google group spam

hi i am using this rule to catch spam with a google group link, uri __GOOGLEGROUPS_15 m'http://[^.]{15}\.googlegroups\.com'i meta NN_GOOGLEGROUPS_15 __GOOGLEGROUPS_15 && __GOOGLEGROUPS_NUM describe NN_GOOGLEGROUPS_15 Contains a suspicious googlegroups URI. scoreNN_GOOGLEGROUPS_1

sa reporting

does anyone know of away do do reporting on spamassassin? __ Information from ESET NOD32 Antivirus, version of virus signature database 3969 (20090327) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com -- This message has been scanned for viruses and da

Still getting spam from yahoo/google groups

I add the sare rule 90_2tld.cf but still getting only 1 hit from sa, 0.50 Freemail_from how can i stop this, what rules can i use? Where can i past the raw header? pastebin triggers it as spam __ Information from ESET NOD32 Antivirus, version of virus signature database 3968 (2009032

Google groups spam

i am getting spam from google groups my only is is 0.5 FREEMAIL_FROM DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s1024; t=1238042388; bh=qIS1L4iJc6kS4EAxGGA7apkYn+LwwewDsELAo62Dcak=; h=Message-ID:Received:X-Mailer:Date:From:Subject:To:MIME-Version:Content-Type; b=coeLP

Re: Spam from windows live

Thank you for everyone replying on my question on windows live.com spam, now getting hits using URI checks and free_email rules - Original Message - From: "Bowie Bailey" To: Sent: Wednesday, March 25, 2009 3:02 PM Subject: RE: Spam from windows live Chris wrote: On Wed, 2009-03-

ruleset

where can i find more rulesets? using openprotect sare rules and sought rulesets __ Information from ESET NOD32 Antivirus, version of virus signature database 3957 (20090324) __ The message was checked by ESET NOD32 Antivirus. http://www.eset.com -- This message has been sca

Problem with sa-compile

hi i am trying to compile my rules but i am getting the following error Wide character in print at /usr/bin/sa-compile line 385, <$fh> line 3490. Wide character in print at /usr/bin/sa-compile line 385, <$fh> line 6690. re2c -i -b -o scanner1.c scanner1.re re2c -i -b -o scanner2.c scanner2.re re2

Training bayes

Id like to know of you can train bayes with *.msg format or Must it be eml format? I know that outlook express uses eml but office outlook uses msg format? [cid:image001.jpg@01C96875.69DDB690] This message has been scanned by Nexus Mail Gateway <>

spam getting through

Here is the raw message header Received-SPF: none (yahoo.com: No applicable sender policy available) receiver=localhost.localdomain; identity=mailfrom; envelope-from="glassbamcgu...@yahoo.com"; helo=n4a.bullet.mail.ac4.yahoo.com; client-ip=76.13.13.67 X-Greylist: delayed 357 seconds by postgrey

Spamassassin RBL

Hi Sorry i am still new at using spamassassin, why can i enable spamassassin to check RBL or URI blacklists? Is there a way to test if the uri or Rbl checks work? This message has been scanned by Nexus Mail Gateway