Re: SPF Error: cannot get HELO, cannot use SPF

2006-02-24 Thread Chris Purves
Chris Purves wrote: I am not getting SPF_ hits for most messages that I expect should pass SPF. On one message when I run through spamassassin with debug I see: [5959] dbg: spf: checking HELO (helo=, ip=66.111.4.28) [5959] dbg: spf: cannot get HELO, cannot use SPF [5959] dbg: spf: checking Enve

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread Chris Purves
jdow wrote: Of course, if AOL gets away with this then they are not a common carrier anymore. So they become responsible for their content. Sue them for any bad content and throw their charges in their face as evidence that they are not a carrier, they are a content service. Nail their sorry bac

SPF Error: cannot get HELO, cannot use SPF

2006-02-24 Thread Chris Purves
I am not getting SPF_ hits for most messages that I expect should pass SPF. On one message when I run through spamassassin with debug I see: [5959] dbg: spf: checking HELO (helo=, ip=66.111.4.28) [5959] dbg: spf: cannot get HELO, cannot use SPF [5959] dbg: spf: checking EnvelopeFrom (helo=, ip=66

Re: How easy is Spam Assassin really?

2006-02-24 Thread jdow
From: "Chris Norman" <[EMAIL PROTECTED]> I host about 10 domains on a w2k server (when you're done mocking, please continue). Currently, I use ASSP which isn't very effective but helps a lot. Occasionally, I'll get fed up and dig into implementing SA instead but then stop short after readyin

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread Gene Heskett
On Friday 24 February 2006 20:11, jdow wrote: >From: "jp" <[EMAIL PROTECTED]> > >> On Thu, Feb 23, 2006 at 04:48:09PM -0500, JamesDR wrote: >>> Vivek Khera wrote: >>> >On Feb 23, 2006, at 1:08 PM, Mike Jackson wrote: >>> >>So, I suppose the question is: How do you deal with getting >>> >> forwarded

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread jdow
From: "jp" <[EMAIL PROTECTED]> On Thu, Feb 23, 2006 at 04:48:09PM -0500, JamesDR wrote: Vivek Khera wrote: > >On Feb 23, 2006, at 1:08 PM, Mike Jackson wrote: > >>So, I suppose the question is: How do you deal with getting forwarded >>mail through to AOL without being branded as a spammer? >

Re: attachment policy?

2006-02-24 Thread OpenMacNews
> bounce? aheh? bounce to whom? if you bounce to the list, you'll be > unsubscribed. if you bounce to the original sender, you'll get block > listed, may be even bombed, hated, and your photos will be sent to fox > news :). > i said discard/bounce ... i bounce to people i consider friendly, to l

Re: attachment policy?

2006-02-24 Thread mouss
OpenMacNews a écrit : > Matt Kettler wrote: > >>OpenMacNews wrote: >> >>>hi theo, >>> >>> >>> On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: >question: what's this list's policy for sending attachments to the list ? > >i'm noticing, e.g., *.pl scripts

Re: attachment policy?

2006-02-24 Thread Christopher X. Candreva
On Fri, 24 Feb 2006, Theo Van Dinter wrote: > On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: > > i'm noticing, e.g., *.pl scripts as attachments ... rather than links to > > posts at code-paste sites. > > I don't think we have a policy about it specifically. Generally speaking > t

Re: Whitelist testing with GTUBE

2006-02-24 Thread Theo Van Dinter
On Fri, Feb 24, 2006 at 02:48:34PM -0600, Joel Gudknecht wrote: > whitelist_from [EMAIL PROTECTED] > > to a whitelist.cf in /etc/mail/spamassassin and sent a GTUBE email. It > was still flagged. Is this normal, expected behavior? Yes. Here's some thoughts: You shouldn't try whitelisting your ow

Re: attachment policy?

