On Tue, July 7, 2009 00:58, info-spamassassin-t...@cs.utexas.edu wrote:
> body __PHISH1/^Password\b/i
> body __PHISH0/^Username\b/i
> metaPHISH __PHISH1 && __PHISH0
>
> But the rule does not hit unless I remove the '^' from the above regex.
> What am I missing?
repl
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Jul 6 22:38:08 saturn spamd[32217]: Argument "2.long" isn't \
numeric in numeric lt (<) at \
/usr/lib/perl5/vendor_perl/5.10.0/Mail/SpamAssassin/PerMsgStatus.pm line 1004.
Should I be concerned?
595 > spamassassin -V
SpamAssassin version 3.2
On Mon, 6 Jul 2009 17:58:59 -0500
info-spamassassin-t...@cs.utexas.edu wrote:
> I seem to be having a hard time writing rules which anchor
> a string to the start of the line in the body of a text message.
>
> e.g., suppose I get a lot of phish which contain text (not html)
> like this:
>
> User
On Mon, 6 Jul 2009, info-spamassassin-t...@cs.utexas.edu wrote:
I seem to be having a hard time writing rules which anchor
a string to the start of the line in the body of a text message.
e.g., suppose I get a lot of phish which contain text (not html)
like this:
Username:..
Password:.
Fletcher,
> I seem to be having a hard time writing rules which anchor
> a string to the start of the line in the body of a text message.
>
> e.g., suppose I get a lot of phish which contain text (not html)
> like this:
>
> Username:..
> Password:..
>
> I try what seemed intuitivel
I seem to be having a hard time writing rules which anchor
a string to the start of the line in the body of a text message.
e.g., suppose I get a lot of phish which contain text (not html)
like this:
Username:..
Password:..
I try what seemed intuitively easy:
body__PHISH1
On Mon, 6 Jul 2009, MrGibbage wrote:
OK, Now I also get very different results, which seems to be inline with what
you two have seen.
http://pelorus.org/fourth_pass_log.txt
And while there are some small differences between the sub-tests that hit,
the overall score is still zero for my install
On Mon, 6 Jul 2009, MrGibbage wrote:
BOTNET and the MEDS rule that was posted to the list recently help push
it over the spam threshold:
Is this the MEDS rule thread that you refer to?
http://www.nabble.com/-NEW-SPAM-FLOOD--www.shopXX.net-td24139422.html
That ruleset has bounced around seve
Is this the MEDS rule thread that you refer to?
http://www.nabble.com/-NEW-SPAM-FLOOD--www.shopXX.net-td24139422.html
Skip
John Wilcock wrote:
>
> Le 06/07/2009 14:22, RW a écrit :
>>> http://pelorus.org/spammy.txt
>>> >
>>
>> That's odd, I get MISSING_DATE, MISSING_HB_SEP, MISSING_HEADERS,
>
OK, Now I also get very different results, which seems to be inline with what
you two have seen.
http://pelorus.org/fourth_pass_log.txt
And while there are some small differences between the sub-tests that hit,
the overall score is still zero for my installation. So perhaps I just need
to tweak
Has anybody considered revising the Bayes expiration logic? Maybe it's just
our data that's weird, but the built-in expiration logic doesn't seem to work
very well for us. Here are my observations:
There's no point in checking anything older than oldest_atime. For this value
and older, zero
My logwatch add-in has now been modified to work entirely from spamd log
messages, installed, tested and is now running as part of my standard
logwatch setup. It is available for download from:
http://www.gregorie.org/computing/spamscan/spamscan.tgz
On Mon, 2009-07-06 at 20:55 +0200, Benny Pedersen wrote:
> On Mon, July 6, 2009 20:25, rich...@buzzhost.co.uk wrote:
>
> Received-SPF: unknown (nike.apache.org: error in processing during lookup of
> rich...@buzzhost.co.uk)
>
> priseless
>
That should read 'priceless' - I hate to be the pedant,
On Mon, July 6, 2009 20:25, rich...@buzzhost.co.uk wrote:
Received-SPF: unknown (nike.apache.org: error in processing during lookup of
rich...@buzzhost.co.uk)
priseless
--
xpoint
At 11:00 06-07-2009, rich...@buzzhost.co.uk wrote:
Have you handled spam or irate customer getting spam from Constant
Contact?
I prefer not to comment on that.
What do you think about Constant Contact having a white list score in
Spamassassin despite being listed in the multi.uri?
There are
+1 for ending this thread
On Mon, Jul 6, 2009 at 2:25 PM,
rich...@buzzhost.co.uk wrote:
> From:
> Chris Owen
> To:
> rich...@buzzhost.co.uk
> Cc:
> Tara Natanson
> Subject:
> Re:
rich...@buzzhost.co.uk wrote:
On Mon, 2009-07-06 at 10:36 -0700, SM wrote:
At 10:56 05-07-2009, rich...@buzzhost.co.uk wrote:
Well, I can only take you at face value that you are here representing
Constant Contact. If I call up the office switchboard Tara, can I speak
with you there? It's just
From:
Chris Owen
To:
rich...@buzzhost.co.uk
Cc:
Tara Natanson
Subject:
Re: constantcontact.com
Date:
Mon, 6 Jul 2009 13:02:07 -0500
(19:02 BS
On Mon, 2009-07-06 at 10:36 -0700, SM wrote:
> At 10:56 05-07-2009, rich...@buzzhost.co.uk wrote:
> >Well, I can only take you at face value that you are here representing
> >Constant Contact. If I call up the office switchboard Tara, can I speak
> >with you there? It's just I've called up Constant
At 10:56 05-07-2009, rich...@buzzhost.co.uk wrote:
Well, I can only take you at face value that you are here representing
Constant Contact. If I call up the office switchboard Tara, can I speak
with you there? It's just I've called up Constant Contact and hit #9 for
the directory and your name is
Hi,
have any of you tryed going to dnswl.org homepage ?, even tryed to lookup
> the ip ?, got refused submit of new ticket ?
