Randal, Phil skrev:
body NICE_GIRL_03 /Email me at .{,74} only, because I am writing
not from my personal email\./
Would do nicely.
No need to be too clever here.
Cheers,
Phil
Apparently that won't work on all systems... (And that's why I ran into
problems before..)
On my SUSE sys
McDonald, Dan skrev:
On Fri, 2008-02-22 at 10:19 +0100, Anders Norrbring wrote:
Anders Norrbring wrote:
That was it. I copy-pasted those rules from
/etc/mail/spamassassin/misc.cf on one of the servers I maintain;
they're just rules I've created to try to keep as much spam as possi
> Anders Norrbring wrote:
> > Sorry, I've been missing quite a lot of this thread... Can I please
> get an example of the complete ruleset, and a hint on where to place
> it?
>
> That was it. I copy-pasted those rules from
> /etc/mail/spamassassin/misc.cf on
> > I've actually been running this set of 5 rules on several of the ISP
> > mail systems I've got my fingers in (watch for line wrap, sorry):
> >
> > # "Nice girl" wants to send pics, but only if you email the address
> in
> > the body
> > # start scoring at .5, see how that whacks'em.
> > body NI
arni skrev:
Anders Norrbring schrieb:
arni skrev:
Igor Chudov schrieb:
I am receiving a lot of spams from "bored girls", that ask me to email
to some .info email addresses. Just curious what these spams are
promoting, what is the scam behind them?
i
probably to verify the addr
arni skrev:
Igor Chudov schrieb:
I am receiving a lot of spams from "bored girls", that ask me to email
to some .info email addresses. Just curious what these spams are
promoting, what is the scam behind them?
i
probably to verify the addresses they tried because then they gain a lot
of va
Gene Heskett skrev:
On Thursday 19 July 2007, R.Smits wrote:
Matt Kettler wrote:
Tarak Ranjan wrote:
greetings,
i'm getting pdf attached spam. please help me stop that using
spamassassin...
Horacio_FILE_506292_6906.pdf
/tarak
The PDFInfo plugin from rulesemporium is designed for this kind o
Yet Another Ninja skrev:
On 7/19/2007 1:10 PM, Anders Norrbring wrote:
Matt Kettler skrev:
Tarak Ranjan wrote:
greetings,
i'm getting pdf attached spam. please help me stop that using
spamassassin...
Horacio_FILE_506292_6906.pdf
/tarak
The PDFInfo plugin from rulesemporium is des
Matt Kettler skrev:
Tarak Ranjan wrote:
greetings,
i'm getting pdf attached spam. please help me stop that using
spamassassin...
Horacio_FILE_506292_6906.pdf
/tarak
The PDFInfo plugin from rulesemporium is designed for this kind of thing.
http://www.rulesemporium.com/plugins.htm
Persona
Henrik Krohns skrev:
On Wed, Jul 11, 2007 at 07:44:37PM -0400, Phil Barnett wrote:
We can't be the first people to come up against this problem. How have others
solved it?
Bunch'o'Mirrors? Crude and effective.
*raise a hand* I volonteer to mirror, I have lots of both hd and bw
capacity to
guenther skrev:
On Thu, 2007-06-07 at 17:45 +0200, Anders Norrbring wrote:
Anyone else getting 404 errors from RDJ lately?
Yes, this topic came up just a few hours ago. Probably a dDOS attack.
Please disable all RDJ till further notice.
guenther
Now it's at least partly worki
I just noticed this in my lint;
[3425] warn: config: warning: score set for non-existent rule SARE_GIF_STOX
And I can't find the source for the SARE_GIF_STOX rule, any hints please?
Also, I've updated my SUSE builds to SpamAssassin 3.2.1 for SUSE 10.1
and 10.2, found at ftp://ftp.norrbring.com
Anyone else getting 404 errors from RDJ lately?
The following rules had errors:
Tim Jackson's (et al) bogus virus warnings had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
TripWire had an unknown error:
curl exit code: 7
curl: (7) couldn't connect to host
000
EvilNum
Daryl C. W. O'Shea skrev:
For anyone who's not aware of it, I should mention that Michael Monnerie
has been maintaining a German spam ruleset for quite some time and has
been as of late updating it often.
