Re: Blacklist for reply-to?

2018-02-21 Thread @lbutlr
On 2018-02-21 (00:20 MST), Rupert Gallagher wrote: > > Beware that companies use a legal note in their signature as advised by their > lawyers, and many individuals do the same, to inform the reader about laws > that apply regardless of where or when you are reading their note. Mostly they lie

Re: Blacklist for reply-to?

2018-02-20 Thread Rupert Gallagher
You are wrong. Sent from ProtonMail Mobile On Wed, Feb 21, 2018 at 00:07, @lbutlr wrote: > On 2018-02-20 (06:02 MST), Rupert Gallagher wrote: > > Do you have the legal > right to do so? Absolutely. No one gets to inflict a contract on me. > Especially not a entirely stupid nonsense thing that

Re: Blacklist for reply-to?

2018-02-20 Thread Rupert Gallagher
Beware that companies use a legal note in their signature as advised by their lawyers, and many individuals do the same, to inform the reader about laws that apply regardless of where or when you are reading their note. A mail from Europe is subject to data protection. It does not matter if you

Re: Blacklist for reply-to?

2018-02-20 Thread @lbutlr
On 2018-02-20 (06:02 MST), Rupert Gallagher wrote: > > Do you have the legal right to do so? Absolutely. No one gets to inflict a contract on me. Especially not a entirely stupid nonsense thing that like that piece of crap that has no legal weight whatsoever. -- We are born naked, wet and hu

Re: Blacklist for reply-to?

2018-02-20 Thread Rupert Gallagher
The matter is controversial. Lists have own defaults, who often abuse their original aim of mere forwarding, especially when they redistribute from a long-term archive. On the other hand, people have own default banners for all outgoing correspondence, some with explicit reference to the applic

Re: Blacklist for reply-to?

2018-02-20 Thread Kevin A. McGrail
On 2/19/2018 7:15 PM, John Hardin wrote: Kevin, can that be set to advisory rather than completely killed? Agreed.  I'll comment out the setting of the score to zero in nonKAMrules.cf.

Re: Blacklist for reply-to?

2018-02-20 Thread Rupert Gallagher
Do you have the legal right to do so? On Tue, Feb 20, 2018 at 00:23, @lbutlr wrote: > On 2018-02-19 (09:57 MST), Paul Stead wrote: > ...@zeninternet.co.uk> > I reject your terms. @zeninternet.co.uk>

Re: Blacklist for reply-to?

2018-02-20 Thread Daniele Duca
On 18/02/2018 21:06, Kenneth Porter wrote: Is there a blacklist for domains in the reply-to header? I've noticed a lot of spam with no URL and mutating From but the reply-to domain is always aliyun dot com. I want to add a site-wide blacklist for that. If you are willing to write a little SA

Re: Blacklist for reply-to?

2018-02-19 Thread John Hardin
On Mon, 19 Feb 2018, Alex wrote: Hi, On Mon, Feb 19, 2018 at 3:20 PM, John Hardin wrote: On Mon, 19 Feb 2018, Rupert Gallagher wrote: Whatever you do, just do not ask others to blacklist Alibaba Are those getting hits on SPOOFED_FREEM_REPTO_CHN? Perhaps just bump the score for that loca

Re: Blacklist for reply-to?

2018-02-19 Thread Alex
Hi, On Mon, Feb 19, 2018 at 3:20 PM, John Hardin wrote: > On Mon, 19 Feb 2018, Rupert Gallagher wrote: > >> Whatever you do, just do not ask others to blacklist Alibaba > > > Are those getting hits on SPOOFED_FREEM_REPTO_CHN? > > Perhaps just bump the score for that locally? KAM's rules are stil

Re: Blacklist for reply-to?

2018-02-19 Thread @lbutlr
On 2018-02-19 (09:57 MST), Paul Stead wrote: > > This message is private and confidential. If you have received this message > in error, please notify us and remove it from your system. > > Zen Internet Limited may monitor email traffic data to manage billing, to > handle customer enquiries an

Re: Blacklist for reply-to?

2018-02-19 Thread Benny Pedersen
David Jones skrev den 2018-02-19 22:35: https://bz.apache.org/SpamAssassin I have added a few domains over the past few months but my mail flow isn't going to see many of the problem domains outside of the US like those listed above. https://www.google.dk/search?q=github+freemail seems all i

Re: Blacklist for reply-to?

