ince, if anyone is interested I can
update a "v2 version", just ask.
Sincerely,
John GALLET
Hi,
FWIW: the way I solved it was limiting the number of concurrently incoming
spam because my box serves only few different domains, so I limited the
number of connections from the same smtp client to 5 using iptables (the
connn-limit module). This might or not be possible for others.
This
Hi,
processes. It has even, on occasion, necessitated a reboot when i could not
get the system to kill the process. I've taken to trying to scan it daily and
manually delete the spam, but that's not always possible.
This hint might be totally wrong, but last time I saw such a behavior it
was
Hi,
[repost from yesterday, I was not using the correct From address for this
list...]
Yes, it means that every Received: header in an email is valid with a
valid IP, valid configuration (whatever that is deemed to be), and valid
DNS. Only servers that were correctly classified as mailserver
Re,
Anyway, these are the patterns I tried to code in FR_SPAMISLEGAL and
FR_HOWTOUNSUBSCRIBE, plus one I considered too generic (if you can't
read this mail in html, click here).
It might be worth collecting more ham that includes any such common
text -- or even _generating_ mails along those
In a similar vein to the "Nigerian" advance fee fraud, here's a ruleset for
French-language scams, often originating from Côte d'Ivoire.
http://www.tradoc.fr/spamassassin/fraude_fr.cf
All comments welcome.
Thanks, some of these still getting (rarely, but still so) through.
cat fraude_fr.cf >>$
Hi,
If these are hit rates with a very minimal daily corpus, don't know if the
present ruleset is ready for production unless you have 0 tolerance for any
bulk, period
I'm afraid I must agree. I don't have a confirmed and sorted corpus per se,
but after a single night's live testing with ver
Re,
I excluded the last two rules from my masscheck to avoid FPs as these
ESPs/X-Mailers are definitely grey, "import rcpt list and blast" sort of ESPs
not black for global use.
If you can point me to some more information on how to do that, on-list or
off-list, I am interested. I am new to
Hi,
You run "seek-phrases-in-corpus" over the 2 corpora, and it'll spit out
the patterns; you can then write rules based on these.
I did so, the results are interesting, though I do not really know where
to go from there. If I take the first 50 "best" patterns and strip off the
obvious stand
Thanks for taking this burden upon yourself. One other thing you should be
prepared to do, if you're willing to devote long-term responsibility to these
rules, is to provide sa-update-compatible feeds of your dynamic rules. This
is another thing that Justin can probably help you with.
I am hap
Re,
Looking at the rules, I'm worried about false positives on genuine opt-in
advertising. I have a number of users who choose to receive all kinds of
advertising blurb,
This is one of the reasons why I did not hunt for "click here" and "if you
can't see this email in html". Now correct me i
Hi,
First of all, thanks to Justin for patiently helping me to install
mass-check and pointing me in the right direction. I will try to run the
algorithms tonight to see what they come up with.
In the meantime, you can find a hit-frequencies report at:
http://www.saphirtech.fr/spam/freqs_2008
I still miss samples for two rules, even if I did had hits according to
/var/spool/maillog I did not save them.
I added a sample for the FR_NOTSPAM rule, and I removed the
FR_YOURELUCKY rule as I see other forms of the text getting through so
it is not efficient. On the other hand, nearly al
Hi,
I was able to access the URL you mentioned, but not all of the files
below it. I received:
"Forbidden
You don't have permission to access /spam/FR_PAYLESSTAXES.txt on this server."
Sorry guys, only the ruleset file (the one I tried, of course) was
readable, all the non empty spam samples
SPECIFIC SPAMASSASSIN RULES.
# USE AND REDISTRIBUTE WITH THIS NOTE AT YOUR OWN RISK AND PLEASURE.
# AUTHOR: John GALLET
# Version: 2008-JUNE-17
# Latest: http://www.saphirtech.fr/
# Status: It Works For Me (tm
15 matches
Mail list logo
