RE: Ready to throw in the towel on email providing...

> -Original Message- > From: John Hardin [mailto:jhar...@impsec.org] > Sent: 2014-07-28 12:55 > To: users@spamassassin.apache.org > Subject: RE: Ready to throw in the towel on email providing... > > > On Mon, 28 Jul 2014, Greg Ledford wrote: > > The only thing that evolves faster than b

RE: Heads up, yahoo server on some blacklists!

> -Original Message- > From: Benny Pedersen [mailto:m...@junc.eu] > Sent: 2013-11-12 13:52 > To: users@spamassassin.apache.org > Subject: Re: Heads up, yahoo server on some blacklists! > > > Chris Santerre skrev den 2013-11-12 19:24: > > 98.136.218.139

Heads up, yahoo server on some blacklists!

98.136.218.139 Host Name: nm12-vm10.bullet.mail.gq1.yahoo.com Listed on: Sorbs, Spamcop, and Lashback Causing lots of FPs Thanks, Chris Santerre SysAdmin and Spamfighter

RE: .pw / Palau URL domains in spam

I posted this yesterday for those wanting an SA rule, here: header PW_IS_BAD_TLDFrom =~ /\.pw\b/ describe PW_IS_BAD_TLDPW TLD ABUSE score PW_IS_BAD_TLD3 Change score to whatever you want. Enjoy. --Chris > -Original Message- > From: Michael Orlitzky [mailto:mich...@orli

RE: .pw / Palau URL domains in spam

Hypothetically if one were running a reputation system and didn't want to block all of a TLD like .pw, one could: Locally cache whois info create a local rbl check against a sending domain on the whois info based on both the registrar and the creation date Created On:08-May-2013 05:24:04 UTC Name

RE: dns*.registrar-servers.com as a rogue registrar?

g us know about the issue. > > So, if you are having problems with domains registered with > Namecheap, I > suggest that you open a support request for the "Domains -- Legal and > Abuse" department. From the sounds of it, you'd be doing us > all a big favor! >

RE: dns*.registrar-servers.com as a rogue registrar?

The owner is NameCheap, Inc. A quick google will bring up historical problems with NameCheap and its owner and its DBAs. I dare not say anything bad about them and let you judge for yourself on their history. Richard Kirkendall has a tendency to yell "Slander!" when someone even mentions their

RE: .pw / Palau URL domains in spam

10 days and still being abused badly. Recommending for everyone to just refuse any .pw for those wanting an SA rule, here: header PW_IS_BAD_TLDFrom =~ /\.pw\b/ describe PW_IS_BAD_TLDPW TLD ABUSE score PW_IS_BAD_TLD3 Change score to whatever you want. Enjoy. --Chris

icontact random tracking urls and scoring on unwanted TLDs

etwork..." blah blah... I'm just passing the info along :) Thanks, Chris Santerre SysAdmin and Spamfighter

How was your holiday weekend spam traffic?

I'm just curious this morning. I see a dip in spam trapped, but a pretty big rise in blocking. I expected a lot worse over the long holiday weekend. Did someone get arrested or something? I'm not fully awake yet but it looks like my blocking numbers from RBLs tripled over weekend. --Chris

RE: JMF_W & URIBL_BLACK

> This just becomes increasingly important when management drops an > email in the "Put Spam Here" folder for training that clearly isn't > spam, but something they've subscribed to, like a newsletter. For the > email that even I question sometimes, I'd like to be able to give them > a definitive

RE: .cn Oddity

> -Original Message- > From: jdow [mailto:j...@earthlink.net] > > {^_-} (Some of the ninjas are burned out. I have one such to my > back when we're both in the room beating away at our CPUs.) > +1 burnout. Too many things going on. Will eventually get my 232nd wind and be ba

RE: SA needs a new paradigm for rule structure

> -Original Message- > From: Ted Mittelstaedt [mailto:t...@ipinc.net] > Sent: 2009-10-10 02:40 > To: Marc Perkel > Cc: users@spamassassin.apache.org > Subject: Re: SA needs a new paradigm for rule structure > > > Marc Perkel wrote: > > I've brought this idea up over the years but I'll t

FW: ALL: SPAM-L will be shutdown

I don't normally cross post, but this is kind of MAJOR news. For those who don't know, SPAM-L has been what I consider an anchor in the anti-spam community since long before I got interested in a clean Inbox. This is a very dark day indeed. :-( Monday, 11 May 2009 it goes silent.