2018-02-19 Thread David Jones
On 02/19/2018 03:19 PM, John Hardin wrote: On Mon, 19 Feb 2018, Kenneth Porter wrote: On 2/19/2018 12:20 PM, John Hardin wrote: Are those getting hits on SPOOFED_FREEM_REPTO_CHN? No, not seeing that one. After enough training I eventually see it land in Bayes. The RBLs are starting to flag

Re: Blacklist for reply-to?

2018-02-19 Thread John Hardin
On Mon, 19 Feb 2018, Kenneth Porter wrote: On 2/19/2018 12:20 PM, John Hardin wrote: Are those getting hits on SPOOFED_FREEM_REPTO_CHN? No, not seeing that one. After enough training I eventually see it land in Bayes. The RBLs are starting to flag it. X-Spam-Status: Yes, score=5.7 required

Re: Blacklist for reply-to?

2018-02-19 Thread Kenneth Porter
On 2/19/2018 12:20 PM, John Hardin wrote: Are those getting hits on SPOOFED_FREEM_REPTO_CHN? No, not seeing that one. After enough training I eventually see it land in Bayes. The RBLs are starting to flag it. X-Spam-Status: Yes, score=5.7 required=5.0 tests=BAYES_99,BAYES_999,     FREEMAIL_F

Re: Blacklist for reply-to?

2018-02-19 Thread John Hardin
On Mon, 19 Feb 2018, Rupert Gallagher wrote: Whatever you do, just do not ask others to blacklist Alibaba Are those getting hits on SPOOFED_FREEM_REPTO_CHN? Perhaps just bump the score for that locally? -- John Hardin KA7OHZhttp://www.impsec.org/~jhardin/ jhar...@impsec

Re: Blacklist for reply-to?

2018-02-19 Thread Rupert Gallagher
I wanted you to see your proposed solution from a different point of view, and I thought the quiz was spot on. As a number of you fell into the trap head first, I am now horrified. Whatever you do, just do not ask others to blacklist Alibaba, and do not blacklist yourself. Sent from ProtonMail

Re: Blacklist for reply-to?

2018-02-19 Thread Paul Stead
I have a BZ raised for reply-to blacklist checking: https://bz.apache.org/SpamAssassin/show_bug.cgi?id=7354 On 19/02/2018, 15:05, "Kevin A. McGrail" wrote: On 2/18/2018 3:06 PM, Kenneth Porter wrote: > Is there a blacklist for domains in the reply-to header? > > I've noticed a

Re: Blacklist for reply-to?

2018-02-19 Thread Kevin A. McGrail
On 2/18/2018 3:06 PM, Kenneth Porter wrote: Is there a blacklist for domains in the reply-to header? I've noticed a lot of spam with no URL and mutating From but the reply-to domain is always aliyun dot com. I want to add a site-wide blacklist for that. To my knowledge it doesn't exist.  I d

Re: Blacklist for reply-to?

2018-02-19 Thread Daniele Duca
On 19/02/2018 10:00, Kenneth Porter wrote: I have no clue what Rupert is on about. I just want something like blacklist_from that uses the reply-to header. I thought it was a simple technical question about how the config file directives map onto the actual headers. I'm not asking for site pol

Re: Blacklist for reply-to?

2018-02-19 Thread Kenneth Porter
On 2/18/2018 5:09 PM, Antony Stone wrote: On Monday 19 February 2018 at 01:55:45, Rupert Gallagher wrote: Question time! You receive spam with a reply-to your own address. What do you do? I take it that this is now a rather different question that the one you originally asked in this thread, w

Re: Blacklist for reply-to?

2018-02-18 Thread Rupert Gallagher
You need coffee... Sent from ProtonMail Mobile On Mon, Feb 19, 2018 at 02:09, Antony Stone wrote: > On Monday 19 February 2018 at 01:55:45, Rupert Gallagher wrote: > Question > time! You receive spam with a reply-to your own address. What do > you do? I > take it that this is now a rather di

Re: Blacklist for reply-to?

2018-02-18 Thread Benny Pedersen
Antony Stone skrev den 2018-02-19 02:09: C: you ask for advice Good idea; let's see what other replies you get. i hate mondays :=)

Re: Blacklist for reply-to?

2018-02-18 Thread Antony Stone
On Monday 19 February 2018 at 01:55:45, Rupert Gallagher wrote: > Question time! You receive spam with a reply-to your own address. What do > you do? I take it that this is now a rather different question that the one you originally asked in this thread, where the reply-to address was clearly no

Re: Blacklist for reply-to?

