 08:31:55PM -0700, Matt Beland is rumored
| If Verisign are stupid enough to do this, let's make sure
| they get ALL the traffic :-).
The idea was to keep them from getting paid. No web hits = no clicks on
sponsored links.
| Also port 80 isn't the biggest problem: think mail think
| what happens if something returns legal DNS entr
On Tue, Sep 16, 2003 at 10:31:23PM -0700, Matt Beland is rumored to have said:
>
> On the other hand, Paul Vixie has been participating in the discussion over on
> NANOG and it sounds like ISC is aware of the potential pitfalls and they're
> working to dodge them. They are actively developing th
On Tue, Sep 16, 2003 at 12:36:01PM -0500, Rich Puhek is rumored to have said:
>
> We haven't null-routed it, nor have our upstream providers. Traceroute
> goes through fine, pings die, webpages don't come up.
router(config)# access-list 101 deny tcp any host 64.94.110.11 eq 80
:)
The pings cou
On Tue, Sep 16, 2003 at 08:31:55PM -0700, Matt Beland is rumored to have said:
>
> I stopped laughing, it occurred to me that hypocritical or no, that could
> mean trouble for ISC if VeriSign chose to push the issue.
What kind of trouble? Certainly not legal trouble. There's nothing that says th
Don't forget to vote with your wallet.
* Move your domains from Network Solutions to any
other registrar.
* Don't renew your SSL certs and find another
CA (if possible). Don't use Thawte - Verisign
owns them.
* Sell your VRSN stock and get out of any funds
that invest
On Sat, Sep 13, 2003 at 06:57:27PM +0200, Kristian Koehntopp is rumored to have said:
>
> On Fri, Sep 12, 2003 at 04:34:40PM -0700, Abigail Marshall wrote:
> > 2. SobigF expired on September 10th. There may be a few
> > errant worms floating around from computers that have their
> > dates wrong, b
On Fri, Sep 12, 2003 at 05:09:02PM -0400, Steven W. Orr is rumored to have said:
>
> What I'm looking for is a set of recipes for rejecting the Sobig:F virus
> based on the text that appears in the Subject line.
Filenames would be better. I wrote a rule a couple of weeks ago for the filenames fo
On Fri, Sep 12, 2003 at 11:32:16AM -0400, Scott Rothgaber is rumored to have said:
>
> If performance is an issue, how about an option like...
>
> HIT_AND_RUN 1
>
> ...that would cause spamd to stop processing once your threshhold had
> been met? IOW why keep scanning text once the message has
This may not be new, but it's the first one I've seen... It only scored 2.513 on my
company's mail server which runs a CVS version of 2.60 from a couple months ago. The
only tests it hit are NIGERIAN_BODY1 and US_DOLLARS. We're not using bayes here.
---
On Thu, Sep 04, 2003 at 03:22:59PM -0600, Alan Fullmer is rumored to have said:
>
> Does anyone know of a website, or some sort of thing to SIGN MYSELF UP FOR
> SPAM? Or get on some lists?
First, I'd use a throw-away address (I'm guessing you were going to do this already).
Then, just post a fe
It's official. An announcement is forthcoming. I'll bet the spammers are dancing
around gleefully right about now.
- Forwarded message from George William Herbert -
To: [EMAIL PROTECTED]
Subject: Re: Re[2]: relays.osirusoft.com
Date: Tue, 26 Aug 2003 16:07:33 -0700
>> returning 127.0.
Something is horribly wrong with the SA website. It was unreachable for a while and
now I'm getting this:
Not Found
The requested URL / was not found on this server.
