Matt Kettler wrote:
Bill McCormick wrote:
OK, so they're parts of normal conversations. And geocites is a real
domain too, which scores fairly high since it's so prevalent in real
world spam. If this mail would have scored just 1 more point, we would
not even be having this conversation because
Bill McCormick wrote:
>
> OK, so they're parts of normal conversations. And geocites is a real
> domain too, which scores fairly high since it's so prevalent in real
> world spam. If this mail would have scored just 1 more point, we would
> not even be having this conversation because SA would have
Am/On Fri, 30 Mar 2007 10:05:47 -0700 schrieb/wrote dougp23:
>So my questions:
>How do I identify spam with something from the body of the message? (i.e.
>Viagra in the message, or Nigeria from that very kind man who has all that
>money and just needs a little cash to get started).
>And then how
--- Matt Kettler <[EMAIL PROTECTED]> wrote:
> J. wrote:
> > I've got two gif attachment emails with score=? required=? in the
> > header. I run them from the command line with spamassassin --debug
> and
> > get scores through the roof, but when I run them from the command
> line
> > with spamc -r
Matt Kettler wrote:
Bill McCormick wrote:
I think my SA is missing some tests.
It's not.. besides, your bayes tore this one up. How many rules do you need?
I would hope the attached message would score something on obfuscate;
the part about anotomy; the man I'd like to be and the reference to
J. wrote:
> I've got two gif attachment emails with score=? required=? in the
> header. I run them from the command line with spamassassin --debug and
> get scores through the roof, but when I run them from the command line
> with spamc -r I get silence. Please help!
Ok, so spamd is running..
Que
Bill McCormick wrote:
> I think my SA is missing some tests.
It's not.. besides, your bayes tore this one up. How many rules do you need?
> I would hope the attached message would score something on obfuscate;
> the part about anotomy; the man I'd like to be and the reference to my
> girlfriend/wif
J. wrote:
> I've got two gif attachment emails with score=? required=? in the
> header. I run them from the command line with spamassassin --debug and
> get scores through the roof, but when I run them from the command line
> with spamc -r I get silence. Please help!
>
> -Jason
>
>
>
>
Have y
--- Bill McCormick <[EMAIL PROTECTED]> wrote:
> J. wrote:
>
> >I've got two gif attachment emails with score=? required=? in the
> >header. I run them from the command line with spamassassin --debug
> and
> >get scores through the roof, but when I run them from the command
> line
> >with spamc -
I've got two gif attachment emails with score=? required=? in the
header. I run them from the command line with spamassassin --debug and
get scores through the roof, but when I run them from the command line
with spamc -r I get silence. Please help!
-Jason
_
On Fri, March 30, 2007 16:39, Matt wrote:
>> Re: Things I would change to stop spam
> Charge 0.1 penny a message. ;<)
hashcash :-)
--
This message was sent using 100% recycled spam mails.
On Friday 30 March 2007 02:48, Loren Wilton wrote:
> > While they don't have to pay for delivery in the same sense as snail-mail
> > advertizing, they are bandwidth-limited by the size of the internet.
> > Until others increase the bandwidth for their benefit, they can send only
> > so many spams.S
On Fri, 30 Mar 2007, dougp23 wrote:
I am tyring to do this on an email server. I am not sure if some of the
instructions you are shooting at me are for end users, or are for the
server!
My email server is Scalix, which appears to use Sendmail as its engine.
My SA is already tagging messages as
>My email server is Scalix, which appears to use Sendmail as its engine.
>My SA is already tagging messages as Spam (fast learner), but like I
said,
>rather than deliver them, I want to just throw them out. No, I don't
think
>Sendmail supports maildir.
>
>
>I run on FC3. Sorry, I can't help
Does anyone else get a ton of low scoring messages that seem like they
should score through the roof that always start with something similar
to dear house owner?
Also, why do messages that are "Powered by Your Top Brands" often score
below 2.0?
I'm going to make some rules now.
_
dougp23 wrote:
I am tyring to do this on an email server. I am not sure if some of the
instructions you are shooting at me are for end users, or are for the
server!
Server!
My email server is Scalix, which appears to use Sendmail as its engine.
My SA is already tagging messages as Spam (f
I am tyring to do this on an email server. I am not sure if some of the
instructions you are shooting at me are for end users, or are for the
server!
My email server is Scalix, which appears to use Sendmail as its engine.
My SA is already tagging messages as Spam (fast learner), but like I said,
Bill McCormick wrote:
Take a look at qmailrocks.org for a step-by-step installation guide on
getting it setup.
www.qmailtoaster.com
Qmail with extra features in about 30 minutes, depending on system speed.
Bill McCormick wrote:
where qmail(rocks) is:
qmail+qmail-scanner+spamassassin+clamav+courier and a few other nifty
little things.
Oh, and how could I forget vpopmail!
dougp23 wrote:
I am searching the forums, but some of this is just beyond me!
Just setup a new email server, with sendmail and spamassassin and
spamass-milter, etc.
