Hi,
On Thu, 15 Jan 2004, Rose, Bobby wrote:
> From: Alexander Litvinov
>
> > Hint: I think we should store these things in a SQL database instead
> > of in the file system, shouldn't we?
> Can't you hide messages in jpeg? If they created an engine that
> embedded a hidden random word in the ima
Hi,
On Sat, 17 Jan 2004 15:44:14 +0200 "Hylton Conacher (ZR1HPC)" <[EMAIL PROTECTED]>
wrote:
> My query is this: Can I use SA if I am using Mozilla as my MTA to send
> and receive my POP email ie no sendmail, qmail, fetchmail, just Mozilla
> and sorting it into my local folders on Mozilla?
Ye
Hi,
Based on SPAM-L posts from admins at Outblaze (Suresh) and rambler.ru, I
conjured up a few simple rules to detect forgeries from these domains:
header RAA_FORGED_FROM_OUTBLAZE Received =~ /\.mr\.outblaze\.com/
describe RAA_FORGED_FROM_OUTBLAZE Received line forged to implicate
On Mon, 19 Jan 2004 10:55:58 -0500 (EST) "Steven W. Orr" <[EMAIL PROTECTED]> wrote:
> Any idea when we'll get RPMs available for the new release?
It's (usually) not difficult to build your own. This initial directory
is for SuSE; Red Hat hides their build tree elsewhere, like
/usr/src/redhat:
#
On Tue, 20 Jan 2004 15:28:00 +0200 Marc Morgan <[EMAIL PROTECTED]> wrote:
> Hi There,
>
> I have been trying to install spam assassin on my OpenBSD3.1 machine. Qmail
> is installed and has been patch with QMAILQUEUE. I installed the latest
> version, but had errors when starting spamd or spamas
Hi,
On Tue, 20 Jan 2004, Marcus Frischherz wrote:
> Charles Gregory wrote:
>
> >I'm starting to see mail with TEXT obfuscation, such as:
> > I heard you need viagrPa.
> >Note the capital P thrown in to our favorite 'v' word.
> >It is really beginning to look like we need a genuine spelling chec
Hi,
On Wed, 21 Jan 2004 00:44:35 -0500 Pedro Sam <[EMAIL PROTECTED]> wrote:
> I take an opposite view point. ISP's should disable a user's account,
> if that account is found to be launching any malicious attacks,
> regardless of whether that account was intentionally malicious or was
> simply h
Hi,
On Wed, 21 Jan 2004 10:51:12 + "Spyros Tsiolis" <[EMAIL PROTECTED]> wrote:
> Hello list !
>
> I am kinda new here chaps, so please bare with me.
>
> A simple question (which I didn't pose on the xmail forum in case I
> get flamed/cursed) :-)
This list is usually civil, probably the mos
Hi,
On Thu, 22 Jan 2004 06:57:02 -0600 "Vermyndax" <[EMAIL PROTECTED]> wrote:
> Greetings all...
>
> I am trying to implement a way to generate statistics for Spamassassin.
> I've tried numerous perl scripts but most of them return all zeros for
> the stats. The biggest example I can think of i
Hi,
On Thu, 22 Jan 2004, Vermyndax wrote:
> Hi Bob...
>
> Thanks for the suggestions. I downloaded the latest sa-stats.pl from
> www.sf.net CVS (v1.3) and tried as you suggested, but I'm still getting
> all zeros.
>
> Details...
>
> My mail logs are at /var/log/mail/maillog.
Try this:
sa-stats
Hi,
On Thu, 22 Jan 2004, Vermyndax wrote:
> I know you probably don't want to hear this, but I still get the same
> results. I'm with you, I'm sure the regexp is wrong, but I don't know
> perl so I'm not helping I'm sure.
The bug is a known issue and IIRC it's been resolved in sa-stats.pl beyon
Hi,
On Fri, 23 Jan 2004 00:25:02 +0100 (MET) Matthias Fuhrmann
<[EMAIL PROTECTED]> wrote:
> On Thu, 22 Jan 2004, Vermyndax wrote:
>
> > Matthias...
