Latest 419 variant?

2009-12-22 Thread John Hardin
Just saw this email posted to a forum: Hey, {name withheld}, I am emailing to you for very important information about your life. There is secret information that has a lot to do with your life. I came across this secret accidentally. There is a group of secret cult members mixed with as

Tracing cf file?

2009-12-22 Thread Alex
Hi, I have a config file of rules that I have created and pulled from other sources, which contains several ifplugin/else statements. Is it possible to trace each line of the file to make sure the conditionals are being met and the rules are actually part of the rulebase without having to pass an

Re: The other side of whitelists - arbitrary blacklists

2009-12-22 Thread mouss
jdow a écrit : > At least one well respected ninja sort from this list is also a > volunteer SANS Internet Storm Cellar operator. These folks do not seem > to be in the least "inexperienced" in the ways of malware and malware > delivery. That is why I take that diary entry at face value. > maybe

PROPOSED: Apache SpamAssassin 3.3.0-rc1.proposed2

2009-12-22 Thread Warren Togami
Changes since rc1.proposed1: - spamc actually works without blackholing all mail. Oops! - some announcement text updates This will be released if we go three days without an objection as per build/README procedure. At that point these archives will be renamed to "rc1" and the announcements wil

Re: The other side of whitelists - arbitrary blacklists

2009-12-22 Thread Michael Scheidell
On 12/22/09 2:49 PM, jdow wrote: I agree he could have included more information than he did without giving away names involved. One piece of wording suggests he is an admin at a box or rack rental place such as rackspace rather than a wire rental place; and, it's customers are meeting with t

Re: The other side of whitelists - arbitrary blacklists

2009-12-22 Thread jdow
From: "mouss" Sent: Monday, 2009/December/21 15:47 jdow a écrit : http://isc.sans.org/diary.html?storyid=7780 It can be quite frustrating to run an ISP and comply with the often arbitrary, strange, and I suspect contradictory demands of the likes of SORBS and Trend Micro. An ISP Abuse handle

Re: FP on blacklist hostkarma

2009-12-22 Thread Michael Monnerie
On Dienstag, 15. Dezember 2009 Marc Perkel wrote: > Get a modern email client. While I *can* read HTML with my client, I set *text* to be the default view, as it's usually more readable. It's really a very simple setting to send at least *both* html *and* text. I'd prefer text only, to save th

Re: Bug in Hostkarma black list found

2009-12-22 Thread Michael Monnerie
On Mittwoch, 16. Dezember 2009 Marc Perkel wrote: > I found a bug in the way my Hostkarna blacklist generates the list > which led to some false positives. There are servers that look like > spammers sometimes but lomg term data and white listing and nobl > listing was supposed to keep these ser

Re: Recommended version of re2c?

2009-12-22 Thread Kai Schaetzl
Mark Martinec wrote on Tue, 22 Dec 2009 12:00:40 +0100: > Just stick to the latest, when in doubt. > The 0.13.5 works fine, it fixes some segfaults over previous versions. Runs here as well. With 3.2.5 and with 3.3.0. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Servi

Re: ABORT PROPOSED: Apache SpamAssassin 3.3.0-rc1.proposed1

2009-12-22 Thread Mark Martinec
On Sunday December 20 2009 15:31:19 Kai Schaetzl wrote: > Maybe a suggestion for the section COMPATIBILITY WITH 3.2.5. > Mention that the FreeMail plugin is now included, so needs to be removed > from older config. It's mentioned as a new plugin in the middle of the > release notes, but as this plu

Re: 3.3.0-beta1: What is wrong with my usage of SYSCONFDIR

2009-12-22 Thread Justin Mason
hi -- I think this is harmless. but it is definitely ugly. can you open a bug in the bugzilla for this? On Wed, Dec 16, 2009 at 18:38, Jens Schleusener wrote: > Hi, > > to install Mail-SpamAssassin SVN versions (and now Mail-SpamAssassin > 3.3.0-beta1) I use the command > >  perl Makefile.PL PR

Re: Recommended version of re2c?

2009-12-22 Thread Mark Martinec
On Monday December 21 2009 03:58:19 Rosenbaum, Larry M. wrote: > What is the recommended version of re2c to use with SpamAssassin v3.3.0? > What about with v3.2.5? Just stick to the latest, when in doubt. The 0.13.5 works fine, it fixes some segfaults over previous versions. Mark