2018-02-18 Thread Rupert Gallagher
Question time! You receive spam with a reply-to your own address. What do you do? A: you blacklist your own address B: you ask around to do A for you C: you ask for advice Sent from ProtonMail Mobile On Sun, Feb 18, 2018 at 22:39, Kenneth Porter wrote: > --On Sunday, February 18, 2018 4:21 PM

Re: Blacklist for reply-to?

2018-02-18 Thread Benny Pedersen
Kenneth Porter skrev den 2018-02-18 22:39: These emails are addressed to many of my web-page-only addresses that I've never used to sign up for anything. They're clearly unsolicited. blacklist_to *@spamtrap.example.org in replyto force bayes learn on user in blacklist maybe use blacklist_fro

Re: Blacklist for reply-to?

2018-02-18 Thread Kenneth Porter
--On Sunday, February 18, 2018 4:21 PM -0500 Rupert Gallagher wrote: It is not spam. You get it if you have an account with alibaba. Just configure it. These emails are addressed to many of my web-page-only addresses that I've never used to sign up for anything. They're clearly unsolicited.

Re: Blacklist for reply-to?

2018-02-18 Thread Rupert Gallagher
It is not spam. You get it if you have an account with alibaba. Just configure it. Sent from ProtonMail Mobile On Sun, Feb 18, 2018 at 21:06, Kenneth Porter wrote: > Is there a blacklist for domains in the reply-to header? I've noticed a lot > of spam with no URL and mutating From but the rep

Re: Blacklist for reply-to?

2018-02-18 Thread Rob McEwen
On 2/18/2018 3:06 PM, Kenneth Porter wrote: Is there a blacklist for domains in the reply-to header? I've noticed a lot of spam with no URL and mutating From but the reply-to domain is always aliyun dot com. I want to add a site-wide blacklist for that. http://msbl.org (I'm not associated

Re: blacklist by sender description, not by send e-mail address?

2014-10-20 Thread Axb
On 10/20/2014 11:40 AM, Michael Opdenacker wrote: Greetings, On 10/17/2014 06:37 PM, Bowie Bailey wrote: On 10/17/2014 12:13 PM, Axb wrote: On 10/17/2014 06:02 PM, Michael Opdenacker wrote: Greetings, I'm receiving a specific type of spam which From header is always like: From: service by f

Re: blacklist by sender description, not by send e-mail address?

2014-10-20 Thread Michael Opdenacker
Greetings, On 10/17/2014 06:37 PM, Bowie Bailey wrote: > On 10/17/2014 12:13 PM, Axb wrote: >> On 10/17/2014 06:02 PM, Michael Opdenacker wrote: >>> Greetings, >>> >>> I'm receiving a specific type of spam which From header is always like: >>> >>> From: service by foobar >>> >>> These guys always

Re: blacklist by sender description, not by send e-mail address?

2014-10-17 Thread Bowie Bailey
On 10/17/2014 12:13 PM, Axb wrote: On 10/17/2014 06:02 PM, Michael Opdenacker wrote: Greetings, I'm receiving a specific type of spam which From header is always like: From: service by foobar These guys always use "by foobar" or " foobar" (not the real string, don't want them to notice in ca

Re: blacklist by sender description, not by send e-mail address?

2014-10-17 Thread Axb
On 10/17/2014 06:02 PM, Michael Opdenacker wrote: Greetings, I'm receiving a specific type of spam which From header is always like: From: service by foobar These guys always use "by foobar" or " foobar" (not the real string, don't want them to notice in case they read the list archives) in t

Re: blacklist based on authoritative nameservers of sender domain

2011-08-27 Thread SM
At 16:52 22-08-2011, Adam Katz wrote: You can't do whois en-masse (I'd love that, but ...), so this means an NS host lookup. To determine if they are authoritative, that's another lookup (which I don't believe is necessary). A blocklist would also be another lookup (if using a BL, it could chec

Re: blacklist based on authoritative nameservers of sender domain

2011-08-22 Thread Axb
On 2011-08-23 7:38, Michael Scheidell wrote: On 8/22/11 7:13 PM, Noah Meyerhans wrote: I've recently observed a fair amount of spam from domains that all share the same set of authoritative nameservers. postfix: check_sender_ns_access SA has this already... and more. read into URIDNSBL.pm an

Re: blacklist based on authoritative nameservers of sender domain

2011-08-22 Thread Benny Pedersen
On Tue, 23 Aug 2011 01:38:08 -0400, Michael Scheidell wrote: On 8/22/11 7:13 PM, Noah Meyerhans wrote: I've recently observed a fair amount of spam from domains that all share the same set of authoritative nameservers. postfix: check_sender_ns_access if outright blocking is wanted (its stup

