Re: How to use German spam channel? (GPG problems)

On 16/05/2010 7:53 AM, Yves Goergen wrote: > On 16.05.2010 12:13 CE(S)T, C.M. Burns wrote: >> I suppose you have problems with the key #856AA88A. > > Yes, that was it. > >> If you imported it to your keyring, try this: >> >> sa-update --channel 70_zmi_german.cf.zmi.sa-update.dostech.net --gpgkey

Re: How to use German spam channel? (GPG problems)

On 16.05.2010 12:13 CE(S)T, C.M. Burns wrote: > I suppose you have problems with the key #856AA88A. Yes, that was it. > If you imported it to your keyring, try this: > > sa-update --channel 70_zmi_german.cf.zmi.sa-update.dostech.net --gpgkey > 856AA88A > > or you could try this: > > sa-update

Re: Hot to use German spam channel? (GPG problems)

Yves Goergen schrieb: > Hello, > > how can I use the German spam rules channel that was recently advertised > here? When I tell sa-update to use that channel, it reports me GPG > problems. I have imported a key (not sure anymore which) but it still > doesn't work. The ch

Hot to use German spam channel? (GPG problems)

Hello, how can I use the German spam rules channel that was recently advertised here? When I tell sa-update to use that channel, it reports me GPG problems. I have imported a key (not sure anymore which) but it still doesn't work. The channel maintainer cannot tell me which key I need. Sho

Re: "German" spam not hitting any DNSBLs, almost no rules

On Tue, 2009-03-03 at 13:32 +0100, Michelle Konzack wrote: > Am 2009-03-02 12:30:34, schrieb Karsten Bräckelmann: > > How so? 'cause his score is lower than yours? Both these samples have > > been caught and scored 7.1. Jake didn't complain about FNs but asked for > > hints on *additional* rules.

Re: "German" spam not hitting any DNSBLs, almost no rules

Am 2009-03-02 20:14:29, schrieb Jake Maul: > Would you mind posting (or mailing me directly) what rules you're > triggering to get those scores? Under Debian apt-get install spamassassin thats all. Nothing customized and since I am in germany, and get many german messages, the messages w

Re: "German" spam not hitting any DNSBLs, almost no rules

Am 2009-03-02 12:30:34, schrieb Karsten Bräckelmann: > How so? 'cause his score is lower than yours? Both these samples have > been caught and scored 7.1. Jake didn't complain about FNs but asked for > hints on *additional* rules. Well, that wasn't exactly a constructive > comment anyway. > > Ma

Re: "German" spam not hitting any DNSBLs, almost no rules

On Mon, 2009-03-02 at 20:29 -0700, Jake Maul wrote: > On Sun, Mar 1, 2009 at 11:32 AM, Karsten Bräckelmann wrote: > > If you got the RelayCountry plugin enabled, here's a simple rule to > > score direct MUA to MX spam: > > > > header RELAY_MUA_TO_MX X-Relay-Countries =~ /^..$/ > > describe

Re: "German" spam not hitting any DNSBLs, almost no rules

Heh, yeah, the first one is in SaneSecurity now. I call clamd directly from Exim before SA, so I wouldn't see this one anymore. Thanks, Jake On Mon, Mar 2, 2009 at 8:40 PM, Chris wrote: > On Mon, 2009-03-02 at 05:16 +0100, Michelle Konzack wrote: >> Am 2009-03-01 09:44:00, schrieb Jake Maul: >>

Re: "German" spam not hitting any DNSBLs, almost no rules

On Mon, 2009-03-02 at 05:16 +0100, Michelle Konzack wrote: > Am 2009-03-01 09:44:00, schrieb Jake Maul: > > http://pastebin.com/m58b01a0b > > Score 7.6 Content analysis details: (21.4 points, 5.0 required) pts rule name description --