2006-02-24 Thread OpenMacNews
Matt Kettler wrote: > OpenMacNews wrote: >> hi theo, >> >> >>> On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: >>> question: what's this list's policy for sending attachments to the list ? i'm noticing, e.g., *.pl scripts as attachments ... rather than links to

Whitelist testing with GTUBE

2006-02-24 Thread Joel Gudknecht
Hi, I've added my email address like: whitelist_from [EMAIL PROTECTED] to a whitelist.cf in /etc/mail/spamassassin and sent a GTUBE email. It was still flagged. Is this normal, expected behavior? Thanks, Joel

Re: attachment policy?

2006-02-24 Thread Matt Kettler
OpenMacNews wrote: > hi theo, > > >> On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: >> >>> question: what's this list's policy for sending attachments to the list ? >>> >>> i'm noticing, e.g., *.pl scripts as attachments ... rather than links to >>> posts at code-paste sites.

Re: attachment policy?

2006-02-24 Thread OpenMacNews
hi theo, > On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: >> question: what's this list's policy for sending attachments to the list ? >> >> i'm noticing, e.g., *.pl scripts as attachments ... rather than links to >> posts at code-paste sites. > > I don't think we have a policy abo

Re: attachment policy?

2006-02-24 Thread Theo Van Dinter
On Thu, Feb 23, 2006 at 04:14:05PM -0800, OpenMacNews wrote: > question: what's this list's policy for sending attachments to the list ? > > i'm noticing, e.g., *.pl scripts as attachments ... rather than links to > posts at code-paste sites. I don't think we have a policy about it specifically.

RE: How easy is Spam Assassin really?

2006-02-24 Thread Chris Santerre
Title: RE: How easy is Spam Assassin really? > -Original Message- > From: Herb Martin [mailto:[EMAIL PROTECTED]] > Sent: Friday, February 24, 2006 12:25 PM > To: 'SpamAssassin Users' > Subject: RE: How easy is Spam Assassin really? > > > > -Original Message- > > From: Bret

RE: GIF stock spams

2006-02-24 Thread Ruben Cardenal
IF your mails have that kind of subject too, yes, but is malformed: header ICAB_FW2 Subject =~ /^Fw:\s\d{1,9}$/i score ICAB_FW2 4 describe ICAB_FW2 IMAGE SPAM ("ICAB" is related to my work, feel free to change it) Ruben. > -Mensaje original- > De: Joey [mailto:[EMAIL PROTECTED]

RE: GIF stock spams

2006-02-24 Thread Joey
Sorry wasn't thinking, should this work? header ICAB_FW2 Subject =~ /^Fw:\s\d{1,9}$/i score ICAB_FW2 1 score ICAB_FW2 4 describe ICAB_FW2 IMAGE SPAM -Original Message- From: Ruben Cardenal [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 1:02 PM To: users@spamassassin

RE: GIF stock spams

2006-02-24 Thread Joey
So if I use postfix I'm SOL? -Original Message- From: Ruben Cardenal [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 1:02 PM To: users@spamassassin.apache.org Subject: RE: GIF stock spams Hi Joel, Well, I have spamassassin scoring as spam from 3.0 on, and until 14 gets quar

RE: How easy is Spam Assassin really?

2006-02-24 Thread Herb Martin
> -Original Message- > From: Bret Miller [mailto:[EMAIL PROTECTED] > Sent: Friday, February 24, 2006 9:56 AM > To: users@spamassassin.apache.org > Subject: RE: How easy is Spam Assassin really? > > > I host about 10 domains on a w2k server (when you're done mocking, > > please continue).

