Re: Image spams getting thru

2006-07-29 Thread John Andersen
On Saturday 29 July 2006 10:22, [EMAIL PROTECTED] wrote: > >> Does DCC, RAZOR, PYZOR, or any other signature algorithms work with > >> the image spams? It's not apparent from reading the man pages. It > >> seems to me that one could compare the signatures of attachments instead > >> of the whole

Re: Image spams getting thru

2006-07-29 Thread hamann . w
>> Does DCC, RAZOR, PYZOR, or any other signature algorithms work with >> the image spams? It's not apparent from reading the man pages. It >> seems to me that one could compare the signatures of attachments instead >> of the whole e-mail and provide additional detection. >> >> Thanks, >> >> Ti

Re: Image spams getting thru

2006-07-29 Thread John D. Hardin
On Sat, 29 Jul 2006, John D. Hardin wrote: > > header FROMFROM=~ /[A-Z]\w+ \[mailto\: \w+\.\w+\@/ > > It won't work. [A-Z] without the case-insensitive flag won't match > the samples provided. Whoops! Comment retracted! -- John Hardin KA7OHZICQ#15735746http://www.impsec.org/~jhardi

Re: Image spams getting thru

2006-07-29 Thread John D. Hardin
On Sat, 29 Jul 2006, Loren Wilton wrote: > >> > From: Rory [mailto:[EMAIL PROTECTED] > >> > From: Barbra [mailto:[EMAIL PROTECTED] > > Something like > > header FROMFROM=~ /[A-Z]\w+ \[mailto\: \w+\.\w+\@/ > > There is a way to be more specific, but it costs considerably > more. Namely:

Re: Image spams getting thru

2006-07-29 Thread Tim
Does DCC, RAZOR, PYZOR, or any other signature algorithms work with the image spams? It's not apparent from reading the man pages. It seems to me that one could compare the signatures of attachments instead of the whole e-mail and provide additional detection. Thanks, Tim

Re: Rules for short spams?

2006-07-29 Thread Theo Van Dinter
On Fri, Jul 28, 2006 at 11:03:12PM -0700, Evan Platt wrote: > On a similiar note: I added > > urirhssub URIBL_BLACK multi.uribl.com.A 2 > urirhssub URIBL_GREY multi.uribl.com.A 4 > > Any ideas? Any reason you don't just use sa-update which has the uribl.com folk

Re: Image spams getting thru

2006-07-29 Thread Loren Wilton
> From: Rory [mailto:[EMAIL PROTECTED] > From: Barbra [mailto:[EMAIL PROTECTED] Something like header FROMFROM=~ /[A-Z]\w+ \[mailto\: \w+\.\w+\@/ There is a way to be more specific, but it costs considerably more. I'd try this first. Loren

Re: spamassassin on qmail

2006-07-29 Thread Andrew
Kjetil Kjernsmo wrote: On Saturday 29 July 2006 08:48, Kaushal Shriyan wrote: does spamassassin work on qmail MTA Yes. Also, you might want to look into using the qpsmtpd component, as it gives you a lot of power over the SMTP dialogue: http://smtpd.develooper.com/ You might also want

Re: sa-learn killed, bayes not available

2006-07-29 Thread Leander Koornneef
Or perhaps there is some other form of resource control in place. What's the output of "ulimit -a"? Leander On 29-jul-2006, at 14:22, Leander Koornneef wrote: It looks like the process is getting killed from an external signal. Maybe this is the Linux OOM killer in action? What is the memory/s

Re: sa-learn killed, bayes not available

2006-07-29 Thread Leander Koornneef
It looks like the process is getting killed from an external signal. Maybe this is the Linux OOM killer in action? What is the memory/swap status of this machine? Have you tried running sa-learn with the -D option? Leander On 29-jul-2006, at 0:31, Steven Scotten wrote: The bayesian filter

Re: spamassassin on qmail

2006-07-29 Thread Kjetil Kjernsmo
On Saturday 29 July 2006 08:48, Kaushal Shriyan wrote: > does spamassassin work on qmail MTA Yes. Also, you might want to look into using the qpsmtpd component, as it gives you a lot of power over the SMTP dialogue: http://smtpd.develooper.com/ Best, Kjetil -- Kjetil Kjernsmo Programmer / Ast