Re: is DOS_OUTLOOK_TO_MX too low?

On Sat, 2008-01-26 at 20:37 -0500, Daryl C. W. O'Shea wrote: > Jason Haar wrote: > > I just got a spam msg with a score of 4/5 and for the first time noticed > > the DOS_OUTLOOK_TO_MX rule. > > > > For those that don't know it means "Delivered direct to MX with Outlook > > headers". Sounds like a

Re: sa-update error wrong gpg key...

Steve Monkhouse wrote: > Hey guys.. > > We're seeing the same thing.. although slightly different.. Not really the same thing. In the OPs case he wasn't using the key for the channel. In your case, your (I assume) recently updated version of GPG refuses to use the non-cross-certified key. > t

Re: is DOS_OUTLOOK_TO_MX too low?

Jason Haar wrote: > Hi there > > I just got a spam msg with a score of 4/5 and for the first time noticed > the DOS_OUTLOOK_TO_MX rule. > > For those that don't know it means "Delivered direct to MX with Outlook > headers". Sounds like a good rule: Outlook isn't a MTA so shouldn't be > able to co

Re: unsubscribe

Raquel wrote: On Sat, 26 Jan 2008 14:26:22 +0100 mouss <[EMAIL PROTECTED]> wrote: Matt Kettler wrote: Post to the unsubscribe address, not the list. See the headers of any message: List-Unsubscribe: I wonder if it would be bad to forge an unsubscri

is DOS_OUTLOOK_TO_MX too low?

Hi there I just got a spam msg with a score of 4/5 and for the first time noticed the DOS_OUTLOOK_TO_MX rule. For those that don't know it means "Delivered direct to MX with Outlook headers". Sounds like a good rule: Outlook isn't a MTA so shouldn't be able to connect directly to MX records

Re:

Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: From: Jeff Chan [mailto:[EMAIL PROTECTED] Sometimes it's temporary, sometimes it's not. Sometimes temporary solutions remain in place for many years. Then you're not obeying to the agreements with your registrar. Delegation is a primary func

[no subject]

> -Original Message- > From: Jeff Chan [mailto:[EMAIL PROTECTED] > Sent: Saturday, January 26, 2008 5:33 PM > > Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: > > >> From: Jeff Chan [mailto:[EMAIL PROTECTED] > >> There are lots of legitimate reasons to delegate zones, for example, > >>

RE: whois plugin .. where to get it

Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: From: Jeff Chan [mailto:[EMAIL PROTECTED] There are lots of legitimate reasons to delegate zones, for example, migration to a new nameserver. I suggest you ask someone who runs major nameservers. I have. This is a temporary solution. Later you

Re: unsubscribe

On Sat, 26 Jan 2008 14:26:22 +0100 mouss <[EMAIL PROTECTED]> wrote: > Matt Kettler wrote: > > Post to the unsubscribe address, not the list. > > > > See the headers of any message: > > > > List-Unsubscribe: > > > > I wonder if it would be bad to forge an unsubscribe re

RE: whois plugin .. where to get it

> -Original Message- > From: Jeff Chan [mailto:[EMAIL PROTECTED] > Sent: Saturday, January 26, 2008 4:33 PM > > > There are lots of legitimate reasons to delegate zones, for example, > migration to a new nameserver. I suggest you ask someone who runs > major nameservers. I have. This i

RE: whois plugin .. where to get it

Quoting Jeff Chan <[EMAIL PROTECTED]>: DNS works by delegation from parent zones to child zones. Or more generally from one zone to another. DNS is built on delegation. Some spammers abuse delegation in unusual ways, but not all unusual delegation is abuse. Jeff C.

RE: whois plugin .. where to get it

Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: -Original Message- From: Jeff Chan [mailto:[EMAIL PROTECTED] Sent: Saturday, January 26, 2008 12:23 PM Quoting Jeff Chan <[EMAIL PROTECTED]>: > Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: > >> The TLD root servers delegate the contr

RE: whois plugin .. where to get it

> -Original Message- > From: Jeff Chan [mailto:[EMAIL PROTECTED] > Sent: Saturday, January 26, 2008 12:23 PM > > Quoting Jeff Chan <[EMAIL PROTECTED]>: > > > Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: > > > >> The TLD root servers delegate the control of the II level domain to > the

Re: unsubscribe

Matt Kettler wrote: > Post to the unsubscribe address, not the list. > > See the headers of any message: > > List-Unsubscribe: > I wonder if it would be bad to forge an unsubscribe requests in such cases, but I'm not sure they will understand what to do when they get

p0f not catching Windows XP

I'm using amavisd-new and p0f with BOTNET.pl, and some Windows XP machines are not being caught. Here are my rules: header L_P0F_WXP X-Amavis-OS-Fingerprint =~ /^Windows XP(?![^(]*\b2000 SP)/ score L_P0F_WXP 2.3 header L_P0F_W X-Amavis-OS-Fingerprint =~ /^Windows(?! XP)/ score L_P0F_W

RE: whois plugin .. where to get it

Quoting Jeff Chan <[EMAIL PROTECTED]>: Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: The TLD root servers delegate the control of the II level domain to the NS servers defined at registration time. That is delegation. But from there, warping the entire domain to different NSes is not delega

RE: whois plugin .. where to get it

Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: The TLD root servers delegate the control of the II level domain to the NS servers defined at registration time. That is delegation. But from there, warping the entire domain to different NSes is not delegation. It is delegation. Jeff C.

RE: whois plugin .. where to get it

> -Original Message- > From: Jeff Chan [mailto:[EMAIL PROTECTED] > Sent: Saturday, January 26, 2008 8:39 AM > > Quoting Giampaolo Tomassoni <[EMAIL PROTECTED]>: > >> From: Jeff Chan [mailto:[EMAIL PROTECTED] > > >> Yes, delegation is the other, more usual, way that the nameserver in > >>

Re: Redo: Upgrade 3.2.3->3.2.4 breaks rule override

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Kris Deugau schrieb: |> I appreciate the advice to hack our DNS configuration, but I'd prefer |> to keep all my SpamAssassin tweaks in the SpamAssassin config file and |> not have to document and (subsequently remember to actually look at |> the doc