Re: New spam-to me-and how do I stop.

2009-01-07 Thread Matus UHLAR - fantomas
On 07.01.09 11:46, Craig wrote: > X-Mailer: Novell GroupWise Internet Agent 7.0.2 HP > >>> Randy 1/6/2009 2:42 PM >>> > Post 3 similar messages on pastbin so that we can determine a common > factor between them. Use pastbin, not this list to post the message. > I have 3 messages posted at paste

RE: Daily run output

2009-01-07 Thread Rubin Bennett
-Original Message- From: Simon.Baker [mailto:simon_ba...@medfin.com.au] Sent: Thursday, January 08, 2009 12:19 AM To: users@spamassassin.apache.org Subject: Daily run output Hi, We have a spamassassin server filtering our companies emails currently. Each day we recieve an email from th

Re: Daily run output

2009-01-07 Thread Evan Platt
AFAIK, that's not part of SpamAssassin, so you'd need to find whatever is generating that e-mail and change it. I'm sure I'll be corrected if I'm wrong, but this isn't an option I'm aware of. At 09:18 PM 1/7/2009, you wrote: Hi, We have a spamassassin server filtering our companies emails

Daily run output

2009-01-07 Thread Simon.Baker
Hi, We have a spamassassin server filtering our companies emails currently. Each day we recieve an email from the root account of our server overviewing the previous days spam filtered emails, network status and disk status. As i was not the one who setup the server, i'm not sure exactly how it'

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Rob McEwen
Florian Lagg wrote: > In the last few days my Spamassassign does not filter a (for me) new > kind of spam. I have an idea how to fight this spam and want to ask > the list if this is possible with SA. > > > > More examples: > -- > Hey! Do you believe that when New Y

Spamassassin CustomRules errors

2009-01-07 Thread chenzhen yu
hi,I need your help I used a group of CustomRules with big5 charset but all email I sent will get the spam score from several specific lines of CustomRules but there is no any words matched in the email.I have used many emails to test and was sure that the rules is right written.If I change the

AW: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Florian Lagg
> You can look at the WebRedirect plugin on > http://wiki.apache.org/spamassassin/CustomPlugins > >Possible? Sure. >Should? Not unless you want to turn your (and anyone else > running that code's) >machine into a DDoS client. > >In other words, while it's possible to shoot

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Jeff Mincy
From: Theo Van Dinter Date: Wed, 7 Jan 2009 11:36:18 -0500 On Wed, Jan 07, 2009 at 04:46:44PM +0100, Florian Lagg wrote: > So - if possible - I want spamassassign to: > 1. Request the links in the mail body and check them for http-error 302 or > meta redirects > 2. Check t

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Benny Pedersen
On Wed, January 7, 2009 19:05, Raymond Dijkxhoorn wrote: > Besides that, its a perfect way to ack your address to them. If they > make a url like blah.at.blah.com and thats corresponding to your > address, like this or url encoded they know your address is > active, real handy. it olso works on

Re: AND logical operation for scoring options

2009-01-07 Thread Benny Pedersen
On Wed, January 7, 2009 18:45, ml wrote: > In case that (A || B) sometimes appears on non-spams but (A & B) > frequently appears on spams, meta test (A && B) -- Benny Pedersen Need more webspace ? http://www.servage.net/?coupon=cust37098

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Raymond Dijkxhoorn
Hi! Besides the DDOS issue, there's a privacy issue, which is messy with DNSBLs already. Nothing SA does should send network traffic to a place controlled by the mail sender. Checking a DNSBL for which there's some reason to believe they aren't underhanded is one thing, but fetching stuff from

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Henrik K
On Wed, Jan 07, 2009 at 12:44:39PM -0500, Greg Troxel wrote: > > Besides the DDOS issue, there's a privacy issue, which is messy with > DNSBLs already. Nothing SA does should send network traffic to a place > controlled by the mail sender. Checking a DNSBL for which there's some > reason to beli

Re: New spam-to me-and how do I stop.

2009-01-07 Thread Craig
Links would help- http://pastebin.com/d59f95b6d http://pastebin.com/d17f12f4 http://pastebin.com/m46ce2877 >>> "Craig" 1/7/2009 11:46 AM >>> >>> Randy 1/6/2009 2:42 PM >>> Craig wrote: > > > >>> Randy 1/6/2009 2:18 PM >>> > Craig wrote: > > Hello All- > > > > I have recently been getting M

Re: AND logical operation for scoring options

2009-01-07 Thread Theo Van Dinter
rtm for "meta rules" :) On Wed, Jan 07, 2009 at 09:45:18AM -0800, ml wrote: > Concerning scoring options defined on “user_prefs”, is there a way to > apply AND logical operation for two or more SYMBOLIC_TEST_NAMEs describing > like “score A & B 2.0”? If it is not available now, let me know how

Re: New spam-to me-and how do I stop.

