Re: The 'believe-it' spams

2008-02-24 Thread Kathryn Allan
How do you set a rule to expire? Kate Bob Proulx wrote: Jonathan Nichols wrote: What was the rule you added? :) I just did the brute force thing and looked for an entire phrase from that message. It really isn't worthy and this will change very quickly such that any rule I post now

Re: Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
I just implemented Justins ruleset and it looks as if they will now be caught YAY thanks for the tip. Has anyone had trouble with fp's using this ruleset the ones its hitting seem to score high (4) Thanks Kate Bob Proulx wrote: Kathryn Allan wrote: The url to pastebin is

Re: Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
I have removed the extras and changed the expiry. http://pastebin.ca/910360 Thanks for the help Kate Karsten Bräckelmann wrote: On Wed, 2008-02-20 at 10:36 +1300, Kathryn Allan wrote: Thanks I will try the suggestions in the other post. I have updated the pastebin with header - i think

Re: Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
Hmm the update changed the link i think http://pastebin.ca/910320 Bob Proulx wrote: Kathryn Allan wrote: The url to pastebin is http://pastebin.ca/910275 apologies if this is wrong - its my first time using pastebin. Your pastebin of the message body was good. Normally it would be

Re: Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
Hi Bob, Thanks I will try the suggestions in the other post. I have updated the pastebin with header - i think : ) http://pastebin.ca/910315 Thanks again Kate Bob Proulx wrote: Kathryn Allan wrote: The url to pastebin is http://pastebin.ca/910275 apologies if this is wrong - its my first

Re: Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
Hi, The url to pastebin is http://pastebin.ca/910275 apologies if this is wrong - its my first time using pastebin. Thanks Kate --[ UxBoD ]-- wrote: please post a URL to a sample message, or via pastebin so that we can run it through our installations and see what it hits. what is your SA in

Suggestions to block this spam

2008-02-19 Thread Kathryn Allan
Hi all, Getting tones of this sort of email through have been learning it as spam for the last few days but so far not much luck. -->start of message 2 examples Aloha,*** Real men!* Milliions of people acrosss the world have already tested THIS Goedendag, *** Real men!* * *MMillions of peopl

using sare rules

2008-02-17 Thread Kathryn Allan
Hi all, I have recently inherited the responsibility of looking after our spam machine as such i'm having a few teething issues : ) I just followed the instructions in the sare-sa-update-howto.txt I am just a bit confused as to whether I have done it correctly originally in the /var/lib/spam