Is there a reverse DNS (rdns) test in SA 3.0.2

2005-02-27 Thread Greg Allen
I am looking at the SA files and have not found any info about this yet. Does SA 3.0.2 test for a reverse DNS (A record) on a connecting mail server and assign a point value for servers with no reverse DNS? Thanks

Re: Obfuscation (was: Millions and Billions)

2005-02-27 Thread Phil Barnett
On Sunday 27 February 2005 06:31 pm, Kenneth Porter wrote: > --On Sunday, February 27, 2005 11:48 AM -0500 Phil Barnett <[EMAIL PROTECTED]> > > wrote: > > All you have requested here is for someone else to do the complicated > > stuff and make it easy for you. Someone has to get the code as comple

Re: Obfuscation (was: Millions and Billions)

2005-02-27 Thread Kenneth Porter
--On Sunday, February 27, 2005 11:48 AM -0500 Phil Barnett <[EMAIL PROTECTED]> wrote: All you have requested here is for someone else to do the complicated stuff and make it easy for you. Someone has to get the code as complex as it needs to be. If not you, then the guy that makes the library y

Re: Upgrade SA from 2.63 to 3.02 file conflicts message

2005-02-27 Thread Theo Van Dinter
On Sun, Feb 27, 2005 at 05:34:25PM -0500, Greg Allen wrote: > Ran rpm -i (perl file name ) (spamassassin file name) > > When I try the rpm above install I get a long list of > > (file name) from install of spamassassin 3.0.2 "conflicts with a file from > package" spamassassin 2.63. > > Any ideas

Upgrade SA from 2.63 to 3.02 file conflicts message

2005-02-27 Thread Greg Allen
I downloaded SpamAssassin in tar.gz format from spamassassin.org I have a working SA version 2.63 that has been running for months. I wish to do the upgrade to 3.0.2. I ran rpmbuild -tb Mail-SpamAssassin-3.0.2.tar.gz Went to the correct i338 RPM directory Ran rpm -i (perl file name ) (spamassas

Re: Obfuscation (was: Millions and Billions)

2005-02-27 Thread Phil Barnett
On Sunday 27 February 2005 10:35 am, Kenneth Porter wrote: > --On Thursday, February 24, 2005 6:07 PM -0500 Phil Barnett > > <[EMAIL PROTECTED]> wrote: > > i or l = [|ííiil1] > > > > a = [EMAIL PROTECTED] > > > > e = [eé3] > > > > o = [o0] > > It seems like this is getting overly-complicated. Are t

Re: Obfuscation

2005-02-27 Thread Marc Perkel
I had a trick I was using in Exim that worked pretty well and cound be recoded in perl. First - I had a list of words spelled correctly that spammers often deliberately misspell. What I did was take the subject and the first 200 characters of the body. Then I removed all the words matching the

Obfuscation (was: Millions and Billions)

2005-02-27 Thread Kenneth Porter
--On Thursday, February 24, 2005 6:07 PM -0500 Phil Barnett <[EMAIL PROTECTED]> wrote: i or l = [|ííiil1] a = [EMAIL PROTECTED] e = [eé3] o = [o0] It seems like this is getting overly-complicated. Are there any libraries for doing fuzzy string matching and obfuscation detection that could be us

SQL settings & Deprecated rulesets?

2005-02-27 Thread Codger
OK, I've successfully transitioned from 2.63 to 3.0.2 but I have two questions: 1. The sql users database doesn't seem to be used though it was working fine in 2.63. I have the following configuration in local.cf. Is there a plugin or other setting that I need to make this work? (I'm using CGS

Re: Strange SpamAssassin Statistical Performance

2005-02-27 Thread Matt Kettler
At 05:55 PM 2/26/2005, Justin Mason wrote: I'm thinking it might be worthwhile setting up a section of the FAQ for MailScanner users, similarly for amavisd users, etc. with these type of answers. I'd say pretty much all MailScanner sites with bayes running would need to use that cronjob tactic. Agr

Re: Forwarding spam

2005-02-27 Thread Steven J. Sobol
On Sun, 27 Feb 2005, Niek wrote: > yeah, send me spam, i'll forward your spam, INTACT, do this list. How about > it? How about "no"? -- JustThe.net - Apple Valley, CA - http://JustThe.net/ - 888.480.4NET (4638) Steven J. Sobol, Geek In Charge / [EMAIL PROTECTED] / PGP: 0xE3AE35ED "The wisdom

Re: Forwarding spam

2005-02-27 Thread Niek
On 2/26/2005 10:40 PM +0100, Chris wrote: When forwarding spam, those of you who do it, do you leave the subject intact, ie..*SPAM(35.2)* You've been selected for a low rate or do you change the subject to something like "phishing msg attached" or "lottery scam msg"? yeah, send me spam, i