Re: "German" spam not hitting any DNSBLs, almost no rules

That's an interesting observation. Yes, the initial host is US for both, bounced through the UK (80.82.114.106 in both cases). I thought RelayCountry would show *all* the countries represented in Received: lines? Jake On Sun, Mar 1, 2009 at 11:56 AM, wrote: > Hi Jake, > > both examples seem to

Re: "German" spam not hitting any DNSBLs, almost no rules

On Sun, Mar 1, 2009 at 11:32 AM, Karsten Bräckelmann wrote: > On Sun, 2009-03-01 at 09:44 -0700, Jake Maul wrote: >> Howdy, >> >> Lately I've been getting a lot of spam like this: >> >> http://pastebin.com/m58b01a0b >> http://pastebin.com/me13959a >> >> The domain changes, but it's virtually alway

Re: "German" spam not hitting any DNSBLs, almost no rules

None. This particular domain isn't terribly useful outside a pretty narrow locality (Arizona, US), so almost anything foreign is pretty likely to be spam. Thanks for the rule, I may end up doing something like that. :) Jake On Sun, Mar 1, 2009 at 11:51 AM, John Lundin wrote: > On Sun, Mar 01, 2

Re: "German" spam not hitting any DNSBLs, almost no rules

Would you mind posting (or mailing me directly) what rules you're triggering to get those scores? Many thanks, Jake On Sun, Mar 1, 2009 at 9:16 PM, Michelle Konzack wrote: > Am 2009-03-01 09:44:00, schrieb Jake Maul: >> http://pastebin.com/m58b01a0b > > Score 7.6 > >> http://pastebin.com/me13959

Re: "German" spam not hitting any DNSBLs, almost no rules

On Mon, 2009-03-02 at 05:16 +0100, Michelle Konzack wrote: > Am 2009-03-01 09:44:00, schrieb Jake Maul: > > http://pastebin.com/m58b01a0b > Score 7.6 > > > http://pastebin.com/me13959a > Score 7.8 > > You must do something wrong. /me scratches his head How so? 'cause his score is lower than yo

Re: "German" spam not hitting any DNSBLs, almost no rules

Am 2009-03-01 13:51:18, schrieb John Lundin: > Hi, Jake. How much ham do you receive with a British origin, a German > domain and containing Russian URLs? ROTFLOL Thanks, Greetings and nice Day/Evening Michelle Konzack -- Linux-User #280138 with the Linux Counter, http://counter.li.org/ ##

Re: "German" spam not hitting any DNSBLs, almost no rules

Am 2009-03-01 09:44:00, schrieb Jake Maul: > http://pastebin.com/m58b01a0b Score 7.6 > http://pastebin.com/me13959a Score 7.8 You must do something wrong. Thanks, Greetings and nice Day/Evening Michelle Konzack Systemadministrator 24V Electronic Engineer Tamay Dogan Network

Re: "German" spam not hitting any DNSBLs, almost no rules

>> >> Howdy, >> >> Lately I've been getting a lot of spam like this: >> >> http://pastebin.com/m58b01a0b >> http://pastebin.com/me13959a >> >> The domain changes, but it's virtually always in the .de TLD >> ("somedomain.de"). RelayCountries has this to say about that message >> (I'm in the US,

Re: "German" spam not hitting any DNSBLs, almost no rules

On Sun, Mar 01, 2009 at 09:44:00AM -0700, Jake Maul wrote: > The domain changes, but it's virtually always in the .de TLD > [31067] dbg: metadata: X-Relay-Countries: GB > > They don't seem to trigger any remote tests at all DNSBLs, URIBLs, > Pyzor, Razor, or Botnet. The only local tests trigge

Re: "German" spam not hitting any DNSBLs, almost no rules

On Sun, 2009-03-01 at 09:44 -0700, Jake Maul wrote: > Howdy, > > Lately I've been getting a lot of spam like this: > > http://pastebin.com/m58b01a0b > http://pastebin.com/me13959a > > The domain changes, but it's virtually always in the .de TLD > ("somedomain.de"). RelayCountries has this to say