Apache/1.3.26 Server at spamassassin.org Port
On Fri, Aug 22, 2003 at 04:11:45PM -0700, Justin Mason is rumored to have said:
>
> Tim Buck writes:
> > I installed 2.60 rc1 (upgraded from 2.55) yesterday afternoon. Two
> > of my users today reported several very obvious spam messages got
> > through; none has on my account. I looked at the off
On Fri, Aug 22, 2003 at 11:41:40AM -0500, Patrick Bores is rumored to have said:
>
> I'd like to add spamassassin rules to match certain attachment
> filenames, but I can't seem to get it right. I'm trying things like:
>
> rawbody SOBIG_VIRUS
> /filename="?application.pif|document_all.pif|t
On Wed, Aug 20, 2003 at 12:36:54PM -0700, Erick Calder is rumored to have said:
>
> the complaints are legit so SA and even the Bayesian filter let them
> through... any suggestions out there? what are others doing about this?
Grin and bear it. Not much else you can do.
--
"The concept is inte
What's the rule you've written?
On Mon, Aug 18, 2003 at 03:44:24PM -0400, John McGivern is rumored to have said:
>
> Hi everyone,
>
> I don't know if you guys get the SPAM that advertises the
> "Banned CD" I get dozens of them. Anyway, I've added a body rule ...
--
"Men and nations behave
On Fri, Aug 15, 2003 at 08:08:51AM -0400, Louis LeBlanc is rumored to have said:
>
> do one more thing - forward each message to the government uce
> address, but I can't remember the exact address (is it [EMAIL PROTECTED])
[EMAIL PROTECTED]
This just got me wondering about something... I wonder
On Thu, Aug 14, 2003 at 03:56:34PM -0400, Indii is rumored to have said:
>
> My email server is a debian box while my dns server is an MS 2000 server.
> Which would i need to setup the reverse dns on and how would i go about
> doing this?
This is usually handled by your ISP. You'll need them to
I've also noticed a couple of FNs per day lately. All but one of the messages you sent
scored over 5 points on my box. I'm running a CVS version of SA that's a few weeks
old. Make sure that whatever mechanism you're using to run SA (procmail?) is doing
it's job, and that the server isn't being o
Not sure if this has been posted already - I apologize if it has.
http://www.theregister.com/content/7/32266.html
--
"Mr. Wagner has beautiful moments but bad quarters of an hour."
- Gioacchino Rossini (1792-1868)
---
This SF.Net email spo
On Tue, Aug 05, 2003 at 04:59:54PM -0700, Abel Rauch is rumored to have said:
>
> Uhhh... I was just going to install via Redhat RPM. I think I should do one
> more run-though of the documentation. (Yes, I know, RTFM)
I'd install via CPAN instead of using the RPM, but that's me. I prefer RPMs for
On Tue, Aug 05, 2003 at 03:10:39PM -0700, Abel Rauch is rumored to have said:
>
> Does anyone know how to set spamassassin to only filter spam on a specific
> domain?
>
>
>
> I am running:
> Redhat Linux
> Sendmail (with LDAP)
>
> I would be running Spamassassin 2.5.x.
How is SA being cal
On Mon, Aug 11, 2003 at 05:04:58PM +0100, Angel Gabriel is rumored to have said:
>
> 2) Edited ~/.procmail file
That should be ~/.procmailrc.
> I still get all the spam I can handle. What have I missed, if anything?
>
Also, remember that SA doesn't remove spam, it just adds headers and such.
On Mon, Aug 11, 2003 at 05:26:50PM +0100, Angel Gabriel is rumored to have said:
>
> Can someone give me a working example of how procmail should be calling
> spamassasin? This is all I have in my ~/.procmailrc file.
>
>
> :0fw | /usr/bin/spamassassin
Try this:
---cut---
VERBOSE=on
LOGABSTRAC
On Tue, Aug 05, 2003 at 01:58:09PM -0400, Theo Van Dinter is rumored to have said:
>
> On Tue, Aug 05, 2003 at 01:16:00PM -0400, Matt Kettler wrote:
> > Given that it's RedHat, I bet it's 2.4x.
>
> RH9 has 2.5x I believe. fyi.
