Hi,
we have seen a recent upsurge in SPAM and would like to ask the community for
recommendations on both free and commercial RBL offerings. We are currently
using:
Barracuda
SpamRats
JunkEmailFilter
SpamEatingMonkey
Plus the standard ones that are checked with SpamAssassin. We are also
our clients
and at 06:42 it appeared on one of the RBLs. I am guessing that it must have
been a huge spam mailing that hit a lot of honeypots and people all at once.
Downside is not a happy client ;(
--
Thanks, Phil
- Original Message -
> Am 11.01.2012 12:28, schrieb --[ Ux
Well done Michele :) That is pure class.
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749
Does anybody have one of these, or different one, that you could upload
somewhere so can do some analysis ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
//
Thanks Justin. Do they all follow the same patterns ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 84
,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]
- Original Message
Can you post a copy online Martin ? need a few examples to find the common
elements.
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.
would perhaps be useful to see a spamassassin -D --lint ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +
Is a RPM available for Centos5 yet ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 845 869 2749 SIP Pho
Do you see if get picked up if you run a lint on your SA installation ?
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687
] dbg: check:
subtests=__BOTNET_NOTRUST,__HAS_MSGID,__MISSING_REF,__MSGID_OK_DIGITS,__MSGID_OK_HOST,__MSOE_MID_WRONG_CASE,__NONEMPTY_BODY,__SANE_MSGID,__SARE_WHITELIST_FLAG,__TVD_BODY,__UNUSABLE_MSGID
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import&qu
ur address.
Try to contact them as soon as possible to quicken the process of your Card
before your Draft gets Expired.
Let me know as soon as you receive your ATM Master Card.
Thanks.
Mr.tony okou
--
Regards,
--[ UxBoD ]--
// PGP
I am running it with SA 3.2.4 with no problems at all.
Regards,
--[ UxBoD ]--
// PGP Key: "curl -s https://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: C759 8F52 1D17 B3C5 5854 36BD 1FB1 B02F 5DB5 687B
// Keyserver: www.keyserver.net Key-ID: 0x5DB5687B
// Phone: +44 84
Is decoder (Chris) still developing FuzzyOCR ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 86
/vhcs.puuhis.net/wiki/index.php/Spam_/_Antivirus_filter
--
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845
on these ?
TIA
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]
- "Matt Kettler" <[EMAIL PROTECTED]> wrote:
--[ UxBoD ]-- wrote:
> Hi,
>
> I just had this message get through :-
>
>
> and it only scored 5.6. These are the rules it hit :-
>
> 1.23 ADVANCE_FEE_2
> 0.00 BAYES_50
> 0.72
the inline snort station should show some more detail. do you have access to
your routers and switches ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
//
Resolved. Cleared my sa-keys directory and re-imported them all.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
//
what does netstat -an | grep 783 show ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749
it ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749 SIP Phone: [EMAIL PROTECTED]
- &qu
please post a URL to a sample message, or via pastebin so that we can run it
through our installations and see what it hits.
what is your SA installation hitting and scoring it as ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// F
we would need to see the full headers.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749
Share Pictures and Chat SPAM
4.0 JM_SOUGHT_3JM_SOUGHT_3
4.0 JM_SOUGHT_2JM_SOUGHT_2
so take a look at http://wiki.apache.org/spamassassin/SoughtRules
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// F
policyd works a treat :) V2 is also in development aswell.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +
g rDNS
4.0 JM_SOUGHT_3JM_SOUGHT_3
1.0 DOS_OUTLOOK_TO_MX Delivered direct to MX with Outlook headers
Jason's rules should help you :- http://wiki.apache.org/spamassassin/SoughtRules
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.as
please post the full message via something like pastebin. we need to see the
headers aswell.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserv
Process Identifier.
