[SAtalk] anti-phishing technique

2004-01-26 Thread Philip Tucker
isa.htm">http://www.visa.com Have any spamassassin rules been written to match links with a URL in the display text ("http://www.visa.com"; in this example) in which the domains differ ("www.visa.com" vs "63.247.87.138")? - Philip --

RE: [SAtalk] Re: SPF Support in SA?

2004-01-07 Thread Philip Tucker
anuary 07, 2004 11:04 AM -0600 Philip Tucker <[EMAIL PROTECTED]> wrote: > How would SPF address this kind of message? It's my understanding that a > DNS query would be sent to yahoo.com, which would respond with its outgoing > SMTP IP addresses - not containing HotJobs' IP

RE: [SAtalk] Re: SPF Support in SA?

2004-01-07 Thread Philip Tucker
locked. We've seen similar cases with monster.com. If Yahoo were to implement the SPF scheme, would there be a case where FORGED_YAHOO_RCVD would match on a message the SPF rule would not? Thanks for the help! - Philip -Original Message- From: Justin Mason [mailto:[EMAIL PROTECTED]

RE: [SAtalk] Re: SPF Support in SA?

2004-01-07 Thread Philip Tucker
I have a couple questions about SPF and its usage in SpamAssassin. 1) Would SPF obselete the FORGED_*_RCVD rules? 2) How does SPF deal with senders who are not forwarding a message, but are sending on behalf of a user? We have seen the latter case often with resume sites. e.g., [EMAIL PROTECTED

[SAtalk] bigevil false positive

2003-12-06 Thread Jeff Tucker
Hello, The bigevil list has the Yahoo image servers in it, like us.a1.yimg.com. Now, though, I've seen a user end up with an email with a Yahoo map embedded in it which referenced those servers. I'm not sure how they did it, but it hit rules 168 and 169. Since there's definitely non-spam conte

[SAtalk] connecting IP address header

2003-11-07 Thread Philip Tucker
ently-From are candidates.  Does it matter? - Philip -- Philip Tucker Zix Research Center Anti-Spam Team Lead 214.370.2068

[SAtalk] base64 false positives

2003-10-25 Thread Philip Tucker
t;HGH" and "MLM" show up in the block. Since these are body tests, not raw-body, they should not apply to the raw Mime, right?  Is this something that's fixed in 2.60? -- Philip Tucker Zix Research Center Anti-Spam Team Lead 214.370.2068

Re: [SAtalk] GA Question

2003-10-12 Thread Philip Tucker
urate) in the masses directory of the SpamAssassin install.  Has anybody gone through the process and created more detailed docs? Thanks, Philip -- Philip Tucker Zix Research Center Anti-Spam Team Lead 214.370.2068

[SAtalk] GA question

2003-10-09 Thread Philip Tucker
pprently required by evolve.cxx.  Is the README just out of date, or am I missing something? - Philip -- Philip Tucker Zix Research Center Anti-Spam Team Lead 214.370.2068

[SAtalk] GA Question

2003-10-09 Thread Philip Tucker
pprently required by evolve.cxx.  Is the README just out of date, or am I missing something? - Philip -- Philip Tucker Zix Research Center Anti-Spam Team Lead 214.370.2068 -- Philip Tucker Zix Research Center Anti-Spam Team Lead 214.370.2068

[SAtalk] instalation problem

2002-05-09 Thread Tucker
I use qmail, and i recently install spamassasin,i download the tar.gz and afeter that i do a perl makefile, make and make install. Now i run the spamd and put the client in .qmail-user, but my question is.. spamd takes the conf from (usr/share/spamassassin?or from /etc/mail/spamassassin

[SAtalk] a couple of potential body tests

2002-01-22 Thread Wayne A. Tucker
en sent with an unregistered version of MaxBulk Mailer MaxBulk Mailer is a new easy-to-use mail merge software for Macintosh Get MaxBulk now at : http://www.maxprog.com/shareware/MaxBulkMailer.sit Perhaps something as simple as /MaxBulk/ for this one? Wayne -- Wayne A. Tucker - [EMAIL PROTECTED] N