Re: blacklist based on authoritative nameservers of sender domain

2011-08-22 Thread Benny Pedersen
On Mon, 22 Aug 2011 16:13:03 -0700, Noah Meyerhans wrote: I've recently observed a fair amount of spam from domains that all share the same set of authoritative nameservers. 1: make the plugin 2: add whitelist/skiplist could ideally be urlbl_skip_domain that are used commit code to sandbox

Re: blacklist based on authoritative nameservers of sender domain

2011-08-22 Thread Axb
On 2011-08-23 2:21, dar...@chaosreigns.com wrote: On 08/22, Adam Katz wrote: this not worth doing? I realize that the potential for collateral damage is high, so I don't think it'd be wise to try and publish any sort of data for such a plugin, but it seems like the plugin itself might be occasi

Re: blacklist based on authoritative nameservers of sender domain

2011-08-22 Thread Michael Scheidell
On 8/22/11 7:13 PM, Noah Meyerhans wrote: I've recently observed a fair amount of spam from domains that all share the same set of authoritative nameservers. postfix: check_sender_ns_access -- Michael Scheidell, CTO o: 561-999-5000 d: 561-948-2259 >*| *SECNAP Network Security Corporation *

Re: blacklist based on authoritative nameservers of sender domain

2011-08-22 Thread darxus
On 08/22, Adam Katz wrote: > > this not worth doing? I realize that the potential for collateral > > damage is high, so I don't think it'd be wise to try and publish any > > sort of data for such a plugin, but it seems like the plugin itself > > might be occasionally useful... > > It might be use

Re: blacklist based on authoritative nameservers of sender domain

2011-08-22 Thread Adam Katz
On 08/22/2011 04:13 PM, Noah Meyerhans wrote: > I've recently observed a fair amount of spam from domains that all > share the same set of authoritative nameservers. It occurred to me > that it might be nice to be able to blacklist mail from all domains > sharing these nameservers, or maybe to sim

Re: Blacklist for spam-words

2010-09-17 Thread franc
OK, i updated it with cpan after uninstalling. But i had to change something in amavis-new, according to: http://o-o-s.de/?p=2735 And now my sa-config is in /etc/mail/spamassassin. Before, it was one level higher, which is really not important. -- View this message in context: http://old.n

Re: Blacklist for spam-words

2010-09-17 Thread Dominic Benson
On 17/09/10 11:21, franc wrote: In that case, uninstalling Spamassassin from Apt (and then doing an apt-get --autoremove to clear out Perl libs installed through apt/dpkg) and re-installing with CPAN should be fine, and you'll be able to keep it up to date. I use aptitude, is this the

Re: Blacklist for spam-words

2010-09-17 Thread Sergios T.S.(aka linuxman)
στις 17/09/2010 12:55 μμ, O/H Dominic Benson έγραψε: On 17/09/10 10:42, franc wrote: I doubt if this is possible on a VPS. At least the kernel is not changeable because coming from the host and is old enough (2.6.9). I guess an update to Lucid Lynx (10.04) will be if not unpossible but problem

Re: Blacklist for spam-words

2010-09-17 Thread franc
> In that case, uninstalling Spamassassin from Apt (and then doing an > apt-get --autoremove to clear out Perl libs installed through apt/dpkg) > and re-installing with CPAN should be fine, and you'll be able to keep > it up to date. I use aptitude, is this the same then? Will this uninstall a

Re: Blacklist for spam-words

2010-09-17 Thread Dominic Benson
On 17/09/10 10:42, franc wrote: I doubt if this is possible on a VPS. At least the kernel is not changeable because coming from the host and is old enough (2.6.9). I guess an update to Lucid Lynx (10.04) will be if not unpossible but problematic. So if i use CPAN and keep my Hardy Heron, there w

Re: Blacklist for spam-words

2010-09-17 Thread franc
> > If you can, upgrade to Lucid. If you can't - and don't ever plan to > upgrade the machine to a later Ubuntu release - then you could uninstall > and then install via CPAN, but I would fairly strongly recommend against > doing that if you have any intention of upgrading it in the future. In

Re: Blacklist for spam-words

2010-09-17 Thread Dominic Benson
This is just what i noticed: there is no Ubuntu package update after the 3.2.4-ubu1 related to: http://packages.ubuntu.com/de/hardy/spamassassin But how then to update? Can i use a package for Ubuntu Maverick (10.10) or is this the absolute wrong way? If you add hardy-backports to your a

Re: Blacklist for spam-words

2010-09-17 Thread franc
Hi , in you sources.list you have 2 lines #deb http://archive.ubuntu.com/ubuntu/ hardy-backports main restricted universe multiverse #deb-src http://archive.ubuntu.com/ubuntu/ hardy-backports main restricted universe multiverse Uncomment that lines and try to apt-get update && apt-get upgrade

Re: Identifying the real problem (was: Re: Blacklist for spam-words)

2010-09-16 Thread Benny Pedersen
On tor 16 sep 2010 23:19:34 CEST, franc wrote OK, i put now till i am sure there is no more FP the threshold on -, 5, 10, 15 so between 5 and 10 it is delivered into the spam-folder, and with 10 it is bounced. rejected please, eg dont accept and bouce -- xpoint http://www.unicom.com/pw/reply-t

Re: Blacklist for spam-words

2010-09-16 Thread Sergey Tsabolov ( aka linuxman )
Hi , in you sources.list you have 2 lines #deb http://archive.ubuntu.com/ubuntu/ hardy-backports main restricted universe multiverse #deb-src http://archive.ubuntu.com/ubuntu/ hardy-backports main restricted universe multiverse Uncomment that lines and try to apt-get update && apt-get upgrade

Re: Identifying the real problem (was: Re: Blacklist for spam-words)

2010-09-16 Thread franc
The next thing i just discovered is: $final_bad_header_destiny = D_PASS; with this rule, each Subject, containing 8-Bit, is sent to the quarantine folder. I didn't know this and now i am discovering many emails in the quarantine which were no spam at all :-) I commented it out: # $final_bad_h

Re: Identifying the real problem (was: Re: Blacklist for spam-words)

2010-09-16 Thread Karsten Bräckelmann
On Thu, 2010-09-16 at 15:10 -0700, franc wrote: > > I seriously hope you just mis-worded that. Bounce!? That would be after > > *accepting* a message, and with spam generally will be bounced to a > > forged, innocent bystander -- not the spammer. So please, tell me you > > actually meant to say REJ

Re: Identifying the real problem (was: Re: Blacklist for spam-words)

2010-09-16 Thread franc
> I seriously hope you just mis-worded that. Bounce!? That would be after > *accepting* a message, and with spam generally will be bounced to a > forged, innocent bystander -- not the spammer. So please, tell me you > actually meant to say REJECT. That is, not accept by the MX. No, i didn't know

Re: Identifying the real problem (was: Re: Blacklist for spam-words)

2010-09-16 Thread Karsten Bräckelmann
On Thu, 2010-09-16 at 14:19 -0700, franc wrote: > OK, i put now till i am sure there is no more FP the threshold on -, 5, 10, > 15 so between 5 and 10 it is delivered into the spam-folder, and with 10 it > is bounced. > > I think after a while i will know if i can put 2,5,6.31,10 or something like

Re: Identifying the real problem (was: Re: Blacklist for spam-words)

2010-09-16 Thread franc
OK, i put now till i am sure there is no more FP the threshold on -, 5, 10, 15 so between 5 and 10 it is delivered into the spam-folder, and with 10 it is bounced. I think after a while i will know if i can put 2,5,6.31,10 or something like this. Thank you for the hints! -- View this message in

Re: Blacklist for spam-words

2010-09-16 Thread Benny Pedersen
On tor 16 sep 2010 20:37:07 CEST, franc wrote yes, spamassassin is the only thing to upgrade at the moment. I am running Ubuntu 8.04 LTS (Hardy Heron) and i installed spamassassin with aptitude. then i will suggest to try here https://launchpad.net/hardy-backports make a request for upgrade a

Re: Identifying the real problem (was: Re: Blacklist for spam-words)

2010-09-16 Thread Karsten Bräckelmann
On Thu, 2010-09-16 at 11:32 -0700, franc wrote: > > ... Do you train *both*, spam *and* ham? Any chance these > > have been trained incorrectly before? What Bayes score do they actually > > get? The X-Spam-Status header would be sufficient to see. > > > > The few lines of 'sa-learn --dump magic' w

RE: Blacklist for spam-words

2010-09-16 Thread franc
> You're probably too late, Matus: you've got into his trash folder... ;) > From: Matus UHLAR - fantomas [mailto:uh...@fantomas.sk] > > > What if a friend of yours sends you an email asking to lend your > > > chronometer... --^ haha, this one is good! :-) But anyway, i didn't put an "i" t

Re: Blacklist for spam-words

2010-09-16 Thread franc
> are spamassassin the only thing you like to upgrade ? > > what os are you running ?, and what package managedment rpm ?, cpan ?, > lastly dont mix cpan with rpm yes, spamassassin is the only thing to upgrade at the moment. I am running Ubuntu 8.04 LTS (Hardy Heron) and i installed spamassass

