Re: AE_MEDS35 does not more work...

On Sat, 4 Jul 2009, Pawe�~B T�~Ycza wrote: Dnia 2009-07-03, pią o godzinie 23:38 -0400, MySQL Student pisze: +body LOCAL_BODY_WWW_MEDSXX_NET /\bwww(?:\s|\s\W|\W \s)\w{1,6}\d{1,6}(?:\s|\s\W|\W\s)(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i ^ ^ F... spammers. They spoil my weekend ;) No

Re: AE_MEDS35 does not more work...

On Sat, July 4, 2009 01:31, Michelle Konzack wrote: > Hello, > > In a maill which hit the score I see this: report the ip to dnswl > -1.0 RCVD_IN_DNSWL_LOW RBL: Sender listed at http://www.dnswl.org/, low > trust > [70.103.162.29 liste

Re: AE_MEDS35 does not more work...

Hello Rawe and *, Now with a new spam I tried it again and nothing. I have now renamed the AE_MEDS35 to PRIVATE_MEDS01 run spamaassassin in Debug with: spamassassin -D spamassassin.msg 2>spamassassin.log and the results are here:

Re: AE_MEDS35 does not more work...

Hello, In a maill which hit the score I see this: [ STDIN ]--- Spam detection software, running on the system "vserver1.tamay-dogan.net", has identified this incoming email as possible spam. The original message has been attached to thi

Re: AE_MEDS35 does not more work...

On Thu, July 2, 2009 23:54, Michelle Konzack wrote: > Coming home for some minutes I saw, I am hit by 23.000 spams in my inbox > from today... use postfwd ? RCVD_IN_NJABL_PROXY < hits and can be tested in mta 23000 spams in home mailbox/mta is to much to just say i dont care :) -- xpoint

Re: AE_MEDS35 does not more work...

Paweł Tęcza pisze: > Hello, > > $ wget > http://devel.debian.tamay-dogan.net/tmp/spamassassin/non_working_sa.00.msg > ... > $ wget > http://devel.debian.tamay-dogan.net/tmp/spamassassin/non_working_sa.11.msg > > $ spamassassin -D < non_working_sa.00.msg > non_working_sa.00.log 2>&1 > ... > $ spam

Re: AE_MEDS35 does not more work...

Michelle Konzack pisze: > Am 2009-07-02 15:18:16, schrieb John Hardin: >> Can you post the original raw message to a pastebin, please? > > I am on GSM (O2) and not able to upload to > (I can view contents abut not upload) > > I will try to upload it to > >

Re: AE_MEDS35 does not more work...

Am 2009-07-02 15:18:16, schrieb John Hardin: > Can you post the original raw message to a pastebin, please? I am on GSM (O2) and not able to upload to (I can view contents abut not upload) I will try to upload it to Thanks, Greetings and

Re: AE_MEDS35 does not more work...

* McDonald, Dan : > How about: > /\bw{2,3}[[:punct:][:space:]]{1,3}[[:alpha:]]{3,6}\d{2,6}[[:punct:][:space:]]{1,3}(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i Gesundheit! :) -- Ralf Hildebrandt Geschäftsbereich IT | Abteilung Netzwerk Charité - Universitätsmedizin Berlin Campus Benjamin Frankli

RE: AE_MEDS35 does not more work...

>Coming home for some minutes I saw, I am hit by 23.000 spams in my inbox >from today... > >The rule: > >bodyAE_MEDS35 >/\bwww(?:\s\W?\s?|\W\s)\w{3,6}\d{2,6}(?:\s\W?\s?|\W\s)(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i >describeAE_MEDS35 obfuscated domain seen in spam >sco

Re: AE_MEDS35 does not more work...

On Thu, 2 Jul 2009, Michelle Konzack wrote: bodyAE_MEDS35 /\bwww(?:\s\W?\s?|\W\s)\w{3,6}\d{2,6}(?:\s\W?\s?|\W\s)(?:c\s?o\s?m|n\s?e\s?t|o\s?r\s?g)\b/i doea not work on the following mail: 8<-- Doo You Maake