Re: Honeypot email addresses

2014-11-23 Thread Ted Mittelstaedt
On 11/23/2014 2:17 AM, Aban Dokht wrote: On 22.11.2014 22:32, Dave Funk wrote: Another way to seed spamtrap addresses is to make up some and then feed them into "unsubscribe" links in spam sent to regular users. I've got some of those I started that way 15 years ago and they're still going s

Re: Honeypot email addresses

2014-11-23 Thread Ted Mittelstaedt
On 11/23/2014 2:12 AM, Aban Dokht wrote: On 22.11.2014 22:05, Ted Mittelstaedt wrote: That's a lot of work, there's a much easier way Just search your /var/log/maillog for user unknown messages, and create email addresses for the unknown users which are showing up multiple times over multip

Re: Emails with extremely long URLs

2014-11-23 Thread Adam Katz
On 11/22/2014 07:16 PM PST, John Hardin wrote: > On Sat, 22 Nov 2014, Igor Chudov wrote: >> I receive spam emails that contain extremely long URLs, about 2,400 >> characters. I wanted to know if spamassassin has a rule that I can >> turn on to flag such URLs. I do not think that I ever receive >> l

Re: Honeypot email addresses

2014-11-23 Thread Noel Butler
On 23/11/2014 20:12, Aban Dokht wrote: > On 22.11.2014 22:05, Ted Mittelstaedt wrote: > >> domain - I've seen user unknown messages for users who cancelled mailboxes >> on the domain over a decade ago. I figure 10 years of getting user unknown >> messages is long enough for any real humans

Re: Emails with extremely long URLs

2014-11-23 Thread Noel Butler
On 24/11/2014 00:07, Igor Chudov wrote: > On Sat, Nov 22, 2014 at 07:16:38PM -0800, John Hardin wrote: > On Sat, 22 Nov 2014, Igor Chudov wrote: I receive spam emails that contain > extremely long URLs, about 2,400 characters. I wanted to know if spamassassin > has a rule that I can turn on

Re: .co.at

2014-11-23 Thread Noel Butler
On 24/11/2014 01:18, Matus UHLAR - fantomas wrote: > On 22.11.14 20:22, Igor Chudov wrote: > >> I have a special perl script, that I wrote, that scans emails, makes a WHOIS >> query via a perl WHOIS module, and looks at the creation date. > > this was already discussed and discouraged - you

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Is you message supposed to contain some hidden meaningful information given that all it does it give some details of your setup? Tuesday, November 11, 2014, 2:55:41 PM, you wrote: RH> Bignum.pm RH> Am 11.11.2014 um 15:48 schrieb Niamh Holding: >> >> Hello Axb, >> >> Tuesday, Nov

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Sunday, November 23, 2014, 4:54:44 PM, you wrote: RH> the spamassassin part of the issue was explained But no fix provided, as far as I'm concerned everything that follows is in pursuit of working DNS checks and when that is achieved then further discussion would indeed be off top

Re: DNS checks not being performed-

2014-11-23 Thread Reindl Harald
Am 23.11.2014 um 14:11 schrieb Niamh Holding: RH> realize that this is *not* the mailing list for OS problems I guess only a dumb blonde would think it appropriate to ask about spamassassin not performing DNS checks on the spamassassin list the spamassassin part of the issue was explained and

Re: .co.at

2014-11-23 Thread Matus UHLAR - fantomas
On 22.11.14 20:22, Igor Chudov wrote: I have a special perl script, that I wrote, that scans emails, makes a WHOIS query via a perl WHOIS module, and looks at the creation date. this was already discussed and discouraged - you may get blocked at whois servers. DOB is a RBL created for this use.

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Sunday, November 23, 2014, 11:15:27 AM, you wrote: RH> he old RHEL5 CentOS 5 doesn't go end of life until 2017 RH> seeing even fc6 packages Only if offered by- base: repo.bigstepcloud.com * epel: mirror.bytemark.co.uk * extras: anorien.csc.warwick.ac.uk * rpmforge: mirror.

Re: Emails with extremely long URLs

2014-11-23 Thread Igor Chudov
On Sat, Nov 22, 2014 at 07:16:38PM -0800, John Hardin wrote: > On Sat, 22 Nov 2014, Igor Chudov wrote: > > >I receive spam emails that contain extremely long URLs, about 2,400 > >characters. I wanted to know if spamassassin has a rule that I can > >turn on to flag such URLs. I do not think that I

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Sunday, November 23, 2014, 11:21:56 AM, you wrote: RH> frankly your whole quoting style is just *rude* That's damn rich! RH> but after seeing the mess with Fedora packages on CentOS As you well know that was suggested by another list member! RH> in wich context you confirmed a

Re: DNS checks not being performed-

2014-11-23 Thread Reindl Harald
Am 23.11.2014 um 12:05 schrieb Niamh Holding: Hello Reindl, Sunday, November 23, 2014, 10:44:09 AM, you wrote: RH> you don't get it - the *context* is important You don't get it "in your own words" is stating that I have rewritten the output myself and what I quoted was not was was on the scr

Re: DNS checks not being performed-

2014-11-23 Thread Reindl Harald
Am 23.11.2014 um 12:03 schrieb Niamh Holding: Hello Reindl, Sunday, November 23, 2014, 10:49:01 AM, you wrote: RH> looking 2 seconds on the output below (you stripped originally) The original pst included- "Package perl.i386 4:5.8.8-43.el5_11 set to be updated" i am working for a decace n