"German" spam not hitting any DNSBLs, almost no rules

Howdy, Lately I've been getting a lot of spam like this: http://pastebin.com/m58b01a0b http://pastebin.com/me13959a The domain changes, but it's virtually always in the .de TLD ("somedomain.de"). RelayCountries has this to say about that message (I'm in the US, btw): [31067] dbg: metadata: X-Rel

Re: sa-update does not pick up newest German spam wave

Richard Hartmann wrote: While I agree in general, the text is very static and antivirus eats CPU, SA does not (so much). What AV application do you use? Is it daemonized or does it have to load it's database for every call? Here SA uses lots more CPU than clamd and fprotd does. /Jonas -- J

Re: sa-update does not pick up newest German spam wave

> > This is not spam but malware. Got a virus scanner? > > Yes. But when your scanners do not detect it yet, alternatives are > needed. Does your virus scanner support custom signatures? :) > > sa-update generally is *not* meant for "signature style updates" once an > > hour like that. > > Note

Re: sa-update does not pick up newest German spam wave

On Tue, Dec 2, 2008 at 18:20, Karsten Bräckelmann <[EMAIL PROTECTED]> wrote: > This is not spam but malware. Got a virus scanner? Yes. But when your scanners do not detect it yet, alternatives are needed. > sa-update generally is *not* meant for "signature style updates" once an > hour like tha

Re: sa-update does not pick up newest German spam wave

> Ihre Email "[EMAIL PROTECTED]" wird wegen Missbrauch innerhalb der naechsten > 24 > Stunden gesperrt. Es sind \d{2} Beschwerden wegen Spamversand bei uns > eingegangen. > Details und moegliche Schritte zur Entsperrung finden Sie im Anhang. > > Attachment: > randomly named zip file which contain

Re: sa-update does not pick up newest German spam wave

Richard Hartmann schrieb: > Hi all, > > this mail: > > Subject: Die E-Mail Adresse [EMAIL PROTECTED] wird gesperrt > > Body: > Sehr geehrte Damen und Herren, > > Ihre Email "[EMAIL PROTECTED]" wird wegen Missbrauch innerhalb der naechsten > 24 > Stunden gesperrt. Es sind \d{2} Beschwerden wege

Re: sa-update does not pick up newest German spam wave

Richard Hartmann wrote on Tue, 2 Dec 2008 13:26:23 +0100: > Is there a keyword to drop mail instead of changing its score, as well? SA does not "drop" anything, it only detects spamminess. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: sa-update does not pick up newest German spam wave

Richard Hartmann wrote on Tue, 2 Dec 2008 13:04:31 +0100: > While I agree in general, the text is very static and antivirus eats CPU, > SA does not (so much). In general, that's absolutely not true. If you have a correctly configured MTA most of this spam will not even make it on your system. K

Re: sa-update does not pick up newest German spam wave

> 2008/12/2 Yet Another Ninja <[EMAIL PROTECTED]>: > > > these should be caught by your AV - submit samples to your vendor if its > > still not being detected. On 02.12.08 13:04, Richard Hartmann wrote: > While I agree in general, the text is very static and antivirus eats CPU, > SA does not (so

Re: sa-update does not pick up newest German spam wave

On Tue, Dec 2, 2008 at 13:03, Kai Schaetzl <[EMAIL PROTECTED]> wrote: > http://wiki.apache.org/spamassassin/WritingRules Works like a charm, thank you very much! Added to my local wiki :) Is there a keyword to drop mail instead of changing its score, as well? Googling for that proved to be futil

Re: sa-update does not pick up newest German spam wave

2008/12/2 Yet Another Ninja <[EMAIL PROTECTED]>: > these should be caught by your AV - submit samples to your vendor if its > still not being detected. While I agree in general, the text is very static and antivirus eats CPU, SA does not (so much). Richard

Re: sa-update does not pick up newest German spam wave

Richard Hartmann wrote on Tue, 2 Dec 2008 12:22:00 +0100: > If not, what doc should I read to create my own? http://wiki.apache.org/spamassassin/WritingRules Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com

