Announce: GERMAN ruleset updated
I'd like to inform you that my GERMAN ruleset has seen updates. It's available via RulesDuJour as ruleset ZMI_GERMAN, or directly from http://zmi.at/x/70_zmi_german.cf I always update after new rules are applied, so the use of RulesDuJour is greatly suggested. Updates occur when needed, sometimes daily, sometimes weekly. Please, if you use my ruleset and still get german SPAM, report to [EMAIL PROTECTED] the *full mail with all headers*. And yes, you can speak german with me :) Any suggestions for improvement of the rules are welcome. The rules are written with an eye on creating no false positives, while hitting phishing, some viruses, and other german SPAM. Should you get a false positive, please send the e-mail with full headers to [EMAIL PROTECTED] mass-check results with network tests: http://ruleqa.spamassassin.org/?daterev=20060519-r406046-ns_defcorpus=onrule=%2FZMIs_zero=ons_detail=checked+g=Change mass-check results w/o network tests: http://ruleqa.spamassassin.org/?daterev=20060518-r407506-ns_defcorpus=onrule=%2FZMIs_zero=ons_detail=+g=Change Current download volume: 41602 downloads in 04/2006. Thank you for using these rules. mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660/4156531 .network.your.ideas. // PGP Key: lynx -source http://zmi.at/zmi3.asc | gpg --import // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE pgpyvzAH9cgPA.pgp Description: PGP signature
Announce: GERMAN ruleset updated
I'd like to inform you that my GERMAN ruleset has been updates. It's available via RulesDuJour as ruleset ZMI_GERMAN, or directly from http://zmi.at/x/70_zmi_german.cf I always update after new rules are applied, so the use of RulesDuJour is greatly suggested. Please, if you use my ruleset and still get german SPAM, report to [EMAIL PROTECTED] the *full mail with all headers*. Any suggestions for improvement of the rules are welcome. The rules are written with an eye on creating no false positives, while hitting phishing, some viruses, and other german SPAM. Should you get a false positive, please send the e-mail with full headers to [EMAIL PROTECTED] mfg zmi -- // Michael Monnerie, Ing.BSc --- it-management Michael Monnerie // http://zmi.at Tel: 0660/4156531 Linux 2.6.11 // PGP Key: lynx -source http://zmi.at/zmi2.asc | gpg --import // Fingerprint: EB93 ED8A 1DCD BB6C F952 F7F4 3911 B933 7054 5879 // Keyserver: www.keyserver.net Key-ID: 0x70545879 pgpxi3kB8boz1.pgp Description: PGP signature
Re: Announce: GERMAN ruleset updated
On 06.04.2006 09:52, Michael Monnerie wrote: I'd like to inform you that my GERMAN ruleset has been updates. It's available via RulesDuJour as ruleset ZMI_GERMAN, or directly from http://zmi.at/x/70_zmi_german.cf I always update after new rules are applied, so the use of RulesDuJour is greatly suggested. Please, if you use my ruleset and still get german SPAM, report to [EMAIL PROTECTED] the *full mail with all headers*. Any suggestions for improvement of the rules are welcome. The rules are written with an eye on creating no false positives, while hitting phishing, some viruses, and other german SPAM. Should you get a false positive, please send the e-mail with full headers to [EMAIL PROTECTED] mfg zmi Michael FYI: file fell thru lint... [27121] warn: config: warning: score set for non-existent rule ZMIde_SUBFREEHANB and although announced as SARE rule, http://www.rulesemporium.com/rules/70_zmi_german.cf is not available... and there's no reference to a SARE masscheck... .-) Alex
Re: Announce: GERMAN ruleset updated
