our clients
and at 06:42 it appeared on one of the RBLs. I am guessing that it must have
been a huge spam mailing that hit a lot of honeypots and people all at once.
Downside is not a happy client ;(
--
Thanks, Phil
- Original Message -
> Am 11.01.2012 12:28, schrieb --[ Ux
Hi,
we have seen a recent upsurge in SPAM and would like to ask the community for
recommendations on both free and commercial RBL offerings. We are currently
using:
Barracuda
SpamRats
JunkEmailFilter
SpamEatingMonkey
Plus the standard ones that are checked with SpamAssassin. We are also
- Original Message -
> On Fri, 2010-04-30 at 16:50 +0100, Nigel Frankcom wrote:
>
> > We're on a BT only exchange here so it's them or nothing, well not
> > quite, I could go CoLo... hmmm maybe not, or satellite, I was
> > involved in setting that up in Cyprus.
>
> > Nigel
> Is there suc
- Original Message -
> Hi,
>
> Just wondering if others are also seeing an increase in image spam in
> the last week or so, some of which contain zip attachments? The body
> contains random "bayes killer?" text with an image or zip attachment.
> I can't otherwise find something to trigger
- "corpus.defero" wrote:
> I was looking at a piece of irritating pill spam this morning
> ((http://pastebin.com/qzj83QKq)) and noticed this in the body, just
> after a random excerpt from chapter 58 of 'The Awakening':
>
> ---34AD8EF316667417464496762D36F3502061F3
> Content-Type: im
- "Per Jessen" wrote:
> Jonas Eckerman wrote:
>
> > (And of course, if this catches on, you'll have to provide RFC
> style
> > documentation.)
> >
>
> See Justins posting from two days back:
>
> http://tools.ietf.org/draft/draft-stumpf-dns-mtamark/
> http://tools.ietf.org/draft/draft-stum
- dar...@chaosreigns.com wrote:
> http://www.chaosreigns.com/mtx/
>
> --
> "Democracy is the theory that the common people know what they want,
> and deserve to get it good and hard." - H. L. Mencken
> http://www.ChaosReigns.com
Like the simplicity and it does appear to be a great idea. Wh
- te...@cnysupport.com wrote:
> I've recently started receiving web form "spam", but I'm not quite
> sure what to make of it.
>
> My websites contains a couple of support request forms that ask for
> minimal information (business name, name, phone, problem, email
> address).
>
> Recen
- "Mike Cardwell" wrote:
| On 11/01/2010 10:22, Jason Haar wrote:
| > Hi there
| >
| > We've been getting a few of these leaking through in the past couple
| of
| > weeks.
| >
| > http://pastebin.com/m574da717
| >
| > They aren't triggering (enough) network rule matches, contain a
| > bayes-k
- "Lars Ebeling" wrote:
| Or am I blacklisted?
|
| --
| Regards
| Lars Ebeling
All appears okay ...
--
This message has been scanned for viruses and
dangerous content and is believed to be clean.
SplatNIX IT Services :: Innovation through collaboration
- "Quanah Gibson-Mount" wrote:
| --On Monday, October 05, 2009 11:50 PM +0200 mouss
|
| wrote:
|
| > Thomas Mullins a écrit :
| >> We have been running Spamassassin for maybe eight years now. But,
| my
| >> coworkers do not like OpenSource. So they have finally complained
| >> enough tha
- "Clunk Werclick" wrote:
| On Mon, 2009-09-14 at 19:52 +0100, --[ UxBoD ]-- wrote:
| > - "Benny Pedersen" wrote:
| >
| > | On man 14 sep 2009 16:54:39 CEST, Bill Landry wrote
| > | > So how far does someone have to go before getting banned from
- "Benny Pedersen" wrote:
| On man 14 sep 2009 16:54:39 CEST, Bill Landry wrote
| > So how far does someone have to go before getting banned from the
| > list? Is this not far enough yet?
|
| he just come back with another sender email, with another reply-to, it
|
| will be endless banning
- "Karsten Bräckelmann" wrote:
| On Mon, 2009-09-14 at 18:55 +0100, --[ UxBoD ]-- wrote:
| > | Still working fine for me here, 51 hits so far today against DOB.
| >
| > Not come across that RBL before! Thanks :)
|
| grep _DOB *.cf# Part of the stock rule-set.
