[SAtalk] Re: defang_mime

2002-12-10 Thread Ronan Lucio
Alan, On Fri, 6 Dec 2002 14:33:00 -0600 Alan Ordway <[EMAIL PROTECTED]> wrote: > try putting the defang_mime 0 in the local.cf file in > /etc/mail/spamassassin instead. > > I got that from /usr/share/spamassassin/10_misc.cf > " > # SpamAssassin basic config file > # > # Please don't modify this

Re: [SAtalk] Restoring user_prefs functionality to spamd

2002-12-10 Thread Justin Mason
Victor O'Rear said: > Spamd, by default, ignores user/.spamassassin/user_prefs, for "security" and > performance reasons. > > How can I restore user_prefs functionality? (Besides not using spamd?) allow_user_rules 1 --j. --- This sf.net emai

[SAtalk] filter problems

2002-12-10 Thread Thomas Kinghorn
I am a newbie. I have setup exim 4.10 on RH8. Now I am trying to setup SA. Are there any config examples as my filter is not working. Filter error: filtering command "fail" is disabled: near line 11 of filter file filter is: # Exim Filter if first_delivery and $h_X-Spam-Flag: contains "YE

[SAtalk] logs

2002-12-10 Thread Jose M.Herrera
Can I put the spamd log's in a file?. Bye! -- *.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.* Jose Miguel Herrera M.     - User #246070 counter.li.org jherrera[@]inf.utfsm.cl - Est.Ing.Civil Informática - UTFSM *.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.*.

[SAtalk] A Taste of their own....

2002-12-10 Thread Hamilton, Kent
Anyone seen this one: http://www.freep.com/money/tech/mwend6_20021206.htm -- Kent Hamilton [EMAIL PROTECTED] Manager - Systems & Networking Hunter Engineering Company --- This sf.net email is sponsored by:ThinkGeek Welcome to geek heaven. htt

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-10 Thread rODbegbie
Adam Henry wrote: > I have received the following headers from a message from an Ebay > purchaser, and am not sure why the GENUINE_EBAY_RCVD trigger wasn't > Hit. Here they are: > >> From: [EMAIL PROTECTED] The "From:" header doesn't end with @ebay.com, therefore the eBay checks weren't performed

Re: [SAtalk] A Taste of their own....

2002-12-10 Thread Josh Trutwin
> Anyone seen this one: > http://www.freep.com/money/tech/mwend6_20021206.htm Yeah, /. had an article a couple days ago on this. Don't think it'll stop him though Josh --- This sf.net email is sponsored by:ThinkGeek Welcome to geek hea

Re: [SAtalk] Integration with an MTA (sendmail)

2002-12-10 Thread Vivek Khera
> "FA" == Forrest Aldrich <[EMAIL PROTECTED]> writes: FA> After reading the FAQ, I decided it would be appropriate to ask about this. FA> Regardless of MTA-specific criteria, I wondered if there was a way (or an FA> effort to create) to integrate SpamAssasin at the MTA level (Sendmail, FA> P

Re: [SAtalk] Spamassassin Problem with DCC

2002-12-10 Thread Theo Van Dinter
On Mon, Dec 09, 2002 at 02:40:28PM -0600, Ben M. VanWagner wrote: > Well I assume it is.. > > here is a test of dccproc > > dccproc -Q -C < sample-spam.txt > send(dcc.dcc-servers.net (153.19.44.233,6277)): Operation not permitted that first line looks like an error. the rest looks like valid o

Re: [SAtalk] A Taste of their own....