Heute (06.04.2006/10:17 Uhr) schrieb Alex Broens, On 06.04.2006 09:52, Michael Monnerie wrote: I'd like to inform you that my GERMAN ruleset has been updates. It's available via RulesDuJour as ruleset ZMI_GERMAN, or directly from http://zmi.at/x/70_zmi_german.cf I always update after new rules are applied, so the use of RulesDuJour is greatly suggested. Please, if you use my ruleset and still get german SPAM, report to [EMAIL PROTECTED] the *full mail with all headers*. Any suggestions for improvement of the rules are welcome. The rules are written with an eye on creating no false positives, while hitting phishing, some viruses, and other german SPAM. Should you get a false positive, please send the e-mail with full headers to [EMAIL PROTECTED] mfg zmi Michael FYI: file fell thru lint... [27121] warn: config: warning: score set for non-existent rule ZMIde_SUBFREEHANB typo ;) must be ZMIde_SUBFREEHAND Alex -- Viele Gruesse, Kind regards, Jim Knuth [EMAIL PROTECTED] ICQ #277289867 -- Zufalls-Zitat -- Als Mensch kann man vernünftig denken und trotzdem unsinnig handeln. -- Der Text hat nichts mit dem Empfaenger der Mail zu tun -- Virus free. Checked by NOD32 Version 1.1474 Build 7022 05.04.2006
Re: Announce: GERMAN ruleset updated
On 06.04.2006 10:26, Jim Knuth wrote: Heute (06.04.2006/10:17 Uhr) schrieb Alex Broens, On 06.04.2006 09:52, Michael Monnerie wrote: I'd like to inform you that my GERMAN ruleset has been updates. It's available via RulesDuJour as ruleset ZMI_GERMAN, or directly from http://zmi.at/x/70_zmi_german.cf I always update after new rules are applied, so the use of RulesDuJour is greatly suggested. Please, if you use my ruleset and still get german SPAM, report to [EMAIL PROTECTED] the *full mail with all headers*. Any suggestions for improvement of the rules are welcome. The rules are written with an eye on creating no false positives, while hitting phishing, some viruses, and other german SPAM. Should you get a false positive, please send the e-mail with full headers to [EMAIL PROTECTED] mfg zmi Michael FYI: file fell thru lint... [27121] warn: config: warning: score set for non-existent rule ZMIde_SUBFREEHANB typo ;) must be ZMIde_SUBFREEHAND Just wonder why this is announced as a SARE rule but its not available as a SARE dowload and was never passed theu SARE masscheckers. Also the RASSISMUS_MAILS_* rules seems like extra boat which at wouldn't hit the msgs they were targeted for and could possibly cause FPS with scores that high. Why not replace URI rules with a SURBL/URIBL listing if they are still active? and will not cause FPs (Vistaprint?) Alex
Re: Announce: GERMAN ruleset updated
On Donnerstag, 6. April 2006 10:17 Alex Broens wrote: FYI: file fell thru lint... [27121] warn: config: warning: score set for non-existent rule ZMIde_SUBFREEHANB Hi, that was a last-second-change small typo, is corrected in actual version already. and although announced as SARE rule, http://www.rulesemporium.com/rules/70_zmi_german.cf is not available... It's not SARE, they didn't want it there because they cannot check against their SPAM. Obviously there's nobody german speaking there. It's available via rdj, I was informed that this tool is independent of SARE, I also mixed that up in the beginning. and there's no reference to a SARE masscheck... ...which I don't run as it's not SARE. I participate in SA mass checks, but my rules are not active there. Another problem is that I don't have all SPAM directly available, but get it forwarded to write the rules. Extracting the SPAM from such forwards and reinserting it into my SPAM box is a PITA, so I skip that. I didn't get a single report of FP until now, but can see several SPAM hitting my rules (especially those suggesting having sex today). mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660/4156531 .network.your.ideas. // PGP Key: lynx -source http://zmi.at/zmi3.asc | gpg --import // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE pgpk5bHEOrdtZ.pgp Description: PGP signature
