Re: SELL CVV GOOD ALL COUNTRY,Transfer WU,SHIP LAPTOP( DELL, TOSHIBA,..) IPAD2,IPHONE

2012-06-09 Thread Ned Slider
On 09/06/12 20:32, jdow wrote: I rather enjoyed it when the list passed spam. Every spam received to the list was instant grist for the SARE mill leading to better and tighter rules for killing similar spams. After awhile the amount of spam from actual spammers dropped fairly dramatically as the

Re: SELL CVV GOOD ALL COUNTRY,Transfer WU,SHIP LAPTOP( DELL, TOSHIBA,..) IPAD2,IPHONE

2012-06-09 Thread jdow
I rather enjoyed it when the list passed spam. Every spam received to the list was instant grist for the SARE mill leading to better and tighter rules for killing similar spams. After awhile the amount of spam from actual spammers dropped fairly dramatically as they put spamassassin list filters

Re: What to tell senders of these messages

2012-06-09 Thread jdow
On 2012/06/09 05:24, haman...@t-online.de wrote: Michael Scheidell wrote: HS_INDEX_PARAM: tell them not to use web bugs in their marketing emails Hi Michael, since we are sending out newsletters (to people who really subscribed :) and I got the role to be my own "email marketing company", I w

Re: What to tell senders of these messages

2012-06-09 Thread Cecil Westerhof
Op zaterdag 9 jun 2012 13:23 CEST schreef Michael Scheidell: > On 6/9/12 5:55 AM, Cecil Westerhof wrote: >> The following tree messages I see a lot in false positives: >> 1.2 HS_INDEX_PARAM URI: Link contains a common tracker pattern. >> 1.5 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800

Re: What to tell senders of these messages

2012-06-09 Thread Cecil Westerhof
Op zaterdag 9 jun 2012 14:15 CEST schreef Benny Pedersen: > Den 2012-06-09 11:55, Cecil Westerhof skrev: >> The following tree messages I see a lot in false positives: >> 1.2 HS_INDEX_PARAM URI: Link contains a common tracker >> pattern. >> 1.5 HTML_IMAGE_ONLY_28 BODY: HTML: images with 24

Re: What to tell senders of these messages

2012-06-09 Thread Cecil Westerhof
Op zaterdag 9 jun 2012 14:24 CEST schreef hamann w.: > BTW: the OP is in a quite lucky situation: he knows that the system > uses SA I installed it myself. ;-} -- Cecil Westerhof Senior Software Engineer LinkedIn: http://www.linkedin.com/in/cecilwesterhof

Re: Both rules should not be executed

2012-06-09 Thread Cecil Westerhof
Op zaterdag 9 jun 2012 14:01 CEST schreef RW: > On Sat, 09 Jun 2012 11:52:58 +0200 > Cecil Westerhof wrote: > >> A few of the mails on this group came in my spam folder because of: >> 2.9 SPOOF_COM2OTH URI: URI contains ".com" in middle >> 2.0 SPOOF_COM2COM URI: URI contains ".com" in mid

Re: What to tell senders of these messages

2012-06-09 Thread Michael Scheidell
On 6/9/12 8:24 AM, haman...@t-online.de wrote: Michael Scheidell wrote: HS_INDEX_PARAM: tell them not to use web bugs in their marketing emails Hi Michael, since we are sending out newsletters (to people who really subscribed:) and I got the role to be my own "email marketing company", I wan

Re: SELL CVV GOOD ALL COUNTRY,Transfer WU,SHIP LAPTOP( DELL, TOSHIBA,..) IPAD2,IPHONE

2012-06-09 Thread Alexandre Boyer
+1 Alex, from osmose. Bow before me, for I am root. On 12-06-09 03:29 AM, Niamh Holding wrote: > Hello best_sellercvv, > > Saturday, June 9, 2012, 7:00:35 AM, you wrote: > > b> Hi every customer > > Oh the irony to see the spamassassin list spammed :) > signature.asc Description: OpenPGP digi

Re: What to tell senders of these messages

2012-06-09 Thread hamann . w
Michael Scheidell wrote: HS_INDEX_PARAM: tell them not to use web bugs in their marketing emails Hi Michael, since we are sending out newsletters (to people who really subscribed :) and I got the role to be my own "email marketing company", I want to comment on that. We are using a setup simil