Because the system is new, and the bayes hasn't gotten a lot of practice yet
(but it will!!) we are getting lots of spam.
So my
Upon finding some traces of other configuration files elsewhere on the
server, I backed up the /etc/mail/spamassassin directory, trashed and
reinstalled. Everything is working fine now.
On Fri, 30 Mar 2007, Duane Hill wrote:
Can someone shed light on why I see messages as such:
X-Spam-Flag:
hey jon can you get me the info on what you do with exim?
On 3/28/07, Jon Armitage <[EMAIL PROTECTED]> wrote:
> -Original Message-
> From: Matt Kettler [mailto:[EMAIL PROTECTED]
> Sent: 28 March 2007 01:16
> To: Caleb Cushing
> Cc: users@spamassassin.apache.org
> Subject: Re: blacklist
Yep, that will do it.
Loren
I'm testing a firewall that has anti-spam capabilities. When it detects
spam, it adds a label to the subject. ie. "---SPAM---"
I would like to create a simple ruleset that adds certain weight to
mails that have this subject. Please let me know if I'm headed
On Fri, March 30, 2007 9:32 am, D Ivago wrote:
> 2007/3/30, Bill Randle <[EMAIL PROTECTED]>:
>
>>
>>
>> Yes, I created them by hand.
>>
>>
>> -Bill
>>
>
>
> Bill, do we need to add these lines in local.cf?
>
>
> at the moment I just add every domainname of every stock mail that gets
> in my inbox
2007/3/30, Bill Randle <[EMAIL PROTECTED]>:
Yes, I created them by hand.
-Bill
Bill, do we need to add these lines in local.cf?
at the moment I just add every domainname of every stock mail that gets in
my inbox but that's not really working great
blacklist_from *altimawebsystems.co
On Fri, 2007-03-30 at 12:35 -0300, Luis Hernán Otegui wrote:
> Thanks, these Stocks Du Jour rules have been created by you, aren't
> they? or is there a script to create/download them?
Yes, I created them by hand.
-Bill
> Luis
>
> 2007/3/30, Bill Randle <[EMAIL PROTECTED]>:
> On Fri
John D. Hardin wrote:
Is there a non-abusive way to automatically verify an email address is
valid? Verification does not need to occur in real-time; large delay
is acceptable. It is not intended as any sort of attack/abuse/spam
prevention or mitigation strategy. A given address will not be che
Can someone shed light on why I see messages as such:
X-Spam-Flag: NO
X-Spam-Checker-Version: SpamAssassin 3.1.8 (2007-02-13) on
smtpgate.example.com
X-Spam-Level:
X-Spam-Status: Reqd:5.0 Hits:0.0 Learn:disabled Tests:none
Or, I could be mistaken and there really were tests perfor
Thanks, these Stocks Du Jour rules have been created by you, aren't they? or
is there a script to create/download them?
Luis
2007/3/30, Bill Randle <[EMAIL PROTECTED]>:
On Fri, 2007-03-30 at 11:18 -0300, Luis Hernán Otegui wrote:
> Hi, List, could somebody run these messages trhough SA and giv
On Thu, 29 Mar 2007, John Rudd wrote:
> You can't control how many other people are doing the same probe
> at the same time. It might seem like batching from a corpus makes
> it better than doing live probes, but the fact is that you don't
> know, and can't know. All you can control is "am I goi
>
> +1
>
> If Marc is bouncing spams, even when domains who refuse to play the SAV
> game are involved, he's being even more abusive than I had thought.
>
>
> Daryl
I'm confused, Rick said he was rejecting in the smtp session above a certain
score too...
Bounce, reject... etc...
Are you talk
Re: Things I would change to stop spam
Charge 0.1 penny a message. ;<)
Matt
On Friday 30 March 2007 02:36, John Rudd wrote:
> There is no polite way to do it. It's not polite to take advantage of
> someone else's resources without their permission. That's exactly what
> SAV does.
I can think of a couple of ways to be at least less impolite.
First of all, use SAV as the
On Fri, 2007-03-30 at 11:18 -0300, Luis Hernán Otegui wrote:
> Hi, List, could somebody run these messages trhough SA and give me the
> scores? On my servers they aren't scoring much, as you can see from
> the headers added by SA. Any special rules to catch them?
About the only thing they score on
On Fri, 30 Mar 2007, Marc Perkel wrote:
So - what I propose is a addition to the IMAP/POP protocols that allow email
to be sent out over IMAP/POP and eliminate SMTP for the end user. The
outgoing email message would be sent over the same authenticated connection
that you establish to get email
Am/On Fri, 30 Mar 2007 16:12:52 +0200 schrieb/wrote Jonas Eckerman:
>Chris St. Pierre wrote:
>
>> I can't help but note that you have only yourself to blame:
>
>Why?
>
>> From: Jonas Eckerman <[EMAIL PROTECTED]>
>> Reply-To: [EMAIL PROTECTED]
>
>> Fix your Reply-To header and you won't get any mor
Hi, List, could somebody run these messages trhough SA and give me the
scores? On my servers they aren't scoring much, as you can see from the
headers added by SA. Any special rules to catch them?