Re: Announce: GERMAN ruleset updated
On Donnerstag, 6. April 2006 10:41 Alex Broens wrote: Also the RASSISMUS_MAILS_* rules seems like extra boat which at wouldn't hit the msgs they were targeted for and could possibly cause FPS with scores that high. Yes, I just inserted them some days ago, and forgot to adopt scores, which I did now. Thanks for that. Why not replace URI rules with a SURBL/URIBL listing if they are still active? and will not cause FPs (Vistaprint?) Because I don't know whether they are listed there, and there are people not using online lists, and all this rules are german specific and maybe don't get a listing there ever. What's Vistaprint? mfg zmi -- // Michael Monnerie, Ing.BSc- http://it-management.at // Tel: 0660/4156531 .network.your.ideas. // PGP Key: lynx -source http://zmi.at/zmi3.asc | gpg --import // Fingerprint: 44A3 C1EC B71E C71A B4C2 9AA6 C818 847C 55CB A4EE // Keyserver: www.keyserver.net Key-ID: 0x55CBA4EE pgp7niPGJ9AMD.pgp Description: PGP signature
Re: GERMAN ruleset updated
Michael Monnerie writes: On Samstag, 12. November 2005 16:04 Dhawal Doshy wrote: warning: description for ZMIfish_VOLKSBANK2 is over 50 chars warning: rule 'ZMIde_EMAIL_CAREERBULLDER' is over 22 chars warning: rule 'ZMIfish_NETBANKING_FROM' is over 22 chars Oh sorry. I got a report once about some names being too large. That warnings are not displayed in 3.1 anymore, which is what I use. Either way, I'll fix it done. New update is in, should be without length warnings. Thank you, worked fine this time.. - dhawal
Re: GERMAN ruleset updated
Jim Knuth wrote on Sat, 12 Nov 2005 22:01:09 +0100: And this mean what? I cannot discovery errors in the config? Not this kind of error since it is not an error. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de http://msie.winware.org
Re: GERMAN ruleset updated
Michael Monnerie wrote: Hello list, http://zmi.at/x/70_zmi_german.cf contains the newest rules to catch german SPAM. Also available automagically via rules du jour name ZMI_GERMAN Also documented here: http://wiki.apache.org/spamassassin/CustomRulesets Please report your german SPAM with full headers to [EMAIL PROTECTED] mfg zmi Michael, A lint test with SA 3.0.4 gives me this, also did so for the previous version(s). I could live with it but rdj can't, could you possibly change this or let me know of a workaround (none that i could see in rdj). warning: description for ZMIfish_VOLKSBANK2 is over 50 chars warning: rule 'ZMIde_EMAIL_CAREERBULLDER' is over 22 chars warning: rule 'ZMIfish_NETBANKING_FROM' is over 22 chars thanks, - dhawal
Re: GERMAN ruleset updated
Hallo und Guten Tag Dhawal, Heute (am 12.11.2005 - 16:04 Uhr) schriebst Du: Michael Monnerie wrote: Hello list, http://zmi.at/x/70_zmi_german.cf contains the newest rules to catch german SPAM. Also available automagically via rules du jour name ZMI_GERMAN Also documented here: http://wiki.apache.org/spamassassin/CustomRulesets Please report your german SPAM with full headers to [EMAIL PROTECTED] mfg zmi Michael, A lint test with SA 3.0.4 gives me this, also did so for the previous version(s). I could live with it but rdj can't, could you possibly change this or let me know of a workaround (none that i could see in rdj). warning: description for ZMIfish_VOLKSBANK2 is over 50 chars warning: rule 'ZMIde_EMAIL_CAREERBULLDER' is over 22 chars warning: rule 'ZMIfish_NETBANKING_FROM' is over 22 chars thanks, - dhawal not by me. SpamAssassin version 3.1.0 running on Perl version 5.8.4 -- Viele Grüße, Kind regards, Jim Knuth [EMAIL PROTECTED] ICQ #277289867 PGP: 54C9 1A46 D3B2 95B6 454D 74FA AC73 773E 1F78 066F -- Zufalls-Zitat -- Politik ist wie Steilwand-fahren. Man muß ständig Vollgas geben. Wer bremst, stürzt ab. (Klaus Kinkel) -- Der Text hat nichts mit dem Empfänger der Mail zu tun -- Virus free. Checked by NOD32 Version 1.1284 Build 6327 11.11.2005
