Re: [sa] Re: New Spam Mails plz suggest

> On Tue, 9 Jun 2009, Matus UHLAR - fantomas wrote: >>> I believe his request for stats is a polite way of disagreeing with your >>> statement that bots 'often' use Outlook SMTP Auth. >> >> OK, to be more accurate: times change, and maybe currently it's not that >> common to use outlook's (or whate

Re: [sa] Re: New Spam Mails plz suggest

On Tue, 9 Jun 2009, Matus UHLAR - fantomas wrote: I believe his request for stats is a polite way of disagreeing with your statement that bots 'often' use Outlook SMTP Auth. OK, to be more accurate: times change, and maybe currently it's not that common to use outlook's (or whatever's) engine t

Re: New Spam Mails plz suggest

On Tue, June 9, 2009 09:40, Anshul Chauhan wrote: > *trusted_networks 10.* for all my networks > by this it is scanning mails & marking them as non spam which i don't > want. you ask for advice on how to get spamassassin malfunction ? see reports from spamassassin and remove the spam, is imho m

Re: New Spam Mails plz suggest

> > On 09.06.09 12:09, Anshul Chauhan wrote: > > > Thanks a lot all of you for your help. > > > > > > Please help with this how can i do this > > > * smtp-auth mails do not scan for spam at all* > > > > > > can somebody please guide me for this. > On Tue, Jun 9, 2009 at 1:02 PM, Matus UHLAR - fant

Re: New Spam Mails plz suggest

no i dont have any problem but because of authenticated outgoing as well as mail within my domain server is busy all the time with mails in queue so i just want to disable it for my users in my local network only. I've specified as *trusted_networks 10.* for all my networks by this it is scanning m

Re: New Spam Mails plz suggest

On 09.06.09 12:09, Anshul Chauhan wrote: > Thanks a lot all of you for your help. > > Please help with this how can i do this > * smtp-auth mails do not scan for spam at all* > > can somebody please guide me for this. OK, I'll ask again: Do you have problems with scanning authenticated outgoing

Re: [sa] Re: New Spam Mails plz suggest

> On 08.06.09 12:21, Karsten Bräckelmann wrote: > By authenticated users? So that's no bot spam, and the user spams > deliberately and consciously... > On Mon, 2009-06-08 at 14:01 +0200, Matus UHLAR - fantomas wrote: says who? Afaik spamware often uses outlook's SMTP engine, so it's >

Re: New Spam Mails plz suggest

Thanks a lot all of you for your help. Please help with this how can i do this * smtp-auth mails do not scan for spam at all* can somebody please guide me for this. Warm Regards, Anshul Chauhan "Dream is not what you see while sleep, it's the thing that does not let you sleep." 2009/6/9 LuKr

Re: New Spam Mails plz suggest

On 8-Jun-2009, at 09:42, Matus UHLAR - fantomas wrote: On Mon, 2009-06-08 at 14:01 +0200, Matus UHLAR - fantomas wrote: On 08.06.09 12:21, Karsten Bräckelmann wrote: By authenticated users? So that's no bot spam, and the user spams deliberately and consciously... says who? Afaik spamware ofte

Re: [sa] Re: New Spam Mails plz suggest

On 08.06.09 12:21, Karsten Bräckelmann wrote: By authenticated users? So that's no bot spam, and the user spams deliberately and consciously... On Mon, 2009-06-08 at 14:01 +0200, Matus UHLAR - fantomas wrote: says who? Afaik spamware often uses outlook's SMTP engine, so it's quite common for th

Re: New Spam Mails plz suggest

On Mon, 2009-06-08 at 17:42 +0200, Matus UHLAR - fantomas wrote: > On 08.06.09 16:52, Karsten Bräckelmann wrote: > > Got any stats about a non-negligible amount of bot spam authenticating > > with the real user's SMTP, instead of direkt-to-MX submission? > > Why should I have any? Any spamming cli

Re: New Spam Mails plz suggest

> On Mon, 2009-06-08 at 14:01 +0200, Matus UHLAR - fantomas wrote: > > On 08.06.09 12:21, Karsten Bräckelmann wrote: > > > By authenticated users? So that's no bot spam, and the user spams > > > deliberately and consciously... > > > > says who? Afaik spamware often uses outlook's SMTP engine, so i

Re: New Spam Mails plz suggest

On Mon, 2009-06-08 at 14:01 +0200, Matus UHLAR - fantomas wrote: > On 08.06.09 12:21, Karsten Bräckelmann wrote: > > By authenticated users? So that's no bot spam, and the user spams > > deliberately and consciously... > > says who? Afaik spamware often uses outlook's SMTP engine, so it's quite >

Re: New Spam Mails plz suggest

> On Mon, 2009-06-08 at 11:59 +0200, Matus UHLAR - fantomas wrote: > > > On Mon, 2009-06-08 at 10:14 +0530, Anshul Chauhan wrote: > > > > I can't use RBL because most of my users use datacards & their ip > > > > addresses are listed in RBL in SBL & XBL & SPAMCOP. > > > > On 08.06.09 11:56, Karsten

Re: New Spam Mails plz suggest

On Mon, 2009-06-08 at 17:05 +0530, Anshul Chauhan wrote: > I'm new to SA so please suggest/gve some hint for how to use RBL for > non smtp authenticated session & for smtp authicated mails not spam > scanning. Not scanning outbound messages from your users is entirely the duty of your SMTP and out