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Sunday, November 23, 2014, 10:44:09 AM, you wrote: RH> you don't get it - the *context* is important You don't get it "in your own words" is stating that I have rewritten the output myself and what I quoted was not was was on the screen! -- Best regards, Niamh

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Sunday, November 23, 2014, 10:49:01 AM, you wrote: RH> looking 2 seconds on the output below (you stripped originally) The original pst included- "Package perl.i386 4:5.8.8-43.el5_11 set to be updated" RH> i RH> see you system want to install i386 packages on a x86_64 setup Tha

Re: DNS checks not being performed-

2014-11-23 Thread Reindl Harald
Am 23.11.2014 um 11:41 schrieb Niamh Holding: Hello Reindl, Sunday, November 23, 2014, 10:32:36 AM, you wrote: RH> i am out of this thread - you continue to strip the context out of RH> quotes and this is *not* a complete, uncutted console input/output There is no point in posting superfluo

Re: DNS checks not being performed-

2014-11-23 Thread Reindl Harald
Am 23.11.2014 um 11:30 schrieb Niamh Holding: Hello Reindl, Sunday, November 23, 2014, 10:15:50 AM, you wrote: RH> pack them in your own RH> words Further the original quotes are cut and paste and not IN MY OWN WORDS you don't get it - the *context* is important and only visible by *any* o

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Sunday, November 23, 2014, 10:32:36 AM, you wrote: RH> i am out of this thread - you continue to strip the context out of RH> quotes and this is *not* a complete, uncutted console input/output There is no point in posting superfluous stuff! Yum has clearly stated that Package 4:

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Sunday, November 23, 2014, 10:15:50 AM, you wrote: RH> pack them in your own RH> words Further the original quotes are cut and paste and not IN MY OWN WORDS -- Best regards, Niamhmailto:ni...@fullbore.co.uk pgp2PUIRR_mwv.pgp Description: PGP signat

Re: DNS checks not being performed-

2014-11-23 Thread Reindl Harald
Am 23.11.2014 um 11:28 schrieb Niamh Holding: Hello Reindl, Sunday, November 23, 2014, 10:15:50 AM, you wrote: RH> *lease* start to post complete outputs instead pack them in your own RH> words to help others helping you The missing stuff! Loaded plugins: fastestmirror Loading mirror speeds

Re: Honeypot email addresses

2014-11-23 Thread Reindl Harald
Am 23.11.2014 um 11:17 schrieb Aban Dokht: On 22.11.2014 22:32, Dave Funk wrote: Another way to seed spamtrap addresses is to make up some and then feed them into "unsubscribe" links in spam sent to regular users. I've got some of those I started that way 15 years ago and they're still going s

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Sunday, November 23, 2014, 10:15:50 AM, you wrote: RH> *lease* start to post complete outputs instead pack them in your own RH> words to help others helping you The missing stuff! Loaded plugins: fastestmirror Loading mirror speeds from cached hostfile * base: repo.bigstepcloud

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Axb, Wednesday, November 12, 2014, 12:38:00 PM, you wrote: A> yum install A> http://pkgs.repoforge.org/perl-Net-DNS/perl-Net-DNS-0.71-1.el5.rfx.x86_64.rpm "yum install perl-Net-DNS" shows- Loading mirror speeds from cached hostfile * base: repo.bigstepcloud.com * epel: mirror.bytemar

Re: Honeypot email addresses

2014-11-23 Thread Aban Dokht
On 22.11.2014 22:32, Dave Funk wrote: Another way to seed spamtrap addresses is to make up some and then feed them into "unsubscribe" links in spam sent to regular users. I've got some of those I started that way 15 years ago and they're still going strong. Also no good idea, as some of them

Re: DNS checks not being performed-

2014-11-23 Thread Reindl Harald
Am 23.11.2014 um 10:58 schrieb Niamh Holding: Hello Reindl, Tuesday, November 11, 2014, 7:52:10 PM, you wrote: RH> "perl-5.8.8-43.el5_11.x86_64" is part of 5.11 RH> this is completly untested and unsupported < CentOS 5.11 Axb's "yum update -y" was done and I'm seeing- Package 4:perl-5.8.8-43

Re: Honeypot email addresses

2014-11-23 Thread Aban Dokht
On 22.11.2014 22:05, Ted Mittelstaedt wrote: That's a lot of work, there's a much easier way Just search your /var/log/maillog for user unknown messages, and create email addresses for the unknown users which are showing up multiple times over multiple days. It's a great trick because it gets

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Reindl, Tuesday, November 11, 2014, 7:52:10 PM, you wrote: RH> "perl-5.8.8-43.el5_11.x86_64" is part of 5.11 RH> this is completly untested and unsupported < CentOS 5.11 Axb's "yum update -y" was done and I'm seeing- Package 4:perl-5.8.8-43.el5_11.x86_64 already installed and latest vers

Re: DNS checks not being performed-

2014-11-23 Thread Niamh Holding
Hello Axb, Wednesday, November 12, 2014, 12:21:19 PM, you wrote: A> is your SA 3.4 working now? A> after all this noise it would be rewarding to see some success. Mail is still being handled by our backup server but the primary is now back in situ Well the server was sitting on our dining tabl