Re: night of pleasure spam

2008-11-26 Thread Henrik K
On Wed, Nov 26, 2008 at 01:15:48PM -0800, Bill Randle wrote: > On Thu, 2008-11-27 at 09:51 +1300, Lists wrote: > > Bill Randle wrote: > > > * 5.5 BOTNET Relay might be a spambot or virusbot > > > * [botnet0.8,ip=200.219.72.83,nordns] > > > > > I will look into the BOTNET as

Re: New PYZOR

2008-11-26 Thread Chris
On Wednesday 26 November 2008 10:11 pm, you wrote: > In the Forum section of the Buhono site, I found the following: > ' The Bohuno service is backwards compatible to the original PyzorD and > ' Pyzor client. To use Bohuno, update the ~/.pyzor/servers file and add > ' 82.94.255.100:24441 > ' > ' I

Re: New PYZOR

2008-11-26 Thread Robert Fleming
--On November 26, 2008 9:38:27 PM -0600 Chris is rumoured to have written: > Has anyone else seen this? I'm trying to find out from the new author > whether it will work with SA. I would think that a new plug-in would > have to be written? In the Forum section of the Buhono site, I found the fo

Re: night of pleasure spam

2008-11-26 Thread Chris
On Wednesday 26 November 2008 2:18 pm, Lists wrote: > Hi all, > > The system here is getting heaps of variations of this night of pleasure > spam. Some is getting stopped by spamassassin but still quite a bit > getting through. > Here is an example of one that only scored low. > http://www.pastebin

New PYZOR

2008-11-26 Thread Chris
Has anyone else seen this? I'm trying to find out from the new author whether it will work with SA. I would think that a new plug-in would have to be written? "With great pleasure I present to you the long discussed, wanted & now   finished new version of PYZOR now dubbed "Bohuno". And for those

Re: sa-learn from internal mail server ?

2008-11-26 Thread Martin Gregorie
On Thu, 2008-11-27 at 09:14 +1100, Sam Ami wrote: > hi all > > our current setup. > primary mx for all out email domains installation: qmail,spamassasin,clamav > all email is inline scanned and then relayed to the internal server > for delivery to users mailbox > > question. > is it possible to u

Re: sa-learn from internal mail server ?

2008-11-26 Thread John Hardin
On Thu, 27 Nov 2008, Sam Ami wrote: primary mx for all out email domains installation: qmail,spamassasin,clamav all email is inline scanned and then relayed to the internal server for delivery to users mailbox question. is it possible to use sa-learn in this situtation ? we still get a lot of

Re: sa-learn from internal mail server ?

2008-11-26 Thread Steven Stern
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 11/26/2008 04:14 PM, Sam Ami wrote: > hi all > > our current setup. > primary mx for all out email domains installation: qmail,spamassasin,clamav > all email is inline scanned and then relayed to the internal server > for delivery to users mailbox

sa-learn from internal mail server ?

2008-11-26 Thread Sam Ami
hi all our current setup. primary mx for all out email domains installation: qmail,spamassasin,clamav all email is inline scanned and then relayed to the internal server for delivery to users mailbox question. is it possible to use sa-learn in this situtation ? we still get a lot of spam and i'd

Re: night of pleasure spam

2008-11-26 Thread mouss
Lists a écrit : > Hi all, > > The system here is getting heaps of variations of this night of pleasure > spam. Some is getting stopped by spamassassin but still quite a bit > getting through. > Here is an example of one that only scored low. > http://www.pastebin.ca/1267866 > > If anybody has tim

Re: night of pleasure spam

2008-11-26 Thread Bill Randle
On Thu, 2008-11-27 at 09:51 +1300, Lists wrote: > Bill Randle wrote: > > On Thu, 2008-11-27 at 09:37 +1300, Kate Kleinschafer wrote: > > > >> John Hardin wrote: > >> > >>> On Thu, 27 Nov 2008, Lists wrote: > >>> > >>> > Here is an example of one that only scored low. > http

