Re: russian spam with only two lines in the body

2010-08-25 Thread Karsten Bräckelmann
On Wed, 2010-08-25 at 21:31 +0100, Martin Gregorie wrote: > On Wed, 2010-08-25 at 21:16 +0200, Karsten Bräckelmann wrote: > > http://pastebin.com/JAEuCSnC > > > Uhm, that's not typical spam. It's actually forum / blog comment spam, > > helpfully and automatically converted to a mail. > > Sure, bu

Samples? (was: Re: Sought False Positives)

2010-08-25 Thread Karsten Bräckelmann
On Fri, 2010-08-20 at 17:47 +0200, Karsten Bräckelmann wrote: > On Fri, 2010-08-20 at 17:12 +0200, Jan P. Kessler wrote: > > false-positives hitting on the rules JM_SOUGHT_1 and JM_SOUGHT_2. > > Unfortunaley I can not give examples as these messages contain > > confidental customer data (assurance

Re: russian spam with only two lines in the body

2010-08-25 Thread Martin Gregorie
On Wed, 2010-08-25 at 21:16 +0200, Karsten Bräckelmann wrote: > http://pastebin.com/JAEuCSnC > Uhm, that's not typical spam. It's actually forum / blog comment spam, > helpfully and automatically converted to a mail. > Sure, but its off topic and, however ineptly, its certainly advertising. That m

Re: russian spam with only two lines in the body

2010-08-25 Thread Karsten Bräckelmann
On Wed, 2010-08-25 at 01:06 +0300, Ibrahim Harrani wrote: > Recently, I am getting russian spam like at > http://pastebin.com/Yf3AusJ4 > > All of their characteristic is that there are two line in the body. > First is a sentence, second is url ending with .ru/ Hmm, I don't seem to have any proble

Re: russian spam with only two lines in the body

2010-08-25 Thread Karsten Bräckelmann
On Wed, 2010-08-25 at 19:56 +0100, Martin Gregorie wrote: > > > BTW, I'm now starting to see spam that doesn't contain any URIs or other > > > ways of identifying a source for the goods being advertised. So far its > > > been for examination aids and footware and has all been sent via a > > > maili

Re: russian spam with only two lines in the body

2010-08-25 Thread Martin Gregorie
On Wed, 2010-08-25 at 20:04 +0200, Benny Pedersen wrote: > On ons 25 aug 2010 13:37:57 CEST, Martin Gregorie wrote > > BTW, I'm now starting to see spam that doesn't contain any URIs or other > > ways of identifying a source for the goods being advertised. So far its > > been for examination aids a

Re: How the hell barracuda behaves?

2010-08-25 Thread Benny Pedersen
On ons 25 aug 2010 17:52:18 CEST, Matus UHLAR - fantomas wrote So I must not be the only one tired of this. there are more of us, I just didn't want to complain in the public, yet. and now we did :( -- xpoint http://www.unicom.com/pw/reply-to-harmful.html

Re: How the hell barracuda behaves?

2010-08-25 Thread Matus UHLAR - fantomas
>> no Perkel, everthing posted is not necessarily acceptable, helpful and/or >> relevant. >> >> especially when spamming the list for your tarbaby stuff, free or not. On 25.08.10 09:08, wrote: > So I must not be the only one tired of this. there are more of us, I just didn't want to complain

RE: After upgrade the SA to 3.3.1, Mail scanning stop working partially

2010-08-25 Thread Karsten Bräckelmann
On Wed, 2010-08-25 at 08:10 +0530, Suhag Desai wrote: > Aug 25 08:07:12 spd spamd[3776]: spamd: clean message (4.0/5.0) for clamav:46 > in 10.7 seconds, 2792 bytes. > Aug 25 08:07:12 spd spamd[3776]: spamd: result: . 4 - > ALL_TRUSTED,HTML_MESSAGE,LOCAL_DEMONSTRATION_RULE,MIME_HTML_MOSTLY,TVD_SPA

Re: How the hell barracuda behaves?