RE: GIF stock spams

2006-02-24 Thread Ruben Cardenal
Hi Joel, Well, I have spamassassin scoring as spam from 3.0 on, and until 14 gets quarantined for review for messages not scoring BAYES_99. Almost 250.000 messages scoring over 14 with only 1 FP being rejected (and was quite an unusual situation). That kind of mails have all "Fw: 12345", fr

Re: GIF stock spams

2006-02-24 Thread Craig Baird
I get a ton of these. However, I've also got about 30 spamtrap addresses aliased to my account. I also run my SA threshold at 7, so those two factors probably account for a lot of the reason I get so many. Anyway, the SARE stock rules help quite a bit, but I still see a fair number of these t

Re: GIF stock spams

2006-02-24 Thread Tom Brown
* 6.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% So 6.0 point for your BAYES I hope your BAYES is well trained and never gets corrupted Works like a charm :) i've only dared goto a 3 however so far so good

RE: GIF stock spams

2006-02-24 Thread Ruben Cardenal
> > > * 6.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% > > So 6.0 point for your BAYES I hope your BAYES is well trained and never > gets corrupted Works like a charm :) Ruben

RE: GIF stock spams

2006-02-24 Thread Joey
Hi Ruben, Sorry to be such a nube, but can you tell me exactly what I need to do to impliment what is working for you. These damn image files are killing us. Thanks, Joey -Original Message- From: Ruben Cardenal [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 11:45 AM To:

RE: GIF stock spams

2006-02-24 Thread Shawn R. Beairsto
I'm getting hammered by these as well, usually scoring below 2 points. I'm running most of the standard SARE rules (including SARE_STOCKS). Any advice? Bayes training has (so far) been ineffective. -Shawn -Original Message- From: Chris Conn [mailto:[EMAIL PROTECTED] Sent: Friday, Februa

RE: GIF stock spams

2006-02-24 Thread Maurice Lucas
> * 6.0 BAYES_99 BODY: Bayesian spam probability is 99 to 100% So 6.0 point for your BAYES I hope your BAYES is well trained and never gets corrupted Maurice Lucas On Fri, 2006-02-24 at 17:44 +0100, Ruben Cardenal wrote: > I catch them all, for example: > > X-Spam-Report: > * 1.0

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread Christopher X. Candreva
On Thu, 23 Feb 2006, Gene Heskett wrote: > And exactly what, and where can I get this 'verp'? Many mailing lists > I'm on could make good use of this feature. If you run a mailing list, read the documentation for your program. If you don't, ask the person who does run it to read the documentat

RE: GIF stock spams

2006-02-24 Thread Ruben Cardenal
I catch them all, for example: X-Spam-Report: * 1.0 ICAB_FW2 ICAB_FW2 * 1.1 EXTRA_MPART_TYPE Header has extraneous Content-type:...type= entry * 1.9 HTML_IMAGE_ONLY_12 BODY: HTML: images with 800-1200 bytes of words * 0.0 HTML_MESSAGE BODY: HTML included in message * 6.0 B

Re: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Gene Heskett
On Friday 24 February 2006 09:42, Bowie Bailey wrote: >Gene Heskett wrote: >> On Friday 24 February 2006 09:06, Bowie Bailey wrote: >> > Gene Heskett wrote: >> > > On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: >> > > > On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: >> > >

GIF stock spams

2006-02-24 Thread Chris Conn
Hello, Has anyone written any rules to catch the following types of spam http://nisk.creenet.com/~cconn/sa/ They consist of a few lines of text (sometimes), and a .gif attachment that is in fact some penny stock being pushed. Thanks in advance, Chris

RE: How easy is Spam Assassin really?

2006-02-24 Thread Chris Santerre
Title: RE: How easy is Spam Assassin really? > > Do you have to constantly tune your rules? How often do you > need to do > this for it to be effective? > > Some honest feedback and maybe a link or two would be helpful. > > Implementing SA on a win32 doesn't seem like it'd be too > diffi

RE: (OT, but relevant) Playing with AOL?

2006-02-24 Thread Matthew.van.Eerde
Dave Pooser wrote: >> If you are seeing the AOL members addresses then I'd like to know >> what you did to receive them, because you appear the only one is >> several list I belong to that are discussing this very issue that is >> seeing those addresses. > > I'd also like to get the AOL member's a

Re: (OT, but relevant) Playing with AOL?

