Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Matus UHLAR - fantomas
On 23.11.09 12:19, rich...@buzzhost.co.uk wrote: > I'm not really familiar with HABEAS_ACCREDITED_COI and I'm interested to > know who is behind it, and how it relates to the Spamassassin project. HABEAS was company acquired by ReturnPath. It tries to help out differing between legal marketing com

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread LuKreme
On Nov 23, 2009, at 6:14, Matus UHLAR - fantomas wrote: You should complain to ReturnPath Or just change the scores from -8.0 to +2.0

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Hajdú Zoltán
Or just report it... "Sender Abuse and Complaint Reporting Any concerns or complaints regarding the Return Path Certification program can be submitted to certificat...@returnpath.net. " Cheers, rich...@buzzhost.co.uk írta: I'm not really familiar with HABEAS_ACCREDITED_COI and I'm interested

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread rich...@buzzhost.co.uk
Thanks to Matus for the explanation, LuKreme for the suggestion on scoring and Hajdu for the contact details. I am obliged to you and thank you for your time.

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Matus UHLAR - fantomas
> On Nov 23, 2009, at 6:14, Matus UHLAR - fantomas > wrote: > >> You should complain to ReturnPath On 23.11.09 06:40, LuKreme wrote: > Or just change the scores from -8.0 to +2.0 Yes, why to differ between non-abusing and abusing marketers... -- Matus UHLAR - fantomas, uh...@fantomas.sk ; htt

using Data of "Project Honeypot"

2009-11-23 Thread sebast...@debianfan.de
Hello, how do i use the data of project honeypot in spamassassin? thx Sebastian

[OT] Massive Crackdown on Internet Drug Traffic

2009-11-23 Thread Adam Katz
FYI, thought this might be of interest. -- Forwarded message -- Date: Mon, 23 Nov 2009 07:39:46 -0500 From: Knujon Reports Reply-To: cont...@knujon.com Subject: Massive Crackdown on Internet Drug Traffic Hello, We are seeing the beginning of a new chapter in Internet compliance

Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
Hi. I want to block all messages that I'm getting that have: To: undisclosed recipients: ; with no Cc: line. Unfortunately, the rule that I have: header L_UNDISCLOSEDTo:raw =~ /undisclosed-recipients: ?;/ describe L_UNDISCLOSED To: list is meaningless and no Cc: score L_UN

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Michael Scheidell
Philip Prindeville wrote: Hi. I want to block all messages that I'm getting that have: To: undisclosed recipients: ; with no Cc: line. I went round and round with this a while back. SA 3.25 has a problem with perl null vs 0 vs ''. so a To header (or CC header) with no content looks like

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
On 11/23/2009 12:10 PM, Michael Scheidell wrote: > Philip Prindeville wrote: > >> Hi. >> >> I want to block all messages that I'm getting that have: >> >> To: undisclosed recipients: ; >> >> with no Cc: line. >> >> >> > I went round and round with this a while back. > > SA 3.25 has a pro

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Michael Scheidell
Philip Prindeville wrote: but as you say, if it can't tell the difference between "" and undef, then that's an issue. use header ALL to check for a \nCC (which could be blank) or just use your MTA to reject it at SMTPtime.

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
On 11/23/2009 12:18 PM, Michael Scheidell wrote: > Philip Prindeville wrote: > >> >> but as you say, if it can't tell the difference between "" and undef, >> then that's an issue. >> >> >> > use header ALL to check for a \nCC > (which could be blank) > > or just use your MTA to reject it

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread J.D. Falk
On Nov 23, 2009, at 6:14 AM, Matus UHLAR - fantomas wrote: > You should complain to ReturnPath. Iirc, HABEAS used to sue spammers > misusing their technology. Don't know if ReturnPath continues prac ticing > this. Actually, you're confusing Habeas's first technology (which involved suing misuse

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread jdow
From: "J.D. Falk" Sent: Monday, 2009/November/23 13:37 On Nov 23, 2009, at 6:14 AM, Matus UHLAR - fantomas wrote: You should complain to ReturnPath. Iirc, HABEAS used to sue spammers misusing their technology. Don't know if ReturnPath continues prac ticing this. Actually, you're confusing H

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Aaron Wolfe
On Mon, Nov 23, 2009 at 4:46 PM, jdow wrote: > From: "J.D. Falk" > Sent: Monday, 2009/November/23 13:37 > > > On Nov 23, 2009, at 6:14 AM, Matus UHLAR - fantomas wrote: > >> You should complain to ReturnPath. Iirc, HABEAS used to sue spammers >> misusing their technology. Don't know if ReturnPath

