Re: Using ZMI_GERMAN ruleset
* Stefan Jakobs ste...@localside.net [2011-11-16 11:28]: Hi list, the published ruleset in the update channel is much older than the ruleset on the named website. # dig +short -t txt 2.3.3.70_zmi_german.cf.zmi.sa-update.dostech.net txt 20100831 Is the update with sa-update still supported? Michael, could you answer that? Regards, Sebastian -- New GPG Key: 0x93A0B9CE (F4F6 B1A3 866B 26E9 450A 9D82 58A2 D94A 93A0 B9CE) Old GPG Key-ID: 0x76B79F20 (0x1B6034F476B79F20) 'Are you Death?' ... IT'S THE SCYTHE, ISN'T IT? PEOPLE ALWAYS NOTICE THE SCYTHE. -- Terry Pratchett, The Fifth Elephant
Re: Using ZMI_GERMAN ruleset
Sorry for the delay. I don't read the list normally, so please always CC me if you want to reach me. On Mittwoch, 16. November 2011 Stefan Jakobs wrote: the published ruleset in the update channel is much older than the ruleset on the named website. # dig +short -t txt 2.3.3.70_zmi_german.cf.zmi.sa-update.dostech.net txt 20100831 Is the update with sa-update still supported? I'm sorry, I've contacted Daryl C. W. O'Shea spamassas...@dostech.ca on Februar 12 and September 5, 2011, he wanted to look it up but it seems still old. @Daryl: Any chance you can fix that? If you tell me no, I can remove it from the list of possible updates. The correct way to get ZMI_GERMAN is currently per web on http://sa.zmi.at/rulesets/70_zmi_german.cf Version: 3.00.3 from 2011-12-19 If someone can describe exactly what to do to create my own channel with 10 minutes of work, I can do so, but I don't want to run around searching for that info, I'm too busy with other projects. I'd also need info what users would then need to do to get that updates. -- mit freundlichen Grüssen, Michael Monnerie, Ing. BSc it-management Internet Services: Protéger http://proteger.at [gesprochen: Prot-e-schee] Tel: +43 660 / 415 6531 signature.asc Description: This is a digitally signed message part.
Re: Using ZMI_GERMAN ruleset
On Dienstag, 13. Dezember 2011 Axb wrote:
patterns with 120 characters are not really efficient, in terms of
speed and hit rate. They are very specific to certain campaigns and
minimal template changes will render them useless as in:
body __ZMIde_STOCK34 /Wir sind .{0,2}berzeugt, dass der
Zeitpunkt sich an einem Unternehmen zu beteiligen, welches
erfolgreich im Edelmetallhandel t.{0,2}tig ist, nicht besser sein
k.{0,2}nnte/
or
body __ZMIde_SALE5 /In den letzten 5 Jahren hatte ich .{0,2}ber
drei dutzend gut funktionierende Strategien, um die Zahl meiner
Webseitenbesucher drastisch zu erh.{0,2}hen und dadurch meinen
Umsatz anzukurbeln/
Since they get hits, no need to change them. Once I get reports about a
sentence that has been modified, I apply that to the rules. I need
feedback for those, of course.
And it should still be fast in terms of CPU as if there's (rule
__ZMIde_SALE5) no In den l in the message, the regex shouldn't have to
search too much, right? At least I'd guess it's an optimized search
which compares in 64bit steps, which is 8 chars at once?
Look for the Krankenkassa ruleset, this has been very active these
last weeks. All the time modifications from them, I get reports and
modify the rules accordingly.
And not to forget: Long sentences mean chance for a false positive drops
--
mit freundlichen Grüssen,
Michael Monnerie, Ing. BSc
it-management Internet Services: Protéger
http://proteger.at [gesprochen: Prot-e-schee]
Tel: +43 660 / 415 6531
signature.asc
Description: This is a digitally signed message part.
Re: Using ZMI_GERMAN ruleset
On 2011-12-13 8:34, Michael Monnerie wrote:
On Montag, 31. Oktober 2011 Axb wrote:
tried it and dumped due to low hit rate
stuff like
body ZMIde_JOBSEARCH6 /Dank sehr grossen Angagement, aber auch
der Umsetzung verschiedener Inovationen, konnte unsere Firma schon
nach vier Jahren auf die internationalen Ebene hinaufsteigen/
is not efficient
Its efficient in terms of filtering only spam with zero false
positives, which is top priority for this ruleset. And you picked a
very old and very long rule. Most rules nowadays are just one or even
only part of a sentence, and it prooves very efficient. Stuff like the
__ZMIde_JOBEARN1-28 rules move false positives to 0, and I'm constantly
adding stuff.
I've now tried to remove all old cruft, that means single-line rules.
