Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-17 Thread Martin Schroeder
On 2002-12-17 04:17:15 +0100, Klaus Heinz wrote: > Martin Schroeder wrote: > > eval:check_for_from_domain_in_received_headers('ebay.de', 'true') doesn't > > work (with --local). :-( > > Did you search for 'ebay.de' in your mail? This string only occurred in > the 'From:' line. Try 'ebay.com'. Tha

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-16 Thread Klaus Heinz
Martin Schroeder wrote: > Seems the rule is wrong anyway. How to catch something like this: [ snipped sample mail ] > eval:check_for_from_domain_in_received_headers('ebay.de', 'true') doesn't > work (with --local). :-( Did you search for 'ebay.de' in your mail? This string only occurred in the

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-16 Thread Klaus Heinz
Duncan Findlay wrote: > Not fixed AFAIK. See PerMsgStatus::do_head_tests. In my (rather old) CVS copy from 2002-11-29 I found a test for $self->{conf}->{user_rules_to_compile}. Putting that into SA 2.43 enabled header rules inside user preferences again. ciao Klaus -

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-16 Thread Duncan Findlay
On Sun, Dec 15, 2002 at 08:16:58PM +0100, Klaus Heinz wrote: > Put it into some file in your site configuration (eg local.cf). SA 2.43 > has a bug (fixed in 2.50 as far as I know) which prevents 'header' rules > in your user preferences from working. Not fixed AFAIK. -- Duncan Findlay

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-16 Thread Martin Schroeder
On 2002-12-15 20:16:58 +0100, Klaus Heinz wrote: > Martin Schroeder wrote: > > > header GENUINE_EBAY_DE_RCVD >eval:check_for_from_domain_in_received_headers('ebay.de', 'true') > > describe GENUINE_EBAY_DE_RCVD Message from eBay.de > > tflags GENUINE_EBAY_DE_RCVD nice > > score GENUINE_E

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-15 Thread Klaus Heinz
Martin Schroeder wrote: > header GENUINE_EBAY_DE_RCVD >eval:check_for_from_domain_in_received_headers('ebay.de', 'true') > describe GENUINE_EBAY_DE_RCVD Message from eBay.de > tflags GENUINE_EBAY_DE_RCVD nice > score GENUINE_EBAY_DE_RCVD -2.174 > > Putting this into my user_prefs

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-13 Thread Martin Schroeder
On 2002-12-10 09:32:54 -0500, rODbegbie wrote: > Adam Henry wrote: > >> From: [EMAIL PROTECTED] > > The "From:" header doesn't end with @ebay.com, therefore the eBay checks > weren't performed. I have the same problem with ebay.de . How does one write a rule GENUINE_EBAY_DE_RCVD? header GENUINE

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-11 Thread Louis Bohm
This is probably a very stupid question. But where is this option listed??? I looked in the docs for Mail::SpamAssassin::Conf and do not see it. Also where are all these rules I see people talking about. Are these mimedefang rules??? I am running SA 2.43 and Spamass-milter with Sendmail 8.1

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-10 Thread Adam Henry
On Tue, Dec 10, 2002 at 10:14:02AM -0500, Vivek Khera wrote: > As to determining if it is really ebay, well, that's a really good > question. I guess if the last received header prior to your mail > server's header is ebay, it would be a good hint. Excellent suggestion. This begs a few additiona

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-10 Thread Vivek Khera
> "AH" == Adam Henry <[EMAIL PROTECTED]> writes: AH> Question becomes, how does one know if an email is genuinely from AH> Ebay? Next question is, why do the following hostnames resolve to AH> private-class IP (is this normal behavior?): When you speak to my web server and ask it to do somet

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-10 Thread rODbegbie
Adam Henry wrote: > I have received the following headers from a message from an Ebay > purchaser, and am not sure why the GENUINE_EBAY_RCVD trigger wasn't > Hit. Here they are: > >> From: [EMAIL PROTECTED] The "From:" header doesn't end with @ebay.com, therefore the eBay checks weren't performed

[SAtalk] GENUINE_EBAY_RCVD

2002-12-09 Thread Adam Henry
Greetings, I have received the following headers from a message from an Ebay purchaser, and am not sure why the GENUINE_EBAY_RCVD trigger wasn't Hit. Here they are: | Return-Path: <[EMAIL PROTECTED]> | Received: from intrepid.marinar.com by webslayer.marinar.com | (8.9.3/8.9.3) |id G