Re: sa-update does not pick up newest German spam wave

On 12/2/2008 12:22 PM, Richard Hartmann wrote: Hi all, this mail: Subject: Die E-Mail Adresse [EMAIL PROTECTED] wird gesperrt Body: Sehr geehrte Damen und Herren, Ihre Email "[EMAIL PROTECTED]" wird wegen Missbrauch innerhalb der naechsten 24 Stunden gesperrt. Es sind \d{2} Beschwerden wegen

sa-update does not pick up newest German spam wave

Hi all, this mail: Subject: Die E-Mail Adresse [EMAIL PROTECTED] wird gesperrt Body: Sehr geehrte Damen und Herren, Ihre Email "[EMAIL PROTECTED]" wird wegen Missbrauch innerhalb der naechsten 24 Stunden gesperrt. Es sind \d{2} Beschwerden wegen Spamversand bei uns eingegangen. Details und moeg

Re: German Spam Flood

I do not get a lot of spam through. And I do not get a lot of reports of GERMAN spam either, so please forward me the most annoying GERMAN spam so that I can react. mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660 / 415 65 31 .

Re: German Spam Flood

On Samstag, 18. Oktober 2008 Christoph Petersen wrote: > - Bist DU mein Traumtyp?? > - Willst Du spass haben? > - Shireen gepoppt. > - Saga direkt gevoegelt hehe > - L0litas wollen es richtig hart > - Myriam naturgeiles Teenie! Hi guys, I'm the maintainer of ZMI_GERMAN. Sorry that your mails have

Re: German Spam Flood

cfgerty a écrit : > Hello, > > the same here. Typical thing here is that the links are typical written with > blanks like > > www . something . org > > Has anyone a rule which is able to validate this kind of URL's against a BL? are there any legitimate uses of such spacings? Otherwise, you co

Re: German Spam Flood

Chris a écrit : > On Saturday 18 October 2008 7:20 am, cfgerty wrote: >> One sample of these mails: >> >> http://pastebin.com/m1e3d6b5d >> >> German Language Rulesets are applied. >> >> Chris >> > Scored like this on my standalone machine: > > Content analysis details: (11.2 points, 5.0 required

Re: German Spam Flood

mouss a écrit : > Matthias Schmidt a écrit : >> Am/On Sat, 18 Oct 2008 05:20:03 -0700 schrieb/wrote cfgerty: >> >>> One sample of these mails: >>> >>> http://pastebin.com/m1e3d6b5d >>> >>> German Language Rulesets are applied. >>> >> this message doesn't come from a mail-server with a resolving rev

Re: German Spam Flood

Matthias Schmidt a écrit : > Am/On Sat, 18 Oct 2008 05:20:03 -0700 schrieb/wrote cfgerty: > >> One sample of these mails: >> >> http://pastebin.com/m1e3d6b5d >> >> German Language Rulesets are applied. >> > > this message doesn't come from a mail-server with a resolving reverse pointer. > We don'

Re: German Spam Flood

Am/On Sat, 18 Oct 2008 05:20:03 -0700 schrieb/wrote cfgerty: > >One sample of these mails: > >http://pastebin.com/m1e3d6b5d > >German Language Rulesets are applied. > this message doesn't come from a mail-server with a resolving reverse pointer. We don't accept such messages, so this message even

Re: German Spam Flood

Hi Chris, Chris wrote: pts rule name description -- -- 5.0 BOTNET Relay might be a spambot or virusbot [botnet0.8,ip=88.215.95.153,rdns=88.215.95.153.dynamic.cablesurf.de,maildomain=cablesurf.

