Re: New plugin: DecodeShortURLs

2010-10-15 Thread Alex
Hi, > Recently I've been getting a bit of filter-bleed from a bunch of spams > injected via Hotmail/Yahoo that contain shortened URLs e.g. bit.ly/foo > that upon closer inspection would have been rejected with a high score > if the real URL had been used. Can this be made to work with v3.2.5, or

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Bowie Bailey
On 10/15/2010 10:00 AM, Niente0 wrote: > > Yet Another Ninja wrote: >> On 2010-10-15 14:49, Niente0 wrote: >> >> works for me >> >> > After some more tests, it seems to work for me too! I discovered that in my > tests the server added a space after the second quote: "<"(space)< > while in real spa

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Niente0
Yet Another Ninja wrote: > > On 2010-10-15 14:49, Niente0 wrote: > > works for me > > After some more tests, it seems to work for me too! I discovered that in my tests the server added a space after the second quote: "<"(space)< while in real spam it was not present. So here are my 2 new ru

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread John Hardin
On Fri, 15 Oct 2010, Niente0 wrote: header TO1 To:name =~ /\ That probably means the parser has a bug. -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec.orgFALaholic #11174 pgpk -a jhar...@impsec.org key: 0xB8732E79 -- 2D8C 34F4 6411

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread John Hardin
On Fri, 15 Oct 2010, Niente0 wrote: Yet Another Ninja wrote: On 2010-10-15 14:18, Niente0 wrote: Untested: # To: "<" header TO1 To =~ /^\"\<\"\ Thank you! I tested it but it still doesn't work. :-( For testing purposes, I created a fake user in my Outlook address book, with name "<"

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Martin Gregorie
On Fri, 2010-10-15 at 05:18 -0700, Niente0 wrote: > > Yet Another Ninja wrote: > > > > On 2010-10-15 12:58, Niente0 wrote: > > pls post a spam sample on pastebin.com and send the link to the list > > > > Hi, I tried with 3 different browsers but pastebin.com shows only a blank > page after subm

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Yet Another Ninja
On 2010-10-15 14:49, Niente0 wrote: Yet Another Ninja wrote: On 2010-10-15 14:18, Niente0 wrote: Untested: # To: "<" header TO1 To =~ /^\"\<\"\ Thank you! I tested it but it still doesn't work. :-( For testing purposes, I created a fake user in my Outlook address book, with name "<"

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Niente0
Yet Another Ninja wrote: > > On 2010-10-15 14:18, Niente0 wrote: > > Untested: > > # To: "<" > header TO1 To =~ /^\"\<\"\ > Thank you! I tested it but it still doesn't work. :-( For testing purposes, I created a fake user in my Outlook address book, with name "<" and email equal to

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Yet Another Ninja
On 2010-10-15 14:18, Niente0 wrote: Yet Another Ninja wrote: On 2010-10-15 12:58, Niente0 wrote: pls post a spam sample on pastebin.com and send the link to the list Hi, I tried with 3 different browsers but pastebin.com shows only a blank page after submitting text. So I posted it here: ht

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Niente0
Yet Another Ninja wrote: > > On 2010-10-15 12:58, Niente0 wrote: > pls post a spam sample on pastebin.com and send the link to the list > Hi, I tried with 3 different browsers but pastebin.com shows only a blank page after submitting text. So I posted it here: http://snipt.org/koRn/ -- View

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Yet Another Ninja
On 2010-10-15 12:58, Niente0 wrote: Giles Coochey wrote: Have you tried escaping it with \x3c ? Thanks for your suggestion, I tried it now but with no success. Here's my rule: header TO1 To:name =~ /\x3c/i score TO1 100 I have received other "less than" spam j

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Niente0
Giles Coochey wrote: > > > Have you tried escaping it with \x3c ? > > Thanks for your suggestion, I tried it now but with no success. Here's my rule: header TO1 To:name =~ /\x3c/i score TO1 100 I have received other "less than" spam just now. :-( -- View this m

Re: Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Giles Coochey
On 15/10/2010 12:01, Niente0 wrote: Hello all, here's my problem: I'm receiving alot of spam which has a "<" (less than symbol) in the recipient field. For example, I have this in the header: To: "<" I'd need a spamassassin rule that's able to catch this spam, I had no success. The "less than"

Help! Filter spam with "less than" symbol in recipient

2010-10-15 Thread Niente0
Hello all, here's my problem: I'm receiving alot of spam which has a "<" (less than symbol) in the recipient field. For example, I have this in the header: To: "<" I'd need a spamassassin rule that's able to catch this spam, I had no success. The "less than" symbol seems to be uncatchable! (even

Re: RAZOR2 and SpamAssassin version or configuration

2010-10-15 Thread Giles Coochey
On 15/10/2010 00:39, Bart Schaefer wrote: We have a couple of mail servers running SpamAssassin. One is stock CentOS5 and therefore running SA 3.2.4. The other is a test platform running SA 3.3.1 (installed from rpmforge in case that matters). Both have the latest sa-update configurations for