Re: Whitelist on List-ID

2010-01-25 Thread Matus UHLAR - fantomas
 Rick Knight rick_kni...@rlknight.com writes:
 
  -0.0 DKIM_VERIFIED  Domain Keys Identified Mail: signature
  passes verification
  0.0 DKIM_SIGNEDDomain Keys Identified Mail: message has a
  signature

On 23.01.10 15:46, Greg Troxel wrote:
 I supsect this isn't your issue, but I have been finding that DKIM
 signature often fail to validate on list mail, and I think it's becaues
 they cover Subject: and the lists munge subject.  Thus DKIM detects the
 tampering...

Heh, another good reason NOT to modify subject by the list software. :)
-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Spam is for losers who can't get business any other way.


Re: administra...@willspc.net bounces

2010-01-25 Thread Matus UHLAR - fantomas
 On Sat, 2010-01-23 at 20:53 +0100, Karsten Bräckelmann wrote:
  Appears the bounce, any email addresses and the attached original are
  *severely* munged. Spotted a hint, need this to generate a direct
  bounce.
  
  Will unsubscribe the offender, if I can track it down.

On 23.01.10 21:18, Karsten Bräckelmann wrote:
 Done. How nice of them to include and preserve the Return-Path header...
 
 While dropping Received headers, and rewriting virtually any other
 informative header like Message-Id, Date and even To in the enclosed
 message/rfc822 original MIME attachment.

I think it would be better for them to get blocked everywhere.
That would teach them how to process mail.
(sending domain has no abuse/postmaster mailboxes iirc)
-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Emacs is a complicated operating system without good text editor.


Russian spam

2010-01-25 Thread Richard Smits

Hello,

Does anyone knows any tricks to fight russian spam ? We are getting a 
lot of this for the last weeks.


I am looking at the RelayCountry plugin, but am worried that our russian 
customers will get more false positives.


It is difficult because SA does not recognize the russian charset, but 
are there some secret tricks i should know about ?


Greetings, Richard ...


Re: Russian spam

2010-01-25 Thread Dan Schaefer

On 1-25-2010 8:42 AM, Richard Smits wrote:
Does anyone knows any tricks to fight russian spam ? We are getting a 
lot of this for the last weeks.
I have dealt with Russian spam by using on en in the ok_languages 
variable and increasing the score for UNWANTED_LANGUAGE_BODY to 10. I 
also increased the CHARSET_FARAWAY and CHARSET_FARAWAY_HEADER 
scores. However, the email addresses on the server I manage are all 
English speaking people, so be careful with the changes you make.


Dan Schaefer
Web Developer/Systems Analyst
Performance Administration Corp.



Re: Russian spam

2010-01-25 Thread Matus UHLAR - fantomas
 On 1-25-2010 8:42 AM, Richard Smits wrote:
 Does anyone knows any tricks to fight russian spam ? We are getting a  
 lot of this for the last weeks.

On 25.01.10 08:56, Dan Schaefer wrote:
 I have dealt with Russian spam by using on en in the ok_languages  
 variable and increasing the score for UNWANTED_LANGUAGE_BODY to 10. I  
 also increased the CHARSET_FARAWAY and CHARSET_FARAWAY_HEADER  
 scores. However, the email addresses on the server I manage are all  
 English speaking people, so be careful with the changes you make.

I think that properly configured ok_locales and ok_languages should catch
most of russian spam, of course unless you put 'ru' there :)

It's also never bad to train those as spam...

-- 
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Fucking windows! Bring Bill Gates! (Southpark the movie)


painting everybody in Taiwan with the same brush

2010-01-25 Thread jidanni
Fellows, I have the highest spam score vs. all my buddies:
http://article.gmane.org/gmane.linux.debian.devel.eeepc/2850/raw

It's all because
http://www.rulesemporium.com/rules/70_sare_header1.cf
headerSARE_RECV_SPAM_DOMN0bReceived =~ 
/\bdynamic.hinet\.(?:com|net|org|info)/
describe  SARE_RECV_SPAM_DOMN0bEmail passed through apparent spammer domain
score SARE_RECV_SPAM_DOMN0b1.666

So how is anybody living in Taiwan supposed to mail things with honor?
They can't get another country, nor cause a revolution. You just paint
them all with one brush. What if you painted everybody in your home
country with one brush until they were supposed to overthrew the
telephone company or whatever?


