On Sat, 2012-11-10 at 07:50 -0500, Joseph Acquisto wrote: > >>> On 11/10/2012 at 7:12 AM, Martin Gregorie <mar...@gregorie.org> wrote: > >> After I posted, I went to put them on my local blacklist and saw that > >> I had done this previously. I wonder why it was not caught. A > >> Cron job does sa-update twice a day, so it is unlikely not to have > >> been read. > >> > > Don't forget that spamd is stopped and restarted during the daily > > update. Could the message's arrival coincide with this? > > > > Is your local blacklist also taken down while it is being updated and/or > > backed up? > > Guess so, only using local.cf > > > Mine isn't because I implement it with what I call a > > 'portmanteau rule', a single rule with several hundred alternative > > patterns. In this case the rule is looking for URI matches in message > > bodies because it was written to clean the message stream from a > > spam-laden mailing list: blacklists etc simply don't work in this > > situation because the headers relate to messages sent from the > > listserv. > > That's something I need to look at, I guess. > The major downside is the pain of editing a single Kchars long line, so I wrote a fairly simple-minded script that uses gawk to transform a more easily editable source file, e.g. it puts each pattern on a separate line, into a validly formatted SA rule. Details are here:
http://www.libelle-systems.com/free/portmanteau/portmanteau.tgz > AFA the CANSPAM thing goes, we shall see. I only found a link to a > rather generic FTC complaint form, which I filled out, without much > sense of fulfillment. > Can you post a URL for that, please. Martin