Re: rbl checks not running

2009-11-23 Thread Mark Hedges
On Sat, 21 Nov 2009, Mark Hedges wrote: > On Sat, 21 Nov 2009, Charles Gregory wrote: > > > > Did you look at the logs you posted? > > NONE of the DNS tests are being launched on msg 26661 > > Yes, that is the problem. They run with `spamassassin`, but > they do not run from `spamd`. > > Do

Re: rbl checks not running

2009-11-23 Thread Mark Hedges
OMG I am SO DUMB - I had skip_rbl_checks set in my personal userconf. DUH. Thanks everyone for your helpful suggestions - actually it was working fine from the beginning. Mark

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread LuKreme
On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas wrote: Yes, why to differ between non-abusing and abusing marketers... We've been through this before. On my mail, habeas is a very strong indicator of spam. It does not appear in legitimate mail. I don't know who these legitimate markete

Re: Undisclosed recipients :; -- again

2009-11-23 Thread LuKreme
On Nov 23, 2009, at 12:05, Philip Prindeville > wrote: I want to block all messages that I'm getting that have: To: undisclosed recipients: ; with no Cc: line. What's Cc: have to do with it? undisclosed recipients is used for Bcc: mail I used it all the time. And you WILL 'block' legiti

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread Daniel J McDonald
On Mon, 2009-11-23 at 17:08 -0700, LuKreme wrote: > On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas > wrote: > > > Yes, why to differ between non-abusing and abusing marketers... > > We've been through this before. On my mail, habeas is a very strong > indicator of spam. It does not appear

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Benny Pedersen
On tir 24 nov 2009 01:11:38 CET, LuKreme wrote I used it all the time. And you WILL 'block' legitimate mail. and thats always sender to decide its legitimate :) i see a pattern there -- xpoint

cleanup for DNSBLs

2009-11-23 Thread Adam Katz
Unless there are objections, I'm going to add two tests to my sandbox: RCVD_IN_NIX_SPAM, a new (to us) DNSBL populated by the same source as the original [N]iXhash zone, with results on intra2net that look quite promising: 72.98:0.12 spam:ham (PSBL has 48.69:0.36), http://www.intra2net.com/en/sup

Re: Undisclosed recipients :; -- again

2009-11-23 Thread John Hardin
On Mon, 23 Nov 2009, LuKreme wrote: On Nov 23, 2009, at 12:05, Philip Prindeville wrote: I want to block all messages that I'm getting that have: To: undisclosed recipients: ; undisclosed recipients is used for Bcc: mail I used it all the time. And you WILL 'block' legitimate mail. Gra

Re: cleanup for DNSBLs

2009-11-23 Thread Warren Togami
On 11/23/2009 07:34 PM, Adam Katz wrote: Unless there are objections, I'm going to add two tests to my sandbox: RCVD_IN_NIX_SPAM, a new (to us) DNSBL populated by the same source as the original [N]iXhash zone, with results on intra2net that look quite promising: 72.98:0.12 spam:ham (PSBL has 4

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
On 11/23/2009 05:11 PM, LuKreme wrote: > On Nov 23, 2009, at 12:05, Philip Prindeville > > wrote: > > >> I want to block all messages that I'm getting that have: >> >> To: undisclosed recipients: ; >> >> with no Cc: line. >> > What's Cc: have to do with it? undisclosed recipients is use

Re: Undisclosed recipients :; -- again

2009-11-23 Thread Philip Prindeville
On 11/23/2009 05:11 PM, LuKreme wrote: > On Nov 23, 2009, at 12:05, Philip Prindeville > > wrote: > > >> I want to block all messages that I'm getting that have: >> >> To: undisclosed recipients: ; >> >> with no Cc: line. >> > What's Cc: have to do with it? undisclosed recipients is use

Re: [SA] cleanup for DNSBLs

2009-11-23 Thread Adam Katz
Warren Togami wrote: > On 11/23/2009 07:34 PM, Adam Katz wrote: >> Unless there are objections, I'm going to add two tests to my sandbox: >> >> RCVD_IN_NIX_SPAM, a new (to us) DNSBL populated by the same source as >> the original [N]iXhash zone, with results on intra2net that look quite >> promisin

Re: HABEAS_ACCREDITED SPAMMER

2009-11-23 Thread rich...@buzzhost.co.uk
On Mon, 2009-11-23 at 17:08 -0700, LuKreme wrote: > On Nov 23, 2009, at 7:39, Matus UHLAR - fantomas > wrote: > > > Yes, why to differ between non-abusing and abusing marketers... > > We've been through this before. On my mail, habeas is a very strong > indicator of spam. It does not appear