2002-12-10 Thread Mike Burger
Yup...I think I saw it mentioned here, first. On one hand, it's great that he's finally getting what's coming to him, and at least the senders are paying postage on the items being sent. On the other hand, it's a shame that the vendors and retailers in question have to pay, themselves, for havi

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-10 Thread Vivek Khera
> "AH" == Adam Henry <[EMAIL PROTECTED]> writes: AH> Question becomes, how does one know if an email is genuinely from AH> Ebay? Next question is, why do the following hostnames resolve to AH> private-class IP (is this normal behavior?): When you speak to my web server and ask it to do somet

[SAtalk] Warning on latest Pine Message-ID: format

2002-12-10 Thread Bart Schaefer
I'm pretty sure the "scramble-message-id" feature is intended to prevent harvest spammers from mistaking your message-id for an email address. -- Forwarded message -- Message-id: Date: Tue, 10 Dec 2002 09:40:49 + (GMT) From: Nancy McGough <[EMAIL PROTECTED]> To: Procmail Mail

[SAtalk] rule for catching messages with multiple copies?

2002-12-10 Thread mfidelman
I was just thinking: I get multiple copies of a lot of spam. Are there any spamassasin rules, or other tools, that filter on the basis of receiving copies of the same message? Miles Fidelman --- This sf.net email is sponsored by:ThinkGeek W

Re: [SAtalk] A Taste of their own....

2002-12-10 Thread Duncan Findlay
On Tue, Dec 10, 2002 at 10:12:26AM -0500, Mike Burger wrote: > Yup...I think I saw it mentioned here, first. > > On one hand, it's great that he's finally getting what's coming to him, > and at least the senders are paying postage on the items being sent. > > On the other hand, it's a shame that

Re: [SAtalk] A Taste of their own....

2002-12-10 Thread Vivek Khera
> "DF" == Duncan Findlay <[EMAIL PROTECTED]> writes: DF> On Tue, Dec 10, 2002 at 10:12:26AM -0500, Mike Burger wrote: >> While I agree with what they're doing, I disagree with how they're doing >> it. For all intents and purposes, the "anti-spammers" in question are >> still costing someone

Re: [SAtalk] rule for catching messages with multiple copies?

2002-12-10 Thread Theo Van Dinter
On Tue, Dec 10, 2002 at 10:44:45AM -0500, [EMAIL PROTECTED] wrote: > I was just thinking: I get multiple copies of a lot of spam. Are there > any spamassasin rules, or other tools, that filter on the basis of > receiving copies of the same message? There's no real way for SA to do this. If the

Re: [SAtalk] Warning on latest Pine Message-ID: format

2002-12-10 Thread Justin Mason
Bart Schaefer said: > I'm pretty sure the "scramble-message-id" feature is intended to prevent > harvest spammers from mistaking your message-id for an email address. You can pass it on -- that will be fine by us. ;) --j. --- This sf.net e

[SAtalk] Config Question

2002-12-10 Thread Whitewolf
Hello, I have SpamAssassin running (2.43) with spamass-milter (0.1.2), this is all working great and we have the level of spam trapping working great, I control email for a few domains and all the domains I host want to have the spam deleted instead of just subject tagged, how do I get a syst

[SAtalk] spamc -d option does not work...

2002-12-10 Thread Tomki
At least, not as advertised I have set up 2 spamd servers, and I have spamc being used from my .procmailrc like so: spamc -d spamd.alink.net -f However... when I shut down the spamd on one, there are failures connecting to both.. is this a known bug, or have I overlooked something somewhere i

[SAtalk] spamc -d option does not work...

2002-12-10 Thread Tomki
At least, not as advertised I have set up 2 spamd servers, and I have spamc being used from my .procmailrc like so: spamc -d spamd.alink.net -f However... when I shut down the spamd on one, there are failures connecting to both.. is this a known bug, or have I overlooked something somewhere i

[SAtalk] New type of SPAM identification?

