Re: How do I disable all spamhaus calls?

2011-08-11 Thread Henrik K
On Thu, Aug 11, 2011 at 03:20:46PM -0400, dar...@chaosreigns.com wrote: > On 08/11, Axb wrote: > > >score DKIMDOMAIN_IN_DWL 0 > > >score DKIMDOMAIN_IN_DWL_UNKNOWN 0 > > >score RCVD_IN_CSS 0 > > >score RCVD_IN_PBL 0 > > >score RCVD_IN_SBL 0 > > >score RCVD_IN_XBL 0 > > >score URIBL_DBL_ERROR 0 > > >

Re: How do I disable all spamhaus calls?

2011-08-11 Thread Benny Pedersen
On Thu, 11 Aug 2011 10:46:57 -0700, Marc Perkel wrote: Kind of getting tired of spamhaus hitting me up for money and trying to find all the places where I need to change to get rid of spamhaus queries. What do I need to do to get rid of spamhaus? Thanks in advance. make a spamhuas.zone file i

Re: linkedin messages

2011-08-11 Thread Michael Scheidell
On 8/11/11 9:53 PM, Benny Pedersen wrote: why do you self post spam here ? -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 >*| *SECNAP Network Security Corporation * Best

Re: linkedin messages

2011-08-11 Thread Benny Pedersen
On Thu, 11 Aug 2011 14:49:33 -0400, Michael Scheidell wrote: oh, I forget, your spam is not 'commercial' its transactional (according to return path who certifies that linked in doesn't spam) might be why google+ needs invite from users that are on google+ ? so google+ never spammed users :)

Re: KB_DATE_CONTAINS_TAB

2011-08-11 Thread Karsten Bräckelmann
On Thu, 2011-08-11 at 14:40 -0700, jdow wrote: > > > KB_DATE_CONTAINS_TAB is misfiring with great consistency on the LKML. > > > This is not good. It's a known issue. There is at least one ISP and LKML rewriting *MUA* generated headers like that. Frankly, *this* is not good. If you're an MTA, add

Re: KB_DATE_CONTAINS_TAB

2011-08-11 Thread jdow
On 2011/08/11 14:28, Axb wrote: On 2011-08-11 23:21, jdow wrote: KB_DATE_CONTAINS_TAB is misfiring with great consistency on the LKML. This is not good. {^_^} what MLM is doing that? The one the LKML uses, of course. {O,o} I am not sure if that is the MLM's fault or the user's tool's fault

Re: Low-scoring authenticated SMTP

2011-08-11 Thread Ted Mittelstaedt
On 8/11/2011 1:25 PM, dar...@chaosreigns.com wrote: Well, your example email doesn't match either of your rules. On 08/11, Ted Mittelstaedt wrote: header LOCAL_AUTH_RCVD Received =~ /^from [^ ]+ \([^)]*\)\s+\(authenticated bits=\d+\)\s+by mail\.wonkulating\.net/ header AUTHBIT0 From =~ /auth

Re: KB_DATE_CONTAINS_TAB

2011-08-11 Thread Axb
On 2011-08-11 23:21, jdow wrote: KB_DATE_CONTAINS_TAB is misfiring with great consistency on the LKML. This is not good. {^_^} what MLM is doing that? PS: shouldn't you be on a well deserved vacation? .-)

KB_DATE_CONTAINS_TAB

2011-08-11 Thread jdow
KB_DATE_CONTAINS_TAB is misfiring with great consistency on the LKML. This is not good. {^_^}

Re: Low-scoring authenticated SMTP

2011-08-11 Thread darxus
Well, your example email doesn't match either of your rules. On 08/11, Ted Mittelstaedt wrote: > header LOCAL_AUTH_RCVD Received =~ /^from [^ ]+ > \([^)]*\)\s+\(authenticated bits=\d+\)\s+by mail\.wonkulating\.net/ > header AUTHBIT0 From =~ /authenticated bits=0/ > Received: from [192.168.0.4] (

Re: How do I disable all spamhaus calls?

2011-08-11 Thread darxus
On 08/11, Marc Perkel wrote: > It would be handy if there were a master switch for them. By all means, please add one. -- "We will be dead soon. Is this how we want to live?" http://www.ChaosReigns.com

Low-scoring authenticated SMTP

2011-08-11 Thread Ted Mittelstaedt
Hi All! We had a mailserver (mail.wonkulating.net) running Sa 3.2.5 that had the following constructs in it's config file: header LOCAL_AUTH_RCVD Received =~ /^from [^ ]+ \([^)]*\)\s+\(authenticated bits=\d+\)\s+by mail\.wonkulating\.net/ describe LOCAL_AUTH_RCVD Message was received loca

Re: How do I disable all spamhaus calls?

