Re: careful on your clicks: at least one hijacked server: Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

I'm not sure that's accurate. Did you get that link from our download page today? yes, I did. The site seems to still be an Apache mirror, it just hasn't updated yet, AFAICS. then someone needs to unauthorize them. its a parking page, someone lost that hostname and someone else

Re: Default rulesets updating daily

On 19/03/2010 8:34 PM, Chris wrote: > SA3.3.0, just a general question, I've noticed that over the past six > days that during my 01:11 sa-update cronjob that the complete default > rulesets are being updated. The file names are in fact changing, > ie..922182.tar.gz, 922507.tar.gz and so forth, jus

Re: careful on your clicks: at least one hijacked server: Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

On 19/03/2010 2:34 PM, Michael Scheidell wrote: > On 3/19/10 12:31 PM, Justin Mason wrote: >> Release Notes -- Apache SpamAssassin -- Version 3.3.1 >> >> >> > I clicked on the download and got redirected (hijacked)? to this site: > > http://www.takeyellow.com/apachemirror/spamassassin/source/

Default rulesets updating daily

SA3.3.0, just a general question, I've noticed that over the past six days that during my 01:11 sa-update cronjob that the complete default rulesets are being updated. The file names are in fact changing, ie..922182.tar.gz, 922507.tar.gz and so forth, just curious as to why the daily changes when I

Social Networking Sites and Mailing Lists (was: LinkedIn Spam)

On Fri, 2010-03-19 at 15:11 -0700, Chris Richman wrote: > Thanks, Michelle, I've added those to our suppression list, too. Oddly > enough, a user had actually confirmed gtk-l...@gnome.org, so I removed > it from his account. OK, I successfully managed to shut myself up and just move along a few t

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

Michelle Konzack wrote: I could even say "Block my domain " but what is IF one of my employees want to use LinedIn, Facebook or Twitter? This is exactly what I'm asking for. If my users choose to sign up, fine, let them use it and then /those/ addresses can receive invitations, or any cra

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

Hello Chris, Am 2010-03-19 15:20:40, hacktest Du folgendes herunter: > Obviously we'd prefer that nobody filter our mail, but, like I said > before, we recognize that it only hurts us to send mail to people who > don't want it. We'll continue taking steps to prevent mail from gong to > people who

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

Hello Chris, Am 2010-03-19 15:11:37, hacktest Du folgendes herunter: > Thanks, Michelle, I've added those to our suppression list, too. Oddly > enough, a user had actually confirmed gtk-l...@gnome.org, so I removed > it from his account. OK, > If anyone knows of a reliable way to identify maili

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

Hi On Fri, Mar 19, 2010 at 11:09 PM, Jonathan Nichols wrote: > > On Mar 19, 2010, at 11:31 AM, Justin Mason wrote: > >> Release Notes -- Apache SpamAssassin -- Version 3.3.1 >> >> > > The Ubuntu package for hardy is *way* out of date and seemingly stuck at > 3.2.5, Is it safe to update via CPAN

RE: [LinkedIn Spam] Re: unwhitelist from_dkim?

We've got a project planned for Q2 that might help with this. We currently segregate some of our mail streams by sending IP. Unfortunately, too many types of messages (including invitations) are still sent from the "catch-all" IPs. With this project, we should have all of the major mail streams c

RE: [LinkedIn Spam] Re: unwhitelist from_dkim?

Thanks, Michelle, I've added those to our suppression list, too. Oddly enough, a user had actually confirmed gtk-l...@gnome.org, so I removed it from his account. If anyone knows of a reliable way to identify mailing list addresses, I'd love to know so we could block mail to them. Currently, we j

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

On Mar 19, 2010, at 11:31 AM, Justin Mason wrote: > Release Notes -- Apache SpamAssassin -- Version 3.3.1 > > The Ubuntu package for hardy is *way* out of date and seemingly stuck at 3.2.5, Is it safe to update via CPAN and still retain compatibility with apt-get/aptitude? Cheers!

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

Hello Chris, Am 2010-03-19 11:06:08, hacktest Du folgendes herunter: > Hi, Michelle. I've added those domains to our suppression list so they > shouldn't receive email from us anymore. I wasn't able to add gnome.org > because we have several users with confirmed gnome.org email addresses. The m

Re: Sa-update

On Fri, 19 Mar 2010 11:17:21 -0400 Kaleb Hosie wrote: > The only configuration I've changed since the install was the > "report_safe" and "trusted_networks" option. Is there something else > I need to configure to fine tune SA? You need to set internal_networks. You can set only internal_netwo

Re: Bayes and Plugin Tokens

On Thu, 18 Mar 2010 22:32:45 -0400 Matt Kettler wrote: > On 3/17/2010 8:32 PM, RW wrote: > > The ASN and RelayCountry plugins are supposed to add extra tokens to > > Bayes. However, I don't see any evidence that this is happening > > (in 3.3.0). In a test message I see: > > > > bayes: header to