When any process is forked (started) it will have unique number associated with
it. It will also have a PPID (Parent Process Identifier) ie. what was the
process that forked the child.
http://en.wikipedia.org/wiki/Process_identifier
Regards,
--
--[ UxBoD ]--
// PGP Key
Pidfile holds the PID of the forked process ie. /var/run/MailScanner.pid
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A8
this link works just fine :-
http://mesh.dl.sourceforge.net/sourceforge/swatch/swatch-3.2.2.tar.gz
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.key
message
0.0 BAYES_50 BODY: Bayesian spam probability is 40 to 60%
[score: 0.5003]
0.1 RDNS_NONE Delivered to trusted network by a host with no rDNS
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --i
What RBL lookup lists are you using ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
// Phone: +44 845 869 2749
why not :-
util_rb_2tld grupogsv.com
as that appears as part of the link ?
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID:
look at line 55 of the pastebin ;) you can use that URL I believe.
Regards,
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: F57A 0CBD DD19 79E9 1FCC A612 CB36 D89D 2C5A 3A84
// Keyserver: www.keyserver.net Key-ID: 0x2C5A3A84
//
http://www.mailscanner.info
--
This message has been scanned for viruses and dangerous content
by MailScanner, and is believed to be clean.
Hi,
Would somebody please let me know what is required to get it to work :) I have
installed the Perl module and enabled the plugin but it never appears to hit :(
Best Regards,
--
SplatNIX IT Services :: Innovation through collaboration
- "Mariusz Kruk" wrote:
> On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote:
> > Hi,
> >
> > Would somebody please let me know what is required to get it to work
> :) I have installed the Perl module and enabled the plugin but it
> never appears
- "Mariusz Kruk" wrote:
> On Tue, 2009-07-28 at 11:29 +0100, --[ UxBoD ]-- wrote:
> > - "Mariusz Kruk" wrote:
> >
> > > On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote:
> > > > Hi,
> > > >
> >
- "Matus UHLAR - fantomas" wrote:
> > > On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote:
> > > > Would somebody please let me know what is required to get it to
> work
> > > :) I have installed the Perl module and enabled the
- "snowweb" wrote:
> I don't know about anyone else, but I'm getting a bit hacked of with
> this
> 1980's style forum. I'm trying to get to the bottom of an SA issue and
> this
> list/forum thing is giving me a bigger headache than SA!
>
> Spamassassin has more than one or two users now and
- "Stefan" wrote:
> --[ UxBoD ]--:
> > - "Matus UHLAR - fantomas" wrote:
> > > > > On Tue, 2009-07-28 at 11:20 +0100, --[ UxBoD ]-- wrote:
> > > > > > Would somebody please let me know what is required to get it
> to
&g
Hi,
Where can I find sa-awlUtil as it does not appear to be in the download file ?
Best Regards,
--
SplatNIX IT Services :: Innovation through collaboration
- "twofers" wrote:
>
I have a post I have tried several times over the last week to post to this
forum and it never seems to get posted. I don't understand why?
There is nothing exotic about it, just text, a question and email header info I
pasted.
Any idea whats up?
Thanks,
Wes
>
- "Thomas Casartello" wrote:
>
>
>
> Been getting a lot of low scoring stuff like this lately. Any suggestions?
Please post the complete email to pastbin so we can run it through our own
installations. It would help if you let us know which rules it actually hit on
in your installation
- "John Hardin" wrote:
> On Wed, 2009-08-12 at 16:20 -0700, Ted Mittelstaedt wrote:
> > Maybe this will sound dumb but wouldn't it be perfectly
> > safe to blacklist "example.com" after all, that isn't a
> > domain your ever going to get mail from.
> >
> > Ted
>
> That is there because Alex
- "Marc Perkel" wrote:
>
>
> Aaron Wolfe wrote:
On Fri, Aug 14, 2009 at 11:24 AM, Chris Owen wrote:
On Aug 14, 2009, at 10:13 AM, Mike Cardwell wrote:
The comparisons on that page are useless. What matters is list policy,
reliability and reputation.
SpamHaus is hands down the best d
Hi,
Cannot recall seeing a follow up to John H new rules; Are they available now or
still under test review ?
Best Regards,
--
This message has been scanned for viruses and
dangerous content and is believed to be clean.