>
Linux puma 2.4.20-19.9smp #1 SMP Tue Jul 15 17:04:18 EDT 2003 i68
On Tue, Aug 05, 2003 at 11:23:50AM -0700, Steve Thomas is rumored to have said:
>
> On Tue, Aug 05, 2003 at 01:58:09PM -0400, Theo Van Dinter is rumored to have said:
> >
> > On Tue, Aug 05, 2003 at 01:16:00PM -0400, Matt Kettler wrote:
> > > Given that it's RedHa
On Sun, Aug 03, 2003 at 11:12:39AM -0700, swapna ghosh is rumored to have said:
>
> The spamassassin verion is 2.41. I had set the procmailrc file under
You need to upgrade SpamAssassin. Like antivirus software, it needs to be updated
somewhat regularly to remain effective.
The spam you includ
On Fri, Aug 01, 2003 at 09:42:49PM -0700, Gary Funck is rumored to have said:
> http://sourceforge.net/mailarchive/message.php?msg_id=5693626
> and Mark's reply:
> http://sourceforge.net/mailarchive/forum.php?thread_id=2883539&forum_id=1981
>
Yep, that's it. I hadn't been reading the v*agra threa
Just got a spam which slipped through undetected... it was just an image with a bunch
of hidden text in an HTML page. Probably porn, but I didn't see the image in mutt...
admirations potash bodyguard powered practicably hunk mediate albania
practiced evaporation aug blumenthal bismark excee
What he said, but I'll add that you should install Tripwire.
On Tue, Jul 29, 2003 at 04:58:59PM -0400, William Stearns is rumored to have said:
>
> Good afternoon, Chris,
>
> On Tue, 29 Jul 2003, Chris Santerre wrote:
>
> > It seems that since the SA Rule Emporium has been up, I've been the ta
You've been joe-jobbed. There's not much you can do except maybe put a notice on your
website if you're getting enough bounces to warrant it.
One nit-picky note - please don't start a new thread by replying to a message. It
munges up the flow of messages in mail clients which make proper use of
You've been joe-jobbed. There's not much you can do except maybe put a notice on your
website if you're getting enough bounces to warrant it.
One nit-picky note - please don't start a new thread by replying to a message. It
munges up the flow of messages in mail clients which make proper use of
Heads up to all qmail users out there...
- Forwarded message from John Brown -
Date: Mon, 14 Jul 2003 10:34:00 -0600
From: John Brown <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: qmail smtp-auth bug allows open relay
seems that there are installs of the smtp-auth patch
to qmail th
On Wed, Jul 16, 2003 at 11:43:31AM -0500, Chris Barnes is rumored to have said:
>
> I need a simple procmail script so that any messages marked as spam by
> SA get put into a folder named "Filtered" (I use IMAP, so using the MUA
> is not an option).
>
Here's the procmail stuff I use for SA:
###
On Tue, Jul 15, 2003 at 03:44:09PM -0700, Marek Dohojda is rumored to have said:
>
> On the same note, I didn't see documentation for local.cf and user_defaults.
> Is there a place for this?
man Mail::SpamAssassin::Conf
--
"I think there is a world market for maybe five computers."
- Thomas W
On Tue, Jul 15, 2003 at 09:46:59AM -0700, Nichols, William is rumored to have said:
>
> these are in .eml format. How could I save these so that they could be
> used to learn the SA box? Any ideas here?
You could try this:
http://sourceforge.net/projects/ol2mbox
I've never used it, so I can'
On Wed, Jul 09, 2003 at 08:23:25PM -0400, Rick Macdougall is rumored to have said:
>
> Ummm, except for the fact that MailScanner in and of itself is not a
> virus scanner. Points for trying though.
Doh! I misread the original mail. I thought he was looking for a scanning mechanism,
not the sc
On Wed, Jul 09, 2003 at 05:27:26PM -0500, Thomas Cameron is rumored to have said:
>
> Can anyone make a recommendation as to an AV package, preferably one which
> can be built into an (S)RPM without too terribly much work and which will
> play nice with Sendmail?
