Re: Single word mails .

2007-04-26 Thread Matt Kettler
Steven W. Orr wrote: > On Thursday, Apr 26th 2007 at 01:45 -0400, quoth Matt Kettler: > > =>ram wrote: > =>> Are the spammers testing some new spamtool > =>> I am getting mails with just a single word like "gushes" "using" etc > =>> > =>> what is this about now ? > =>> > =>Read the archives

Re: Score Generation for Apache SpamAssassin

2007-04-26 Thread Duncan Findlay
On Thu, Apr 26, 2007 at 12:15:52PM +0100, Justin Mason wrote: > thanks Duncan -- a great read, and looks promising! > Would it help btw if we came up with a spec for what a score-generation > tool needs to generate, in terms of score ranges and so on? > This would also be useful for the future (I'

Mail Lost? How can this happen?

2007-04-26 Thread dbsanders
Not sure this is an SA problem at all, but maybe you can give me a clue. I seem to be losing messages. They are received by my mail system: Apr 26 10:28:45 heckle sendmail[9295]: [ID 801593 mail.info] l3QHShh9009295: from=<[EMAIL PROTECTED]>, size=78591, class=0, nrcpts=1, msgid=, delay=00:00:02,

Re: whitelist_from_rcvd problem

2007-04-26 Thread Duane Hill
On Thu, 26 Apr 2007, John D. Hardin wrote: On Thu, 26 Apr 2007, Bret Miller wrote: I said: whitelist_from_rcvd [EMAIL PROTECTED] sbc.com try: whitelist_from_rcvd [EMAIL PROTECTED] *.sbc.com If that does work, it goes against what is documented. I haven't had any problem with whitelist_f

Re: whitelist_from_rcvd problem

2007-04-26 Thread John D. Hardin
On Thu, 26 Apr 2007, Bret Miller wrote: > I said: > whitelist_from_rcvd [EMAIL PROTECTED] sbc.com try: whitelist_from_rcvd [EMAIL PROTECTED] *.sbc.com -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ [EMAIL PROTECTED]FALaholic #11174 pgpk -a [EMAIL PROTECTED]

RE: whitelist_from_rcvd problem

2007-04-26 Thread Bret Miller
> One of my users is supposed to get messages from this person, but they > often get marked as spam. So I want to whitelist, and I can use > whitelist_from, but I want to use whitelist_from_rcvd. BUT, it doesn't > work for me. > > I said: > whitelist_from_rcvd [EMAIL PROTECTED] sbc.com > > Which I

whitelist_from_rcvd problem

2007-04-26 Thread Bret Miller
One of my users is supposed to get messages from this person, but they often get marked as spam. So I want to whitelist, and I can use whitelist_from, but I want to use whitelist_from_rcvd. BUT, it doesn't work for me. I said: whitelist_from_rcvd [EMAIL PROTECTED] sbc.com Which I think means that

Re: Single word mails .

2007-04-26 Thread Steven W. Orr
On Thursday, Apr 26th 2007 at 01:45 -0400, quoth Matt Kettler: =>ram wrote: =>> Are the spammers testing some new spamtool =>> I am getting mails with just a single word like "gushes" "using" etc =>> =>> what is this about now ? =>> =>Read the archives for more details, however the general

Re: RDJ handling question

2007-04-26 Thread Chris Thielen
Bowie Bailey wrote: > RDJ is supposed to download to the RulesDuJour directory. After it > downloads > the files there, it moves them from ${TMPDIR} to ${SA_DIR}. ${TMPDIR} is > RDJ's > working directory. You don't want SA reading it's rules from there. RDJ > may > have multiple copies of each

Who wants my spam? - seriously

2007-04-26 Thread Marc Perkel
As many of you know, I do front end spam filtering and I block a lot of spam. I have been feeding some of this blocked spam to others who can use it to mine for information like IPs to block, virus infected hosts, URIBL etc. I also have several feeds as to what kind of spam you want and I add h

Re: Single word mails .

2007-04-26 Thread Andy Spiegl
Hi Tim, > Is there a good test for these? I don't get many of them, probably because I block them at MTA via zen.spamhaus.org. But the ones that do get through are caught nicely by the BOTNET rules. Chau, Andy. -- If it ain't broke, improve it.

Re: IP -> Responsible Person

2007-04-26 Thread Marc Perkel
Matt Kettler wrote: You imply Comcast has sufficient technical know-how to manage a network. For a while their own outbound mailserver wasn't even generating a HELO or EHLO. Is that what it was? I had been getting a lot of complaints that random Comcast users couldn't email anyone one o

Re: Score Generation for Apache SpamAssassin

2007-04-26 Thread Justin Mason
Duncan Findlay writes: > Hi everybody, > > As you may already know, Steven Birk and I have been working on our > 4th year undergraduate project in Math and Engineering at Queen's > University. > > The goal of our project was to examine the use of logistic regression > as a potential replacement

Re: Single word mails .

2007-04-26 Thread Tim B.
Matt Kettler wrote: ram wrote: Are the spammers testing some new spamtool I am getting mails with just a single word like "gushes" "using" etc what is this about now ? Read the archives for more details, however the general consensus is it's due to: 1) a mass run of short-email