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

On 3/19/10 4:05 PM, Jim Knuth wrote: /usr/bin/perl -MCPAN -e shell and then install Mail::SpamAssassin noop. obviously the mirror(s) that I am pointing to are not updated. -- Michael Scheidell, CTO Phone: 561-999-5000, x 1259 > *| *SECNAP Network Security Corporation * Certified SNO

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

schrieb Michael Scheidell: On 3/19/10 2:37 PM, Jim Knuth wrote: schrieb Michael Scheidell: On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz.md5 error 404 the requeste

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

On 3/19/10 2:37 PM, Jim Knuth wrote: schrieb Michael Scheidell: On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz.md5 error 404 the requested file is not found on this

if can (class:method)

is this the right syntax? (I heard that if you don't have the commercial version of DCC, you get link and debug warnings) can someone without the commercial version of DCC see if this stops the debug warnings? # DCC ifplugin Mail::SpamAssassin::Plugin::DCC score DCC_CHECK0 1.1 0

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

schrieb Michael Scheidell: On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz.md5 error 404 the requested file is not found on this server. use CPAN, everything is ok.

careful on your clicks: at least one hijacked server: Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 I clicked on the download and got redirected (hijacked)? to this site: http://www.takeyellow.com/apachemirror/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz TAKEYELLOW IS NO LONGER UNDER C

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

On 2010/03/19 2:24 PM, Michael Scheidell wrote: On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz.md5 error 404 the requested file is not found on this server. I have

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

Chris Richman wrote: Hi, Michelle. I've added those domains to our suppression list so they shouldn't receive email from us anymore. I wasn't able to add gnome.org because we have several users with confirmed gnome.org email addresses. I would like to recommend that you find a way to segre

Re: ANNOUNCE: Apache SpamAssassin 3.3.1 available

On 3/19/10 12:31 PM, Justin Mason wrote: Release Notes -- Apache SpamAssassin -- Version 3.3.1 http://www.apache.org/dist/spamassassin/source/Mail-SpamAssassin-3.3.1.tar.gz.md5 error 404 the requested file is not found on this server. -- Michael Scheidell, CTO Phone: 561-999-5000, x 1259

RE: [LinkedIn Spam] Re: unwhitelist from_dkim?

Hi, Michelle. I've added those domains to our suppression list so they shouldn't receive email from us anymore. I wasn't able to add gnome.org because we have several users with confirmed gnome.org email addresses. Chris -Original Message- From: Michelle Konzack [mailto:linux4miche...@

Re: Installation error on Windows Server 2008 / 64-bit

On 3/19/2010 5:25 AM, weirdbeardmt wrote: I'm trying to install SA 3.30 on W2k8 64-bit. I have ActivePerl 5.10.1 with dmake 4.12 (since nmake won't run on 64-bit). I am quite new to this so sorry if I'm asking something stupidly obvious. I've installed Net-DNS, IP-Country, Mail-SPF, Error, XML::

Re: Sa-update

Hi, See this link for a way to train bayes, when using exchange. mvh On Fri, Mar 19, 2010 at 4:58 PM, Kaleb Hosie wrote: > Bowie Bailey wrote: >>The main problem is the BAYES_00 rule.  Apparently, your bayes db thinks this >>email is definitely not spam.  Are you sure it is being trained prope

Re: Sa-update

On Friday 19 March 2010 16:17:21 Kaleb Hosie wrote: > Is there a way to tell whether sa-update downloaded the latest definitions > correctly? Yes: sa-update -v Mark

Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

Have also tried updated version of nmake that came with Visual Studio 2008 (v9.00 ish..) and still same error. On Fri, Mar 19, 2010 at 4:14 PM, Matt Thornton wrote: > OK this is so bizarre. Have just installed everything on my local > workstation (Win XP) - and I get the same errors, from both

ANNOUNCE: Apache SpamAssassin 3.3.1 available

Release Notes -- Apache SpamAssassin -- Version 3.3.1 Introduction This is a minor release, adding a new URIBL network rule (URIBL_DBL_SPAM, for the Spamhaus DBL). Downloading and availability Downloads are available from: http://spamassassin.apache

RE: Sa-update

Bowie Bailey wrote: >The main problem is the BAYES_00 rule. Apparently, your bayes db thinks this >email is definitely not spam. Are you sure it is being trained properly? > >Without any bayes hit, this would have scored 4.8. If you can get bayes to >score it as spam, you'll have it. > >-- >Bo

Microsoft Forefront Server Security forwarded attachment

The body from the message "RE: unwhitelist from_dkim?", originally sent to you by Chris Richman (crich...@linkedin.com), has been forwarded to you from the Microsoft Forefront Server Security Quarantine area. This message body may have been re-scanned by Microsoft Forefront Server Security and