> >
> > Argh, that looked abysmally easy. I guess I could have taken a crack at
> > that after all.
>
> may i take this as a sign of success (my e
Hi,
On Thu, 22 Jan 2004 15:12:06 -0600 Wagner One <[EMAIL PROTECTED]> wrote:
> On 1/22/2004 1:15 PM, Bob Apthorpe wrote:
>
> > Note: I think this my hacked-up version of sa-stats.pl at
> > http://www.cynistar.net/~apthorpe/code/sa-contrib/sa-stats.pl
> >
> &
Hi,
Use Postfix? Use spamd? Have a small mail log? Ever wonder which hosts
are sending the most spam into your system? Wonder no longer -
spamsources.sh is here to answer all your questions about who is
spamming you. Maybe.
http://www.cynistar.net/~apthorpe/code/sa-contrib/spamsources.sh
This 's
Hi,
On Mon, 26 Jan 2004 22:09:28 -0600 "Vermyndax" <[EMAIL PROTECTED]> wrote:
> Bob...
>
> Once again, excellent work.
Thanks - I give back what I can.
> I think my only complaint now is that my master.cf is messing with your
> script's ability to report the top spam receivers.
[section on us
Hi,
On Fri, 23 Jan 2004 17:15:19 -0600 "Smart,Dan" <[EMAIL PROTECTED]>
wrote:
> I would suggest you use SpamStats from http://www.gryzor.com/tools/
> I ran both, and SpamStats reported more of both Spam and Ham. I
> suspect sa-stats is missing some records.
Actually, I'm starting to believe the
On Fri, 23 Jan 2004, AltGrendel wrote:
> On Fri, 2004-01-23 at 00:14, Bob Apthorpe wrote:
> > Hi,
> >
> > On Thu, 22 Jan 2004 15:12:06 -0600 Wagner One <[EMAIL PROTECTED]> wrote:
> >
> > > On 1/22/2004 1:15 PM, Bob Apthorpe wrote:
> > >
&g
Hi,
On Mon, 26 Jan 2004, AltGrendel wrote:
> On Fri, 2004-01-23 at 15:19, Justin Mason wrote:
> >
> > svn co http://svn.apache.org/repos/asf/incubator/spamassassin/trunk
> >
> > or http://svn.apache.org/viewcvs.cgi/incubator/spamassassin/trunk/?root=Apache-SVN
>
> I tried those and got a connecti
On Thu, 29 Jan 2004 15:28:31 + (UTC) Peggy <[EMAIL PROTECTED]> wrote:
> Does anyone know where to download HTML::Parser 3.24 for SunOS 5.9 from as I
> always got the following warning when I run the command "perl Makefile.PL
> PREFIX=${Prefix} SYSCONFDIR=/prod/config" for Mail-SpamAssassin-2
ctorant impertinent aft conceit chilean morel delude godfrey
> deniable capstan actinic studio chloride copter caustic speedy cottrell fit piper
> beta dialect wendy role collapsible total baptiste lofty crowberry enforceable
> huckleberry sinclair tied
>
>
> --95731644074591056620
Hi,
On Tue, 12 Aug 2003, Patrick Morris wrote:
> Robin Witkop-Staub wrote:
>
> >What does /b in front of this filter mean?
> >
> >body RAVEN_VIAGRA_OBSCURED /\bV.i.a.g.r.a/i
> >describe RAVEN_VIAGRA_OBSCURED contains advertising Viagra by any name
> >score RAVEN_VIAGRA_OBSCURED 50.0
>
>
Hi,
On 12 Aug 2003 15:50:12 -0700 Chris Bradfield <[EMAIL PROTECTED]> wrote:
> So you want 50 points for any file with
>
> Content-Type: application/x-msexcel;
> ^^^
> ???