SplatNIX IT Services :: Innovation through collaboration
- "Clunk Werclick" wrote:
| On Sun, 2009-09-13 at 16:37 -0600, LuKreme wrote:
| > On 12-Sep-2009, at 10:27, Clunk Werclick wrote:
| > > I disagree. It can do as much harm as good. My own view and
| > > observation
| > > from the past have rendered it pointless in my context. It adds
| > >
- "Clunk Werclick" wrote:
| On Mon, 2009-09-14 at 11:46 +0200, Matus UHLAR - fantomas wrote:
| > > > On 12-Sep-2009, at 10:27, Clunk Werclick wrote:
| > > > > I disagree. It can do as much harm as good. My own view and
| > > > > observation from the past have rendered it pointless in my
| con
- "Matus UHLAR - fantomas" wrote:
| > > > > On 12-Sep-2009, at 10:27, Clunk Werclick wrote:
| > > > > > I disagree. It can do as much harm as good. My own view and
| > > > > > observation from the past have rendered it pointless in my
| context. It
| > > > > > adds latency, is easily poisoned
"Clunk Werclick" wrote:
| On Mon, 2009-09-14 at 12:24 +0100, --[ UxBoD ]-- wrote:
| > - "Clunk Werclick" wrote:
| >
| > | On Mon, 2009-09-14 at 11:46 +0200, Matus UHLAR - fantomas wrote:
| > | > > > On 12-Sep-2009, at 10:27, Clunk Werclick wrot
- "Charles Gregory" wrote:
| On Mon, 14 Sep 2009, Clunk Werclick wrote:
| > Clearly not - but then, using Spamassassin as a filter ensures just
| > about everything gets through CUNTFACE.
|
| Congratulations! You've done something I have very rarely seen
| on any internet forum. You've gott
- "Chris Owen" wrote:
| On Sep 14, 2009, at 11:38 AM, LuKreme wrote:
|
| > On 14-Sep-2009, at 10:17, jdow wrote:
| >> :0
| >> * 9876543210^0 ^From: .*\
| > * 9876543210^0 ^From:.*clunk\.wercl...@wibblywobblyteapot\.co\.uk
| >> /dev/null
| >
| > Will work better. (and you don't need a lock on
- "LuKreme" wrote:
| On 14-Sep-2009, at 10:17, jdow wrote:
| > :0
| > * 9876543210^0 ^From: .*\
| * 9876543210^0 ^From:.*clunk\.wercl...@wibblywobblyteapot\.co\.uk
| > /dev/null
|
| Will work better. (and you don't need a lock on /dev/null)
|
| --
| In England 100 miles is a long distance.
- "Bill Landry" wrote:
| > On Mon, 14 Sep 2009, Warren Togami wrote:
| >
| >> One thing they all have in common is their registration dates are
| very
| >> young according to whois lookups. It seems in general if we had a
| >> reliable way to lookup domain age we might be able to
| different
- "Karsten Bräckelmann" wrote:
| On Mon, 2009-09-14 at 18:55 +0100, --[ UxBoD ]-- wrote:
| > | Still working fine for me here, 51 hits so far today against DOB.
| >
| > Not come across that RBL before! Thanks :)
|
| grep _DOB *.cf# Part of the stock rule-set.
|
|
- "Benny Pedersen" wrote:
| On man 14 sep 2009 16:54:39 CEST, Bill Landry wrote
| > So how far does someone have to go before getting banned from the
| > list? Is this not far enough yet?
|
| he just come back with another sender email, with another reply-to, it
|
| will be endless banning
- "Clunk Werclick" wrote:
| On Mon, 2009-09-14 at 19:52 +0100, --[ UxBoD ]-- wrote:
| > - "Benny Pedersen" wrote:
| >
| > | On man 14 sep 2009 16:54:39 CEST, Bill Landry wrote
| > | > So how far does someone have to go before getting banned from
- "Quanah Gibson-Mount" wrote:
| --On Monday, October 05, 2009 11:50 PM +0200 mouss
|
| wrote:
|
| > Thomas Mullins a écrit :
| >> We have been running Spamassassin for maybe eight years now. But,
| my
| >> coworkers do not like OpenSource. So they have finally complained
| >> enough tha
- "Lars Ebeling" wrote:
| Or am I blacklisted?
|
| --
| Regards
| Lars Ebeling
All appears okay ...