|
|
- "Bill Landry" wrote:
| > On Mon, 14 Sep 2009, Warren Togami wrote:
| >
| >> One thing they all have in common is their registration dates are
| very
| >> young according to whois lookups. It seems in general if we had a
| >> reliable way to lookup domain age we might be able to
| different
- "Chris Owen" wrote:
| On Sep 14, 2009, at 11:38 AM, LuKreme wrote:
|
| > On 14-Sep-2009, at 10:17, jdow wrote:
| >> :0
| >> * 9876543210^0 ^From: .*\
| > * 9876543210^0 ^From:.*clunk\.wercl...@wibblywobblyteapot\.co\.uk
| >> /dev/null
| >
| > Will work better. (and you don't need a lock on
- "LuKreme" wrote:
| On 14-Sep-2009, at 10:17, jdow wrote:
| > :0
| > * 9876543210^0 ^From: .*\
| * 9876543210^0 ^From:.*clunk\.wercl...@wibblywobblyteapot\.co\.uk
| > /dev/null
|
| Will work better. (and you don't need a lock on /dev/null)
|
| --
| In England 100 miles is a long distance.
- "Charles Gregory" wrote:
| On Mon, 14 Sep 2009, Clunk Werclick wrote:
| > Clearly not - but then, using Spamassassin as a filter ensures just
| > about everything gets through CUNTFACE.
|
| Congratulations! You've done something I have very rarely seen
| on any internet forum. You've gott
"Clunk Werclick" wrote:
| On Mon, 2009-09-14 at 12:24 +0100, --[ UxBoD ]-- wrote:
| > - "Clunk Werclick" wrote:
| >
| > | On Mon, 2009-09-14 at 11:46 +0200, Matus UHLAR - fantomas wrote:
| > | > > > On 12-Sep-2009, at 10:27, Clunk Werclick wrot
- "Matus UHLAR - fantomas" wrote:
| > > > > On 12-Sep-2009, at 10:27, Clunk Werclick wrote:
| > > > > > I disagree. It can do as much harm as good. My own view and
| > > > > > observation from the past have rendered it pointless in my
| context. It
| > > > > > adds latency, is easily poisoned
- "Clunk Werclick" wrote:
| On Mon, 2009-09-14 at 11:46 +0200, Matus UHLAR - fantomas wrote:
| > > > On 12-Sep-2009, at 10:27, Clunk Werclick wrote:
| > > > > I disagree. It can do as much harm as good. My own view and
| > > > > observation from the past have rendered it pointless in my
| con
- "Clunk Werclick" wrote:
| On Sun, 2009-09-13 at 16:37 -0600, LuKreme wrote:
| > On 12-Sep-2009, at 10:27, Clunk Werclick wrote:
| > > I disagree. It can do as much harm as good. My own view and
| > > observation
| > > from the past have rendered it pointless in my context. It adds
| > >
Hi,
Cannot recall seeing a follow up to John H new rules; Are they available now or
still under test review ?
Best Regards,
--
This message has been scanned for viruses and
dangerous content and is believed to be clean.
SplatNIX IT Services :: Innovation through collaboration
- "Marc Perkel" wrote:
>
>
> Aaron Wolfe wrote:
On Fri, Aug 14, 2009 at 11:24 AM, Chris Owen wrote:
On Aug 14, 2009, at 10:13 AM, Mike Cardwell wrote:
The comparisons on that page are useless. What matters is list policy,
reliability and reputation.
SpamHaus is hands down the best d
- "John Hardin" wrote:
> On Wed, 2009-08-12 at 16:20 -0700, Ted Mittelstaedt wrote:
> > Maybe this will sound dumb but wouldn't it be perfectly
> > safe to blacklist "example.com" after all, that isn't a
> > domain your ever going to get mail from.
> >
> > Ted
>
> That is there because Alex
- "Thomas Casartello" wrote:
>
>
>
> Been getting a lot of low scoring stuff like this lately. Any suggestions?
Please post the complete email to pastbin so we can run it through our own
installations. It would help if you let us know which rules it actually hit on
in your installation
- "twofers" wrote:
>
I have a post I have tried several times over the last week to post to this
forum and it never seems to get posted. I don't understand why?
There is nothing exotic about it, just text, a question and email header info I
pasted.
Any idea whats up?
Thanks,
Wes
>
Hi,
Where can I find sa-awlUtil as it does not appear to be in the download file ?