MailScanner. 'Nuff said.
http://
On Tue, Jul 08, 2003 at 11:59:08AM -0400, Pat Traynor is rumored to have said:
>
> In my .procmailrc file is:
> INCLUDERC=$HOME/.procmailrc-local
> ...
I don't mean to snipe, but this has nothing to do with SA at all. It really belongs on
a procmail list.
To answer the question, I'm no procmail
ears to be a SF.net list, so perhaps "we can't slip in a
> spamfilter, as we don't own the site"?
Bingo.
> BTW, love how you guys just love to quote the whole message in your
> replies, the more bytes, the merrier, yummm, headers and all. Gue
On Tue, Jun 17, 2003 at 02:46:36AM +, MAKE BIG $$$ is rumored to have said:
>
> THIS IS NOT SPAM!! YOU and YOU ALONE Opted-In and Subscribed Directly with Us to
>receive the TWICE PER WEEK SPAM E-mail Money Making Newsletter"
Uh, yeah. I think I remember that.
--
ears. I'd heard (don't remember
where) that they were using a stripped down linux and ipchains/ipmasq as the software
controlling their routers.
--
Steve Thomas
--
"...subatomic matter in a particle accelerator that exists
for
(especially considering the
average level of clue that their users have)
--
Steve Thomas
--
"...subatomic matter in a particle accelerator that exists
for only a few microseconds seems to exhibit more uptime
than the RIAA's website.&
fected e-mail and you'll quickly find
out just why you need to be every bit as security concious on the LAN as at the edge.
--
Steve Thomas
--
"...subatomic matter in a particle accelerator that exists
for only a few microsecond
> routine. The point is, that whatever you do to show to human readers that it
> is a spam trap address, a spammer can anticipate and filter out - or the
> harvester ignore. Am I missing something here?
>
--
Steve Thomas
--
"
Size: 5728
Clean messages:1076
Avg Clean Score: -32.38
Avg Clean Size: 5079
I'm sure there's a lot of people that can beat those numbers. I also run SA on our
servers at work, but I don't run any stats on them. I'd guestimate that it's w
? I've got a buck that says
he didn't...
--
Steve Thomas
--
"...subatomic matter in a particle accelerator that exists
for only a few microseconds seems to exhibit more uptime
than the RIAA'
will even make a dent in the volume of spam flowing around the
'net. The only thing that a bunch of useless laws will accomplish is generating some
good PR for the politicians while wasting taxpayer dollars. Frankly, I'd rather see
that money being spent on homeland security.
--
S
| things, I can't seem to install the module HTML::Parser because it can't
| find the file inttypes.h. It isn't on my system. I've done a
| search in the
| FAQ at http://spamassassin.taint.org/faq/index.cgi, and it
| doesn't find any
| hits. Where can I find the appropriate version of inttypes.h
Hooray! I'm going to be rich!
| From:Mr. Samuel Tefah
| E-mail: [EMAIL PROTECTED]
|
| Attn: The Managing Director,
|
|
| I do recognize the surprise this urgent but confidential letter
| will bring to you especially as it came from a stranger, but be
| rest assured that it came
|
No hits in 47M of spam here, either.
| -Original Message-
| From: [EMAIL PROTECTED]
| [mailto:[EMAIL PROTECTED]]On Behalf Of Theo
| Van Dinter
| Sent: Wednesday, February 05, 2003 6:04 PM
| To: John Rudd
| Cc: [EMAIL PROTECTED]
| Subject: Re: [SAtalk] fighting against "Say GOOD BY to spam"
| Hi! have anyone tried adding the number of
| Hits(points)
| in the Subject line of the message?
Yep.
| In other words, is it helpful to have the Hits in the
| Subject line? Like:
I like having it there. Here's what I have configured for our server here at
work:
subject_tag ***SPAM*** (_HITS_)
| See? This is one reason that I want to leave.
|
| Everyone seems to *rude.*
If the people here seem rude, by all means stay away from the procmail list.
