[SAtalk] poll: still faked Habeas headers?

2004-01-31 Thread guenther
ellow SPAM fighters: - Can you verify the end of this infringement? - Is this just a coincidence? All reports greatly appreciated. You can mail me directly if you wish and I will post the results here. TIA ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l

Re: [SAtalk] Phony Habeas mark on spam...I knew it was just a matter of time

2004-01-13 Thread guenther
beas. So the question is: May I safely cut that information out, when forwarding those messages to Habeas? And thoughts? TIA ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} ---

Re: [SAtalk] Phony Habeas mark on spam...I knew it was just a matter of time

2004-01-12 Thread guenther
s the user name which my ISP uses -- and later added local headers. I don't think they are useful at all for Habeas. So the question is: May I safely cut that information out, when forwarding those messages to Habeas? And thoughts? TIA ...guenther -- char *t="[EMAIL PROTECTED]"

Re: [SAtalk] Detecting strings of Gibberish

2003-12-17 Thread guenther
# USAGE: # Save this file as detoken.cf in your /etc/mail/spamassassin directory # or simply copy and paste the rules into your local.cf or user_prefs. > My first guess is to save the resultant ouput in a file in ~/.procmailrc, > and then include it in my .procmailrc. > > Good guess

Re: detoken (was: RE: [SAtalk] Detecting strings of Gibberish)

2003-12-11 Thread guenther
ule should read: header W_B64_HALL =~ /Z3VlbnRoZXJAcnVkZXJzcG9ydC5kZQ/ Doh, should have seen this myself... ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[

Re: detoken (was: RE: [SAtalk] Detecting strings of Gibberish)

2003-12-11 Thread guenther
(Mandrake 9.1 here) and the address used, of course... This is the only rule that failes for me: rawbody W_B64_HALL =~ /Z3VlbnRoZXJAcnVkZXJzcG9ydC5kZQ/ describe W_B64_H Listwashing token found in head - Base64 score W_B64_H 1.0 For now I just disable this one. However, I really don&#x

detoken (was: RE: [SAtalk] Detecting strings of Gibberish)

2003-12-11 Thread guenther
mAssassin tests, skipping: (Bareword "ALL" not allowed while "strict subs" in use at /etc/mail/spamassassin/detoken-address.cf, rule W_B64_H, line 1. ) ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=

Re: [SAtalk] procmail query

2003-11-29 Thread guenther
n procmailex' for this and other examples. ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} --- This SF.net email is sponsored by: SF.

RE: [SAtalk] How to whitelist this mailinglist

2003-11-27 Thread guenther
sing (or similar placeholders for a valid char): Subject =~ /\[.*\]/ Notes: Case-insensitiveness is not needed. You probably wanna force a char by using + rather than *. And a word char \w is even more appropriate, than any char but newlines. ...guenther -- char *t="[EMAIL PROTECTED]"; ma

Re: [SAtalk] rule help please

2003-11-20 Thread guenther
see/i You simply want an optional space... ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} --- This SF.net email is sponsored by: SF.net Gi

Re: [SAtalk] Changing a default message

2003-11-13 Thread guenther
uot; pts rule name description" report -- -- report _SUMMARY_ See 'perldoc Mail::SpamAssassin::Conf' or http://spamassassin.org/doc/ for more info. ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h

RE: [SAtalk] [RD] Updated Corn

2003-11-11 Thread guenther
ine 1. Obvious, a negated char class without any char... ;) full J_WEEDS_Y /[>\w\s;]\&\#(?:0*(?:89|121)|x0*[57]9);[<\w\s\.\!\?]/i full J_WEEDS_Z /[>\w\s;]\&\#(?:0*(?:90|122)|x0*[57]A);[^]/i > (I had the popcorn link above the rules, but it was a little hard

Re: [SAtalk] [RD] Updated Corn

2003-11-11 Thread guenther
entioned in index.html? Would be cool to just wget those files... ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} --- This SF.Ne

archive or thread as mbox? (RE: [SAtalk] [RD] Popcorn, Backhair, and Weeds)

2003-10-19 Thread guenther
ng these rules and getting hit hard. :) ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} --- This SF.net email sponsored by: Enterpr

[SAtalk] Redirect and AWL ?

2003-10-17 Thread guenther
[ Modified the subject, as I originally forgot a topic. ] On Fri, 2003-10-17 at 17:19, Matt Kettler wrote: > At 08:53 AM 10/17/2003, guenther wrote: > > >I just wondered about redirecting mail to learn as Spam, as mentioned in > >FAQ 5.1. > > > >This will add extr

[SAtalk] Redirect ?

2003-10-17 Thread guenther
fuses to install) -- and the results are great! Very good job, folks, thanks! :-) ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} ---

Re: [SAtalk] Content-Disposition: inline ?

2003-10-16 Thread guenther
amd on startup? > > Yes. Perfect. Then this exactly is, what I need. Thanks again, Daniel. :) ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} ---

Re: [SAtalk] Content-Disposition: inline ?

2003-10-15 Thread guenther
pamd/spamc. Is this perl module really evaluated by spamd on startup? > Note that "inline" is used (in 2.60, I don't remember what 2.55 did) if > the message is lacking a Content-Type: header or the Content-Type: > header is text/p

[SAtalk] Content-Disposition: inline ?