--
This message has been scanned for viruses and
dangerous content and is believed to be clean.
SplatNIX IT Services :: Innovation through collaboration
- "Mike Cardwell" wrote:
| On 11/01/2010 10:22, Jason Haar wrote:
| > Hi there
| >
| > We've been getting a few of these leaking through in the past couple
| of
| > weeks.
| >
| > http://pastebin.com/m574da717
| >
| > They aren't triggering (enough) network rule matches, contain a
| > bayes-k
- te...@cnysupport.com wrote:
> I've recently started receiving web form "spam", but I'm not quite
> sure what to make of it.
>
> My websites contains a couple of support request forms that ask for
> minimal information (business name, name, phone, problem, email
> address).
>
> Recen
- dar...@chaosreigns.com wrote:
> http://www.chaosreigns.com/mtx/
>
> --
> "Democracy is the theory that the common people know what they want,
> and deserve to get it good and hard." - H. L. Mencken
> http://www.ChaosReigns.com
Like the simplicity and it does appear to be a great idea. Wh
- "Per Jessen" wrote:
> Jonas Eckerman wrote:
>
> > (And of course, if this catches on, you'll have to provide RFC
> style
> > documentation.)
> >
>
> See Justins posting from two days back:
>
> http://tools.ietf.org/draft/draft-stumpf-dns-mtamark/
> http://tools.ietf.org/draft/draft-stum
- "corpus.defero" wrote:
> I was looking at a piece of irritating pill spam this morning
> ((http://pastebin.com/qzj83QKq)) and noticed this in the body, just
> after a random excerpt from chapter 58 of 'The Awakening':
>
> ---34AD8EF316667417464496762D36F3502061F3
> Content-Type: im
- Original Message -
> Hi,
>
> Just wondering if others are also seeing an increase in image spam in
> the last week or so, some of which contain zip attachments? The body
> contains random "bayes killer?" text with an image or zip attachment.
> I can't otherwise find something to trigger
- Original Message -
> On Fri, 2010-04-30 at 16:50 +0100, Nigel Frankcom wrote:
>
> > We're on a BT only exchange here so it's them or nothing, well not
> > quite, I could go CoLo... hmmm maybe not, or satellite, I was
> > involved in setting that up in Cyprus.
>
> > Nigel
> Is there suc
. The most
noticeable change was using Greylisting, with MailScanner and SpamAssassin
cleaning the rest up.
To say they are impressed would be a understatement.
Well done to all the developers and contributors off these fine pieces of
software.
Cheers,
UxBoD
--[ UxBoD ]--
// PGP Key: "cu
b
>
> --
> This message has been scanned for viruses and dangerous content by
> MailScanner, and is
> believed to be clean.
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8
and vice; Thus habit
> differs from disposition in this, that while the latter that may be, it is
> an incontrovertible fact that the things which in
> more of the same
>
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543
Check out http://policyd.sourceforge.net/ then as it allows you to
specify Servers/IP that should not be greylisted. Works very well.
On Thu, 25 Jan 2007 12:33:19 -
"Matthew Bickerton" <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I am setting up a new server, so have a chance to make big changes to
>
> -Original Message-
> From: --[ UxBoD ]-- [mailto:[EMAIL PROTECTED]
> Sent: 25 January 2007 12:49
> To: users@spamassassin.apache.org
> Subject: Re: Should I use greylisting
>
> Check out http://policyd.sourceforge.net/ then as it allows you to
> specify Se
On Thu, 25 Jan 2007 11:56:47 -0500 (EST)
"Steven W. Orr" <[EMAIL PROTECTED]> wrote:
> On Thursday, Jan 25th 2007 at 12:49 -0000, quoth --[ UxBoD ]--:
>
> =>Check out http://policyd.sourceforge.net/ then as it allows you to
> =>specify Servers/IP that should
IMHO I would imagine that recently, due to the SPAM changes, that your
Bayes has become poisoned. But I could be well wrong.
