Re: charter.net

2007-08-24 Thread maillist
Ray Dzek wrote: Just as a side note... I am a charter customer. I have spoken with their techincal assistance many times, and at various levels, for myself and on behalf of others I have tried to assist. They are by far the most incompetent ISP I have ever dealt with. They only have one answe

Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Matt Kettler
Linooks wrote: > I have it working! > > added the email address that sends newsletters in simcontrol > > Thanks for the help. > > But I have another last problem. > I get a spam with an email within my domain? lets say > [EMAIL PROTECTED] <--- sends out spam messages to all > > Can someone please t

Re: HELO dns resolution

2007-08-24 Thread Matt Kettler
Nikolay Shopik wrote: > Hi list, > > I would like to know if there already rule exist. Parsing receive > headers check HELO existing in DNS and if not increase score. > Checked docs for SA and found only eval:check_rbl and this is seems > not what I'm need at all, correct me if I'm wrong. > > AFAIK

Re: report_header and use_terse_report errors

2007-08-24 Thread Matt Kettler
Zbigniew Szalbot wrote: > > I went for the report_safe 0 option but what I would really like to get is > also the spam YES/NO flag in it. > > I have X-Spam-Score: 22.7 (++) > X-Spam-Report - rather lengthy description of why the email was classified > as such but no X-Spam-Statu

Re: charter.net

2007-08-24 Thread Kai Schaetzl
Jonn R Taylor wrote on Fri, 24 Aug 2007 07:30:22 -0500: > What even more > interesting is that they block 25 out going. So I am not sure why we all > see so much spam from them. The spam is comming from *.dhcp.*.*.charter.com. Obviously, there's no such blockage. I reject everything from there

Re: sa-update stuck in July

2007-08-24 Thread Theo Van Dinter
On Sat, Aug 25, 2007 at 06:58:23AM +0800, [EMAIL PROTECTED] wrote: > OK, but clearly in http://daryl.dostech.ca/sa-update/asf/ there are > plenty of fresh August 2007 updates, but constant loser me is stuck with > 556472.tar.gz 15-Jul-2007 Yes, there are other updates in the channel that are newer

Re: sa-update stuck in July

2007-08-24 Thread jidanni
TVD> All that means is that when in doubt, once a day is probably a good frequency OK, but clearly in http://daryl.dostech.ca/sa-update/asf/ there are plenty of fresh August 2007 updates, but constant loser me is stuck with 556472.tar.gz 15-Jul-2007 So what version of spamassassin do I have to i

Re: sa-update stuck in July

2007-08-24 Thread Theo Van Dinter
On Sat, Aug 25, 2007 at 05:50:02AM +0800, [EMAIL PROTECTED] wrote: > Gentlemen, what's the deal. I installed the latest version of > spamassassin, and http://wiki.apache.org/spamassassin/RuleUpdates says > run sa-update once a day, and I do, and always I see You're picking and choosing what you ta

Re: Bouncing emails from certain countries

2007-08-24 Thread jidanni
DA> I used IP::Country::Fast to block everything except canada and usa... DA> I've only had to add one company to an allow list because they are in Italy... DA> I don't think its that bad of a solution, DA> depending on where your companies customers are located.. And no wonder you don't seem

sa-update stuck in July

2007-08-24 Thread jidanni
Gentlemen, what's the deal. I installed the latest version of spamassassin, and http://wiki.apache.org/spamassassin/RuleUpdates says run sa-update once a day, and I do, and always I see >> channel: current version is 556472, new version is 556472, skipping channel Upon further investigation (whic

reading this list via Gmane, no need for extra copy

2007-08-24 Thread jidanni
Question: any way to post a message to this list via email and since I read this list via Gmane, not be sent needless copies of all mail posted to this list? I don't want a Nabble account either. j> http://www.ezmlm.org/ezman/ezman1.html says after long research, j> "To temporarily leave an ezmlm

Re: recieving spam from my own domain?

