Re: Another yukky email

2009-05-19 Thread Henrik K
On Tue, May 19, 2009 at 11:05:36AM -0400, Adam Katz wrote: > Henrik K wrote: > > I'm not sure what you are implying. BOUNCE_MESSAGE only requires > > Return-Path: <>, which many non-bounce things use (newsletters, > > order confirmations etc). So your rule catches all of them. It's > > been like t

Re: Another yukky email

2009-05-19 Thread Matt
http://www.backscatterer.org/ May help. Here's another e-mail that got through SpamAssassin: > > http://rafb.net/p/cFMnIy61.html > > As you can see I've effectively disabled the BAYES_00 rule as it's giving > false credit to a ton of backscatter crud messages, but is there really a > way to bloc

Re: Another yukky email

2009-05-19 Thread Adam Katz
Henrik K wrote: > I'm not sure what you are implying. BOUNCE_MESSAGE only requires > Return-Path: <>, which many non-bounce things use (newsletters, > order confirmations etc). So your rule catches all of them. It's > been like this forever, but I guess people are happy enough with it > not to fix

Re: Another yukky email

2009-05-18 Thread Henrik K
On Mon, May 18, 2009 at 01:19:20PM -0400, Adam Katz wrote: > > On Fri, May 15, 2009 at 06:59:17PM -0400, Adam Katz wrote: > >> score ANY_BOUNCE_MESSAGE0.1 0.1 0.3 0.3 # def: 0.1 > >> score BOUNCE_MESSAGE0.4 0.5 0.9 1.0 # def: 0.1 > >> score VBOUNCE_MESSAGE

Re: Another yukky email

2009-05-18 Thread Adam Katz
> On Fri, May 15, 2009 at 06:59:17PM -0400, Adam Katz wrote: >> score ANY_BOUNCE_MESSAGE0.1 0.1 0.3 0.3 # def: 0.1 >> score BOUNCE_MESSAGE0.4 0.5 0.9 1.0 # def: 0.1 >> score VBOUNCE_MESSAGE 0.4 0.5 0.9 1.0 # def: 0.1 >> >> header __VACATION Subj

Re: Another yukky email

2009-05-18 Thread Matus UHLAR - fantomas
On 18.05.09 16:21, Matus UHLAR - fantomas wrote: > And someone apparently played with cores since: oh, disregard that one, I've mismatched the scores. -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovan

Re: Another yukky email

2009-05-18 Thread Matus UHLAR - fantomas
> Jeremy Morton said: > > As you can see I've effectively disabled the BAYES_00 rule as it's giving > > false credit to a ton of backscatter crud messages, but is there really a > > way to block these kinds of backscatter? Is my Bayesian filtering screwed > > up? What score does your SA insta

Re: Another yukky email

2009-05-18 Thread Mark Loeser
Jeremy Morton said: > As you can see I've effectively disabled the BAYES_00 rule as it's giving > false credit to a ton of backscatter crud messages, but is there really a > way to block these kinds of backscatter? Is my Bayesian filtering screwed > up? What score does your SA install give fo

Re: Another yukky email

2009-05-15 Thread Henrik K
On Fri, May 15, 2009 at 06:59:17PM -0400, Adam Katz wrote: > > score ANY_BOUNCE_MESSAGE0.1 0.1 0.3 0.3 # def: 0.1 > score BOUNCE_MESSAGE0.4 0.5 0.9 1.0 # def: 0.1 > score VBOUNCE_MESSAGE 0.4 0.5 0.9 1.0 # def: 0.1 > > header __VACATION Subject

Re: Another yukky email

2009-05-15 Thread LuKreme
On 15-May-2009, at 16:59, Adam Katz wrote: Backscatter from misdirected bounces is bulk AND unsolicited. Backscatter is NOT bulk though. That means it is spam. You can define it however you want, but it's still not bulk. -- Penny! *Everything* is better with BlueTooth

Re: Another yukky email

2009-05-15 Thread Adam Katz
LuKreme wrote: > On 15-May-2009, at 12:27, Jeremy Morton wrote: >> It's unwanted e-mail, so it's pretty close to spam in my book. Just >> because it's some moron who bounced a message instead of someone >> explicitly spamming me doesn't make it much better. > > But it is NOT spam, which means tha

Re: Another yukky email

2009-05-15 Thread LuKreme
On 15-May-2009, at 12:27, Jeremy Morton wrote: It's unwanted e-mail, so it's pretty close to spam in my book. Just because it's some moron who bounced a message instead of someone explicitly spamming me doesn't make it much better. But it is NOT spam, which means that you screwing up the sc

Re: Another yukky email

2009-05-15 Thread Karsten Bräckelmann
On Fri, 2009-05-15 at 19:27 +0100, Jeremy Morton wrote: > Karsten Bräckelmann wrote: > > Backscatter. These types of arbitrarily phrased "I changed my email > > address" auto-responses are pretty much impossible to catch. > > I feared as much. > > Since BAYES_00 is a strong sign for ham, I would

Re: Another yukky email

2009-05-15 Thread Jari Fredriksson
> Karsten Bräckelmann wrote: > > It's unwanted e-mail, so it's pretty close to spam in my > book. Just because it's some moron who bounced a message > instead of someone explicitly spamming me doesn't make it > much better. > It is unwanted, but would you send a report to the sender's ISP beca

Re: Another yukky email

2009-05-15 Thread Jeremy Morton
Karsten Bräckelmann wrote: On Fri, 2009-05-15 at 18:45 +0100, Jeremy Morton wrote: Here's another e-mail that got through SpamAssassin: http://rafb.net/p/cFMnIy61.html Backscatter. These types of arbitrarily phrased "I changed my email address" auto-responses are pretty much impossible to cat

Re: Another yukky email

2009-05-15 Thread Karsten Bräckelmann
On Fri, 2009-05-15 at 18:45 +0100, Jeremy Morton wrote: > Here's another e-mail that got through SpamAssassin: > > http://rafb.net/p/cFMnIy61.html Backscatter. These types of arbitrarily phrased "I changed my email address" auto-responses are pretty much impossible to catch. > As you can see I'v

Another yukky email

2009-05-15 Thread Jeremy Morton
Here's another e-mail that got through SpamAssassin: http://rafb.net/p/cFMnIy61.html As you can see I've effectively disabled the BAYES_00 rule as it's giving false credit to a ton of backscatter crud messages, but is there really a way to block these kinds of backscatter? Is my Bayesian fil