Re: why does this ONLY score "5.2"?

2005-11-26 Thread OpenMacNews
-BEGIN PGP SIGNED MESSAGE- Hash: RIPEMD160 hi matt, Matt Kettler wrote: > OpenMacNews wrote: >> hi, >> >> why do these: >> >> http://paste.lisp.org/display/13918 >> >> score so low? (using SA r348087 ...) > > Are you using URIBLS? I got 2 surbl hits from the URL in that message > >

Re: Spam not getting tagged as Spam

2005-11-26 Thread Matt Kettler
At 08:55 PM 11/26/2005, Jon Armitage wrote: How many of you think that an email with a subject containing the F-word isn't spam? Subject: I fucked up the 1.0.4 branch checkin, can you re-merge widget.cpp?" Nope. Not spam. Crude, and inappropriate in some professional environments, but not spa

Re: Spam not getting tagged as Spam

2005-11-26 Thread Matt Kettler
At 08:47 PM 11/26/2005, Dave Pooser wrote: Did you edit your v310.pre file? DCC is disabled (like Razor) by default because they're not open source. Not true. Their open/closed source nature has nothing to do with it. They're disabled because they're not free for all users to use in an unlimi

Re: SORBS

2005-11-26 Thread Daryl C. W. O'Shea
Graham Murray wrote: "Daryl C. W. O'Shea" <[EMAIL PROTECTED]> writes: Of course, my business DSL provider could be less brain dead and not set a 30 min TTL for their entire forward zone (and 1 day for their reverse zone), but I suspect there are lots of people out there in the same situation.

Re: SORBS

2005-11-26 Thread Daryl C. W. O'Shea
Gene Heskett wrote: On Friday 25 November 2005 19:09, Daryl C. W. O'Shea wrote: Too bad the telco is the only game in town. At least their DNS servers haven't been rooted this week (yet, anyway). I'm sure glad you added the (yet, anyway) qualification Daryl, cause they do get it, regularly.

Re: Spam not getting tagged as Spam

2005-11-26 Thread robert
>> I ran SA in debug mode >> and it doesnt say anything about DCC available, but I installed it and >> opened the required ports. > > Did you edit your v310.pre file? DCC is disabled (like Razor) by default > because they're not open source. > > Also, a spam threshold of 3 is going to hit a LOT of

Re: Spam not getting tagged as Spam

2005-11-26 Thread Jon Armitage
>>*ALL* body rules in SpamAssassin will match the subject line too. SA >>does this automatically in the code itself. This simply isn't true. Or at least if it is true, SA is scoring the magic words (you all know the ones I mean, referring to very warm ladies of dubious virtue, the attributes o

Re: Spam not getting tagged as Spam

2005-11-26 Thread Dave Pooser
> I ran SA in debug mode > and it doesnt say anything about DCC available, but I installed it and > opened the required ports. Did you edit your v310.pre file? DCC is disabled (like Razor) by default because they're not open source. Also, a spam threshold of 3 is going to hit a LOT of false posi

Re: Spam not getting tagged as Spam

2005-11-26 Thread robert
> At 07:28 PM 11/26/2005, [EMAIL PROTECTED] wrote: >>I am noticing emails that should be spam not getting marked as spam. The >>score is 3 and these types of emails are getting 2.1, 2.4 scores and >>getting through our filters. Any suggestions? > > Are you running any network tests? RBLs? Razor/py

Re: Spam not getting tagged as Spam

2005-11-26 Thread Matt Kettler
At 07:28 PM 11/26/2005, [EMAIL PROTECTED] wrote: I am noticing emails that should be spam not getting marked as spam. The score is 3 and these types of emails are getting 2.1, 2.4 scores and getting through our filters. Any suggestions? Are you running any network tests? RBLs? Razor/pyzor/dcc?

Re: SORBS

2005-11-26 Thread jdow
From: "Kai Schaetzl" <[EMAIL PROTECTED]> Jdow wrote on Sat, 26 Nov 2005 04:56:19 -0800: It appears Earthlink is rearranging a lot of their servers I don't know what their outbound mail servers were yesterday or half a year ago or last year. I don't even know what their outbound mailserver

Re: SORBS

2005-11-26 Thread Kai Schaetzl
Jdow wrote on Sat, 26 Nov 2005 04:56:19 -0800: > It appears Earthlink is rearranging a lot of their servers I don't know what their outbound mail servers were yesterday or half a year ago or last year. I don't even know what their outbound mailservers are today. Calling them "popxx.domain" do

Re: SpamScore Email

2005-11-26 Thread Kai Schaetzl
Markus Braun wrote on Fri, 25 Nov 2005 12:36:57 +: > Can i turn it of or is some configuration error? Since you do not provide any information apart from software names, nobody can tell you. Go to spamassassin.org or wiki.spamassassin.org and check if there's a tutorial specifically for you

Re: SORBS

2005-11-26 Thread jdow
From: "Kai Schaetzl" <[EMAIL PROTECTED]> Jdow wrote on Fri, 25 Nov 2005 15:39:42 -0800: No, that is an improper assumption. Well, if you do a little more research and go to SORBS and check that IP you see that it's been in the db since June! If you do even more research and query all known

Re: SORBS

2005-11-26 Thread Kai Schaetzl
Jdow wrote on Fri, 25 Nov 2005 15:39:42 -0800: > No, that is an improper assumption. Well, if you do a little more research and go to SORBS and check that IP you see that it's been in the db since June! If you do even more research and query all known RBLs you find that it's been in NJABL since

Re: SORBS

2005-11-26 Thread Kai Schaetzl
Jdow wrote on Fri, 25 Nov 2005 15:39:42 -0800: > They are using this as a means of > randomizing access to the dozen or so mail servers for earthlink.net. You mean they randomly rotate these IPs? That *is* dynamic. > How about making sure the access to their mail servers is not all > directed