RE: Adding SARE rules

As of right now they are not being updated. But still being used, even by myself. --Chris > -Original Message- > From: Marcin Krol [mailto:mrk...@gmail.com] > Sent: 2008-12-19 06:35 > To: users@spamassassin.apache.org > Subject: Adding SARE rules > > > Hello everyone, > > 1. First o

RE: remove SURBL rules

> -Original Message- > From: u...@3.am [mailto:u...@3.am] > Sent: 2008-12-17 23:16 > To: SA Mailing list > Subject: Re: remove SURBL rules > > > On Wed, 17 Dec 2008, LuKreme wrote: > > > On 16-Dec-2008, at 23:57, ram wrote: > >> http://www.surbl.org/usage-policy.html > > > > > > I did

RE: URIBL_BLACK

> -Original Message- > From: Jeff Chan [mailto:[EMAIL PROTECTED] > Sent: 2008-10-13 05:28 > To: users@spamassassin.apache.org > Subject: Re: URIBL_BLACK > > > On Friday, October 10, 2008, 11:29:33 PM, Yet Ninja wrote: > > > Something tells me your stats are either obsolete, biased, bor

RE: Looking for hosts to white list

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: 2008-04-23 10:48 > To: Marc Perkel > Cc: users@spamassassin.apache.org > Subject: Re: Looking for hosts to white list > > > > Marc Perkel writes: > > Yep - one of the ideas I originated here is this list

RE: URIBL

> 71.920 77.1604 1.23310.984 0.710.00 URIBL_BLACK You've always surprised me with your Ham rates Theo. I'm guessing these are prbly good sites that fell into the "affiliate" spam category and got listed. Anyway to pull out the top hitters of Ham and let us know. I'd like to find ou

RE: Time to make multi.uribl.org optional rather than default?

should set up your > own, spend thousands of hours per year on it, undergo > constant threats > of DDOs or worse, and listen to complaints if you dare to consider > being partially paid for your work. Jeff, ... I think I might love you again. :) --Chris Santerre (Who an I kidding, I never stopped loving you!)

RE: "Nice girl like to chat" spam

\b/ > score J_GIRL 5 While this rule will catch the spams you are looking for, IMHO the FP rate will be quite high. I would avoid using * and try to place boundries in this rule. In short, no way I would use this on my system. Just my opinion. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: whois plugin .. where to get it

> As far as blacklisting entire registrars, can you > tell us any registrars that are 100% bad? I can't. > > Jeff C. > Allegedly 100% spam. Innocent until proven guilty, ect. NUCLEAR NAMES, INC. RED PILLAR, INC. MOUZZ INTERACTIVE INC. NAMEVIEW, INC. SOLID HUB, INC. COMPANA, LLC RED REGI

RE: Googlepages & Livefilestore spams

> -Original Message- > From: Jeff Chan [mailto:[EMAIL PROTECTED] > Sent: 2008-01-10 05:14 > To: users@spamassassin.apache.org > Subject: Re: Googlepages & Livefilestore spams > > > Quoting Justin Mason <[EMAIL PROTECTED]>: > > > > > Theo Van Dinter writes: > >> On Wed, Jan 09, 2008 at

RE: uribl.com implementing ACLs

> -Original Message- > From: Joseph Brennan [mailto:[EMAIL PROTECTED] > Sent: Tuesday, October 16, 2007 2:49 PM > To: users@spamassassin.apache.org > Subject: RE: uribl.com implementing ACLs > > > > > No donations > > IT departments managed by folks with corporate backgrounds don't ev

RE: uribl.com implementing ACLs

Since the last DDOS it would have been nice if the big guys ran local mirrors instead of making the problem worse. No donations and hammering away at the server I wonder why small RBLs drop off the planet. I salute every one who has donated time, machines, banwidth, and love to URIBL. The res

RE: SpamAssassin wins 2007 InfoWorld "Best of Open Source Softwar e" award

> -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 12, 2007 8:33 AM > To: users@spamassassin.apache.org > Subject: SpamAssassin wins 2007 InfoWorld "Best of Open > Source Software" > award > > > I'm happy to announce that we have won a

