what should "spamc --headers" do?

2012-02-20 Thread Dave Funk

I'm confused. The man page for spamc seems to imply that if I use
the "--headers" option with spamc it will only return the headers,
it will omit the body.
However when I tried it, it seems to do the exact opposite.
It seems to return the body, even in cases when it should not.

EG:
  spamc -r < /tmp/spam

returns -just- the spam report 'Content analysis details' output.

If I then add the '--headers' (EG:
  spamc --headers -r  < /tmp/spam

then I get the report & the body of the message.

similarly with '-y', when used with '-f' it makes no difference
in the output.
This is SA 3.3.1

So what should I use, I just want the report & any additional headers
that SA added to the message, I don't want the body back.

--
Dave Funk  University of Iowa
College of Engineering
319/335-5751   FAX: 319/384-0549   1256 Seamans Center
Sys_admin/Postmaster/cell_adminIowa City, IA 52242-1527
#include 
Better is not better, 'standard' is better. B{


Re: ANNOUNCE: ZMI_GERMAN available via a new channel

2012-02-20 Thread Michael Monnerie
Am Mittwoch, 15. Februar 2012, 14:25:46 schrieb Michael Monnerie:
> Starting now, the ZMI_GERMAN ruleset is available via a new channel:
> # sa-update --channel sa.zmi.at --nogpg
>
> You need "--nogpg" for now as I have no info how to do a gpg setup
> with it's own key infrastructure to be useful on several servers.
>
> The direct download also changed it's location and is available via
> # http://sa.zmi.at/rulesets/70_zmi_german.cf
> from now on. I'll keep the old location for a while, but please change
> your scripts NOW.
>

Everything should be fully working now. There even is a GPG signature.
The public key id is 40F74481, e-mail spam-ger...@zmi.at, I've uploaded
the sig to keyserver wwwkeys.pgp.net
You can also get the key from https://sa.zmi.at/rulesets/sa.zmi.at.asc

Then import the key to sa-update:
# sa-update --import sa.zmi.at.asc

>From now on you can get channel updates via
# sa-update --gpgkey 40F74481 --channel sa.zmi.at

the old method is via direct download from
http://sa.zmi.at/rulesets/70_zmi_german.cf

Please do not use it anymore. It's still available, but will vanish
sometime soon, so please please please: convert to update via channel

Feedback as always appreciated at spam-ger...@zmi.at

PS: I'm searching for partners to mirror our channel, contact me at
spam-ger...@zmi.at if you are able to provide a stable mirror.

--
mit freundlichen Grüssen,
Michael Monnerie, Ing. BSc

it-management Internet Services: Protéger
http://proteger.at [gesprochen: Prot-e-schee]
Tel: +43 660 / 415 6531


signature.asc
Description: This is a digitally signed message part.


Re: Spam messages with no payload

2012-02-20 Thread Michael Scheidell

On 2/19/12 5:45 PM, Jason Haar wrote:

I know what you mean - see if anyone can figure out what this one was
about! I think they're just screwing with us :-/

(I mean, do they seriously think people are going to reply "excuse me,
did you mean to send this to me?" and take it from there?)

http://pastebin.com/MCwFrP6C


this is a typical 'freight forwarder scam'

they want you to prepay freight to their 'authorized forwarder' who 
never accepts the shipment, it gets sent back to you, but you are on the 
hook for the original payments, and/ or, you totally lose your shipment 
anyway.





--
Michael Scheidell, CTO
o: 561-999-5000
d: 561-948-2259
>*| *SECNAP Network Security Corporation

   * Best Mobile Solutions Product of 2011
   * Best Intrusion Prevention Product
   * Hot Company Finalist 2011
   * Best Email Security Product
   * Certified SNORT Integrator

__
This email has been scanned and certified safe by SpammerTrap(r). 
For Information please see http://www.spammertrap.com/
__