Re: German Spam Flood

Hi. cfgerty wrote: Hello, the same here. Typical thing here is that the links are typical written with blanks like www . something . org Has anyone a rule which is able to validate this kind of URL's against a BL? And as you say: Bayes still comes back with 0-5%. Mhh my bayes identifies s

Re: German Spam Flood

lock 104; Body=1 Fuz1=1] > 0.1 RDNS_NONE Delivered to trusted network by a host with no > rDNS > 1.0 SAGREY Adds 1.0 to spam from first-time senders > > > -- > Chris > KeyID 0xE372A7DA98E6705C > > > -- View this message in

Re: German Spam Flood

On Saturday 18 October 2008 7:20 am, cfgerty wrote: > One sample of these mails: > > http://pastebin.com/m1e3d6b5d > > German Language Rulesets are applied. > > Chris > Scored like this on my standalone machine: Content analysis details: (11.2 points, 5.0 required) pts rule name d

Re: German Spam Flood

gt; - Myriam naturgeiles Teenie! >> > > > You can try the "German Language Ruleset" > http://wiki.apache.org/spamassassin/CustomRulesets > > with sa-update, the channel is > 70_zmi_german.cf.zmi.sa-update.dostech.net > See > http://daryl.

Re: German Spam Flood

your help. > > Best regards > Christoph > > -- View this message in context: http://www.nabble.com/German-Spam-Flood-tp20045971p20046407.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.

Re: German Spam Flood

Christoph Petersen a écrit : > Hey guys, > > since a week or two all my mail servers are receiving a massive amount > of emails which passes by all my rules in SA (even Bayes doesn't stand a > chance as the content is written to good). > > I wondered if somebody else has this problem and has some

German Spam Flood

Hey guys, since a week or two all my mail servers are receiving a massive amount of emails which passes by all my rules in SA (even Bayes doesn't stand a chance as the content is written to good). I wondered if somebody else has this problem and has some advice regarding rules. Here some o

Re: how to keep updated against german spam?

On Dienstag, 10. Juni 2008 peter pilsl wrote: > I just uploaded three different examples of recent spamwave to my > webpage: > http://www.goldfisch.at/goldfisch/temp/spam1 As others said already, with simple network tests you could filter that mails. Consider using the BOTNET tool, that helps too

Re: how to keep updated against german spam?

On Dienstag, 10. Juni 2008 peter pilsl wrote: > I just uploaded three different examples of recent spamwave to my > webpage: > http://www.goldfisch.at/goldfisch/temp/spam1 As others said already, with simple network tests you could filter that mails. Consider using the BOTNET tool, that helps too

Re: how to keep updated against german spam?

On Dienstag, 10. Juni 2008 Mathias Homann wrote: > from sa-update -D: > > [12517] dbg: http: GET request, > http://daryl.dostech.ca/sa-update/zmi/70_zmi_german.cf/200806051042.t >ar.gz.asc [12517] dbg: sha1: verification wanted: > 91eaa15f9a096c202a18b9f5f858fc25058643aa > [12517] dbg: sha1: verifi

Re: how to keep updated against german spam?

Am Dienstag, 10. Juni 2008 schrieb Michael Monnerie: > On Dienstag, 10. Juni 2008 peter pilsl wrote: > > I run spamassassin 3.2.3 and every few weeks a new wave of german > > SPAM hits our servers that are not detected by spamassassin... > > > > Is there a webpage where

Re: how to keep updated against german spam?

On Tue, 10 Jun 2008 at 14:35 +0200, [EMAIL PROTECTED] confabulated: Yet Another Ninja wrote: Is there a place where you posted these spams so potential rule writers know which you're talking about? I just uploaded three different examples of recent spamwave to my webpage: http://www.g

Re: how to keep updated against german spam?

On Tue, June 10, 2008 14:35, peter pilsl wrote: > I just uploaded three different examples of recent spamwave to my webpage: X-Spam-Status: No, score=0.6 required=2.4 tests=BAYES_05,NO_RELAYS autolearn=ham version=3.2.2 NO_RELAYS should not hit on remote spams have you configured you tr

Re: how to keep updated against german spam?

On 6/10/2008 2:35 PM, peter pilsl wrote: Yet Another Ninja wrote: Is there a place where you posted these spams so potential rule writers know which you're talking about? I just uploaded three different examples of recent spamwave to my webpage: http://www.goldfisch.at/goldfisch/temp/s

Re: how to keep updated against german spam?