RE: List of 700,000 IP addresses of virus infected computers

> -Original Message- > From: Jason Bertoch [mailto:[EMAIL PROTECTED] > Sent: Wednesday, September 12, 2007 8:54 AM > To: users@spamassassin.apache.org > Subject: FW: List of 700,000 IP addresses of virus infected computers > > > On Tuesday, September 11, 2007 7:07 PM Marc Perkel wrote:

RE: .htm spam files

Based on your example unplug the computer. --Chris (How did the Porsche suddenly get understeer?) -Original Message- From: Sg [mailto:[EMAIL PROTECTED] Sent: Tuesday, July 31, 2007 11:58 PM To: users@spamassassin.apache.org Subject: .htm spam files Hi I am getting .htm spams. ho

RE: SARE rules (cid and arial styles)

> > > > This MY_CID.. rules are part of "70_sare_stocks_cf" > > Had to these problems, I am considering to disactivate > these ...CID.. > > rules. > > CID means that the email contains an inline image. > > STYLE indicates a pair of empty style tags > > ARIAL2 is a 2 point arial font tag >

RE: So what about rulesemporium.com and these anti-PDF rules?

You didn't miss anything. I don't believe they are released yet. FInal testing being done. Results look great. I'll see if they can get released soon. --Chris > -Original Message- > From: Michal Jeczalik [mailto:[EMAIL PROTECTED] > Sent: Tuesday, July 03, 2007 9:47 AM > To: users@spamassa

RE: 404 while getting RDJ updates?

vessels approaching our sector. We've dropped out of warp due to overuse of the dilythium crystals. Federation starships have been called in for assistance. Scottie has given us more power, but is not sure she will hold together much longer. All the while Ensen Alex won't stop dancing with a half naked green lady! Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: www.uribl.com

> > Anyone else having trouble getting to uribl ? > www not coming up. I hope we aren't seeing another anti-spam > casualty. :-( I unplugged the server so I could play Forza 2 on the 360 at work. I'll plug it back in after this endurance race. :) I'm kidding... I'll prbly keep pla

RE: __AOL_FROM is too American?

> -Original Message- > From: Giampaolo Tomassoni [mailto:[EMAIL PROTECTED] > Sent: Sunday, May 20, 2007 2:10 PM > To: users@spamassassin.apache.org > Subject: __AOL_FROM is too American? > > > > Dears, > > the __AOL_FROM rule in the 20_ratware.cf file from the > spamassassin ruleset

RE: Test?

> -Original Message- > From: Daniel Aquino [mailto:[EMAIL PROTECTED] > Sent: Friday, May 11, 2007 10:05 AM > To: users@spamassassin.apache.org > Subject: Test? > > > Is this how I send to the list ? Yes, and its better then the old way of posting. Which required bringing a shrubbery an

RE: SARE ADULT easily worked around?

I haven't seen a porn spam in about a year! Hard to write rules when I don't have any. I'm pretty sure I got listwashed and RBL Rejects take care of the rest. --Chris -Original Message- From: Loren Wilton [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 01, 2007 1:35 PM To: users@spamassass

RE: Excluding recipient domains from rules

is someone at example.com. Its better to skip the entire SA scan for that address. How do you call SA? Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: Fundamental question about spam image processing.

do, but I just wanted to report what I learned. > > Can we do this? Dallas's imageinfo plugin does sort of this already. And CRAP! I forgot about the MIT conference!! :( Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: New method of spamming

ch a plugin doesn't yet exists, anyway (or, at least, I > don't know about > it). Again, no direct plugin for host IPs. You have to use URIBL and SURBL lookups. But the time from initial spam run to being listed is pretty quick. The IP you listed has been watched for ov

RE: Mail Appliances?

> -Original Message- > From: Paul Hutchings [mailto:[EMAIL PROTECTED] > Sent: Monday, February 26, 2007 5:47 AM > To: users@spamassassin.apache.org > Subject: Mail Appliances? > > > Appreciate this may not be 100% the best place to ask, but I'm > struggling to think of anywhere better o

RE: Re[2]: More stock spam + strange cf files

> >> > >> These guys are just rolling in scott free except for bayes. > >> See http://2chronicles36.org/stock.txt > >> > >> I'm using 3.1.7 with latest sa-update + FuzzyOCR.cf & KAM.cf > >> > > > >I must say, that a pretty well done spam. Whoever wrote it put some > thought > >into the phrasing.

