SA with SPF and Return-Path: versus From:

2004-10-17 Thread Bob Proulx
I am trying to understand how SpamAssassin 3.0.0 is checking SPF on messages. It seems to be checking the Return-Path: address (envelope address) and not the From: address (header address). That's wrong, isn't it? Shouldn't it be checking the header address? Of course when I reply my mailer use

Re: SURBLs not working after upgrade to 3.0

2004-10-17 Thread Michael Parker
On Sun, Oct 17, 2004 at 03:29:35AM -0400, Sahil Tandon wrote: > Khalid Waheed wrote: > > >If you are using --siteconfigpath other then default, copy the init.pre > >file to location. > > I repeat: there is no init.pre. The FreeBSD port does not include one, > it seems. Everything else works j

Re: SURBLs not working after upgrade to 3.0

2004-10-17 Thread Sahil Tandon
Khalid Waheed wrote: If you are using --siteconfigpath other then default, copy the init.pre file to location. I repeat: there is no init.pre. The FreeBSD port does not include one, it seems. Everything else works just dandy via the local.cf and user_prefs files. I am able to successfully loa

Re: SURBLs not working after upgrade to 3.0

2004-10-17 Thread Khalid Waheed
If you are using --siteconfigpath other then default, copy the init.pre file to location. Sahil Tandon wrote: Laurent Luyckx wrote: Are you sure you're using a recent version of Net::DNS module (>= 0.34)? Indeed. #pkg_info | grep p5-Net-DNS p5-Net-DNS-0.48 Perl5 interface to the DNS resolver

Re: Isn't this strange to see in a header?

2004-10-17 Thread Bob Proulx
Loren Wilton wrote: > Did this message also include the X-Spam-Status: No header from 2.60? I see > that in a lot of spams from a particular hunk of ratware. I can't tell. Since the message was not tagged as spam by SA that header was replaced with the SA-3.0.0 one. Bob

Re: SURBLs not working after upgrade to 3.0

2004-10-17 Thread Mike Burger
On Sat, 16 Oct 2004, Sahil Tandon wrote: > Theo Van Dinter wrote: > > >>loadplugin Mail::SpamAssassin::Plugin::URIDNSBL > > > > this should already be in the default init.pre file. > > This file does not exist on my box. Without the loadplugin line, --lint > spits out errors; with it, it

Unusual URL obfuscation attempt

2004-10-17 Thread Loren Wilton
Just noticed this little wonder in a bank phish: Follow this reference: http://64=2e147=2e66=2e120:3435/index=2e= php?wqvpbld=3dlhuyrenffjbuhfvxhltkpgjgdcbtenxpwroowdubmwwvbqrieauugfbjtdd= lqacntrdovyqiumewfwfjxaeeggnniqabrdokvrbqqrbkgftkcnvzoadvgriojjqcngnjzpbp= tccotjajzwjnxnidgttpdjtqqtbpydhhgi