Re: checking against RBLs

2008-07-30 Thread Richard Frovarp
Leonardo Rodrigues Magalhães wrote: Hello, Is it possible to configure SA to check only last Received address against RBL tests ??? I would like to avoid checking ALL Received addresses, because they can possible have DSL/cable addresses that can be blacklisted somewhere. I would

checking against RBLs

2008-07-30 Thread Leonardo Rodrigues Magalhães
Hello, Is it possible to configure SA to check only last Received address against RBL tests ??? I would like to avoid checking ALL Received addresses, because they can possible have DSL/cable addresses that can be blacklisted somewhere. I would like, if possible, to check only last

Re: mysterious spam - what is this trying to do?

2008-07-30 Thread mouss
Arvid Ephraim Picciani wrote: On Wednesday 30 July 2008 00:55:50 mouss wrote: Ken A wrote: Can be a probe too. Accepting mail from that IP with that content says something about your system. Spammers aren't stupid. They fingerprint us just like we fingerprint them. If I was a spammer, I don't

Re: spam

2008-07-30 Thread Karsten Bräckelmann
Moderated, Cc'ing the OP. Please do subscribe to a mailing list, before posting. On Sat, 2008-07-26 at 14:13 -0400, Debbie Fister wrote: > 1. How do I view the spam box? I want to double check and make sure no >legitimate email is not there. Ask your administrator. SA itself just scans and

spam

2008-07-30 Thread Debbie Fister
1. How do I view the spam box? I want to double check and make sure no legitimate email is not there. 2. How do I configure Spam Assassin so legitimate email comes to me? I ask these questions because the number of spam email has drastically decreased even though I have disabled th

Re: mysterious spam - what is this trying to do?

2008-07-30 Thread Karsten Bräckelmann
On Wed, 2008-07-30 at 09:21 -0500, Ken A wrote: > Yes. And also, in any war, consider resource usage. > A simple example: Spammer at any given time may have access to a number > of DNSRBL listed bots, and a number of unlisted bots. With an > understanding of how ISP handles filtering based on a

Re: mysterious spam - what is this trying to do?

2008-07-30 Thread Ken A
ram wrote: On Wed, 2008-07-30 at 09:21 -0500, Ken A wrote: Arvid Ephraim Picciani wrote: On Wednesday 30 July 2008 00:55:50 mouss wrote: Ken A wrote: Can be a probe too. Accepting mail from that IP with that content says something about your system. Spammers aren't stupid. They fingerprint us

Re: mysterious spam - what is this trying to do?

2008-07-30 Thread Karsten Bräckelmann
On Wed, 2008-07-30 at 01:31 +0200, Arvid Ephraim Picciani wrote: > No. Some spammers are a lot more clever then that. > Especialy if you sell lists, you usually make sure they are high quality. > This is a low volume probe. Propably to clean out harvested lists. What makes you believe this is lo

Re: mysterious spam - what is this trying to do?

2008-07-30 Thread ram
On Wed, 2008-07-30 at 09:21 -0500, Ken A wrote: > Arvid Ephraim Picciani wrote: > > On Wednesday 30 July 2008 00:55:50 mouss wrote: > >> Ken A wrote: > >>> Can be a probe too. Accepting mail from that IP with that content says > >>> something about your system. Spammers aren't stupid. They fingerpr

Re: mysterious spam - what is this trying to do?

2008-07-30 Thread Ken A
Arvid Ephraim Picciani wrote: On Wednesday 30 July 2008 00:55:50 mouss wrote: Ken A wrote: Can be a probe too. Accepting mail from that IP with that content says something about your system. Spammers aren't stupid. They fingerprint us just like we fingerprint them. If I was a spammer, I don't

Re: mysterious spam - what is this trying to do?

2008-07-30 Thread Gene Heskett
On Tuesday 29 July 2008, Yet Another Ninja wrote: >On 7/29/2008 4:38 PM, Kevin Parris wrote: >> Sample posted here: http://pastebin.com/m7d993dc7 >> >> Have seen several similar to this, the message contains only random >> words, no images, no web links. What's the point? It's not >> advertising

Re: mysterious spam - what is this trying to do?

2008-07-30 Thread Yet Another Ninja
On 7/29/2008 4:38 PM, Kevin Parris wrote: Sample posted here: http://pastebin.com/m7d993dc7 Have seen several similar to this, the message contains only random words, no images, no web links. What's the point? It's not advertising, or trying to lure victims to a site, or carrying any payload.

RE: newbie bayes_path question [SOLVED]

2008-07-30 Thread Ebbe Hjorth
> Ebbe Hjorth wrote: >> >> I have created the directory, restartet sa-spamd, run sa-update, but >> the /usr/local/etc/mail/spamassassin/bayes/ directory is empty? > > Did you run sa-update, or sa-learn? You have to learn something before > it will create the files. > > Try running sa-learn with th