From: "Christian Brel"
Sent: Wednesday, 2009/December/30 12:33
On Wed, 30 Dec 2009 10:47:26 -0800
"Bob O'Brien" wrote:
jdow wrote:
> Guys, spam here kicked up 100% very recently, about the time I
> tweaked "Richard". And it bears a Leo Kuvayev sort of stamp to
> it - porn, pharmaceuticals,
Warren Togami wrote:
Apache SpamAssassin 3.3.0-rc1 is now available for testing.
So far, so good on CentOS 5.4 64-bit, perl 5.10.0, MIMEDefang-2.68-BETA-3.
On Wed, 30 Dec 2009 10:47:26 -0800
"Bob O'Brien" wrote:
> jdow wrote:
> > Guys, spam here kicked up 100% very recently, about the time I
> > tweaked "Richard". And it bears a Leo Kuvayev sort of stamp to
> > it - porn, pharmaceuticals, etc.
> >
>
>
> Watching spam patterns can be very intere
jdow wrote:
Guys, spam here kicked up 100% very recently, about the time I
tweaked "Richard". And it bears a Leo Kuvayev sort of stamp to
it - porn, pharmaceuticals, etc.
Watching spam patterns can be very interesting.
Thinking that you know what one single stand-out data point means
is al
Jason Bertoch wrote:
Warren Togami wrote:
Apache SpamAssassin 3.3.0-rc1 is now available for testing.
Builds and lints fine on CentOS 5.4 64-bit with perl 5.10.0 and latest
required modules and system updates. However, I call SA through
MIMEDefang and its slaves die immediately upon proces
On Wed, 30 Dec 2009, Bowie Bailey wrote:
m{https?://[a-z]{1,30}\.[a-z]{1,30}-[a-z]{1,30}\.(com|ru|cn)/\d{4}/}i
You might want to reconsider using {} as RE delimiters if the RE itself
contains {} elements. If it works, fine, but it's very visually confusing.
--
John Hardin KA7OHZ
Bowie Bailey wrote:
>
> JPP100 wrote:
>>
>> 1. English URL
>> 2. Double words separated with a '-'
>> 3. Rarely a 'www' at the front - usually 4 or more random letters
>> 4. Always (for now) 4 numbers at the end
>> Example:
>> http://llhti.tour-traveled.com/4651/
>>
>> So my rule:
>> # hotmail d
> So my rule:
> # hotmail drug spam
> uri MY_HOTMAIL_SPAM
> m{https?://{1,30}\.{1,30}\.(com|ru|cn)/[0-9][0-9][0-9][0-9]/i}
> describe MY_HOTMAIL_SPAM Druggy hotmail.com links
> score MY_HOTMAIL_SPAM 5.0
>
> And running emails through it using -D, it does not hit it as far a
JPP100 wrote:
>
> 1. English URL
> 2. Double words separated with a '-'
> 3. Rarely a 'www' at the front - usually 4 or more random letters
> 4. Always (for now) 4 numbers at the end
> Example:
> http://llhti.tour-traveled.com/4651/
>
> So my rule:
> # hotmail drug spam
> uri MY_HOTMAIL
Hey Folks,
We are using SA 3.2.5, MailScanner (Latest) and ClamAV on a Fedora 10
server.
This question is in regards to the latest round of our favorite Hotmail
SPAM...
Trying to write a rule in local.cf to trap them as 99.999% of them have
these characteristics in the URLs in the emails (an
+1 on opening a bug, the sooner that happens the sooner we can get the
fix into the next release ;)
Thanks Henrik, that looks promising (if a little crazy).
On Wed, Dec 30, 2009 at 15:20, Henrik K wrote:
> On Wed, Dec 30, 2009 at 09:52:50AM -0500, Rosenbaum, Larry M. wrote:
>> I have just recent
On Wed, Dec 30, 2009 at 09:52:50AM -0500, Rosenbaum, Larry M. wrote:
> I have just recently installed SA v3.3.0-rc1 on Solaris 10. I have
> discovered that in order for syslog logging to work, I have to start spamd
> with the switch "--syslog-socket=native". It won't work if I set it to
> "uni
Warren Togami wrote:
Apache SpamAssassin 3.3.0-rc1 is now available for testing.
Builds and lints fine on CentOS 5.4 64-bit with perl 5.10.0 and latest
required modules and system updates. However, I call SA through
MIMEDefang and its slaves die immediately upon processing a message.
Movin
I have just recently installed SA v3.3.0-rc1 on Solaris 10. I have discovered
that in order for syslog logging to work, I have to start spamd with the switch
"--syslog-socket=native". It won't work if I set it to "unix" or "inet" or if
I omit the switch entirely. As this is my first time runn
On 12/30/2009 07:18 AM, William Taylor wrote:
Looking for an RBL or something to determine if a given IP is coming from a web
proxy.
Trying to cut down on spam coming from exploited users sites.
Would like to do some logging and see if this helps.
Thanks,
William
i like sorbs, despite a
You can take me back off your lists. (Your scores these days are
pathetic, but, invariably high enough to get kicked out as spam.
So all you're doing is filling my spam bucket with fine samples
of your more pathetic work.)
{^_-}
Guys, spam here kicked up 100% very recently, about the time I
twea
16 matches
Mail list logo
