I'm also getting a lot of variations on this spam trying to promote some junk stock. Every time a different name is in the subject like "Demetrius here :)" or "Mabel here :)" and of course the "From:" is different. RAZOR and DCC catch most of them but some slip through.
One even managed to t
I've recently gave up on geocities alltogether and wrote a simple rule to give any mail coming from it a high score.
AFAIK, my users never get any legit mail from geocities anyway. I'm sure it'll generate FPs to other people.On 11/13/05, Jeff Chan <
[EMAIL PROTECTED]> wrote:Does anyone have a geoc
Hi Brian,
Look for the thread about "Pharamcudical list of words in a table".
See: http://www.gossamer-threads.com/lists/spamassassin/users/59435?page=last
All these messages are probably coming from one evil source.
Some say it's a guy called Leo Kuvayev and he keeps chaning the messages and
twork checks.
I've sent few samples to Robert Meschel.
On 9/6/05, Ilan Aisic <[EMAIL PROTECTED]> wrote:
Hi again,
I keep getting these kind of pharm. spam where a list of drugs and their prices is arranged in an html table.
I'm using all the SARE rules including the OBFU (which
Loren,
Just wanted to thank you for the eloquent resonse and for your significant contributions to SARE and this list. On 9/6/05, Loren Wilton <
[EMAIL PROTECTED]> wrote:...I'll cut a set of rules for them.Loren
-- Ilan AisicRegistered Linux User 8124 http://counter.li.org
Hi again,
I keep getting these kind of pharm. spam where a list of drugs and their prices is arranged in an html table.
I'm using all the SARE rules including the OBFU (which I've added thanks to recommendations in this thread.
However, only the SARE_HTML_MANY_BR05 is fired ( Tooo many 's!).
I
threshold.
It would be very difficult to write rules that would detect spam
disguised like this in an HTML table.
Any comment?
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
with less
incriminating evidence.
Denial message below
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
This is an automatically generated Delivery Status Notification
Delivery to the following recipient failed permanently:
users@spamassassin.apache.org
Technical detai
interperted it incorrect but shouldn't it be a negative score?
> If so, could anyone help me to solve this?
> --
>
> With kind regards,
>
> Richard Pijnenburg
> PremiumXS B.V.
>
> Bouwerij 4
> 1185 XX
> Amstelveen
>
> T: 020 386 84 05
> F: 020 386 84
many mirrors of it :-)
On 8/30/05, Eddy Beliveau <[EMAIL PROTECTED]> wrote:
> For the last couple of days my SA wasn't able to use korea.blackholes.us.
> I tried to ping it but it seems dead. Anyone knows the reason and
> if/when it's coming back?
>
> Thanks,
&
) I'll try
> running the whole thing through, see what hits.
>
> Craig.
> -BEGIN PGP SIGNATURE-
> Version: GnuPG v1.4.1 (GNU/Linux)
>
> iD8DBQFDEvQiMDDagS2VwJ4RAjcTAKCkSBWvq48UJFbeUFI91T0ViUPvDwCfSWLT
> M3yHQKY/7aLNhTYtIKyjN/M=
> =AbUr
> -END PGP SIGNATURE-
>
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
SPAM WSrks Good CIAOS VIAGRRe.msg
Description: Binary data
ain name and realizing it contains a URI.
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
y 6 Aug 25 08:33 auto-whitelist.mutex
And now the auto-whitelist keeps changing whenever email arrives.
Thanks for all the help,
--ilan
On 8/25/05, Ilan Aisic <[EMAIL PROTECTED]> wrote:
> BTW, Matt was right in his assumption below.
> AWL worked correctly on my test.
>
n a FP otherwise.
>
> It's possible Ilan is using intentionally contrived emails here to force the
> case.
>
> (If it really was ham, you found a reason to sort spam into a
> > spam mailbox and at least glance at the trash before tossing it.)
>
>
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
Below:
On 8/24/05, Matt Kettler <[EMAIL PROTECTED]> wrote:
> Ilan Aisic wrote:
> > Matt,
> > I've modified the permissions on my auto-whitelist file and directory
> > to 777
>
> I didn't say modify the permissions of the file or directory. I said to
L: From: address is in the auto white-list
On 8/24/05, Matt Kettler <[EMAIL PROTECTED]> wrote:
> At 05:15 AM 8/24/2005, Ilan Aisic wrote:
> >Hi,
> >I'm running SA 3.0.2 with Exim 4.5. spamd runs as root.
>
> Warning: You are subject to a remote DoS attack on SA&
ndef, IP:
undef
debug: DB addr list: untie-ing and unlocking.
debug: DB addr list: file locked, breaking lock.
debug: unlock: 29716 unlocked
/var/spool/spamassassin/auto-whitelist.mutexdebug: Post AWL score:
7.328
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
I think it's down. I can't browse to their web site and can't even
ping to blackholes.us (216.243.118.34).
On 8/13/05, mouss <[EMAIL PROTECTED]> wrote:
> Ilan Aisic wrote:
> > For the last couple of days my SA wasn't able to use blackholes.us.
> > I tri
For the last couple of days my SA wasn't able to use blackholes.us.
I tried to ping it but it seems dead. Anyone knows the reason and
if/when it's coming back?
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
chances of someone inadvertently bringing in ratware that works as
a virus is a lot smaller.
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
score=1.1 required=5.0
> tests=AWL,BAYES_00,HTML_10_20,\n\tHTML_MESSAGE,USER_TEST_SUBJECT
> autolearn=no version=3.0.4
>
>
>
> Please advice what to do. Thanx in advance
>
>
>
> Muhammad Farooq Bhatti
>
>
>
>
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
yet the rule triggers for me. Doing a
> >
> > > Of course. __X != X ... :)
> >
> > D'oh. That was an error in writing this mail though, not in
> > the rules. :)
> >
> > So the real meta rule acutally _is_ (!__X && !__Y)
> >
> > Regs,
> > Sven
> >
> >
> >
--
Ilan Aisic
Registered Linux User 8124 http://counter.li.org
re
of. Any advice would be appreciated.
--
Ilan Aisic
Hi,
In addition to successfully using DCC and Razor2, I'm trying to use
Pyzor but I never get any score from it.
I've installed Pyzor 0.4.0 (the last version).
When running `spamassassin --lint -D` I get the following relevant output:
debug: executable for pyzor was found at /usr/bin/pyzor
deb
24 matches
Mail list logo