Best Regards,
--
SplatNIX IT Services :: Innovation through collaboration
- "Stefan" wrote:
> --[ UxBoD ]--:
> > - "Matus UHLAR - fantomas" wrote:
> > > > > On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote:
> > > > > > Would somebody please let me know what is required to get it
> to
&g
- "snowweb" wrote:
> I don't know about anyone else, but I'm getting a bit hacked of with
> this
> 1980's style forum. I'm trying to get to the bottom of an SA issue and
> this
> list/forum thing is giving me a bigger headache than SA!
>
> Spamassassin has more than one or two users now and
- "Matus UHLAR - fantomas" wrote:
> > > On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote:
> > > > Would somebody please let me know what is required to get it to
> work
> > > :) I have installed the Perl module and enabled the
- "Mariusz Kruk" wrote:
> On Tue, 2009-07-28 at 11:29 +0100, --[ UxBoD ]-- wrote:
> > - "Mariusz Kruk" wrote:
> >
> > > On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote:
> > > > Hi,
> > > >
> >
- "Mariusz Kruk" wrote:
> On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote:
> > Hi,
> >
> > Would somebody please let me know what is required to get it to work
> :) I have installed the Perl module and enabled the plugin but it
> never appears
Hi,
Would somebody please let me know what is required to get it to work :) I have
installed the Perl module and enabled the plugin but it never appears to hit :(
Best Regards,
--
SplatNIX IT Services :: Innovation through collaboration
look at line 55 of the pastebin ;) you can use that URL I believe.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
//
why not :-
util_rb_2tld grupogsv.com
as that appears as part of the link ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID:
What RBL lookup lists are you using ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749
message
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5003]
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --i
this link works just fine :-
http://mesh.dl.sourceforge.net/sourceforge/swatch/swatch-3.2.2.tar.gz
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.key
Pidfile holds the PID of the forked process ie. /var/run/MailScanner.pid
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A8
Process Identifier.
When any process is forked (started) it will have unique number associated with
it. It will also have a PPID (Parent Process Identifier) ie. what was the
process that forked the child.
http://en.wikipedia.org/wiki/Process_identifier
Regards,
--
--[ UxBoD ]--
// PGP Key
g rDNS
4.0 JM_SOUGHT_3JM_SOUGHT_3
1.0 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers
Jason's rules should help you :- http://wiki.apache.org/spamassassin/SoughtRules
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.as
please post the full message via something like pastebin. we need to see the
headers aswell.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserv
policyd works a treat :) V2 is also in development aswell.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +
Share Pictures and Chat SPAM
4.0 JM_SOUGHT_3JM_SOUGHT_3
4.0 JM_SOUGHT_2JM_SOUGHT_2
so take a look at http://wiki.apache.org/spamassassin/SoughtRules
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// F
we would need to see the full headers.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749
please post a URL to a sample message, or via pastebin so that we can run it
through our installations and see what it hits.
what is your SA installation hitting and scoring it as ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// F
Resolved. Cleared my sa-keys directory and re-imported them all.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
//
it ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]
- &qu
what does netstat -an | grep 783 show ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749
the inline snort station should show some more detail. do you have access to
your routers and switches ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
//
- "Matt Kettler" <[EMAIL PROTECTED]> wrote:
--[ UxBoD ]-- wrote:
> Hi,
>
> I just had this message get through :-
>
>
> and it only scored 5.6. These are the rules it hit :-
>
> 1.23 ADVANCE_FEE_2
> 0.00 BAYES_50
> 0.72
on these ?
TIA
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]
/vhcs.puuhis.net/wiki/index.php/Spam_/_Antivirus_filter
--
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845
Is decoder (Chris) still developing FuzzyOCR ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 86
I am running it with SA 3.2.4 with no problems at all.
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 84
ur address.
Try to contact them as soon as possible to quicken the process of your Card
before your Draft gets Expired.
Let me know as soon as you receive your ATM Master Card.
Thanks.
Mr.tony okou
--
Regards,
--[ UxBoD ]--
// PGP
] dbg: check:
subtests=__BOTNET_NOTRUST,__HAS_MSGID,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__SANE_MSGID,__SARE_WHITELIST_FLAG,__TVD_BODY,__UNUSABLE_MSGID
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import&qu
Do you see if get picked up if you run a lint on your SA installation ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687
Is a RPM available for Centos5 yet ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP Pho
would perhaps be useful to see a spamassassin -D --lint ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +
,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]
- Original Message
Can you post a copy online Martin ? need a few examples to find the common
elements.
