Rob McEwen wrote:
I've got an idea for faster rDNS lookups.
Before I present the solution. Here is the problem...
...basically, rDNS checks are "expensive". They sometimes take a few seconds
when done in real time and depend on the timeliness and of other people's
DNS servers. This 1-5 (or more
On Friday, August 12, 2005, 1:54:05 AM, dirk dirk wrote:
> Just that nobody forgets:
> What about false positives? 158.194.144.219 apparently belogs to Palacky
> University in Olomouc,Czechia. This IP is now wrongfully listed in SURBL!
> I'll post that problem to the SURBL-List as well, I think. J
I've got an idea for faster rDNS lookups.
Before I present the solution. Here is the problem...
...basically, rDNS checks are "expensive". They sometimes take a few seconds
when done in real time and depend on the timeliness and of other people's
DNS servers. This 1-5 (or more) seconds may not se
On Thursday, August 11, 2005, 9:36:47 AM, Theo Dinter wrote:
> On Thu, Aug 11, 2005 at 03:31:57AM -0700, Jeff Chan wrote:
>> > the IP
>> > 219 dot 144 dot 194 dot 158
>> > is shown as listed by http://www.rulesemporium.com/cgi-bin/uribl.cgi - a
>> > phishing mail with
>> > http://219dot144dot194do
On Friday, August 12, 2005, 10:07:47 AM, Dirk Bonengel wrote:
> Given: A (phishing-)mail containg a link to the IP 219.144.194.158
> The lookup page on rulesemporium.com says it's listed on ws and ph in SURBL
> However, I find that the current SpamAssassin (3.0.4) does not appear to
> lookup I
Justin Mason wrote:
> SpamAssassin 3.1.0-rc1 is released! SpamAssassin 3.1.0 is a major update.
> SpamAssassin is a mail filter which uses advanced statistical and
> heuristic tests to identify spam (also known as unsolicited bulk email).
Don't know if this is significant ...
When I ran perl Mak
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
*** THIS IS A RELEASE CANDIDATE ONLY, NOT THE FINAL 3.1.0 RELEASE ***
SpamAssassin 3.1.0-rc1 is released! SpamAssassin 3.1.0 is a major update.
SpamAssassin is a mail filter which uses advanced statistical and
heuristic tests to identify spam (also k
On Friday 12 August 2005 17:54, jdow wrote:
>Whitelist_from_rcvd makes more sense than your approach, Gene. At
> least it would if your name was on the don't fly list for some
> reason. {^_^}
I don't think I am. But I expect I'll find out monday morning as I'm
scheduled to fly to upstate MI and w
Whitelist_from_rcvd makes more sense than your approach, Gene. At least
it would if your name was on the don't fly list for some reason.
{^_^}
- Original Message -
From: "Gene Heskett" <[EMAIL PROTECTED]>
On Friday 12 August 2005 17:34, Faisal N Jawdat wrote:
TSA wants people to turn
On Friday 12 August 2005 17:34, Faisal N Jawdat wrote:
>TSA wants people to turn off their spam filters:
>
>http://www.schneier.com/blog/archives/2005/08/tsa_and_spam.html
Ya gotta be kidding. Tell ya what, this is my machine, and I'll
filter as I damned well please within my ability to write fil
whitelist_from_rcvd [EMAIL PROTECTED]tsa.dot.gov or whatever works.
{^_^}
- Original Message -
From: "Faisal N Jawdat" <[EMAIL PROTECTED]>
To:
Sent: 2005 August, 12, Friday 14:34
Subject: tsa vs., well, us
TSA wants people to turn off their spam filters:
http://www.schneier.com/
TSA wants people to turn off their spam filters:
http://www.schneier.com/blog/archives/2005/08/tsa_and_spam.html
i'd suggest some sort of tsa whitelist rule, but i'm guessing if that
happens i'll soon start seeing mail from the tsa's department of
herbal viagra.
-faisal
Ronald I. Nutter wrote:
> I am getting quite a bit of spam coming in today that is scoring well
> below the 5.0 min (i.e. 2.4 or so out of 5.0). The common thread I am
> seeing is that they all fail the NO_DNS_FOR_FROM Rule. I noticed that
> it is only set to 1.1. I am thinking about raising the
I am getting quite a bit of spam coming in today that is scoring well
below the 5.0 min (i.e. 2.4 or so out of 5.0). The common thread I am
seeing is that they all fail the NO_DNS_FOR_FROM Rule. I noticed that
it is only set to 1.1. I am thinking about raising the value of this
score. I don't t
>
> To make things more complicated, the URIBL ( NOT! SURBL) lookup says.
> (parts cut off)
> > 219.144.194.158 NOT Listed on URIBL: NOT Listed on SURBL
> > 158.194.144.219Listed on URIBL black Listed on SURBL details
> Lookup: 158.194.144.219.multi.surbl.org Result: Blocked,
> 158.19
Please read the whole thread before flaming someone.
This one started with 'wolfgang' asking why he's unable to lookup
219.144.194.158 in multib.surbl.org.
219.144.194.158 is listed in ph und ws, according to the lookup tool on
rulesemporium.com.
dig 219.144.194.158.multi.surbl.org => no result
> -Original Message-
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]
> Sent: Friday, August 12, 2005 4:54 AM
> To: users@spamassassin.apache.org
> Subject: Re: Phishing IP listed in URIBL and SURBL, but not triggering
> URI rules
>
>
> Just that nobody forgets:
> What about false po
At 03:49 AM 8/12/2005, Thijs Koetsier | Exception wrote:
I'm using spamassassin 3.0.4-2 on Debian Sarge.
The language-files are on the server, but I can't find out how to enable
them.
Anybody know how to enable different languages?
set the LANG environment variable.
Here is another rule that will help. (reposted from about a week ago)
Here is an RBL test for china IP addresses that connect to your server to
pass email. I tested it and it works. I have score of 5 for a while, but you
can change that for anything you want.
Add it to your local.cf if you like it
Hi!
who can help plesae ?
Thanks
http://uk.geocities.com/Alphonso_Keating/?MitY=The_discomforts_keep_you_fee
There have been various rules posted to catch there, please look in the
archives...
One could be:
uri PROLO_PUBWEB_UKGEO_CHECK1 /^http:\/\/uk\.geocities\.com\//
score PROLO_PUBWE
Hi!
What about false positives? 158.194.144.219 apparently belogs to Palacky
University in Olomouc,Czechia. This IP is now wrongfully listed in SURBL!
I'll post that problem to the SURBL-List as well, I think. Jeff C.
certainly doesn't want to harm innocent bystanders...
So they might have a
Just that nobody forgets:
What about false positives? 158.194.144.219 apparently belogs to Palacky
University in Olomouc,Czechia. This IP is now wrongfully listed in SURBL!
I'll post that problem to the SURBL-List as well, I think. Jeff C.
certainly doesn't want to harm innocent bystanders...
Dir
Hi all,
I'm using spamassassin 3.0.4-2 on Debian Sarge.
The language-files are on the server, but I can't find out how to enable
them.
Anybody know how to enable different languages?
Regards,
Thijs
23 matches
Mail list logo
