Re: Why doesn't anything at all get these botnet spammers?

2011-10-16 Thread Christian Grunfeld
easier than that ! you dont need to check any ratio at all ... as legitimate mails dont have non-word characters between characters ! Non spamer people don“t write subjects like that ! Spamers had to do that in order to avoid sex, porn, xxx, viagra directly in subject (which is more or less easily

Re: Why doesn't anything at all get these botnet spammers?

2011-10-16 Thread darxus
On 10/15, John Hardin wrote: > >Subject: T !r (a -n*n =l&e ` S !e .x| > >Subject: Se^x M-o ^v ~l e - > > More chickenpoxed subjects. Might be fun to create a plugin to check the ratio of word characters to non-word characters, possibly roughly based on html_title_subject_ratio() in Mail::SpamAssa

Re: --virtual-config-dir without -u

2011-10-16 Thread RW
On Sun, 16 Oct 2011 15:58:25 -0400 Brian J. Murrell wrote: > On 11-10-16 03:37 PM, RW wrote: > > > > Could you not just run a script from cron that does chown > > ${USER}:spamd and chmod g+rw on all the files in the virtual home > > directories. > > You seem to have gotten lost in minor details

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Ned Slider
On 16/10/11 19:28, Martin Gregorie wrote: On Sun, 2011-10-16 at 20:02 +0200, Benny Pedersen wrote: I may never know they sent me an email. Unless I spend time going over my logs. ah you have logs ? :=) A possible way out is to process the logs overnight, possibly as part of logwatch, and b

Re: --virtual-config-dir without -u

2011-10-16 Thread Brian J. Murrell
On 11-10-16 03:37 PM, RW wrote: > > Could you not just run a script from cron that does chown ${USER}:spamd > and chmod g+rw on all the files in the virtual home directories. You seem to have gotten lost in minor details and lost sight on the original problem which is that of being able to run sp

Re: --virtual-config-dir without -u

2011-10-16 Thread RW
On Sun, 16 Oct 2011 15:24:17 -0400 Brian J. Murrell wrote: > To recap, I simply want to have the user_state (i.e. typically > ~/.spamassassin) dirs somewhere other than $HOME on the server but > have those dirs and their files owned by their respective users and > therefor need to have spamd run

Re: --virtual-config-dir without -u

2011-10-16 Thread Brian J. Murrell
On 11-10-16 03:12 PM, RW wrote: > > Not if you set --virtual-config-dir. Right. But such a change (i.e. a different $HOME on the server than on any other machine) is still on the "transparent to users" change that I am looking for -- the change that requires no user re-training and no increase i

Re: --virtual-config-dir without -u

2011-10-16 Thread RW
On Sun, 16 Oct 2011 14:31:01 -0400 Brian J. Murrell wrote: > On 11-10-16 02:08 PM, Martin Gregorie wrote: > > Yep. A brainfart on my part. > > No worries. :-) > > > OK - if the MTA runs spamc (Postfix does this via a service defined > > as part of its configuration - others MTAs have a similar

Re: --virtual-config-dir without -u

2011-10-16 Thread Brian J. Murrell
On 11-10-16 02:08 PM, Martin Gregorie wrote: > Yep. A brainfart on my part. No worries. :-) > OK - if the MTA runs spamc (Postfix does this via a service defined as > part of its configuration - others MTAs have a similar ability) the -u > facility can be used to select the preference file much

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Martin Gregorie
On Sun, 2011-10-16 at 20:02 +0200, Benny Pedersen wrote: > > I may never know they sent me an email. > > Unless I spend time going over my logs. > > ah you have logs ? :=) > A possible way out is to process the logs overnight, possibly as part of logwatch, and build a datastore of addresses that

Re: --virtual-config-dir without -u

2011-10-16 Thread Martin Gregorie
On Sun, 2011-10-16 at 13:39 -0400, Brian J. Murrell wrote: > On 11-10-16 01:31 PM, Martin Gregorie wrote: > > > > Have you thought of running spamc remotely? This way you could avoid the > > need to login the the server just to process mail. > > Hrm. I'm not sure I follow. The server receives th

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Benny Pedersen
On Sun, 16 Oct 2011 05:11:21 -0700, Paul Cabot wrote: I'm not really a fan of blacklisting an entire domain. here this is not a problem since i just get the spam in junk folder with a sieve rule, so no loose for me If it is a domain that for sure is 100% spam or close to it then sure. th

Re: --virtual-config-dir without -u

2011-10-16 Thread RW
On Sun, 16 Oct 2011 14:07:11 -0300 Christian Grunfeld wrote: > > spamd: cannot use --virtual-config-dir without -u > > afaik --virtual-config-dir needs -x and not -u.but you are > right ! its at the end of --virtual-config-dir man ! You use both, the -u in spamd determines the unprivileg