>
> Looking through a mailbox full of mime-encoded attachments (and only
> attachments) I fou
Hi,
On Tue, 12 Aug 2003 17:10:15 -0500 Mike Grau <[EMAIL PROTECTED]>
wrote:
> on 08/12/2003 02:07 PM Bob Apthorpe wrote:
>
> >
> > Has someone explained to him what a horrible idea this is? Spam is usually
> > forged to look like it came from a non-existant or inn
Hi,
On 19 Aug 2003 07:06:46 +0100 Yorkshire Dave
<[EMAIL PROTECTED]> wrote:
> On Tue, 2003-08-19 at 03:39, John P Verel wrote:
> > I've got my .procmailrc set up to generate an exit code 67 to bounce
> > spam back to the sender. Problem is the user and domain are not what I
> > want, which is [EM
Hi,
Note: This is not precisely on-topic for SATalk though it hints that
SPEWS is not the worst you may have to deal with.
On Sun, 17 Aug 2003 18:49:06 -0700 Abigail Marshall
<[EMAIL PROTECTED]> wrote:
> YD> There are only 2
> YD> places in the whole world that get denied at the MTA here and SB
Hi,
On Tue, 19 Aug 2003 21:34:38 +0200 Luis Muñiz <[EMAIL PROTECTED]> wrote:
> I've just setup (not system-wide[1]) Mail-SpamAssassin-2.55. My
> problem is that every time a mail is received, procmail' log shows
> the following:
>
> Can't locate HTML/Parser.pm in @INC (@INC contains: ...
On Tue, 19 Aug 2003 23:41:39 -0400 Glen Stewart <[EMAIL PROTECTED]> wrote:
> The serial execution of queries and response-waiting really slows
> SpamAssassin down. Can it be threaded so all the messages are loaded
> and queries in parallel?
Patches to perl to provide a robust threading model a
On 19 Aug 2003 09:40:20 -0700 "Richard M. Myers" <[EMAIL PROTECTED]> wrote:
> Spamassassin attaches "X-Spam-Report: This mail is probably spam." to
> ALL emails it processes REGARDLESS of whether it deems them actual spam
> in the end.
Which version? How do you have it installed (individual or
Hi,
On Wed, 20 Aug 2003 15:07:00 + Jim <[EMAIL PROTECTED]> wrote:
> I've been getting these once in a while, they just seem to have random
> words in them.. no sales pitch that I can see. And they are always
> different sets of words.
This is an attempt to defeat bayesian classifiers.
> I
Hi,
FWIW, I've been seeing several (4) false positives flagged by
mercury.thesuttons.force9.co.uk, apparently with SA 2.55 installed
site-wide under Postfix with the (IMHO) ridiculouly low threshold of 2.2.
Yes, to some extent it's my fault they're being flagged as false positives
here since I tr
On 26 Aug 2003 14:06:56 -0400 K Old <[EMAIL PROTECTED]> wrote:
> Hello everyone,
>
> I'm using the 2.55 version of SA and everything works great. I'm trying
> to find a good way to parse the almost-certainly-spam and probably-spam
> files that are produced by SA.Given that the majority of the ma
Hi,
On Tue, 26 Aug 2003 21:56:02 -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote:
> On Wed, Aug 27, 2003 at 03:34:46AM +0200, Marcus Schopen wrote:
> > I use amavisd-0.1. My sendmail is responsible for two domains (privat
> > and work stuff).
> >
> > Depending on to which domain a user is sendi
On Wed, 27 Aug 2003 17:56:19 +0200 Céline REDON <[EMAIL PROTECTED]> wrote:
> Hi all,
>
> Could anyone tell me if there is some free RBL ??
Yes, see http://openrbl.org and
http://www.declude.com/junkmail/support/ip4r.htm
-- Bob
---
This sf.ne
Hi,
On Wed, 27 Aug 2003, Louis LeBlanc wrote:
> On 08/27/03 05:52 PM, David sat at the `puter and typed:
> > The setup is pretty secure (I think) and and don't find any evidence
> > in my logs that I have an open relay. The problem is that I got a
> > LOT of connections from someone that tries t
On Fri, 29 Aug 2003 11:43:52 -0400 (EDT) "Christopher X. Candreva" <[EMAIL PROTECTED]>
wrote:
> On Fri, 29 Aug 2003, Theo Van Dinter wrote:
>
> > it's in by default:
> >
> > spamc:
> > -U socketpath
> > Connect to "spamd" via UNIX domain socket socketpath instead of a TCP/IP
> > connection.
