Anybody notice flood of ED spam?

2009-11-24 Thread John Tice
I am seeing (past 4-5 days) more spam generally slipping under my scoring settings, but in particular ED image spam with the word 'viagra' spelled correctly in the sender and/or subject headers. I have settings for tagging and auto discard with a 15 point spread, and this kind of stuff used to

user_prefs not working

2007-06-11 Thread John Tice
Running SA on a Cpanel VPS that had an outage yesterday, when it came back up SA is not using any of the user_prefs files in the individual accounts. Support doesn't know what to do. The user_prefs are still in the proper places but just not being read, or not influencing the scores, no whi

Email scoring way too high... what's wrong?

2006-12-05 Thread John Tice
I have a new client whose mail is scoring way high... several others on the same server, different domains, score in negative numbers. Mail sent through a mail script on this domain scores -1.0. I believe they're using verizon dsl, windows xp w/ outlook or outlook express. This is just goin

Help with sa-stats

2006-11-28 Thread John Tice
I am trying to install Dallas Engelken's version of sa-stats and a rank novice I could use some help... http://www.rulesemporium.com/programs/sa-stats.txt I'm on a VPS with cpanel multiple domains. I installed this into the cgi-bin in my domain (not the primary server domain) and it executes

Re: Percentage of email that is spam after filtering?

2006-11-25 Thread John Tice
I am always amazed to hear how much gets through on corporate systems. My wife works in a corporate office with a dedicated IT department and she says 60-70% of their total received is spam. I would think that number to be intolerable. For instance, I have a VPS and host about a dozen sit

Adding new rules for pump and dump

2006-11-21 Thread John Tice
I added the SARE ruleset (etc/mail/sa/local.cf) to try and catch the pump and dumps with GIFs but the rules don't seem to be firing. Does something need to be restarted on the server to activate new rules, or are they just not specific to the spams being sent today? Anybody have a rule to c

Re: How do I stop these?

2006-11-21 Thread John Tice
These are scoring at about 4X my threshold without the SARE stock ruleset. You may need to tweak you scoring. I find bayes_99 to be reliable. FROM_LOCAL_NOVOWEL FORGED_RCVD_HELO BAYES_99 RCVD_IN_SORBS_DUL RCVD_IN_NJABL_DUL On Nov 20, 2006, at 10:00 AM, Nathan Zabaldo wrote: I am getting

Re: Huge increase in spam

2006-11-16 Thread John Tice
I'm seeing stock scams slipping slipping through. Six during the night scoring from 3.5-5.0 (threshold at 5.5). Funny thing is that they don't have all addresses that usually get hit. The only test they're triggering is bayes_95 on the standard tests. On Nov 15, 2006, at 8:38 PM, Chris wr

Re: Those "Re: good obfupills" spams

2006-04-29 Thread John Tice
ended? John On Apr 29, 2006, at 8:12 AM, List Mail User wrote: ... Matt Kettler replied: John Tice wrote: Greetings, This is my first post after having lurked some. So, I'm getting these same "RE: good" spams but they're hitting eight rules and typically sco

Re: Those "Re: good obfupills" spams

2006-04-28 Thread John Tice
Greetings, This is my first post after having lurked some. So, I'm getting these same "RE: good" spams but they're hitting eight rules and typically scoring between 30 and 40. I'm really unsophisticated compared to you guys, and it begs the question––what am I doing wrong? All I use is a