Re: Rules to block non-english

2011-02-25 Thread Karsten Bräckelmann
On Fri, 2011-02-25 at 16:06 -0500, Mauricio Tavares wrote: > On Fri, Feb 25, 2011 at 4:04 PM, Bowie Bailey wrote: > > > ok_languages en > > > > > > and textcat enabled (loadplugin) but it is not, say, scoring Spanish spam. TextCat might just not identify the language with sufficient confidence.

Re: Rules to block non-english

2011-02-25 Thread Bowie Bailey
On 2/25/2011 4:06 PM, Mauricio Tavares wrote: > On Fri, Feb 25, 2011 at 4:04 PM, Bowie Bailey wrote: >> On 2/25/2011 3:49 PM, Mauricio Tavares wrote: >>> Butting in, we have >>> >>> ok_languages en >>> >>> and textcat enabled (loadplugin) but it is not, say, scoring Spanish spam. >>> >>> Now

Re: Rules to block non-english

2011-02-25 Thread Mauricio Tavares
On Fri, Feb 25, 2011 at 4:04 PM, Bowie Bailey wrote: > On 2/25/2011 3:49 PM, Mauricio Tavares wrote: >> >>       Butting in, we have >> >> ok_languages en >> >> and textcat enabled (loadplugin) but it is not, say, scoring Spanish spam. >> >> Now, is it ok to have both the loadplugin and the ok_lan

Re: Points for missing MX Records

2011-02-25 Thread David F. Skoll
On Fri, 25 Feb 2011 21:55:12 +0100 Matus UHLAR - fantomas wrote: > Incorrect. You must have abuse@addresses iat your domain registration > boundary, if you can receive e-mail. > http://www.rfc-ignorant.org/policy-abuse.php That quotes RFC 2142, which is only a proposed standard. rfc-ignorant.o

Re: Rules to block non-english

2011-02-25 Thread Bowie Bailey
On 2/25/2011 3:49 PM, Mauricio Tavares wrote: > > Butting in, we have > > ok_languages en > > and textcat enabled (loadplugin) but it is not, say, scoring Spanish spam. > > Now, is it ok to have both the loadplugin and the ok_languages > statements in local.cf? Loadplugin statements should b

Re: Points for missing MX Records

2011-02-25 Thread Matus UHLAR - fantomas
> Hello Mahmoud Khonji, > > Am 2011-02-23 23:03:46, hacktest Du folgendes herunter: > > A sending mail server should accept ab...@example.com, and number of On 24.02.11 21:01, Michelle Konzack wrote: > This is wrong because, only public ISP offering MAILSERVICES must have > an addresses. The

Re: Rules to block non-english

2011-02-25 Thread Mauricio Tavares
On Fri, Feb 25, 2011 at 8:44 AM, James Lay wrote: > > > On 2/25/11 6:32 AM, "Giles Coochey" wrote: > >>On 25/02/2011 14:31, Giles Coochey wrote: >>> On 25/02/2011 14:18, James Lay wrote: Hi folks, SoŠI was sent an email that was pretty much all in ChineseŠheaders below: >

Re: webmail message, false positiv

2011-02-25 Thread Stefan Jakobs
On Friday 25 February 2011 10:29:08 Ned Slider wrote: > > 3.3 RCVD_IN_PBLRBL: Received via a relay in Spamhaus PBL > > > > [78.55.199.104 listed in zen.spamhaus.org] > > That looks to be your main problem right there - don't deep parse > Received hea

Re: Decisions on how to handle mail from some domains

2011-02-25 Thread Adam Katz
On 02/23/2011 07:17 PM, Alex wrote: > I'm wondering what people's opinion is on domains like > verticalresponse.com and vresp.com, and others, that seem to > distribute mail to anyone who wants to spend the money to buy a list > from them. Constantcontact might be in this same business, but it

Re: A new reverse DNS trick

2011-02-25 Thread David F. Skoll
On Fri, 25 Feb 2011 12:57:39 + Martin Gregorie wrote: > However, the thing I hadn't seen before is that its IP, 208.115.216.98 > resolves to 98-216-115-208.static.reverse.lstn.net > So, is this a normal, expected reverse DNS result that I just haven't > seen before or is it intended to trick