Yet Another Ninja wrote: Is there a place where you posted these spams so potential rule writers know which you're talking about? I just uploaded three different examples of recent spamwave to my webpage: http://www.goldfisch.at/goldfisch/temp/spam1 thnx, peter

Re: how to keep updated against german spam?

On 6/10/2008 1:19 PM, peter pilsl wrote: I run spamassassin 3.2.3 and every few weeks a new wave of german SPAM hits our servers that are not detected by spamassassin... Is there a webpage where I can get new rules? or any channel I can subscribe for sa-update? Is there a place where you

Re: how to keep updated against german spam?

On Dienstag, 10. Juni 2008 peter pilsl wrote: > I run spamassassin 3.2.3 and every few weeks a new wave of german > SPAM hits our servers that are not detected by spamassassin... > > Is there a webpage where I can get new rules? or any channel I can > subscribe for sa-update? &g

how to keep updated against german spam?

I run spamassassin 3.2.3 and every few weeks a new wave of german SPAM hits our servers that are not detected by spamassassin... Is there a webpage where I can get new rules? or any channel I can subscribe for sa-update? I also have a question about sa-update and new channels? If I add a

Re: German Spam

Karsten =?ISO-8859-1?Q?Br=E4ckelmann?= writes: > On Tue, 2008-05-13 at 16:06 +0200, Michael Monnerie wrote: > > > I wish more people would use the ZMI_GERMAN ruleset, and contribute to > > I used to use it, but dropped it quite a while ago when it didn't hit on > *

Re: German Spam

On Tue, 2008-05-13 at 16:06 +0200, Michael Monnerie wrote: > I wish more people would use the ZMI_GERMAN ruleset, and contribute to I used to use it, but dropped it quite a while ago when it didn't hit on *my* particular German spam any longer. During a few weak moments, I even

Re: German Spam

On Mittwoch, 30. Mai 2007 Sebastian Wiesinger wrote: > It's a nice ruleset but we had a major problem with it.  RDJ pulled > in an update which contained these lines: Sorry for that problem, and sorry for only answering now. I'd been busy on some private problems, and hope to get into this list m

Re: German Spam

* Alex Woick <[EMAIL PROTECTED]> [2007-05-29 23:54]: > >For anyone who's not aware of it, I should mention that Michael Monnerie > >has been maintaining a German spam ruleset for quite some time and has > >been as of late updating it often. > > &

Re: German Spam

Daryl C. W. O'Shea skrev: For anyone who's not aware of it, I should mention that Michael Monnerie has been maintaining a German spam ruleset for quite some time and has been as of late updating it often. # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf # SpamAssass

Re: German Spam

For anyone who's not aware of it, I should mention that Michael Monnerie has been maintaining a German spam ruleset for quite some time and has been as of late updating it often. # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf Interesting, it contains a collection of stock spam

Re: German Spam

Well, perhaps that is a more generic spam indicator: german text but not a single Umlaut. I must think about that. You'd want a length qualifier on that test. An email of simply "Danke" would contain a very small number of umlauts. Perhaps, such a rule should look for frequently used german w

Re: German Spam

For anyone who's not aware of it, I should mention that Michael Monnerie has been maintaining a German spam ruleset for quite some time and has been as of late updating it often. # Home: http://sa.zmi.at/rulesets/70_zmi_german.cf # SpamAssassin Channel: 70_zmi_german.cf.z

Re: German Spam

Hi Alex, thank you for this nice collection ... I had started to add a few of them. I agree with you that this spammer probably is not german, but I would guess that the person uses a dictionary / translator and is composing the message on a keyboard without umlauts. As for the imageshack: soo

RE: German Spam

Interesting is the spelling. It seems to me the author of the spam messages isn't german or of very low education, since his spelling and style is really awful - like a child of 15 years. And the spam sending software doesn't seem to be able to handle german Umlauts (äöüßÄÖÜ). Well, perhaps that