# Home: http://sa.zmi.at/rulesets/70_zmi_german.cf
# SpamAssassin Channel: 70_zmi_german.
I just ran into a big problem..
[25735] warn: bayes: database version is different than we understand
(3), aborting! at
/usr/lib/perl5/vendor_perl/5.8.8/Mail/SpamAssassin/BayesStore/SQL.pm
line 136
Any ideas please?
Anders
Craig Carriere skrev:
I receive the exact same error on SL
Micke Andersson wrote:
Anders Norrbring wrote:
I have a setup with Postfix, Amavis-new and SpamAssassin on one
server, and the IMAP server on another.
What's the best / easiest way(s) to enable users to report spam mails
for training the Bayes DB?
I would say that the easiest way would
I have a setup with Postfix, Amavis-new and SpamAssassin on one server,
and the IMAP server on another.
What's the best / easiest way(s) to enable users to report spam mails
for training the Bayes DB?
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Description: S/MIME Cryptogr
side LAN.
How can I resolve this problem.
Regards,
First I'd like to say that it's good.. ;) They're probably sending spam,
so it should get tagged. But if you don't want it, just configure to not
scan outgoing mails originating from localhost.
--
Anders Norrbring
Norrbr
Hoover Chan skrev:
I just upgraded SA from 3.1.0 to the current 3.1.7 via CPAN and am
finding that a huge increase in the amount of spam that's coming in. On
the order of almost 10 times the number that leaked into my inbox.
Has anyone else run into this behavior? If so, what can I do?
Config
Federico Giannici skrev:
Rick Macdougall wrote:
Anders Norrbring wrote:
I have a slight "problem".. I thought I'd finally start using
sa-learn to train the Bayes, the catch is that I have Cyrus and its
mailboxes on another server.. I transport the mail via LMTP to Cyrus.
I have to mount it as a NFS share (or similar) to be able to run it?
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Description: S/MIME Cryptographic Signature
mails over the kill limit. Now we don't
have to see them at all.. :)
Anders.
-Original Message-
From: Anders Norrbring [mailto:[EMAIL PROTECTED]
Sent: 07 November 2006 13:51
To: users@spamassassin.apache.org
Subject: No hit on this..
I don't get any points or hits on the
Anders Norrbring skrev:
James Lay skrev:
On Tue, 07 Nov 2006 14:51:01 +0100
Anders Norrbring <[EMAIL PROTECTED]> wrote:
I don't get any points or hits on the following mail (source code)
[8<]
I don't even see any SpamAssassin headers on this thing saying one way
or th
Martin Hepworth skrev:
Anders Norrbring wrote:
Anders
heres my analysis
Content analysis details: (12.0 points, 5.0 required)
pts rule name description
--
--
0.7 HOST_EQ_D_D_D_D
James Lay skrev:
On Tue, 07 Nov 2006 14:51:01 +0100
Anders Norrbring <[EMAIL PROTECTED]> wrote:
I don't get any points or hits on the following mail (source code)
[8<]
I don't even see any SpamAssassin headers on this thing saying one way
or the otherdid this
raising the hackles of a top White House aide in the
final hours before the midterm elections.
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Description: S/MIME Cryptographic Signature
it's something else causing it.
--
Anders Norrbring
Norrbring Consulting
Sammy Anderson skrev:
I'm pretty sure it is that, because when I turn of bayes altogether, the
spikes go away. I also ran sa-learn --force-expire and it PEGS the VM.
With bayes debugging enabled, I see lines
Darn, that came out as text only.. Find the orginal with html and image
attached! Not the same, but the image is the same at least..
Anders.
Anders Norrbring skrev:
The below found junk didn't even trigger my spamassassin to tag it at
all, yet my lower level is set to 1.6 points in A
e, it's easy and convenient.
McClaren's greatest task of all is to solve a puzzle that escaped
Eriksson until the very end.match. He joined Ray Wilkins (1986) and
David Beckham (1998) who also saw a
If Chris Kirkland can stay fit for three games he might get his chance
with Norwich's
This type of image spam is getting more common, and is not detected.. At
least not here..