Yes, I went to the site, but didn't try to resolve either of them because I
knew they were already on the list. They now appear to no longer be on the
list. Now I know to
On Mon, 2009-07-06 at 11:00 -0600, J.D. Falk wrote:
> rich...@buzzhost.co.uk wrote:
>
> >> sorry, I am on several private lists. Lists I have been on for 10
> >> years through a few different employers. If I signed up for those
> >> lists with my @constantcontact.com address my employer would own
rich...@buzzhost.co.uk wrote:
sorry, I am on several private lists. Lists I have been on for 10
years through a few different employers. If I signed up for those
lists with my @constantcontact.com address my employer would own that
mail. I don't really think they'd read my mail, but I'm still
On Mon, July 6, 2009 14:59, LuKreme wrote:
> On 5-Jul-2009, at 18:55, MySQL Student wrote:
>>* -4.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/
>
>> What the hell is RECVD_IN_DNSWL_MED and why is it trusted in
>> dnswl.org?
>
> Did you look at the URL?
>
> I put the follo
I AM NOT DEFENDING FREELOTTO.COM, merely discussing the theory behind the
"Certified" service which is queried in the BSP rules in SpamAssassin.
RobertH wrote:
shouldnt you folks know that your customers are spamming before we do?
How can a 3rd party automatically discern whether or not you
On Mon, 6 Jul 2009, John Wilcock wrote:
Le 06/07/2009 14:22, RW a écrit :
> http://pelorus.org/spammy.txt
That's odd, I get MISSING_DATE, MISSING_HB_SEP, MISSING_HEADERS,
MISSING_MID, MISSING_SUBJECT too, even though all the headers are there.
So do I until I get rid of the extraneous car
On 05/07/09 1:56 PM, "rich...@buzzhost.co.uk"
wrote:
> I don't dispute *YOU* don't know MP. I've got a gut feel there will be a
> connection there somewhere. Normally, when spammers are white listed,
> Perone has an interest or a friend some place.
I'm going to chalk this one up to the "Constant
On 03/07/09 3:32 PM, "RobertH" wrote:
> or at least charge them a lot more for abusing your services ;-)
A long time ago, Bonded Sender charged per complaint. We don't operate that
way; we have a declining percentage of acceptable complaint rates for each
volume tier assigned to a customer (
> From: Jonas Eckerman [mailto:jonas_li...@frukt.org]
>
> Rosenbaum, Larry M. wrote:
>
> > It appears that "pdftohtml" is only available as a Windows executable
> (on Sourceforge).
>
> If you want a precompiled executable it seems Windows is the only
> platform, but AFAICS the source code is als
Le 06/07/2009 14:22, RW a écrit :
http://pelorus.org/spammy.txt
>
That's odd, I get MISSING_DATE, MISSING_HB_SEP, MISSING_HEADERS,
MISSING_MID, MISSING_SUBJECT too, even though all the headers are there.
So do I until I get rid of the extraneous carriage return in the
following received lin
On Mon, 6 Jul 2009, RW wrote:
On Sun, 5 Jul 2009 19:24:04 -0700 (PDT)
MrGibbage wrote:
http://pelorus.org/spammy.txt
That's odd, I get MISSING_DATE, MISSING_HB_SEP, MISSING_HEADERS,
MISSING_MID, MISSING_SUBJECT too, even though all the headers are there.
Ditto.
Open a bug and attach the
On 5-Jul-2009, at 18:55, MySQL Student wrote:
* -4.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/
What the hell is RECVD_IN_DNSWL_MED and why is it trusted in
dnswl.org?
Did you look at the URL?
I put the following in local.cf
score RCVD_IN_DNSWL_LOW -1
score RCVD_
On Sun, 5 Jul 2009 19:24:04 -0700 (PDT)
MrGibbage wrote:
>
> I thought I was careful and deleted all the headers that were
> added/altered after passing through my server and onto gmail. And I
> didn't see any erroneous blank lines. Perhaps I didn't do as good as
> I thought. Anyway, I did tr
On Mon, 2009-07-06 at 03:04 -0700, chauhananshul wrote:
> I'm new to linux world can some one please help in understanding .cf &.pm
> files.
> I've used .cf files from http://www.rulesemporium.com i used to copy in
> /usr/share/spamassassin/ & it works but at some sites both .pm & .cf fiels
> are a
> > If you've got any proof of spam from any BSP_TRUSTED IP,
> > please report it to senderscorecertified@abuse.net or via
> > the web form at http://www.returnpath.net/support/ and our
> > compliance team will take appropriate action. Thanks!
On 03.07.09 12:32, RobertH wrote:
> shouldnt y
I'm new to linux world can some one please help in understanding .cf &.pm
files.
I've used .cf files from http://www.rulesemporium.com i used to copy in
/usr/share/spamassassin/ & it works but at some sites both .pm & .cf fiels
are available can some one please guide me wht to do with .pm files ho
I'm new to linux world can some one please help in understanding .cf &.pm
files.
I've used .cf files from http://www.rulesemporium.com i used to copy in
/usr/share/spamassassin/ & it works but at some sites both .pm & .cf fiels
are available can some one please guide me wht to do with .pm files how
37 matches
Mail list logo