Re: eudora and "password"

2008-04-05 Thread Blaine Fleming
installed current win version on an xp box, using last paid version of eudora, inserted "127.0.0.1" in place of POP3 mail server as advised in manual, but eudora wants a password every time one changes a server name.and I cannot find one that works. Not really an SA issue but it is probab

Re: eudora and "password"

2008-04-05 Thread dooley2
ok. thanks for all. I felet it was worth a shot, even knowing that most would not be using a windows proxy. if anything occurs to you...or, certainly, anyone else indulging this thread...I would appreciate any comments. thanks. Matt Kettler-3 wrote: > > dooley2 wrote: >> it is a spam assassi

Re: Really raw body

2008-04-05 Thread Matt Kettler
Joseph Brennan wrote: How would I match on a URL like the text below? This does not work: rawbody CU_0A /www\.[a-z]+\.(com|cn)=0A=/ Rawbody evidently sees it after it has been decoded from quoted-printable. The needless use of qp is actually a distinctive sign of this spammer. Use the

Really raw body

2008-04-05 Thread Joseph Brennan
How would I match on a URL like the text below? This does not work: rawbody CU_0A /www\.[a-z]+\.(com|cn)=0A=/ Rawbody evidently sees it after it has been decoded from quoted-printable. The needless use of qp is actually a distinctive sign of this spammer. Joseph Brennan Columbia Universit

Re: eudora and "password"

2008-04-05 Thread Matt Kettler
dooley2 wrote: it is a spam assassin proxy 3.2.3.3., for windows. respectfully, why would I post the question here unless it had something to do with spam assassin? Well, true.. however, from your post it wasn't possible to determine much about your setup. It also wasn't even clear you wer

Re: eudora and "password"

2008-04-05 Thread dooley2
it is a spam assassin proxy 3.2.3.3., for windows. respectfully, why would I post the question here unless it had something to do with spam assassin? http://wiki.apache.org/spamassassin/SaProxy Matt Kettler-3 wrote: > > dooley2 wrote: >> heoo all, >> >> installed current win version on an xp

Re: eudora and "password"

2008-04-05 Thread Matt Kettler
dooley2 wrote: heoo all, installed current win version on an xp box, using last paid version of eudora, inserted "127.0.0.1" in place of POP3 mail server as advised in manual, but eudora wants a password every time one changes a server name.and I cannot find one that works. meaning, I am th

Re: auto-whitelist: open of auto-whitelist file failed

2008-04-05 Thread Matt Kettler
Yves Goergen wrote: Just remember to su to that user when running sa-learn. This is getting a problem now! My spamd user has no access on the mailbox directories from which I am usually learning. What's the proposed solution for that? Well, there's a couple of ways to deal with that.. The

Re: dns tests and scoring info for modification

2008-04-05 Thread Matus UHLAR - fantomas
> > don't modify "standard" rule files. > > > > instead, create a /path/to/site/rules/scores.cf (same directory where > > you have local.cf) and override the scores there (use a 0 score to > > disable a test). look at 50_scores.cf to get an idea. > > > > I hope you have valid reasons to disable

Re: Spam abuse report plugin

2008-04-05 Thread Matus UHLAR - fantomas
On 04.04.08 12:16, Eddy Beliveau wrote: > This subject is very interesting > > I received many spams daily and have to manually analyse headers or email > content to be able to send abuse report > > Is there a tool which can do this for me ? > > I imagine some web form (unix/windows) in which I

Re: Spam abuse report plugin

2008-04-05 Thread Matus UHLAR - fantomas
On 05.04.08 02:04, Benny Pedersen wrote: > On Fri, April 4, 2008 19:22, decoder wrote: > > > first hop, thatone might be forged by spammers. So already determining a > > sure source address is something that can hardly be automatised. > > well amavisd get the origin ip, and relay ip, why cant spa

eudora and "password"

2008-04-05 Thread dooley2
heoo all, installed current win version on an xp box, using last paid version of eudora, inserted "127.0.0.1" in place of POP3 mail server as advised in manual, but eudora wants a password every time one changes a server name.and I cannot find one that works. meaning, I am the admin on this

Re: Blank messages

2008-04-05 Thread SM
At 16:12 04-04-2008, Matt Kettler wrote: Out of curiosity, did you spot where the error in the formatting is? I looked at the message and failed to spot it... My initial reply was incorrect as it's not a MIME related problem. I viewed the message again after your question. There's an extra

Re: Dramatic increase in bounce messages to forged addresses

2008-04-05 Thread mouss
Benny Pedersen wrote: On Wed, April 2, 2008 21:34, mouss wrote: Anyone knows if backscatterer.org list is safe? If so, one can reject mail if the envelope sender is empty and the client is listed there. http://rfc-ignorant.org/policy-dsn.php I've posted to rfc-discuss to get this

Re: Blank messages

2008-04-05 Thread Michelle Konzack
Hmmm, maybe you schould decrease the score? Am 2008-04-03 12:47:12, schrieb Ed Kasky: > I can't seem to catch these emails with blank bodies. I upped the > BLANK_LINES_80_90 score to 3 but the email below didn't get a hit off the > rule. > > Is there another rule that I don't know about that i

Re: somone running spamtraps?

2008-04-05 Thread Arvid Ephraim Picciani
On Friday 04 April 2008 15:05:37 Giampaolo Tomassoni wrote: > I wouldn't do that: you risk your own inet address to be reported as a spam > source: most spamtraps are not smart enough to understand you are trying to > help... It's ok. we're going to throw that domain away anyway. weird thing is we

Re: Blank messages

2008-04-05 Thread mouss
Ed Kasky wrote: On Fri, 4 Apr 2008, Matt Kettler wrote: SM wrote: At 04:46 04-04-2008, Matt Kettler wrote: However, in this case it looks purely accidental. That appears to be a legitimate HTML document, or at least doesn't appear to be intentionally malformed. In this case, the message wa

Re: dns tests and scoring info for modification

2008-04-05 Thread mouss
Robert - elists wrote: don't modify "standard" rule files. instead, create a /path/to/site/rules/scores.cf (same directory where you have local.cf) and override the scores there (use a 0 score to disable a test). look at 50_scores.cf to get an idea. I hope you have valid reasons to disable n

Re: auto-whitelist: open of auto-whitelist file failed

2008-04-05 Thread Yves Goergen
On 05.04.2008 01:18 CE(S)T, Matt Kettler wrote: Spamd will never be able to access anything in /root/. 3.1.8 shouldn't have been able to do so any more than 3.2.4 could, but that might have been a bug.. Must have been a bug, yes. If you're always scanning mail as one user, you can create a n

Re: FP on RCVD_IN_DNSWL_MED

2008-04-05 Thread Matthias Leisi
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi list, FPs on the DNSWL.org rules can be handled best if sent to admins -at- dnswl.org. I took up this one, should be resolved shortly (or the entry disabled, depending on the actual value of "shortly"...). Thanks, - -- Matthias -BEGIN PGP