Rulesize went from 350KB to 296KB, that should save some RAM and CPU.
patterns with 120 characters are not really efficient, in terms of
speed and hit rate. They are very specific to certain campaigns and
minimal template changes will render them useless as in:
body __ZMIde_STOCK34 /Wir sind .{0,2}berzeugt, dass der Zeitpunkt
sich an einem Unternehmen zu beteiligen, welches erfolgreich im
Edelmetallhandel t.{0,2}tig ist, nicht besser sein k.{0,2}nnte/
or
body __ZMIde_SALE5 /In den letzten 5 Jahren hatte ich .{0,2}ber drei
dutzend gut funktionierende Strategien, um die Zahl meiner
Webseitenbesucher drastisch zu erh.{0,2}hen und dadurch meinen Umsatz
anzukurbeln/
Re: Using ZMI_GERMAN ruleset
On Montag, 31. Oktober 2011 Axb wrote: tried it and dumped due to low hit rate stuff like body ZMIde_JOBSEARCH6 /Dank sehr grossen Angagement, aber auch der Umsetzung verschiedener Inovationen, konnte unsere Firma schon nach vier Jahren auf die internationalen Ebene hinaufsteigen/ is not efficient Its efficient in terms of filtering only spam with zero false positives, which is top priority for this ruleset. And you picked a very old and very long rule. Most rules nowadays are just one or even only part of a sentence, and it prooves very efficient. Stuff like the __ZMIde_JOBEARN1-28 rules move false positives to 0, and I'm constantly adding stuff. I've now tried to remove all old cruft, that means single-line rules. Rulesize went from 350KB to 296KB, that should save some RAM and CPU. -- mit freundlichen Grüssen, Michael Monnerie, Ing. BSc it-management Internet Services: Protéger http://proteger.at [gesprochen: Prot-e-schee] Tel: +43 660 / 415 6531 signature.asc Description: This is a digitally signed message part.
Re: Using ZMI_GERMAN ruleset
Hi list, the published ruleset in the update channel is much older than the ruleset on the named website. # dig +short -t txt 2.3.3.70_zmi_german.cf.zmi.sa-update.dostech.net txt 20100831 Is the update with sa-update still supported? Thanks and kind regards Stefan Mo Okt 31 2011 14:43:22 CET von Michael Monnerie michael.monne...@is.it-management.at Betreff: Using ZMI_GERMAN ruleset Dear list, I'd like to receive some feedback on the usage of zmi_german. If you use it, please report to spam-ger...@zmi.at and tell me what you think about it. The ruleset is designed to filter only german spam, and is very safe. Not a single report this year about FPs. If you didn't use it until now, and get german spam, download it from http://sa.zmi.at/rulesets/70_zmi_german.cf I'm seeking for people helping to cleanup and improve the filters. Please contact me at spam-ger...@zmi.at
Using ZMI_GERMAN ruleset
Dear list, I'd like to receive some feedback on the usage of zmi_german. If you use it, please report to spam-ger...@zmi.at and tell me what you think about it. The ruleset is designed to filter only german spam, and is very safe. Not a single report this year about FPs. If you didn't use it until now, and get german spam, download it from http://sa.zmi.at/rulesets/70_zmi_german.cf I'm seeking for people helping to cleanup and improve the filters. Please contact me at spam-ger...@zmi.at -- mit freundlichen Grüssen, Michael Monnerie, Ing. BSc it-management Internet Services: Protéger http://proteger.at [gesprochen: Prot-e-schee] Tel: +43 660 / 415 6531 signature.asc Description: This is a digitally signed message part.