RE: More stock spam + strange cf files

> -Original Message- > From: Andy Figueroa [mailto:[EMAIL PROTECTED] > Sent: Friday, February 09, 2007 9:31 AM > To: SpamAssassin Users List > Subject: More stock spam + strange cf files > > > These guys are just rolling in scott free except for bayes. > See http://2chronicles36.org/sto

RE: Spamassassin does block some email

> > Dan Barker wrote: > > Well, if I were a Spammer, I'd study the rules (du jour, SARE, > > sa-update), every day and work around the rules that hit my > content. > > I'd not bother trying to decode the threads on this list. > However, I'm > > not a spammer, so maybe they do something diffe

RE: TVD_SILLY_URI_OBFU

attacking their OBFU. Its pointless. Find other spam flags. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: Spamassassin does block some email

There is exactly that. Called the SARE team. No one knows who they are, or where they are. Some say its actually the famous driver, Stig. You're new here, so the ninjas will not visit you during the night...at least...not this time. ;) Thanks, Chris Santerre SysAdmin and Spamfi

RE: One person to filter spam

hing > like procmail. > > SpamAssassin can only mark messages. It cannot do any sort of what > you're attempting to do. This is exactly how I do it. Sendmail + procmail + SpamAssassin = a force so powerful, even Rosie Odonnell must bow to it! Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: **other** good "general" Spam/Mail Admin Lists?

> -Original Message- > From: Rob McEwen (PowerView Systems) [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 10, 2007 2:14 PM > To: users@spamassassin.apache.org > Subject: Q: **other** good "general" Spam/Mail Admin Lists? > > > RE: Questiona bout **other** good "general" Spam/Mail

RE: Re[2]: how filter messages by subject

cause you have a bad word in an email, doesn't mean it isn't legit. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com (Gears of War for the Xbox 360 kicks ass! It F'n rocks!)

RE: how filter messages by subject

older or account. All this said I do NOT recommend doing any of this. Its sure to FP on emails. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: FP on SARE_MLB_Stock6 rule from 70_sare_stocks.cf

that it FP'd on. Then we can all enjoy the party. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: BODY rule fails with double-spaced text

> -Original Message- > From: Theo Van Dinter [mailto:[EMAIL PROTECTED] > Sent: Thursday, December 14, 2006 1:26 PM > To: users@spamassassin.apache.org > Subject: Re: BODY rule fails with double-spaced text > > > On Thu, Dec 14, 2006 at 09:31:23AM -0800, Loren Wilton wrote: > > "body" un

RE: Topics for SA presentation?

nstall. Or "I've installed it, now what?" And now... the Bayesian Girl Dancers. *cue Darude - Sandstorm* Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: question to SARE_URI_EQUALS

> -Original Message- > From: Loren Wilton [mailto:[EMAIL PROTECTED] > Sent: Tuesday, December 12, 2006 6:12 AM > To: users@spamassassin.apache.org > Subject: Re: question to SARE_URI_EQUALS > > > It's looking for an equal sign in the hostname/domain name, such as > http://www.foo=bar.c

RE: This is so obvious...

Yeah this slipped thur as well. Just write a rule for the phone number. I'll see about getting 70_sare_specific.cf updated for this number. --Chris -Original Message- From: Jon D. Slater [mailto:[EMAIL PROTECTED] Sent: Wednesday, November 29, 2006 9:17 AM To: users@spamassassin.apache.o

RE: OT sendmail mailing list - WAS:Re: Greylisting

; List-Subscribe: <http://www.cm.nu/cgi-bin/mailman/listinfo/comp.mail.sendmail>, <mailto:[EMAIL PROTECTED]> As always, no need to thank me. Just go watch or play ice hockey and call it even ;) Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: Percentage of email that is spam after filtering?

> -Original Message- > From: Jim Maul [mailto:[EMAIL PROTECTED] > Sent: Monday, November 27, 2006 12:12 PM > To: Chris Santerre > Cc: users@spamassassin.apache.org > Subject: Re: Percentage of email that is spam after filtering? > > > Chris Santerre wrote: &g

RE: Percentage of email that is spam after filtering?

