Re: Spam Assassin - does it work or not?

2014-08-07 Thread Dave Warren
On 2014-08-07 16:58, Andy wrote: As for me going elsewhere, I think my best option at this point is to just go back to the "old" way of using my own client software on my computer. And find one with a strong filter of its own. Anyone have any good results with Firefox Thunderbird? Thunderbird h

Re: Spam Assassin - does it work or not?

2014-08-07 Thread Andy
> I looked at Lunarpages and what control you have over SA. I can only see > that you can change the score and populate a whitelist and blacklist. I > maybe wrong (I don't think I am) but that is nowhere near enough > administrative control to make an impact on changing SA's behaviour. I > don't s

Re: Similar pattern of emails Comparing Prices

2014-08-07 Thread Karsten Bräckelmann
On Thu, 2014-08-07 at 17:14 +0100, emailitis.com wrote: > I have had a fair number of VERY similar Spam emails that are all > about comparing prices. I have put a number in a pastebin below. We need full, raw samples. Those are mostly just headers with the raw body missing (multipart/alternative,

Re: Similar pattern of emails Comparing Prices

2014-08-07 Thread RW
On Thu, 7 Aug 2014 17:14:55 +0100 emailitis.com wrote: > I have had a fair number of VERY similar Spam emails that are all > about comparing prices. I have put a number in a pastebin below. > They all seem to be originating from Fasthosts in UK which I cannot > really blacklist in entirety. > >

Re: Spam Assassin - does it work or not?

2014-08-07 Thread RobertGrimes
Andy wrote > I am writing this rather long message in hopes that I might get at least > one > cogent response to a very nagging problem and situation that involved > Spam Assassin. > > > I have asked repeatedly for a reason why two near duplicate pieces of > spam, coming in at the same time, one

Re: Missing rules

2014-08-07 Thread Quanah Gibson-Mount
--On Thursday, August 07, 2014 10:37 AM -0400 "James B. Byrne" wrote: On Wed, August 6, 2014 17:30, Quanah Gibson-Mount wrote: --On Wednesday, August 06, 2014 6:24 PM -0400 "James B. Byrne" wrote: I am constrained to run the version provided by the upstream distro packager (RedHat). When

Re: Missing rules

2014-08-07 Thread James B. Byrne
On Thu, August 7, 2014 15:53, Bob Proulx wrote: > James B. Byrne wrote: >> Quanah Gibson-Mount wrote: >> > Policies such as this show a complete lack of understanding on how to run >> > production infrastructure. RH will never update SA in RHEL6 to any new >> > release. Your best course of actio

Re: Missing rules

2014-08-07 Thread Bob Proulx
James B. Byrne wrote: > Quanah Gibson-Mount wrote: > > Policies such as this show a complete lack of understanding on how to run > > production infrastructure. RH will never update SA in RHEL6 to any new > > release. Your best course of action is to fix your broken policy. Failing > > that, you

Re: rule for repeated tracking numbers

2014-08-07 Thread Axb
On 08/07/2014 07:28 PM, Philip Prindeville wrote: On Aug 7, 2014, at 11:14 AM, Axb wrote: On 08/07/2014 07:06 PM, Philip Prindeville wrote: On Aug 7, 2014, at 11:00 AM, Axb wrote: On 08/07/2014 06:55 PM, Philip Prindeville wrote: On Aug 6, 2014, at 11:20 PM, Axb wrote: On 08/07/2014

Re: rule for repeated tracking numbers

2014-08-07 Thread Philip Prindeville
On Aug 7, 2014, at 11:28 AM, Philip Prindeville wrote: > > Okay, I thought you were saying that the posted configuration would block the > entire CIDR range. It won’t. > > So they have a lot of VirtualHost definitions: a couple of comments on that. > > (1) putting that many domains on a si

Re: rule for repeated tracking numbers

2014-08-07 Thread Andy Balholm
On Aug 7, 2014, at 10:28 AM, Philip Prindeville wrote: > (1) putting that many domains on a single host is just begging for that host > to have a catastrophic failure (as opposed to putting that many domains on a > local (re)director which servers as a proxy, a la mod_proxy_html mode…) Judgi

Re: rule for repeated tracking numbers

2014-08-07 Thread Philip Prindeville
On Aug 7, 2014, at 11:14 AM, Axb wrote: > On 08/07/2014 07:06 PM, Philip Prindeville wrote: >> >> On Aug 7, 2014, at 11:00 AM, Axb wrote: >> >>> On 08/07/2014 06:55 PM, Philip Prindeville wrote: On Aug 6, 2014, at 11:20 PM, Axb wrote: > On 08/07/2014 07:01 AM, Philip Pri

