Re: sought rules updates

2008-12-14 Thread Big Wave Dave
> [746] dbg: generic: lint check of site pre files succeeded, > continuing with channel updates > [746] dbg: channel: no MIRRORED.BY file available > [746] dbg: http: GET request, http://yerp.org/rules/MIRRORED.BY > [746] dbg: channel: MIRRORED.BY file retrieved > [746] dbg: channel: reading MIRROR

Re: sought rules updates

2008-12-14 Thread Benny Pedersen
On Wed, December 10, 2008 12:28, Justin Mason wrote: >> ???AFAIK Justin is aware of this, and hopefully will have fixed it >> soon. :) > > this should be fixed now, I think... [746] dbg: generic: lint check of site pre files succeeded, continuing with channel updates [746] dbg: channel: no MIRRO

Re: spamassassin & uceprotect

2008-12-14 Thread Ned Slider
sebast...@debianfan.de wrote: Hello, does anybody use spamassassin with uceprotect? Can you post your config-file, please? Tnx Here you go: ifplugin Mail::SpamAssassin::Plugin::DNSEval # dnsbl-1.uceprotect.net header RCVD_IN_UCEPROTECT1 eval:check_rbl('uceprotect1-lastexternal', 'dnsbl-1

spamassassin & uceprotect

2008-12-14 Thread sebast...@debianfan.de
Hello, does anybody use spamassassin with uceprotect? Can you post your config-file, please? Tnx

Re: URIBL Removal [OT]

2008-12-14 Thread Marc Perkel
My fault - never mind. I was doing something wrong. Karsten Bräckelmann wrote: On Sat, 2008-12-13 at 21:23 -0800, Marc Perkel wrote: I'm trying to get collaborate.com off of the URIBL list and I've submitted it for removal several times and nothing happens. Log in to your URIBL accoun

Re: Preemptive URI blocklisting

2008-12-14 Thread SM
At 08:11 14-12-2008, Dave Pooser wrote: <%word%><%otherword%>.com format and both are in the same /24. So I started checking PTR records for the whole /24 and I'm seeing snowshoe farms like this (mildly borked to not hit URI lists): 3.193.111.66.in-addr.arpaname = dancethree[dot]com. Veri

Preemptive URI blocklisting

2008-12-14 Thread Dave Pooser
As I sat manually sorting through my spambucket and submitting URIs to URIBL, I noticed a trend: the (DKIM-signed) "from" domain is often different from the payload URI domain, but both are in the same <%word%><%otherword%>.com format and both are in the same /24. So I started checking PTR records

Re: windows live spam, again

2008-12-14 Thread Sahil Tandon
Arvid Ephraim Picciani wrote: > what was the solution again for windows live spam? It hit me finally. Others have proposed some solutions already. > (does this list have a search facility?) Yes. For example: http://marc.info/?l=spamassassin-users&w=2&r=1&s=windows+live+spam&q=b -- Sahil Tan

Re: windows live spam, again

2008-12-14 Thread Martin Gregorie
On Sun, 2008-12-14 at 14:57 +0100, Arvid Ephraim Picciani wrote: > HI, > what was the solution again for windows live spam? It hit me finally. > (does this list have a search facility?) > Here's mine. This targets livespace spam: - not sent from a livespace address - sent via the Sourceforge lists

Re: windows live spam, again

2008-12-14 Thread Ned Slider
Arvid Ephraim Picciani wrote: HI, what was the solution again for windows live spam? It hit me finally. (does this list have a search facility?) Here's my solution: uri LOCAL_URI_SPACES_LIVE m{https?://.{1,40}\.spaces\.live\.com\b}i score LOCAL_URI_SPACES_LIVE 3 Score it as you see f

windows live spam, again

2008-12-14 Thread Arvid Ephraim Picciani
HI, what was the solution again for windows live spam? It hit me finally. (does this list have a search facility?) -- best regards Arvid Ephraim Picciani Asgaard Technologies -- The software engineer tribe.

Re: URIBL Removal [OT]

2008-12-14 Thread Karsten Bräckelmann
On Sun, 2008-12-14 at 13:42 +0100, Karsten Bräckelmann wrote: > On Sat, 2008-12-13 at 21:23 -0800, Marc Perkel wrote: > > I'm trying to get collaborate.com off of the URIBL list and I've > > submitted it for removal several times and nothing happens. > > Log in to your URIBL account, then see the

Re: URIBL Removal [OT]

2008-12-14 Thread Karsten Bräckelmann
On Sat, 2008-12-13 at 21:23 -0800, Marc Perkel wrote: > I'm trying to get collaborate.com off of the URIBL list and I've > submitted it for removal several times and nothing happens. Log in to your URIBL account, then see the "track" link, more verbosely named "Track Your Submissions" in the page