>
Hi,
On 29 Aug 2003 19:15:15 +0100 Yorkshire Dave
<[EMAIL PROTECTED]> wrote:
> On Sat, 2003-08-30 at 04:57, Dragoncrest wrote:
> > >Quite. They got pummelled to death by a DDoS. See:
> >
> > Yeah, stupid pathetic cowardly spammers (I can think of some much
> > more colorful choice words
Hi,
On Sun, 31 Aug 2003 23:39:16 -0400 "Richard Ahlquist"
<[EMAIL PROTECTED]> wrote:
> This is similar to something I suggested on /. the other day though I must
> confess you have put far more thought into it than I have. A P2P distributed
> blacklist could defeat the DDOS attacks centralized se
Hi,
On Mon, 01 Sep 2003 14:19:32 +0530 "BG Mahesh" <[EMAIL PROTECTED]>
wrote:
> I want to add a rule to assign higher points if the email has an
> attachment with PIF extension. How do I do that? [I am using
> SA-2.55+procmail]
To solve the general problem of email-borne malware, you might filte
Hi,
On Sun, 31 Aug 2003 12:51:44 -0700 "Lee Mahan" <[EMAIL PROTECTED]> wrote:
> I am trying to develop a connection with spam assassin where the
> mail message is contained in a MySQL database using either PHP or
> Perl. Perhaps I'm too tired or just haven't had enough coffee, but I
> can't s
On Sat, 6 Sep 2003 12:11:13 -0700 [EMAIL PROTECTED] wrote:
> RH9 with kernel 2.4.20-19.9, spamassassin-2.44-11.8.x via procmail
>
> Using Linux Bible and recipes I googled, I'm trying to set up SpamAssassin to
> tag and redirect spam into the user's ~/mail/SPAM file, which I created. I've
> tried
t anything having to do with
> Osirusoft. :)
Do the messages that passed through 2.60 also pass through 2.55?
> Is this a known problem? And if not, any hints on how I might try to track it
> down?
May be, though if the issue is message size, it's intentional behavior.
--
Bob Apt
6588, 7033, 8000, 8080, 8081, 8085, 8090, 8095,
8100, 8105, 8110, and . These are given as examples of the scope of
reactive proxy testing; I strongly advise against scanning other
networks unless you want a call from your ISP.
hth,
--
Bob Apthorpe
---
Hi,
On Mon, 15 Sep 2003 14:34:03 +0100 Paul Hutchings <[EMAIL PROTECTED]> wrote:
> > Pardon me while I expose my ignorance. What's a smarthost, and given
> > me by which provider? All I get from my so-called ISP is a wire with
> > an IP address, or do you mean dyndns?
>
> It's your ISPs outbo
or retest by DSBL, Monkeys, and
Blitzed and you should be OK.
Once you've done that, fix the HELO/EHLO string on your mail server to
be a FQDN (RFC requirement.)
hth,
--
Bob Apthorpe
---
This sf.net email i
On Mon, 15 Sep 2003 18:23:46 -0400 "Michael W. Cocke" <[EMAIL PROTECTED]> wrote:
> On Mon, 15 Sep 2003 13:39:18 -0500, you wrote:
>
> >On Mon, 2003-09-15 at 08:13, Michael W. Cocke wrote:
> >[snip]
> >
> >> Pardon me while I expose my ignorance. What's a smarthost, and given
> >> me by which pro
AS 5378 - Clueless & Witless .UK
*.wsA 216.35.187.246
AS 3561 - Clueless & Witless .US
Internet death penalties pending.
--
Bob Apthorpe
-
Hi,
On Tue, 16 Sep 2003, Jennifer Wheeler wrote:
> what am i doing wrong here? I am trying to unblacklist an address
> getting tagged by Infinite-Monkeys.
