st think maybe people dont realize how much of Chris' time
that file takes up as it is.
How-ev-uh your suggestion is good! So maybe someone could take
chris' file, take it a step further (after each update) and split it
into two files. (but even that would be someones opinion...what is
My bad. I just posted a change to body rule with the set, but it has to
be rawbody. I realized this as soon as I hit send. (oops) Now... I
dont know if rawbody looks at the headers... ?? If that doesn't fix
it, I wouldn't know how to miss that. Maybe someone else will know.
It should, being that body only looks at
subject line and message. Please let me know.
http://www.emtinc.net/spamhammers.htm/includes/backhair.cf
Thanks.
Jennifer
>
> -- Begin
> Return-path:
> Envelope-to: xxx
> Delivery-date: Fri, 30 Jan 2004
cf
score HTML_IMAGE_ONLY_02 4.0
(restart spamd)
Jennifer
>
>
>
> ---
> The SF.Net email is sponsored by EclipseCon 2004
> Premiere Conference on Open Tools Development and Integration
> See the breadth of Eclipse activity. Feb
Hi Erik
i assume you sent this over the weekend when the file was bad. I sent one
this weekend that just showed up on the list this morning! If that isn't
the case, grab the new version from my site. I believe it's 1.14.
http://www.emtinc.net/spamhammers.htm
Jennifer
> Hi Jenni
Sorry for any problems this caused you guys. I had the wrong version on
my server when I linted that change. ...Fixed now. Thanks for letting
me know, Arpi.
Jennifer
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference
this set
has been, it would be nice to get a little help from those of you who
speak these languages to speed this process up.
Thanks,
Jennifer
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and
Added another more obscure tag. Thanks Kelson. Version 1.3
Jennifer
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in
gt; be some hidden meaning there.
As hairy as my Backhair is getting, no telling what is in there any
more! I can tell you the popcorn is in there... (thinking I should get
a monkey)
Jennifer
>
>
>
> I've removed popcorn from the default list of thinggies to snag in
>
my
file. Try downloading again and see if you still get errors.
>
>
> Thanks,
> Jason
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Jennifer
> Wheeler
> Sent: Wednesday, January 21, 2004 11:10 AM
>
Jason
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On Behalf Of
> Jennifer
> Wheeler
> Sent: Wednesday, January 21, 2004 9:40 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Popcorn & Backhair have been combined into 1 Set
&
OY! That set had the original testing scores. Fixed now. Sorry
Haste = Bad
> said, if you use Backhair version 1.1 (just posted it) you no longer
>
> http://www.emtinc.net/spamhammers.htm
>
> Jennifer <-- 44 on new Backhair set ;) ...oooh the urge to say
it!
> B.
here for now, but like I
said, if you use Backhair version 1.1 (just posted it) you no longer
(sniff sniff...) need Popcorn...
..That makes me very sad :'( Popcorn was my first ruleset.
http://www.emtinc.net/spamhammers.htm
Jennifer <-- 44 on new Backhair set ;) ...oooh the urge to
to what you want to match, like [\w\s] that should fix the
problem. Add more characters into that set if you want. And test. :)
I could post an alternate set if you want, but I would like to make sure
my thinking is straight first.
Someone steer me right if I'm talkin' outta me
nt revisions right now is
"Chickenpox". I think I'm about to post a revision on Backhair/Popcorn,
but that will be the first change in months. Still, they will not go
through frequent edits like pox.
Jennifer
>
> Suggestion: For frequent changers, like 'evilrules', ho
> Link in sig, it's late and I'm tired. If you don't know where to find
them
> by now, you must be under a rock (Or a Colts Fan ;) Go Pats!
...okaynow that hurt! We'll talk tomorrow.
J.
---
The SF.Net email is sponsored by EclipseCon
july, especially with all the tweaks on pox. I'll watch things and
let you know if I start to see a problem.
Some good stuff is going on :) I'm pretty excited about it, I shall
let you know soon.
Jennifer
>
> -Jonathan
>
>
> ---
Hi Jennifer! ...a link would be _helpful_!
Thanks!
http://www.emtinc.net/spamhammers.htm
apologies,
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Jennifer Wheeler
> Sent: Thursday, January 15, 2004 8:55 PM
his list and doing this as a team. :)
Thank you again Adam, and to everyone else who has given such good
suggestions! It's getting there.
Jennifer
---
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open
r fixes with the regex as well, so if
you use the set, I'd grab these and just pull out the numbers if they
worry you. Bill Landry suggested adding 0 and 1, which are working out
well for both of us. Today I added in a few more that I see quite often,
but haven&
I had the same problemw when I first installed spamassassin with
qmailscanner. I found that I was using the -c -f switches with spamc.
-c = check only
-f = fallback safely - in case of comms error, dump original message
unchanges instead of setting exitcode
HTH
Jennifer
> -Origi
the sets per request. I
set them all to 1.0 even though they've gone through several edits thus
far. Sorry for the confusion.
Jennifer
Woo... do a grep for sorry will ya! I'll shhsh
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROT
he regex as well, so if
you use the set, I'd grab these and just pull out the numbers if they
worry you. Bill Landry suggested adding 0 and 1, which are working out
well for both of us. Today I added in a few more that I see quite often,
but haven't watched them much.
Jen
make them even safer to use.
Thanks!
Jennifer
---
This SF.net email is sponsored by: Perforce Software.
Perforce is the Fast Software Configuration Management System offering
advanced branching capabilities and atomic changes on 50+ platforms
http://www.emtinc.net/spamhammers.htm
i'll probably have an update to the chickenpox set by the end of the week.
and i see someone already pointed you to chris' site. There is also the
wiki, i believe there is a link from rulesemporium.
jennifer
> On Wed, 7 Jan 2004, Ku
I got several of those in December, but none recently. None of them
were tagged. I probably wrote a simple rule for it. Seems I remember
something about ev2 in the headers??
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On
Thanks Martin. Remedied!
Jennifer
P.S. Watchin' Cirque du Soleil on Bravo these people are inhuman!
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Martin Radford
> Sent: Wednesday, December 31, 2003 9:08 PM
&g
Thank you Bill!!
Jennifer
---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash shell to sys admin.
include the subject.
http://www.emtinc.net/includes/chickenpox.cf
or just read about the sets
http://www.emtinc.net/spamhammers.htm
Thank you Bill!!
Jennifer
---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in L
pairs.
>
> Adam Schneider
> http://adamschneider.net/
I've been using these for several months & I like them. Maybe these are
at least in the ballpark of what you're talking about / trying to catch.
I didn't read the whole thread.
Howev-ah... what Chris said :)
Jennife
; From: Brian Sneddon [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, December 31, 2003 12:14 PM
> To: 'Jennifer Wheeler'; 'Chris Santerre'
> Cc: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] Rule to block Paris Hilton spam
>
> Wont that \n at the end of th
hilton_b64 .03
good goin peeps! :)
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Chris Santerre
> Sent: Wednesday, December 31, 2003 11:34 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] Rule to block Paris H
I added several filename extensions and fixed oversights in 3 rules.
Thanks Scott for the input!
http://www.emtinc.net/includes/chickenpox.cf
Jennifer
---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or
ess.
Yep. I googled him and he's the father of an autistic child who is very
active in promoting awareness and research. Easy to see where the
hyperdrive comes from. Still... mix in a compassion sandwich in other
areas of your life will ya, Len!? ;) I know... not here, quake
server, e
> > btw 42??? what did you mean by that. that was very
> > creepy to see,
> > because i've tried to convince my brother from an early
> age, that the
> > number 42 *haunts* me and turns up *everywhere*! that'll
> either be a
> > very good year for me, or that's the year i'll buy the farm
ince my brother from an early age, that the
number 42 *haunts* me and turns up *everywhere*! that'll either be a
very good year for me, or that's the year i'll buy the farm per se!
Either way, i'm forwarding your email to my brother for yet *more*
proof. ;)
Jennifer
ps... Luk
Hi Barry,
This will also snag a few of those if you want to use them. You could
write them to hit the body as well if you wanted, i just use a subject
rule for now.
describe J_PARISobfu paris
header J_PARISSubject =~
/[EMAIL PROTECTED]|1\!][sz5\$](? -Original Message-
>
uesday, December 23, 2003 5:56 PM -0500 Rubin Bennett
> <[EMAIL PROTECTED]> wrote:
>
> > Jennifer's Backhair rules.
>
> That sentence could be taken the wrong way... :)
My backhair *does* rule!! Today i have it corn-rowed with red and gr
The world is right again. :) Thanks much!
> -Original Message-
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: Monday, December 22, 2003 5:48 PM
> To: Jennifer Fountain; [EMAIL PROTECTED]
> Subject: Re: [SAtalk] FW: VJ, the world from
>
>
> At 05:32
king the set, in essence, additive. (though maybe not in the
common meaning of the word "additive" in the world of programming...i'm
not a programmer so I could be talking out of my bum here)
More below...
>
> From: "Jennifer Wheeler" <[EMAIL PROT
] Sent: Monday, December 22, 2003 5:18
PMTo: Jennifer FountainSubject: Re: VJ, the world
from
Free Cable$ TV bake
bremen effluvium term bloc propitious peasanthood solicitation borroughs bole
anarchy pane cadmium componentry embower way apartheid accompany wacke
paginate excess
-zA-Z0-9]+\<\/*[a-zA-Z0-9]*\>[a-zA-Z0-9]+/
> describe TAG_IN_TEXT
> score TAG_IN_TEXT 1.0
>
> on my test mailer, and it is hitting OK on what I *think* I'm
> looking for.
http://www.emtinc.net/spamhammers.htm
Jennifer
>
> Are there any legitimate uses for
.
If you have the newest sets, then something is not right, because that
should have been caught.
Chris, when you get a chance, (like you dont have a billion other
things to do) you might grab the newest sets for your site.
Jennifer
>
> The spam has an image that won't load, and the
> >
> >
> > > ...you need backhair rules from jennifer.
> >
> > Ah, so that's what happened to JenniCam.
> >
>
> ROTFLMAO
>
> I'm such a geek for getting that joke! :)
>
> --Chris
:) ...wow. I actually smiled! Day 6 of the flu fr
re using the sets I suggested, that should have been
nailed by backhair. If you added those sets and they worked, then added
more rules, it's possible you made an error causing sa to ignore some of
your rules.
spamassassin --lint to see if you have errors, add -D if
Hi Raquel
> I'm new to SA, and so far am pretty confused. I've been to your
> (Jennifer) site, but don't know what to do with the rules that can
> be downloaded. Are they added verbatim to local.cf? I'm sorry for
> asking such an elementary question.
Yes, pic
but that is
a good thing ;)
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Rubin Bennett
> Sent: Sunday, December 14, 2003 12:48 PM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] Clever spam (first of m
Hi Bill
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Bill Landry
> Sent: Saturday, December 13, 2003 7:04 AM
> To: [EMAIL PROTECTED]
> Subject: [SAtalk] chickenpox.cf
>
> Jennifer, I have been testing your
rder="0"
align="right">
You Are the Current High Bidder
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Chris Santerre
> Sent: Thursday, December 04, 2003 11:59 AM
> To: 'Rich Pu
?
***
Thank you
Jennifer Fountain
---
This SF.net email is sponsored by: IBM Linux Tutorials.
Become an expert in LINUX or just sharpen your skills. Sign up for IBM's
Free Linux Tutorials. Learn everything from the bash
le end.
>
> I crack 'em around the equator.
Woo, my bad! I really had no idea I was dumping buckets of smelly chum
into the waters when I suggested a text editor! :) but it *has* been
an amusing little break! I love this list...
Jennifer
>
> --
> Mike Andrews
> [EMAI
uce%20ube&safe=i
mages&ie=UTF-8&oe=UTF-8&lr=&num=100&as_scoring=d&hl=en
they look a little suspect to me ;)
Jennifer
>
> *sigh* 1.54 is up. This domain IS still listed in it.
>
> Chris Santerre
> System Admin and SA Custom Rules Emporium keeper
> h
> You could always lower the score. Only 178 to change :)
> (Hey that is nothing compared to how many times I had to hit ' | ,
DELETE,
> END ' because I was in a hurry to get done!)
Hi Chris,
You should grab multiedit. Rockage. You can do your edits with little
macros.
Jen
ader LOCAL_SAPM_FROM_WALLA ALL =~ /abcd\.\w{0,[EMAIL PROTECTED]/i
oops.. missed the second dot
header LOCAL_SAPM_FROM_WALLA ALL =~ /abcd\.\w{0,[EMAIL PROTECTED]/i
Jennifer
>
> --
> Chris Thielen
>
> Easily generate SpamAssassin rules to catch obfuscated spam phrases:
> http://ww
week?
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Chris Santerre
> Sent: Tuesday, December 02, 2003 3:56 PM
> To: Spamassassin-Talk (E-mail)
> Subject: [SAtalk] BIG HUGE EVIL RULE NEWS
>
> BIG HU
e, time shaving tips, and little tricks. I
appreciate all the help I've received in the computer arena from people
who many times dont even know me, and sometimes dont even know they're
helping me, many of them on this list. --play nice
Jennifer
>
>
>
> --
ite
them to be more inclusive but remain reliable.)
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Dallas L. Engelken
> Sent: Monday, December 01, 2003 9:49 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [SAtalk] Ev
th
his 16 elder children and chief sock mender/childhood companion. I
would like to think there is some method to the madness, but I think
spam is merely on the rise because it's too easy, and people are greedy.
Merry spam blasting,
Jennifer
P
is not what you were looking for? Or did you
see a problem with them?
http://www.emtinc.net/spamhammers.htm
http://www.emtinc.net/includes/chickenpox.cf
twilight zone morning here so I could be floating in a hot air balloon
over saskatchewan for all I know.
Jennifer
One more disclaimer, st
er than "freckle", I got so sick of that word
I had to change the name.
hope they work, dont put your eye out, suggest away
Jennifer
---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be mor
Hi Ian
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of ian douglas
> Sent: Monday, November 24, 2003 8:42 PM
> To: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] paris hilton
>
> > Haven't seen the spam but one of these should work if your
Bravo! Well Said!
-Original Message-
From: Evan Platt [mailto:[EMAIL PROTECTED]
Sent: Monday, November 24, 2003 2:46 PM
To: [EMAIL PROTECTED]
Cc: SpamAssassin
Logan:
I read with great displeasure your InfoWorld article on Fighting Spam,
and felt the need to make a few corrections, whic
a go if they
need
> doing.
I remember some talk awhile back about viruses, but I'm a smidge outta
the loop lately and don't recall which ones had rules done on them. I
would check out chris' rules emporium (above) and the wiki
http://www.exit0.us/
If you dont find anythin
Hmmm... only a guess. The 'stars' account for the 4 in 4.something and
the hits round up.
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Alan Munday
> Sent: Sunday, November 23, 2003 4:58 PM
f it
works. I may have to deliver them untested though :)
Thanks for the note. It's been a heinous last few days. ;)
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Larry Gilson
> Sent: Wednesday, Nov
uld like.
http://www.emtinc.net/spamhammers.htm
Jennifer
Oh...the "Gift Basket" still contains the original weeds set.
---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does
Backhair set modification similar to the last popcorn update. (a
waxing??) More flexible in the hidden tag to include more garbage.
http://spamhammers.nxtek.net
Jennifer
---
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in
> On 11 Nov 2003, at 13:52, Jennifer Wheeler wrote:
>> Popcorn Only - http://spamhammers.nxtek.net/popcorn.cf
>> Backhair Only - http://spamhammers.nxtek.net/backhair.cf
>> Weeds Only - http://spamhammers.nxtek.net/weeds.cf
>
> Why "Popcorn", "Backhair&
er 11, 2003 4:14 PM
> To: Jennifer Wheeler
> Cc: [EMAIL PROTECTED]
> Subject: RE: [SAtalk] [RD] Updated Corn
>
>
> > > > http://spamhammers.nxtek.net
> > >
> > > How are those files organized on that site? I couldn't find a link
to
&g
ttp://spamhammers.nxtek.net/weeds.cf
PB&W Gift Basket - http://spamhammers.nxtek.net/pbw.cf
(I had the popcorn link above the rules, but it was a little hard to
see)
Jennifer
> Also I was wondering, which are the most recent files. The .cf files
> itself or the version mentione
I'm pretty unclear
what your question is. Maybe try asking it another way. I probably
wont be the one that will be able to answer you :) but I think the
question may be a little unclear. I would ask what seems too obvious;
did you restart after you made your changes to the local file?
J
, but still tweaking.
Enjoy,
Jennifer
---
This SF.Net email sponsored by: ApacheCon 2003,
16-19 November in Las Vegas. Learn firsthand the latest
developments in Apache, PHP, Perl, XML, Java, MySQL,
WebDAV, and more! http://www.apacheco
SA labels other spam just not my internal RBL. I removed the -t option
and the header does pass.
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
Sent: Friday, November 07, 2003 4:52 PM
To: Jennifer Fountain
Cc: [EMAIL PROTECTED]
Subject: Re: [SAtalk] SpamAssassin
I am using an internal RBL list. When I test a header that is in the
list using the following command: /usr/bin/spamassassin -t
--prefs-file=/var/qmail/.spamassassin/user_prefs -D <
/home/tmp/spam_test.txt,
it labels it as spam. However, when an email from the same server
arrives, it is not lab
his could very well hit quite a few porn spams!
Jennifer
You may
> want to adjust scores so they are not so drastic. They have worked
great
> for me in the past few days to catch a handful of messages that would
have
> slipped through otherwise.
>
> YMMV but enjoy. And by all m
addition, and thanks, Adam (if you're
reading) for the lesson!
Jennifer
Oh.. I believe you're right about ";", I don't have them escaped. I
did leave the "&" escaped, I don't know about that one.
> -Original Message-
> From: [EMAIL P
aha... i missed the "x" in your regex. great, thank you for the
samples. brats...
you're right, harder to scale them down. I'll go with this for now
then.
/\&\#0*(?:65|97);|\&\#x0*41;|\&\#x0*61;)/
Thanks again for the tip! I'll change them on the page t
person for pointing that out, A.L.!)
/\&\#(?:65|97);/
so adding the zeros it would be
/\&\#0*(?:65|97);/
I'll make this change on the page, but I'll wait a bit to see if I'm
'out in left' with my thinking.
I'm realizing spammers are indirectly helping m
e any ideas as to where I screwed up?
Thanks in advance!
Jennifer Fountain
---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and
Hi Jeremy
http://spamhammers.nxtek.net
The rules are also on Chris Santerre's site along with many other goodies.
http://www.merchantsoverseas.com/wwwroot/gorilla/sa_rules.htm
in the popcorn link
Jennifer
> Hi,
>
> Is there anyway to have spamassasin check for this kind of HTML
en gathering that from some of the posts, i think it was kai??,
checking against dictionaries... made me realize i had some editing to do.
I was using them only when i felt like i needed to make a rule safer,
which should probably be always. again, thanks for the tips and for the
nifty little thi
C8|\xC9|\xCA|\xCB|\xE8|\xE9|\xEA|\xEB)[-_\*\.
]?(?:n|\xD1|\xF1)[-_\*\.
]?(?:i|l|1|\*|\xCC|\xCD|\xCE|\xCF|\xEC|\xED|\xEE|\xEF)[-_\*\.
]?(?:s|\$|\xA7)/
scoreLOCAL_OBFU_J_TEST_P350.0
WELL! Guess that answers that huh?? :)
Thanks!
Jennifer
Someone suggested a range to me awhile back when I asked about this,
sorry I cant give props to whoever it was.
/\bp[e3]n[\xCC-\xCF\xEC-\xEF][sz52]\b/i
Jennifer
> -Original Message-
> From: [EMAIL PROTECTED]
[mailto:spamassassin-
> [EMAIL PROTECTED] On Behalf Of Martin Radfo
> Do you really want to match punctuation and whitespace,
> because both of those will match [^aeiouy]?
Nope he doesn't... that was my big bad. Wasn't thinking. Thx
Jennifer
---
This SF.net email is sponsored by: SF.net
Perhaps it's time
for a new set. That would be an easy technique to stop them from using
lest they get tagged. When I get some time, I'll play around.
Jennifer
> -Original Message-
> From: Mark Ritchie [mailto:[EMAIL PROTECTED]
> Sent: Wednesday, October 29, 2003 8:14 A
[0-9bcdfghjklmnpqrstvwxz]{3,}
/i
Looks interesting. I'll try it out and let you know how it goes.
Thanks! I believe you can change [0-9bcdfghjklmnpqrstvwxz] to [^aeiouy]
(Just to shorten it up a smidge.)
Jennifer
---
This SF.net email
> [EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED]
Sorry for the OT personal comment (sort of), but that *has* to be the
best email address I've ever seen! Thanks for the smile.
Jennifer
---
This SF.net email is sponsored by
g-in-the-middle game than when I first
started using them.
Jennifer
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Chris Santerre
Sent: Wednesday, October 15, 2003 3:17 PM
To: 'Larry Rosenman'
Cc: Spamassassin-Talk (E-mail)
Subject: RE: [SAtal
there. :)
Jennifer
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Mike
Schrauder
Sent: Wednesday, October 15, 2003 11:24 AM
To: [EMAIL PROTECTED]
Subject: RE: [SAtalk] Popcorn, Backhair, and Weeds
where do I get the most up-to-date copy of PB&W?
with them in some way) Watch the source to see what adjustments
spammers make, because continuing 'as is' will buy their spam a massive
score. We will need to add new but similar rules based on their next
move, which is why I compulsively read the source of every spam I can
get my hands
Congrats! :) ...I'm thinking now he wishes he hadn't written you the
Love Letter. Your EEEee-vil rules are strong!
Jennifer
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Chris Santerre
Sent: Tuesday, October 14, 2003 2:01 PM
To: Spamassass
Yes :) http://spamhammers.nxtek.net
They will be here until Chris does his site update, and then you can
find them on his Rule Emporium site.
Jennifer
-Original Message-
From: Terry Shows [mailto:[EMAIL PROTECTED]
Sent: Tuesday, October 14, 2003 11:59 AM
To: Jennifer Wheeler
How much bandwidth / month does it average??
Jennifer
>I don't have ftp running on the server. I was actually going to see if
>anyone wanted to mirror my site, or just the files. I think
distributing >the lists to another site is a good idea. Any takers for
mirroring?
--Chris
&
working as I told
Larry. I'll letcha know after I test them.
No nasty letters here. I just block and don't report spammers. ...you
know...low profile and all ;)
Jennifer
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of
Chris Santerre
Sen
ctober 12, 2003 12:18 AM
To: [EMAIL PROTECTED]
Subject: RE: [SAtalk] Popcorn, Backhair, and Weeds
Hi Keith,
Thanks for the your time and knowledge! The explanation of your rule
contraction is excellent and really helped me understand the process
much
better.
This exercise has been a very good
atload of spam breezing
through.
The link above may shed more light if I didn't make this clear and you
would like to see the set.
Thanks again for the great explanation!! wow
Jennifer
-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Keith
C. Iv
ied!! Someone jump in if I'm on pluto!
I'm glad they're working out for you! Let me know if you come up with
some killer variation. I'm sure they'll need to be modified as spammers
vary their techniques.
Thanks for the input,
Jennifer
>>Regards,
>>
sted
them in a new thread and you might have missed them.
http://spamhammers.nxtek.net/
Jennifer
(chris has me all worried now about top and bottom posting!)
---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net host
ad of spam. Good material for
more rules!)
http://spamhammers.nxtek.net
Jennifer
---
This SF.net email is sponsored by: SF.net Giveback Program.
SourceForge.net hosts over 70,000 Open Source Projects.
See the people who have HELPED US prov
Summoning the hermit out of her cave huh? ;) yeah I'll give a hand.
-Original Message-
From: Chris Santerre [mailto:[EMAIL PROTECTED]
Sent: Thursday, October 09, 2003 9:40 AM
To: 'VonEssen, John'; [EMAIL PROTECTED]
Subject: RE: [SAtalk] Phrases I have modified
I have some notes o
1 - 100 of 125 matches
Mail list logo