Your head is likely to explode if you join that one.
I've been on a lot of lists over the years - ISP, OSS, musical bands, bird
owners & watch
| Back around 1987 a 15 year old kid named Matt Wright wrote a FormMail
| script. The original insecure version is still in use on a million
| sites (no exageration). Spammers figured out how to send email through
| it.
I wrote my own formmail.pl script which e-mails the spammer and the abuse@
a
They could set required_hits to 1000 or something - that wouldn't disable it
completely, but it'd keep messages from being flagged.
| -Original Message-
| From: [EMAIL PROTECTED]
| [mailto:[EMAIL PROTECTED]] On
| Behalf Of Victor Brilon
| Sent: Saturday, January 11, 2003 10:32 PM
| To: s
report_header
use_terse_report
| -Original Message-
| From: [EMAIL PROTECTED]
| [mailto:[EMAIL PROTECTED]] On
| Behalf Of Nick Marino
| Sent: Sunday, January 12, 2003 1:27 AM
| To: [EMAIL PROTECTED]
| Subject: [SAtalk] Question
|
|
| Where do you configure SA to tell it to put the spa
| was triggered. I don't get it; the To: line that I see is
|
| To: [EMAIL PROTECTED]
|
| and there don't appear to be any extraneous spaces in there.
There's a space after your e-mail address.
---
This SF.NET email is sponsored by:
So
Isn't that the point of DNS RBLs?
| -Original Message-
| From: [EMAIL PROTECTED]
| [mailto:[EMAIL PROTECTED]]On Behalf Of
| Andrew M. Hoying
| Sent: Thursday, January 09, 2003 9:29 AM
| To: MailScanner mailing list
| Cc: SpamAssassin Users' list
| Subject: [SAtalk] RE: OT: Dynamically upda
Can someone forward me the message with the new mass-check instructions? I
seem to be a bit too quick with the delete key this morning and the archives
aren't working...
TIA
--
Steve Thomas
Network Administrator
APEX Voice Communications
There's a couple of ways you could do this. You could write a rule that
assigned a negative score, such as:
header SUBJECT_FOOBAR Subject =~ /FOOBAR/
describe SUBJECT_FOOBAR Subject contains FOOBAR
scoreSUBJECT_FOOBAR -100.0
OR...
you add a condition to your procmail recipe:
:0fw
*
all_spam_to [EMAIL PROTECTED]
I have *@lists.sourceforge.net instead as I'm on a number of lists there.
| -Original Message-
| From: [EMAIL PROTECTED]
| [mailto:[EMAIL PROTECTED]]On Behalf Of
| Bolero (Kai Maillists)
| Sent: Tuesday, January 07, 2003 2:38 PM
| To: [EMAIL PROTECTED]
| Sub
They've been doing that one-pixel-graphic trick for quite some time. BTW, it
scored 3.4 on the 2.50 SA that I installed today. Still not high enough, but
getting better, especially for something with very little actual message
content.
| -Original Message-
| From: [EMAIL PROTECTED]
| [mai
Pardon my french, but this SUCKS. This is all the result of
sha^H^H^Hlawyers...
Are you sure that they can't differentiate between the OS project and the
commercial product? Yes, you'd be contributing to NAI's product, but you'd
also be contributing to my anti-spam efforts (which has zero to do wi
| header AOL_MSG_IDMessage-ID/(@aol.com)/i
Try this:
header AOL_MSG_IDMessage-ID =~ /\@aol\.com/i
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
__
That's up to whatever you're using to call SA. If you used the example
procmail recipe in the documentation, it's put into a folder called (IIRC)
'caughtspam'.
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Jeremy
Dold
Sent: Monday, December 30, 2002 3:49
1 - 100 of 181 matches
Mail list logo