Re: Identifying the real problem (was: Re: Blacklist for spam-words)

2010-09-16 Thread franc
> ... Do you train *both*, spam *and* ham? Any chance these > have been trained incorrectly before? What Bayes score do they actually > get? The X-Spam-Status header would be sufficient to see. > > The few lines of 'sa-learn --dump magic' would be good, too. Oh, and you > are training Bayes as th

Identifying the real problem (was: Re: Blacklist for spam-words)

2010-09-16 Thread Karsten Bräckelmann
On Thu, 2010-09-16 at 03:26 -0700, Franc Walter(?) wrote: > > SA goes farther than your simple idea. Have a look at how Bayes works, and > > all the available SA plugins. > > I trained SA since months with all those chronometer-zeitmesser-spam and > only 5% is now set to spam. > I want to get rid

Re: Blacklist for spam-words

2010-09-16 Thread Benny Pedersen
On tor 16 sep 2010 18:08:46 CEST, franc wrote http://packages.ubuntu.com/de/hardy/spamassassin But how then to update? Can i use a package for Ubuntu Maverick (10.10) or is this the absolute wrong way? ask a ubuntu maintainer, make a request for this in lunchpad seems to me next step if yo

Re: Blacklist for spam-words

2010-09-16 Thread Benny Pedersen
On tor 16 sep 2010 17:47:12 CEST, franc wrote But before you go trying to play whack-a-mole with lists of poison-pill words (and deal with the FPs that result), you should try upgrading to the latest release. I would like to update spamassassin, but how? 42, na not this time, tell more on h

Re: Blacklist for spam-words

2010-09-16 Thread Benny Pedersen
On tor 16 sep 2010 17:41:05 CEST, John Hardin wrote that result), you should try upgrading to the latest release. 3.2.4 is several years stale and is not getting any rule updates. Its performance _will_ deteriorate over time as the nature of spam changes. agree, but if the host os still h

RE: Blacklist for spam-words

2010-09-16 Thread Benny Pedersen
On tor 16 sep 2010 13:59:39 CEST, Giampaolo Tomassoni wrote want to get rid of it immediately. Well, you may try putting this into /etc/spamassassin/local.cf, then: describe FORBWORDS Matches some forbidden words (dangerous) body __FORBWORDS /\W(?:viagra|chronometer|zeitmesser)/i

Re: Blacklist for spam-words

2010-09-16 Thread franc
> Unfortunately Canonical probably is _not_ going to provide official SA > 3.3.x packages for Ubuntu 8.x... This is just what i noticed: there is no Ubuntu package update after the 3.2.4-ubu1 related to: http://packages.ubuntu.com/de/hardy/spamassassin But how then to update? Can i use a packa

Re: Blacklist for spam-words

2010-09-16 Thread John Hardin
On Thu, 16 Sep 2010, franc wrote: But before you go trying to play whack-a-mole with lists of poison-pill words (and deal with the FPs that result), you should try upgrading to the latest release. I would like to update spamassassin, but how? The rule for reliability is "update the way you

Re: Blacklist for spam-words

2010-09-16 Thread franc
> But before you go trying to play whack-a-mole > with lists of poison-pill words (and deal with the FPs that result), you > should try upgrading to the latest release. I would like to update spamassassin, but how? -- View this message in context: http://old.nabble.com/Blacklist-for-spam-wo

Re: Blacklist for spam-words

2010-09-16 Thread John Hardin
On Thu, 16 Sep 2010, franc wrote: i don't know spamassassin not very well, i am using 3.2.4 on Ubuntu 8.04 LTS. I need a textfile where i can put in blacklist-words like "Viagra", "Chronometer", "Zeitmesser" and so on, if an email has one of this words, this email should directly put to the

Re: Blacklist for spam-words

2010-09-16 Thread Lucio Chiappetti
On Thu, 16 Sep 2010, franc wrote: I need a textfile where i can put in blacklist-words like "Viagra", "Chronometer", "Zeitmesser" and so on, if an email has one of this words, this email should directly put to the "Spam"-folder. Are you sure you want to embark in a project like that and will

RE: Blacklist for spam-words

2010-09-16 Thread Giampaolo Tomassoni
You're probably too late, Matus: you've got into his trash folder... ;) > From: Matus UHLAR - fantomas [mailto:uh...@fantomas.sk] > > > What if a friend of yours sends you an email asking to lend your > > > chronometer... --^ > > This is very unlikely because i have none. So even if he aske