Re: GERMAN ruleset updated
Jim Knuth wrote on Sat, 12 Nov 2005 16:52:40 +0100: SpamAssassin version 3.1.0 If I remember correctly they loosened the warnings about too long names in 3.1.0. They are no longer displayed in --lint. Kai -- Kai Schätzl, Berlin, Germany Get your web at Conactive Internet Services: http://www.conactive.com IE-Center: http://ie5.de http://msie.winware.org
Re: GERMAN ruleset updated
Hallo und Guten Abend Kai, Heute (am 12.11.2005 - 20:31 Uhr) schriebst Du: Jim Knuth wrote on Sat, 12 Nov 2005 16:52:40 +0100: SpamAssassin version 3.1.0 If I remember correctly they loosened the warnings about too long names in 3.1.0. They are no longer displayed in --lint. Kai And this mean what? I cannot discovery errors in the config? -- Viele Grüße, Kind regards, Jim Knuth [EMAIL PROTECTED] ICQ #277289867 PGP: 54C9 1A46 D3B2 95B6 454D 74FA AC73 773E 1F78 066F -- Zufalls-Zitat -- Wer seinen Kopf gegen eine Wand donnert, verbraucht 150 Kalorien pro Stunde. -- Der Text hat nichts mit dem Empfänger der Mail zu tun -- Virus free. Checked by NOD32 Version 1.1284 Build 6327 11.11.2005
Re: GERMAN ruleset updated
On Samstag, 12. November 2005 16:04 Dhawal Doshy wrote: warning: description for ZMIfish_VOLKSBANK2 is over 50 chars warning: rule 'ZMIde_EMAIL_CAREERBULLDER' is over 22 chars warning: rule 'ZMIfish_NETBANKING_FROM' is over 22 chars Oh sorry. I got a report once about some names being too large. That warnings are not displayed in 3.1 anymore, which is what I use. Either way, I'll fix it done. New update is in, should be without length warnings. mfg zmi -- // Michael Monnerie, Ing.BSc --- it-management Michael Monnerie // http://zmi.at Tel: 0660/4156531 Linux 2.6.11 // PGP Key: lynx -source http://zmi.at/zmi2.asc | gpg --import // Fingerprint: EB93 ED8A 1DCD BB6C F952 F7F4 3911 B933 7054 5879 // Keyserver: www.keyserver.net Key-ID: 0x70545879 pgppbzkYZ9l6j.pgp Description: PGP signature
Re: GERMAN ruleset updated
Hallo und Guten Morgen Michael, Gestern (am 12.11.2005 - 23:53 Uhr) schriebst Du: On Samstag, 12. November 2005 16:04 Dhawal Doshy wrote: warning: description for ZMIfish_VOLKSBANK2 is over 50 chars warning: rule 'ZMIde_EMAIL_CAREERBULLDER' is over 22 chars warning: rule 'ZMIfish_NETBANKING_FROM' is over 22 chars Oh sorry. I got a report once about some names being too large. That warnings are not displayed in 3.1 anymore, which is what I use. Either way, I'll fix it done. New update is in, should be without length warnings. mfg zmi which is the address again? Sorry for noise. -- Viele Grüße, Kind regards, Jim Knuth [EMAIL PROTECTED] ICQ #277289867 PGP: 54C9 1A46 D3B2 95B6 454D 74FA AC73 773E 1F78 066F -- Zufalls-Zitat -- Niemand zu haben auf der Welt, zu dem man sich flüchtet, auf den man in der Not bauen kann, das ist ein Weh, an dem manches Herz verblutet. (Jeremias) -- Der Text hat nichts mit dem Empfänger der Mail zu tun -- Virus free. Checked by NOD32 Version 1.1284 Build 6327 11.11.2005
GERMAN ruleset updated
Hello list, http://zmi.at/x/70_zmi_german.cf contains the newest rules to catch german SPAM. Also available automagically via rules du jour name ZMI_GERMAN Also documented here: http://wiki.apache.org/spamassassin/CustomRulesets Please report your german SPAM with full headers to [EMAIL PROTECTED] mfg zmi -- // Michael Monnerie, Ing.BSc --- it-management Michael Monnerie // http://zmi.at Tel: 0660/4156531 Linux 2.6.11 // PGP Key: lynx -source http://zmi.at/zmi2.asc | gpg --import // Fingerprint: EB93 ED8A 1DCD BB6C F952 F7F4 3911 B933 7054 5879 // Keyserver: www.keyserver.net Key-ID: 0x70545879 pgpsMYy6SsBOW.pgp Description: PGP signature