Re: rule for repeated tracking numbers

2014-08-07 Thread Philip Prindeville
On Aug 7, 2014, at 11:13 AM, emailitis.com wrote: >> -Original Message- >> From: Philip Prindeville [mailto:philipp_s...@redfish-solutions.com] >> Sent: 07 August 2014 06:01 >> To: Paul Stead >> Cc: users@spamassassin.apache.org >> Subject: Re: rule for repeated tracking numbers >> >>

Re: rule for repeated tracking numbers

2014-08-07 Thread Axb
On 08/07/2014 07:06 PM, Philip Prindeville wrote: On Aug 7, 2014, at 11:00 AM, Axb wrote: On 08/07/2014 06:55 PM, Philip Prindeville wrote: On Aug 6, 2014, at 11:20 PM, Axb wrote: On 08/07/2014 07:01 AM, Philip Prindeville wrote: On Aug 6, 2014, at 1:23 PM, Paul Stead wrote: On 06/

RE: rule for repeated tracking numbers

2014-08-07 Thread emailitis.com
> -Original Message- > From: Philip Prindeville [mailto:philipp_s...@redfish-solutions.com] > Sent: 07 August 2014 06:01 > To: Paul Stead > Cc: users@spamassassin.apache.org > Subject: Re: rule for repeated tracking numbers > > > On Aug 6, 2014, at 1:23 PM, Paul Stead wrote: > > Uh. the

Re: Spam Assassin - does it work or not? - LONG HEADERS URL

2014-08-07 Thread Adam Moffett
i wouldnt know what to do with it. and have no time or desire to learn about it. i think you might have accidentally put your finger on the problem ive been having with them. i think maybe they seem to expect that most their customers have dedicated IT departments that can deal with something lik

Re: rule for repeated tracking numbers

2014-08-07 Thread Philip Prindeville
On Aug 7, 2014, at 11:00 AM, Axb wrote: > On 08/07/2014 06:55 PM, Philip Prindeville wrote: >> >> On Aug 6, 2014, at 11:20 PM, Axb wrote: >> >>> On 08/07/2014 07:01 AM, Philip Prindeville wrote: On Aug 6, 2014, at 1:23 PM, Paul Stead wrote: > > On 06/08/14 20:

Re: Spam Assassin - does it work or not? - LONG HEADERS URL

2014-08-07 Thread Bowie Bailey
On 8/7/2014 12:56 PM, Andy wrote: On Thu, August 7, 2014 9:38 am, Andy Balholm wrote: Looking at Lunarpages pricing page, it looks like shell access is a $2.00 per month add-on. Since you don’t know what it is, I expect you didn’t think it was worth paying extra for it, so you probably don’t ha

Re: rule for repeated tracking numbers

2014-08-07 Thread Axb
On 08/07/2014 06:55 PM, Philip Prindeville wrote: On Aug 6, 2014, at 11:20 PM, Axb wrote: On 08/07/2014 07:01 AM, Philip Prindeville wrote: On Aug 6, 2014, at 1:23 PM, Paul Stead wrote: On 06/08/14 20:00, John Hardin wrote: Can some fresh samples be posted to pastebin? http://pastebi

Re: rule for repeated tracking numbers

2014-08-07 Thread Philip Prindeville
uri_block_cidr will still defeat this, at least until he’s forced to switch hosting providers. On Aug 7, 2014, at 10:43 AM, Andy Balholm wrote: > This particular spammer just re-did the format of their emails, probably to > get around the rules that we’re working on. Do they read the > spama

Re: Spam Assassin - does it work or not? - LONG HEADERS URL

2014-08-07 Thread Andy
On Thu, August 7, 2014 9:38 am, Andy Balholm wrote: > Looking at Lunarpages pricing page, it looks like shell access is a $2.00 > per month add-on. Since you don’t know what it is, I expect you didn’t > think it was worth paying extra for it, so you probably don’t have it. i wouldnt know what to

Re: rule for repeated tracking numbers

2014-08-07 Thread Philip Prindeville
On Aug 6, 2014, at 11:20 PM, Axb wrote: > On 08/07/2014 07:01 AM, Philip Prindeville wrote: >> >> On Aug 6, 2014, at 1:23 PM, Paul Stead wrote: >> >>> >>> On 06/08/14 20:00, John Hardin wrote: Can some fresh samples be posted to pastebin? >>> http://pastebin.com/yHiT2s3t >>> http:

Re: rule for repeated tracking numbers

2014-08-07 Thread Andy Balholm
This particular spammer just re-did the format of their emails, probably to get around the rules that we’re working on. Do they read the spamassassin-users list? (I can tell it’s the same spammer, since the return address in Dundrum, Ireland, is the same as some of the earlier ones, and the styl

Re: Spam Assassin - does it work or not? - LONG HEADERS URL

2014-08-07 Thread Andy Balholm
On Aug 7, 2014, at 9:30 AM, Andy wrote: > I have no idea whether I have shell access. I don't even know what that > is. Sorry. Shell access means being able to log into their server and get a command prompt, so that you can do configuration that isn’t supported by their control panel. Lookin

Re: Spam Assassin - does it work or not? - LONG HEADERS URL

2014-08-07 Thread Andy
I've asked them. But I am not going to expect they will move on it all that quickly if at all. It's been quite a battle in even getting them to admit there is a problem. I have no idea whether I have shell access. I don't even know what that is. Sorry. But thank you for this much anyway. Maybe it

Re: Spam Assassin - does it work or not? - LONG HEADERS URL

2014-08-07 Thread Bowie Bailey
On 8/7/2014 12:05 PM, Andy wrote: As requested, here are 5 long headers, just taken at random. I can provide more if needed. http://pastebin.com/g86GFGwp None of these have any detail on the SA scores. Ask Lunarpages to add this line to the local.cf or user_prefs file: add_header all Repor

Similar pattern of emails Comparing Prices

2014-08-07 Thread emailitis.com
I have had a fair number of VERY similar Spam emails that are all about comparing prices. I have put a number in a pastebin below. They all seem to be originating from Fasthosts in UK which I cannot really blacklist in entirety. Can anyone suggest how to block it with a Spamassassin rule?

Spam Assassin - does it work or not? - LONG HEADERS URL

2014-08-07 Thread Andy
As requested, here are 5 long headers, just taken at random. I can provide more if needed. http://pastebin.com/g86GFGwp and to Bowie, as for raising the score from 2.5 to 5, believe me when I say I've tried all different settings. The 2.5 was advised to me by someone who was a senior tech in the

Re: Spam Assassin - does it work or not?

2014-08-07 Thread Axb
On 08/07/2014 03:16 PM, Andy wrote: I would appreciate any insights anyone can offer to me, or for that matter to Lunarpages because I'm not clear that even they understand what is going on, nor how to fix this very nagging problem. to make a long story short.. SpamAssassin is a framework and r

Re: Spam Assassin - does it work or not?

2014-08-07 Thread Bowie Bailey
Please keep the discussion on the list so that everyone can participate. On 8/7/2014 11:16 AM, Andy wrote: thank you for this, although I can't really understand most of any of it. I will pass it over to Lunarpages tech and see what they have to say. I have no administrative control whatsoever.

Re: Missing rules

2014-08-07 Thread Dave Pooser
On 8/7/14, 9:37 AM, "James B. Byrne" wrote: >Which explains, of course, why Linux distributions belonging to the >RedHAt/CentOs/ScientificLinux/RHOS/ClearOS family are so lacking in >popularity >and so seldom found in corporate environments. Those distros are popular because corporate environmen

Re: Spam Assassin - does it work or not?

2014-08-07 Thread Bowie Bailey
On 8/7/2014 9:16 AM, Andy wrote: I have now had three different rounds of complaints/discussions with their tech support about it, (January, May and this past July). During that time the server was rebooted, or my website rebooted, my server changed (just within the past couple of weeks), the fil

Re: Missing rules

2014-08-07 Thread James B. Byrne
On Wed, August 6, 2014 17:30, Quanah Gibson-Mount wrote: > --On Wednesday, August 06, 2014 6:24 PM -0400 "James B. Byrne" > wrote: > >> I am constrained to run the version provided by the upstream distro >> packager (RedHat). When they update SA then, and only then, will I get >> the upgrade. >

Spam Assassin - does it work or not?

2014-08-07 Thread Andy
I am writing this rather long message in hopes that I might get at least one cogent response to a very nagging problem and situation that involved Spam Assassin. I run a very small toy company, number of employees: 1, and have a website, www.opticaltoys.com that has been hosted by Lunarpages since