Out of total mail hitting our server 12.99% is legit and delivered. You read correctly, 12.99%!! 65% is rejected at MTA w/ RBLs 21% is caught by Spamassassin and not delivered. 12.99% is legit and delivered. 0.01% is spam that sneaks thru and delivered HTH, Chris Santerre SysAdmin and

RE: Interesting text content in the new spams

> > > Given that spammers read this list to figure out how to defeat us... > Why don't we just secure a copy of ratware and engineer a retro-virus > for it? There are plenty of ratware copies floating around. ;) Its not that hard to get good phrases. Spammers can use spamassasin for that! Baye

RE: Adding new rules for pump and dump

y over the weekend. Stay tune for the update :) Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com -Original Message- From: John Tice [mailto:[EMAIL PROTECTED] Sent: Monday, November 20, 2006 9:02 AM To: users@spamassassin.apache.org Subject: Adding new

RE: Not all Stock Spam is bad

> -Original Message- > From: Jim Maul [mailto:[EMAIL PROTECTED] > Sent: Monday, November 20, 2006 2:36 PM > To: spamassassin > Subject: Re: Not all Stock Spam is bad > > > DAve wrote: > > Randal, Phil wrote: > >> With FuzzyOCR 3.4.2 and using ocrad, > >> > >> $ocrad -s5 -i $pfile > >>

RE: New Spam

We've all got at least one. We've been talking about it on other lists. Either a goof or a spammer got haxored. The real question is, how soon before we see "You one a free Playstation 3!" spam? :-) --Chris (No, I didn't wait in line for one. )

RE: Rules Du Jour briken?

> -Original Message- > From: Raquel [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 16, 2006 3:33 PM > To: users@spamassassin.apache.org > Subject: Re: Rules Du Jour briken? > > > On Thu, 16 Nov 2006 15:28:06 -0500 > Chris Santerr

RE: Sender's name in subject

change, and to prone to FP. As someone posted before, think of this simple thing as the spammer trying to keep you from looking at the other flags to tag on. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: Rules Du Jour briken?

> -Original Message- > From: Jim Maul [mailto:[EMAIL PROTECTED] > Sent: Thursday, November 16, 2006 1:51 PM > To: twofers > Cc: users@spamassassin.apache.org > Subject: Re: Rules Du Jour briken? > > > twofers wrote: > > Is this link having problems that anyone knows of? > > > > http:/

RE: rule secrecy *again* (Re: Well, that didn't take very bloody long)

their rules. And I've had some offer tweaks to SARE rules. There is no one stopping anyone from writing a rule and submitting it to SA devs! IMHO, all of this could have been avoided if you had just kept the old SA logo ;) Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: Help with rawbody rule

That is WAY too big of a sting to look for. Rawbody doesn't handle line breaks either. Maybe a bunch of meta rules would be better?   Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com -Original Message-From: Tim Macrina [mailto:[

RE: [Fwd: Your email message was blocked]

ed] > > > Coffey, Neal wrote: > > Jim Maul wrote: > >> Even worse!  But (excuse my stupidity) where was the word > putz in my > >> email?  I sure as hell didnt type it. > > > > Jim Maul wrote: > >> Chris Santerre wrote: > >>> 

RE: Well, that didn't take very bloody long

Title: RE: Well, that didn't take very bloody long > -Original Message- > From: Steve Lake [mailto:[EMAIL PROTECTED]] > Sent: Friday, November 10, 2006 12:52 PM > To: users@spamassassin.apache.org > Subject: Well, that didn't take very bloody long > > >  Ok, remember that "

RE: IncrediMail?

Title: RE: IncrediMail? > -Original Message- > From: John D. Hardin [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, November 08, 2006 1:05 PM > To: Dylan Bouterse > Cc: users@spamassassin.apache.org > Subject: RE: IncrediMail? > > > On Wed, 8 Nov 2006, Dylan Bouterse wrote: > > > Wo

RE: SA filter load: massive increase

Title: RE: SA filter load: massive increase > -Original Message- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, November 08, 2006 5:00 AM > To: Garry Glendown > Cc: Matt Kettler; users@spamassassin.apache.org > Subject: Re: SA filter load: massive increase

RE: IncrediMail?

junk. I do not have a corpus of it, but I'll try to save any new ones that come in. I'll double check, but I think I wrote my own rules to counter these FPs. Which may be why I don't have any in my traps.  HTH, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: mail bounce warning for the list

m. This isn't the best idea for a large ISP, but for companies I see no problem rejecting on RBLs when you have a trained administrator. So I am "getting what I deserve", and I love it. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: Completely disable spamassassin for a given mailbox

sin is invoked from procmail on our system. I > believe I can use a procmailrc file in the mailbox's > home directory to do this, but can't seem to find out > exactly how to do it. edit the file?  vi? pico is my favorite. Can you post the procmail file that is called? Thanks,

RE: mcafee-spamassassin-rules

plugin and not have to modify any of the base code. Yeah, I was taking a jab at someone on the list ;) Actually I have nothing but PRAISE for Mcafee. They are one company who actually give back to the community. If the list knew everything, they would all be emailing mcafee a "

RE: Age of a domain name - a new test?