Re: Blacklist for spam-words

2010-09-16 Thread Matus UHLAR - fantomas
> > What if a friend of yours sends you an email asking to lend your > > chronometer... > > This is very unlikely because i have none. So even if he asked, it were in > vain :-) > > > SA goes farther than your simple idea. Have a look at how Bayes works, and > > all the available SA plugins. On

RE: Blacklist for spam-words

2010-09-16 Thread Giampaolo Tomassoni
> > SA goes farther than your simple idea. Have a look at how Bayes > works, and > > all the available SA plugins. > > I trained SA since months with all those chronometer-zeitmesser-spam > and > only 5% is now set to spam. > I want to get rid of it immediately. Well, you may try putting this int

RE: Blacklist for spam-words

2010-09-16 Thread Per Jessen
franc wrote: > >> You may setup a regexp rule in the /etc/local.cf file of your SA >> installation > > Could you give me an example, or where to find one? In the local.cf i > don't find RegExp-sections. body FRANCS_RULE /regexp/ /Per Jessen, Zürich

Re: Blacklist for spam-words

2010-09-16 Thread Yet Another Ninja
On 2010-09-16 12:29, franc wrote: You may setup a regexp rule in the /etc/local.cf file of your SA installation Could you give me an example, or where to find one? In the local.cf i don't find RegExp-sections. see http://wiki.apache.org/spamassassin/WritingRules

RE: Blacklist for spam-words

2010-09-16 Thread franc
> You may setup a regexp rule in the /etc/local.cf file of your SA > installation Could you give me an example, or where to find one? In the local.cf i don't find RegExp-sections. -- View this message in context: http://old.nabble.com/Blacklist-for-spam-words-tp29726548p29726801.html Sent from

RE: Blacklist for spam-words

2010-09-16 Thread franc
> > What if a friend of yours sends you an email asking to lend your > chronometer... This is very unlikely because i have none. So even if he asked, it were in vain :-) > SA goes farther than your simple idea. Have a look at how Bayes works, and > all the available SA plugins. I trained SA s

RE: Blacklist for spam-words

2010-09-16 Thread Giles Coochey
> You may setup a regexp rule in the /etc/local.cf file of your SA > installation, but a simple rule like the one you suggest may easily yield > FPs (False Positives, ie: non-spam messages may get into your trashcan). > > What if a friend of yours sends you an email asking to lend your > chronomet

RE: Blacklist for spam-words

2010-09-16 Thread Giampaolo Tomassoni
> Hello, > > i don't know spamassassin not very well, i am using 3.2.4 on Ubuntu > 8.04 > LTS. > > I need a textfile where i can put in blacklist-words like "Viagra", > "Chronometer", "Zeitmesser" and so on, if an email has one of this > words, > this email should directly put to the "Spam"-folde

RE: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread RobertH
> Perkel wrote: > What if your server is compromised or your DNS is hijacked? I'm doing > the same thing Postini is doing, just better. Besides, if you keep your > email servers and backup servers online then good email will never reach > my server. > > And - I'm putting this out for those who a

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Duane Hill
On Wed, 27 Aug 2008, mouss wrote: Marc Perkel wrote: And - I'm putting this out for those who are interested. You are not interested so this doesn't affect you. Mark, This debate can continue until the end of time (assuming time has an end ;-p). How about creating a dedicated mailing li

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread mouss
Marc Perkel wrote: And - I'm putting this out for those who are interested. You are not interested so this doesn't affect you. Mark, This debate can continue until the end of time (assuming time has an end ;-p). How about creating a dedicated mailing list?

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Marc Perkel
Aaron Wolfe wrote: On Tue, Aug 26, 2008 at 12:26 PM, Marc Perkel <[EMAIL PROTECTED]> wrote: You continue to miss the point, or maybe you just don't want to understand it. Sending my client's email to your servers is irresponsible at best and possibly even a violation of contract or illegal

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Aaron Wolfe
On Tue, Aug 26, 2008 at 12:26 PM, Marc Perkel <[EMAIL PROTECTED]> wrote: > > > Ken A wrote: >> >> Ralf Hildebrandt wrote: >>> >>> * Ken A <[EMAIL PROTECTED]>: >>> > How? He tempfails all mails. Are you asking how sending your customer, or company email off someplace you don't co

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Marc Perkel
Ken A wrote: Ralf Hildebrandt wrote: * Ken A <[EMAIL PROTECTED]>: How? He tempfails all mails. Are you asking how sending your customer, or company email off someplace you don't control might be a security risk? It's in no way more dangerous than using Postini... Have you compared Pos

