Re: Sudden surge in spam appearing to come from my email address

2023-07-15 Thread Cathryn Mataga
Oh well, this was my own goof then I guess. I run sendmail, and I'm a programmer, but I don't do email for a living, so I only learn things as I pick them up slowly. On 7/15/2023 5:05 PM, Noel Butler wrote: On 16/07/2023 04:44, Cathryn Mataga wrote:   Someone has figured a way to

Re: Sudden surge in spam appearing to come from my email address

2023-07-15 Thread Cathryn Mataga
I just fixed a problem like this. I checked my headers, and the email was spf approved from google. I had included google so I could get some mail forwarded by them back awhile ago, but it's not worth getting this spam.  Someone has figured a way to use gmail to spam from their servers, looks l

Re: How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-25 Thread Cathryn Mataga
On 10/25/2014 9:29 PM, John Hardin wrote: On Sat, 25 Oct 2014, Cathryn Mataga wrote: Received: from ecuador.junglevision.com (localhost [127.0.0.1]) by ecuador.junglevision.com (8.14.7/8.14.7) with ESMTP id s9P2o1ZZ026032 (version=TLSv1/SSLv3 cipher=DHE-RSA-AES256-GCM-SHA384 bits

Re: How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-25 Thread Cathryn Mataga
Okay, here's another header.Shows X-Xpam-Status as no. In local.cf I changed to this, just to be sure. rewrite_header Subject [SPAM][JUNGLEVISION SPAM CHECK] Return-Path: X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ecuador.junglevision.com X-Spam-Level: * X-Spam

Re: How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-20 Thread Cathryn Mataga
On 10/20/14, 9:46 AM, jdebert wrote: On Mon, 20 Oct 2014 12:39:57 +0200 Matus UHLAR - fantomas wrote: On 17.10.14 10:08, jdebert wrote: Will URIBL_BLOCKED cause [SPAM] to be inserted into Subject? no, it will more likely cause [SPAM] _not_ to be inserted, because it wouldn't be detected.

Re: How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-17 Thread Cathryn Mataga
??? Are you using imap to fetch your mail? Thanks guys. Yes I am using imap. What I have is a .procmailrc that forwards to meganspam. That's how this email got to meganspam. Is spamassasin is running twice? Once going to megan@ and then at meganspam@. Wh

Re: How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-17 Thread Cathryn Mataga
y the blacklists think you exceeded the free limit: they count queries per DNS server since that's what sends the queries to them. To avoid this you should be running a private, non-forwarding DNS server. On 17.10.14 09:17, Cathryn Mataga wrote: I run DNS on my network. I think it should

Re: How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-17 Thread Cathryn Mataga
On 10/17/14, 4:13 AM, Martin Gregorie wrote: On Thu, 2014-10-16 at 22:37 -0700, Cathryn Mataga wrote: The score is only 1.9, 3.5 required. What's going on here? X-Spam-Status: No, score=1.9 required=3.5 tests=BAYES_50,DKIM_SIGNED, EMAIL_URI_PHISH,HTML_MESSAGE,MIME_HTML_ONLY,RCVD_IN_DNSW

How is it that my X-Spam-Status is no, but my header gets marked with

2014-10-16 Thread Cathryn Mataga
The score is only 1.9, 3.5 required. What's going on here? From me...@ecuador.junglevision.com Mon Oct 13 08:38:09 2014 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.3.2 (2011-06-06) on ecuador.junglevision.com X-Spam-Level: * X-Spam-Status: No, score=1.9 required=3.5 tests=BAYE

use_auto_learn 0 but then autolearn=ham

2013-05-17 Thread Cathryn Mataga
My local.cf has this. bayes_file_mode 0666 use_bayes 1 use_auto_learn 0 skip_rbl_checks 0 rbl_timeout 3 score RCVD_IN_BL_SPAMCOP_NET 3 score RCVD_IN_URIBL_SBL 3 But then I see a spam that I keep training as spam over and over again, but then it keeps getting auto-learned as Ham. How d

Re: How to report a spam botnet

2012-11-20 Thread Cathryn Mataga
On 11/20/2012 4:29 AM, Jason Ede wrote: However, ISP's blocking smtp ports for suspected spammers would help... Ideally they'd block all traffic on port 25 or 587 not sent through their SMTP engine which would do some basic spam checks... Easy enough to block #25 by default -- turn it on for

Re: Words with embedded symbols

2012-11-12 Thread Cathryn Mataga
Here's another version. This successfully recognises all four of your examples and doesn't fire on any of my other spam test messages: describe MG_TWOLETTER_OBFUSCATION Two letter obfuscation (X:X X :X)) header MG_TWOLETTER_OBFUSCATION Subject =~ /[A-Z][:%~;^][A-Z]\s{0,1}[:%~;^][A-Z0

Re: spam from venamail

2012-11-10 Thread Cathryn Mataga
On 11/8/2012 8:58 AM, Martin Gregorie wrote: On Thu, 2012-11-08 at 07:23 -0800, R - elists wrote: is anyone else getting spam from venamail.com servers ? No. Martin I just grepped a gigabyte collection of spam for venamail.com and found nothing.

Re: BAYES_99 score

2012-10-24 Thread Cathryn Mataga
On 10/24/2012 8:35 AM, Jari Fredriksson wrote: 24.10.2012 18:19, Ned Slider kirjoitti: I have had very good success running adjusted scores for BAYES rules, but I am very careful how I train my bayes database. I've disabled auto-learning and only manually train on hand-checked ham and spam examp

I think the bayes filter just goes bad if you ignore it

2012-10-20 Thread Cathryn Mataga
And that no amount of training will fix it once it goes bad. I was getting maybe 30-40 spams through every day and many of them marked BAYES_00 -- and the last month I've been carefully feeding the software spam and ham lists, all carefully checked, but so much of it just kept coming in. But

Re: Words with embedded symbols

2012-10-05 Thread Cathryn Mataga
Thanks for the comments. I'll see if I can cook something up here. Someone asked to see the actual messages. I collected 4 of these messages and put them at this link. http://www.mataga.net/mataga/spam.txt

Words with embedded symbols

2012-10-04 Thread Cathryn Mataga
I'm getting a lot of SPAM with words written like this. These are pretty horrible, and I don't like getting them every day. A:N ;A %L" P:O ~R %N ( P &lCT U #R&E / Is there a way to make a rule for strings of characters that would ignoring non-alpha characters embedded in the string?

X-Spam-Status: No, but still marked with [SPAM]

2012-09-21 Thread Cathryn Mataga
I'm getting these messages, some of them real emails, that get marked with [SPAM] even though X-Spam-Status: comes up as No. I updated to the latest build on Fedora though I think this has been going on awhile. It happens with some email accounts but not others. From me...@ecuador.junglevis