Re: Lots of Chinese Spam with attachments

2011-08-09 Thread Marc Perkel
On 8/6/2011 8:41 PM, Jared Hall wrote: mimeheaderFOREIGN_ATTACH1 Content-Disposition:raw =~ /filename\=\"\=\?(GB|gb)2312\?/ Thanks - I'm going to give this a try. -- Marc Perkel - Sales/Support supp...@junkemailfilter.com http://www.junkemailfilter.com Junk Email Filter dot c

Re: Lots of Chinese Spam with attachments

2011-08-07 Thread Jason Haar
This has been gone over before ( see "are there any alternatives to textcat?") Summary: textcat is old (doesn't support utf8), unsupported and doesn't have a large corpus of language data to base decisions on. -- Cheers Jason Haar Information Security Manager, Trimble Navigation Ltd. Phone: +1

Re: Lots of Chinese Spam with attachments

2011-08-07 Thread Matus UHLAR - fantomas
Most here score along this: X-Spam-Status: Reqd:5.0 Hits:14.6 Tests:BODY_8BITS=1.5        CHARSET_FARAWAY_HEADER=3.2 HTML_MESSAGE=0.001 MIME_CHARSET_FARAWAY=2.45        MIME_HTML_ONLY=1.105 MISSING_HEADERS=1.207 RCVD_IN_BRBL_LASTEXT=1.644        TVD_SPACE_RATIO_MINFP=0.674 UNWANTED_LANGUAGE_BODY=

Re: Lots of Chinese Spam with attachments

2011-08-06 Thread Jared Hall
Marc Perkel wrote: > Been getting a LOT of Chinese language spam lately with Chinese named > attached spreadsheets or .doc files. > > Anyone else seeing this? > Maybe something like: mimeheaderFOREIGN_ATTACH1 Content-Disposition:raw =~ /filename\=\"\=\?(GB|gb)2312\?/ in/as a Meta

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Duane Hill
Friday, August 5, 2011, 12:54:35 PM, you wrote: >> Most here score along this: >> >> X-Spam-Status: Reqd:5.0 Hits:14.6 Tests:BODY_8BITS=1.5 >>        CHARSET_FARAWAY_HEADER=3.2 HTML_MESSAGE=0.001 >> MIME_CHARSET_FARAWAY=2.45 >>        MIME_HTML_ONLY=1.105 MISSING_HEADERS=1.207 RCVD_IN_BRBL_LASTEX

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Henrik K
On Fri, Aug 05, 2011 at 11:08:29AM -0500, Matt wrote: > Most seem to get through for me. What are you doing to catch them? > > I added this too local.conf and it did not help at all: > > #ok_languages en es fr de cs da lv nl pl sv > ok_languages en Might want to upgrade to 3.3.2 since it has le

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Matt
> Most here score along this: > > X-Spam-Status: Reqd:5.0 Hits:14.6 Tests:BODY_8BITS=1.5 >        CHARSET_FARAWAY_HEADER=3.2 HTML_MESSAGE=0.001 MIME_CHARSET_FARAWAY=2.45 >        MIME_HTML_ONLY=1.105 MISSING_HEADERS=1.207 RCVD_IN_BRBL_LASTEXT=1.644 >        TVD_SPACE_RATIO_MINFP=0.674 UNWANTED_LANG

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Duane Hill
Friday, August 5, 2011, 11:08:29 AM, you wrote: > Most seem to get through for me. What are you doing to catch them? > I added this too local.conf and it did not help at all: > #ok_languages en es fr de cs da lv nl pl sv > ok_languages en > TextCat appears to be enabled in v310.pre: > # TextC

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Matt
>> Hear is the typical hits I get on a message: >> >> X-Spam-Status: No, score=3.4 required=5.0 tests=BODY_8BITS,HTML_MESSAGE, >>        MIME_HTML_ONLY,RCVD_IN_BRBL_LASTEXT,RP_MATCHES_RCVD,SPF_PASS >> autolearn=no >>        version=3.3.1 > > ... >> >> X-Spam-Status: No, score=4.6 required=5.0 tests

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Dave Wreski
Hear is the typical hits I get on a message: X-Spam-Status: No, score=3.4 required=5.0 tests=BODY_8BITS,HTML_MESSAGE, MIME_HTML_ONLY,RCVD_IN_BRBL_LASTEXT,RP_MATCHES_RCVD,SPF_PASS autolearn=no version=3.3.1 ... X-Spam-Status: No, score=4.6 required=5.0 tests=BODY_8BITS,HTML_ME

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Matt
Most seem to get through for me. What are you doing to catch them? I added this too local.conf and it did not help at all: #ok_languages en es fr de cs da lv nl pl sv ok_languages en TextCat appears to be enabled in v310.pre: # TextCat - language guesser # loadplugin Mail::SpamAssassin::Plugin

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Duane Hill
Friday, August 5, 2011, 7:48:09 AM, you wrote: > Been getting a LOT of Chinese language spam lately with Chinese named > attached spreadsheets or .doc files. > Anyone else seeing this? Yeah. And it's nice to see SA has not missed one yet that has made it through ClamAV. -- Best regards, Duan

Re: Lots of Chinese Spam with attachments

2011-08-05 Thread Axb
On 2011-08-05 14:48, Marc Perkel wrote: Been getting a LOT of Chinese language spam lately with Chinese named attached spreadsheets or .doc files. Anyone else seeing this? oh yeah.. LOTS mimeheader / char set / X headers => meta get my drift?