--
Anders Norrbring
Norrbring Consulting
smime.p7s
Description: S/MIME Cryptographic Signature
I've made new builds for SUSE 10.1 of SpamAssassin 3.1.5, please test
them if you have a chance, and send me any relevant feedback.
You'll find them at http://www.norrbring.com/SuSE
--
Anders Norrbring
Norrbring Consulting
the *pre25.cf *pre30.cf, like "99_sare_fraud_pre25x.cf"
is it that simple?
Yep, it's almost as simple as that.. :) Also edit your RulesDuJour
config file so it doesn't download those rulesets again.
Then when you've deleted the rules, do a 'spamassassin --lint&
Nigel Frankcom skrev:
On Fri, 01 Sep 2006 12:43:36 +0200, Anders Norrbring
<[EMAIL PROTECTED]> wrote:
I'm trying to get IO::Socket::INET6 to install since I actually use
IPv6.. But so far no luck, and I haven't found any cure when Googling
around on the subject either.
An
=32, 121 wallclock secs ( 0.16 cusr + 0.10 csys = 0.26 CPU)
Failed 1/3 test programs. 9/32 subtests failed.
make: *** [test_dynamic] Error 255
--
Anders Norrbring
Norrbring Consulting
Matt Kettler skrev:
Anders Norrbring wrote:
*sigh*.. do we really need to start a SpamAssassin-Users mailing list
drinking game?
For those not familiar, when you get home for the evening, sit down,
with a beverage of your choice (milk, soda, coffee, wine, beer) and read
the days mail for
iki search often returns no
results, or even pages without relevance.
--
Anders Norrbring
Norrbring Consulting
y
mind up?
--
Anders Norrbring
Norrbring Consulting
Anders Norrbring skrev:
Anders Norrbring skrev:
Benny Pedersen skrev:
[..snip..]
After some more error-message-surfing on Google, it looks like it's SA
itself that doesn't allow any other username than root to use the Bayes
SQL plugin.
So, maybe I need to tell SA that
Anders Norrbring skrev:
Benny Pedersen skrev:
On Tue, August 29, 2006 08:16, Anders Norrbring wrote:
[6204] dbg: bayes: unable to initialize database for vscan user,
aborting!
from a new sql database this is default error, means that there is no
data to
work with so far
Well, there
Benny Pedersen skrev:
On Tue, August 29, 2006 08:16, Anders Norrbring wrote:
[6204] dbg: bayes: unable to initialize database for vscan user, aborting!
from a new sql database this is default error, means that there is no data to
work with so far
Well, there actually IS one post in the DB
password
Shouldn't SA try to contact MySQL as "username" and not as "vscan"? The
processes runs as the user vscan.
--
Anders Norrbring
Norrbring Consulting
jdow skrev:
From: "Anders Norrbring" <[EMAIL PROTECTED]>
Stuart Johnston skrev:
Anders Norrbring wrote:
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails
every day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and S
Stuart Johnston skrev:
Anders Norrbring wrote:
Hiya all!
I'm getting really sick on recieving 10-100 of the attached mails
every day. Any suggestions on how to get rid of them? Apparently my
Amavis-new and SpamAssassin only tags them from 0 to 1.6 points.
FuzzyOCR, ImageInfo, SAR
Is there any effective rule set for blocking off all these "chronometer"
and "wrist watch" spams?
Preferably one that I can add into my rules_du_jour..
--
Anders Norrbring
Norrbring Consulting
14-7834-45?id=04
Briefmarken
http://ebay.de.mediaplex.com/ad/ck/1066-24214-7834-45?id=05
small part of e-mail
Thanks for checking.
mfg zmi
Nope. It's a scam, all eBay e-mails originates from ebay.com ebay.co.uk
ebay.de etc...
The e-mail you copied originates from easynet.de
--
A
Take a look at this message source, it doesn't get tagged at all!
Return-Path: <[EMAIL PROTECTED]>
Received: from mail.the-server.net ([unix socket])
by iris (Cyrus v2.1.15) with LMTP; Tue, 30 Aug 2005 10:06:37 +0200
X-Sieve: CMU Sieve 2.2
Received: from localhost (localhost [127.0.
46 matches
Mail list logo
