Re: How to report a spam botnet

2012-11-18 Thread Axb
On 11/19/2012 07:18 AM, Michael Monnerie wrote: [crosspost postfix-users and spamassassin-users] Am Sonntag, 18. November 2012, 14:08:08 schrieb Michael Monnerie: How should we report those IPs, is there a "anti botnet unit" somewhere? Lets concentrate back on the subject, I got this answer:

Re: How to report a spam botnet

2012-11-18 Thread Michael Monnerie
[crosspost postfix-users and spamassassin-users] Am Sonntag, 18. November 2012, 14:08:08 schrieb Michael Monnerie: > How should we report those IPs, is there a "anti botnet unit" > somewhere? Lets concentrate back on the subject, I got this answer: > normally it makes no sense to report botnets

Re: PDFassassin

2012-11-18 Thread Olivier Nicole
Thank you Jari, > > In the same way, I am wondering if something similar exists for all > > the (open|libre|MS)office documents? > ExtractText > > Works with this documents as well as with PDF. I had a look at ExtractText, but it only extract text,not the images. And antiword, the extractor for

Re: wrong RCVD_IN_PBL?

2012-11-18 Thread RW
On Sun, 18 Nov 2012 17:07:39 -0500 dar...@chaosreigns.com wrote: > On 11/18, RW wrote: > > Whilst that wont hurt, it's not the real cause of the problem here > > which rests entirely with UnifiedeMail.net. > > > > Whilst it would have prevented this FP, authentication is intended > > to solve a d

Re: dynamically load url filtersI

2012-11-18 Thread mouss
Le 15/11/2012 22:16, Per-Erik Persson a écrit : > > Is there a way to add spamassin rules without editing the config > and reloading the process? > > To be more specific, I can set up a RBL of my own and add > suspicious servers found in the header, no problems to do that. > This can be done tod

Re: wrong RCVD_IN_PBL?

2012-11-18 Thread darxus
On 11/18, RW wrote: > Whilst that wont hurt, it's not the real cause of the problem here which > rests entirely with UnifiedeMail.net. > > Whilst it would have prevented this FP, authentication is intended to > solve a different problem. It shouldn't be necessary to have a > workaround for the int

Re: How to report a spam botnet

2012-11-18 Thread Robert Schetterer
Am 18.11.2012 19:35, schrieb Robert Schetterer: > Am 18.11.2012 14:08, schrieb Michael Monnerie: >> We've got one users e-mail password hacked, and at the sime time a lot >> of different IPs started to use that address. Here is the list. How >> should we report those IPs, is there a "anti botnet

Re: How to report a spam botnet

2012-11-18 Thread Robert Schetterer
Am 18.11.2012 14:08, schrieb Michael Monnerie: > We've got one users e-mail password hacked, and at the sime time a lot > of different IPs started to use that address. Here is the list. How > should we report those IPs, is there a "anti botnet unit" somewhere? > What is the best way to fight it?

Re: wrong RCVD_IN_PBL?

2012-11-18 Thread RW
On Sat, 17 Nov 2012 21:09:11 -0800 (PST) umeca74 wrote: > > Is 1and1.co.uk in the trusted hosts? ContentAnalysis[at]UnifiedeMail.net is an address you can send an email to and get back a SpamAssassin report on that email. > >Received: from hppro (ppp-94-68-74-194.home.otenet.gr > >[94.68.74.19

Re: wrong RCVD_IN_PBL?

2012-11-18 Thread darxus
On 11/17, umeca74 wrote: > >Received: from hppro (ppp-94-68-74-194.home.otenet.gr [94.68.74.194]) > > by mrelayeu.kundenserver.de (node=mrbap1) with ESMTP (Nemesis) > > > > I believe if that said "ESMTPA" instead of "ESMTP", > > you would not have that problem > > are you sure? I will report i

How to report a spam botnet

2012-11-18 Thread Michael Monnerie
We've got one users e-mail password hacked, and at the sime time a lot of different IPs started to use that address. Here is the list. How should we report those IPs, is there a "anti botnet unit" somewhere? What is the best way to fight it? 008.021.006.226 014.139.187.017 014.149.118.062 014.1