Title: RE: Age of a domain name - a new test? > -Original Message- > From: John D. Hardin [mailto:[EMAIL PROTECTED]] > Sent: Monday, October 30, 2006 3:30 PM > To: Chris Santerre > Cc: Wolfgang Uhr; users@spamassassin.apache.org > Subject: RE: Age of a domain

RE: Age of a domain name - a new test?

Title: RE: Age of a domain name - a new test? Its also one of the MANY things we look at for URIBL submissions. --Chris 

RE: mcafee-spamassassin-rules

Title: RE: mcafee-spamassassin-rules > It's also worth noting that hypothetically, if I was a > company releasing > updates based on an open-source product, I may have incentive to avoid > making those updates useful on said product, otherwise people would > download my updates and not pay m

RE: spamassassin --lint fails with rules in local.cf

Title: RE: spamassassin --lint fails with rules in local.cf > -Original Message- > From: Dylan Bouterse [mailto:[EMAIL PROTECTED]] > Sent: Thursday, October 26, 2006 8:35 AM > To: users@spamassassin.apache.org > Subject: spamassassin --lint fails with rules in local.cf > > > I have

RE: How to avoid spamassassin checks in Subject header?

ms to me that this high score is due to XXX (or > unencoded subjects) in the Subject header. > > Is there any way to tell Spamassassin to not check in > 'Subject' header? Since this is also scaned by body rules... No. However you could just rescore the rule score SUBJ_ILLEGAL_CHARS 0.10 HTH, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

[OT] Stats up drastically from a year ago.

Title: [OT] Stats up drastically from a year ago. Just for giggles! Keeping exact numbers out of it, here are the stats compared to a year ago: RBL blocks up 3 fold! Spam caught by SA doubled. Legit email traffic also doubled. Whe, what a year! Thanks, Chris Santerre SysAdmin

RE: unsubscribe

list-unsubscribe:   Seriously, this gets posted once a week. I think new subscribers should sign a a contract that states they KNOW how to unsubscribe, BEFORE the subscribe.   And having someone click on a link with a jsp script in it to see your terms of service,

RE: Spam using local newspapers

Title: RE: Spam using local newspapers > -Original Message- > From: Maurice Lucas [mailto:[EMAIL PROTECTED]] > Sent: Monday, October 23, 2006 2:54 AM > To: users@spamassassin.apache.org > Subject: Spam using local newspapers > > > Hello, > > I receive some spam today using parts o

RE: Psst!

Title: RE: Psst! > -Original Message- > From: Mark Johnson [mailto:[EMAIL PROTECTED]] > Sent: Friday, October 20, 2006 10:41 AM > To: users@spamassassin.apache.org > Subject: Re: Psst! > > > Chris Santerre wrote: > > > > > > Just curious,

RE: Psst!

curious, but how many people see spam being sent to usersnames with the fisrt letter dropped? I see a ton in my logs. I believe spammers figure [EMAIL PROTECTED] will also have a [EMAIL PROTECTED]  Too bad for them...they do not. :) Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: RDJ updates failing

ing. Either that or you have some HTML CACHE thats causing you to see this temp page that was up. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: Psst!