>
> using spamassassin 2.55
>
> i put the following line in /etc/mail/spamassassin/local.cf with all my
> other rules and whitelisted address
Hi,
On Tue, 16 Sep 2003 18:13:12 +0200 "Hubert Daubmeier" <[EMAIL PROTECTED]> wrote:
> Hello
>
> my postmaster has pointed me to this discussion list
>
> --
>
[...]
> I would like to outline a problem and like to ask for updating the
> manufacturer strings for Microsoft Out
Hi,
On Thu, 18 Sep 2003 12:55:46 + "Muhannad Tamemi" <[EMAIL PROTECTED]> wrote:
> From: "Chr. von Stuckrad" <[EMAIL PROTECTED]>
> >
> >On Thu, Sep 18, 2003 at 09:38:53AM +, Muhannad Tamemi wrote:
> > > Dear All ,
> > >
> > > Kindly note that am new to spammassassin ..
> > >
> > > I have Su
Hi,
On Fri, 19 Sep 2003, Forrest Aldrich wrote:
> This new virus appears to generate many (random?) subjects, so it's getting
> difficult to narrow down.
>
> Has anyone filters for Spamassassin that will correctly identify this
> virus? I'd like to score this one high so they are rejected (via
>
Hi,
On Sun, 21 Sep 2003 21:09:09 -0700 "Mike Klein" <[EMAIL PROTECTED]> wrote:
[...]
> When I attempt to run the verification tests, spamassassin just sits there
> doing nothing it seems.
>
> spamassassin -t sample-nonspam.txt
>
> Just 'hangs'.
>
> What might I need to configure/reconfigure?
ING 0.0
Also, use sa-learn on those messages that sneak past SA.
hth,
--
Bob Apthorpe
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-t
Hi,
On Mon, 22 Sep 2003 23:45:35 -0500 "Mike Loiterman"
<[EMAIL PROTECTED]> wrote:
> Just reading the release notes for 2.60 and noticed this:
>
> - spamd now supports UNIX-domain sockets for low-overhead scanning,
> thanks
> to Steve Friedl for this. This is strongly recommended if you'r
On Tue, 23 Sep 2003 11:41:46 +0200 Federico Giannici <[EMAIL PROTECTED]> wrote:
> I'm using SA 2.60 RC6.
> I have noticed that Bayesian scores are not monotonically increasing.
> For example, score for BAYES_90 is LESS then the score for BAYES_70
> (when network is used)!
>
> Is this correct?
Ye
the low scores); it
should be interesting to see how this behaves.
--
Bob Apthorpe
---
This sf.net email is sponsored by:ThinkGeek
Welcome to geek heaven.
http://thinkgeek.com/sf
___
Spamassassin-talk
Hi,
Just seen on SPAM-L:
Apparently Ron's proxy honeynet hit a nerve in the hardcore spammer
community.
First Osirusoft, now monkeys.com. Which DNSBL is next? When do the
crosshairs move to SpamAssassin?
And when will the lawyers and Feds visit the asleep-at-the-wheel
instituions and ISPs hosti
Hi,
On Tue, 23 Sep 2003, Jonathan Nichols wrote:
> Great.. is this going to affect SpamAssassin like it did when osirusoft
> went offline?
No, not unless Ron does something crazy like blacklisting 0.0.0.0/0. I
expect he'd give people fair warning first if he was going to do that. I
also expect i
On Wed, 2 Jan 2002 00:28:59 +1100 Trevor Rhodes <[EMAIL PROTECTED]> wrote:
> While installing I get the following error. Anyone have any clue as to why
> and what I can do?
Looks like make can't find INSTALL. Try
touch INSTALL
followed by
make clean
perl Makefile.PL
make
and see if
On Wed, 24 Sep 2003 19:04:35 -0400 "Dan Didier" <[EMAIL PROTECTED]> wrote:
> Hi,
>
> Running redhat8 with qmail and spamassassin as well as trying to get
> razor2 working.