Re: night of pleasure spam

2008-11-26 Thread John Hardin
On Thu, 27 Nov 2008, Lists wrote: John Hardin wrote: On Thu, 27 Nov 2008, Lists wrote: > Here is an example of one that only scored low. > http://www.pastebin.ca/1267866 There was some discussion on the list of spaces.live.com URI spam a few weeks back, and some rules posted. Those might

Re: night of pleasure spam

2008-11-26 Thread Lists
Bill Randle wrote: On Thu, 2008-11-27 at 09:37 +1300, Kate Kleinschafer wrote: John Hardin wrote: On Thu, 27 Nov 2008, Lists wrote: Here is an example of one that only scored low. http://www.pastebin.ca/1267866 There was some discussion on the list of spaces.live.com U

Re: night of pleasure spam

2008-11-26 Thread Martin Gregorie
On Wed, 2008-11-26 at 12:32 -0800, John Hardin wrote: > There was some discussion on the list of spaces.live.com URI spam a few > weeks back, and some rules posted. Those might help. > I've also been seeing it. I have a similar set of spaces.live.com rules, but although one or to of the sub-rul

Re: night of pleasure spam

2008-11-26 Thread Bill Randle
On Thu, 2008-11-27 at 09:37 +1300, Kate Kleinschafer wrote: > John Hardin wrote: > > On Thu, 27 Nov 2008, Lists wrote: > > > >> Here is an example of one that only scored low. > >> http://www.pastebin.ca/1267866 > > > > There was some discussion on the list of spaces.live.com URI spam a > > few we

Re: night of pleasure spam

2008-11-26 Thread Lists
John Hardin wrote: On Thu, 27 Nov 2008, Lists wrote: Here is an example of one that only scored low. http://www.pastebin.ca/1267866 There was some discussion on the list of spaces.live.com URI spam a few weeks back, and some rules posted. Those might help. Can you post a link to this t

Re: night of pleasure spam

2008-11-26 Thread Kate Kleinschafer
DAve wrote: Lists wrote: Hi all, The system here is getting heaps of variations of this night of pleasure spam. Some is getting stopped by spamassassin but still quite a bit getting through. Here is an example of one that only scored low. http://www.pastebin.ca/1267866 If anybody has time

Re: night of pleasure spam

2008-11-26 Thread Kate Kleinschafer
John Hardin wrote: On Thu, 27 Nov 2008, Lists wrote: Here is an example of one that only scored low. http://www.pastebin.ca/1267866 There was some discussion on the list of spaces.live.com URI spam a few weeks back, and some rules posted. Those might help. Thanks I will check that out. K

Re: night of pleasure spam

2008-11-26 Thread DAve
Lists wrote: Hi all, The system here is getting heaps of variations of this night of pleasure spam. Some is getting stopped by spamassassin but still quite a bit getting through. Here is an example of one that only scored low. http://www.pastebin.ca/1267866 If anybody has time to run it thro

Re: night of pleasure spam

2008-11-26 Thread John Hardin
On Thu, 27 Nov 2008, Lists wrote: Here is an example of one that only scored low. http://www.pastebin.ca/1267866 There was some discussion on the list of spaces.live.com URI spam a few weeks back, and some rules posted. Those might help. -- John Hardin KA7OHZhttp://www.

night of pleasure spam

2008-11-26 Thread Lists
Hi all, The system here is getting heaps of variations of this night of pleasure spam. Some is getting stopped by spamassassin but still quite a bit getting through. Here is an example of one that only scored low. http://www.pastebin.ca/1267866 If anybody has time to run it through their syst

Re: Clustering spamassassin + autolearning

2008-11-26 Thread Peter Fastré
Thank you all for your (quick) answers! @Kai: mailwatch has a training facility built in. But this is only possible on messages in quarantine. If a message is passed by mailscanner (for example, because of BAYES_00, which is sometimes the case), it is sent to the mailbox server, and it's not possib