Re: Bizarre and seemingly pointless spams

2013-06-02 Thread Christian Recktenwald
- bayes / awl poisoning - the attack is directed straight to your brains, just consuming time for thoughts about what this would be about (ok, that one is meta meta :-) never mind, it's junk anyway. -- Christian Recktenwald spamassassin-talk-d...@citecs.de

Re: rule problem basing on X-Spam-ASN - not a rule problem

2013-04-25 Thread Christian Recktenwald
lly not about subsequent dashes. -- Christian Recktenwald spamassassin-talk-d...@citecs.de

Re: rule problem basing on X-Spam-ASN - not a rule problem

2013-04-24 Thread Christian Recktenwald
ders 1.4 MISSING_DATE Missing Date: header 0.0 NO_HEADERS_MESSAGE Message appears to be missing most RFC-822 headers perhaps this might be worth a bug report. -- Christian Recktenwald spamassassin-talk-d...@citecs.de

Re: URL and mail address RBL [was: Hot News]

2013-03-20 Thread Christian Recktenwald
On Wed, Mar 20, 2013 at 10:26:21AM +, Steve Freegard wrote: > Listing e-mail addresses and URL paths could be done by normalizing them yup > (e.g. lower-case, stripping query parameters etc.) Not necessarily - as I see there would be use cases for complete URLs as well as for stripped on

Re: Hot News

2013-03-15 Thread Christian Recktenwald
On Fri, Mar 15, 2013 at 02:39:17PM -0500, David B Funk wrote: > On Fri, 15 Mar 2013, Christian Recktenwald wrote: > > >On Fri, Mar 15, 2013 at 10:38:53AM -0500, Dave Funk wrote: > >>On Fri, 15 Mar 2013, Kevin A. McGrail wrote: > >> > >>>On 3/15/2013 9:17

Re: Hot News

2013-03-15 Thread Christian Recktenwald
On Fri, Mar 15, 2013 at 10:38:53AM -0500, Dave Funk wrote: > On Fri, 15 Mar 2013, Kevin A. McGrail wrote: > > >On 3/15/2013 9:17 AM, Tom Kinghorn wrote: > > On 15/03/2013 15:11, Christopher Nido wrote: > > > > > >http://www.naturalstonesinc-munged.com/aah/pabfjd/pgrezs > ... listing the URLs

Re: How do I write a custom rule to match any header

2012-12-12 Thread Christian Recktenwald
On Wed, Dec 12, 2012 at 10:24:28AM +0530, Ram wrote: > I want to write a custom rule to match if "Any header" contain a > particular string > > > How do I do this ? man Mail::SpamAssassin::Conf says: [...] header SYMBOLIC_TEST_NAME header op /pattern/modifiers [if-unset:

Re: Parallelizing Spam Assassin

2009-07-31 Thread Christian Recktenwald
On Thu, Jul 30, 2009 at 11:55:21PM -0700, poifgh wrote: > Why am I not seeing a linear increase in the throughput? > Is a file locking creating the bottleneck? Maybe the auto white list. --

access to binary attachments from $PerMsgStatus ?

2008-09-13 Thread Christian Recktenwald
print Data::Dumper->Dump([ $i ]); } ... So: what can I do to get access to the binary / base64 attachment content? TIA, Chris -- Christian Recktenwald [EMAIL PROTECTED]

Re: Writing custom plugins

2008-05-07 Thread Christian Recktenwald
On Wed, May 07, 2008 at 12:13:19PM +0530, ram wrote: > http://wiki.apache.org/spamassassin/PluginWritingTips > Gives plugin writing tips. But is there a beginners > plugin-writing-howto. I took perldoc Mail::SpamAssassin::Plugin -- Christian Recktenwald : voice +49 711

Re: Interesting text content in the new spams

2006-11-23 Thread Christian Recktenwald
t; this stuff! ;-) Too many upper case words :-) -- Christian Recktenwald : : citecs GmbH i.L. : [EMAIL PROTECTED] Unternehmensberatung fuer : voice +49 711 601 2090 : Boeblinger Strasse 189 EDV und Telekommunikation : fax +49 711 601 2092 : D-70199 Stuttgart

Re: simple TZ test (Re: current stock scams are easy to spot)

2006-11-15 Thread Christian Recktenwald
rschiebung http://www.ptb.de/de/org/4/44/441/zeit.htm http://en.wikipedia.org/wiki/Time_zone http://en.wikipedia.org/wiki/Time_in_Australia http://en.wikipedia.org/wiki/Time_in_New_Zealand ] -- Christian Recktenwald :

Re: New RBL idea regarding image spam

2006-10-25 Thread Christian Recktenwald
n different results. -- Christian Recktenwald : : citecs GmbH i.L. : [EMAIL PROTECTED] Unternehmensberatung fuer : voice +49 711 601 2090 : Boeblinger Strasse 189 EDV und Telekommunikation : fax +49 711 601 2092 : D-70199 Stuttgart

Re: Psst!