Re: German Spam

Apart from the imageshack stuff just seem to generally have a lot of spam in the german langauge getting through the filters, has anyone else experienced the same. Certainly. It's getting through, because there are almost no german language specific rules in the default rules of SpamAssassin, an

Re: German Spam local.conf

[EMAIL PROTECTED] wrote: I would like to be removed from this distrubtion list, anyone have an idea how to do that? Yes in the headers: [EMAIL PROTECTED] -- Thanks, James

Re: German Spam local.conf

[EMAIL PROTECTED] wrote: > I would like to be removed from this distrubtion list, anyone have an idea > how to do that? Read the message headers for *ANY* post on the list: list-unsubscribe: Note: if your mail reader won't show you these headers, it's broken. This h

RE: German Spam local.conf

I would like to be removed from this distrubtion list, anyone have an idea how to do that? -Original Message- From: Kris Deugau [mailto:[EMAIL PROTECTED] Sent: Thursday, May 19, 2005 6:16 AM To: users@spamassassin.apache.org Subject: Re: German Spam local.conf Alan Premselaar wrote

Re: German Spam local.conf

Alan Premselaar wrote: > first, make sure your file is named local.cf and not local.conf. > also, you don't appear to have any scores assigned to these rules. > I'm not a rules writing expert, but these rules may not actually do > anything for you without scores assigned. ALL rules receive a def

Re: German Spam local.conf

In an older episode (Thursday 19 May 2005 08:20), Patrick Steiner wrote: > hello, > > i am totally unskilled in config spamassisn, but i found this url: > > http://www.exit0.us/index.php?pagename=GermanSoberSpamBounceRules That file will only detect Non Delivery Notifications that have been sent

Re: German Spam local.conf

Patrick Steiner wrote: hello, i am totally unskilled in config spamassisn, but i found this url: http://www.exit0.us/index.php?pagename=GermanSoberSpamBounceRules i but the text into my /etc/mail/spamassassin/local.conf and restarted spamassassin. but spamc doesnt use the rules :-(. if have tryed:s

German Spam local.conf

hello, i am totally unskilled in config spamassisn, but i found this url: http://www.exit0.us/index.php?pagename=GermanSoberSpamBounceRules i but the text into my /etc/mail/spamassassin/local.conf and restarted spamassassin. but spamc doesnt use the rules :-(. if have tryed:spamc < 1116480451.P2920

R: R: German Spam

n.apache.org Oggetto: Re: R: German Spam Netmail wrote: > Ok > Now this is my config file > # This is the right place to customize your installation of SpamAssassin. > # See 'perldoc Mail::SpamAssassin::Conf&#x

Re: R: German Spam

Netmail wrote: Ok Now this is my config file # This is the right place to customize your installation of SpamAssassin. # See 'perldoc Mail::SpamAssassin::Conf' for details of what can be # tweaked. # ### # rewrite_subject 1 #r

R: German Spam

ort_safe 1 If i want add block for the header of message ..how to ? Grazie -Messaggio originale- Da: Paolo Cravero as2594 [mailto:[EMAIL PROTECTED] Inviato: mercoledì 18 maggio 2005 10.10 A: users@spamassassin.apache.org Oggetto: Re: German Spam Netmail wrote: > Hi > I'm new fo

Re: German Spam

Netmail wrote: Hi I'm new for spamassassin , when modify the local.cf file after restart sendmail or what ? If you are using spamc/spamd you need to restart spamd in order to activate new rules. If you are simply calling spamassassin executable from sendmail (highly inefficient), no restart is

R: German Spam

Ok If i want block german spam what write in local.cf file ? -Messaggio originale- Da: Philipp Snizek [mailto:[EMAIL PROTECTED] Inviato: mercoledì 18 maggio 2005 9.36 A: Netmail Oggetto: RE: German Spam > I'm new for spamassassin , when modify the local.cf file > af