>
> If I look in my log files, I have entries like this:
>
> Sep 24 19:04:16 sandbox spamd[14130]: connection from localhos
Hi,
On Wed, 24 Sep 2003 23:13:19 +0100 Daniel Bird <[EMAIL PROTECTED]> wrote:
> Forrest Aldrich wrote:
>
> > A new approach to DNSBL might be considered, where there is a
> > peer-to-peer sharing (authentication, scoring whatever) that mirrors
> > content -- something of that nature, whereby t
Hi,
[apologies for this being so far off-topic]
On Thu, 25 Sep 2003, Peter P. Benac wrote:
> And this lack of response is due to what???
Lazy, stupid, apathetic, incompetent, or ambivalent members of the law
enforcement and ISP community? Insufficient network diagnostic and
security tools, maki
Hi,
On Thu, 09 Oct 2003 11:56:29 -0300 Fabiano Bonin <[EMAIL PROTECTED]> wrote:
> I am using SpamAssassin sice yesterday and i put it in production today,
> site wide.
> It's amazing.
> It's filtering 95% on my daily messages, and all blocked messages are
> really spams.
>
> BUT, in my particula
Hi,
On Tue, 14 Oct 2003, Stewart, John wrote:
> > Nope, it looks like WordPad is a bad place to edit :)
> > Apparently it has some
> > hidden characters in it. AS of 4:40 EST today, I resaved it
> > under MSDOS text
> > format in the hopes it fixed it. Did you get the file before then?
gvim work
.
> Do you know how to check the DB_File version so I can confirm it's at
> 1.806?
perl -MDB_File -e 'print $DB_File::VERSION, "\n";'
--
Bob Apthorpe
---
This SF.net email is sponsored by: SF.net Giveback Program.
Sou
Hi,
On Fri, 17 Oct 2003, Matt Kettler wrote:
[...]
>
> The partiuclar message you were testing against is a common virus email..
> SA isn't designed to catch viruses, and has no rules to catch this one.. if
> you really want to catch them, search in the archives of this list for SWEN
> and you sh
others to stop using it too. monkeys.com is dead.
> When I enable IM in my MailScanner setup for SpamAssassin, all outgoing mail
> from my servers gets kicked into la-la land - I scan all outgoing Email -
> because it's matching on Infinite-
int is
doing the right thing here.
You probably want
/free\s+of\s+charge/i
or
/free\s{0,10}of\s{0,10}charge/i (similar to /free\s*of\s*charge/i)
The difference between /b and /s tripped me up for a long time because I
kept thinking 'blank' not 'boundary' when I saw '
absorb. And don't top post... :)
Have fun!
--
Bob Apthorpe
[*] Summary of arguments: C/R systems can be abused to mailbomb people
(forge many requests to known C/R from a single recipient.) Spammers
either a) won't confirm, so you're sending a challenge that won't be
a
On Sat, 25 Oct 2003 15:57:18 +0100 (BST) Martin Radford <[EMAIL PROTECTED]> wrote:
Hi,
> At Fri Oct 24 19:38:50 2003, Matt Kettler wrote:
>
> > goes. There's serious discussion about dumping support for any perl under
> > 5.6 in future releases. Apparently trying to make SA work under 5.00x,
>
Hi,
On Wed, 22 Oct 2003 16:22:33 +0200 "Jeffrey Schilperoord"
<[EMAIL PROTECTED]> wrote:
> What is the easyest way to change the 5.0 spampoints to a higher level ?
Add something like
required_hits 6.5
to ~/.spamassassin/user_pref
> This SF.net email is sponsored by: The SF.net Donation Program.
> Do you like what SourceForge.net is doing for the Open
> Source Community? Make a contribution, and help us add new
> features and functionality. Click here: http://sourceforge.net/donate/
> _
On Tue, 28 Oct 2003 21:08:14 -0800 Robert Menschel <[EMAIL PROTECTED]> wrote:
> Tuesday, October 28, 2003, 9:00:23 PM, you wrote:
> >> If you have the flexibility, use a different email program. My
> >> personal favorite is The Bat!; Eudora is also very good.