2006-10-19 Thread Christian Recktenwald
on registries whois servers. Place it in your signature for malware crawling your friend's computers. In short: just use it. :-} -- Christian Recktenwald : : citecs GmbH i.L. : [EMAIL PROTECTED] Unternehmensberatung fuer : voice +49 711 601 2090 : Boeb

Re: OT: Spammers' reactions to rejection

2005-11-17 Thread Christian Recktenwald
ible called "labrea". But be careful: it saturated the NAT table of my firewall after some hours by holding hundreds of "connections" alive. ;-) -- Christian Recktenwald : : citecs GmbH: [EMAIL PROTECTED] Unternehmensberatung

Re: [Fwd: Re: sa-learn dosen't learn]

2005-08-21 Thread Christian Recktenwald
On Sat, Aug 20, 2005 at 04:37:39PM -0700, jdow wrote: > From: "Christian Recktenwald" <[EMAIL PROTECTED]> > > >My SA 3.0.0 installation refuses to learn any more. > >I only got "learned from 0 message(s) (1 message(s) examined)." > >for about t

Re: [Fwd: Re: sa-learn dosen't learn]

2005-08-20 Thread Christian Recktenwald
My SA 3.0.0 installation refuses to learn any more. I only got "learned from 0 message(s) (1 message(s) examined)." for about three weeks now. I really doubt it actually learned anything about ham and spam yet. ;-) -- Christian Recktenwald : : c

Re: X-Mailer: Microsoft Outlook, Build 10.0.2616 --> scores 3.9

2005-07-06 Thread Christian Recktenwald
rs mails from this MUA to be spam? FORGED_MUA_OUTLOOK is a meta rule. It does not match a given MUA but some mails /pretending/ to have been created using "Microsoft Outlook, Build 10.0.2616". -- Christian Recktenwald : : citecs GmbH:

Re: V*I*A*

2005-06-16 Thread Christian Recktenwald
scation 1.0 J_BACKHAIR_14 FULL: 1 letters - Unsightly html tag - 4 so you may want to increase the score for J_BACKHAIR_14 ... backhair is published on SARE -- Christian Recktenwald : : citecs GmbH: : Unternehmensberatung fuer : v

Re: What is a caching name server?

2005-05-20 Thread Christian Recktenwald
RFC 1912 zone "localhost" { type master; file "/etc/bind/db.local"; }; zone "127.in-addr.arpa" { type master; file "/etc/bind/db.127"; }; zone "0.in-addr.arpa" { type master; file "/etc/bind/db.0"; }; zone &quo

Re: Bombarded by German political spam

2005-05-17 Thread Christian Recktenwald
9_sober.cf, it lint runs w/o error. I linted it right now. Can't see any of this. Please check if the file is ok, here is my MD5: edc5f1475847f7b47672143af7592f08 99_sober.cf -- Christian Recktenwald : : citecs GmbH: [EMAIL PROTECTED

Re: Bombarded by German political spam

2005-05-17 Thread Christian Recktenwald
lates it > as "vintage" It means "read by yourself". -- Christian Recktenwald : : citecs GmbH: [EMAIL PROTECTED] Unternehmensberatung fuer : voice +49 711 601 2090 : Boeblinger Strasse 189 EDV und Telekommunikation : fax +49 711 601 2092 : D-70199 Stuttgart

Re: Bombarded by German political spam

2005-05-16 Thread Christian Recktenwald
ean them, thanks! v0.2 there in a few :) http://www.citecs.de/99_sober.cf took subject lines from abobe - score per subj is 1.0 - put content patterns (3 missing, got no sample) into it with score 8.0 - the often seen "Lese selbst" is scored 4 Greetinx, Chris -- Christian Recktenwald :

Re: spamassassin process a single message for 10 minutes !

2005-01-18 Thread Christian Recktenwald
hild process has openend 933 UDP sockets: spamd 20701 root 1023u IPv4 555058UDP *:38796 and 85 handles on bayes_toks: spamd 20701 root 136u REG 58,2 5226496 656011 /home/chris/.spamassassin/bayes_toks I'd guess the UDP sockets are fr