Title: RE: Psst! > -Original Message- > From: [mailto:[EMAIL PROTECTED]] > Sent: Thursday, October 19, 2006 10:48 AM > To: Giampaolo Tomassoni; users@spamassassin.apache.org > Subject: Re: Psst! > > > > Any suggestion to spread a spamtrap e-mail address? > > > > Plase, don't

RE: spam attacks - so and so wrote about a stock

this part of the new sarstock rules that it hits right?   # Chris Santerre# SpamAssassin RulesEmporium (SARE)## Salty Stock Rules# 10/18/06# Version: 2.51## These rules have been tested.# They are meant to catch stock spams with inline gifs## [EMAIL PROTECTED]   rawbody __M

RE: Bypassing SURBLs using end user brain cells

Title: RE: Bypassing SURBLs using end user brain cells > -Original Message- > From: Paolo Cravero [mailto:[EMAIL PROTECTED]] > Sent: Thursday, October 19, 2006 9:31 AM > To: users@spamassassin.apache.org > Subject: Bypassing SURBLs using end user brain cells > > > Spam message with

RE: spam attacks - so and so wrote about a stock

.. copy ruleset to your rules directory. (might be /etc/mail/spamassassin) Restart spamd if you use it. Enjoy! (You may even be able to stop using FuzzyOCR if you want ;) ) I suppose you can still tell your boss you were hard at work all morning working on the spam problem :) Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: How to do new sare update?

guide on how to do this on freebsd?  Many thanks. No one said to restart spamd! If you use spamd, you must restart the process for it to read the new rules. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com

RE: Scoring PTR's

Title: RE: Scoring PTR's > -Original Message- > From: Robert Swan [mailto:[EMAIL PROTECTED]] > Sent: Thursday, October 19, 2006 9:10 AM > To: SpamAssassin Users > Subject: Scoring PTR's > > > Guys, I don't need a lesson on what you think should be done > or what you > think is the

[SARE] Stock rules updated

Title: [SARE] Stock rules updated Just making official anouncment in case you missed it in the other thread. SARE stock rules have been updated. http://www.rulesemporium.com/rules/70_sare_stocks.cf I'm working on getting the website date changed :) Enjoy! Thanks, Chris San

RE: sa-update versus rulesdujour questions

Title: RE: sa-update versus rulesdujour questions > > > Hm.  I'm surprised on no answers.  Can I persist?  This topic > is of real > interest to me... Last month this topic blew up into a flame fest.  I compltely understand why no on wants in on this again. Short answer: use what you

RE: SA method for identifying animated GIFs?

Title: RE: SA method for identifying animated GIFs? > -Original Message- > From: Russ Ringer [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, October 18, 2006 12:46 PM > To: users@spamassassin.apache.org > Subject: Re: SA method for identifying animated GIFs? > > > On Wed, 18 Oct 2006

RE: spam attacks - so and so wrote about a stock

we got dozens of those too, but we are > catching them now', isn't really a very good approach. If you happen to know what spammers are going to send, before they send it, please let us know about it. Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www.uribl.com  

RE: SA method for identifying animated GIFs?

Title: RE: SA method for identifying animated GIFs? > -Original Message- > From: Russ Ringer [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, October 18, 2006 11:46 AM > To: users@spamassassin.apache.org > Subject: SA method for identifying animated GIFs? > > > Hi, > > Has anyone com

RE: I'm getting killed with spammers

Title: RE: I'm getting killed with spammers FWIW: I think traffic is up all around. I'm seeing a definite increase in the past weeks. Most are being stopped via RBLs, but there is a lot more to stop! --Chris

RE: SA 3.1.7 children hang but don't die

Title: RE: SA 3.1.7 children hang but don't die > Subject: SA 3.1.7 children hang but don't die I'm not running 3.1.7 yet. But with a subject tag like that, you're lucky if you don't have the FBI knocking on your door! :) The Carnivore Admin must be laughing! --Chris

RE: How to filter these spam messages

Title: RE: How to filter these spam messages > -Original Message- > From: Jonas Eckerman [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, October 18, 2006 7:08 AM > To: users@spamassassin.apache.org > Subject: Re: How to filter these spam messages > > > Michael Scheidell wrote: > >> S

RE: Help filtering this type of spam

Title: RE: Help filtering this type of spam The new update to SARE stock ruleset will take care of these. I'm just waiting on the ninja in chage of that to update it.  I'm running it, and I love it ;) Thanks, Chris Santerre SysAdmin and Spamfighter www.rulesemporium.com www

RE: This image is turning frequent..

Title: RE: This image is turning frequent.. > -Original Message- > From: Jo Rhett [mailto:[EMAIL PROTECTED]] > Sent: Tuesday, October 17, 2006 2:41 PM > To: Chris Santerre > Cc: users@spamassassin.apache.org > Subject: Re: This image is turning frequent.. >

  1   2   3   4   5   6   7   >