2007-08-24 Thread Linooks
Thanks. Theo Van Dinter-2 wrote: > > On Fri, Aug 24, 2007 at 12:43:17PM -0700, Linooks wrote: >> >> let say the email address is: >> >> >> >> [EMAIL PROTECTED] >> >> >> >> it send spam messages and it isn't filtered by SA. >> >> >> >> Why? >> >> >> >> can I do something about this? > > SA

Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Linooks
Thanks! i will check.. John D. Hardin wrote: > > On Fri, 24 Aug 2007, Linooks wrote: > >> this is the full header: >> >> Return-Path: <[EMAIL PROTECTED]> >> Delivered-To: [EMAIL PROTECTED] >> Received: (qmail 18837 invoked by uid 89); 24 Aug 2007 19:45:01 - >> Delivered-To: [EMAIL PROTECT

Re: is it possible to setup SA in a different machine?

2007-08-24 Thread John D. Hardin
On Fri, 24 Aug 2007, Linooks wrote: > this is the full header: > > Return-Path: <[EMAIL PROTECTED]> > Delivered-To: [EMAIL PROTECTED] > Received: (qmail 18837 invoked by uid 89); 24 Aug 2007 19:45:01 - > Delivered-To: [EMAIL PROTECTED] > Received: (qmail 18801 invoked by uid 89); 24 Aug 2007

HELO dns resolution

2007-08-24 Thread Nikolay Shopik
Hi list, I would like to know if there already rule exist. Parsing receive headers check HELO existing in DNS and if not increase score. Checked docs for SA and found only eval:check_rbl and this is seems not what I'm need at all, correct me if I'm wrong.

Re: recieving spam from my own domain?

2007-08-24 Thread Theo Van Dinter
On Fri, Aug 24, 2007 at 12:43:17PM -0700, Linooks wrote: > >> let say the email address is: > >> > >> [EMAIL PROTECTED] > >> > >> it send spam messages and it isn't filtered by SA. > >> > >> Why? > >> > >> can I do something about this? SA processes all mails sent to it(*), so if mails aren't

Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Linooks
this is the full header: Return-Path: <[EMAIL PROTECTED]> Delivered-To: [EMAIL PROTECTED] Received: (qmail 18837 invoked by uid 89); 24 Aug 2007 19:45:01 - Delivered-To: [EMAIL PROTECTED] Received: (qmail 18801 invoked by uid 89); 24 Aug 2007 19:45:01 - Received: from unknown (HELO pcsp22

Re: recieving spam from my own domain?

2007-08-24 Thread Linooks
I dont have whitelist option in my local.cf file, I even added blacklist_to [EMAIL PROTECTED] but to no avail. Jari Fredriksson wrote: > >> let say the email address is: >> >> [EMAIL PROTECTED] >> >> it send spam messages and it isn't filtered by SA. >> >> Why? >> >> can I do something abo

Re: recieving spam from my own domain?

2007-08-24 Thread Jari Fredriksson
> let say the email address is: > > [EMAIL PROTECTED] > > it send spam messages and it isn't filtered by SA. > > Why? > > can I do something about this? > > > thanks in advance!!! The one and only reason to this is that you have whitelisted your own domain in your MTA, or by writing "whitel

Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Tom Ray
I'm a little late stepping in on this and it seems the original email was deleted from my mail box by mistake. As everyone has saids, yes you can use spam assassin on a separate server. I do that right now and it works pretty well. It's also pretty slick because I have it setup not only to filt

Re: is it possible to setup SA in a different machine?

2007-08-24 Thread John D. Hardin
On Fri, 24 Aug 2007, Linooks wrote: > I had no whitelist option in my local.cf so I think that is not > the cause. > > Hmm,, I really wonder why. Please post a sample including all headers, if you can. > > On Fri, 24 Aug 2007, Linooks wrote: > > > >> But I have another last problem. > >> I get

Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Linooks
I had no whitelist option in my local.cf so I think that is not the cause. Hmm,, I really wonder why. thanks though! John D. Hardin wrote: > > On Fri, 24 Aug 2007, Linooks wrote: > >> But I have another last problem. >> I get a spam with an email within my domain? lets say >> [EMAIL PROTECT

Re: is it possible to setup SA in a different machine?

2007-08-24 Thread John D. Hardin
On Fri, 24 Aug 2007, Linooks wrote: > But I have another last problem. > I get a spam with an email within my domain? lets say > [EMAIL PROTECTED] <--- sends out spam messages to all > > Can someone please tell how to solve this one? thanks in advance!!! You mean it's not blocking spams that hav

recieving spam from my own domain?

