Package: spamassassin Version: 2.11-1 Severity: wishlist
(those headers for debian bts) This only hit 4.1 so the default threshold of 5.0 wouldn't have taggged it, however it's a high score for a non-spam. Something like (MS|CA|IN)[- ]?\d+ in a subject line should probably have a -ve score... titles which line up with all caps security advisory names. The full post which triggered this should be in the BUGTRAQ archives. (for people on the list, already sent this one to Debian BTS) spamassassin also doesn't check the number of Message-I[dD] headers. One common thing to have in a procmail spam check is to check that there's one and exactly one Message-Id. Two, zero, etc indicate probable spam. David. -- David Luyer Phone: +61 3 9674 7525 Network Development Manager P A C I F I C Fax: +61 3 9699 8693 Pacific Internet (Australia) I N T E R N E T Mobile: +61 4 1111 BYTE http://www.pacific.net.au/ NASDAQ: PCNTF -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Friday, 12 April 2002 6:12 AM To: [EMAIL PROTECTED] Subject: *****SPAM***** RE: MS02-018 SPAM: -------------------- Start SpamAssassin results ---------------------- SPAM: This mail is probably spam. The original message has been altered SPAM: so you can recognise or block similar unwanted mail in future. SPAM: See http://spamassassin.org/tag/ for more details. SPAM: SPAM: Content analysis details: (4.1 hits, 4 required) SPAM: Hit! (2.0 points) Subject is all capitals SPAM: Hit! (0.6 points) From: does not include a real name SPAM: Hit! (1.5 points) Found an X-Em-Version: header SPAM: SPAM: -------------------- End of SpamAssassin results --------------------- There are reported problems with SiteServer LDAP authentication caused by the patch as well. >-----Original Message----- >From: Christian Milow [mailto:[EMAIL PROTECTED]] >Sent: Thursday, April 11, 2002 8:45 AM >To: [EMAIL PROTECTED] >Subject: Re: MS02-018 > > > > > > > i had problems with my dynamic library, some appz cant be launched >anymore > since i have applied the patch. > > it say ordinal xxx cant be found in the dynamic library. > > :( > >config: win2k sp2 all previous patch applied. > appz that leaks : icq, norton av > > ----- Original Message ----- >> From: "Dave Ahmad" <[EMAIL PROTECTED]> >> To: <[EMAIL PROTECTED]> >> Sent: Wednesday, April 10, 2002 5:42 PM >> Subject: MS02-018 >> >> >> > Hey, >> > >> > Microsoft released a major bulletin this morning covering several >serious >> > vulnerabilities in IIS 4.0, 5.0 and 5.1. For an unknown reason, >Bugtraq >> > has been unsubscribed from their mailing list several times. >Attached >is >> the >> > bulletin, intact (originally received as an HTML e-mail). >> > >> > We have received unconfirmed reports that the patch may break >> > functionality in some environments. Has anyone had any problems >with >> > the fixes yet? For those who have and are replying, please >provide your >> > version and base configuration. >> > >> > Thank you, >> > >> > Dave Ahmad >> > SecurityFocus >> > www.securityfocus.com >> > >> > > > _______________________________________________ Spamassassin-talk mailing list [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/spamassassin-talk