On Fri, 26 Jan 2007 06:09:24 -0500
"Jack Gostl" <[EMAIL PROTECTED]> wrote:
> The amount of spam getting through my filters has been steadily
> increasing. From a start of u
Sorry for asking as I am sure that it has already been covered. But if
there a rule for the new spate of drug SPAM where the URL has "Remove
"*" to make the link working!" in it ?
Thanks,
--
This message has been scanned for viruses and dangerous content by MailScanner,
and is
believed to be cl
On Sat, 27 Jan 2007 12:25:12 +
Nigel Frankcom <[EMAIL PROTECTED]> wrote:
> On Sat, 27 Jan 2007 11:49:03 +0000, "--[ UxBoD ]--"
> <[EMAIL PROTECTED]> wrote:
>
> >Sorry for asking as I am sure that it has already been covered. But
> >if there a rule f
I only have a small installation but have seen a 50% increase in SPAM recently
:( and a lot of it isn't be caught, even
with splenty of rules and FuzzyOCR, due to them being very well worded emails
:( :(
On Sun, 04 Feb 2007 15:53:23 +
Matt Richards <[EMAIL PROTECTED]> wrote:
> I would of th
Hi,
i use SpamAssassin with MailScanner and Postfix and was wondering how I get
newly spam entered to the bayes database. I have created a little script
that polls our accounts :-
#!/bin/bash
LOCK_FILE=/var/lock/subsys/spam_check.lock
if [ -f ${LOCK_FILE} ]; then
logger -p local0.info
Using a combination of numerous SA rules, bayes, FuzzyOCR and BotNet on a new
server Ive just built we are trashing the SPAM. Attached graph is for today :-
Regards,
UxBoD
On Thu, 22 Mar 2007 09:55:07 -0700, Marc Perkel <[EMAIL PROTECTED]> wrote:
> Maybe I'm doing something wron
that when users get image spam
> they put it in the spam folders and they get learned. But the text in
> the image spam causes ham type text to be learned as spam. That causes
> ham to get higher scores.
>
> --
> This message has been scanned for viruses and dangerous content
First thing first. Could you run a spamassassin -D --lint as the user which is
scanning the email, and post the results please. This will allow people to
diagnose the problem more easily.
Regards,
UxBoD
On Wed, 28 Mar 2007 09:12:20 +0100, Jimmy Stewpot <[EMAIL PROTECTED]> wrote:
&
f them but I am interested in a more
> generic/efficient way.
>
> ps2. both messages marked as spam or ham are available here:
> http://noc.ntua.gr/~christia/tmp/KAUF-TIPP_DER_WOCHE.gz
>
> --
> This message has been scanned for viruses and dangerous content by
> MailSca
spam.
>
> If this is the truth, I would like to figure out how I can block these
> messages in advance..
>
> Could someone give me an hint?
>
> TIA,
>
> rocsca
>
>
>
>
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg -
If you wish to reject at MTA level then please read
http://www.postfix.org/uce.html under the section "Client hostname/address
restrictions" as you are able to specify a list of RBLs.
Regards,
UxBoD
On Wed, 28 Mar 2007 12:20:16 +0200, "Rocco Scappatura" <[EMAIL PROTECTE
: Mail_SpamAssassin_CompiledRegexps_body_0_scan1
Any ideas on how to resolve it ?
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8
// Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8
// Phone: +
that all looks fine. I have tested with
a spam message and debug enabled and no errors are produced. Is there any
additional debugging I can do ?
TIA
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F
Here is my lint :-
SpamAssassin Lint[18703] dbg: logger: adding facilities: all0
[18703] dbg: logger: logging level is DBG 8E-05
[18703] dbg: generic: SpamAssassin version 3.2.03E-05
[18703] dbg: config: score set 0 chosen.0.00064
[18703] dbg: util: running in tai
Mahesh
> http://www.greynium.com/
> http://www.oneindia.in/
> http://www.click.in/ - Free Indian Classifieds
>
> --
> This message has been scanned for viruses and dangerous content by
> MailScanner, and is
> believed to be clean.