2003-10-14 Thread guenther
uld I have to rewrite the message? Any hints welcome. SA feature I just overlooked? Procmail recipe? I am currently using SA 2.55 (but will update to 2.60 soon), invoked as its spamd incarnation by procmail. ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c

Re: [SAtalk] FormMail messages getting caught

2003-09-03 Thread guenther
I dunno. In fact, I mostly cut-n-pasted from a previous post to this list I saved. ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}}

Re: [SAtalk] FormMail messages getting caught

2003-09-03 Thread guenther
alone; it's doing what it's supposed to do (detecting FormMail spam.) Replace your FormMail script with something that doesn't turn your system into an open relay and SpamAssassin should work as intended, no rule-mangling necessary. ...guenther -- char *t="[EMAIL PROTECTED]"; ma

[SAtalk] postmaster: cutting down undeliverable spam

2003-08-26 Thread guenther
t the first who want to accomplish this, am I? ;) Any hints or thoughts about this issue? Anyone, who already did this? My setup: fetchmail, procmail, spamc/d (2.55) TIA for any answers... ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0

Re: [SAtalk] To the SA developers

2003-06-22 Thread guenther
gine some ways to automate this procedure and make it transparent. But none right now without any caveats, stumbling blocks or customization for any given location. ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i

Re: [SAtalk] To the SA developers

2003-06-22 Thread guenther
end http://piology.org/ILOVEYOU-Signature-FAQ.html Sorry, just a short note in English, most of the site is in German. ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} -

Re: [SAtalk] site wide BAYES

2003-06-01 Thread guenther
On Sat, 2003-05-31 at 22:30, William Stearns wrote: > Good evening, Guenther, Good morning, William, > > How can I do that? Did not find any note, how to define a site wide > > BAYES database. TIA > > http://www.stearns.org/doc/spamassassin-setup.current.html#autoreporting

Re: [SAtalk] Evolution and SPAM Assassin

2003-06-01 Thread guenther
t familiar enough with them, to tell you which to use. > Anyone here using Evolution? If so, do I need to reinvent the wheel? Yep, using Evolution... ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=

Re: [SAtalk] Re: site wide BAYES

2003-06-01 Thread guenther
f. I know all of them well, and no one wants those messages. (We do not need viagra... ;-) And yes, I trust those users. Um, mainly... I will have that in mind when trying to implement it. Thanks for your thoughts... ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2

Re: [SAtalk] site wide BAYES

2003-06-01 Thread guenther
tead of the default one > which is relative to ~. [...] Thanks for explaining to me. :-) ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} -

Re: [SAtalk] Can I teach SA

2003-05-31 Thread guenther
ill be very helpful. To get the missing 1 point, Bayes even won't need to stamp it as 'high-quality' spam. As soon as you got Bayes trained, that will catch all those 4.0 spam. (Although I have not used SA for a long time, I really benefit from Bayes dumping those little buggers...)

[SAtalk] site wide BAYES

2003-05-30 Thread guenther
hey folks, Would it be wise (actually, would it do any harm) to have one BAYES database for a whole site, instead of per-user basis? (Just a hand full of users.) How can I do that? Did not find any note, how to define a site wide BAYES database. TIA ...guenther -- char *t="[EMAIL PROT

Re: [SAtalk] how to get rid of false AWL?

2003-05-27 Thread guenther
ose mails from the AWL and watch it. [ snip: more good info ] ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} --- This SF.net

Re: [SAtalk] how to get rid of false AWL?

2003-05-27 Thread guenther
stion. Now lurking at my SPAM folder if it worked... ;-) ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} --- This SF.net emai

[SAtalk] how to get rid of false AWL?

2003-05-27 Thread guenther
e? Still digging through the documentation and searching for some particular answers... ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c,i,l=*x,s=0; for (i=0;i>=1)||!t[s+h]){ putchar(t[s]);h=m;s=0; }}} --

Re: [SAtalk] kicking SPAM: AWL, custom rules

2003-05-27 Thread guenther
On Tue, 2003-05-27 at 09:15, Tony Earnshaw wrote: > man, 26.05.2003 kl. 20.42 skrev guenther: > > > Although that unfortunately was not the answer to my question. The mails > > are actually SPAM. However, for some of them the Auto Whitelist totally > > reverts the r

RE: [SAtalk] kicking SPAM: AWL, custom rules

2003-05-27 Thread guenther
ome of them double every day... I set this to match the 'From:' header, cause it never changed so far. And I do not know anything about RAWBODY. If anyone feels like, please enlighten me about it. btw, as I said previously: I had to set this rude rule, cause the mails were not rated S

Re: [SAtalk] kicking SPAM: AWL, custom rules

2003-05-27 Thread guenther
y own SMTP server as Mail eXchanger. - fetchmail polling some POP3 accounts - procmail sorting and feeding through spamc/d If I'm wrong and there is a way to reject this mails, please let me know. ...guenther -- char *t="[EMAIL PROTECTED]"; main(){ char h,m=h=*t++,*x=t+2*h,c

[SAtalk] Re: procmail error when forwarding to a razor database

2002-03-03 Thread Philip Guenther
oing >"newaliases" in between each modification. That isn't a procmail error but rather a sendmail error because it doesn't see the alias. Philip Guenther ___ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk