Re: [SAtalk] [RD] Trojaned machines

2003-10-27 Thread mikea
On Thu, Oct 23, 2003 at 10:41:25AM -0400, Chris Santerre wrote: > Why are some URI rules written normally like this: > uri name /regex/ > and others: > uri name m{regex} > uri name [EMAIL PROTECTED]@ > What is up with the m's? They're equivalent. Have a look in, f'rex, _Programming Perl_ or _Pe

RE: [SAtalk] [RD] Trojaned machines

2003-10-25 Thread Chris Santerre
> -Original Message- > From: Keith C. Ivey [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 22, 2003 8:14 PM > To: [EMAIL PROTECTED] > Cc: Chris Santerre > Subject: Re: [SAtalk] [RD] Trojaned machines > > > > > This smells of a trojaned box for spam

RE: [SAtalk] [RD] Trojaned machines

2003-10-24 Thread Keith C. Ivey
Chris Santerre <[EMAIL PROTECTED]> wrote: > Why are some URI rules written normally like this: > uri name /regex/ > and others: > uri name m{regex} > uri name [EMAIL PROTECTED]@ > > What is up with the m's? In Perl, a regular expression match is written with 'm', followed by a delimiter, then

RE: [SAtalk] [RD] Trojaned machines

2003-10-23 Thread Gilson, Larry
catch what you are talking about here. --Larry > -Original Message- > From: Chris Santerre [mailto:[EMAIL PROTECTED] > Sent: Wednesday, October 22, 2003 10:18 AM > To: Spamassassin-Talk (E-mail) > Subject: [SAtalk] [RD] Trojaned machines > > > I can't thank

Re: [SAtalk] [RD] Trojaned machines

2003-10-22 Thread Keith C. Ivey
Chris Santerre <[EMAIL PROTECTED]> wrote: > http://203.232.101.125:3344 > > This smells of a trojaned box for spamming. I'm thinking of > writing a rule that looks for http links with IP addresses and a > port number. I'm thinking the FP rate would be low. > > It is tough to remember everything

Re: [SAtalk] [RD] Trojaned machines

2003-10-22 Thread Matt Kettler
At 10:18 AM 10/22/2003, Chris Santerre wrote: It is tough to remember everything SA looks for. Does 2.60 have something like this? Comments? rawbody MY_TROJANED_HOST /http:\/\/\d{1,3}\.\d{1,3}\.\d{1,3}\.\d{1,3}\:\d{2,4}\// describe MY_TROJANED_HOST Possible Trojaned box used for spam hosting score

[SAtalk] [RD] Trojaned machines

2003-10-22 Thread Chris Santerre
I can't thank Bob enough for pointing me to the other spam list regarding blocks and legal info. Info can be found here: http://www.claws-and-paws.com/spam-l/ Read the FAQ before posting! Anywho, I'm reading the archives so I don't look foolish asking questions, and I see this latest post: " D