Re: New Spam Mails plz suggest

Below is mail headers for one more mail http://pastebin.com/d3da8daa6 I'm new to SA so please suggest/gve some hint for how to use RBL for non smtp authenticated session & for smtp authicated mails not spam scanning. Warm Regards, Anshul Chauhan "Dream is not what you see while sleep, it's the th

Re: New Spam Mails plz suggest

On Mon, 2009-06-08 at 10:14 +0530, Anshul Chauhan wrote: > I can't use RBL because most of my users use datacards & their ip > addresses are listed in RBL in SBL & XBL & SPAMCOP. ^^^ Just noticed this -- I kind of hope this is just a typo. SBL listing of your users

Re: New Spam Mails plz suggest

On Mon, 2009-06-08 at 11:59 +0200, Matus UHLAR - fantomas wrote: > > On Mon, 2009-06-08 at 10:14 +0530, Anshul Chauhan wrote: > > > I can't use RBL because most of my users use datacards & their ip > > > addresses are listed in RBL in SBL & XBL & SPAMCOP. > > On 08.06.09 11:56, Karsten Bräckelmann

Re: New Spam Mails plz suggest

On Mon, June 8, 2009 11:56, Karsten Bräckelmann wrote: > On Mon, 2009-06-08 at 10:14 +0530, Anshul Chauhan wrote: >> I can't use RBL because most of my users use datacards & their ip >> addresses are listed in RBL in SBL & XBL & SPAMCOP. > As has been suggested by various others, just do not scan

Re: New Spam Mails plz suggest

> On Mon, 2009-06-08 at 10:14 +0530, Anshul Chauhan wrote: > > I can't use RBL because most of my users use datacards & their ip > > addresses are listed in RBL in SBL & XBL & SPAMCOP. On 08.06.09 11:56, Karsten Bräckelmann wrote: > As has been suggested by various others, just do not scan outgoin

Re: New Spam Mails plz suggest

On Mon, 2009-06-08 at 10:14 +0530, Anshul Chauhan wrote: > I can't use RBL because most of my users use datacards & their ip > addresses are listed in RBL in SBL & XBL & SPAMCOP. As has been suggested by various others, just do not scan outgoing mail from authenticated users. > These are the RBL

Re: New Spam Mails plz suggest

On 7-Jun-2009, at 22:44, Anshul Chauhan wrote: Below is the link for one of the spam mail in which to & from address is same. http://pastebin.com/f20358d76 I can't use RBL because most of my users use datacards & their ip addresses are listed in RBL in SBL & XBL & SPAMCOP. And why does th

Re: New Spam Mails plz suggest

On Mon, June 8, 2009 08:41, Anshul Chauhan wrote: > can i do this in sendmail SMTP auth session without RBL & rest with RBL. http://www.sendmail.org/~ca/email/auth.html -- http://localhost/ 100% uptime and 100% mirrored :)

Re: New Spam Mails plz suggest

can i do this in sendmail SMTP auth session without RBL & rest with RBL. can you plz give me some hint for both the solutions of SMTP auth without RBL & not scanning mails with spamassassin with SMTP auth ** Warm Regards, Anshul Chauhan "Dream is not what you see while sleep, it's the thing that

Re: New Spam Mails plz suggest

On Mon, 2009-06-08 at 10:14 +0530, Anshul Chauhan wrote: > Below is the link for one of the spam mail in which to & from address > is same. > http://pastebin.com/f20358d76 > > I can't use RBL because most of my users use datacards & their ip > addresses are listed in RBL in SBL & XBL & SPAMCOP. >

Re: New Spam Mails plz suggest

Below is the link for one of the spam mail in which to & from address is same. http://pastebin.com/f20358d76 I can't use RBL because most of my users use datacards & their ip addresses are listed in RBL in SBL & XBL & SPAMCOP. These are the RBL settings which i'v used earlier but bcoz of these my

Re: New Spam Mails plz suggest

On Sat, June 6, 2009 11:55, chauhananshul wrote: > How can i make spamassassin catch these mails. you can do this better in your mta 2 ways to solve it: 1 use postfwd with a rule that check sender equal to recipient 2 add spf to your domain, and test spf in your mta 3 take a ice :) -- htt

Re: New Spam Mails plz suggest

> Below is the mail header for one of the mail in which to > & from id id same > > From u...@mydomain.com Sat Jun 6 12:41:57 2009 > Return-Path: u...@mydomain.com mydomain.com really exists, and it is not advisable to mask one's read domain behind it. Use example.com, that is what it is fo

Re: New Spam Mails plz suggest

Anshul Chauhan schrieb: > Below is the mail header for one of the mail in which to & from id id same > > From u...@mydomain.com Sat Jun 6 12:41:57 2009 > Return-Path: mailto:u...@mydomain.com>> > X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on > mailse

Re: New Spam Mails plz suggest

Below is the mail header for one of the mail in which to & from id id same >From u...@mydomain.com Sat Jun 6 12:41:57 2009 Return-Path: X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on mailserver1.mydomain.com X-Spam-Level: X-Spam-Status: No, score=4.4 required=5.0

Re: New Spam Mails plz suggest

On Sat, 2009-06-06 at 02:55 -0700, chauhananshul wrote: > I'm getting a lot of mails daily in which to & from addresses are same & > spamassassin is not able to stop them. I'm using spamassassin-3.2.5-1.el4.rf > CentOS4.7 with sendmail.I've increased the score to 4 frm default 5 but > stills its n

New Spam Mails plz suggest

pamassassin catch these mails. -- View this message in context: http://www.nabble.com/New-Spam-Mails-plz-suggest-tp23900308p23900308.html Sent from the SpamAssassin - Users mailing list archive at Nabble.com.