2002-12-10 Thread Dennis Boylan
I've been seeing new headers in spam. X-Info: X-Camp_ID: The X-Camp_ID is followed by an alpha string. Anyone else seeing this? Thanks, Dennis --- This sf.net email is sponsored by: With Great Power, Comes Great Responsibility Learn

RE: [SAtalk] Spamassassin Problem with DCC

2002-12-10 Thread Ben M. VanWagner
I figured this out needed to allow udp port 6277 through firewall just thought you might want to know had the same problem with pyzor, needed to add 24442 did not have this probelm with razor2 since it starts with a ping ... > I am having a little problem with dcc.. > > I have razor working

[SAtalk] Synchronization of Rules

2002-12-10 Thread Ryan Qmail Test
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hey, I was wonder what everyone thinks/uses for the best way to sync up the spamassassin rules. I was looking at the CVS tree and planning just to sync it up daily but I want to know if there are any other ways that other people prefer. Thanks. -

Re: [SAtalk] New type of SPAM identification?

2002-12-10 Thread Rich Puhek
Dennis Boylan wrote: I've been seeing new headers in spam. X-Info: X-Camp_ID: The X-Camp_ID is followed by an alpha string. Anyone else seeing this? Thanks, Dennis Yep, I've seen a few. Also have been seeing "X-CampaignID:" usually followed with a 5-digit number. Some new malware? --Ri

Re: [SAtalk] Synchronization of Rules

2002-12-10 Thread Theo Van Dinter
On Tue, Dec 10, 2002 at 01:34:50PM -0800, Ryan Qmail Test wrote: > I was wonder what everyone thinks/uses for the best way to sync up > the spamassassin rules. I was looking at the CVS tree and planning > just to sync it up daily but I want to know if there are any other > ways that other people p

Re: [SAtalk] Multiple Configs...

2002-12-10 Thread mostlyharmlessnj
Using the -C or -p options, does it over ride the primary config? Matt Kettler wrote: *if* you can make your procmail recipies figure out what config files to use, you can use the -C switch to spamassassin to specify an alternate config or -p to set an alternate user_prefs file (you probably

RE: [SAtalk] New type of SPAM identification?

2002-12-10 Thread SpamTalk
>Some new malware? Sure looks like a "unquestionably SPAM" header flag. Refuse it in the milter, heh heh. -Original Message- From: Rich Puhek [mailto:[EMAIL PROTECTED]] Sent: Tuesday, December 10, 2002 3:43 PM To: Dennis Boylan Cc: [EMAIL PROTECTED] Subject: Re: [SAtalk] New type of SPAM

Re: [SAtalk] Synchronization of Rules

2002-12-10 Thread Duncan Findlay
On Tue, Dec 10, 2002 at 01:34:50PM -0800, Ryan Qmail Test wrote: > Hey, > > I was wonder what everyone thinks/uses for the best way to sync up > the spamassassin rules. I was looking at the CVS tree and planning > just to sync it up daily but I want to know if there are any other > ways that othe

Re: [SAtalk] GENUINE_EBAY_RCVD

2002-12-10 Thread Adam Henry
On Tue, Dec 10, 2002 at 10:14:02AM -0500, Vivek Khera wrote: > As to determining if it is really ebay, well, that's a really good > question. I guess if the last received header prior to your mail > server's header is ebay, it would be a good hint. Excellent suggestion. This begs a few additiona

Re: [SAtalk] spamc -d option does not work...

2002-12-10 Thread Matt Kettler
Based on the output I assume you must be running 2.50-cvs, since 2.43 would not support multiple hosts in this manner. And since this is new code in a CVS, not too surprising that it might have a bug However, taking a casual look at the libspamc.c from the latest CVS snapshot on http://spa

RE: [SAtalk] New type of SPAM identification?

2002-12-10 Thread Russ GilmanHunt
Hey now. I can see using it in legit opt-in mailings. We run one now that includes html links and tracking identification as part of the uri, so we can see how many visits and sales are generated by our email newsletters (approximately). I can't foresee using a header, but it might happen

[SAtalk] DSBL MULTIHOP/UNCONFIRMED false positives

2002-12-10 Thread Roy Badami
I'm new to this list, though I've been using spamassassin for some months now with excellent results. I'm not at all convinced though that multihop blacklists should be enabled in spamassassin by default, since such listings generally just indicate that an ISP has a customer with an open relay.