Hi all,
I wonder if anyone has encountered spam like this recently?
http://pastebin.com/raw.php?i=3ByuaFva
It's a base64-encoded subscribe request for a yahoo group with
japanese characters. It has a significant negative score (-17) with
bayes00, so I was kind of concerned and hoped someone had
On Saturday April 14 2007 01:24:47 John Clements wrote:
> >> Date: 05 Apr 2007 05:05:39 -0700
> >> Date: 05 Apr 2007 05:05:39 -0700
> >> Date: Thu, 05 Apr 2007 06:46:01 -0500
> >> Now, I took a quick look at rfc 2822, and all of the Date fields
> >> in this e-mail would appear to be compliant.
Ye
On Apr 13, 2007, at 2:05 PM, mouss wrote:
John Clements wrote:
It appears to me that all mail coming through Yahoo groups is
getting at least 4.5 points because of yahoo's use of tiny fonts
and of non-compliant Date: formats. Here's the spamassassin
analysis:
And below
John Clements wrote:
It appears to me that all mail coming through Yahoo groups is getting
at least 4.5 points because of yahoo's use of tiny fonts and of
non-compliant Date: formats. Here's the spamassassin analysis:
pts rule name d
It appears to me that all mail coming through Yahoo groups is getting
at least 4.5 points because of yahoo's use of tiny fonts and of non-
compliant Date: formats. Here's the spamassassin analysis:
pts rule name d
}
- Original Message -
From: "Rodney Richison" <[EMAIL PROTECTED]>
In my fight against spam, yahoo groups seems to be the only casualty.
I'm not a rule writer, so please forgive this feable attempt and let me
know if it looks ok
# Example of a rule for text in
Rodney Richison wrote:
did you install Mail::DKIM?
I just now did, no luck.
if it was really installed, then you need to find out where!
try to reinstall it and watch the output.
do you have multiple perl versions on your system?
Not that I know of. :) Which I'm sure mean
Rodney Richison wrote:
did you install Mail::DKIM?
I just now did, no luck.
DomainKeys requires Mail::DomainKeys, DKIM requires Mail::DKIM.
Daryl
>
> did you install Mail::DKIM?
I just now did, no luck.
> do you have multiple perl versions on your system?
Not that I know of. :) Which I'm sure means no.
Debian sarge with spamassassin from backports
Highest Regards,
Rodney Richison
RCR Computing
PO Box 566 - 118 N. Broadway
C
Rodney Richison wrote:
Unfortunatly, I can't enable the domainkeys pluging. I loaded it with
cpan and got this on a lint.
[18770] warn: plugin: failed to parse plugin (from @INC): Can't locate
Mail/DomainKeys/Message.pm in @INC (@INC contains: lib /usr/share/perl5
/etc/perl /usr/local/lib/perl/
Rodney Richison wrote:
> In my fight against spam, yahoo groups seems to be the only casualty.
> I'm not a rule writer, so please forgive this feable attempt and let
> me know if it looks ok
>
> # Example of a rule for text in the header of the mail:
> header LO
Rodney Richison wrote:
In my fight against spam, yahoo groups seems to be the only casualty.
I'm not a rule writer, so please forgive this feable attempt and let me
know if it looks ok
# Example of a rule for text in the header of the mail:
header LOCAL__H_from_yahoogroups
In my fight against spam, yahoo groups seems to be the only casualty.
I'm not a rule writer, so please forgive this feable attempt and let me
know if it looks ok
# Example of a rule for text in the header of the mail:
header LOCAL__H_from_yahoogroupsFrom =~ /yahoogroups\.com/i
On Tue, November 14, 2006 19:00, SM wrote:
> See whitelist_from_dk [EMAIL PROTECTED] example.com
for me this is not possible with domainkeys
but only with dkim
--
This message was sent using 100% recycled spam mails.
On Tue, 14 Nov 2006 10:21:02 -0800, Bill Moseley <[EMAIL PROTECTED]>
wrote:
[...]
>Yes, it is my machine rejecting the mail that is flagged spam.
>And when I reject too many messages Yahoo's mailing list software
>considers my email non-working and stops delivering list messages.
Snap! I have t
On Tue, 14 Nov 2006, wrote:
> whitelist_from_rcvd *.mail.mud.yahoo.com *.bullet.scd.yahoo.com
>
Um shouldn't that first component be in address format?
EG:
whitelist_from_rcvd [EMAIL PROTECTED] yahoo.com
Also that second argument doesn't need that '*'. It already
patern matches again
Benny Pedersen wrote:
i whitelist with trusted_networks
...
add ALL yahoo.com outgoing ip to trusted_networks in spamassassin solves it,
but who knows there ip's ?