Re: Using ZMI_GERMAN ruleset
On 2011-10-31 14:43, Michael Monnerie wrote: Dear list, I'd like to receive some feedback on the usage of zmi_german. If you use it, please report to spam-ger...@zmi.at and tell me what you think about it. The ruleset is designed to filter only german spam, and is very safe. Not a single report this year about FPs. If you didn't use it until now, and get german spam, download it from http://sa.zmi.at/rulesets/70_zmi_german.cf I'm seeking for people helping to cleanup and improve the filters. Please contact me at spam-ger...@zmi.at tried it and dumped due to low hit rate stuff like body ZMIde_JOBSEARCH6 /Dank sehr grossen Angagement, aber auch der Umsetzung verschiedener Inovationen, konnte unsere Firma schon nach vier Jahren auf die internationalen Ebene hinaufsteigen/ is not efficient
ANNOUNCE: Update of ZMI_GERMAN ruleset
The ruleset for filtering german language SPAMs, ZMI_GERMAN, has just been updated and released. It filters stock pump dump advertisings, as well as some new porn sites. The ruleset is available via rules_du_jour, or via Update Channel 70_zmi_german.cf.zmi.sa-update.dostech.net (to be used with sa-update), see http://daryl.dostech.ca/sa-update/sare/sare-sa-update-howto.txt or manually from http://sa.zmi.at/rulesets/70_zmi_german.cf Please report your suggestions, ideas and german language SPAM to [EMAIL PROTECTED] Thank you. mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0676/846 914 666 .network.your.ideas. // PGP Key: curl -s http://zmi.at/zmi.asc | gpg --import // Fingerprint: EA39 8918 EDFF 0A68 ACFB 11B7 BA2D 060F 1C6F E6B0 // Keyserver: www.keyserver.net Key-ID: 1C6FE6B0 pgpzoZa03TbhA.pgp Description: PGP signature
RE: ZMI_GERMAN ruleset
On Donnerstag, 22. Juni 2006 18:28 Bret Miller wrote: My copy was accidentally not in the update list for a while. It says: # Current Home: http://www.rulesemporium.com/rules/70_zmi_german.cf Upps - I changed this info now to http://zmi.at/x/70_zmi_german.cf, which is the correct place. Seems nobody saw this error until now, as it's available as ZMI_GERMAN via RulesDuJour. Correct information has always been at http://wiki.apache.org/spamassassin/CustomRulesets?highlight=% 28zmi_german%29 Thank you. I updated the current home line and my update script now picks it up correctly. We run on Windows here, so RDJ isn't really an option without setting up a full CYGWIN environment just for it. Bret
RE: ZMI_GERMAN ruleset
I got several reports about warnings in SA versions 3.1. I'm sorry for this, I use 3.1.3, which doesn't give any lint warnings for that. Some hours ago I made an update by shortening the description for these rules. So please update via RDJ to get a copy without warnings. If somebody wrote me a script to check for these too long descriptions or too long rule names, I would use it :-) Lint output: warning: description for ZMIde_LINKEXCHG2 is over 50 chars warning: description for ZMIde_URIWITNET is over 50 chars warning: description for ZMIfish_POSTBANK3 is over 50 chars warning: description for ZMIde_LINKEXCHG1 is over 50 chars warning: description for ZMIfish_POSTBANKURI1 is over 50 chars warning: description for ZMIfish_POSTBANK4 is over 50 chars warning: description for ZMIfish_POSTBANK1 is over 50 chars warning: description for ZMIde_LINKEXCHG3 is over 50 chars warning: description for ZMIfish_POSTBANKURI3 is over 50 chars warning: description for ZMIfish_POSTBANK2 is over 50 chars warning: description for ZMIfish_POSTBANKURI2 is over 50 chars lint: 11 issues detected. please rerun with debug enabled for more information. My copy was accidentally not in the update list for a while. It says: # Current Home: http://www.rulesemporium.com/rules/70_zmi_german.cf But that URL returns a 404 error, and it's not listed at www.rulesemporium.com anywhere. So... Is there a more current URL for this ruleset? Thanks, Bret
Re: ZMI_GERMAN ruleset
On Donnerstag, 22. Juni 2006 18:28 Bret Miller wrote: My copy was accidentally not in the update list for a while. It says: # Current Home: http://www.rulesemporium.com/rules/70_zmi_german.cf Upps - I changed this info now to http://zmi.at/x/70_zmi_german.cf, which is the correct place. Seems nobody saw this error until now, as it's available as ZMI_GERMAN via RulesDuJour. Correct information has always been at http://wiki.apache.org/spamassassin/CustomRulesets?highlight=%28zmi_german%29 mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660/4156531 .network.your.ideas. // PGP Key:curl -s http://zmi.at/zmi3.asc | gpg --import // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE pgpQr2SP1ejnc.pgp Description: PGP signature
ZMI_GERMAN ruleset
Dear users, I got several reports about warnings in SA versions 3.1. I'm sorry for this, I use 3.1.3, which doesn't give any lint warnings for that. Some hours ago I made an update by shortening the description for these rules. So please update via RDJ to get a copy without warnings. If somebody wrote me a script to check for these too long descriptions or too long rule names, I would use it :-) Lint output: warning: description for ZMIde_LINKEXCHG2 is over 50 chars warning: description for ZMIde_URIWITNET is over 50 chars warning: description for ZMIfish_POSTBANK3 is over 50 chars warning: description for ZMIde_LINKEXCHG1 is over 50 chars warning: description for ZMIfish_POSTBANKURI1 is over 50 chars warning: description for ZMIfish_POSTBANK4 is over 50 chars warning: description for ZMIfish_POSTBANK1 is over 50 chars warning: description for ZMIde_LINKEXCHG3 is over 50 chars warning: description for ZMIfish_POSTBANKURI3 is over 50 chars warning: description for ZMIfish_POSTBANK2 is over 50 chars warning: description for ZMIfish_POSTBANKURI2 is over 50 chars lint: 11 issues detected. please rerun with debug enabled for more information. mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660/4156531 .network.your.ideas. // PGP Key:curl -s http://zmi.at/zmi3.asc | gpg --import // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE pgpG6aNHAbLgk.pgp Description: PGP signature