--
--[ UxBoD ]--
// PGP Key: "curl -s http:/
Regards,
On Wed, 9 May 2007 10:22:55 +0100, --[ UxBoD ]-- <[EMAIL PROTECTED]> wrote:
> To ensure all is working okay, why not take a existing SPAM message and
> construct the $message from that and test ?
>
> On Wed, 9 May 2007 14:40:52 +0530, "BG Mahesh" <[EMAIL
no avail.
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190 93E0 E8E8 0CF8
// Keyserver: www.keyserver.net Key-ID: 0xE8E80CF8
// Phone: +44 845 869 2749
// SIP Phone: [EMAIL PROTECTED]
--
This m
Have just tested with GTUBE and even that does not get picked up!
G. What is happening. My config lints fine.
On Sat, 12 May 2007 07:35:14 +0100
"--[ UxBoD ]--" <[EMAIL PROTECTED]> wrote:
> Hi,
>
> I am having real problems in getting SA 3.2.0 to perform Bayes o
with --allowplugins,
after removing the directory, and now the plugins get loaded. But yet
again no checks are performed.
Any ideas ?
On Sat, 12 May 2007 08:44:53 +0100
"--[ UxBoD ]--" <[EMAIL PROTECTED]> wrote:
> Have just tested with GTUBE and even that does not get picked u
The point is that if I use either with or without plugins using the
channel breaks SA 3.2.0.
On Sat, 12 May 2007 15:25:23 -0400
"Daryl C. W. O'Shea" <[EMAIL PROTECTED]> wrote:
> --[ UxBoD ]-- wrote:
> > Eureka! Found the problem at last.
Using both though the channel update for openprotect seems to break
it. Switched to rules-du-jour and all is okay now.
On Sat, 12 May 2007
15:05:20 -0400 Theo Van Dinter <[EMAIL PROTECTED]> wrote:
> On Sat, May 12, 2007 at 09:04:22AM +0100, --[ UxBoD ]-- wrote:
> > plugins wer
Which rule sets this ? I have grep'd through /etc/mail/spamassassin and the
variable is used but does not seem to get set anywhere ?
--
--[ UxBoD ]--
// PGP Key: "curl -s http://www.splatnix.net/uxbod.asc | gpg --import"
// Fingerprint: 543A E778 7F2D 98F1 3E50 9C1F F190
, Cedric BUSCHINI <[EMAIL PROTECTED]> wrote:
> --[ UxBoD ]-- a écrit :
>
>>Which rule sets this ? I have grep'd through /etc/mail/spamassassin and
> the variable is used but does not seem to get set anywhere ?
>>
>>
> Hi,
>
> Have a look in /usr/sha
uses the function
eval:check_from_in_whitelist(), but need to see how that works.
On Tue, 15 May 2007 10:48:47 +0200, Cedric BUSCHINI <[EMAIL PROTECTED]> wrote:
> ok - not the same problem I have
> is -100 too high for you ?
>
> --[ UxBoD ]-- a écrit :
>
>>I have j
Resolved :) Thanks.
On Tue, 15 May 2007 10:48:47 +0200, Cedric BUSCHINI <[EMAIL PROTECTED]> wrote:
> ok - not the same problem I have
>
> is -100 too high for you ?
>
> --[ UxBoD ]-- a écrit :
>
>>I have just performed a brand new server install with SA 3.2.
essage in error, please notify the sender: Jason Holbrook
> immediately by e-mail [EMAIL PROTECTED] and delete all copies of
this
> message.
>
> Empower Information Systems operates under a zero spam policy. If you
> believe this message to be spam, please contact [EMAIL PROTECTED]
artner
> Empower Information Systems
> [EMAIL PROTECTED]
> weblog.empoweris.com
> www.empoweris.com
> 757-273-9399 (office)
> 757-715-1944 (cell)
> 866-477-1544 (toll free)
>
>
> -Original Message-
> From: --[ UxBoD ]-- [mailto:[EMAIL PROTECTED]
> Sent: Monday,
1 - 100 of 109 matches
Mail list logo