2011-08-11 Thread Marc Perkel
On 8/11/2011 11:28 AM, dar...@chaosreigns.com wrote: On 08/11, Marc Perkel wrote: Kind of getting tired of spamhaus hitting me up for money and trying to find all the places where I need to change to get rid of spamhaus queries. What do I need to do to get rid of spamhaus? I expect more from

Re: How do I disable all spamhaus calls?

2011-08-11 Thread Axb
On 2011-08-11 21:20, dar...@chaosreigns.com wrote: On 08/11, Axb wrote: score DKIMDOMAIN_IN_DWL 0 score DKIMDOMAIN_IN_DWL_UNKNOWN 0 score RCVD_IN_CSS 0 score RCVD_IN_PBL 0 score RCVD_IN_SBL 0 score RCVD_IN_XBL 0 score URIBL_DBL_ERROR 0 score URIBL_DBL_SPAM 0 score URIBL_SBL 0 Geez, we kind of h

Re: How do I disable all spamhaus calls?

2011-08-11 Thread darxus
On 08/11, Axb wrote: > >score DKIMDOMAIN_IN_DWL 0 > >score DKIMDOMAIN_IN_DWL_UNKNOWN 0 > >score RCVD_IN_CSS 0 > >score RCVD_IN_PBL 0 > >score RCVD_IN_SBL 0 > >score RCVD_IN_XBL 0 > >score URIBL_DBL_ERROR 0 > >score URIBL_DBL_SPAM 0 > >score URIBL_SBL 0 > > > >Geez, we kind of have their stuff all o

Re: How do I disable all spamhaus calls?

2011-08-11 Thread Axb
On 2011-08-11 20:28, dar...@chaosreigns.com wrote: On 08/11, Marc Perkel wrote: Kind of getting tired of spamhaus hitting me up for money and trying to find all the places where I need to change to get rid of spamhaus queries. What do I need to do to get rid of spamhaus? I expect more from you

Re: linkedin messages

2011-08-11 Thread Michael Scheidell
On 8/11/11 2:45 PM, Mauricio Tavares wrote: It seems some people that are in a mailing list I am responsible for also have linkedin. And every so often we get email from one of them asking me to join it; it is addressed to a bunch of people besides that mailing list. Without caring about w

linkedin messages

2011-08-11 Thread Mauricio Tavares
It seems some people that are in a mailing list I am responsible for also have linkedin. And every so often we get email from one of them asking me to join it; it is addressed to a bunch of people besides that mailing list. Without caring about what is going on their side, is there a spamassa

Re: How do I disable all spamhaus calls?

2011-08-11 Thread darxus
Warren has a good page on which SA network tests have what kind of limits and which rules you would need to disable: http://www.spamtips.org/2011/01/usage-limits-of-spamassassin-network.html But it seems to not include all the spamhaus rules. And it would be nice if it explicitly stated how to dis

Re: How do I disable all spamhaus calls?

2011-08-11 Thread darxus
On 08/11, Marc Perkel wrote: > Kind of getting tired of spamhaus hitting me up for money and trying > to find all the places where I need to change to get rid of spamhaus > queries. What do I need to do to get rid of spamhaus? I expect more from you Marc :) Just set the scores for all the tests t

How do I disable all spamhaus calls?

2011-08-11 Thread Marc Perkel
Kind of getting tired of spamhaus hitting me up for money and trying to find all the places where I need to change to get rid of spamhaus queries. What do I need to do to get rid of spamhaus? Thanks in advance. -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilt

Re: linked in spam/return path certified spam

2011-08-11 Thread Kris Deugau
Michael Scheidell wrote: got this spam from linked in: you can't unsubscribe, not without becoming a member. (that link is NOT an unsubscribe link.) *nods* I've gone a couple of rounds several times with their support drones trying to get it through that, as a

Re: pilot error? or idiots at microsoft?

2011-08-11 Thread Mark Martinec
On Wednesday August 10 2011 16:40:26 Michael Scheidell wrote: > So, we open a bugzilla and put 169.254* addresses into 'local_networks' > by default? like rfc1918? > it the example, sa sees the internal (trusted) 172* ip, and sees 'first > untrusted' (the 169* address!) > spf fails, rbls are consul

Re: Spamassassin don t block spam

2011-08-11 Thread ercibrest
sorry but my english is bad. what i have to do ? Darxus wrote: > > http://wiki.apache.org/spamassassin/IncreaseAccuracy > (I haven't linked that page from anywhere yet.) > > On 08/10, ercibrest wrote: >> >> Hello and sorry for my english. >> >> I had installed mailscanner (last version)