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.
Thanks Justin. Do they all follow the same patterns ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 84
Does anybody have one of these, or different one, that you could upload
somewhere so can do some analysis ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
//
Well done Michele :) That is pure class.
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749
-2.3600
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]
__LOCAL_DIG1 && __LOCAL_DIG2
score LOCAL_DIG1 3
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
//
ore LOCAL_PROBE13
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP
al RBL Yellowlist
tflags RCVD_IN_LRBL_Y net
score RCVD_IN_LRBL_Y -3
Checked existing rules for help ;)
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36B
-3
But obviously it will score the whitelist and blacklist the same if the IP
address appears in both lists. How can I say on the meta rule that if it
*only* appears in blacklist score -7, and 7 if in whitelist, and if in both use
the yellowlist ?
Regards,
--[ UxBoD ]--
// PGP Key
How can I get the plugin? I have emailed the webmaster a couple of times
but no response :(
--
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.
Same here :(
On Fri, 29 Jun 2007 11:28:51 -0400, "Joe Zitnik" <[EMAIL PROTECTED]> wrote:
> Is it having troubles again? I'm having problems reaching the site.
>
> --
> This message has been scanned for viruses and
> dangerous content by MailScanner, and is
&
*
>
> --
> This message has been scanned for viruses and dangerous content by
> MailScanner, and is
> believed to be clean.
--
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D1
well. 1.14 is
> quite old.
>
> --[ UxBoD ]-- wrote:
>> Hi Jason,
>>
>> Yes it will work fine. A few minor tweaks are required so nothing
> major.
>>
>> Best thing is to join the mailwatch mailing list and introduce yourself
> :)
>>
>> Regard
artner
> Empower Information Systems
> [EMAIL PROTECTED]
> weblog.empoweris.com
> www.empoweris.com
> 757-273-9399 (office)
> 757-715-1944 (cell)
> 866-477-1544 (toll free)
>
>
> -Original Message-
> From: --[ UxBoD ]-- [mailto:[EMAIL PROTECTED]
> Sent: Monday,
essage in error, please notify the sender: Jason Holbrook
> immediately by e-mail [EMAIL PROTECTED] and delete all copies of
this
> message.
>
> Empower Information Systems operates under a zero spam policy. If you
> believe this message to be spam, please contact [EMAIL PROTECTED]
Resolved :) Thanks.
On Tue, 15 May 2007 10:48:47 +0200, Cedric BUSCHINI <[EMAIL PROTECTED]> wrote:
> ok - not the same problem I have
>
> is -100 too high for you ?
>
> --[ UxBoD ]-- a écrit :
>
>>I have just performed a brand new server install with SA 3.2.
uses the function
eval:check_from_in_whitelist(), but need to see how that works.
On Tue, 15 May 2007 10:48:47 +0200, Cedric BUSCHINI <[EMAIL PROTECTED]> wrote:
> ok - not the same problem I have
> is -100 too high for you ?
>
> --[ UxBoD ]-- a écrit :
>
>>I have j
, Cedric BUSCHINI <[EMAIL PROTECTED]> wrote:
> --[ UxBoD ]-- a écrit :
>
>>Which rule sets this ? I have grep'd through /etc/mail/spamassassin and
> the variable is used but does not seem to get set anywhere ?
>>
>>
> Hi,
>
> Have a look in /usr/sha
Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the
variable is used but does not seem to get set anywhere ?
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190
Using both though the channel update for openprotect seems to break
it. Switched to rules-du-jour and all is okay now.
On Sat, 12 May 2007
15:05:20 -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote:
> On Sat, May 12, 2007 at 09:04:22AM +0100, --[ UxBoD ]-- wrote:
> > plugins wer
The point is that if I use either with or without plugins using the
channel breaks SA 3.2.0.
On Sat, 12 May 2007 15:25:23 -0400
"Daryl C. W. O'Shea" <[EMAIL PROTECTED]> wrote:
> --[ UxBoD ]-- wrote:
> > Eureka! Found the problem at last.
with --allowplugins,
after removing the directory, and now the plugins get loaded. But yet
again no checks are performed.
Any ideas ?
On Sat, 12 May 2007 08:44:53 +0100
"--[ UxBoD ]--" <[EMAIL PROTECTED]> wrote:
> Have just tested with GTUBE and even that does not get picked u
Have just tested with GTUBE and even that does not get picked up!
