Problems with new spam getting through in SA 2.64 the last few days

2005-02-21 Thread Frank Tore Johansen
These are the rules I have: 31854 jun 1 2004 70_sare_adult.cf 3927 apr 24 2004 70_sare_bayes_poison_nxm.cf 85658 jan 28 07:23 70_sare_genlsubj0.cf 70561 jan 28 07:23 70_sare_genlsubj1.cf 107315 feb 12 23:35 70_sare_header0.cf 75276 feb 12 23:35 70_sare_header1.cf 32960 sep 13 02:23

Re: www.rulesemporium.com

2004-12-07 Thread Frank Tore Johansen
Oh it is in whois, paid, all sound and good. And its nameservers are even responding. Its just the root-nameservers that aren't updated (or has some other problems). Domain Name: RULESEMPORIUM.COM Registrar: ENOM, INC. Whois Server: whois.enom.com Referral URL: http://www.enom.com

Re: [SURBL-Discuss] Spamassassin and SpamCopURI

2004-10-26 Thread Frank Tore Johansen
Sorry for being a bit quick with my last mail. I got it to work now, was just an erroneously newline that got into the rules files when I cut & pasted. -Frank.

Re: [SURBL-Discuss] Spamassassin and SpamCopURI

2004-10-26 Thread Frank Tore Johansen
Thanks. I did the changes you illustrated below (into spamassassin/spamcop_uri.cf). The "make test" errors went away, so I went ahead and did "make install" of SpamAssassin 2.64, as well as a reinstall of SpamCopURI-0.22 (just in case). I also removed the old override in local.cf and skip_rb

Spamassassin and SpamCopURI

2004-10-26 Thread Frank Tore Johansen
Hi, I'm in the progress of upgrading SA from 2.63 to 2.64 and SpamCopURI from 0.19 to 0.22. During make test of SA I get these during each t/rule_tests: t/rule_testsok 61/62Failed to compile URI SpamAssassin tests, skipping: (syntax error at /etc/mail/spamassassin/local.c

False positives with FAKED_HOTMAIL_DAV

2004-10-23 Thread Frank Tore Johansen
Hi, I have seen a handfull of these mails triggering FAKED_HOTMAIL_DAV, which is kind of bad since it adds 3.9 in version 2.63. Here are the headers in question, and at the bottom comes the scores from spamassassin. -Frank. --- Received: from listserv.brown.edu (canis.services.brown.edu [128.14

Some fake mails, ham-trainers?

2004-10-14 Thread Frank Tore Johansen
I have received 3 fake mails claiming to be from myredtrap.com, with the following ip numbers (twice on the first one): Received: from unknown (HELO www.myredtrap.com) (212.240.72.97) Received: from unknown (HELO www.myredtrap.com) (212.21.97.209) They are guaranteed spam, since the To: field doesn