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Ken A
Marc Perkel wrote: Ken A wrote: Ralf Hildebrandt wrote: * Robert Schetterer <[EMAIL PROTECTED]>: Project Tarbaby helps you reduce spam and helps us build our blacklist. This is done by adding a fake MX record to your existing MX lists thats could be seen as a security risk cause in rare

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Ken A
Ralf Hildebrandt wrote: * Ken A <[EMAIL PROTECTED]>: How? He tempfails all mails. Are you asking how sending your customer, or company email off someplace you don't control might be a security risk? It's in no way more dangerous than using Postini... Have you compared Postini's contract

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Kelson
Marc Perkel wrote: Graham Murray wrote: Because some senders erroneously treat a tempfail as a permfail (or even worse as a successful delivery) and do not retry. If that were the case then they already would have failed before getting to tarbaby as your main server is out. If they are on tar

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Ralf Hildebrandt
* Ken A <[EMAIL PROTECTED]>: >> How? He tempfails all mails. > > Are you asking how sending your customer, or company email off someplace > you don't control might be a security risk? It's in no way more dangerous than using Postini... -- Ralf Hildebrandt (i.A. des IT-Zentrums) [EMAIL

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Marc Perkel
Ken A wrote: Ralf Hildebrandt wrote: * Robert Schetterer <[EMAIL PROTECTED]>: Project Tarbaby helps you reduce spam and helps us build our blacklist. This is done by adding a fake MX record to your existing MX lists thats could be seen as a security risk cause in rare cases you may recie

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread John Hardin
On Tue, 26 Aug 2008, Marc Perkel wrote: If that were the case then they already would have failed before getting to tarbaby as your main server is out. Just a stylistic note: "tarbaby" is a poor term to use if you want to reassure people that your service will not cause any loss of email. The

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread John Hardin
On Tue, 26 Aug 2008, Marc Perkel wrote: Robert Schetterer wrote: thats could be seen as a security risk cause in rare cases you may recieve legal mails i.e at an network outage etc We don't actually receive and emails. Everything is turned away with a 451. So you say. Marc, the point

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Ken A
Ralf Hildebrandt wrote: * Robert Schetterer <[EMAIL PROTECTED]>: Project Tarbaby helps you reduce spam and helps us build our blacklist. This is done by adding a fake MX record to your existing MX lists thats could be seen as a security risk cause in rare cases you may recieve legal mails i.

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Marc Perkel
Graham Murray wrote: Ralf Hildebrandt <[EMAIL PROTECTED]> writes: * Robert Schetterer <[EMAIL PROTECTED]>: thats could be seen as a security risk cause in rare cases you may recieve legal mails i.e at an network outage etc How? He tempfails all mails. Because some send

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Marc Perkel
Robert Schetterer wrote: Marc Perkel schrieb: Hi everyone, I'm launching a free spam reduction service to help build up my blacklists. It involves adding a fake high numbered MX record to your existing MX list that points to one of our servers. We always return a 451 error but we have a ve

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread ram
On Tue, 2008-08-26 at 10:21 +0100, Graham Murray wrote: > Ralf Hildebrandt <[EMAIL PROTECTED]> writes: > > > * Robert Schetterer <[EMAIL PROTECTED]>: > >> thats could be seen as a security risk > >> cause in rare cases you may recieve legal mails > >> i.e at an network outage etc > > I think jus

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Ralf Hildebrandt
* Ralf Hildebrandt <[EMAIL PROTECTED]>: > > Because some senders erroneously treat a tempfail as a permfail (or even > > worse as a successful delivery) and do not retry. > > Well, idjuts I say. They won't even pass greylisting on the primary or > the secondary MX, so why bother? OTOH if all my

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Arvid Ephraim Picciani
On Tuesday 26 August 2008 11:12:23 Ralf Hildebrandt wrote: > * Robert Schetterer <[EMAIL PROTECTED]>: > > Project Tarbaby helps you reduce spam and helps us build our blacklist. > > This is done by adding a fake MX record to your existing MX lists > > > > thats could be seen as a security risk > >

Re: Blacklist Mining Project - Project Tarbaby

2008-08-26 Thread Matus UHLAR - fantomas
> Ralf Hildebrandt <[EMAIL PROTECTED]> writes: > > > * Robert Schetterer <[EMAIL PROTECTED]>: > >> thats could be seen as a security risk > >> cause in rare cases you may recieve legal mails > >> i.e at an network outage etc > > > > How? He tempfails all mails. On 26.08.08 10:21, Graham Murray wr

  1   2   3   >