Thanks,
Luis
--
-
GNU-GPL: "May The Source Be Wit
Chris St. Pierre wrote:
I can't help but note that you have only yourself to blame:
Why?
From: Jonas Eckerman <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Fix your Reply-To header and you won't get any more list messages in
your private email.
The Reply-To header is correct. When som
On Fri, 30 Mar 2007, Marc Perkel wrote:
> send email. ISPs can close port 25 to end users by default and spam bots
> would be isolated. No application would be able to send email unless it
> knew the user name and password. And the virus wouldn't know that. With
> that kind of isolation viruses
Magnus Holmgren wrote:
> On Friday 30 March 2007 15:39, Marc Perkel wrote:
>> So - what I propose is a addition to the IMAP/POP protocols that allow
>> email to be sent out over IMAP/POP and eliminate SMTP for the end user.
>
> NO, NO, NO! What is it, the tenth time you bring up this theme? Every
Marc Perkel wrote:
> There is a huge amount of traffic on the internet from bots that are
> sending email to and from email addresses that don't exist and if that
> could be eliminated then everyone would be ahead. I have a few ideas
> myself on some evolutionary changes in the way mail is delivere
I'm testing a firewall that has anti-spam capabilities. When it detects
spam, it adds a label to the subject. ie. "---SPAM---"
I would like to create a simple ruleset that adds certain weight to
mails that have this subject. Please let me know if I'm headed in the
right direction.
headerFW_
On Friday 30 March 2007 15:39, Marc Perkel wrote:
> So - what I propose is a addition to the IMAP/POP protocols that allow
> email to be sent out over IMAP/POP and eliminate SMTP for the end user.
NO, NO, NO! What is it, the tenth time you bring up this theme? Every time
it's explained to you tha
Loren Wilton wrote:
Thought experiment:
Suppose some Internet uber-government mandated that all hosts publish
to a central server a list of all valid recipient addresses at that
host, and only valid recipient addresses. Suppose further that it was
mandated that the list be kept up to no m
Claude Frantz wrote:
> Is it possible to exclude a specific address from the AWL without
> whitelisting it ? In others words, I want that the AWL test will not
> be applyed to this address. All other tests should be applyed as usual.
As far as I know, there's no way to do that.
The AWL is either o
On Fri, 30 Mar 2007, Jonas Eckerman wrote:
So far 6 of you has CC'd 13 messages in this disucussion to my private mail.
Please stop doing this.
If I want to read the discussion, I'll read it in the mailing list.
If I want to discuss the pros and cons of SAV, I'll do it in SPAM-L or some
othe
On Fri, 30 Mar 2007, Thomas Raef wrote:
Do you mean like 70_sare_uri0 ???
Pardon my ignorance. What specific rule(s) were you referring to within
that test for links where executable files are on the other end?
Do you mean like 70_sare_uri0 ???
From: Loren Wilton [mailto:[EMAIL PROTECTED]
Sent: Fri 3/30/2007 3:07 AM
To: users@spamassassin.apache.org
Subject: Re: Detecting Vulnerable Link
First thing I'd do would be to use a uri rule instead of a body rule.
-
So for all of you even TALKING about this, stop even POSTING about .t.
> -Original Message-
> From: Jonas Eckerman [mailto:[EMAIL PROTECTED]
> Sent: Friday, March 30, 2007 6:36 AM
> To: users@spamassassin.apache.org
> Subject: Stop the CCing please. (was "Who is APEWS.ORG" &
> "Sender A
So far 6 of you has CC'd 13 messages in this disucussion to my
private mail. Please stop doing this.
If I want to read the discussion, I'll read it in the mailing list.
If I want to discuss the pros and cons of SAV, I'll do it in
SPAM-L or some other forum where it's relevant.
Regards
/Jonas
> Hi Folks
>
> i read this Email from this List now for some Month and it looks to me
> that Marc Perkel was with this threat again successful to start a
> discussion who have nothing to do with SA , correct me if i am wrong but
> this religios War about SAV or not SAV what has it all to do wi
While they don't have to pay for delivery in the same sense as snail-mail
advertizing, they are bandwidth-limited by the size of the internet.
Until others increase the bandwidth for their benefit, they can send only
so many spams.So being able to send 2-3 times as many targeted spams with
good
I don't understand why you think SAV is a louse anti-forgery tool. It
forces spammers to have to find real email addresses to forge. Domains
Sounds to me like a really exciting development for spammers. They would
actually have a way to reliably listwash their lists of invalid addresses,
and
First thing I'd do would be to use a uri rule instead of a body rule.
- Original Message -
From: "Duane Hill" <[EMAIL PROTECTED]>
To:
Sent: Thursday, March 29, 2007 7:05 PM
Subject: Detecting Vulnerable Link
I'm trying to create a rule that will detect a vulnerable link within a
m
54 matches
Mail list logo
