RE: Detecting very recently registered domain names

2014-01-06 Thread si
>> Date: Mon, 6 Jan 2014 12:26:08 + >> From: andrew.he...@aaisp.net.uk >> To: users@spamassassin.apache.org >> Subject: Re: Detecting very recently registered domain names >> >> On Thu, 19 Dec 2013 10:02:39 -0500 >> Joe Quinn wrote: >> >>> We are notic

Does anyone recognise this?

2013-01-07 Thread si
Hi, A happy new year to you all. I'm seeing a lot of spam containing the following pattern of headers: X-MimeOLE: Produced by SwiftMailer 3.3.1_4 X-mid: What looks like a message ID= X-Mailer: AC Mailer The thing that first got my attention was the SwiftMailer version, which is pretty old. I'v

RE: Is this a new typoe of URI obfuscation?

2012-06-12 Thread si
> From: Martin Gregorie [mailto:mar...@gregorie.org] > Sent: 12 June 2012 16:37 > To: Spamassassin users list > Subject: Is this a new typoe of URI obfuscation? > > Today I got a piece of spam carrying the URL chasovik.it.gg as its > payload. I was intrigued because I didn't think .gg was a valid

RE: dkim-reputation.org / SA-Plugin

2010-09-14 Thread si
>> has anybody managed the plugin to run with SA 3.3.1 ? > using the 3.2.5 with sa 3.3.1 works for me :) Likewise here. Mup.

RE: abuse/postmaster lists at RFC-Ignorant.org

2010-08-26 Thread si
Guys, Thanks for time and effort on this. Consider this matter closed. Mup.

RE: abuse/postmaster lists at RFC-Ignorant.org

2010-08-23 Thread si
I realise that my English isn't that good, but I think what I've written is pretty clear. I never disputed the fact the rules were there. If you look at my original post, I say 'turned off', not 'removed'. I never said I wanted them for Meta rules, I asked for best way to turn then back on aga

RE: abuse/postmaster lists at RFC-Ignorant.org

2010-08-23 Thread si
> here i do > # > # meta to hit on both ABUSE and POSTMASTER missing on sending domain > # > meta RFC_ABUSE_POST (__DNS_FROM_RFC_ABUSE && __DNS_FROM_RFC_POST && > !USER_IN_BLACKLIST && !USER_IN_SPF_WHITELIST && !HAM_LISTED_LOCAL) > describe RFC_ABUSE_POST Meta: both abuse and postmaster missing

RE: abuse/postmaster lists at RFC-Ignorant.org

2010-08-23 Thread si
> These sub-BL listings still have been used in 3.1.x, no need to dig into > the ancient age of 2.5x. As you said yourself, "a release or two ago". > Why do you now bring up that version? That's the last version I did anything serious with, and version used to produce the system I'm presently rep

RE: abuse/postmaster lists at RFC-Ignorant.org

2010-08-19 Thread si
ing with risk is that 'mileage varies' ... I can live with it in context of how I wish to use lists, but thanks for pointing that out. Thanks for your time in replying, and further appols for annoying you so much. Si. -Original Message- From: Karsten Bräckelmann [mailto:guent...@ru

abuse/postmaster lists at RFC-Ignorant.org

2010-08-18 Thread si
Guys, A release or two ago, default inclusion of Postmaster and Abuse lists at RFC-Ignorant.org were turned off (some will say for good reason). What is easiest way to turn them back on again? Thanks Mup.

Re: Temporary 'Replacements' for SaneSecurity

2009-01-14 Thread si
o.uk, users@spamassassin.apache.org Date: Wednesday, 14 January, 2009, 2:23 PM How's it working for you, so far? On Wed, Jan 14, 2009 at 06:12, Paul Griffith wrote: > On Tue, 13 Jan 2009 05:28:42 -0500, si wrote: > >> Guys, >> >> I'm sure you're as sad

Temporary 'Replacements' for SaneSecurity

2009-01-13 Thread si
Guys,   I'm sure you're as sad as I am re- temporary suspension of the brilliant services offered by Steve Basford and is helpers at Sane Security. In a sick kind of way, the 'bad guys' are acknowledging the work these guys have done by DOSing them, but that doesn't help much with the daily grin