> >> Netscape's Messenger is also exce
On Wed, 29 Oct 2003 09:50:37 -0500 "Jennifer Wheeler" <[EMAIL PROTECTED]> wrote:
> Hi Larry
>
> > I have had some very good success with a rawbody and subject test
> which
> > looks for
> >
> > 4 or more consonants
> > followed by 1 or 2 vowels
> > followed by 3 or more consonants or digit
out updating the full application.
--
Bob Apthorpe
---
This SF.net email is sponsored by: SF.net Giveback Program.
Does SourceForge.net help you be more productive? Does it
help you create better code? SHARE THE LOVE, and help us help
YOU! C
On Thu, 30 Oct 2003 10:24:19 -0500 Chris Santerre <[EMAIL PROTECTED]> wrote:
> /* era */ wrote:
> >
> > Yrg'f ubcr gurl qba'g qvfpbire Havpbqr nal gvzr fbba.
>
> Ook. ?huh? ^^
perldoc Crypt::Rot13 :)
-- Bob
---
This SF.net em
On Thu, 30 Oct 2003 19:50:49 -0800 Patrick Morris <[EMAIL PROTECTED]> wrote:
> Steven Manross wrote:
>
> >I'm seeing a few/lot of spam that has a reverse lookup name that is like the
> >originating IP.
> >
> >i.e. If it were 192.168.52.45 that was the originating IP, the reverse
> >lookup might
On Fri, 31 Oct 2003 09:47:07 -0700 "Steven Manross" <[EMAIL PROTECTED]> wrote:
[...]
> I see everyone's concerns, and they are duly noted. Yes, real
> businesses have IPs in dynamic/DSL ranges for real reasons.
No doubt the huge price difference between 'residential-class' and
'business-class' s
es at each end, and will make it case
> insensitive (ie: to match penis or peNiS)
I wonder how
/\bP[^[:alpha:]\s]{0,3}e[^[:alpha:]\s]{0,3}n[^[:alpha:]\s]{0,3}i[^[:alpha:]\s]{0,3}s\b/i
would fare...
--
Bob Apthorpe
---
This SF.net email is
On Fri, 31 Oct 2003 11:30:29 -0800 "Josiah DeWitt" <[EMAIL PROTECTED]> wrote:
> I just installed SpamAssassin and got it working, but it just drops or
> marks spam after it has already accepted it. While this /dev/null type
> behavior is great, I would rather discourage spammers by refusing the
>
On Mon, 24 Feb 2003 09:57:18 +1300
Simon Byrnand <[EMAIL PROTECTED]> wrote:
> At 14:31 21/02/03 +0100, you wrote:
> >Simon Byrnand wrote on Fri, 21 Feb 2003 12:11:20 +1300:
> >
> > > If this option is set to 0, incoming spam is only modified by
> > > adding some headers and no changes will be
> >
On Mon, 20 Jan 2003 09:43:20 -0500
Theo Van Dinter <[EMAIL PROTECTED]> wrote:
> On Mon, Jan 20, 2003 at 08:27:03AM -0600, Bob Apthorpe wrote:
> > They're only in 2.50; 2.50 should be released in a week or two.
>
> FYI: The "official" answer is sometime Q1 200
Hi,
On Mon, 24 Mar 2003 03:00:58 +0100
"Pablo Vieira" <[EMAIL PROTECTED]> wrote:
> There was a very good reason why SA can't be used by spammers to
> workaround its algorithms, but it wasn't related at all with the fact of
> being open source.
If the Bayes system was closed, how would we verify
or strace (system call
trace utility), can you tell what's prompting the core dump? Is SA the
only code that exhibits this behavior? My gut feeling is the problem
lies with perl not SA; a bad script shouldn't cause a core dump.
--
Bob Apthorpe
--
nnecessarily snotty replies will
change.
Talk to your ISP; they're more likely to solve your problem than 'we' are.
hth,
--
Bob Apthorpe
---
This SF.net email is sponsored by: ObjectStore.
If flattening out C++ or Java code t
installed by default, the Piltdown compiler, the anonymous mailbombing
agent disguised as Sendmail, the broken and misplaced utilities that take
a day and a half of replacing with functional GNU equivalents. For as much
as I complain about how broken Solaris is, I can fix it, I can secure it,
I can
ainly can't tell
from the rejection message. If I'm not the spammer and <[EMAIL PROTECTED]>
isn't the spammer, who is? :)
Regardless, I'd love to hear the rationale' for dropping this mail during
the SMTP phase.
