Re: [SAtalk] MIMEdefang and autowhitelist

2003-03-21 Thread Tony Earnshaw
ons, 2003-03-19 kl. 18:02 skrev Matt Kettler: > (hint: a spammer sends spam to a bunch of users in your network as a series > of separate messages, once it hits the ALL_SPAM_TO user they effectively > get whitelisted as it will enter a -100 score in the AWL DB for that > sender/ip. ) Perhaps I

Re: [SAtalk] carefully selected fakes for collecting negativ scores

2003-03-21 Thread Louis LeBlanc
On 03/21/03 03:14 PM, Tony Earnshaw sat at the `puter and typed: > fre, 2003-03-21 kl. 12:38 skrev Tom Pfeifer: > > > today I got a spam which obviously carefully designed fake headers > > in order to get a lot of negative scoring to compensate > > the spam scores: > > > > fake references --> I

Re: [SAtalk] Blacklist from Brazil

2003-03-21 Thread Tony Earnshaw
fre, 2003-03-21 kl. 17:53 skrev Mike Vanecek: > Is this the correct the correct entry in local.cf for this: > > header RCVD_VIA_BRAZIL eval:check_rbl('brazil', 'brazil.blackholes.us.') > describe RCVD_VIA_BRAZIL Received from Brazil > score RCVD_VIA_BRAZIL10.0 Giuliano Gavazzi on the

RE: [SAtalk] Attachments vs the 2.4 way of doing it

2003-03-21 Thread Michael Moncur
> Explanation: some spammers strip the string "nospam" from address lists, > assuming that folks often disguise addresses like so > > <[EMAIL PROTECTED]> This is why I've posted to USENET using the (valid) email address [EMAIL PROTECTED] for years - presumably when the 'nospam' is st