2010-08-25 Thread QQQQ
no Perkel, everthing posted is not necessarily acceptable, helpful and/or relevant. especially when spamming the list for your tarbaby stuff, free or not. So I must not be the only one tired of this. Q

Re: Whitelist question

2010-08-25 Thread Alex
[just realized my response was inadvertently sent directly to Matt, sorry] Hi, >> What am I missing? Shouldn't there be an "ip=" entry for >> smtp01.example.com? I have trusted_networks defined in local.cf, and >> it includes the smtp01.example.com server. > > Um, no. smtp01.example.com is your o

Re: Help installing spamassassin on ubuntu

2010-08-25 Thread Martin Gregorie
On Wed, 2010-08-25 at 16:00 +0530, Sabiha Fathima wrote: > Hi All, > > Am trying to install spamassassin on unbuntu without a smtp running on > it. > Is it mandatory to have a smtp server to run spam assassin. > No. I run two copies of SA - one on my main mail server for normal production mail s

Re: query own sbl

2010-08-25 Thread Yet Another Ninja
On 2010-08-25 13:44, Christian Scholz wrote: Hello together, I've set up my own sbl and want spamassassin to check this rbl but it doesn't work. My rule is IN_SBL_OOS_ORG rbleval:check_rbl('oos', 'sbl.o-o-s.de.') describe IN_SBL_OOS_ORG Received via a blocked site in sbl.o-o-s.de tflags IN_S

Re: Problem scanning mails with Spam Assassin on Postfix

2010-08-25 Thread Dominic Benson
On 25/08/10 12:22, Cimoni Enwis Ogwujiakwu wrote: Hello I have a spam assassin server setup on postfix and I can scan mails from mail clients configured with the server as the /smtp outgoing settings /but when I change the settings to smtp.mail.yahoo.com the

query own sbl

2010-08-25 Thread Christian Scholz
Hello together, I've set up my own sbl and want spamassassin to check this rbl but it doesn't work. My rule is IN_SBL_OOS_ORG rbleval:check_rbl('oos', 'sbl.o-o-s.de.') describe IN_SBL_OOS_ORG Received via a blocked site in sbl.o-o-s.de tflags IN_SBL_OOS_ORG net score IN_SBL_OOS_ORG 5.0 is th

Re: russian spam with only two lines in the body

2010-08-25 Thread Martin Gregorie
On Wed, 2010-08-25 at 14:29 +1200, Jason Haar wrote: > On 08/25/2010 10:06 AM, Ibrahim Harrani wrote: > > Hi, > > > > Recently, I am getting russian spam like at http://pastebin.com/Yf3AusJ4 > > > > All of their characteristic is that there are two line in the body. > > First is a sentence, second

Problem scanning mails with Spam Assassin on Postfix

2010-08-25 Thread Cimoni Enwis Ogwujiakwu
Hello I have a spam assassin server setup on postfix and I can scan mails from mail clients configured with the server as the smtp outgoing settings but when I change the settings to smtp.mail.yahoo.com the mail is sent without being scanned by the server and there is no log of the

Re: Help installing spamassassin on ubuntu

2010-08-25 Thread Dominic Benson
Hi On 25/08/10 11:30, Sabiha Fathima wrote: Hi All, Am trying to install spamassassin on unbuntu without a smtp running on it. Is it mandatory to have a smtp server to run spam assassin. No - on Ubuntu you can just apt-get install spamassassin spamc. I want to install these modules and ca

Help installing spamassassin on ubuntu

2010-08-25 Thread Sabiha Fathima
Hi All, Am trying to install spamassassin on unbuntu without a smtp running on it. Is it mandatory to have a smtp server to run spam assassin. I want to install these modules and call specific subroutine to check my message for spammy content and give me the results . the calls will be made from