Re: Spamassasin as a gateway filter for Exchange

addresses? I know Postfix is very flexible in that regard. No clue about Exchange. Good luck. -- Andy Dorman Ironic Design, Inc. AnteSpam.com, HomeFreeMail.com, ComeHome.net

Re: SMTP REJECT after DATA

spheric scores. So even if we can decide an email is spam before the DATA stage, it makes no difference since we have to store the thing for a while anyway in case the user wants to look for something caught that shouldn't be. Cheers, -- Andy Dorman Ironic Design, Inc. AnteSpam.com, HomeFreeMail.com, ComeHome.net

Re: new spam image with random body message

rries if this group can not find a pattern to check for. Sometimes the ONLY way to catch a spam is to deal with it based on the MTA sender characteristics. -- Andy Dorman Ironic Design, Inc. AnteSpam.com, HomeFreeMail.com, ComeHome.net

Re: Suggested Change For FS_TEEN_BAD

|ass(?:es|fuck(?:ing|ed)?|whip(?:ping|ped)?|spank(?:ing|ed)?)?|fuck(?:ing|ed)?|rap(?:e|ed|ing)+)\b/i describe FS_TEEN_BAD Subject says something bad about girls or boys ##} FS_TEEN_BAD -- Andy Dorman Ironic Design, Inc. AnteSpam.com, HomeFreeMail.com, ComeHome.net

Re: Suggested Change For FS_TEEN_BAD

s|fuck(?:ing|ed)?|whip(?:ing|ped)?|spank(?:ing|ed)?)?|fuck(?:ing|ed)?|rap(?:e|ed|ing)+)\b/i describe FS_TEEN_BAD Subject says something bad about teens, girls, boys, others ##} FS_TEEN_BAD Thank you again. -- Andy Dorman Ironic Design, Inc. AnteSpam.com, HomeFreeMail.com, ComeHome.net

Re: Suggested Change For FS_TEEN_BAD

quot; and cover as many variations as I could think of. :-) As written above, this still triggers on the original email that set off this quest. And I think with the most recent changes it will be very unlikely to FPs. But those could always be "famous last words". Did I

Re: Suggested Change For FS_TEEN_BAD

o not want to see ANY emails with selected words in the subject. But that is an individual choice and not something we are going to apply system-wide. Hooray for SpamAssassin, Open Source and being able to run our own filters as we choose to! -- Andy Dorman Ironic Design, Inc. AnteSpam.com, HomeFreeMail.com, ComeHome.net

Re: Barracuda Blacklist

BUZZHOST_STINGER wrote: On Sun, 2009-05-31 at 14:39 -0600, LuKreme wrote: On 29-May-2009, at 07:32, Andy Dorman wrote: 1. I could not find out WHY our IPs (we have a block of 32 for the cluster of servers that my email was being sent from) were being listed I do have to add this would be

Re: Barracuda Blacklist

is at all typical of this community, that will be useful time-saving information for us indeed. Bob, I can not speak for anyone else, but rest assured his juvenile response did NOT represent me. Cheers, -- Andy Dorman Ironic Design, Inc. AnteSpam.com, HomeFreeMail.com, ComeHome.net

Re: Barracuda Blacklist

place). But happy about it none the less. However, I do still feel it is a little self-serving to block someone and then "offer" to unblock them for money. Thank you Neil for pointing out what I missed. -- Andy Dorman Ironic Design, Inc. AnteSpam.com, HomeFreeMail.com, ComeHome.net

Re: Barracuda Blacklist

ts. And NOBODY wins when it gets to that point. Just wanted you to have ALL the facts when considering emailreg.org. -- Andy Dorman Ironic Design, Inc. AnteSpam.com, HomeFreeMail.com, ComeHome.net

Re: Bot spam increasing?

Marc Perkel wrote: Has anyone else noticed an increase in bot spam? My black list has grown by about 1/3 in the last month. We have seen an increase of over 50% in spam volume this month. A lot of it does seem to be coming from bots. -- Andy Dorman Ironic Design, Inc. AnteSpam.com

Re: Botnet FPs from Webmail Senders

empt any old cgi/php script. That way lies chaos. We were just hoping someone else in this group would have run into this situation and have a suggestion, given how ubiquitous webmail is these days. If not, we will keep pounding at it. Thanks for your time. -- Andy Dorman Ironic Design, Inc.

Botnet FPs from Webmail Senders

Botnet to do is recognize that this is an HTTP transaction, not smtp, and hence not hit on it. We were first wondering if anyone else has encountered this issue and possibly there is a fix we are not aware of? Otherwise, we would be willing to give a shot at a patch to handle this issue. J