--
Bob Apthorpe
May 27 16:58:07 soyokaze postfix/pickup
problem solved, whatever it is. The
SpamAssassinator does what he can, but between ninja practice,
meditation, and the occasional beheading, he has limited time to help
people who won't first try to help themselves, especially when the
solution to their problems is in floodlit letters, fifty
usted users
> until you convince yourself you've got the bugs in your installation worked
> out.
I'll assume you have many users who would be uncomfortable working with
procmail. In this case, you should probably install SpamAssassin site-wide
with something like MIMEDefang a
ille Parkway
Roseville, CA 95661
US
Domain name: MONKEYS.COM
Administrative Contact:
Guilmette, Ron [EMAIL PROTECTED]
Love him or hate him, Ron's hard to forget... :)
--
Bob Apthorpe
---
This SF.net email
Hi,
On Wed, 28 May 2003 13:29:26 -0700 "Gary Funck" <[EMAIL PROTECTED]>
wrote:
> Hi Bob,
>
> > -Original Message-
> > From: Bob Apthorpe
> > Sent: Wednesday, May 28, 2003 10:37 AM
> >
> [...]
> > You may want to lo
've learned an awful lot
from that list in the last 6-7 years. It's just that I'm really tired of
watching people go out of their way to be rude and abusive towards
others at the slightest provocation (and I recognize the irony in my
semi-snotty response to the "I hate SpamAssas
with my netblock listings anymore. I now rely more on the
> DNSBLs that should be up-to-date.
Amen to that.
Caveat utilitor,
--
Bob Apthorpe
[1] John Gilmore needs a new hobby.
[2] Though Ron is starting to blacklist networks that attack
www.monkeys.com which IMHO is a big step toward th
t
scales, from simple tagging to aggressive rejection, sitewide across a
mailserver farm or locally via procmail. It'd be nice to see the
popularity of each approach along with the success rate.
Hmm, maybe this is a more appropriate topic for SAdev.
Thoughts?
--
Bob Apthorpe
-
rk[1] but still, the lack of usable howtos for Cyrus & LDAP is
saddening.
--
Bob Apthorpe
[1] End goal - provide low-traffic spam/virus-filtered non-Yahoo webmail
accounts for friends on a couple virtual domains.
---
This SF.net email is
ver see Groundhog Day? I'm startin to get wigged out...
>
> Yeah, but these guys aren't as funny as Bill Murray.
Sorry about that. I was struck by rays from the KGB Orbital Bonehead
Satellite - that post should _not_ have gone to the list.
My bad -- sorry,
--
Bob Apthorpe
l::SpamAssassin
quit
6. Test. Read USAGE. Have fun.
hth,
--
Bob Apthorpe
---
This SF.net email is sponsored by: Etnus, makers of TotalView, The best
thread debugger on the planet. Designed with thread debugging features
you
put them in the spamtrap
> > ;)
> >
>
> Ah, Grasshopper. You have acheved true enlightenment.
It costs little to assume the best of people. When they take advantage
of us we may strike them down without mercy or anger.
Best not to cc the list unless the exch
e you've installed a C compiler, you need to
edit /usr/perl5///Config.pm to allow CPAN modules to
be compiled and installed. Again, see
http://www.cynistar.net/~apthorpe/code/configuring_cpan.html for
details.
Anybody out there willi
> processed and they stay in memory for several time increasing the
> processing time for new messages.
>
> 3) The Subject of the email delivered say:"Undisclosed Recipient"; while
> without Spamassassin the postfix
get this does ASAP?
Try SAProxy at http://saproxy.bloomba.com/ for a POP3 proxy. It takes
about 5 minutes to set it up and it should tag mail very nicely provided
you're retrieving it via a POP3 server.
What are you trying to do with SpamAssassin that you
1 - 100 of 194 matches
Mail list logo