Re: --virtual-config-dir without -u

2011-10-16 Thread Brian J. Murrell
On 11-10-16 01:31 PM, Martin Gregorie wrote: > > Have you thought of running spamc remotely? This way you could avoid the > need to login the the server just to process mail. Hrm. I'm not sure I follow. The server receives the mail and the server delivers it to the user's mailbox but on the way

Re: --virtual-config-dir without -u

2011-10-16 Thread Martin Gregorie
On Sun, 2011-10-16 at 12:26 -0400, Brian J. Murrell wrote: > I don't call spamd from the deliver end. Each user has a .procmailrc > which pipes the mail through "spamc" so spamc is already being called by > the recipients effective user-ID. > Have you thought of running spamc remotely? This way y

Re: --virtual-config-dir without -u

2011-10-16 Thread Christian Grunfeld
Oh I remember ! I did something like your setup but with the use of amavisd-new ! Amavis does not need spamd nor spamc as it directly uses spamassassin perl library functions. With amavis you can also set -u and it worked for me time ago. Anyway then I move to SQL ! 2011/10/16 Christian Grunfeld

Re: --virtual-config-dir without -u

2011-10-16 Thread Christian Grunfeld
> spamd: cannot use --virtual-config-dir without -u afaik --virtual-config-dir needs -x and not -u.but you are right ! its at the end of --virtual-config-dir man !

RE: Why doesn't anything at all get these botnet spammers?

2011-10-16 Thread Jenny Lee
> Date: Sun, 16 Oct 2011 08:39:42 -0700 > From: jhar...@impsec.org > To: users@spamassassin.apache.org > Subject: Re: Why doesn't anything at all get these botnet spammers? > > On Sun, 16 Oct 2011, Martin Gregorie wrote: > > > On Sat, 2011-10-15 at 15:38 -0700, John Hardin wrote: > >> On Sat, 15

Re: --virtual-config-dir without -u

2011-10-16 Thread Brian J. Murrell
On 11-10-16 12:16 PM, Christian Grunfeld wrote: > > You should have spamd running as root, But I do that already. That is what is causing the problem with the new switch (--virtual-config-dir=...): spamd: cannot use --virtual-config-dir without -u > then it can setuid to the > calling spamc ui

Re: --virtual-config-dir without -u

2011-10-16 Thread Christian Grunfeld
> In my network, users have their home dirs on their local machines (for > performance) which are automounted to the mail server for purposes of > spamd accessing their ~/.spamassassin dirs. > > This of course fails when a machine is turned off so I want to move > users' ~/.spamassassin dirs to the

Re: Why doesn't anything at all get these botnet spammers?

2011-10-16 Thread John Hardin
On Sun, 16 Oct 2011, Martin Gregorie wrote: On Sat, 2011-10-15 at 15:38 -0700, John Hardin wrote: On Sat, 15 Oct 2011, Jenny Lee wrote: Hello Everyone, Is there any way to get these people? Subject: T !r (a -n*n =l&e ` S !e .x| Subject: Se^x M-o ^v ~l e - What about something like: he

--virtual-config-dir without -u

2011-10-16 Thread Brian J. Murrell
Hi, In my network, users have their home dirs on their local machines (for performance) which are automounted to the mail server for purposes of spamd accessing their ~/.spamassassin dirs. This of course fails when a machine is turned off so I want to move users' ~/.spamassassin dirs to the serve

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread RW
On Sun, 16 Oct 2011 05:12:59 -0700 Paul Cabot wrote: > The freemailer to freemailer idea is good.Chances are that is > more likely to be spam. It's separate freemail "from" and "reply-to" that's a good indicator, not "from" and "to". In fraud spams they commonly use a different account for

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Paul Cabot
On 16/10/2011 12:13 AM, haman...@t-online.de wrote: I've noticed a trend recently where I'm getting emails sent to me from either an aol or yahoo or hotmail account. But the email has a "to" address to some other account that is not mine. First off I'm p...@topguncomputers.com. I also run the

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread Paul Cabot
On 15/10/2011 5:56 PM, Benny Pedersen wrote: On Sat, 15 Oct 2011 16:40:48 -0700, Paul Cabot wrote: blacklist_from *@aol.com whitelist_from_spf good-us...@aol.com users can then get a new url for free :-) Would that not blacklist everyone from aol.com unless I specifically allowed them with the

Re: Recieving email from aol or yahoo or hotmail, that is not addressed to me personally.

2011-10-16 Thread hamann . w
>> >> I've noticed a trend recently where I'm getting emails sent to me from >> either an aol or yahoo or hotmail account. But the email has a "to" >> address to some other account that is not mine. >> >> First off I'm p...@topguncomputers.com. I also run the postfix servers. >> >> Usually