Microsoft Forefront Server Security forwarded attachment

The body from the message "RE: unwhitelist from_dkim?", originally sent to you by Chris Richman (crich...@linkedin.com), has been forwarded to you from the Microsoft Forefront Server Security Quarantine area. This message body may have been re-scanned by Microsoft Forefront Server Security and

Microsoft Forefront Server Security forwarded attachment

The body from the message "RE: unwhitelist from_dkim?", originally sent to you by Chris Richman (crich...@linkedin.com), has been forwarded to you from the Microsoft Forefront Server Security Quarantine area. This message body may have been re-scanned by Microsoft Forefront Server Security and

Re: Sa-update

Kaleb Hosie wrote: > I've just finished updating my production server to SpamAssassin 3.3.0 and I > immediately ran sa-update to get the latest rule set for SpamAssassin. Is > there a way to tell whether sa-update downloaded the latest definitions > correctly? > > A user has just emailed me with

Re: Pathological messages causing long scan times

Gary Smith wrote: I'm not seeing your 130 sec CPU issue on my end. Are as mentioned by Matt, are you running into some DNS issue? These are stock rule + other house rules in place. I'm not getting any type of DNS hit, this might because you modified the headers. Either way, 5 seconds for m

Sa-update

I've just finished updating my production server to SpamAssassin 3.3.0 and I immediately ran sa-update to get the latest rule set for SpamAssassin. Is there a way to tell whether sa-update downloaded the latest definitions correctly? A user has just emailed me with some SPAM that was sent about

Re: Cyrillic text isn't matched when quoted-printable (?!)

On fre 19 mar 2010 14:16:50 CET, John Hardin wrote Save another version of your rules encoded in windows-1251? spamassassin -D generic -t msg it converts here, but to what ? -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

Re: what does this dkim whitelist rule do?

Michael Scheidell wrote: found in dns: 0.3.3.updates.spamassassin.org => 924671 60_whitelist_dkim.cf:def_whitelist_from_dkim *...@*paypal.com I think I would understand def_whitelist_from_dkim *...@*paypal.com but what does the whitespace do? will it whitelist anything (any dom

Re: users Digest 19 Mar 2010 11:56:42 -0000 Issue 3121

On 10-03-19 7:56 AM, "users-digest-h...@spamassassin.apache.org" wrote: > > (why would you enter such things as this since neither facebook not > linkedin have any way to stop spamming you?.. no, they don't. all 500MM > people on facebook or linkedin can spam you, and you have to remove > them,

Re: bayes, numbers of tokens and performance

It doesn't really work that way. Bayes is just one part of the picture and in order to get good results you have to turn the full toolkit loose on the problem; I'm not sure Bayes by itself should be expected to achieve 95% recognition anyway. The main flaw in your current plan is that once you

Re: what does this dkim whitelist rule do?

Michael, > found in dns: 0.3.3.updates.spamassassin.org => 924671 > 60_whitelist_dkim.cf:def_whitelist_from_dkim *...@* paypal.com > > I think I would understand def_whitelist_from_dkim *...@*paypal.com but > what does the whitespace do? $ man Mail::SpamAssassin::Plugin::DKIM whitelist_fro

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

Hello Michael, and of course "Chris Richman" which I have added to show him a real live example of LinkedIn sSpam on mailinglists. Am 2010-03-19 09:25:10, hacktest Du folgendes herunter: > you want a list of 237,456 email addresses? > I think it is just easier if I blacklist linkedin. > > I have

what does this dkim whitelist rule do?

found in dns: 0.3.3.updates.spamassassin.org => 924671 60_whitelist_dkim.cf:def_whitelist_from_dkim *...@*paypal.com I think I would understand def_whitelist_from_dkim *...@*paypal.com but what does the whitespace do? will it whitelist anything (any domain) if the signer is payp

Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

Hmm that's strange, I had no problems doing this on a clean W2k8. Did you previously installed any other perl (ActivePerl, Strawberry Perl)? What does it says if you try to build on your Win XP? Daniel Von: Matt Thornton [mailto:weirdbe...@gmail.com] Gesendet: Freitag, 19. März 2010 15:02 An: Da

Re: Yahoo/URL spam

On Thu, 18 Mar 2010, Ned Slider wrote: If that's not an option, how about a meta rule for FROM_YAHOO and __HAS_ANY_URI (this rule exists in SA). Lots of ham may contain a URI, but how much ham contains ONLY a URI? Rough outline of rule, untested. rawbody __BODY_ONLY_URI /^[^a-z]{0,10}(

Re: [SpamAssassin] Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

I tried with WinRAR - admittedly i'm extracting on 32bit WinXP then moving over to W2k8, but still same error. On Fri, Mar 19, 2010 at 1:49 PM, Daniel Lemke wrote: > Try another Extract Tool (WinRar worked well for me). I’ve seen a few > tools that have serious problems extracting those files. >

Re: Cyrillic text isn't matched when quoted-printable (?!)

