Am 2007-10-18 20:24:35, schrieb Justin Mason:
>
> UxBoD writes:
> > Does anybody have one of these, or different one, that you could upload
> > somewhere so can do some analysis ?
>
> sure: http://taint.org/x/2007/mp3spam.txt
> anyway, these rules catch them as far as I can tell:
>
> ifplugin
On 10/19/07 at 10:55 AM +0100 Justin Mason wrote:
>I think you need 3.2.x for the MIMEHeader plugin.
Nope, the Storm MP3 rules work just fine with SA 3.1.8.
Nedry
t; now..
> >>
> >> Don't run RCVD_IN_SORBS_DUL as I found it FP heavy for my environment
> >>
> >> I expect to see mp's in my environment, so that's maybe why bayes was at
> >> the opposite end of the score spectrum to you.
> >>
> >> No JM_STO
ment, so that's maybe why bayes was at the
>> opposite end of the score spectrum to you.
>>
>> No JM_STORM_MP3 thoughmaybe a 3.1.8/3.2.3 thing, it lint's clean.
>>
>> --
>> Martin Hepworth
>> Snr Systems Administrator
>> Solid State Logic
>>
quot; <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Cc: users@spamassassin.apache.org
> Sent: Thursday, October 18, 2007 8:24:35 PM (GMT) Europe/London
> Subject: Re: MP3 Spam
>
>
> UxBoD writes:
> > Does anybody have one of these, or different one, that you could upload
&
> Cc: [EMAIL PROTECTED]
> Subject: Re: MP3 Spam
>
>
> Martin.Hepworth writes:
> > Hmm
> >
> > I'm still running 3.1.8..
>
> I think you need 3.2.x for the MIMEHeader plugin.
>
> --j.
>
> > Content analysis deta
65 842300
>
> > -Original Message-
> > From: UxBoD [mailto:[EMAIL PROTECTED]
> > Sent: 19 October 2007 09:14
> > To: Martin.Hepworth
> > Cc: [EMAIL PROTECTED]
> > Subject: Re: MP3 Spam
> >
> > Hmmm, hit okay here Martin :-
> &g
Snr Systems Administrator
Solid State Logic
Tel: +44 (0)1865 842300
> -Original Message-
> From: UxBoD [mailto:[EMAIL PROTECTED]
> Sent: 19 October 2007 09:14
> To: Martin.Hepworth
> Cc: [EMAIL PROTECTED]
> Subject: Re: MP3 Spam
>
> Hmmm, hit okay here Martin :-
&
-
From: "Martin.Hepworth" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Sent: Friday, October 19, 2007 9:11:38 AM (GMT) Europe/London
Subject: RE: MP3 Spam
http://www.solidstatelogic.com/mp3-spam.txt
--
Martin Hepworth
Snr Systems Administrator
Solid State Log
1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
> // Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
> // Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]
>
> - Original Message -
> From: "Martin.Hepworth" <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Sent: Friday, October
net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]
- Original Message -
From: "Martin.Hepworth" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Sent: Friday, October 19, 2007 9:00:39 AM (GMT) Europe/London
Subject: RE: MP3 Spam
Just tried this on an example
stin Mason
> Cc: users@spamassassin.apache.org
> Subject: Re: MP3 Spam
>
> Thanks Justin. Do they all follow the same patterns ?
>
> Regards,
>
> --[ UxBoD ]--
> // PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
> // Fingerprint: C75
5 869 2749 SIP Phone: [EMAIL PROTECTED]
- Original Message -
From: "Justin Mason" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Cc: users@spamassassin.apache.org
Sent: Thursday, October 18, 2007 8:24:35 PM (GMT) Europe/London
Subject: Re: MP3 Spam
UxBoD writes:
> Does
UxBoD writes:
> Does anybody have one of these, or different one, that you could upload
> somewhere so can do some analysis ?
sure: http://taint.org/x/2007/mp3spam.txt
anyway, these rules catch them as far as I can tell:
ifplugin Mail::SpamAssassin::Plugin::MIMEHeader
mimeheader __CTYPE_STO
Does anybody have one of these, or different one, that you could upload
somewhere so can do some analysis ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserve
15 matches
Mail list logo