Re: What to tell senders of these messages

2012-06-09 Thread Benny Pedersen
Den 2012-06-09 11:55, Cecil Westerhof skrev: The following tree messages I see a lot in false positives: 1.2 HS_INDEX_PARAM URI: Link contains a common tracker pattern. 1.5 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 1.7 RDNS_DYNAMIC Delivered to

Re: False Positive on Domain Name

2012-06-09 Thread Benny Pedersen
Den 2012-06-09 12:53, Martin Gregorie skrev: I see little or no advantage in using DHCP. its nice to see when friends stop by to add there laptops to your lan :=) it just take a second what i have done is to set all my own lan computers with static lan, and all dynamic get dynamic ip, eg

Re: Both rules should not be executed

2012-06-09 Thread RW
On Sat, 09 Jun 2012 11:52:58 +0200 Cecil Westerhof wrote: > A few of the mails on this group came in my spam folder because of: > 2.9 SPOOF_COM2OTH URI: URI contains ".com" in middle > 2.0 SPOOF_COM2COM URI: URI contains ".com" in middle and end > > Personally I think that the

Re: Both rules should not be executed

2012-06-09 Thread Benny Pedersen
Den 2012-06-09 11:52, Cecil Westerhof skrev: A few of the mails on this group came in my spam folder because of: 2.9 SPOOF_COM2OTH URI: URI contains ".com" in middle 2.0 SPOOF_COM2COM URI: URI contains ".com" in middle and end Personally I think that the second one should n

Re: SELL CVV GOOD ALL COUNTRY,Transfer WU,SHIP LAPTOP( DELL, TOSHIBA,..) IPAD2,IPHONE

2012-06-09 Thread Benny Pedersen
Den 2012-06-09 09:29, Niamh Holding skrev: b> Hi every customer Oh the irony to see the spamassassin list spammed :) was this not a spam sample that is undetected ?, i dont know if sender was knot knowing how to report on pastebin and send link here ? for me this content is usefull, so will

Re: What to tell senders of these messages

2012-06-09 Thread Michael Scheidell
On 6/9/12 5:55 AM, Cecil Westerhof wrote: The following tree messages I see a lot in false positives: 1.2 HS_INDEX_PARAM URI: Link contains a common tracker pattern. 1.5 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 1.7 RDNS_DYNAMIC Delivered to i

Re: False Positive on Domain Name

2012-06-09 Thread Martin Gregorie
On Fri, 2012-06-08 at 15:21 -0700, Ed Abbott wrote: > > Looks like resolv.conf is overwritten each time I reboot. > I'll implement your "chattr +i" suggestion after I've convinced > myself that I have a stable solution that works each and every > time. > In the current Fedora releases (since F15

What to tell senders of these messages

2012-06-09 Thread Cecil Westerhof
The following tree messages I see a lot in false positives: 1.2 HS_INDEX_PARAM URI: Link contains a common tracker pattern. 1.5 HTML_IMAGE_ONLY_28 BODY: HTML: images with 2400-2800 bytes of words 1.7 RDNS_DYNAMIC Delivered to internal network by host with

Both rules should not be executed

2012-06-09 Thread Cecil Westerhof
A few of the mails on this group came in my spam folder because of: 2.9 SPOOF_COM2OTH URI: URI contains ".com" in middle 2.0 SPOOF_COM2COM URI: URI contains ".com" in middle and end Personally I think that the second one should not be used when the first is already triggered.

Re: SELL CVV GOOD ALL COUNTRY,Transfer WU,SHIP LAPTOP( DELL, TOSHIBA,..) IPAD2,IPHONE

2012-06-09 Thread Rodney Baker
On Sat, 9 Jun 2012 16:59:29 Niamh Holding wrote: > Hello best_sellercvv, > > Saturday, June 9, 2012, 7:00:35 AM, you wrote: > > b> Hi every customer > > Oh the irony to see the spamassassin list spammed :) My thoughts exactly... :-) -- == Ro

Re: SELL CVV GOOD ALL COUNTRY,Transfer WU,SHIP LAPTOP( DELL, TOSHIBA,..) IPAD2,IPHONE

2012-06-09 Thread Niamh Holding
Hello best_sellercvv, Saturday, June 9, 2012, 7:00:35 AM, you wrote: b> Hi every customer Oh the irony to see the spamassassin list spammed :) -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgpus3gA7i4zS.pgp Description: PGP signature