2006-02-24 Thread jp
On Thu, Feb 23, 2006 at 04:48:09PM -0500, JamesDR wrote: > Vivek Khera wrote: > > > >On Feb 23, 2006, at 1:08 PM, Mike Jackson wrote: > > > >>So, I suppose the question is: How do you deal with getting forwarded > >>mail through to AOL without being branded as a spammer? > > > >You stop forwarding

RE: How easy is Spam Assassin really?

2006-02-24 Thread MacDonald, Mike
Im runnning SA using ALT-N Mdaemon for my mail and I dont have any problems with it running on XP Professional -Original Message- From: Chris Norman [mailto:[EMAIL PROTECTED] Sent: Friday, February 24, 2006 10:26 AM To: users@spamassassin.apache.org Subject: How easy is Spam Assassin reall

RE: How easy is Spam Assassin really?

2006-02-24 Thread Bret Miller
> I host about 10 domains on a w2k server (when you're done mocking, > please continue). Currently, I use ASSP which isn't very > effective but > helps a lot. > > Occasionally, I'll get fed up and dig into implementing SA > instead but > then stop short after readying about how it doesn't run as a

How easy is Spam Assassin really?

2006-02-24 Thread Chris Norman
I host about 10 domains on a w2k server (when you're done mocking, please continue). Currently, I use ASSP which isn't very effective but helps a lot. Occasionally, I'll get fed up and dig into implementing SA instead but then stop short after readying about how it doesn't run as a service we

RE: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Bowie Bailey
Gene Heskett wrote: > On Friday 24 February 2006 09:06, Bowie Bailey wrote: > > Gene Heskett wrote: > > > On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: > > > > On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: > > > > > > > > > > I don't seem to be getting any email from RD

Re: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Bob McClure Jr
On Fri, Feb 24, 2006 at 12:25:02AM -0500, Gene Heskett wrote: > On Thursday 23 February 2006 23:20, Bob McClure Jr wrote: > >On Thu, Feb 23, 2006 at 10:59:02PM -0500, Gene Heskett wrote: > >> > >> A snippet or 3 from a 'crontab -l' as root: > >> [EMAIL PROTECTED] > >> 06 22 * * * /etc/init.d/as

Re: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Gene Heskett
On Friday 24 February 2006 09:06, Bowie Bailey wrote: >Gene Heskett wrote: >> On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: >> > On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: >> > > >> > > I don't seem to be getting any email from RDJ recently. Maybe >> > > since the t

RE: Updated Pump and Dump rules. 2006-02-23

2006-02-24 Thread Bowie Bailey
Gene Heskett wrote: > On Thursday 23 February 2006 22:45, Bob McClure Jr wrote: > > On Thu, Feb 23, 2006 at 10:36:19PM -0500, Gene Heskett wrote: > > > > > > I don't seem to be getting any email from RDJ recently. Maybe > > > since the time I switch this system from fetchmail to a mailfile, > > >

Re: spamassasin --lint fails after a RDJ update

2006-02-24 Thread Tom Brown
Seems something has gone wonky with my SA install - From my cron logs it seems that a rdj update happenned last night and then during the --lint phase this was the output below - I am as far as i'm aware fully upto date with my SA install and a cpan install Mail::SpamAssassin tells me there i

spamassasin --lint fails after a RDJ update

2006-02-24 Thread Tom Brown
Hi Seems something has gone wonky with my SA install - From my cron logs it seems that a rdj update happenned last night and then during the --lint phase this was the output below - I am as far as i'm aware fully upto date with my SA install and a cpan install Mail::SpamAssassin tells me ther

Re: SpamAssassin large-scale users willing to comment?

2006-02-24 Thread jdow
From: "Jeff Peng" <[EMAIL PROTECTED]> Hi,Jdow, I think you have misunderstood me.I'm not working for Netzero.In fact,our mail systems' end-users numbers are more than a hundred million far away.We use SA as part of our antispam mechanism. Certainly,it's not the original one written with Perl.W