SARE stock

2008-03-28 Thread hamann . w
SARE_PROLOSTOCK_SYM3 traps on ISMN (international standard Music number, similar to ISBN) I just got an order confirmation from a music book store with a pretty high score Wolfgang Hamann

Re: can we make AWL ignore mail from self to self?

2008-03-28 Thread Benny Pedersen
On Sat, March 29, 2008 02:09, Jo Rhett wrote: > I send myself a lot of email from my phone. So AWL properly scores > me well. and the sender ip with a fuss of /16 > I just got a piece of SPAM which should have scored 12.something that > got a -6 from the AWL. ok > I think that mail from self

Re: can we make AWL ignore mail from self to self?

2008-03-28 Thread Theo Van Dinter
On Fri, Mar 28, 2008 at 06:09:03PM -0700, Jo Rhett wrote: > I think that mail from self to self should be ignored by the AWL. > (it's harder to forged mail from a regular correspondent, so this > makes AWL more useful) If you know the mail is from you, don't waste the resources scanning the mess

can we make AWL ignore mail from self to self?

2008-03-28 Thread Jo Rhett
I send myself a lot of email from my phone. So AWL properly scores me well. I just got a piece of SPAM which should have scored 12.something that got a -6 from the AWL. I think that mail from self to self should be ignored by the AWL. (it's harder to forged mail from a regular corresponden

Re: Bounce back spam

2008-03-28 Thread mouss
Jeff Koch wrote: Our users are getting inundated with bounce-back, joe-job spam. We have the Vbounce.pm plugin enabled (v3.2.4) and have a 'whitelist_bounce_relays' with the name of the mailserver in the local.cf file and the 'failure notices', 'mail delay' and undeliverables don't seem to b

-2.6 bayes_00

2008-03-28 Thread Jean-Paul Natola
Why does this hit on the most OBVIOUS messages? Its almost an oxymoron How can all these rules get triggered 0.6 J_CHICKENPOX_34BODY: 3alpha-pock-4alpha 0.6 J_CHICKENPOX_64BODY: 6alpha-pock-4alpha 0.6 J_CHICKENPOX_82BODY: 8alpha-pock-2alpha -2.6 B

Re: Not scoring high enough on this spam...

2008-03-28 Thread John Hardin
On Fri, 28 Mar 2008, Andrew Hearn wrote: http://pastebin.ca/961075 I've only seen one so far but apart from the 0.0 BAYES_50 (I will learn this message), does anyone have rules that pushes this kind of message over 5.0? I have some "stupid HTML tricks" rules for empty tag pairs; adding

Re: Not scoring high enough on this spam...

2008-03-28 Thread Randy Ramsdell
Andrew Hearn wrote: http://pastebin.ca/961075 I've only seen one so far but apart from the 0.0 BAYES_50 (I will learn this message), does anyone have rules that pushes this kind of message over 5.0? thanks! Andrew If you learn the message which = 3.5 wouldn't that put the score +5?

Re: OT: uribl.com folks awake?

2008-03-28 Thread Jonathan Nichols
On Mar 27, 2008, at 10:19 AM, Dallas Engelken wrote: Jonathan Nichols wrote: Sorry for the OT. I've been trying to get in touch with whoever is in charge of URIBL zonefile mirrors without success. Is this thing on? Ping me offlist, por favor. I may have just been pinging the wrong peopl

Re: Not scoring high enough on this spam...

2008-03-28 Thread Richard Frovarp
Andrew Hearn wrote: http://pastebin.ca/961075 I've only seen one so far but apart from the 0.0 BAYES_50 (I will learn this message), does anyone have rules that pushes this kind of message over 5.0? thanks! Andrew pts rule name description -- --

Not scoring high enough on this spam...

2008-03-28 Thread Andrew Hearn
http://pastebin.ca/961075 I've only seen one so far but apart from the 0.0 BAYES_50 (I will learn this message), does anyone have rules that pushes this kind of message over 5.0? thanks! Andrew

Re: SpamAssassin interest and Spam solution

2008-03-28 Thread SM
Hi Richard, At 08:42 27-03-2008, Richard Hole wrote: I am interested in spam filtering software that I could encourage either my server or other servers to use. My server currently uses SpamAssassin and I hope your software could be easily modified to do what I suggest below. I want to receive

Re: SpamAssassin interest and Spam solution xyz vqw

2008-03-28 Thread Henrik K
On Fri, Mar 28, 2008 at 01:42:24AM +1000, Richard Hole wrote: > > When two people communicate via email they would not have to type each > others code every time they reply as the code should automatically > appear in the subject field of the new message. If two people are > communicating, ea