2009-01-07 Thread Craig
>>> Randy 1/6/2009 2:42 PM >>> Craig wrote: > > > >>> Randy 1/6/2009 2:18 PM >>> > Craig wrote: > > Hello All- > > > > I have recently been getting MANY spam slipping through Spamassassin > > and I am looking for help on how to stop. I have used Spamassassin > > with Bayes successfully for ma

AND logical operation for scoring options

2009-01-07 Thread ml
Concerning scoring options defined on “user_prefs”, is there a way to apply AND logical operation for two or more SYMBOLIC_TEST_NAMEs describing like “score A & B 2.0”? If it is not available now, let me know how to react as a temporary resolution. In case that (A || B) sometimes appears on

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Greg Troxel
Besides the DDOS issue, there's a privacy issue, which is messy with DNSBLs already. Nothing SA does should send network traffic to a place controlled by the mail sender. Checking a DNSBL for which there's some reason to believe they aren't underhanded is one thing, but fetching stuff from a spa

Re: Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Theo Van Dinter
On Wed, Jan 07, 2009 at 04:46:44PM +0100, Florian Lagg wrote: > So - if possible - I want spamassassign to: > 1. Request the links in the mail body and check them for http-error 302 or > meta redirects > 2. Check the links we got by doing this against some DNSBL's > > Is this possible? Is there a

Spam with clean URI's which forward to DNSBListed URL (by HTML redirect header)

2009-01-07 Thread Florian Lagg
Hello! In the last few days my Spamassassign does not filter a (for me) new kind of spam. I have an idea how to fight this spam and want to ask the list if this is possible with SA. First a short analysis of what's going on: 1st fact: I get mails like this one: --- Subject

Shades-of-greylisting: custom rule creation?

2009-01-07 Thread Don Levey
[I've not yet found in the archives something which addresses this question; if I missed it I apologise] I am trying to set up a system whereby I can create lists of addresses/servers of varying degrees of spamminess. For example, I might have three lists: From server constantcontact.com

Re: add a score for same "From:" and "To:"

2009-01-07 Thread Matt Kettler
Phibee Network Operation Center wrote: > Hi > > anyone have a rules for increase the score when the from: are same > that to: ? Yes, there was a thread about this just a few days ago. See "TO: and FROM: line are the same." from 1/4/2008 in the archives.

Re: New spam-to me-and how do I stop.

2009-01-07 Thread McDonald, Dan
On Wed, 2009-01-07 at 07:54 -0600, Craig wrote: > > > >>> Randy 1/6/2009 2:42 PM >>> > Craig wrote: > Post 3 similar messages on pastbin so that we can determine a common > factor between them. Use pastbin, not this list to post the message. > > Pastbin-I am not familiar with this-what is th

Re: New spam-to me-and how do I stop.

2009-01-07 Thread Craig
>>> Randy 1/6/2009 2:42 PM >>> Craig wrote: > > > >>> Randy 1/6/2009 2:18 PM >>> > Craig wrote: > > Hello All- > > > > I have recently been getting MANY spam slipping through Spamassassin > > and I am looking for help on how to stop. I have used Spamassassin > > with Bayes successfully for ma

Re: add a score for same "From:" and "To:"

2009-01-07 Thread Kai Schaetzl
This is lame, read the archives. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: What multibyte character encoding convention is this?

2009-01-07 Thread Kai Schaetzl
Robert Nicholson wrote on Tue, 6 Jan 2009 21:59:04 -0600: > does anybody recommend this? for what? It's garbage and remains garbage. ;-) Any non-ASCII characters in the header have to be Q- or B-encoded (=?Utf-8?B?.?=). If they are not they will just display as the corresponding ASCII chara

Re: Test order

2009-01-07 Thread Benny Pedersen
On Tue, January 6, 2009 03:11, Matt Kettler wrote: > Check your .pre files to make sure the shortcircuit plugin is loaded > in one of them. (Note: loadplugin statements added to local.cf will > NOT work, they should be in the .pre files) is this so in 3.3 svn ? in 3.2.5 it works olso from local.

add a score for same "From:" and "To:"

2009-01-07 Thread Phibee Network Operation Center
Hi anyone have a rules for increase the score when the from: are same that to: ? Thanks jerome

Re: more habeas spam

2009-01-07 Thread Anthony Peacock
LuKreme wrote: On 6-Jan-2009, at 08:51, Greg Troxel wrote: I realize that HABEAS_ACCREDITED_SOI has or had a reasonable ruleqa value. But, I wonder if SA should apply higher standards than that, and not give negative scores to databases that don't behave reasonably. This has been brought up