German Spam

Hi I'm new for spamassassin , when modify the local.cf file after restart sendmail or what ? Thanks :: IT Manager :: El.mo. S.p.a. Andrea Soccal Tel. +39 049 920 Web : http://www.elmo.it

Re: German Spam followup

In article <[EMAIL PROTECTED]>, Loren Wilton <[EMAIL PROTECTED]> writes >> Since I have legitimate users communicating all over the world, I am >> very interested in other rulesets that would block spam in languages >> besides English. Not sure how big of a problem this is - I know we get > >I beli

Re: German spam bounces

Kevin Peuhkurinen wrote: > Having gotten the spam under control, I found that I was getting > bombed with tons of bounces as well. So I made up a quick ruleset > to stop undeliverables due to the german spam, using Raymond's > ruleset as a starting point. You can get it here:

German spam bounces

Having gotten the spam under control, I found that I was getting bombed with tons of bounces as well. So I made up a quick ruleset to stop undeliverables due to the german spam, using Raymond's ruleset as a starting point. You can get it here: http://www.exit0.us/index.php?pag

Re: German Spam followup

Elizabeth Schwartz wrote: > As a university we have legitimate correspondance with people in > *every* country so I have to be very careful about blocking IP's or > character sets or other such broad applications. I think a good help for that is amavisd-new and his new policy banks. http://www.ij

Re: German Spam followup

> Since I have legitimate users communicating all over the world, I am > very interested in other rulesets that would block spam in languages > besides English. Not sure how big of a problem this is - I know we get I believe there is a Chinese project to make a ruleset for chinese spam. I've seen

Re: Ruleset for the German spam

I've been getting hit with a lot of german spam that has two exact words, and then .de urls. This rule handles them well. rawbody __XM_Pash01 /^(?:Lese\s*selbst|Full\s*Article):$/i rawbody __XM_Pash02 m{^http://[^/\n]+\.de/(?>.*)$}i rawbody __XM_Pash03

German Spam followup

Thanks for all the pointers to the cf files for this particular virus. We have one installed and it is working fine - for this time. Since I have legitimate users communicating all over the world, I am very interested in other rulesets that would block spam in languages besides English. Not sure

Ruleset for the German spam

This is a ruleset I created based on information from the Internet Storm Center (isc.sans.org). I scored it at 4 points. Feel free to raise or lower to your liking. Bowie Sober_German.cf Description: Binary data

Re: Bayes problems and German Spam

On Monday 16 May 2005 12:15, Ronan McGlue typed: > I too have all net tests enabled and have started from a fresh clean new > database friday, and already Im seeing the german spams hit bayes_00... > I dont want to switch autolearning off becuase well i find it incredibly > usefull. i have spam/ha

Re: Bayes problems and German Spam

Simon Byrnand wrote: At 09:53 16/05/2005, Jo wrote: Simon Byrnand wrote: Hi All, After going from 2.64 to 3.0.3 I thought Bayes was working much better - previously certain classes of spam were being consistently reported as ham, scoring BAYES_00 no matter what I did, or how much manual training

Re: Bayes problems and German Spam

At 09:53 16/05/2005, Jo wrote: Simon Byrnand wrote: Hi All, After going from 2.64 to 3.0.3 I thought Bayes was working much better - previously certain classes of spam were being consistently reported as ham, scoring BAYES_00 no matter what I did, or how much manual training I did. (Autolearning

Re: Bayes problems and German Spam

Simon Byrnand wrote: Hi All, After going from 2.64 to 3.0.3 I thought Bayes was working much better - previously certain classes of spam were being consistently reported as ham, scoring BAYES_00 no matter what I did, or how much manual training I did. (Autolearning enabled) After upgrading to 3

Bayes problems and German Spam

Hi All, After going from 2.64 to 3.0.3 I thought Bayes was working much better - previously certain classes of spam were being consistently reported as ham, scoring BAYES_00 no matter what I did, or how much manual training I did. (Autolearning enabled) After upgrading to 3.0.3 and clearing the