G. What is happening. My config lints fine.
On Sat, 12 May 2007 07:35:14 +0100
"--[ UxBoD ]--" <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I am having real problems in getting SA 3.2.0 to perform Bayes o
no avail.
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8
// Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8
// Phone: +44 845 869 2749
// SIP Phone: [EMAIL PROTECTED]
--
This m
Regards,
On Wed, 9 May 2007 10:22:55 +0100, --[ UxBoD ]-- <[EMAIL PROTECTED]> wrote:
> To ensure all is working okay, why not take a existing SPAM message and
> construct the $message from that and test ?
>
> On Wed, 9 May 2007 14:40:52 +0530, "BG Mahesh" <[EMAIL
Mahesh
> http://www.greynium.com/
> http://www.oneindia.in/
> http://www.click.in/ - Free Indian Classifieds
>
> --
> This message has been scanned for viruses and dangerous content by
> MailScanner, and is
> believed to be clean.
--
--[ UxBoD ]--
// PGP Key: "curl -s http:/
Here is my lint :-
SpamAssassin Lint[18703] dbg: logger: adding facilities: all0
[18703] dbg: logger: logging level is DBG 8E-05
[18703] dbg: generic: SpamAssassin version 3.2.03E-05
[18703] dbg: config: score set 0 chosen.0.00064
[18703] dbg: util: running in tai
that all looks fine. I have tested with
a spam message and debug enabled and no errors are produced. Is there any
additional debugging I can do ?
TIA
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F
: Mail_SpamAssassin_CompiledRegexps_body_0_scan1
Any ideas on how to resolve it ?
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8
// Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8
// Phone: +
If you wish to reject at MTA level then please read
http://www.postfix.org/uce.html under the section "Client hostname/address
restrictions" as you are able to specify a list of RBLs.
Regards,
UxBoD
On Wed, 28 Mar 2007 12:20:16 +0200, "Rocco Scappatura" <[EMAIL PROTECTE
spam.
>
> If this is the truth, I would like to figure out how I can block these
> messages in advance..
>
> Could someone give me an hint?
>
> TIA,
>
> rocsca
>
>
>
>
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg -
f them but I am interested in a more
> generic/efficient way.
>
> ps2. both messages marked as spam or ham are available here:
> http://noc.ntua.gr/~christia/tmp/KAUF-TIPP_DER_WOCHE.gz
>
> --
> This message has been scanned for viruses and dangerous content by
> MailSca
First thing first. Could you run a spamassassin -D --lint as the user which is
scanning the email, and post the results please. This will allow people to
diagnose the problem more easily.
Regards,
UxBoD
On Wed, 28 Mar 2007 09:12:20 +0100, Jimmy Stewpot <[EMAIL PROTECTED]> wrote:
&
that when users get image spam
> they put it in the spam folders and they get learned. But the text in
> the image spam causes ham type text to be learned as spam. That causes
> ham to get higher scores.
>
> --
> This message has been scanned for viruses and dangerous content
Using a combination of numerous SA rules, bayes, FuzzyOCR and BotNet on a new
server Ive just built we are trashing the SPAM. Attached graph is for today :-
Regards,
UxBoD
On Thu, 22 Mar 2007 09:55:07 -0700, Marc Perkel <[EMAIL PROTECTED]> wrote:
> Maybe I'm doing something wron
I only have a small installation but have seen a 50% increase in SPAM recently
:( and a lot of it isn't be caught, even
with splenty of rules and FuzzyOCR, due to them being very well worded emails
:( :(
On Sun, 04 Feb 2007 15:53:23 +
Matt Richards <[EMAIL PROTECTED]> wrote:
> I would of th
On Sat, 27 Jan 2007 12:25:12 +
Nigel Frankcom <[EMAIL PROTECTED]> wrote:
> On Sat, 27 Jan 2007 11:49:03 +0000, "--[ UxBoD ]--"
> <[EMAIL PROTECTED]> wrote:
>
> >Sorry for asking as I am sure that it has already been covered. But
> >if there a rule f
Sorry for asking as I am sure that it has already been covered. But if
there a rule for the new spate of drug SPAM where the URL has "Remove
"*" to make the link working!" in it ?
Thanks,
--
This message has been scanned for viruses and dangerous content by MailScanner,
and is
believed to be cl
1 - 100 of 109 matches
Mail list logo