2007-08-24 Thread Linooks
let say the email address is: [EMAIL PROTECTED] it send spam messages and it isn't filtered by SA. Why? can I do something about this? thanks in advance!!! -- View this message in context: http://www.nabble.com/recieving-spam-from-my-own-domain--tf4324937.html#a12317128 Sent from the Spam

Re: How to stop these?

2007-08-24 Thread Rick Zeman
I doubt that spammers have gotten sophisticated enough to have lists of of Middle Eastern names with US-based addresses. There's something else going on, methinks. >>> [EMAIL PROTECTED] 8/24/2007 1:27 PM >>> On Fri, 2007-08-24 at 12:38 -0400, Rick Zeman wrote: > That looks like a perfectly val

Re: is it possible to setup SA in a different machine?

2007-08-24 Thread Linooks
I have it working! added the email address that sends newsletters in simcontrol Thanks for the help. But I have another last problem. I get a spam with an email within my domain? lets say [EMAIL PROTECTED] <--- sends out spam messages to all Can someone please tell how to solve this one? thank

Re: How to stop these?

2007-08-24 Thread Loren Wilton
That looks like a perfectly valid non-spam AOL email. You think? The user claims they do not know them, the recipients all in aol.com except my user (snipped) and got three in a row...another here... I think that is a newish user that is getting a ton of spam from joe-jobbed From: names, and

Re: How to stop these?

2007-08-24 Thread Robert Fitzpatrick
On Fri, 2007-08-24 at 12:38 -0400, Rick Zeman wrote: > That looks like a perfectly valid non-spam AOL email. You think? The user claims they do not know them, the recipients all in aol.com except my user (snipped) and got three in a row...another here... http://esmtp.webtent.net/mail2.txt -- R

spamd children killed but don't die?

2007-08-24 Thread Rosenbaum, Larry M.
This morning on one of our servers, spamd was having problems. There were 8 spamd children running, but "top" showed only two of them were using any CPU time even though there was a backlog of messages to be processed. The log file included lines like this: Aug 24 08:49:22 localhost spamd[21051]

RE: charter.net

2007-08-24 Thread Ray Dzek
Just as a side note... I am a charter customer. I have spoken with their techincal assistance many times, and at various levels, for myself and on behalf of others I have tried to assist. They are by far the most incompetent ISP I have ever dealt with. They only have one answer for everything,

Re: non-phish corpus?

2007-08-24 Thread hamann . w
Hi, while I do not keep these paypal things, I am quite sure that at most one mail in 20 has my address in the To field (or, maybe, has ANY address in the To field) Wolfgang Hamann

Re: How to stop these?

2007-08-24 Thread Robert Fitzpatrick
On Fri, 2007-08-24 at 06:48 -0700, John D. Hardin wrote: > On Fri, 24 Aug 2007, Robert Fitzpatrick wrote: > > > Anyone seen these, first reported to us today, but a lot...can > > they be stopped. Bayes even gives negative score...we are running > > SA 3.2.1 with SARE rules, Botnet, KAM, chickenpo

Ipower Webhostig with Spamassasin

2007-08-24 Thread Kracht, Tim
I am looking for information about the use of Spamassasin with Ipower website hosting, are there any users out there with this setup.

Re: BOTNET Exceptions for Today

2007-08-24 Thread John Rudd
Robert Fitzpatrick wrote: On Wed, 2007-08-22 at 08:58 +0100, Martin.Hepworth wrote: Botnet 0.8 is a lot better than 0.7 - please upgrade if you don't already. How do you tell what version you have? I cannot find it anywhere in the files, so I downloaded 0.8 and diff'd the pm against what I ha

Re: report_header and use_terse_report errors

2007-08-24 Thread Zbigniew Szalbot
Dear Matt and others, On Fri, 24 Aug 2007 08:53:19 -0400, Matt Kettler <[EMAIL PROTECTED]> wrote: >> Using SpamAssassin Server version 3.2.1. I added report_header and >> use_terse_report to local.cf but when restarting spamd, I got > information >> that sa cannot parse these options. Are these

RE: BOTNET Exceptions for Today

2007-08-24 Thread Robert Fitzpatrick
On Wed, 2007-08-22 at 08:58 +0100, Martin.Hepworth wrote: > Botnet 0.8 is a lot better than 0.7 - please upgrade if you don't already. > How do you tell what version you have? I cannot find it anywhere in the files, so I downloaded 0.8 and diff'd the pm against what I have and no differences. I g

Re: How to stop these?

