DNSWL spam reporting script

2011-02-21 Thread Darxus
This is ONLY for use on servers where it is know that there are NO TRUSTED RELAYS. No mail delivered by other IPs you own, or proxies, or mailing list servers. Because this script would report them as the spammers. http://www.chaosreigns.com/dnswl/sa_report/ It's pretty simple, but it has not b

Re: Postfix/Procmail Configuration

2011-02-21 Thread Karsten Bräckelmann
On Mon, 2011-02-21 at 16:36 -0700, Justin Gould wrote: > Karsten, > > Thank you VERY much for your help with this. You were indeed correct, > the second scan initiated by Procmail was scanning the report wrapper > from Postfix and causing the issue. I simply commented out the spamc > call from P

Re: DNSWL spam reporting plugin for spamassassin

2011-02-21 Thread Matthias Leisi
On Mon, Feb 21, 2011 at 8:56 PM, Matthias Leisi wrote: > On Mon, Feb 21, 2011 at 6:56 PM,   wrote: > >> Create account here:  http://www.dnswl.org/registerreporter.pl >> ( http//www.dnswl.org / Report Abuse, Register as Reporter ) > > Just realized that the signup process is broken. Should be fixe

Re: Tonns of russian DOT info spam

2011-02-21 Thread Adam Katz
On 02/20/2011 08:22 AM, Michelle Konzack wrote: > You need to train bayes. Those messages all hit BAYES_00 when they should be somewhat consistently hitting BAYES_80 or higher (after you begin training them). If you are not prepared to d

Re: DNSWL spam reporting plugin for spamassassin

2011-02-21 Thread Matthias Leisi
On Mon, Feb 21, 2011 at 6:56 PM, wrote: > Create account here:  http://www.dnswl.org/registerreporter.pl > ( http//www.dnswl.org / Report Abuse, Register as Reporter ) Just realized that the signup process is broken. Should be fixed later today. Sorry for the inconvenience, -- Matthias

Re: Postfix/Procmail Configuration

2011-02-21 Thread Karsten Bräckelmann
On Mon, 2011-02-21 at 10:57 -0700, Justin Gould wrote: > I'm relatively new to Postfix, SpamAssassin and what not, so this might > be a silly question. I'm on SpamAssassin 3.3.1 on Debian Linux with > Postfix. I've inherited this configuration from a previous > administrator and am still trying t

Postfix/Procmail Configuration

2011-02-21 Thread Justin Gould
I'm relatively new to Postfix, SpamAssassin and what not, so this might be a silly question. I'm on SpamAssassin 3.3.1 on Debian Linux with Postfix. I've inherited this configuration from a previous administrator and am still trying to understand it. To summarize up front, the two issues I

DNSWL spam reporting plugin for spamassassin

2011-02-21 Thread Darxus
http://www.chaosreigns.com/dnswl/dl/DNSWLh.pm Adds DNSWL to the services which receive a report via the command "spamassassin --report" (or -r). (In addition to DCC, Pyzor, Razor, and SpamCop). I've been using it basically unmodified for about a year. Create account here: http://www.dnswl.org/

Re: DNSWL rules downscoring spam

2011-02-21 Thread Karsten Bräckelmann
On Mon, 2011-02-21 at 15:03 +0100, Matthias Leisi wrote: > On Mon, Feb 21, 2011 at 1:54 PM, Michelle Konzack wrote: > > 2.0 RCVD_IN_DNSWL_MED RBL: Sender listed at http://www.dnswl.org/, > > medium trust > > [82.195.75.100 listed in list.dnswl.org] After setting

Re: DNSWL rules downscoring spam

2011-02-21 Thread Darxus
On 02/21, Michelle Konzack wrote: > There are arround 30 IPs which are in this RCVD_IN_DNSWL_MED. The first > one is . > and it has started arround 3 weeks ago. One of your users subscribed to the debian-m...@lists.debian.org mailing

Re: DNSWL rules downscoring spam

2011-02-21 Thread Matthias Leisi
On Mon, Feb 21, 2011 at 1:54 PM, Michelle Konzack wrote: > Pkte Regelname              Beschreibung > -- -- >  2.0 RCVD_IN_DNSWL_MED      RBL: Sender listed at http://www.dnswl.org/, > medium >                             t

Re: DNSWL rules downscoring spam

2011-02-21 Thread Benny Pedersen
On Mon, 21 Feb 2011 14:09:31 +0100, Michelle Konzack wrote: > There are arround 30 IPs which are in this RCVD_IN_DNSWL_MED. The first > one is . > and it has started arround 3 weeks ago. X-Spam-Status: No, score=-6.6 required=4.5 t

Re: DNSWL rules downscoring spam

2011-02-21 Thread Benny Pedersen
On Mon, 21 Feb 2011 13:54:34 +0100, Michelle Konzack wrote: > -3.1 AWLAWL: From: address is in the auto white-list are your awl using old default of /16 ? in 3.3.1 awl can use /8 /16 /24 /32 in ip match reduceing wild awl scores other then that one could change awl factor f

Re: DNSWL rules downscoring spam

2011-02-21 Thread Michelle Konzack
Hello Matthias Leisi, Am 2011-02-20 20:59:57, hacktest Du folgendes herunter: > Care to shed some light on what the issue is? There are arround 30 IPs which are in this RCVD_IN_DNSWL_MED. The first one is . and it has started arroun

Re: DNSWL rules downscoring spam

2011-02-21 Thread Michelle Konzack
Hello dar...@chaosreigns.com, Am 2011-02-20 11:31:59, hacktest Du folgendes herunter: > I'm a DNSWL admin. I would like to see full examples (well, headers). > > What IP addresses are being looked up in DNSWL? [ command 'spamassassin -t 1297982870' ] Vor

SHORT_URL, searchresult-g.php and DOTZUP.COM or keywordtraffic.info

2011-02-21 Thread Mynabbler
It is quite amazing how much crap is being send with a SHORT_URL pointing to somesite.com/searchresult-g.php?someresult all pointing to some stupid NBC10 report about how a work-at-home-mom makes 13k9 a month. What is interesting is that most of these domains point to domains that are being manag