Re: Rules to block non-english

2011-02-25 Thread James Lay
On 2/25/11 6:32 AM, "Giles Coochey" wrote: >On 25/02/2011 14:31, Giles Coochey wrote: >> On 25/02/2011 14:18, James Lay wrote: >>> Hi folks, >>> >>> SoŠI was sent an email that was pretty much all in ChineseŠheaders >>> below: >>> >>> Date: Tue, 22 Feb 2011 13:44:37 -0700 >>> Subject: >>> =?ut

Re: Rules to block non-english

2011-02-25 Thread Giles Coochey
On 25/02/2011 14:31, Giles Coochey wrote: On 25/02/2011 14:18, James Lay wrote: Hi folks, So…I was sent an email that was pretty much all in Chinese…headers below: Date: Tue, 22 Feb 2011 13:44:37 -0700 Subject: =?utf-8?B?Rlc6IOKWoO+8keaciOOBq+W8iuekvuOBq+WxiuOBhOOBn+aEnw==?= =?utf-8?B?6Kyd

Re: Rules to block non-english

2011-02-25 Thread Giles Coochey
On 25/02/2011 14:18, James Lay wrote: Hi folks, So…I was sent an email that was pretty much all in Chinese…headers below: Date: Tue, 22 Feb 2011 13:44:37 -0700 Subject: =?utf-8?B?Rlc6IOKWoO+8keaciOOBq+W8iuekvuOBq+WxiuOBhOOBn+aEnw==?= =?utf-8?B?6Kyd44Gu5aOw44KS5YWs6ZaL44GX44Gf44GE44Go5oCd44GE44G

Re: webmail message, false positiv

2011-02-25 Thread RW
On Fri, 25 Feb 2011 09:59:44 +0100 "Stefan Jakobs" wrote: > > Hi list, > > I received a message from a friend, fetched the message by using POP3 > and passed it to spamassassin. It marked the message as spam. > I know this is not the intended use of spamassassin, Actually it's fine to use SA

Rules to block non-english

2011-02-25 Thread James Lay
Hi folks, SoŠI was sent an email that was pretty much all in ChineseŠheaders below: Date: Tue, 22 Feb 2011 13:44:37 -0700 Subject: =?utf-8?B?Rlc6IOKWoO+8keaciOOBq+W8iuekvuOBq+WxiuOBhOOBn+aEnw==?= =?utf-8?B?6Kyd44Gu5aOw44KS5YWs6ZaL44GX44Gf44GE44Go5oCd44GE44G+44GZ44CC?= Thread-Topic: =?utf-8?B?4p

A new reverse DNS trick

2011-02-25 Thread Martin Gregorie
I was just dissecting a piece of clothing store spam that was posted to a technical mailing list I'm a member of. It turned out to be the usual Chinese shop spammer, registered with ename.com in China and with all contact details routed through hotmail. However, the thing I hadn't seen before is t

Re: webmail message, false positiv

2011-02-25 Thread Ned Slider
On 25/02/11 08:59, Stefan Jakobs wrote: Hi list, I received a message from a friend, fetched the message by using POP3 and passed it to spamassassin. It marked the message as spam. I know this is not the intended use of spamassassin, but is there any chance that I can circumvent this kind of fa

webmail message, false positiv

2011-02-25 Thread Stefan Jakobs
Hi list, I received a message from a friend, fetched the message by using POP3 and passed it to spamassassin. It marked the message as spam. I know this is not the intended use of spamassassin, but is there any chance that I can circumvent this kind of false positives? Here are the headers: Re

Re: Points for missing MX Records

2011-02-25 Thread Giles Coochey
On 24/02/2011 21:30, Dominic Benson wrote: On 24 Feb 2011, at 20:01, Michelle Konzack wrote: Hello Mahmoud Khonji, Am 2011-02-23 23:03:46, hacktest Du folgendes herunter: A sending mail server should accept ab...@example.com, and number of This is wrong because, only public ISP offering MAIL