2007-08-24 Thread John D. Hardin
On Fri, 24 Aug 2007, Robert Fitzpatrick wrote: > Anyone seen these, first reported to us today, but a lot...can > they be stopped. Bayes even gives negative score...we are running > SA 3.2.1 with SARE rules, Botnet, KAM, chickenpox... > > http://esmtp.webtent.net/mail1.txt Hrm. About the only us

Ipower webhosting spamassasin

2007-08-24 Thread itguy
Has anybody out there setup spamassasin with the Ipower webhosting setup. I am looking for information about how the software interacts and what kind of setup that one can do. -- View this message in context: http://www.nabble.com/Ipower-webhosting-spamassasin-tf4323650.html#a12312625 Sent from

How to stop these?

2007-08-24 Thread Robert Fitzpatrick
Anyone seen these, first reported to us today, but a lot...can they be stopped. Bayes even gives negative score...we are running SA 3.2.1 with SARE rules, Botnet, KAM, chickenpox... http://esmtp.webtent.net/mail1.txt Content analysis details: (1.8 points, 5.0 required) pts rule name

Re: report_header and use_terse_report errors

2007-08-24 Thread Matt Kettler
Zbigniew Szalbot wrote: > Hello, > > Using SpamAssassin Server version 3.2.1. I added report_header and > use_terse_report to local.cf but when restarting spamd, I got information > that sa cannot parse these options. Are these options obsolete or should > they be placed elsewhere? > > Actually,

Re: report_header and use_terse_report errors

2007-08-24 Thread Matt Kettler
Zbigniew Szalbot wrote: > Hello, > > Using SpamAssassin Server version 3.2.1. I added report_header and > use_terse_report to local.cf but when restarting spamd, I got information > that sa cannot parse these options. Are these options obsolete or should > they be placed elsewhere? Obsolete, as of

Re: charter.net

2007-08-24 Thread Jonn R Taylor
Kai Schaetzl wrote: Matt Kettler wrote on Thu, 23 Aug 2007 22:59:11 -0400: I think it's a brain-dead attempt to counter the image and pdf spams that have been so popular lately. It would be nice if they would block their outgoing spam in the same effective way. They are among the biggest spa

Re: Combine whitelist_to and whitelist_from

2007-08-24 Thread Matus UHLAR - fantomas
On 24.08.07 13:46, [EMAIL PROTECTED] wrote: > imagin a newsletters or order mail sent by an seller website with the > from address : [EMAIL PROTECTED] > I have in my mail system an address like [EMAIL PROTECTED] > > With that, I can trace where my emails are sent in order to trace spam > and sit

Combine whitelist_to and whitelist_from

2007-08-24 Thread users-spamassassin
Invoke method : UsedViaProcmail Version : 3.1.9 (2007-02-13) Platform : Linux Fedora 2.6.20-1.2925.fc6 Hello, imagin a newsletters or order mail sent by an seller website with the from address : [EMAIL PROTECTED] I have in my mail system an address like [EMAIL PROTECTED] With that, I can trace

report_header and use_terse_report errors

2007-08-24 Thread Zbigniew Szalbot
Hello, Using SpamAssassin Server version 3.2.1. I added report_header and use_terse_report to local.cf but when restarting spamd, I got information that sa cannot parse these options. Are these options obsolete or should they be placed elsewhere? Thank you! Zbigniew Szalbot

Re: charter.net

2007-08-24 Thread Kai Schaetzl
Matt Kettler wrote on Thu, 23 Aug 2007 22:59:11 -0400: > I think it's a brain-dead attempt to counter the image and pdf > spams that have been so popular lately. It would be nice if they would block their outgoing spam in the same effective way. They are among the biggest spam sources for us. K