Re: SpamAssassin interest and Spam solution

2008-03-28 Thread Michael Scheidell
> From: Richard Hole <[EMAIL PROTECTED]> > Reply-To: <[EMAIL PROTECTED]>, <[EMAIL PROTECTED]> > Date: Fri, 28 Mar 2008 01:42:24 +1000 > To: > Subject: SpamAssassin interest and Spam solution > > Hi > > I am interested in spam filtering software that I could encourage either > my server or other

Re: ALL_TRUSTED - problem (yes I set trusted_networks already)

2008-03-28 Thread Matus UHLAR - fantomas
On 28.03.08 14:26, peter pilsl wrote: > Our mailserver is behind a NAT-firewall (port 25 is passed through to > the internal mailserver) and I ran into the ALL_TRUSTED-problem. I > looked up the FAQ and set > > trusted_networks 127.0.0.1 (which actually gives me a warning that > 127.0.0.1 i

Re: Celebrity spams

2008-03-28 Thread --[ UxBoD ]--
look at line 55 of the pastebin ;) you can use that URL I believe. Regards, -- --[ UxBoD ]-- // PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import" // Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84 // Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84 // Phone: +44 8

Re: Unsubscribe

2008-03-28 Thread Matus UHLAR - fantomas
> Femitha Majeed wrote: > >Hi, > > > >Can you please tell me how to unsubscribe to this mailing list. I > >tried all that they suggested on the website but failed. On 27.03.08 22:03, Matt Kettler wrote: > Could you be more specific? > > The SpamAssassin lists website > (http://wiki.apache.org/

Re: tmp file handling

2008-03-28 Thread Matus UHLAR - fantomas
On 27.03.08 11:34, NFN Smith wrote: > I'm currently running spamassassin 3.2.1-1~bpo.1 from the Debian > etch-backports branch (yes, I know that backports now has 3.2.4 > available, and I'll be upgrading shortly). Just FYI: Debian volatile archive has 3.2.3 and 3.2.4 was planned. Unlike backpor

Re: What to do about address spoofing

2008-03-28 Thread Matus UHLAR - fantomas
On 27.03.08 17:05, R.Smits wrote: > Is there something I can do that our company addresses cannot be used > for sending spam ? Is DKIM an answer ? yes, another answer is SPF. > A lot of our users get "delivery failed" messages. So a spammer is > sending spam with our addresses :-( > > A difficul

SpamAssassin interest and Spam solution

2008-03-28 Thread Richard Hole
Hi I am interested in spam filtering software that I could encourage either my server or other servers to use. My server currently uses SpamAssassin and I hope your software could be easily modified to do what I suggest below. I want to receive my emails reliably without having genuine emails

Re: Spam abuse report plugin

2008-03-28 Thread Matus UHLAR - fantomas
On 27.03.08 19:58, ram wrote: > I personally dont like the traditional spamcop report method of > forwarding > Spamcop uses a double confirm method, and to confirm all mails is a > pain. I will look at how to automate this. I trust spamcop should not > mind. This is building spamcops database of sp

Re: Celebrity spams

2008-03-28 Thread penny/dell
Thanks for the uribl.com info. We will be contributing to it, it's a great resource. Back to the original problem The links are inconsistent. I'll post another. http://pastebin.com/m6025c7b4 --[ UxBoD ]-- wrote: > > why not :- > > util_rb_2tld grupogsv.com > > as that appears as part of t

RE: ALL_TRUSTED - problem (yes I set trusted_networks already)

2008-03-28 Thread Bowie Bailey
peter pilsl wrote: > Our mailserver is behind a NAT-firewall (port 25 is passed through to > the internal mailserver) and I ran into the ALL_TRUSTED-problem. I > looked up the FAQ and set > > trusted_networks 127.0.0.1 (which actually gives me a warning that > 127.0.0.1 is already part of trusted

ALL_TRUSTED - problem (yes I set trusted_networks already)

2008-03-28 Thread peter pilsl
Our mailserver is behind a NAT-firewall (port 25 is passed through to the internal mailserver) and I ran into the ALL_TRUSTED-problem. I looked up the FAQ and set trusted_networks 127.0.0.1 (which actually gives me a warning that 127.0.0.1 is already part of trusted_networks) Neverthe

Re: Detail Spam Scoring

2008-03-28 Thread Matt Kettler
Jeff Koch wrote: We used to get detailed spam scoring in the email headers but it seems to have disappeared after installing 3.2.4. Is there some command for turning the detailed scoring back on. Can someone please tell me what it is? look at the add_header command. Since 2.6.0 this has been

Re: Header of a false negative mail

2008-03-28 Thread Sn!per
Quoting Matt Kettler <[EMAIL PROTECTED]>: > Can you tell us a bit about your setup? I am no sysadmin. But I will try anyway. > How do you integrate SA into your mail chain? Procmail? I am using qmail-ldap and SA is integrated into the mail chain with maildrop. For that particular mail that w