Re: painting everybody in Taiwan with the same brush

2010-01-25 Thread Mathias Homann
Am Dienstag 26 Januar 2010 schrieb jida...@jidanni.org:
 Fellows, I have the highest spam score vs. all my buddies:
 http://article.gmane.org/gmane.linux.debian.devel.eeepc/2850/raw
 
 It's all because
 http://www.rulesemporium.com/rules/70_sare_header1.cf
 headerSARE_RECV_SPAM_DOMN0bReceived =~
  /\bdynamic.hinet\.(?:com|net|org|info)/ describe 
  SARE_RECV_SPAM_DOMN0bEmail passed through apparent spammer
  domain score SARE_RECV_SPAM_DOMN0b1.666
 
 So how is anybody living in Taiwan supposed to mail things with
  honor? They can't get another country, nor cause a revolution. You
  just paint them all with one brush. What if you painted everybody
  in your home country with one brush until they were supposed to
  overthrew the telephone company or whatever?
 

there were times where 90% of my spamcop submissions pointed at 
hinet.net so there's that.
if there is some single person in taiwan who wants to exchange 
legitimate email with some other single person outside taiwan they can 
simply put each other in their whitelists.


-- 
gpg key fingerprint: 5F64 4C92 9B77 DE37 D184  C5F9 B013 44E7 27BD 
763C


Re: painting everybody in Taiwan with the same brush

2010-01-25 Thread Dave Pooser
On 1/26/10 12:29 AM, jida...@jidanni.org jida...@jidanni.org wrote:

 So how is anybody living in Taiwan supposed to mail things with honor?
 They can't get another country, nor cause a revolution. You just paint
 them all with one brush. What if you painted everybody in your home
 country with one brush until they were supposed to overthrew the
 telephone company or whatever?

It's not a moral judgment, it's a practical one. It's not the fault of an
individual resident of Taiwan that their country has a high noise to signal
ratio; then again, a rabid dog isn't at fault for its condition, but I'm not
gonna get close enough for it to bite me.
-- 
Dave Pooser
Cat-Herder-in-Chief, Pooserville.com
...Life is not a journey to the grave with the intention of arriving
safely in one pretty and well-preserved piece, but to slide across the
finish line broadside, thoroughly used up, worn out, leaking oil, and
shouting GERONIMO!!! -- Bill McKenna





Re: [Sare-users] painting everybody in Taiwan with the same brush

2010-01-25 Thread Michael Mansour
Hi,

 Fellows, I have the highest spam score vs. all my buddies:
 http://article.gmane.org/gmane.linux.debian.devel.eeepc/2850/raw
 
 It's all because
 http://www.rulesemporium.com/rules/70_sare_header1.cf
 headerSARE_RECV_SPAM_DOMN0bReceived =~ 
 /\bdynamic.hinet\.(?:com|net|org|info)/ describe 

I personally don't understand how this regex does all of Taiwan, all I can see
it do is hit the dynamic IP's of the hinet ISP, which to me is valid since
dynamic IP's really shouldn't be sending bulk mail.

Regards,

Michael.

  SARE_RECV_SPAM_DOMN0bEmail passed through apparent spammer 
 domain score SARE_RECV_SPAM_DOMN0b1.666
 
 So how is anybody living in Taiwan supposed to mail things with 
 honor? They can't get another country, nor cause a revolution. You 
 just paint them all with one brush. What if you painted everybody in 
 your home country with one brush until they were supposed to 
 overthrew the telephone company or whatever?
___
 This is being sent to: m...@npgx.com.au
 Sare-users mailing list
 sare-us...@maddoc.net
 http://lists.maddoc.net/mailman/listinfo/sare-users
--- End of Original Message ---