That probably isn't doing what you think it is.
trusted_networks isn't a whitelist. It doesn't mean you trust them not
to send
On Tue, November 14, 2006 19:25, wrote:
> whitelist_from_rcvd *.mail.mud.yahoo.com *.bullet.scd.yahoo.com
wish it was that simple :(
spamassassin will still check spamcop
but may not say its spam and thus accept it
--
This message was sent using 100% recycled spam mails.
On Tue, November 14, 2006 19:21, Bill Moseley wrote:
>> Unless YOUR machine is bouncing them, your SA will not help. Spamcap is
>> usually the culprit and is being used by Yahoo.
ip is listed so:
Resolved 69.147.64.135 to n20c.bullet.sp1.yahoo.com.
[n20c.bullet.sp1.yahoo.com. has 1 MX record .(
whitelist_from_rcvd *.mail.mud.yahoo.com *.bullet.scd.yahoo.com
On Tue, Nov 14, 2006 at 05:42:58PM +0200, David Baron wrote:
> On Tuesday 14 November 2006 17:01, Bill Moseley wrote:
> > I keep getting my yahoo groups account shut down because of too many
> > bounces. For one thing, their mail server is listed:
> >
> > Blocked -
At 07:01 14-11-2006, Bill Moseley wrote:
Should I try and white list the hosts? Or better to give a large
negative score?
Yes, if you don't receive spam from these hosts.
Can their use of "DomainKeys" be used in my scoring?
See whitelist_from_dk [EMAIL PROTECTED] example.com
The signing d
On Tuesday 14 November 2006 17:01, Bill Moseley wrote:
> I keep getting my yahoo groups account shut down because of too many
> bounces. For one thing, their mail server is listed:
>
> Blocked - see <http://www.spamcop.net/bl.shtml?69.147.64.135>
>
> Is there a recomm
On Tue, Nov 14, 2006 at 07:01:12AM -0800, Bill Moseley wrote:
> Can their use of "DomainKeys" be used in my scoring?
Sorry, that was more of "*should* their use..." -- I'm not clear
on the use of Mail::SpamAssassin::Plugin::DomainKeys.
--
Bill Moseley
[EMAIL PROTECTED]
I keep getting my yahoo groups account shut down because of too many
bounces. For one thing, their mail server is listed:
Blocked - see <http://www.spamcop.net/bl.shtml?69.147.64.135>
Is there a recommended method for dealing with mailing lists where the
mail may come from any num
From: "John D. Hardin" <[EMAIL PROTECTED]>
On Thu, 8 Jun 2006, John Beranek wrote:
P.S. and a Yahoo email server is listed in Spamcop??
Perennially. I've had to whitelist them so that my wife's Yahoo Groups
mailing lists weren't constantly being discarded
On Thu, 8 Jun 2006, John Beranek wrote:
> P.S. and a Yahoo email server is listed in Spamcop??
Perennially. I've had to whitelist them so that my wife's Yahoo Groups
mailing lists weren't constantly being discarded.
--
John Hardin KA7OHZICQ#15735746http://www.i
John Beranek wrote:
> FYI...
>
> John.
>
> P.S. and a Yahoo email server is listed in Spamcop??
>
Happens all the time...
On Sat, 2006-03-11 at 01:23 -0800, Loren Wilton wrote:
> > @yahoogroups.com, although the message has the below headers, it shows
> > no sender and no subject.
>
> > Subject: [ Nawaf ] äÝÓ ÇáÅÍÓÇÓ íÇ äÇÓ / ÕæÑ æßáãÇÊ ÊÓÊÍÞ ÇáÞÑÇÁÉ
> > From: SOFI <[EMAIL PROTECTED]>
>
> Looks to me like a sender a
> @yahoogroups.com, although the message has the below headers, it shows
> no sender and no subject.
> Subject: [ Nawaf ] äÝÓ ÇáÅÍÓÇÓ íÇ äÇÓ / ÕæÑ æßáãÇÊ ÊÓÊÍÞ ÇáÞÑÇÁÉ
> From: SOFI <[EMAIL PROTECTED]>
Looks to me like a sender and a subject.
Of course, the sender doesn't match
> X-Sender: [EMAIL
Hi Everyone,
I'm having a quite strange status of all the mails coming from
@yahoogroups.com, although the message has the below headers, it shows
no sender and no subject.
Return-Path: <>
Received: from 10.10.1.9 by mailsrv with ESMTP id 48206191142061138;
Sat, 11 Mar 2006 10:12:18 +0300
Receiv
31 matches
Mail list logo
