Re: Possible pattern here?

2014-09-09 Thread Joolee
Sounds like a case of http://www.gossamer-threads.com/lists/spamassassin/users/187586 You might be able to find the rule mentioned here: http://svn.apache.org/viewvc/spamassassin/trunk/rulesrc/sandbox/jhardin/ On 10 September 2014 07:38, Bob Proulx wrote: > I am helping a friend who is getting

Possible pattern here?

2014-09-09 Thread Bob Proulx
I am helping a friend who is getting hit with a lot of spam. He is running SpamAssassin. While looking at the spam that he is receiving I am seeing a pattern in the headers. Along with the normal headers the messages also contain a random set of "random" headers. Here are just the pattern heade

Re: [SPAM] Re: False positive in rule: FUZZY_XPILL

2014-09-09 Thread John Hardin
On Tue, 9 Sep 2014, Marcin Mirosław wrote: W dniu 09.09.2014 o 15:19, John Hardin pisze: On Tue, 9 Sep 2014, Marcin Mirosław wrote: Hi again, I noticed FP on mentioned rule when checking ham email. Due to confidential content I don't want to share it on ML. Is somebody willing to improve ment

Re: How to report spam to mailspike

2014-09-09 Thread Jose Borges Ferreira
Hi Marcin, I'm affiliated with Mailspike and just want to say that we have changed the contact form so you now have a option specify that you are contacting as Self-employed or private. We have also configured ab...@mailspike.org if you need to contact directly. Regarding your original problem,

What's the difference between the T_SMF_FM_FORGED_REPLYTO rule and the FREEMAIL_FORGED_REPLYTO rule?

2014-09-09 Thread Mark London
The T_SMF_FM_FORGED_REPLYTO rule was recently added I think, and it looks identical to FREEMAIL_FORGED_REPLYTO. A mistake, or is there a reason for both? - Mark

Re: Valid TLDs

2014-09-09 Thread Martin Gregorie
On Tue, 2014-09-09 at 11:10 +0200, Antony Stone wrote: > On Tuesday 09 September 2014 at 11:04:04 (EU time), Martin Gregorie wrote: > > > I use Fedora, which is roughly equivalent to Debian unstable, i.e. fairly > > cutting edge as its the next step back toward stability from 'testing'. > > Hm, t

Re: Bayes autolearn questions

2014-09-09 Thread Axb
On 09/09/2014 03:50 PM, Alex Regan wrote: Hi, Did you understand that all tokens are learned, regardless whether they have been seen before? That doesn't really matter from a user perspective, though, right? I mean, if there are tokens that have already been learned are learned again, the net

Re: Bayes autolearn questions

2014-09-09 Thread Alex Regan
Hi, Did you understand that all tokens are learned, regardless whether they have been seen before? That doesn't really matter from a user perspective, though, right? I mean, if there are tokens that have already been learned are learned again, the net result is zero. Very much not zero. Each

Re: Bayes autolearn questions

2014-09-09 Thread Alex Regan
Hi, Please use plain-text rather than HTML. In particular with that really bad indentation format of quoting. It doesn't seem possible with gmail directly any longer, so I've set up thunderbird for this. Maybe it is, but not after clicking around in the obvious places. It's possible. A li

Re: False positive in rule: FUZZY_XPILL

2014-09-09 Thread John Hardin
On Tue, 9 Sep 2014, Marcin Mirosław wrote: Hi again, I noticed FP on mentioned rule when checking ham email. Due to confidential content I don't want to share it on ML. Is somebody willing to improve mentioned rule or one case is not enough to look at it? If somebody would like to look insight i

False positive in rule: FUZZY_XPILL

2014-09-09 Thread Marcin Mirosław
Hi again, I noticed FP on mentioned rule when checking ham email. Due to confidential content I don't want to share it on ML. Is somebody willing to improve mentioned rule or one case is not enough to look at it? If somebody would like to look insight it I can send such email offlist. Regrds

Re: How to report spam to mailspike

2014-09-09 Thread Tom Hendrikx
On 09/09/2014 11:39 AM, Marcin Mirosław wrote: > W dniu 29.08.2014 o 23:36, Dave Warren pisze: >> On 2014-08-29 02:38, Marcin Mirosław wrote: >>> So what should I do in your opinion? I'm getting spam to my private >>> spamtrap so I can't fill fields about company - it doesn't matter where >>> I'm h

Re: How to report spam to mailspike

2014-09-09 Thread Marcin Mirosław
W dniu 29.08.2014 o 23:36, Dave Warren pisze: > On 2014-08-29 02:38, Marcin Mirosław wrote: >> So what should I do in your opinion? I'm getting spam to my private >> spamtrap so I can't fill fields about company - it doesn't matter where >> I'm hired for reporting spam. What if I would be unemploye

Re: Valid TLDs

2014-09-09 Thread Antony Stone
On Tuesday 09 September 2014 at 11:04:04 (EU time), Martin Gregorie wrote: > I use Fedora, which is roughly equivalent to Debian unstable, i.e. fairly > cutting edge as its the next step back toward stability from 'testing'. Hm, that's not quite the right way round - "testing" is the step in betw

Re: Valid TLDs

2014-09-09 Thread Martin Gregorie
On Tue, 2014-09-09 at 10:41 +0200, Axb wrote: > On 09/09/2014 10:27 AM, Martin Gregorie wrote: > > On Mon, 2014-09-08 at 23:05 -0600, Amir Caspi wrote: > >> An automated method would prevent a number of problems, and since the > >> allowed TLDs are evolving, I think it makes the most sense. I can't

Re: Valid TLDs

2014-09-09 Thread Reindl Harald
Am 09.09.2014 um 03:45 schrieb Karsten Bräckelmann: > This incidence is part of the initial round of IANA accepting generic > TLDs. There's hundreds in this wave, and some are abused early. This is > moonshine registration, nothing like new TLDs being accepted in the > coming years. > > Or is it?

Re: Valid TLDs

2014-09-09 Thread Axb
On 09/09/2014 10:27 AM, Martin Gregorie wrote: On Mon, 2014-09-08 at 23:05 -0600, Amir Caspi wrote: An automated method would prevent a number of problems, and since the allowed TLDs are evolving, I think it makes the most sense. I can't speak to a specific implementation, but -something- automa

Re: Valid TLDs (was: Re: Custom rule not hitting suddenly?)

2014-09-09 Thread Martin Gregorie
On Mon, 2014-09-08 at 23:05 -0600, Amir Caspi wrote: > An automated method would prevent a number of problems, and since the > allowed TLDs are evolving, I think it makes the most sense. I can't > speak to a specific implementation, but -something- automated... > Same here: I pick up new SA versio