John Hardin wrote: On Fri, 19 Mar 2010, Wolfgang Zeikat wrote: I have written some body rules to catch cyrillic text, using a utf-8 aware editor. They work fine in mails with Content-Type: text/html; charset=UTF-8 They do not catch the same strings in mails like Content-Type: text/plain; char

AW: [SpamAssassin] Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

Try another Extract Tool (WinRar worked well for me). I've seen a few tools that have serious problems extracting those files. Maybe yours just cuts some linefeeds or so. Daniel Von: Matt Thornton [mailto:weirdbe...@gmail.com] Gesendet: Freitag, 19. März 2010 14:31 An: Daniel Lemke Cc: users@spa

Re: unwhitelist from_dkim?

Michael, > done, lets hope we can get it into 3.3.1 so I don't have to patch it. > Thanks! The 3.3.1 release procedure freight train has already left a few days ago, so you'll have to patch it. I expect it to be rolled into 3.3.2. M

Re: unwhitelist from_dkim?

On 3/18/10 9:00 PM, Mark Martinec wrote: Should have been, but it was never implemented. Here is a patch to implement it (against 3.3.0 or 3.3.1 or trunk). Please open a feature request so that it can be properly integrated into the next version. done, lets hope we can get it into 3.3.1 s

Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

Sorry, I should be clearer, I see that error when I run nmake (not nmake install). On Fri, Mar 19, 2010 at 1:20 PM, Matt Thornton wrote: > HI Daniel. Thanks a lot. Indeed, Nmake does work (it's the extractor that > says it doesn't work...!) > > Anyway, I put NMAKE.EXE and the NMAKE.ERR in /perl/

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

On 3/19/10 8:33 AM, Greg Troxel wrote: Am 2010-03-18 14:26:31, schrieb Chris Richman: Hi, Michael. If there is an email address that you'd like to never receive email from LinkedIn, let me know and I can add it to our suppression list. Sorry for the troubles. you want a

Re: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

HI Daniel. Thanks a lot. Indeed, Nmake does work (it's the extractor that says it doesn't work...!) Anyway, I put NMAKE.EXE and the NMAKE.ERR in /perl/bin, regenerated makefile and ran it: new error :( Microsoft (R) Program Maintenance Utility Version 1.50 Copyright (c) Microsoft Corp 1988-94.

Re: Cyrillic text isn't matched when quoted-printable (?!)

On Fri, 19 Mar 2010, Wolfgang Zeikat wrote: I have written some body rules to catch cyrillic text, using a utf-8 aware editor. They work fine in mails with Content-Type: text/html; charset=UTF-8 They do not catch the same strings in mails like Content-Type: text/plain; charset=windows-1251 S

AW: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

Just tested, definitely running under w2k8 x64, this must be another problem. Where do you have your nmake from? Try this: http://download.microsoft.com/download/vc15/patch/1.52/w95/en-us/nmake15.exe Daniel -Ursprüngliche Nachricht- Von: weirdbeardmt [mailto:weirdbe...@gmail.com] Gesende

AW: [SpamAssassin] Installation error on Windows Server 2008 / 64-bit

Nmake is not running on 64-bit? Our 2008 x64 is just busy but on my windows 7 x64 it's working fine. Does it report an error? For dmake I had similar issues while building the source, nmake works much better for me, so I suggest you should try that first. Daniel -Ursprüngliche Nachricht---

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

Michelle Konzack writes: > Hello Chris, > > Am 2010-03-18 14:26:31, schrieb Chris Richman: >> Hi, Michael. If there is an email address that you'd like to never >> receive email from LinkedIn, let me know and I can add it to our >> suppression list. >> >> Sorry for the troubles. > > Is this a

Installation error on Windows Server 2008 / 64-bit

Hi I'm trying to install SA 3.30 on W2k8 64-bit. I have ActivePerl 5.10.1 with dmake 4.12 (since nmake won't run on 64-bit). I am quite new to this so sorry if I'm asking something stupidly obvious. I've installed Net-DNS, IP-Country, Mail-SPF, Error, XML::Writer and NetAddr-IP. Creating the m

Re: [LinkedIn Spam] Re: unwhitelist from_dkim?

pgpbkzDGoM3Fr.pgp Description: PGP signature

Re: bayes, numbers of tokens and performance

> On 2010-03-18 16:36, tonjg wrote: >> update: after doing some reading on google I found init.pre and added: >> loadplugin Mail::SpamAssassin::Plugin::Razor2 >> and >> loadplugin Mail::SpamAssassin::Plugin::Pyzor >> and restarted spamassassin. On 18.03.10 16:44, Yet Another Ninja wrote: >